| |
| |||||||
Log-Analyse und Auswertung: Betriebssystem blockiert...updates für 50euro downloadenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
04.02.2012, 20:48
| #1 |
| |  Betriebssystem blockiert...updates für 50euro downloaden Hi, während ich eben im i-net surfte tauchte auf einmal die meldung "betriebssystem blockiert" auf...ich hab auch schon ein bisschen hier im forum nachgeschaut was zu tun ist...Hab auch grade mal dises otl durchlaufen lassen...ich hoffe mir kann jemand weiterhelfen und erklären wie ich weiter vorzugehen habe....schonmal vielen dank im vorraus Hier der bericht vom otl: OTL logfile created on: 04.02.2012 20:39:25 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Kevin\Downloads Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,75 Gb Total Physical Memory | 2,20 Gb Available Physical Memory | 80,08% Memory free 5,50 Gb Paging File | 4,99 Gb Available in Paging File | 90,82% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 931,50 Gb Total Space | 339,58 Gb Free Space | 36,46% Space Free | Partition Type: NTFS Drive D: | 1,16 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: KEVIN-PC | User Name: Kevin | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Kevin\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Windows\explorer.exe (Microsoft Corporation) ========== Modules (No Company Name) ========== MOD - C:\Program Files\Mozilla Firefox\mozjs.dll () MOD - C:\Windows\System32\Macromed\Flash\NPSWF32.dll () ========== Win32 Services (SafeList) ========== SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (dtsoftbus01) -- C:\Windows\System32\drivers\dtsoftbus01.sys (DT Soft Ltd) DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH) DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH) DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys () DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys () DRV - (VBoxNetAdp) -- C:\Windows\System32\drivers\VBoxNetAdp.sys (Oracle Corporation) DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation) DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV - (vmbus) -- C:\Windows\system32\drivers\vmbus.sys (Microsoft Corporation) DRV - (tsusbhub) -- C:\Windows\System32\drivers\tsusbhub.sys (Microsoft Corporation) DRV - (Synth3dVsc) -- C:\Windows\System32\drivers\Synth3dVsc.sys (Microsoft Corporation) DRV - (dmvsc) -- C:\Windows\system32\drivers\dmvsc.sys (Microsoft Corporation) DRV - (storflt) -- C:\Windows\system32\drivers\vmstorfl.sys (Microsoft Corporation) DRV - (storvsc) -- C:\Windows\system32\drivers\storvsc.sys (Microsoft Corporation) DRV - (TsUsbGD) -- C:\Windows\system32\drivers\TsUsbGD.sys (Microsoft Corporation) DRV - (terminpt) -- C:\Windows\system32\drivers\terminpt.sys (Microsoft Corporation) DRV - (VMBusHID) -- C:\Windows\system32\drivers\VMBusHID.sys (Microsoft Corporation) DRV - (s3cap) -- C:\Windows\system32\drivers\vms3cap.sys (Microsoft Corporation) DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (vpcvmm) -- C:\Windows\System32\drivers\vpcvmm.sys (Microsoft Corporation) DRV - (vpcnfltr) -- C:\Windows\System32\drivers\vpcnfltr.sys (Microsoft Corporation) DRV - (vpcusb) -- C:\Windows\System32\drivers\vpcusb.sys (Microsoft Corporation) DRV - (vpcbus) -- C:\Windows\System32\drivers\vpchbus.sys (Microsoft Corporation) DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvm62x32.sys (NVIDIA Corporation) DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.) DRV - (hwusbdev) -- C:\Windows\System32\drivers\ewusbdev.sys (Huawei Technologies Co., Ltd.) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (MTsensor) -- C:\Windows\System32\drivers\ASACPI.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://startsear.ch/?aff=1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/home IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 40 50 62 A4 99 38 CC 01 [binary data] IE - HKCU\..