U-kash! Neuer BKA Virus

micha1987

Hallo,

hab mir gestern beim Serven leider einen Trojaner eingefangen.
Es handelt sich wahrscheinlich um den BKA Trojaner mit der
Aufforderung bei Tankstellen ukash zu kaufen. Leider kann ich es nicht
genau beschreiben, weil ich meinen PC ausgemacht habe und seither ist
er nicht mehr aufgetaucht. Ich gehe aber davon aus dass er nicht weg
ist und habe deshalb schon mal OTL und Malwarebytes laufen lassen.
Hier die Ergebnisse. Ich hoffe ihr könnt mir helfen.

Danke schonmal im Voraus.

Micha1987

OTL.txt:

OTL logfile created on: 30.06.2012 13:03:02 - Run 1
OTL by OldTimer - Version 3.2.53.0 Folder = C:\Users\Mandy\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1,75 Gb Total Physical Memory | 0,98 Gb Available Physical Memory | 55,98% Memory free
3,75 Gb Paging File | 2,82 Gb Available in Paging File | 75,29% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 127,24 Gb Total Space | 22,42 Gb Free Space | 17,62% Space Free | Partition Type: NTFS
Drive D: | 21,80 Gb Total Space | 12,77 Gb Free Space | 58,59% Space Free | Partition Type: FAT32
Drive F: | 956,50 Mb Total Space | 934,08 Mb Free Space | 97,66% Space Free | Partition Type: FAT

Computer Name: MANDY-PC | User Name: Mandy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Mandy\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Programme\COMODO\COMODO Internet Security\cfp.exe (COMODO)
PRC - C:\Programme\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
PRC - C:\Programme\COMODO\COMODO GeekBuddy\CLPSLS.exe (COMODO)
PRC - C:\Programme\COMODO\COMODO GeekBuddy\CLPS.exe (COMODO)
PRC - C:\Programme\Kodak\KODAK Share Button App\Listener.exe (Eastman Kodak Company)
PRC - C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Windows\System32\spool\drivers\w32x86\3\E_FATIHAE.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Programme\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
PRC - C:\Programme\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ABBYY)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\dlbccoms.exe ( )
PRC - C:\Programme\Common Files\EPSON\EBAPI\eEBSvc.exe (SEIKO EPSON CORPORATION)
PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems)


========== Modules (No Company Name) ==========

MOD - C:\Users\Mandy\AppData\Local\Temp\wpbt0.dll ()
MOD - C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
MOD - C:\Windows\System32\atitmmxx.dll ()


========== Win32 Services (SafeList) ==========

SRV - (ACDaemon) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe File not found
SRV - (cmdAgent) -- C:\Programme\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
SRV - (CLPSLS) -- C:\Programme\COMODO\COMODO GeekBuddy\CLPSLS.exe (COMODO)
SRV - (ABBYY.Licensing.FineReader.Sprint.9.0) -- C:\Programme\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ABBYY)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (dlbc_device) -- C:\Windows\System32\dlbccoms.exe ( )
SRV - (EpsonBidirectionalService) -- C:\Programme\Common Files\EPSON\EBAPI\eEBSvc.exe (SEIKO EPSON CORPORATION)
SRV - (odserv) -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (AgereModemAudio) -- C:\Windows\System32\agrsmsvc.exe (Agere Systems)


========== Driver Services (SafeList) ==========

DRV - (pccsmcfd) -- system32\DRIVERS\pccsmcfd.sys File not found
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) -- C:\Windows\system32\drivers\blbdrive.sys File not found
DRV - (cmdGuard) -- C:\Windows\System32\drivers\cmdGuard.sys (COMODO)
DRV - (sptd) -- C:\Windows\System32\drivers\sptd.sys ()
DRV - (inspect) -- C:\Windows\System32\drivers\inspect.sys (COMODO)
DRV - (cmdHlp) -- C:\Windows\System32\drivers\cmdhlp.sys (COMODO)
DRV - (cmderd) -- C:\Windows\System32\drivers\cmderd.sys (COMODO)
DRV - (Netaapl) -- C:\Windows\System32\drivers\netaapl.sys (Apple Inc.)
DRV - (FsUsbExDisk) -- C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation )
DRV - (rt61x86) -- C:\Windows\System32\drivers\netr61.sys (Ralink Technology Corp.)
DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (w810obex) -- C:\Windows\System32\drivers\w810obex.sys (MCCI)
DRV - (w810mgmt) Sony Ericsson W810 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\w810mgmt.sys (MCCI)
DRV - (w810mdm) -- C:\Windows\System32\drivers\w810mdm.sys (MCCI)
DRV - (w810mdfl) -- C:\Windows\System32\drivers\w810mdfl.sys (MCCI)
DRV - (w810bus) Sony Ericsson W810 Driver driver (WDM) -- C:\Windows\System32\drivers\w810bus.sys (MCCI)
DRV - (O2MDRDR) -- C:\Windows\System32\drivers\o2media.sys (O2Micro )


