![]() |
|
Log-Analyse und Auswertung: Weisser Bildschirm und Meldung "Verbindung wird hergestellt.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Weisser Bildschirm und Meldung "Verbindung wird hergestellt. Hallo habe hier einen Laptop stehen der glaube ich für euch einen alten Bekannten Virus sich eingefangen hat. Nach dem Anmelden kommt ein Weisser Bildschirm und es steht der Satz: Bitte warten Sie während die Verbindung hergestellt wird. anbei die txt-Datei nach nem Scan: Konnte die Datei leider nicht hochladen sorry OTL Logfile: Code:
ATTFilter OTL logfile created on: 4/22/2012 10:04:28 PM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Windows 7 Home Premium (Version = 6.1.7601) - Type = System Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 91.00% Memory free 3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 86.62 Gb Total Space | 11.66 Gb Free Space | 13.46% Space Free | Partition Type: NTFS Drive D: | 29.67 Gb Total Space | 29.58 Gb Free Space | 99.71% Space Free | Partition Type: NTFS Drive E: | 115.13 Gb Total Space | 100.86 Gb Free Space | 87.60% Space Free | Partition Type: NTFS Drive X: | 1009.95 Mb Total Space | 689.34 Mb Free Space | 68.26% Space Free | Partition Type: FAT Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet002 ========== Win32 Services (SafeList) ========== SRV - [2012/04/16 11:17:03 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/03/28 13:00:35 | 003,417,376 | ---- | M] () [Auto] -- C:\program files\common files\akamai/netsession_win_6c825ce.dll -- (Akamai) SRV - [2012/03/10 17:14:09 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2012/01/03 09:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011/12/07 06:37:32 | 001,459,424 | ---- | M] () [Auto] -- C:\Program Files\Security Administrator\newlock.exe -- (DeskSaverService) SRV - [2011/10/11 08:59:49 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2011/10/11 08:59:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011/03/29 12:28:12 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011/02/02 08:08:16 | 000,018,656 | ---- | M] () [Auto] -- C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service) SRV - [2010/03/18 06:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2010/01/28 15:34:10 | 000,079,360 | ---- | M] (Autodesk) [On_Demand] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2009/10/21 13:15:38 | 000,288,768 | ---- | M] (T-Systems International GmbH) [Auto] -- C:\Program Files\T-Home\Dialerschutz-Software\DFInject.exe -- (DFSVC) SRV - [2009/08/17 21:36:08 | 000,176,128 | ---- | M] (AMD) [Auto] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2009/07/13 21:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/13 21:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009/04/28 22:21:04 | 000,410,624 | ---- | M] (Conexant Systems, Inc.) [Auto] -- C:\Windows\System32\XAudio32.dll -- (HsfXAudioService) SRV - [2007/01/10 23:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand] -- -- (GEARAspiWDM) DRV - [2012/02/15 14:01:09 | 000,137,416 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2011/10/11 09:00:01 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2011/10/11 09:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr) DRV - [2010/11/20 06:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010/06/17 09:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2010/04/03 06:02:54 | 000,240,608 | ---- | M] (Microsoft Corporation) [File_System | Disabled] -- C:\Windows\System32\drivers\RsFx0150.sys -- (RsFx0150) DRV - [2010/03/30 22:13:28 | 000,379,904 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand] -- C:\Windows\System32\drivers\RTL8187B.sys -- (RTL8187B) DRV - [2010/02/05 13:25:12 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto] -- C:\Windows\System32\drivers\Haspnt.sys -- (Haspnt) DRV - [2009/10/15 13:14:38 | 000,024,352 | ---- | M] (T-Systems International GmbH) [Kernel | On_Demand] -- C:\Windows\System32\drivers\SipIMNDI.sys -- (SipIMNDI) DRV - [2009/10/15 13:14:38 | 000,014,624 | ---- | M] (T-Systems International GmbH) [Kernel | On_Demand] -- C:\Program Files\T-Home\Dialerschutz-Software\DFSYS.sys -- (DFSYS) DRV - [2009/08/17 22:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2009/07/13 20:18:07 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV - [2009/07/13 19:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp) DRV - [2009/04/28 22:20:56 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto] -- C:\Windows\System32\drivers\XAudio32.sys -- (XAudio) DRV - [2007/11/09 00:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ) DRV - [2006/11/22 05:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\Windows\system32\drivers\hardlock.sys -- (Hardlock) DRV - [2006/11/22 05:01:48 | 000,100,096 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\aksusb.sys -- (aksusb) DRV - [2006/11/22 05:01:46 | 000,327,168 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\akshasp.sys -- (akshasp) DRV - [2006/11/10 10:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\afc.sys -- (Afc) DRV - [2002/09/19 16:07:50 | 000,034,683 | ---- | M] (EIBA s.c.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Pei16Wdm.sys -- (Pei16Wdm) DRV - [2002/08/15 04:20:04 | 000,035,547 | ---- | M] (EIBA s.c.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Pei10Wdm.sys -- (Pei10Wdm) DRV - [2001/11/05 03:23:52 | 000,299,923 | ---- | M] (Sony Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\sonyhcs.sys -- (sonyhcs) DRV - [2001/11/05 03:23:14 | 000,006,097 | ---- | M] (Sony Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\sonyhcb.sys -- (sonyhcb) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=ironto&s={searchTerms}&f=4 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local> IE - HKU\administrator2_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Krames_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ IE - HKU\Krames_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKU\Krames_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKU\Krames_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3F FA E9 69 55 A0 CA 01 [binary data] IE - HKU\Krames_ON_C\..