Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Weisser Bildschirm und Meldung "Verbindung wird hergestellt.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 22.04.2012, 20:35   #1
Krames
 
Weisser Bildschirm und Meldung "Verbindung wird hergestellt. - Standard

Weisser Bildschirm und Meldung "Verbindung wird hergestellt.



Hallo

habe hier einen Laptop stehen der glaube ich für euch einen alten Bekannten Virus sich eingefangen hat.
Nach dem Anmelden kommt ein Weisser Bildschirm und es steht der Satz:
Bitte warten Sie während die Verbindung hergestellt wird.

anbei die txt-Datei nach nem Scan:

Konnte die Datei leider nicht hochladen sorry

OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 4/22/2012 10:04:28 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Windows 7 Home Premium  (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 91.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 86.62 Gb Total Space | 11.66 Gb Free Space | 13.46% Space Free | Partition Type: NTFS
Drive D: | 29.67 Gb Total Space | 29.58 Gb Free Space | 99.71% Space Free | Partition Type: NTFS
Drive E: | 115.13 Gb Total Space | 100.86 Gb Free Space | 87.60% Space Free | Partition Type: NTFS
Drive X: | 1009.95 Mb Total Space | 689.34 Mb Free Space | 68.26% Space Free | Partition Type: FAT
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
========== Win32 Services (SafeList) ==========
 
SRV - [2012/04/16 11:17:03 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/03/28 13:00:35 | 003,417,376 | ---- | M] () [Auto] -- C:\program files\common files\akamai/netsession_win_6c825ce.dll -- (Akamai)
SRV - [2012/03/10 17:14:09 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2012/01/03 09:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/12/07 06:37:32 | 001,459,424 | ---- | M] () [Auto] -- C:\Program Files\Security Administrator\newlock.exe -- (DeskSaverService)
SRV - [2011/10/11 08:59:49 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/10/11 08:59:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/03/29 12:28:12 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011/02/02 08:08:16 | 000,018,656 | ---- | M] () [Auto] -- C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service)
SRV - [2010/03/18 06:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2010/01/28 15:34:10 | 000,079,360 | ---- | M] (Autodesk) [On_Demand] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2009/10/21 13:15:38 | 000,288,768 | ---- | M] (T-Systems International GmbH) [Auto] -- C:\Program Files\T-Home\Dialerschutz-Software\DFInject.exe -- (DFSVC)
SRV - [2009/08/17 21:36:08 | 000,176,128 | ---- | M] (AMD) [Auto] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2009/07/13 21:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 21:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/04/28 22:21:04 | 000,410,624 | ---- | M] (Conexant Systems, Inc.) [Auto] -- C:\Windows\System32\XAudio32.dll -- (HsfXAudioService)
SRV - [2007/01/10 23:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (GEARAspiWDM)
DRV - [2012/02/15 14:01:09 | 000,137,416 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/10/11 09:00:01 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011/10/11 09:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2010/11/20 06:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/06/17 09:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/04/03 06:02:54 | 000,240,608 | ---- | M] (Microsoft Corporation) [File_System | Disabled] -- C:\Windows\System32\drivers\RsFx0150.sys -- (RsFx0150)
DRV - [2010/03/30 22:13:28 | 000,379,904 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\Windows\System32\drivers\RTL8187B.sys -- (RTL8187B)
DRV - [2010/02/05 13:25:12 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto] -- C:\Windows\System32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2009/10/15 13:14:38 | 000,024,352 | ---- | M] (T-Systems International GmbH) [Kernel | On_Demand] -- C:\Windows\System32\drivers\SipIMNDI.sys -- (SipIMNDI)
DRV - [2009/10/15 13:14:38 | 000,014,624 | ---- | M] (T-Systems International GmbH) [Kernel | On_Demand] -- C:\Program Files\T-Home\Dialerschutz-Software\DFSYS.sys -- (DFSYS)
DRV - [2009/08/17 22:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009/07/13 20:18:07 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV - [2009/07/13 19:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009/04/28 22:20:56 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto] -- C:\Windows\System32\drivers\XAudio32.sys -- (XAudio)
DRV - [2007/11/09 00:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
DRV - [2006/11/22 05:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\Windows\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006/11/22 05:01:48 | 000,100,096 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\aksusb.sys -- (aksusb)
DRV - [2006/11/22 05:01:46 | 000,327,168 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\akshasp.sys -- (akshasp)
DRV - [2006/11/10 10:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\afc.sys -- (Afc)
DRV - [2002/09/19 16:07:50 | 000,034,683 | ---- | M] (EIBA s.c.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Pei16Wdm.sys -- (Pei16Wdm)
DRV - [2002/08/15 04:20:04 | 000,035,547 | ---- | M] (EIBA s.c.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Pei10Wdm.sys -- (Pei10Wdm)
DRV - [2001/11/05 03:23:52 | 000,299,923 | ---- | M] (Sony Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\sonyhcs.sys -- (sonyhcs)
DRV - [2001/11/05 03:23:14 | 000,006,097 | ---- | M] (Sony Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\sonyhcb.sys -- (sonyhcb)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=ironto&s={searchTerms}&f=4
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
IE - HKU\administrator2_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Krames_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\Krames_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\Krames_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\Krames_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 3F FA E9 69 55 A0 CA 01  [binary data]
IE - HKU\Krames_ON_C\..\URLSearchHook: {b106b661-3e1b-4015-af5c-195e909f35c6} - Reg Error: Key error. File not found
IE - HKU\Krames_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Krames_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;<local>
 