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.searchgateway.net/search/
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKLM\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q={searchTerms}&crm=1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.searchgateway.net/search/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.searchgateway.net/search/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{342168F8-AE4A-41E8-A6B5-8FB9FECBEF37}: "URL" = hxxp://browser.myquickfinder.com/browserSearch.do?keyword={searchTerms}
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKCU\..\SearchScopes\{BE9654C9-9D79-42ec-B55A-3CAEB12DBF58}: "URL" = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q={searchTerms}&crm=1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.startup.homepage: "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13"
FF - prefs.js..extensions.enabledItems: {E63605FC-D583-4C81-867F-9457BDB3EA1B}:3.1.0.1840
FF - prefs.js..extensions.enabledItems: {8141440E-08F0-4339-9959-5C31C6A69F23}:4.1.0.5190
FF - prefs.js..extensions.enabledItems: {E889F097-B0BE-471B-89AD-B86B6F04B506}:3.1.0.1630
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:2.7.1.3
FF - prefs.js..extensions.enabledItems: {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.5.6.0
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.8.1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.5
FF - prefs.js..keyword.URL: "chrome://browser-region/locale/region.properties"
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\3.1.0.1840\FF [2009.11.30 18:29:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF [2009.11.30 18:30:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF [2009.11.30 18:31:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.04.20 21:55:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.12.31 18:59:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.04.20 21:55:00 | 000,000,000 | ---D | M]

[2010.03.07 19:04:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mandy\AppData\Roaming\mozilla\Extensions
[2012.05.05 17:06:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mandy\AppData\Roaming\mozilla\Firefox\Profiles\48wka2nl.default\extensions
[2012.05.05 17:06:14 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Mandy\AppData\Roaming\mozilla\Firefox\Profiles\48wka2nl.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.11.20 17:39:10 | 000,000,931 | ---- | M] () -- C:\Users\Mandy\AppData\Roaming\Mozilla\Firefox\Profiles\48wka2nl.default\searchplugins\conduit.xml
[2012.02.04 15:29:10 | 000,003,915 | ---- | M] () -- C:\Users\Mandy\AppData\Roaming\Mozilla\Firefox\Profiles\48wka2nl.default\searchplugins\sweetim.xml
[2012.02.12 18:27:49 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011.12.31 18:59:42 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\distribution\extensions
[2011.12.31 18:59:42 | 000,000,000 | ---D | M] (WEB.DE Toolbar) -- C:\Programme\Mozilla Firefox\distribution\extensions\toolbar@web.de
[2012.04.20 21:55:01 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 <video&gt -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
[2012.04.01 18:48:48 | 000,568,877 | ---- | M] () (No name found) -- C:\USERS\MANDY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\48WKA2NL.DEFAULT\EXTENSIONS\TOOLBAR@WEB.DE.XPI
[2011.12.17 07:09:20 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.12.17 03:32:55 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.12.17 03:25:53 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.12.17 03:32:55 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.12.17 03:32:55 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.03.21 22:31:21 | 000,002,405 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\questservice145.xml
[2011.12.17 03:32:55 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.12.17 03:32:55 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{googleriginalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFiel dTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Mandy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\
CHR - Extension: Google-Suche = C:\Users\Mandy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Google Mail = C:\Users\Mandy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\

O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Programme\ICQToolbar\toolbaru.dll (IE Toolbar)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5190\ACEIEAddOn.dll File not found
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1630\CPAIEAddOn.dll File not found
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Programme\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1870\CMWIE.dll File not found
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Programme\Web Search Operator\3.1.0.1840\WSO.dll ()
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Programme\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKCU\..\Toolbar\WebBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O4 - HKLM..\Run: [COMODO] C:\Programme\COMODO\COMODO GeekBuddy\CLPSLA.exe (COMODO)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [CPA] C:\Programme\COMODO\COMODO GeekBuddy\VALA.exe (COMODO)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [Epson Stylus SX430(Netzwerk)] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIHAE.EXE (SEIKO EPSON CORPORATION)
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Mandy\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: fritz.box ([]* in Local intranet)
O15 - HKCU\..Trusted Ranges: Range1 ([*] in Local intranet)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7388CDCA-66A4-4526-965E-1764FFC90AFF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E1BB8293-EDB6-4272-AD1B-88C4280437AF}: DhcpNameServer = 193.254.160.130 193.254.160.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\Windows\system32\guard32.dll) - C:\Windows\System32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Mandy\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Mandy\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{1fe0a9c9-26e0-11df-965a-0019dbebf269}\Shell - "" = AutoRun
O33 - MountPoints2\{1fe0a9c9-26e0-11df-965a-0019dbebf269}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{502cba37-80b7-11e0-b636-0019dbebf269}\Shell - "" = AutoRun
O33 - MountPoints2\{502cba37-80b7-11e0-b636-0019dbebf269}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{61d8643e-9066-11e0-9cea-0019dbebf269}\Shell - "" = AutoRun
O33 - MountPoints2\{61d8643e-9066-11e0-9cea-0019dbebf269}\Shell\AutoRun\command - "" = G:\KODAK_Camera_Setup_App.exe
O33 - MountPoints2\{652396f4-cd24-11df-b010-0019dbebf269}\Shell - "" = AutoRun
O33 - MountPoints2\{652396f4-cd24-11df-b010-0019dbebf269}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{94a258e1-95a7-11de-8d1e-0019dbebf269}\Shell - "" = AutoRun
O33 - MountPoints2\{94a258e1-95a7-11de-8d1e-0019dbebf269}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{d4a56856-ae03-11de-b74e-0019dbebf269}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012.06.30 13:01:06 | 000,000,000 | ---D | C] -- C:\Users\Mandy\AppData\Roaming\Malwarebytes
[2012.06.30 13:01:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.06.30 13:00:11 | 000,596,992 | ---- | C] (OldTimer Tools) -- C:\Users\Mandy\Desktop\OTL.exe
[2012.06.27 17:39:23 | 000,000,000 | ---D | C] -- C:\Users\Mandy\Desktop\Neuer Ordner
[2012.06.23 16:29:16 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2012.06.23 16:29:16 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2012.06.23 11:12:29 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2012.06.23 11:12:29 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2012.06.22 18:12:54 | 000,000,000 | ---D | C] -- C:\GVService-Sicherung
[2012.06.22 18:12:39 | 000,000,000 | ---D | C] -- C:\Users\Mandy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GVService
[2012.06.22 18:12:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GVService
[2012.06.22 15:38:10 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.06.22 15:38:08 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.06.22 15:38:08 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.06.22 15:38:08 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.06.22 15:38:07 | 001,800,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.06.22 15:38:07 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.06.22 15:38:06 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.06.16 14:50:37 | 002,045,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys

