![]() |
|
Log-Analyse und Auswertung: can not find dwlgina3.dllWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() can not find dwlgina3.dll Hallo, erstmal finde ich es klasse, dass es sowas wie dieses Forum gibt ![]() ich habe (auch) das zurzeit wohl sehr beliebte Problem, dass "dwligna3.dll" nicht gefunden werden kann. Die Symptome: Beim normalen Windows-Start habe ich entweder Blue-, oder Blackscreen (je nachdem, ob ich als Admin Windows starte, oder nicht); wenn ich strg-alt-entf drücke komme ich zum üblichen Bildschirm. Wenn ich im abgesicherten Modus starte, fehlt mir die Internetverbindung. Ich habe bereits die Boot-CD erstellt und auf dem anderen Rechner ausgeführt. Dabei habe ich allerdings nur die Datei OTL.txt erhalten und nicht Extras.txt Die Datei OTL.txt: Code:
ATTFilter OTL logfile created on: 1/26/2012 6:33:47 PM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Windows Vista (TM) Home Premium Service Pack 2 (Version = 6.0.6002) - Type = System Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 444.18 Gb Total Space | 279.36 Gb Free Space | 62.89% Space Free | Partition Type: NTFS Drive D: | 21.57 Gb Total Space | 14.17 Gb Free Space | 65.69% Space Free | Partition Type: FAT32 Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet001 ========== Win32 Services (SafeList) ========== SRV - [2011/08/02 20:31:42 | 000,379,496 | ---- | M] (NVIDIA Corporation) [Auto] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2011/06/28 15:06:35 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011/04/29 04:50:44 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010/10/01 06:27:22 | 000,632,792 | ---- | M] (PC Tools) [Auto] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc) SRV - [2007/10/19 11:42:38 | 000,290,909 | ---- | M] () [Auto] -- C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe -- (TVECapSvc) TVEnhance Background Capture Service (TBCS) SRV - [2007/10/19 11:42:38 | 000,114,779 | ---- | M] () [Auto] -- C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe -- (TVESched) TVEnhance Task Scheduler (TTS)) SRV - [2007/10/08 18:19:22 | 000,358,936 | ---- | M] (Intel Corporation) [Auto] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R) SRV - [2007/04/13 12:14:26 | 000,036,864 | ---- | M] (Empolis GmbH) [Auto] -- C:\Program Files\Common Files\Gnab\Service\ServiceController.exe -- (GnabService) SRV - [2001/11/12 07:31:48 | 000,020,480 | ---- | M] (X10) [Auto] -- C:\Program Files\Common Files\X10\Common\X10nets.exe -- (x10nets) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand] -- -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand] -- -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand] -- -- (IpInIp) DRV - File not found [Kernel | On_Demand] -- -- (EagleNT) DRV - [2011/08/03 06:50:00 | 010,304,104 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2011/06/28 15:06:40 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2011/06/28 15:06:40 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010/02/06 17:45:11 | 000,281,760 | ---- | M] () [Kernel | Auto] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt) DRV - [2010/02/06 17:45:11 | 000,025,888 | ---- | M] () [Kernel | Auto] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009/05/11 03:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009/04/11 01:32:55 | 000,226,280 | ---- | M] () [Kernel | Boot] -- C:\Windows\System32\drivers\volsnap.sys -- (volsnap) DRV - [2009/04/10 23:45:37 | 000,185,856 | ---- | M] (CxExerSoft) [Kernel | System] -- C:\Windows\System32\drivers\netbt.sys -- (netbt) DRV - [2009/02/13 05:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2009/01/19 13:31:56 | 000,277,544 | ---- | M] (Protect Software GmbH) [Kernel | Auto] -- C:\Windows\System32\drivers\acedrv11.sys -- (acedrv11) DRV - [2007/10/11 06:21:34 | 000,041,456 | ---- | M] (Cyberlink Corp.) [Kernel | Auto] -- C:\Program Files\HomeCinema\PlayMovie\000.fcl -- ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) DRV - [2007/10/09 10:14:56 | 000,041,456 | ---- | M] (Cyberlink Corp.) [Kernel | Auto] -- C:\Program Files\HomeCinema\PowerDVD\000.fcl -- ({95808DC4-FA4A-4C74-92FE-5B863F82066B}) DRV - [2007/09/21 04:38:22 | 000,554,496 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\netr28u.sys -- (netr28u) DRV - [2007/08/22 05:01:58 | 