\URLSearchHook: {b106b661-3e1b-4015-af5c-195e909f35c6} - Reg Error: Key error. File not found IE - HKU\Krames_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Krames_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local> IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0 FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6 FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) [2010/05/18 15:44:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krames\AppData\Roaming\Mozilla\Extensions [2011/08/24 13:45:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krames\AppData\Roaming\Mozilla\Firefox\Profiles\461q3f9x.default\extensions [2011/08/22 10:38:18 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Krames\AppData\Roaming\Mozilla\Firefox\Profiles\461q3f9x.default\extensions\ffxtlbr@babylon.com [2011/03/22 13:33:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010/08/14 16:35:44 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010/11/04 15:18:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011/01/20 11:53:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} File not found (No name found) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\COFFPLGN File not found (No name found) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPLGN [2010/11/12 13:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011/08/22 13:57:28 | 000,002,049 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml O1 HOSTS File: ([2009/06/10 17:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O3 - HKU\Krames_ON_C\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found. O3 - HKU\Krames_ON_C\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKU\Krames_ON_C\..\Toolbar\WebBrowser: (no name) - {B106B661-3E1B-4015-AF5C-195E909F35C6} - No CLSID value found. O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [SHIWebOnDiskManager] C:\Program Files\SHIWebOnDiskManager\SHIWebOnDiskManager.exe (SHI Elektronische Medien GmbH) O4 - HKU\Krames_ON_C..\Run: [5kS43ADO0bzprWo] C:\Users\Krames\AppData\Roaming\soundblaster_fx648.exe () O4 - HKU\Krames_ON_C..\Run: [DMS-Kalenderchen] C:\Program Files\Kalenderchen\Kalenderchen.exe (Daniel Manger Software) O4 - HKU\LocalService_ON_C..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\NetworkService_ON_C..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: UseDefaultTile = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideShutdownScripts = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Feeds present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Security present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Toolbars present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\ZOOM present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThemesTab = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAddPrinter = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictCpl = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowCpl = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrivesInSendToMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictRun = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecycleFiles = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: PreventItemCreationInUsersFilesFolder = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoReadingPane = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPreviewPane = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DontSetAutoplayCheckbox = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyDocuments = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesRecycleBin = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoManageMyComputerVerb = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCustomizeWebView = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWinKeys = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableThumbnails = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableThumbnailsOnNetworkFolders = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCustomizeThisFolder = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWebView = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DontShowSuperHidden = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoOnlinePrintsWizard = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPublishingWizard = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AlwaysShowClassicMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentProgForNewUserInStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserFolderInStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchComputerLinkInStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchProgramsInStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchInternetInStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchFilesInStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchCommInStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyMusic = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyDocs = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuNetworkPlaces = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHelp = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMorePrograms = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuEjectPC = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogoff = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDisconnect = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNtSecurity = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: GreyMSIAds = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceMaxRecentDocs = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyGames = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTips = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LockTaskbar = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAVolume = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCANetwork = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAPower = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCABattery = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTaskGrouping = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoThumbnail = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarLockAll = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoResize = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoAddRemoveToolbar = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoDragToolbar = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoRedock = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictWelcomeCenter = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWebServices = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileUrl = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetIcon = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: SpecifyDefaultButtons = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInplaceSharing = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetConnectDisconnect = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: UseFoldersInStartMenu = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TurnOffSPIAnimations = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnforceShellExtensionSecurity = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogOff = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: PromptRunasInstallNetPath = 1 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThumbnailCache = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceCopyAclwithFile = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartRunNoHOMEPATH = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 0? = syntpenh.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 1? = shiwebondiskmanager.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 2? = avgnt.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 3? = adobearm.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 4? = newlock.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 5? = googletoolbarnotifier.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 6? = kalenderchen.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 7? = netsession_win.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 8? = soundblaster_fx648.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 9? = newadmin.exe O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoColorChoice = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0 O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0 O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present O13 - gopher Prefix: missing O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Plugin Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012/03/22 12:13:42 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2011/03/29 17:11:08 | 000,000,000 | ---D | M] - E:\Autocad -- [ NTFS ] O32 - AutoRun File - [2011/05/23 03:55:26 | 000,000,000 | ---D | M] - E:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2006/03/24 13:06:42 | 000,000,053 | ---- | M] () - X:\AUTORUN.INF -- [ FAT ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2099/03/19 15:45:58 | 000,212,992 | ---- | C] (Acro Software Inc.) -- C:\Windows\System32\cutesave.exe [2099/03/19 15:45:58 | 000,000,000 | ---D | C] -- C:\Program Files\ElcomPdf [2099/03/19 15:44:26 | 001,142,784 | ---- | C] (Tidestone Technologies, Inc.) -- C:\Windows\System32\TTF16.ocx [2099/03/19 15:44:26 | 000,163,840 | ---- | C] (Tidestone Technologies, Inc.) -- C:\Windows\System32\TTF16DE.DLL [2099/03/19 15:41:25 | 000,328,704 | ---- | C] (InstallShield Software Corporation ) -- C:\Windows\IsUn0407.exe [2050/05/15 02:01:21 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe [2012/04/18 20:55:52 | 000,000,000 | -HSD | C] -- C:\found.000 [2012/04/18 15:13:09 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming\Avira [2012/04/18 15:08:53 | 000,000,000 | ---D | C] -- C:\Users\administrator2\Documents\WEKA [2012/04/18 15:07:43 | 000,000,000 | R--D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2012/04/18 15:07:43 | 000,000,000 | R--D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2012/04/18 15:07:43 | 000,000,000 | -H-D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned [2012/04/18 15:07:24 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming\Identities [2012/04/18 15:06:49 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local\VirtualStore [2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\AppData\Local\Verlauf [2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\AppData\Local\Temporary Internet Files [2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\Documents\Eigene Videos [2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\Documents\Eigene Musik [2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\Documents\Eigene Bilder [2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\AppData\Local\Anwendungsdaten [2012/04/18 15:06:22 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\LocalLow [2012/04/18 15:06:21 | 000,000,000 | --SD | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft [2012/04/18 15:06:21 | 000,000,000 | R--D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2012/04/18 15:06:21 | 000,000,000 | R--D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local\Temp [2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming [2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local\Microsoft Help [2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local\Microsoft [2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming\Media Center Programs [2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming\Macromedia [2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local [2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2 [2012/04/18 14:48:23 | 000,000,000 | -H-D | C] -- C:\Security Administrator [2012/04/18 