========== Files - Modified Within 30 Days ==========

[2012.06.30 13:01:31 | 000,628,742 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.06.30 13:01:31 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.06.30 13:01:31 | 000,126,260 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.06.30 13:01:31 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.06.30 12:52:52 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Mandy\Desktop\OTL.exe
[2012.06.30 12:39:19 | 000,003,264 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.06.30 12:39:16 | 000,003,264 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.06.30 12:36:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.06.30 12:35:50 | 1878,450,176 | -HS- | M] () -- C:\hiberfil.sys
[2012.06.30 12:35:45 | 001,474,832 | ---- | M] () -- C:\Windows\System32\drivers\sfi.dat
[2012.06.29 20:18:54 | 004,503,728 | ---- | M] () -- C:\ProgramData\0tbpw.pad
[2012.06.29 20:17:40 | 000,001,718 | ---- | M] () -- C:\Users\Mandy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012.06.27 17:39:39 | 000,043,520 | ---- | M] () -- C:\Users\Mandy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.06.23 11:16:13 | 000,339,368 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.06.22 18:14:34 | 000,001,581 | ---- | M] () -- C:\Users\Mandy\Desktop\GVService Fernwartung.lnk
[2012.06.22 18:13:27 | 000,001,438 | ---- | M] () -- C:\Users\Mandy\Desktop\GVService HomeWork.lnk
[2012.06.22 18:13:27 | 000,001,428 | ---- | M] () -- C:\Users\Mandy\Desktop\GVService Notfall-Rücksicherung.lnk
[2012.06.22 18:13:27 | 000,001,418 | ---- | M] () -- C:\Users\Mandy\Desktop\GVService für Windows.lnk
[2012.06.03 00:19:33 | 000,045,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2012.06.03 00:12:32 | 002,422,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2012.06.02 15:19:42 | 000,171,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2012.06.02 15:12:20 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe

========== Files Created - No Company Name ==========

[2012.06.30 12:35:50 | 1878,450,176 | -HS- | C] () -- C:\hiberfil.sys
[2012.06.29 20:17:40 | 000,001,718 | ---- | C] () -- C:\Users\Mandy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012.06.29 20:17:39 | 004,503,728 | ---- | C] () -- C:\ProgramData\0tbpw.pad
[2012.06.22 18:14:34 | 000,001,581 | ---- | C] () -- C:\Users\Mandy\Desktop\GVService Fernwartung.lnk
[2012.06.22 18:13:27 | 000,001,438 | ---- | C] () -- C:\Users\Mandy\Desktop\GVService HomeWork.lnk
[2012.06.22 18:13:27 | 000,001,428 | ---- | C] () -- C:\Users\Mandy\Desktop\GVService Notfall-Rücksicherung.lnk
[2012.06.22 18:12:40 | 000,001,418 | ---- | C] () -- C:\Users\Mandy\Desktop\GVService für Windows.lnk
[2012.01.11 22:34:58 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2012.01.11 21:54:03 | 000,000,680 | ---- | C] () -- C:\Users\Mandy\AppData\Local\d3d9caps.dat
[2012.01.08 15:05:33 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2012.01.08 15:05:32 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2011.12.29 12:24:54 | 001,474,832 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat
[2011.12.27 23:29:56 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011.04.07 10:39:20 | 000,000,331 | ---- | C] () -- C:\Windows\hegames.ini
[2009.09.21 04:55:39 | 000,007,543 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{D295AAF0-5492-44F9-97BD-D6FAB92F5640}_Large.jpg
[2009.09.21 04:55:39 | 000,002,020 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{D295AAF0-5492-44F9-97BD-D6FAB92F5640}_Small.jpg
[2009.09.21 04:52:48 | 000,003,086 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{D1311D0A-93B0-4DF3-9B55-8F10B6946A6A}_Large.jpg
[2009.09.21 04:52:48 | 000,001,177 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{D1311D0A-93B0-4DF3-9B55-8F10B6946A6A}_Small.jpg
[2009.09.21 04:51:18 | 000,005,850 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{5F05333C-79B1-450C-B256-977DD0C64F8E}_Large.jpg
[2009.09.21 04:51:18 | 000,001,956 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{5F05333C-79B1-450C-B256-977DD0C64F8E}_Small.jpg
[2009.09.21 04:50:02 | 000,007,182 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{D67C239B-0711-4608-8BB1-7DD6F352D768}_Large.jpg
[2009.09.21 04:50:02 | 000,002,358 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{D67C239B-0711-4608-8BB1-7DD6F352D768}_Small.jpg
[2009.09.21 04:49:42 | 000,006,664 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{93468A25-E18E-4C6C-B6FD-B2521D30BB55}_Large.jpg
[2009.09.21 04:49:42 | 000,002,170 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{93468A25-E18E-4C6C-B6FD-B2521D30BB55}_Small.jpg
[2009.09.21 04:49:37 | 000,004,052 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{E740091E-CAFA-486D-8183-47BDC0385ABA}_Large.jpg
[2009.09.21 04:49:37 | 000,001,332 | -HS- | C] () -- C:\Users\Mandy\AlbumArt_{E740091E-CAFA-486D-8183-47BDC0385ABA}_Small.jpg
[2009.09.11 15:37:24 | 000,004,859 | -HS- | C] () -- C:\Users\Mandy\Folder.jpg
[2009.09.11 15:37:24 | 000,001,919 | -HS- | C] () -- C:\Users\Mandy\AlbumArtSmall.jpg
[2008.02.28 21:03:26 | 000,043,520 | ---- | C] () -- C:\Users\Mandy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.02.04 19:38:03 | 000,000,000 | ---- | C] () -- C:\Users\Mandy\AppData\Roaming\wklnhst.dat