001,242,976 | ---- | M] (NXP Semiconductors Germany GmbH) [Kernel | On_Demand] -- C:\Windows\System32\drivers\3xHybrid.sys -- (3xHybrid) DRV - [2007/06/19 05:37:58 | 000,229,248 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R) DRV - [2006/11/30 09:18:18 | 000,027,416 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\x10ufx2.sys -- (XUIF) DRV - [2006/11/17 04:31:04 | 000,013,976 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\x10hid.sys -- (X10Hid) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com IE - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = hxxp://dnl.crawler.com/support/sa_customize.aspx?TbId=66024 IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=806efc8c0000000000000015af433990&tlver=1.4.19.19&ss=1&affID=17393 IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\123_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKU\123_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Blubbi_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Jano_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ IE - HKU\Jano_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\Jano_ON_C\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\Jano_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\Jano_ON_C\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - Reg Error: Key error. File not found IE - HKU\Jano_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKU\Jano_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\mega_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKU\mega_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\neu_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKU\neu_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\System32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\System32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/12/15 15:41:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/01/14 05:37:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/05/28 17:22:41 | 000,000,000 | ---D | M] [2012/01/22 18:05:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\123\AppData\Roaming\Mozilla\Extensions [2011/11/10 07:12:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2009/01/29 10:01:23 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2011/05/12 17:02:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} File not found (No name found) -- [2012/01/14 05:37:30 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2007/03/02 08:17:24 | 000,095,200 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\NPAPIX.dll [2011/09/18 16:22:23 | 000,611,224 | ---- | M] (Oracle Corporation) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2007/01/17 06:18:04 | 000,095,200 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\NPFluxBrowserHelper.dll [2007/09/07 09:25:50 | 000,103,064 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\NPMPDRM.dll [2007/09/07 08:46:48 | 000,098,968 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\NPWMDRMWrapper.dll [2011/10/02 02:21:42 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2011/06/24 14:53:13 | 000,002,428 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2011/10/02 02:21:42 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2011/10/02 02:21:42 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2010/09/28 11:14:06 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchstonicde.xml [2011/10/02 02:21:42 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2011/10/02 02:21:42 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2011/10/02 02:21:42 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml Hosts file not found O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) O2 - BHO: (no name) - {64182481-4F71-486b-A045-B233BD0DA8FC} - No CLSID value found. O2 - BHO: (no name) - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - No CLSID value found. O2 - BHO: (IeMonitorBho Class) - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll (Megaupload Limited) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O2 - BHO: (ICQ Sparberater) - {FE163F11-1919-4257-A280-FF5AF8DAEECB} - C:\Program Files\icq\Internet Explorer\icq.dll (solute gmbh) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKU\123_ON_C\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKU\Jano_ON_C\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - No CLSID value found. O3 - HKU\mega_ON_C\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found. O3 - HKU\mega_ON_C\..