14:27:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Administrator [2012/04/18 14:27:50 | 000,000,000 | ---D | C] -- C:\Program Files\Security Administrator [2012/04/16 11:17:03 | 000,418,464 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2012/04/11 17:55:41 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2012/04/11 17:55:39 | 001,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2012/04/11 17:55:39 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2012/04/11 17:55:38 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2012/04/11 17:55:37 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2012/04/11 17:55:37 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2012/04/11 17:55:36 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2012/04/11 15:10:56 | 000,107,368 | R--- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll [1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012/04/22 14:00:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/04/22 13:43:41 | 000,015,152 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/04/22 13:43:41 | 000,015,152 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/04/22 13:40:01 | 000,836,234 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2012/04/22 13:40:01 | 000,779,460 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012/04/22 13:40:01 | 000,201,596 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2012/04/22 13:40:01 | 000,173,318 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012/04/22 13:38:42 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/04/22 13:35:18 | 2816,872,448 | -HS- | M] () -- C:\hiberfil.sys [2012/04/18 20:57:42 | 000,003,552 | ---- | M] () -- C:\bootsqm.dat [2012/04/18 20:35:12 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/04/18 20:23:47 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/04/18 14:27:53 | 000,001,978 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safe Web Browser.lnk [2012/04/18 14:27:53 | 000,001,974 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screen Lock.lnk [2012/04/18 14:27:53 | 000,001,966 | ---- | M] () -- C:\Users\Public\Desktop\Safe Web Browser.lnk [2012/04/18 14:27:53 | 000,001,962 | ---- | M] () -- C:\Users\Public\Desktop\Screen Lock.lnk [2012/04/18 14:27:53 | 000,001,067 | ---- | M] () -- C:\Users\Krames\Desktop\Security Administrator.lnk [2012/04/18 14:27:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Administrator [2012/04/16 15:04:18 | 000,210,432 | ---- | M] () -- C:\Users\Krames\AppData\Roaming\soundblaster_fx648.exe [2012/04/16 11:17:03 | 000,418,464 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2012/04/16 11:17:03 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2012/04/12 07:27:42 | 000,001,107 | ---- | M] () -- C:\Users\Krames\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook starten.lnk [2012/04/12 07:23:05 | 000,435,280 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012/04/11 17:16:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Moeller Software [2012/04/11 15:46:18 | 000,000,284 | ---- | M] () -- C:\Users\Krames\Documents\cc_20120411_214559.reg [1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2099/03/19 15:45:58 | 000,094,208 | ---- | C] () -- C:\Windows\System32\cute2mon2k.dll [2099/03/19 15:45:58 | 000,053,248 | ---- | C] () -- C:\Windows\System32\uninstcp.exe [2012/04/18 20:57:42 | 000,003,552 | ---- | C] () -- C:\bootsqm.dat [2012/04/18 15:07:50 | 000,001,413 | ---- | C] () -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2012/04/18 15:06:21 | 000,000,290 | ---- | C] () -- C:\Users\administrator2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2012/04/18 15:06:21 | 000,000,272 | ---- | C] () -- C:\Users\administrator2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2012/04/18 14:27:53 | 000,001,978 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safe Web Browser.lnk [2012/04/18 14:27:53 | 000,001,974 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screen Lock.lnk [2012/04/18 14:27:53 | 000,001,966 | ---- | C] () -- C:\Users\Public\Desktop\Safe Web Browser.lnk [2012/04/18 14:27:53 | 000,001,962 | ---- | C] () -- C:\Users\Public\Desktop\Screen Lock.lnk [2012/04/18 14:27:53 | 000,001,067 | ---- | C] () -- C:\Users\Krames\Desktop\Security Administrator.lnk [2012/04/18 14:27:52 | 000,001,097 | ---- | C] () -- C:\Users\Krames\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Administrator.lnk [2012/04/16 15:04:20 | 000,210,432 | ---- | C] () -- C:\Users\Krames\AppData\Roaming\soundblaster_fx648.exe [2012/04/16 11:17:07 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/04/11 15:46:06 | 000,000,284 | ---- | C] () -- C:\Users\Krames\Documents\cc_20120411_214559.reg [2011/11/04 13:08:15 | 000,451,072 | ---- | C] () -- C:\Windows\System32\ISSRemoveSP.exe [2011/08/23 15:17:50 | 000,005,002 | ---- | C] () -- C:\ProgramData\bwxcldpn.mmu [2011/08/22 11:56:30 | 000,003,654 | ---- | C] () -- C:\Windows\System32\drivers\Sonyhcp.dll [2011/07/26 08:59:05 | 000,252,928 | ---- | C] () -- C:\Windows\System32\DShowRdpFilter.dll [2011/06/10 01:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2011/04/19 10:27:00 | 000,001,940 | ---- | C] () -- C:\Users\Krames\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini [2011/01/03 16:23:37 | 000,000,245 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc [2010/11/11 05:28:02 | 000,000,396 | ---- | C] () -- C:\Windows\SHISETUP.SYS [2010/05/14 16:56:29 | 000,086,016 | ---- | C] () -- C:\Windows\System32\custmon32.dll [2010/02/05 13:25:12 | 000,000,383 | ---- | C] () -- C:\Windows\System32\haspdos.sys [2010/02/01 15:37:02 | 000,007,601 | ---- | C] () -- C:\Users\Krames\AppData\Local\resmon.resmoncfg [2010/01/28 16:09:11 | 000,001,471 | ---- | C] () -- C:\Windows\ODBCINST.INI [2010/01/28 15:05:32 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI [2010/01/27 17:18:20 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2009/07/14 04:47:43 | 000,836,234 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2009/07/14 04:47:43 