========== LOP Check ==========

[2008.02.04 20:48:24 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\Briquolo
[2008.02.04 20:21:24 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\CDZilla
[2012.05.05 17:07:33 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\DVDVideoSoft
[2011.11.20 19:00:42 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.05.13 03:44:31 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\Epson
[2012.01.26 21:04:00 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\FRITZ!
[2008.06.01 12:54:45 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\ICQ Toolbar
[2012.01.22 13:38:45 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\OpenOffice.org
[2009.11.09 08:05:05 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\PC Suite
[2011.11.20 20:34:30 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\Samsung
[2008.06.07 14:12:22 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\ScummVM
[2011.06.21 20:17:11 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\Skinux
[2008.02.04 19:38:15 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\Template
[2009.09.11 15:34:48 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\Trillian
[2009.01.02 15:05:48 | 000,000,000 | ---D | M] -- C:\Users\Mandy\AppData\Roaming\Zylom
[2012.06.23 11:14:06 | 000,032,538 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



< End of report >


Extras.txt:

OTL Extras logfile created on: 30.06.2012 13:03:02 - Run 1
OTL by OldTimer - Version 3.2.53.0 Folder = C:\Users\Mandy\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1,75 Gb Total Physical Memory | 0,98 Gb Available Physical Memory | 55,98% Memory free
3,75 Gb Paging File | 2,82 Gb Available in Paging File | 75,29% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 127,24 Gb Total Space | 22,42 Gb Free Space | 17,62% Space Free | Partition Type: NTFS
Drive D: | 21,80 Gb Total Space | 12,77 Gb Free Space | 58,59% Space Free | Partition Type: FAT32
Drive F: | 956,50 Mb Total Space | 934,08 Mb Free Space | 97,66% Space Free | Partition Type: FAT