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6
 
 
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
 
[2010/05/18 15:44:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krames\AppData\Roaming\Mozilla\Extensions
[2011/08/24 13:45:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krames\AppData\Roaming\Mozilla\Firefox\Profiles\461q3f9x.default\extensions
[2011/08/22 10:38:18 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Krames\AppData\Roaming\Mozilla\Firefox\Profiles\461q3f9x.default\extensions\ffxtlbr@babylon.com
[2011/03/22 13:33:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/08/14 16:35:44 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/11/04 15:18:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/01/20 11:53:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
File not found (No name found) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\COFFPLGN
File not found (No name found) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPLGN
[2010/11/12 13:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/08/22 13:57:28 | 000,002,049 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml
 
O1 HOSTS File: ([2009/06/10 17:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O3 - HKU\Krames_ON_C\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKU\Krames_ON_C\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\Krames_ON_C\..\Toolbar\WebBrowser: (no name) - {B106B661-3E1B-4015-AF5C-195E909F35C6} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [SHIWebOnDiskManager] C:\Program Files\SHIWebOnDiskManager\SHIWebOnDiskManager.exe (SHI Elektronische Medien GmbH)
O4 - HKU\Krames_ON_C..\Run: [5kS43ADO0bzprWo] C:\Users\Krames\AppData\Roaming\soundblaster_fx648.exe ()
O4 - HKU\Krames_ON_C..\Run: [DMS-Kalenderchen] C:\Program Files\Kalenderchen\Kalenderchen.exe (Daniel Manger Software)
O4 - HKU\LocalService_ON_C..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: UseDefaultTile = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideShutdownScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Feeds present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Security present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\ZOOM present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O7 - HKU\administrator2_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O7 - HKU\Krames_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThemesTab = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAddPrinter = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictCpl = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowCpl = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrivesInSendToMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictRun = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecycleFiles = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: PreventItemCreationInUsersFilesFolder = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoReadingPane = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPreviewPane = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DontSetAutoplayCheckbox = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyDocuments = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesRecycleBin = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoManageMyComputerVerb = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCustomizeWebView = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWinKeys = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableThumbnails = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableThumbnailsOnNetworkFolders = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCustomizeThisFolder = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWebView = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DontShowSuperHidden = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoOnlinePrintsWizard = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPublishingWizard = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AlwaysShowClassicMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentProgForNewUserInStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserFolderInStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchComputerLinkInStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchProgramsInStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchInternetInStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchFilesInStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSearchCommInStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyMusic = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyDocs = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuNetworkPlaces = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHelp = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMorePrograms = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuEjectPC = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogoff = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDisconnect = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNtSecurity = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: GreyMSIAds = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceMaxRecentDocs = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyGames = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTips = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LockTaskbar = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAVolume = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCANetwork = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAPower = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCABattery = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTaskGrouping = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoThumbnail = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarLockAll = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoResize = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoAddRemoveToolbar = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoDragToolbar = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoRedock = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictWelcomeCenter = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWebServices = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileUrl = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetIcon = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: SpecifyDefaultButtons = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInplaceSharing = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetConnectDisconnect = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: UseFoldersInStartMenu = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TurnOffSPIAnimations = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnforceShellExtensionSecurity = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogOff = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: PromptRunasInstallNetPath = 1