\URLSearchHook: {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - No CLSID value found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultengine: "Web Search" FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaultenginename,S: S", "Search the web (Babylon)" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..browser.search.order.1,S: S", "Search the web (Babylon)" FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)" FF - prefs.js..browser.search.selectedEngine,S: S", "Search the web (Babylon)" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://search.babylon.com/home" FF - prefs.js..browser.startup.homepage: h", "h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h ,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,hxxp://search.babylon.com/home" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..keyword.URL: "hxxp://search.babylon.com/?babsrc=adbartrp&mntrId=ec114b0e00000000000020cf303e7c28&q=" FF - prefs.js..keyword.URL,h: h", "hxxp://search.babylon.com/?babsrc=KW_def&q=" FF - prefs.js..network.proxy.type: 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.02.04 10:03:52 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.01.13 09:50:48 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\extensions\\{184AA5E6-741D-464a-820E-94B3ABC2F3B4}: C:\Users\Kevin\AppData\Roaming\10002 [2012.02.04 10:59:01 | 000,000,000 | ---D | M] [2011.06.02 23:10:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\Extensions [2012.01.29 19:59:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\qiuwnp30.default\extensions [2011.10.17 04:53:01 | 000,000,000 | ---D | M] (kikin plugin (NO23 Edition)) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\qiuwnp30.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED} [2011.07.08 02:20:51 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\qiuwnp30.default\extensions\DTToolbar@toolbarnet.com [2012.01.29 19:59:06 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\qiuwnp30.default\extensions\ffxtlbr@babylon.com [2011.07.08 02:20:44 | 000,002,059 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\qiuwnp30.default\searchplugins\daemon-search.xml [2011.07.11 19:04:02 | 000,000,633 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\qiuwnp30.default\searchplugins\startsear.xml [2011.08.13 15:20:04 | 000,001,565 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\qiuwnp30.default\searchplugins\web-search.xml [2011.11.10 15:49:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012.02.04 10:59:01 | 000,000,000 | ---D | M] (Java String Helper) -- C:\USERS\KEVIN\APPDATA\ROAMING\10002 () (No name found) -- C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QIUWNP30.DEFAULT\EXTENSIONS\{DD05FD3D-18DF-4CE4-AE53-E795339C5F01}.XPI () (No name found) -- C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QIUWNP30.DEFAULT\EXTENSIONS\ADAPTER@BABYLONTC.COM.XPI () (No name found) -- C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QIUWNP30.DEFAULT\EXTENSIONS\OCR@BABYLON.COM.XPI [2012.02.04 10:03:51 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011.04.15 13:20:18 | 001,034,544 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll [2011.02.02 20:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011.08.31 11:38:58 | 000,082,944 | ---- | M] (vShare.tv ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll [2012.02.04 10:03:49 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2012.01.29 19:55:17 | 000,002,275 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012.02.04 10:03:49 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012.02.04 10:03:49 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2012.02.04 10:03:49 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2012.02.04 10:03:49 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2012.02.04 10:03:49 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml ========== Chrome ========== Hosts file not found O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll (kikin) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [DriverScanner] C:\Program Files\Uniblue\DriverScanner\launcher.exe (Uniblue Systems Limited) O4 - HKCU..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent File not found O4 - HKCU..\Run: [Firefox helper] C:\Users\Kevin\AppData\Local\Mozilla\Firefox\firefox.exe () O4 - HKCU..