Computer Name: MANDY-PC | User Name: Mandy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~3\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{13851DAA-0782-4083-8986-ADEB1CE2E9FA}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{4373F618-C6FF-480A-A26E-4A222107CD99}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{4BC8C53E-906A-4D8D-8EFC-967A3EDCB2CB}" = protocol=6 | dir=in | app=c:\users\mandy\desktop\sweetimsetup.exe |
"{5C62DE77-A837-4AF6-AD43-19C30C2F4E2C}" = protocol=6 | dir=in | app=e:\network\epsonnetsetup\eneasyapp.exe |
"{635336F1-647F-4F7B-8242-28DDDB3AB1B9}" = protocol=6 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsasvr.exe |
"{6AEC43F8-60AC-472A-867A-0EB7697862FA}" = protocol=17 | dir=in | app=c:\windows\system32\dlbccoms.exe |
"{79E062F1-E28D-4FF8-BFD7-BEE85EA69860}" = protocol=17 | dir=in | app=c:\users\mandy\desktop\sweetimsetup.exe |
"{7AA47354-9F4F-4D19-9B76-3E0A3D24D6FE}" = protocol=17 | dir=in | app=e:\network\epsonnetsetup\eneasyapp.exe |
"{7AED0D60-ADF7-4747-9FC6-DF3C8790C3B9}" = protocol=6 | dir=in | app=c:\windows\system32\dlbccoms.exe |
"{A6A01812-52B1-4F73-9D50-AFB75F2826AC}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{AE8C8F59-3802-4448-968A-54C6BD55B066}" = protocol=17 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsvsvr.exe |
"{C1A3B183-D067-492C-AA7D-3DD079F0C5E4}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{C5917F6A-CE0C-405B-A24F-A907A6479EB9}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{C78F4A04-C2FC-4D2A-B3A9-CED6B5CFEC99}" = protocol=6 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsvsvr.exe |
"{CDC5DDED-3DB8-4B44-B50A-B25D24F3992A}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{F1B28A5A-DD01-466B-9CB3-468DA3776A02}" = protocol=17 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsasvr.exe |
"TCP Query User{23C42C45-6A72-45C2-A944-625914022846}C:\program files\icq6\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6\icq.exe |
"TCP Query User{24EB1E4C-F35C-487D-B355-96753094631F}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"TCP Query User{359C6CFB-5633-4834-AEE4-BC377F489763}C:\dr\rpp\bin\java\sybase\sqlanywhere7\win32\dbeng7.exe" = protocol=6 | dir=in | app=c:\dr\rpp\bin\java\sybase\sqlanywhere7\win32\dbeng7.exe |
"TCP Query User{3DF9820B-34AA-4BCC-950F-EC5971FAFD0F}C:\users\mandy\trillian\trillian.exe" = protocol=6 | dir=in | app=c:\users\mandy\trillian\trillian.exe |
"TCP Query User{48EFE2C2-C273-4E68-A034-E9D409EC881B}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe |
"TCP Query User{742023FF-9315-4B4A-95D6-23742EA6442D}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe |
"TCP Query User{784D15DA-5A3D-4945-BCDA-B1E21C3CB971}C:\users\mandy\desktop\unreal tournament\system\unrealtournament.exe" = protocol=6 | dir=in | app=c:\users\mandy\desktop\unreal tournament\system\unrealtournament.exe |
"TCP Query User{856170AF-714B-4FD4-B2FF-72647FD34A28}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{AC554F45-7B4F-4911-8A92-99D1AC9E40D1}C:\dr\rpp\bin\java\j2sdk1.5.0_12\bin\java.exe" = protocol=6 | dir=in | app=c:\dr\rpp\bin\java\j2sdk1.5.0_12\bin\java.exe |
"TCP Query User{B0FBAB36-9FAD-4648-8C7D-2B7E04C24266}C:\program files\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files\epson software\event manager\eeventmanager.exe |
"TCP Query User{D4DD7419-29E9-4DF4-8C6C-7054BEF11F38}C:\program files\icq6\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6\icq.exe |
"UDP Query User{00ED8CC3-B350-4E35-8997-0D2CA0A12DA9}C:\program files\icq6\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6\icq.exe |
"UDP Query User{040309E1-B7A3-4735-A502-881E01CB1F0C}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe |
"UDP Query User{1C224FD1-FDB3-4088-9EB9-B9C7A3A286E2}C:\users\mandy\desktop\unreal tournament\system\unrealtournament.exe" = protocol=17 | dir=in | app=c:\users\mandy\desktop\unreal tournament\system\unrealtournament.exe |
"UDP Query User{52740020-9497-43DA-AC58-DE7D7AC52D83}C:\users\mandy\trillian\trillian.exe" = protocol=17 | dir=in | app=c:\users\mandy\trillian\trillian.exe |
"UDP Query User{5A93B538-B059-4B10-B2FD-0BDDB9E2EFE3}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe |
"UDP Query User{5CD43493-C4D1-4BB0-ACCD-010FA699575C}C:\dr\rpp\bin\java\j2sdk1.5.0_12\bin\java.exe" = protocol=17 | dir=in | app=c:\dr\rpp\bin\java\j2sdk1.5.0_12\bin\java.exe |
"UDP Query User{BDC5819D-C57A-4267-9B0D-E8B8E949ABA5}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{C8CFD337-1CAF-40ED-9DC0-CD697AEBC577}C:\dr\rpp\bin\java\sybase\sqlanywhere7\win32\dbeng7.exe" = protocol=17 | dir=in | app=c:\dr\rpp\bin\java\sybase\sqlanywhere7\win32\dbeng7.exe |
"UDP Query User{C9A91FD5-91F6-477E-9B69-FA41C8A7F122}C:\program files\icq6\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6\icq.exe |
"UDP Query User{F1F96A7C-0A24-42FD-9C11-DAF25272E7AD}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{F4E10757-1C31-44DD-9E05-000427580A23}C:\program files\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files\epson software\event manager\eeventmanager.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}" = ESSPCD
"{19F1A99A-196F-4D18-BC36-C1DAD6ABCCF3}" = KODAK Share-Tastenanwendung
"{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}" = essvatgt
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E31400D-274E-4647-916C-2CACC3741799}" = EpsonNet Print
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{42938595-0D83-404D-9F73-F8177FDD531A}" = ESScore
"{4537EA4B-F603-4181-89FB-2953FC695AB1}" = netbrdg
"{486CC64F-030A-4C9A-8716-87E26D28FKQ2}_is1" = King's Quest II: Romancing the Stones (3.1c)
"{4EAB2511-0135-48CA-A47B-CE1E6836793A}" = COMODO Internet Security
"{5316DFC9-CE99-4458-9AB3-E8726EDE0210}" = skin0001
"{605A4E39-613C-4A12-B56F-DEFBE6757237}" = SHASTA
"{643EAE81-920C-4931-9F0B-4B343B225CA6}" = ESSBrwr
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{8943CE61-53BD-475E-90E1-A580869E98A2}" = staticcr
"{8A502E38-29C9-49FA-BCFA-D727CA062589}" = ESSTOOLS
"{8E92D746-CD9F-4B90-9668-42B74C14F765}" = ESSini
"{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}" = Epson Event Manager
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91517631-A9F3-4B7C-B482-43E0068FD55A}" = ESSgui
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{999D43F4-9709-4887-9B1A-83EBB15A8370}" = VPRINTOL
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}" = Epson Easy Photo Print 2
"{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}" = iTunes
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1031-7B44-A70900000002}" = Adobe Reader 7.0.9 - Deutsch
"{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}" = ESSCDBK
"{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}" = OfotoXMI
"{B2D55EB8-32C5-4B43-9006-9E97DECBA178}" = Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)
"{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}" = CCScore
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D32470A1-B10C-4059-BA53-CF0486F68EBC}" = Kodak EasyShare Software
"{DB02F716-6275-42E9-B8D2-83BA2BF5100B}" = SFR
"{E2BE1618-AF5F-4F7D-8484-42E080EDF609}" = AGEIA PhysX v7.01.12
"{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
"{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}" = SKINXSDK
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F7C1C17E-70E3-475F-BD52-EA554391F15D}" = GameShadow
"{F9000000-0018-0000-0000-074957833700}" = ABBYY FineReader 9.0 Sprint
"{F9593CFB-D836-49BC-BFF1-0E669A411D9F}" = WIRELESS
"{FCDB1C92-03C6-4C76-8625-371224256091}" = ESSPDock
"10F1E938A65BF557A3E257B39BA84856390E8932" = Windows Driver Package - Ralink Technology, Inc. (rt61x86) Net (12/11/2006 2.00.03.0000)
"3D970B9F930E7AAE23C06D39A1AC98548C90B442" = Windows-Treiberpaket - Eastman Kodak KODAK Digital Camera (01/29/2010 1.4.1.0)
"ABBYY FineReader 9.0 Sprint" = ABBYY FineReader 9.0 Sprint
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Agere Systems Soft Modem" = Agere Systems HDA Modem
"Art of Murder 2/DE-German_is1" = Die Kunst des Mordens: Der Marionettenspieler
"COMODO GeekBuddy" = COMODO GeekBuddy
"DivX Setup" = DivX-Setup
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"EPSON Scanner" = EPSON Scan
"EPSON SX430 Series" = EPSON SX430 Series Printer Uninstall
"EPSON SX430 Series Bog" = Benutzerhandbuch - Grundlagen EPSON SX430 Series
"EPSON SX430 Series Netg" = Netzwerkhandbuch EPSON SX430 Series
"EPSON SX430 Series Useg" = Benutzerhandbuch EPSON SX430 Series
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free Audio Converter_is1" = Free Audio Converter version 2.3.4.920
"Free Video to MP3 Converter_is1" = Free Video to MP3 Converter version 4.3.3.908
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.20.423
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox 9.0 (x86 de)" = Mozilla Firefox 9.0 (x86 de)
"ST6UNST #1" = Der Restaurant-Manager 1.5 Vollversion.de Edition
"Uninstall_is1" = Uninstall 1.0.0.1
"VLC media player" = VLC media player 1.0.0-rc1