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThumbnailCache = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceCopyAclwithFile = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartRunNoHOMEPATH = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 0? = syntpenh.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 1? = shiwebondiskmanager.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 2? = avgnt.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 3? = adobearm.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 4? = newlock.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 5? = googletoolbarnotifier.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 6? = kalenderchen.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 7? = netsession_win.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 8? = soundblaster_fx648.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\RestrictRun: 9? = newadmin.exe
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoColorChoice = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogonScripts = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\Krames_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Feed Discovery present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Feeds present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Security present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\ZOOM present
O13 - gopher Prefix: missing
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Plugin Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/03/22 12:13:42 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011/03/29 17:11:08 | 000,000,000 | ---D | M] - E:\Autocad -- [ NTFS ]
O32 - AutoRun File - [2011/05/23 03:55:26 | 000,000,000 | ---D | M] - E:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 13:06:42 | 000,000,053 | ---- | M] () - X:\AUTORUN.INF -- [ FAT ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2099/03/19 15:45:58 | 000,212,992 | ---- | C] (Acro Software Inc.) -- C:\Windows\System32\cutesave.exe
[2099/03/19 15:45:58 | 000,000,000 | ---D | C] -- C:\Program Files\ElcomPdf
[2099/03/19 15:44:26 | 001,142,784 | ---- | C] (Tidestone Technologies, Inc.) -- C:\Windows\System32\TTF16.ocx
[2099/03/19 15:44:26 | 000,163,840 | ---- | C] (Tidestone Technologies, Inc.) -- C:\Windows\System32\TTF16DE.DLL
[2099/03/19 15:41:25 | 000,328,704 | ---- | C] (InstallShield Software Corporation ) -- C:\Windows\IsUn0407.exe
[2050/05/15 02:01:21 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2012/04/18 20:55:52 | 000,000,000 | -HSD | C] -- C:\found.000
[2012/04/18 15:13:09 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming\Avira
[2012/04/18 15:08:53 | 000,000,000 | ---D | C] -- C:\Users\administrator2\Documents\WEKA
[2012/04/18 15:07:43 | 000,000,000 | R--D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012/04/18 15:07:43 | 000,000,000 | R--D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012/04/18 15:07:43 | 000,000,000 | -H-D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2012/04/18 15:07:24 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming\Identities
[2012/04/18 15:06:49 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local\VirtualStore
[2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\AppData\Local\Verlauf
[2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\AppData\Local\Temporary Internet Files
[2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\Documents\Eigene Videos
[2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\Documents\Eigene Musik
[2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\Documents\Eigene Bilder
[2012/04/18 15:06:22 | 000,000,000 | -HSD | C] -- C:\Users\administrator2\AppData\Local\Anwendungsdaten
[2012/04/18 15:06:22 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\LocalLow
[2012/04/18 15:06:21 | 000,000,000 | --SD | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft
[2012/04/18 15:06:21 | 000,000,000 | R--D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012/04/18 15:06:21 | 000,000,000 | R--D | C] -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local\Temp
[2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming
[2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local\Microsoft Help
[2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local\Microsoft
[2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming\Media Center Programs
[2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Roaming\Macromedia
[2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2\AppData\Local
[2012/04/18 15:06:21 | 000,000,000 | ---D | C] -- C:\Users\administrator2
[2012/04/18 14:48:23 | 000,000,000 | -H-D | C] -- C:\Security Administrator
[2012/04/18 14:27:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Administrator
[2012/04/18 14:27:50 | 000,000,000 | ---D | C] -- C:\Program Files\Security Administrator
[2012/04/16 11:17:03 | 000,418,464 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012/04/11 17:55:41 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012/04/11 17:55:39 | 001,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012/04/11 17:55:39 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2012/04/11 17:55:38 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012/04/11 17:55:37 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012/04/11 17:55:37 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012/04/11 17:55:36 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012/04/11 15:10:56 | 000,107,368 | R--- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012/04/22 14:00:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/04/22 13:43:41 | 000,015,152 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/04/22 13:43:41 | 000,015,152 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/04/22 13:40:01 | 000,836,234 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012/04/22 13:40:01 | 000,779,460 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/04/22 13:40:01 | 000,201,596 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012/04/22 13:40:01 | 000,173,318 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/04/22 13:38:42 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/04/22 13:35:18 | 2816,872,448 | -HS- | M] () -- C:\hiberfil.sys