\Toolbar\WebBrowser: (no name) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - No CLSID value found. O3 - HKU\mega_ON_C\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKU\neu_ON_C\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found. O3 - HKU\neu_ON_C\..\Toolbar\WebBrowser: (no name) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - No CLSID value found. O3 - HKU\neu_ON_C\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [facemoods] File not found O4 - HKLM..\Run: [GnabTray] C:\Program Files\Common Files\Gnab\Service\GnabTray.exe (Empolis GmbH) O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation) O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\HomeCinema\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [lZoxBNSHVhEHmPm] C:\Users\Jano\AppData\Roaming\h4w5eu5zy.exe (IObit ) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [PlayMovie] C:\Program Files\HomeCinema\PlayMovie\PMVService.exe (CyberLink Corp.) O4 - HKLM..\Run: [Regedit32] File not found O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [SSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (PC Tools) O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [toolbar_eula_launcher] C:\Program Files\GoogleEULA\EULALauncher.exe ( ) O4 - HKLM..\Run: [TVEService] C:\Program Files\HomeCinema\TV Enhance\TVEService.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\HomeCinema\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [xf9poa4vaz] C:\ProgramData\xf9poa4vaz.exe () O4 - HKU\.DEFAULT..\Run: [lZoxBNSHVhEHmPm] C:\Windows\System32\config\systemprofile\AppData\Roaming\h4w5eu5zy.exe (IObit ) O4 - HKU\123_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\Blubbi_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\Jano_ON_C..\Run: [EA Core] File not found O4 - HKU\Jano_ON_C..\Run: [lZoxBNSHVhEHmPm] C:\Users\Jano\AppData\Roaming\h4w5eu5zy.exe (IObit ) O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O7 - HKU\Jano_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1 O7 - HKU\Jano_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1 O7 - HKU\Jano_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1 O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - Reg Error: Value error. File not found O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - Reg Error: Value error. File not found O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars) O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.) O9 - Extra Button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - Reg Error: Value error. File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - File not found O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 10.0.0) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0) O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\fluxhttp {8E2D00A0-82C6-4821-90BC-07F290841BB6} - C:\Program Files\Common Files\fluxDVD\Lib\XEB\xebnavigation.ax () O18 - Protocol\Handler\fluxhttp\0x00000007 {8E2D00A0-82C6-4821-90BC-07F290841BB6} - C:\Program Files\Common Files\fluxDVD\Lib\XEB\xebnavigation.ax () O20 - HKLM Winlogon: Shell - (C:\Users\Jano\AppData\Roaming\h4w5eu5zy.exe) - C:\Users\Jano\AppData\Roaming\h4w5eu5zy.exe (IObit ) O20 - HKU\.DEFAULT Winlogon: Shell - (C:\Windows\system32\config\systemprofile\AppData\Roaming\h4w5eu5zy.exe) - C:\Windows\System32\config\systemprofile\AppData\Roaming\h4w5eu5zy.exe (IObit ) O20 - HKU\Jano_ON_C Winlogon: Shell - (C:\Users\Jano\AppData\Roaming\h4w5eu5zy.exe) - C:\Users\Jano\AppData\Roaming\h4w5eu5zy.exe (IObit ) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012/01/26 11:11:54 | 000,095,744 | ---- | C] (Kassl GmbH) -- C:\Users\Jano\AppData\Roaming\dwlGina3.dll [2012/01/25 09:09:36 | 000,483,328 | ---- | C] (IObit ) -- C:\Users\Jano\AppData\Roaming\h4w5eu5zy.exe [2012/01/22 18:08:38 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\Adobe [2012/01/22 18:05:47 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Roaming\Mozilla [2012/01/22 18:05:47 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\Mozilla [2012/01/22 18:05:28 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\TVEnhance [2012/01/22 18:05:28 