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GVService" = GVService
"Poster Forge" = Poster Forge 1.01

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 05.05.2012 08:56:00 | Computer Name = Mandy-PC | Source = VSS | ID = 8194
Description =

Error - 05.05.2012 13:09:37 | Computer Name = Mandy-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16421, Zeitstempel
0x4d76255d, fehlerhaftes Modul tbDVDV.dll_unloaded, Version 0.0.0.0, Zeitstempel
0x4f71793d, Ausnahmecode 0xc0000005, Fehleroffset 0x15be38d0, Prozess-ID 0x4bc,
Anwendungsstartzeit 01cd2a33d039091b.

Error - 12.05.2012 05:28:30 | Computer Name = Mandy-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
"Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen. Prozess-ID: 19d0 Anfangszeit: 01cd2b747597bd49 Zeitpunkt
der Beendigung: 57

Error - 12.05.2012 05:42:33 | Computer Name = Mandy-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
"Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen. Prozess-ID: e0c Anfangszeit: 01cd30219b060f2a Zeitpunkt
der Beendigung: 28

Error - 12.05.2012 06:42:38 | Computer Name = Mandy-PC | Source = Application Hang | ID = 1002
Description = Programm firefox.exe, Version 9.0.0.4367 arbeitet nicht mehr mit Windows
zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen
für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem
zu suchen. Prozess-ID: 73c Anfangszeit: 01cd302411ec8f86 Zeitpunkt der Beendigung:
26

Error - 12.05.2012 21:15:14 | Computer Name = Mandy-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 12.05.2012 21:15:16 | Computer Name = Mandy-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 13.05.2012 04:34:59 | Computer Name = Mandy-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
"Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen. Prozess-ID: 8a0 Anfangszeit: 01cd30e2e1d5c60e Zeitpunkt
der Beendigung: 593

Error - 17.05.2012 06:29:54 | Computer Name = Mandy-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16421, Zeitstempel
0x4d76255d, fehlerhaftes Modul Flash11e.ocx, Version 11.1.102.55, Zeitstempel 0x4eaf89fc,
Ausnahmecode 0xc0000005, Fehleroffset 0x001b10d5, Prozess-ID 0x8d0, Anwendungsstartzeit
01cd30e34addb585.