[2012/04/18 20:57:42 | 000,003,552 | ---- | M] () -- C:\bootsqm.dat
[2012/04/18 20:35:12 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/04/18 20:23:47 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/04/18 14:27:53 | 000,001,978 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safe Web Browser.lnk
[2012/04/18 14:27:53 | 000,001,974 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screen Lock.lnk
[2012/04/18 14:27:53 | 000,001,966 | ---- | M] () -- C:\Users\Public\Desktop\Safe Web Browser.lnk
[2012/04/18 14:27:53 | 000,001,962 | ---- | M] () -- C:\Users\Public\Desktop\Screen Lock.lnk
[2012/04/18 14:27:53 | 000,001,067 | ---- | M] () -- C:\Users\Krames\Desktop\Security Administrator.lnk
[2012/04/18 14:27:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Administrator
[2012/04/16 15:04:18 | 000,210,432 | ---- | M] () -- C:\Users\Krames\AppData\Roaming\soundblaster_fx648.exe
[2012/04/16 11:17:03 | 000,418,464 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012/04/16 11:17:03 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012/04/12 07:27:42 | 000,001,107 | ---- | M] () -- C:\Users\Krames\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook starten.lnk
[2012/04/12 07:23:05 | 000,435,280 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/04/11 17:16:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Moeller Software
[2012/04/11 15:46:18 | 000,000,284 | ---- | M] () -- C:\Users\Krames\Documents\cc_20120411_214559.reg
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2099/03/19 15:45:58 | 000,094,208 | ---- | C] () -- C:\Windows\System32\cute2mon2k.dll
[2099/03/19 15:45:58 | 000,053,248 | ---- | C] () -- C:\Windows\System32\uninstcp.exe
[2012/04/18 20:57:42 | 000,003,552 | ---- | C] () -- C:\bootsqm.dat
[2012/04/18 15:07:50 | 000,001,413 | ---- | C] () -- C:\Users\administrator2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012/04/18 15:06:21 | 000,000,290 | ---- | C] () -- C:\Users\administrator2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2012/04/18 15:06:21 | 000,000,272 | ---- | C] () -- C:\Users\administrator2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2012/04/18 14:27:53 | 000,001,978 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safe Web Browser.lnk
[2012/04/18 14:27:53 | 000,001,974 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screen Lock.lnk
[2012/04/18 14:27:53 | 000,001,966 | ---- | C] () -- C:\Users\Public\Desktop\Safe Web Browser.lnk
[2012/04/18 14:27:53 | 000,001,962 | ---- | C] () -- C:\Users\Public\Desktop\Screen Lock.lnk
[2012/04/18 14:27:53 | 000,001,067 | ---- | C] () -- C:\Users\Krames\Desktop\Security Administrator.lnk
[2012/04/18 14:27:52 | 000,001,097 | ---- | C] () -- C:\Users\Krames\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Administrator.lnk
[2012/04/16 15:04:20 | 000,210,432 | ---- | C] () -- C:\Users\Krames\AppData\Roaming\soundblaster_fx648.exe
[2012/04/16 11:17:07 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/04/11 15:46:06 | 000,000,284 | ---- | C] () -- C:\Users\Krames\Documents\cc_20120411_214559.reg
[2011/11/04 13:08:15 | 000,451,072 | ---- | C] () -- C:\Windows\System32\ISSRemoveSP.exe
[2011/08/23 15:17:50 | 000,005,002 | ---- | C] () -- C:\ProgramData\bwxcldpn.mmu
[2011/08/22 11:56:30 | 000,003,654 | ---- | C] () -- C:\Windows\System32\drivers\Sonyhcp.dll
[2011/07/26 08:59:05 | 000,252,928 | ---- | C] () -- C:\Windows\System32\DShowRdpFilter.dll
[2011/06/10 01:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011/04/19 10:27:00 | 000,001,940 | ---- | C] () -- C:\Users\Krames\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2011/01/03 16:23:37 | 000,000,245 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2010/11/11 05:28:02 | 000,000,396 | ---- | C] () -- C:\Windows\SHISETUP.SYS
[2010/05/14 16:56:29 | 000,086,016 | ---- | C] () -- C:\Windows\System32\custmon32.dll
[2010/02/05 13:25:12 | 000,000,383 | ---- | C] () -- C:\Windows\System32\haspdos.sys
[2010/02/01 15:37:02 | 000,007,601 | ---- | C] () -- C:\Users\Krames\AppData\Local\resmon.resmoncfg
[2010/01/28 16:09:11 | 000,001,471 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2010/01/28 15:05:32 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2010/01/27 17:18:20 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/07/14 04:47:43 | 000,836,234 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009/07/14 04:47:43 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009/07/14 04:47:43 | 000,201,596 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009/07/14 04:47:43 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009/07/14 00:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 00:33:53 | 000,435,280 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/13 22:05:48 | 000,779,460 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009/07/13 22:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009/07/13 22:05:48 | 000,173,318 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009/07/13 22:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009/07/13 22:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009/07/13 22:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009/07/13 19:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 19:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/06/18 14:29:04 | 000,197,654 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2008/11/05 08:42:45 | 000,062,400 | ---- | C] () -- C:\Windows\System32\IFC.dll
[2008/11/05 08:41:56 | 000,422,848 | ---- | C] () -- C:\Windows\System32\PPL.dll
[2005/12/21 12:57:36 | 000,139,264 | ---- | C] () -- C:\Windows\System32\nsldap32v50.dll
[2005/12/21 12:57:04 | 000,024,576 | ---- | C] () -- C:\Windows\System32\nsldappr32v50.dll
[2005/12/21 12:54:34 | 000,040,960 | ---- | C] () -- C:\Windows\System32\nsldapssl32v50.dll
[2003/02/20 13:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
 