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\ApplicationHistory [2012/01/22 18:05:27 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\PlayMovie [2012/01/22 18:05:24 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Roaming\Adobe [2012/01/22 18:05:23 | 000,000,000 | R--D | C] -- C:\Users\123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2012/01/22 18:05:23 | 000,000,000 | R--D | C] -- C:\Users\123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2012/01/22 18:05:23 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\LocalLow [2012/01/22 18:05:23 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Roaming\Google [2012/01/22 18:05:21 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\Google [2012/01/22 18:05:14 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Roaming\Identities [2012/01/22 18:05:11 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\VirtualStore [2012/01/22 18:05:07 | 000,000,000 | --SD | C] -- C:\Users\123\AppData\Roaming\Microsoft [2012/01/22 18:05:07 | 000,000,000 | R--D | C] -- C:\Users\123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2012/01/22 18:05:07 | 000,000,000 | R--D | C] -- C:\Users\123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2012/01/22 18:05:07 | 000,000,000 | -HSD | C] -- C:\Users\123\AppData\Local\Verlauf [2012/01/22 18:05:07 | 000,000,000 | -HSD | C] -- C:\Users\123\AppData\Local\Temporary Internet Files [2012/01/22 18:05:07 | 000,000,000 | -HSD | C] -- C:\Users\123\Documents\Eigene Videos [2012/01/22 18:05:07 | 000,000,000 | -HSD | C] -- C:\Users\123\Documents\Eigene Musik [2012/01/22 18:05:07 | 000,000,000 | -HSD | C] -- C:\Users\123\Documents\Eigene Bilder [2012/01/22 18:05:07 | 000,000,000 | -HSD | C] -- C:\Users\123\AppData\Local\Anwendungsdaten [2012/01/22 18:05:07 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\Temp [2012/01/22 18:05:07 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Roaming [2012/01/22 18:05:07 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\Microsoft Help [2012/01/22 18:05:07 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local\Microsoft [2012/01/22 18:05:07 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Roaming\Media Center Programs [2012/01/22 18:05:07 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Roaming\Macromedia [2012/01/22 18:05:07 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Local [2012/01/22 18:05:07 | 000,000,000 | ---D | C] -- C:\Users\123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Home Cinema [2012/01/22 18:05:06 | 000,000,000 | ---D | C] -- C:\Users\123 [2012/01/18 16:26:12 | 000,000,000 | ---D | C] -- C:\Users\Jano\Documents\Abelssoft [2012/01/18 16:26:06 | 000,000,000 | ---D | C] -- C:\Users\Jano\AppData\Roaming\Abelssoft [2012/01/18 16:26:03 | 000,000,000 | ---D | C] -- C:\Users\Jano\AppData\Local\Abelssoft [2012/01/18 16:25:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WashAndGo [2012/01/18 16:25:23 | 000,000,000 | ---D | C] -- C:\Program Files\WashAndGo [2012/01/18 14:24:24 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun [2012/01/04 06:12:01 | 000,000,000 | ---D | C] -- C:\Users\Jano\Documents\Battlefield Play4Free [2012/01/03 22:54:47 | 000,000,000 | ---D | C] -- C:\Users\Jano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games [2012/01/03 19:12:01 | 000,000,000 | ---D | C] -- C:\Program Files\EA Games [2011/05/22 16:07:34 | 000,411,136 | ---- | C] (Microsoft Corporation) -- C:\ProgramData\kJoCBjsHlcALP.exe [2011/05/16 10:21:01 | 000,434,688 | -H-- | C] (QNP) -- C:\ProgramData\IPNcuYmeCeNE.exe ========== Files - Modified Within 30 Days ========== [2012/01/26 11:49:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/01/26 11:49:11 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012/01/26 11:49:11 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012/01/26 11:11:54 | 000,095,744 | ---- | M] (Kassl GmbH) -- C:\Users\Jano\AppData\Roaming\dwlGina3.dll [2012/01/26 11:11:52 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/01/26 11:11:52 | 000,000,264 | ---- | M] () -- C:\Windows\tasks\AbelssoftPreloader.job [2012/01/26 11:11:30 | 2145,570,816 | -HS- | M] () -- C:\hiberfil.sys [2012/01/23 17:00:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/01/23 14:26:59 | 000,483,328 | ---- | M] (IObit ) -- C:\Users\Jano\AppData\Roaming\h4w5eu5zy.exe [2012/01/23 14:26:53 | 000,031,232 | ---- | M] () -- C:\ProgramData\xf9poa4vaz.exe [2012/01/23 14:16:47 | 236,882,436 | ---- | M] () -- C:\Windows\MEMORY.DMP [2012/01/22 18:22:30 | 000,007,916 | ---- | M] () -- C:\Users\Jano\AppData\Local\d3d9caps.dat [2012/01/22 18:05:29 | 000,007,916 | ---- | M] () -- C:\Users\123\AppData\Local\d3d9caps.dat [2012/01/22 18:05:28 | 000,000,091 | ---- | M] () -- C:\Users\123\AppData\Local\fusioncache.dat [2012/01/22 18:05:24 | 000,000,947 | ---- | M] () -- C:\Users\123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2012/01/22 15:51:25 | 000,000,435 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.ics [2012/01/22 13:00:00 | 000,000,252 | ---- | M] () -- C:\Windows\tasks\RMSchedule.job [2012/01/18 16:25:28 | 000,000,820 | ---- | M] () -- C:\Users\Public\Desktop\WashAndGo.lnk [2012/01/18 16:25:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WashAndGo [2012/01/15 02:33:22 | 000,638,510 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2012/01/15 02:33:22 | 000,604,126 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012/01/15 02:33:22 | 000,130,462 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2012/01/15 02:33:22 | 000,107,562 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012/01/13 17:51:11 | 000,000,780 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk [2012/01/11 10:42:37 | 000,710,735 | ---- | M] () -- C:\Users\Jano\Documents\Änderungen 9.1..odp [2012/01/07 10:58:56 | 000,000,438 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Jano.job [2012/01/06 08:48:56 | 000,138,264 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2012/01/06 08:48:36 | 000,234,768 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2012/01/03 22:55:08 | 000,138,056 | ---- | M] () -- C:\Users\Jano\AppData\Roaming\PnkBstrK.sys [2011/12/28 21:04:53 | 000,001,942 | ---- | M] () -- C:\Users\Public\Desktop\Fritz 12.lnk [2011/12/28 21:04:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChessBase ========== Files Created - No Company Name ========== [2012/01/26 11:09:45 | 2145,570,816 | -HS- | C] () -- C:\hiberfil.sys [2012/01/23 14:26:53 | 000,031,232 | ---- | C] () -- C:\ProgramData\xf9poa4vaz.exe [2012/01/23 14:16:47 | 236,882,436 | ---- | C] () -- C:\Windows\MEMORY.DMP [2012/01/22 18:05:29 | 000,007,916 | ---- | C] () -- C:\Users\123\AppData\Local\d3d9caps.dat [2012/01/22 18:05:28 | 000,000,091 | ---- | C] () -- C:\Users\123\AppData\Local\fusioncache.dat [2012/01/22 18:05:24 | 000,000,953 | ---- | C] () -- C:\Users\123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2012/01/22 18:05:23 | 000,000,948 | ---- | C] () -- C:\Users\123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2012/01/22 18:05:20 | 000,000,947 | ---- | C] () -- C:\Users\123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2012/01/22 18:05:11 | 000,000,919 | ---- | C] () -- C:\Users\123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk [2012/01/22 18:05:07 | 000,001,959 | ---- | C] () -- C:\Users\123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2012/01/22 18:05:07 | 000,000,258 | ---- | C] () -- C:\Users\123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2012/01/22 18:05:07 | 000,000,240 | ---- | C] () -- C:\Users\123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2012/01/18 16:26:07 | 000,000,264 | ---- | C] () -- C:\Windows\tasks\AbelssoftPreloader.job [2012/01/18 16:25:28 | 000,000,820 | ---- | C] () -- C:\Users\Public\Desktop\WashAndGo.lnk [2012/01/09 16:29:54 | 000,710,735 | ---- | C] () -- C:\Users\Jano\Documents\Änderungen 9.1..odp [2012/01/04 08:58:55 | 000,234,768 | ---- | C] () -- C:\Windows\System32\PnkBstrB.xtr [2012/01/03 22:55:08 | 000,138,264 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2012/01/03 22:55:08 | 000,138,056 | ---- | C] () -- C:\Users\Jano\AppData\Roaming\PnkBstrK.sys [2012/01/03 22:54:52 | 000,234,768 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2012/01/03 22:54:50 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2011/12/21 10:37:30 | 000,005,730 | ---- | C] () -- C:\Windows\unins000.dat [2011/10/24 13:06:08 | 000,007,916 | ---- | C] () -- C:\Users\Jano\AppData\Local\d3d9caps.dat [2011/08/02 20:31:54 | 000,311,912 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe [2011/07/25 00:40:08 | 