Error - 21.05.2012 14:07:32 | Computer Name = Mandy-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16421, Zeitstempel
0x4d76255d, fehlerhaftes Modul Flash11e.ocx, Version 11.1.102.55, Zeitstempel 0x4eaf89fc,
Ausnahmecode 0xc0000005, Fehleroffset 0x001b10d5, Prozess-ID 0x1484, Anwendungsstartzeit
01cd37784ac263f7.

[ Media Center Events ]
Error - 07.04.2011 04:57:20 | Computer Name = Mandy-PC | Source = Media Center Guide | ID = 0
Description = Ereignisinformationen: ERROR: SqmApiWrapper.SqmFlushSession failed;
Win32 GetLastError returned 0D Prozess: DefaultDomain Objektname: Media Center Guide


Error - 16.08.2011 13:07:24 | Computer Name = Mandy-PC | Source = MCUpdate | ID = 0
Description = Es konnte nicht auf den MCUpdate-Mutex gewartet werden. Ausnahme:
'Der Wartezustand wurde aufgrund eines abgebrochenen Mutex beendet.'.

[ System Events ]
Error - 30.06.2012 05:47:41 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 30.06.2012 05:47:41 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 30.06.2012 05:47:41 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 30.06.2012 05:47:41 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 30.06.2012 05:47:41 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7026
Description =

Error - 30.06.2012 05:47:41 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 30.06.2012 05:47:41 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 30.06.2012 05:47:41 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 30.06.2012 05:48:02 | Computer Name = Mandy-PC | Source = Service Control Manager | ID = 7001
Description =

Error - 30.06.2012 06:36:06 | Computer Name = Mandy-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am 30.06.2012 um 12:06:59 unerwartet heruntergefahren.


< End of report >



Malwarebytes:

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.06.30.05

Windows Vista Service Pack 2 x86 FAT
Internet Explorer 9.0.8112.16421
Mandy :: MANDY-PC [Administrator]