========== LOP Check ==========
 
[2010/02/01 15:21:14 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Ansys
[2011/05/05 16:16:32 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Autodesk
[2011/08/22 10:38:05 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Babylon
[2010/10/05 14:48:09 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\DYMO
[2010/07/14 10:32:51 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\EIBA sc
[2012/02/03 14:03:13 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\elsterformular
[2011/06/27 04:42:48 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\JGoodies
[2011/10/23 03:56:34 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Kalenderchen
[2011/08/23 15:17:54 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\MOVAVI
[2010/12/25 15:39:06 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\NCH Swift Sound
[2010/11/04 16:22:22 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Perspectix
[2011/05/18 10:13:12 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\PhotoScape
[2011/12/09 17:48:33 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Reviversoft
[2011/11/03 16:04:52 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\Tific
[2011/02/28 16:08:46 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\TuneUp Software
[2011/11/04 12:42:31 | 000,000,000 | ---D | M] -- C:\Users\Krames\AppData\Roaming\WinBatch
[2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Anwendungsdaten
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
[2011/05/23 03:55:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Autodesk
[2011/08/22 10:38:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Babylon
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
[2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumente
[2011/05/31 09:41:11 | 000,000,000 | ---D | M] -- C:\ProgramData\EasternGraphics
[2010/02/05 13:24:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Elka Shared
[2012/04/03 04:27:53 | 000,000,000 | ---D | M] -- C:\ProgramData\elsterformular
[2011/01/28 13:39:43 | 000,000,000 | ---D | M] -- C:\ProgramData\EPSON
[2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoriten
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
[2011/04/27 14:14:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Fighters
[2011/01/17 14:26:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Kaco
[2010/12/06 14:46:10 | 000,000,000 | ---D | M] -- C:\ProgramData\KNX
[2011/10/28 16:20:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Lernwerkstatt 8
[2010/12/25 15:40:00 | 000,000,000 | ---D | M] -- C:\ProgramData\NCH Swift Sound
[2011/12/09 17:31:11 | 000,000,000 | ---D | M] -- C:\ProgramData\PC Drivers HeadQuarters
[2010/11/02 15:44:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Perspectix
[2010/11/11 05:31:20 | 000,000,000 | ---D | M] -- C:\ProgramData\SHI
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Startmenü
[2011/02/01 14:14:55 | 000,000,000 | ---D | M] -- C:\ProgramData\T-Online
[2009/07/14 00:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
[2011/02/28 16:10:28 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software
[2010/01/27 17:24:43 | 000,000,000 | -HSD | M] -- C:\ProgramData\Vorlagen
[2011/10/18 12:36:10 | 000,000,000 | -H-D | M] -- C:\ProgramData\{187CDB7E-5180-4643-A637-F6CA293521DB}
[2011/02/28 16:06:46 | 000,000,000 | -HSD | M] -- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2011/07/07 15:06:52 | 000,000,000 | -H-D | M] -- C:\ProgramData\{599E53C0-48DF-4A06-B070-8598456CD71C}
[2011/10/18 12:35:13 | 000,000,000 | -H-D | M] -- C:\ProgramData\{8CDFAF9A-B88D-4006-81F1-9D33BC1B78B0}
[2011/06/22 16:24:26 | 000,000,000 | ---D | M] -- C:\ProgramData\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}
[2011/02/28 15:58:54 | 000,000,000 | -HSD | M] -- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2012/03/06 08:40:48 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
< End of report >
         