000,008,592 | ---- | C] () -- C:\Users\neu\AppData\Local\d3d9caps.dat [2011/07/09 17:18:19 | 000,000,091 | ---- | C] () -- C:\Users\neu\AppData\Local\fusioncache.dat [2011/07/08 10:49:18 | 000,000,092 | ---- | C] () -- C:\Users\mega\AppData\Local\fusioncache.dat [2011/05/16 10:26:56 | 000,000,136 | -H-- | C] () -- C:\ProgramData\~40034040r [2011/05/16 10:26:55 | 000,000,112 | -H-- | C] () -- C:\ProgramData\~40034040 [2011/05/16 10:26:27 | 000,000,392 | -H-- | C] () -- C:\ProgramData\40034040 [2011/05/16 10:26:23 | 000,378,880 | -H-- | C] () -- C:\ProgramData\40034040.exe [2011/04/06 12:12:06 | 000,037,336 | ---- | C] () -- C:\Windows\System32\CleanMFT32.exe [2011/01/17 16:13:35 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010/12/25 11:46:44 | 000,006,898 | ---- | C] () -- C:\Users\Jano\AppData\Roaming\.freeciv-client-rc-2.2 [2010/12/13 16:00:13 | 000,000,094 | ---- | C] () -- C:\Users\Blubbi\AppData\Local\fusioncache.dat [2009/07/31 17:03:10 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009/07/31 17:03:10 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2009/07/31 17:02:52 | 000,226,280 | ---- | C] () -- C:\Windows\System32\drivers\volsnap.sys [2009/04/15 06:11:23 | 000,000,052 | ---- | C] () -- C:\Users\Jano\AppData\Roaming\Default.PLS [2009/03/23 08:54:44 | 000,000,998 | ---- | C] () -- C:\Users\Jano\AppData\Roaming\wklnhst.dat [2008/09/26 08:47:01 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2008/09/26 08:46:52 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2008/08/27 00:28:06 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2008/04/20 15:20:24 | 000,007,680 | ---- | C] () -- C:\Users\Jano\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/04/19 08:56:09 | 000,000,552 | ---- | C] () -- C:\Users\Jano\AppData\Local\d3d8caps.dat [2008/04/19 02:05:00 | 000,045,568 | ---- | C] () -- C:\Windows\UniFish3.exe [2008/04/19 01:15:58 | 000,000,821 | ---- | C] () -- C:\Windows\eReg.dat [2008/04/18 13:44:14 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2008/04/18 13:22:53 | 000,000,092 | ---- | C] () -- C:\Users\Jano\AppData\Local\fusioncache.dat [2007/12/20 04:20:42 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2007/12/19 09:44:01 | 000,127,184 | ---- | C] () -- C:\Windows\Unwise.exe [2007/10/25 06:29:33 | 000,009,824 | ---- | C] () -- C:\Windows\System32\34CoInstaller.dll [2006/11/02 10:33:31 | 000,638,510 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2006/11/02 10:33:31 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2006/11/02 10:33:31 | 000,130,462 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2006/11/02 10:33:31 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2006/11/02 07:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006/11/02 07:47:37 | 000,336,352 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006/11/02 07:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 05:33:01 | 000,604,126 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006/11/02 05:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006/11/02 05:33:01 | 000,107,562 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006/11/02 05:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006/11/02 05:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006/11/02 03:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006/11/02 03:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006/11/02 02:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat ========== LOP Check ========== [2010/12/25 11:44:45 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\.freeciv [2011/06/30 11:30:39 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\5019 [2011/07/01 09:16:42 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\5020 [2012/01/18 16:26:06 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\Abelssoft [2010/04/02 12:13:18 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\ChessBase [2011/12/21 10:43:18 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\Cities3D [2012/01/19 08:42:50 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\ICQ [2011/09/18 15:47:23 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\JavaEditor [2011/06/30 11:30:18 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\kock [2008/12/24 15:00:58 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\Leadertech [2008/11/22 17:39:58 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\MegauploadToolbar [2010/10/15 12:18:20 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\Need for Speed World [2009/08/25 16:21:04 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\OpenOffice.org [2011/10/19 09:44:52 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\Origin [2010/02/06 08:31:55 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\ProtectDisc [2011/06/19 12:09:45 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\Registry Mechanic [2012/01/18 16:42:49 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\Template [2011/07/03 06:16:16 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\UAs [2010/02/06 17:49:23 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\Ubisoft [2011/07/03 06:21:16 | 000,000,000 | ---D | M] -- C:\Users\Jano\AppData\Roaming\xmldm [2008/05/28 10:00:30 | 000,000,000 | -H-D | M] -- C:\ProgramData\Age of Empires 3 [2008/04/18 13:18:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Anwendungsdaten [2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data [2008/04/18 13:49:16 | 000,000,000 | -H-D | M] -- C:\ProgramData\BullGuard [2011/03/02 17:11:37 | 000,000,000 | -H-D | M] -- C:\ProgramData\ChessBase [2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop [2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents [2008/04/18 13:18:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumente [2011/10/05 00:32:54 | 000,000,000 | ---D | M] -- C:\ProgramData\EA Core [2011/11/17 16:46:04 | 000,000,000 | -H-D | M] -- C:\ProgramData\Electronic Arts [2008/11/22 17:40:01 | 000,000,000 | -H-D | M] -- C:\ProgramData\EmailNotifier [2008/04/18 13:18:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoriten [2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites [2010/12/27 17:18:03 | 000,000,000 | -H-D | M] -- C:\ProgramData\fFjDj07000 [2009/07/04 07:35:25 | 000,000,000 | -H-D | M] -- C:\ProgramData\fluxDVD [2007/12/20 02:26:03 | 000,000,000 | -H-D | M] -- C:\ProgramData\Gnab [2011/11/03 16:54:50 | 000,000,000 | -H-D | M] -- C:\ProgramData\ICQ [2011/10/31 12:29:44 | 000,000,000 | ---D | M] -- C:\ProgramData\KONAMI [2008/11/22 17:40:01 | 000,000,000 | -H-D | M] -- C:\ProgramData\Megaupload [2009/07/04 07:35:30 | 000,000,000 | -H-D | M] -- C:\ProgramData\mpDRM [2010/04/14 15:11:39 | 000,000,000 | -H-D | M] -- C:\ProgramData\NexonEU [2011/10/04 16:23:28 | 000,000,000 | -H-D | M] -- C:\ProgramData\Origin [2010/11/17 16:05:32 | 000,000,000 | -H-D | M] -- C:\ProgramData\PC Drivers HeadQuarters [2008/06/29 05:37:30 | 000,000,000 | -H-D | M] -- C:\ProgramData\PlayMovie [2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu [2008/04/18 13:18:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Startmenü [2011/01/28 16:46:46 | 000,000,000 | -H-D | M] -- C:\ProgramData\SweetIM [2010/02/06 08:31:07 | 000,000,000 | -H-D | M] -- C:\ProgramData\Synetic [2012/01/18 15:45:03 | 000,000,000 | -H-D | M] -- C:\ProgramData\TEMP [2006/11/02 08:02:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates [2008/04/18 13:18:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Vorlagen [2007/12/19 09:45:27 | 000,000,000 | -H-D | M] -- C:\ProgramData\X10 Settings [2007/12/20 03:38:25 | 000,000,000 | -H-D | M] -- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [2012/01/26 11:11:52 | 000,000,264 | ---- | M] () -- C:\Windows\Tasks\AbelssoftPreloader.job [2012/01/22 13:00:00 | 000,000,252 | ---- | M] () -- C:\Windows\Tasks\RMSchedule.job [2012/01/26 11:49:04 | 000,032,562 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:671329E4 @Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:D1B5B4F1 < End of report > Ich hoffe, ihr könnt mir helfen, ich war schon fast dabei mir aus lauter Verzweiflung einen neuen Rechner zuzulegen... Bitte versucht alles möglichst kleinschrittig und einfach zu formulieren, ich habe nämlich wenig Ahnung von meinem PC. lg Jan |
Themen zu can not find dwlgina3.dll |
.dll, alternate, antivir, autorun, avira, bho, boot-cd, browser, desktop, disabletaskmgr, dwlgina3.dll, email, error, explorer, firefox, format, home, iobit, logfile, neu, nicht gefunden, nvidia, pdf, plug-in, problem, realtek, registry, scan, security, security scan, senden, software, startproblem, vista, wenig ahnung |