Schutz: Aktiviert

30.06.2012 13:39:50
mbam-log-2012-06-30 (13-53-34).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 198275
Laufzeit: 11 Minute(n), 17 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 51
HKCR\CLSID\{1D74E9DD-8987-448b-B2CB-67FFF2B8A932} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{565DD573-549E-4da9-8CD7-6AE3DF25339A} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\Interface\{877F3EAB-4462-44DF-8475-6064EAFD7FBF} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\ExplorerBar.FunExplorer.1 (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\ExplorerBar.FunExplorer (Adware.Agent) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D74E9DD-8987-448B-B2CB-67FFF2B8A932} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D74E9DD-8987-448B-B2CB-67FFF2B8A932} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D74E9DD-8987-448B-B2CB-67FFF2B8A932} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\CLSID\{3DE88BEB-F271-484A-BA71-01D30F439F0C} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCR\CLSID\{42C7C39F-3128-4a17-BDB7-91C46032B5B9} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{AC5AB953-ED25-4f9c-87F0-B086B0178FFA} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\Interface\{6160F76A-1992-4B17-A32D-0C706D159105} (Adware.Agent) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42C7C39F-3128-4A17-BDB7-91C46032B5B9} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{42C7C39F-3128-4A17-BDB7-91C46032B5B9} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{42C7C39F-3128-4A17-BDB7-91C46032B5B9} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\CLSID\{50AD41D2-B1F0-47CC-9EA7-395355EAEEBD} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCR\CLSID\{8CEB185E-81A5-46D3-BC20-C555D605AFBD} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCR\CLSID\{A72522BA-9FF3-4C83-ABC6-9B476728A396} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCR\CLSID\{B72681C0-A222-4b21-A0E2-53A5A5CA3D41} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{F5B8C69C-9B45-4a6a-9380-DF225C546AE7} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\Interface\{629CD6C2-E4C5-4554-AEB8-12E4E2CD40FF} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\ExplorerBar.CMW.1 (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\ExplorerBar.CMW (Adware.Agent) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B72681C0-A222-4B21-A0E2-53A5A5CA3D41} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{B72681C0-A222-4B21-A0E2-53A5A5CA3D41} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B72681C0-A222-4B21-A0E2-53A5A5CA3D41} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\CLSID\{C5762628-AE15-4ca6-96C4-B00DD17F3419} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCR\CLSID\{D062E03E-65CA-49E4-9B15-31938BA98922} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCR\CLSID\{EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{883DFC00-8A21-411D-956C-73A4E4B7D16F} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\Interface\{480098C6-F6AD-4C61-9B5C-2BAE228A34D1} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\ExplorerBar.FunRedirector.1 (Adware.Agent) -> Keine Aktion durchgeführt.
HKCR\ExplorerBar.FunRedirector (Adware.Agent) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EB4A577D-BCAD-4B1C-8AF2-9A74B8DD3431} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB4A577D-BCAD-4B1C-8AF2-9A74B8DD3431} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB4A577D-BCAD-4B1C-8AF2-9A74B8DD3431} (Adware.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Explorer\Bars\{B72681C0-A222-4b21-A0E2-53A5A5CA3D411} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{342168F8-AE4A-41E8-A6B5-8FB9FECBEF37} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCU\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKCU\Software\Gameztar Toolbar (Adware.Gameztar) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\QuestService (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Web Search Operator (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\AppDataLow\SOFTWARE\Internet Today (Adware.DoubleD) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D} (Trojan.BHO) -> Keine Aktion durchgeführt.
HKCR\CLSID\{055FD26D-3A88-4e15-963D-DC8493744B1D} (Trojan.BHO) -> Keine Aktion durchgeführt.
HKCR\TypeLib\{77D6DDFA-7834-4541-B2B3-A8B0FB0E3924} (Trojan.BHO) -> Keine Aktion durchgeführt.
HKCR\ToolBand.XTTBPos00.1 (Trojan.BHO) -> Keine Aktion durchgeführt.
HKCR\ToolBand.XTTBPos00 (Trojan.BHO) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{055FD26D-3A88-4E15-963D-DC8493744B1D} (Trojan.BHO) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{055FD26D-3A88-4E15-963D-DC8493744B1D} (Trojan.BHO) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 8
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} (Adware.DoubleD) -> Daten: -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} (Adware.DoubleD) -> Daten: ¸XÔ*>M�Êìc¨ã]â -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{E63605FC-D583-4C81-867F-9457BDB3EA1B} (Adware.DoubleD) -> Daten: -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{E63605FC-D583-4C81-867F-9457BDB3EA1B} (Adware.DoubleD) -> Daten: C:\Program Files\Web Search Operator\3.1.0.1840\FF -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{8141440E-08F0-4339-9959-5C31C6A69F23} (Adware.DoubleD) -> Daten: -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{8141440E-08F0-4339-9959-5C31C6A69F23} (Adware.DoubleD) -> Daten: C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{E889F097-B0BE-471B-89AD-B86B6F04B506} (Adware.DoubleD) -> Daten: -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{E889F097-B0BE-471B-89AD-B86B6F04B506} (Adware.DoubleD) -> Daten: C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 30
C:\Program Files\Automated Content Enhancer (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190 (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\Data (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\chrome (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\chrome\content (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\components (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870 (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630 (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\Data (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\chrome (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\chrome\content (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\components (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today\1.1.0.1190 (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610 (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\data (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\for_anti_av (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\for_anti_av\1.1.0.1610 (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840 (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\Data (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\chrome (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\chrome\content (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\components (Adware.Agent) -> Keine Aktion durchgeführt.

Infizierte Dateien: 55
C:\Program Files\Web Search Operator\3.1.0.1840\WSO.dll (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Mozilla Firefox\searchplugins\questservice145.xml (Adware.DoubleD) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\unins000.dat (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\Data\config.md (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\chrome.manifest (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\install.rdf (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\chrome\ACEAddOn.jar (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\chrome\content\ACEAddOn.js (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\chrome\content\ACEAddOn.xul (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\components\ACEFFAddOn.xpt (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF\components\ACEFFHelperComponent.js (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870\cmwsh.dll (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870\config.mx (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870\data.mx (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870\exclude.mx (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870\MatchingData.zd5 (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870\pxtmpdata.mx (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870\unins000.dat (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Content Management Wizard\1.1.0.1870\unins000.exe (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\CPACommon.dll (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\unins000.dat (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\unins000.exe (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\Data\config.md (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\chrome.manifest (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\install.rdf (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\chrome\CPAAddOn.jar (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\chrome\content\CPAAddOn.js (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\chrome\content\CPAAddOn.xul (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\components\CPAFFAddOn.xpt (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF\components\CPAFFHelperComponent.js (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today\1.1.0.1190\InternetToday.ico (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today\1.1.0.1190\InternetToday.skf (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today\1.1.0.1190\mfc80.dll (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today\1.1.0.1190\Microsoft.VC80.MFC.manifest (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today\1.1.0.1190\SkinCrafterDll.dll (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today\1.1.0.1190\unins000.dat (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Internet Today\1.1.0.1190\unins000.exe (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\unins000.dat (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\unins000.exe (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\data\pxtmpdata.mx (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\data\TP_Config.mx (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\data\TP_Data.mx (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Textual Content Provider\1.1.0.1610\data\TP_DomainExcludeList.mx (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\unins000.dat (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\unins000.exe (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\WSOCommon.dll (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\Data\config.md (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\chrome.manifest (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\install.rdf (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\chrome\WSOAddOn.jar (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\chrome\content\WSOAddOn.js (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\chrome\content\WSOAddOn.xul (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\components\WSOFFAddOn.xpt (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\Web Search Operator\3.1.0.1840\FF\components\WSOFFHelperComponent.js (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Program Files\ICQToolbar\toolbaru.dll (Trojan.BHO) -> Keine Aktion durchgeführt.

(Ende)