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2009/07/14 04:47:43 | 000,201,596 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2009/07/14 04:47:43 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2009/07/14 00:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009/07/14 00:33:53 | 000,435,280 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009/07/13 22:05:48 | 000,779,460 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009/07/13 22:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009/07/13 22:05:48 | 000,173,318 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009/07/13 22:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009/07/13 22:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009/07/13 22:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009/07/13 19:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009/07/13 19:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009/06/18 14:29:04 | 000,197,654 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2008/11/05 08:42:45 | 000,062,400 | ---- | C] () -- C:\Windows\System32\IFC.dll [2008/11/05 08:41:56 | 000,422,848 | ---- | C] () -- C:\Windows\System32\PPL.dll [2005/12/21 12:57:36 | 000,139,264 | ---- | C] () -- C:\Windows\System32\nsldap32v50.dll [2005/12/21 12:57:04 | 000,024,576 | ---- | C] () -- C:\Windows\System32\nsldappr32v50.dll [2005/12/21 12:54:34 | 000,040,960 | ---- | C] () -- C:\Windows\System32\nsldapssl32v50.dll [2003/02/20 13:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI ========== LOP Check ========== [2010/02/01 15:21:14 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Ansys [2011/05/05 16:16:32 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Autodesk [2011/08/22 10:38:05 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Babylon [2010/10/05 14:48:09 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\DYMO [2010/07/14 10:32:51 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\EIBA sc [2012/02/03 14:03:13 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\elsterformular [2011/06/27 04:42:48 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\JGoodies [2011/10/23 03:56:34 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Kalenderchen [2011/08/23 15:17:54 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\MOVAVI [2010/12/25 15:39:06 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\NCH Swift Sound [2010/11/04 16:22:22 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Perspectix [2011/05/18 10:13:12 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\PhotoScape [2011/12/09 17:48:33 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Reviversoft [2011/11/03 16:04:52 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Tific [2011/02/28 16:08:46 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\TuneUp Software [2011/11/04 12:42:31 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\WinBatch [2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Anwendungsdaten [2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data [2011/05/23 03:55:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Autodesk [2011/08/22 10:38:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Babylon [2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop [2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents [2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumente [2011/05/31 09:41:11 | 000,000,000 | ---D | M] -- C:\ProgramData\EasternGraphics [2010/02/05 13:24:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Elka Shared [2012/04/03 04:27:53 | 000,000,000 | ---D | M] -- C:\ProgramData\elsterformular [2011/01/28 13:39:43 | 000,000,000 | ---D | M] -- C:\ProgramData\EPSON [2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoriten [2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites [2011/04/27 14:14:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Fighters [2011/01/17 14:26:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Kaco [2010/12/06 14:46:10 | 000,000,000 | ---D | M] -- C:\ProgramData\KNX [2011/10/28 16:20:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Lernwerkstatt 8 [2010/12/25 15:40:00 | 000,000,000 | ---D | M] -- C:\ProgramData\NCH Swift Sound [2011/12/09 17:31:11 | 000,000,000 | ---D | M] -- C:\ProgramData\PC Drivers HeadQuarters [2010/11/02 15:44:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Perspectix [2010/11/11 05:31:20 | 000,000,000 | ---D | M] -- C:\ProgramData\SHI [2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu [2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Startmenü [2011/02/01 14:14:55 | 000,000,000 | ---D | M] -- C:\ProgramData\T-Online [2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates [2011/02/28 16:10:28 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software [2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Vorlagen [2011/10/18 12:36:10 | 000,000,000 | -H-D | M] -- C:\ProgramData\{187CDB7E-5180-4643-A637-F6CA293521DB} [2011/02/28 16:06:46 | 000,000,000 | -HSD | M] -- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2011/07/07 15:06:52 | 000,000,000 | -H-D | M] -- C:\ProgramData\{599E53C0-48DF-4A06-B070-8598456CD71C} [2011/10/18 12:35:13 | 000,000,000 | -H-D | M] -- C:\ProgramData\{8CDFAF9A-B88D-4006-81F1-9D33BC1B78B0} [2011/06/22 16:24:26 | 000,000,000 | ---D | M] -- C:\ProgramData\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A} [2011/02/28 15:58:54 | 000,000,000 | -HSD | M] -- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} [2012/03/06 08:40:48 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > Geändert von Krames (22.04.2012 um 20:53 Uhr) Grund: Korrektur |
Themen zu Weisser Bildschirm und Meldung "Verbindung wird hergestellt. |
administrator, adobe, adobe flash player, antivir, askbar, avira, bildschirm, defender, desktop, error, explorer, firefox, flash player, format, home, langs, launch, logfile, microsoft, nodrives, object, opera, plug-in, realtek, registry, scan, security, software, virus, winlogon |