\Run: [Userinit] C:\Users\Kevin\AppData\Roaming\appconf32.exe () O4 - Startup: C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll (kikin) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.169.185.33 83.169.185.97 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FBE81F66-357B-43FB-A399-CB6B963C26DB}: DhcpNameServer = 83.169.185.33 83.169.185.97 O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{4b5e244e-a4b8-11e0-8430-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{4b5e244e-a4b8-11e0-8430-20cf303e7c28}\Shell\AutoRun\command - "" = K:\SETUP.EXE O33 - MountPoints2\{4b5e2462-a4b8-11e0-8430-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{4b5e2462-a4b8-11e0-8430-20cf303e7c28}\Shell\AutoRun\command - "" = L:\autoplay.exe O33 - MountPoints2\{4b5e2465-a4b8-11e0-8430-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{4b5e2465-a4b8-11e0-8430-20cf303e7c28}\Shell\AutoRun\command - "" = M:\Desperados.exe -autorun O33 - MountPoints2\{4b5e269f-a4b8-11e0-8430-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{4b5e269f-a4b8-11e0-8430-20cf303e7c28}\Shell\AutoRun\command - "" = N:\autorun.exe O33 - MountPoints2\{8798a660-b91e-11e0-a979-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{8798a660-b91e-11e0-a979-20cf303e7c28}\Shell\AutoRun\command - "" = O:\AutoRun.exe O33 - MountPoints2\{8798a675-b91e-11e0-a979-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{8798a675-b91e-11e0-a979-20cf303e7c28}\Shell\AutoRun\command - "" = O:\AutoRun.exe O33 - MountPoints2\{8798a6c0-b91e-11e0-a979-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{8798a6c0-b91e-11e0-a979-20cf303e7c28}\Shell\AutoRun\command - "" = O:\AutoRun.exe O33 - MountPoints2\{8798a6d3-b91e-11e0-a979-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{8798a6d3-b91e-11e0-a979-20cf303e7c28}\Shell\AutoRun\command - "" = O:\AutoRun.exe O33 - MountPoints2\{8798a6df-b91e-11e0-a979-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{8798a6df-b91e-11e0-a979-20cf303e7c28}\Shell\AutoRun\command - "" = O:\AutoRun.exe O33 - MountPoints2\{a8312130-0fe6-11e1-8ce6-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{a8312130-0fe6-11e1-8ce6-20cf303e7c28}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{a831214a-0fe6-11e1-8ce6-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{a831214a-0fe6-11e1-8ce6-20cf303e7c28}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{b19cbd81-1fcf-11e1-876d-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{b19cbd81-1fcf-11e1-876d-20cf303e7c28}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{b272672b-8d57-11e0-884a-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{b272672b-8d57-11e0-884a-806e6f6e6963}\Shell\AutoRun\command - "" = "O:\WD SmartWare.exe" autoplay=true O33 - MountPoints2\{fdf9b7db-27b6-11e1-a8b6-20cf303e7c28}\Shell - "" = AutoRun O33 - MountPoints2\{fdf9b7db-27b6-11e1-a8b6-20cf303e7c28}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\I\Shell - "" = AutoRun O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (MACHINE BootExecut) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012.02.04 20:00:37 | 000,000,000 | ---D | C] -- C:\Boot [2012.02.04 18:51:26 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\UAs [2012.02.04 16:54:26 | 000,000,000 | ---D | C] -- C:\xmldm [2012.02.04 10:59:01 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\10002 [2012.02.02 18:09:18 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\09004 [2012.01.31 18:41:48 | 000,383,952 | ---- | C] (Adobe Systems, Incorporated) -- C:\Users\Kevin\AppData\Roaming\AcroIEHelpe073.dll [2012.01.30 14:55:32 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\9003 [2012.01.29 19:55:22 | 000,000,000 | ---D | C] -- C:\Program Files\Babylon [2012.01.29 19:55:18 | 000,000,000 | ---D | C] -- C:\Program Files\BabylonToolbar [2012.01.27 13:41:40 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\9002 [2012.01.25 16:05:47 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\9001 [2012.01.25 16:05:38 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\xmldm [2012.01.25 16:05:37 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\kock [2012.01.24 10:45:40 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Desktop\Logs [2012.01.24 10:44:58 | 000,000,000 | ---D | C] -- C:\Users\Kevin\riotsGamesLogs [2012.01.24 10:44:11 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Roaming\LolClient [2012.01.24 09:48:33 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Desktop\rads [2012.01.22 13:18:30 | 000,000,000 | ---D | C] -- C:\Users\Kevin\AppData\Local\PMB Files [2012.01.22 13:18:29 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files [2012.01.22 13:18:21 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks [2012.01.18 07:36:31 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll [2012.01.18 07:36:31 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll [2012.01.11 07:06:31 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll [2012.01.11 07:06:31 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll [2012.01.11 06:14:09 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll [2007.08.13 16:46:00 | 000,102,912 | ---- | C] (Albert L Faber) -- C:\Users\Kevin\AppData\Local\CDRip.dll [2007.01.18 20:09:54 | 000,623,616 | ---- | C] (Ivan Bischof ©2003 - 2005) -- C:\Users\Kevin\AppData\Local\No23 Recorder.exe [2006.12.11 18:13:14 | 000,013,872 | ---- | C] (Un4seen Developments) -- C:\Users\Kevin\AppData\Local\basscd.dll [2006.12.11 18:13:12 | 000,097,336 | ---- | C] (Un4seen Developments) -- C:\Users\Kevin\AppData\Local\bass.dll [1 C:\Users\Kevin\AppData\Roaming\*.tmp files -> C:\Users\Kevin\AppData\Roaming\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.02.04 20:01:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.02.04 20:01:30 | 2213,933,056 | -HS- | M] () -- C:\hiberfil.sys [2012.02.04 19:57:57 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2012.02.04 19:50:43 | 000,002,710 | ---- | M] () -- C:\Windows\diagwrn.xml [2012.02.04 19:50:43 | 000,001,890 | ---- | M] () -- C:\Windows\diagerr.xml [2012.02.04 19:48:06 | 000,002,750 | ---- | M] () -- C:\Users\Kevin\Desktop\Windows-Kompatibilitätsbericht.htm [2012.02.04 19:43:38 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\DriverScanner.job [2012.02.04 19:43:21 | 000,000,032 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\blckdom.res [2012.02.04 19:42:56 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012.02.04 19:41:15 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012.02.04 19:01:54 | 000,021,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.02.04 19:01:54 | 000,021,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.02.01 19:03:26 | 000,000,012 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\urhtps.dat [2012.01.31 18:41:48 | 000,383,952 | ---- | M] (Adobe Systems, Incorporated) -- C:\Users\Kevin\AppData\Roaming\AcroIEHelpe073.dll [2012.01.29 19:55:19 | 000,000,226 | ---- | M] () -- C:\user.js [2012.01.29 19:35:50 | 000,655,802 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2012.01.29 19:35:50 | 000,616,348 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012.01.29 19:35:50 | 000,130,434 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2012.01.29 19:35:50 | 000,106,728 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012.01.27 00:21:24 | 000,237,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2012.01.24 09:47:32 | 000,648,438 | ---- | M] () -- C:\Users\Kevin\Desktop\LoLRADS_EUW_german.zip [1 C:\Users\Kevin\AppData\Roaming\*.tmp files -> C:\Users\Kevin\AppData\Roaming\*.tmp -> ] ========== Files Created - No Company Name ========== [2012.02.04 20:01:30 | 2213,933,056 | -HS- | C] () -- C:\hiberfil.sys [2012.02.04 19:49:45 | 000,000,302 | RHS- | C] () -- C:\boot.ini [2012.02.04 19:48:06 | 000,002,750 | ---- | C] () -- C:\Users\Kevin\Desktop\Windows-Kompatibilitätsbericht.htm [2012.02.04 19:46:38 | 000,002,710 | ---- | C] () -- C:\Windows\diagwrn.xml [2012.02.04 19:46:38 | 000,001,890 | ---- | C] () -- C:\Windows\diagerr.xml [2012.02.01 19:03:26 | 000,000,012 | ---- | C] () -- C:\Users\Kevin\AppData\Roaming\urhtps.dat [2012.01.29 19:55:19 | 000,000,226 | ---- | C] () -- C:\user.js [2012.01.25 16:05:44 | 000,000,032 | ---- | C] () -- C:\Users\Kevin\AppData\Roaming\blckdom.res [2012.01.24 09:48:33 | 000,090,112 | ---- | C] () -- C:\Users\Kevin\Desktop\lol.launcher.exe [2012.01.24 09:48:33 | 000,090,112 | ---- | C] () -- C:\Users\Kevin\Desktop\lol.launcher.admin.exe [2012.01.24 09:47:32 | 000,648,438 | ---- | C] () -- C:\Users\Kevin\Desktop\LoLRADS_EUW_german.zip [2011.10.17 04:57:17 | 000,001,463 | ---- | C] () -- C:\Users\Kevin\AppData\Local\RecConfig.xml [2011.07.13 02:05:07 | 000,007,596 | ---- | C] () -- C:\Users\Kevin\AppData\Local\Resmon.ResmonCfg [2011.07.11 15:49:03 | 000,001,660 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin [2011.07.09 13:38:08 | 000,042,637 | ---- | C] () -- C:\Windows\DIIUnin.dat [2011.07.08 02:59:11 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll [2011.07.08 02:32:26 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll [2011.07.08 02:32:26 