--- --- ---

Geändert von Krames (22.04.2012 um 20:53 Uhr) Grund: Korrektur

 

Themen zu Weisser Bildschirm und Meldung "Verbindung wird hergestellt.
administrator, adobe, adobe flash player, antivir, askbar, avira, bildschirm, defender, desktop, error, explorer, firefox, flash player, format, home, langs, launch, logfile, microsoft, nodrives, object, opera, plug-in, realtek, registry, scan, security, software, virus, winlogon




Ähnliche Themen: Weisser Bildschirm und Meldung "Verbindung wird hergestellt.


  1. Tronjaner Weisser Bildschirm: Warten Sie während die Verbindung hergestellt wird.
    Plagegeister aller Art und deren Bekämpfung - 06.08.2012 (15)
  2. Trojaner - Weisser Bildschirm "Bitte warten Sie während die Verbindung hergestellt wird."
    Plagegeister aller Art und deren Bekämpfung - 10.07.2012 (4)
  3. Weisser Bildschirm "Warten Sie während die Verbindung hergestellt wird"
    Log-Analyse und Auswertung - 27.06.2012 (5)
  4. Weisser Bildschirm; "Warten bis Verbindung hergestellt wird"
    Plagegeister aller Art und deren Bekämpfung - 18.06.2012 (3)
  5. Weisser Bildschirm nach PC Start verbindung wird hergestellt bei Windows Vista
    Plagegeister aller Art und deren Bekämpfung - 10.06.2012 (1)
  6. Trojaner - Meldung "Warten bis die Verbindung hergestellt wird"
    Log-Analyse und Auswertung - 29.05.2012 (1)
  7. Weisser Bildschirm, Verbindung wird hergestellt
    Log-Analyse und Auswertung - 16.04.2012 (9)
  8. Weisser Bildschirm Warten sie waehrend die Verbindung hergestellt wird
    Log-Analyse und Auswertung - 15.04.2012 (5)
  9. Weisser Bildschirm Warten sie waehrend die Verbindung hergestellt wird
    Log-Analyse und Auswertung - 10.04.2012 (1)
  10. Tojaner Bitte warten Sie bis die Verbindung hergestellt wird weisser Bildschirm und Laufwerkproblem
    Plagegeister aller Art und deren Bekämpfung - 08.04.2012 (1)
  11. Weisser Bildschirm - Warten sie während die Verbindung mit dem Internet hergestellt wird - Win Xp
    Log-Analyse und Auswertung - 25.03.2012 (3)
  12. XP Weisser Bildschirm, bitte warten, während eine Verbindung hergestellt wird...
    Log-Analyse und Auswertung - 25.03.2012 (3)
  13. Anstatt Desktop Weisser Bildschirm: Bitte warten sie während die Verbindung hergestellt wird
    Plagegeister aller Art und deren Bekämpfung - 19.03.2012 (9)
  14. Weisser Bildschirm, Bitte warten Sie waehrend die Verbindung hergestellt wird
    Log-Analyse und Auswertung - 15.03.2012 (5)
  15. Weißer Bildschirm und :"warten sie während die verbindung hergestellt wird"
    Plagegeister aller Art und deren Bekämpfung - 12.03.2012 (9)
  16. Weisser Bildschirm mit der Meldung: Warten Sie während die Verbindung erstellt wird
    Log-Analyse und Auswertung - 07.03.2012 (1)
  17. Win XP - Weisser Bildschirm "Warten sie während die Verbindung mit dem Internet hergestellt wird"
    Log-Analyse und Auswertung - 23.02.2012 (8)

Zum Thema Weisser Bildschirm und Meldung "Verbindung wird hergestellt. - Hallo habe hier einen Laptop stehen der glaube ich für euch einen alten Bekannten Virus sich eingefangen hat. Nach dem Anmelden kommt ein Weisser Bildschirm und es steht der Satz: - Weisser Bildschirm und Meldung "Verbindung wird hergestellt....
Archiv
Du betrachtest: Weisser Bildschirm und Meldung "Verbindung wird hergestellt. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.