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll [2011.07.08 02:32:26 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll [2011.07.05 14:49:58 | 000,055,009 | ---- | C] () -- C:\Windows\War3Unin.dat [2011.07.02 16:01:42 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini [2011.06.28 10:08:24 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2011.06.28 10:08:24 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2011.06.08 06:11:50 | 000,001,180 | ---- | C] () -- C:\Windows\eReg.dat [2011.04.12 02:30:05 | 000,655,802 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2011.04.12 02:30:05 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2011.04.12 02:30:05 | 000,130,434 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2011.04.12 02:30:05 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2010.11.20 22:29:34 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2010.11.20 22:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 05:33:53 | 000,267,640 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009.07.14 03:05:48 | 000,616,348 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009.07.14 03:05:48 | 000,106,728 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2008.12.09 16:23:13 | 000,052,216 | RHS- | C] () -- C:\Users\Kevin\AppData\Roaming\appconf32.exe [2007.08.13 16:46:00 | 000,155,136 | ---- | C] () -- C:\Users\Kevin\AppData\Local\lame_enc.dll [2006.10.26 00:06:48 | 000,064,000 | ---- | C] () -- C:\Users\Kevin\AppData\Local\vorbisenc.dll [2006.10.26 00:06:48 | 000,019,456 | ---- | C] () -- C:\Users\Kevin\AppData\Local\vorbisfile.dll [2006.10.26 00:06:46 | 000,143,872 | ---- | C] () -- C:\Users\Kevin\AppData\Local\vorbis.dll [2006.10.26 00:06:36 | 000,015,872 | ---- | C] () -- C:\Users\Kevin\AppData\Local\ogg.dll [2005.08.23 21:34:06 | 000,029,184 | ---- | C] () -- C:\Users\Kevin\AppData\Local\no23xwrapper.dll [2004.08.13 08:56:20 | 000,005,810 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys ========== LOP Check ========== [2012.02.02 18:09:18 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\09004 [2012.02.04 10:59:01 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\10002 [2012.01.25 16:05:47 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\9001 [2012.01.27 13:41:40 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\9002 [2012.01.30 14:55:32 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\9003 [2011.08.11 21:21:28 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Atari [2011.07.09 17:12:44 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\BitComet [2011.07.08 03:51:25 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\BitZipper [2011.07.11 20:37:07 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Canneverbe Limited [2011.07.08 02:22:10 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\DAEMON Tools Lite [2011.06.03 13:24:31 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\kikin [2012.01.25 16:05:37 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\kock [2011.07.09 16:16:33 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Leadertech [2012.01.24 10:44:11 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\LolClient [2011.10.20 23:30:34 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Mumble [2011.07.11 20:36:56 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\OpenCandy [2011.07.11 15:49:26 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Systweak [2011.09.07 17:27:05 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\TS3Client [2012.02.04 18:51:26 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\UAs [2011.07.11 20:37:09 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Uniblue [2012.02.04 18:52:25 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\xmldm [2012.02.04 19:43:38 | 000,000,328 | ---- | M] () -- C:\Windows\Tasks\DriverScanner.job [2012.01.31 07:17:06 | 000,032,634 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > |
| Themen zu Betriebssystem blockiert...updates für 50euro downloaden |
| acroiehelpe, adapter, autorun, avira, babylon toolbar, babylontoolbar, bho, blockiert, cdrom, defender, desktop, driverscanner, euro, explorer, explorer.exe, firefox, format, helper, langs, logfile, microsoft, mozilla, nvidia, plug-in, registry, scan, search the web, software, system32, update, webcheck, windows, winlogon |
Baum-Darstellung