| |
| |||||||
Antiviren-, Firewall- und andere Schutzprogramme: Avira 2010 Updatet nicht mehrWindows 7 Sämtliche Fragen zur Bedienung von Firewalls, Anti-Viren Programmen, Anti Malware und Anti Trojaner Software sind hier richtig. Dies ist ein Diskussionsforum für Sicherheitslösungen für Windows Rechner. Benötigst du Hilfe beim Trojaner entfernen oder weil du dir einen Virus eingefangen hast, erstelle ein Thema in den oberen Bereinigungsforen. |
 |
17.04.2010, 22:48
| #1 |
 |  Avira 2010 Updatet nicht mehr Mein Avira 10 updatet nichtmehr. Ich hatte vor nicht alzu langer Zeit einen Trojaner auf meinem Pc (Your Protection). Mein letztes Update war am 8.4 2010. Er zeigt zwar an das er Updatet aber er findet nichts. ICh versuche es auch zu jeder Tageszeit also der Server dürfte eigentlich nicht überlastet sein. Hier mal ein Report vom Update: Avira AntiVir Personal - Free Antivirus Updater Vollständiges Produktupdate Erstellungszeitpunkt: Sat Apr 17 23:33:22 2010 Betriebssystem: Windows Vista (Service Pack 2) [6.0.6002] 32 bit Produktinformationen: Produktversion: 10.0.0.561 Updater: C:\Program Files\Avira\AntiVir Desktop\update.exe 10.0.0.27 Updaterresource: C:\Program Files\Avira\AntiVir Desktop\updaterc.dll 10.0.9.0 Bibliothek: C:\Program Files\Avira\AntiVir Desktop\update.dll 0.1.0.44 Plugin: C:\Program Files\Avira\AntiVir Desktop\updext.dll 10.0.0.8 GUI: C:\Program Files\Avira\AntiVir Desktop\updgui.dll 10.0.2.0 Temporäres Verzeichnis: C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\ Backupverzeichnis: C:\ProgramData\Avira\AntiVir Desktop\BACKUP\ Installationsverzeichnis: C:\Program Files\Avira\AntiVir Desktop\ Updaterverzeichnis: C:\Program Files\Avira\AntiVir Desktop\ AppData Verzeichnis: C:\ProgramData\Avira\AntiVir Desktop\ Proxyeinstellungen: Verwende Systemeinstellungen 23:33:24 [UPD] [INFO] Prüfe ob neuere Dateien zur Verfügung stehen. 23:33:25 [UPD] [INFO] Wähle Updateserver 'hxxp://62.146.66.183/update'. 23:33:25 [UPD] [INFO] Herunterladen von 'hxxp://62.146.66.183/update/idx/master.idx' nach 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'. 23:33:25 [UPD] [INFO] Die Installation ist auf aktuellem Stand. Ein Update von Programmdateien, der Engine oder der Virendefinitionen ist daher nicht nötig. Zusammenfassung: **************** 0 Dateien heruntergeladen 0 Dateien installiert Sat Apr 17 23:33:25 2010 Das Update wurde erfolgreich durchgeführt! Geändert von jon23 (17.04.2010 um 23:00 Uhr) |
|
18.04.2010, 11:23
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Avira 2010 Updatet nicht mehr Hallo und
__________________ bitte nen Vollscan mit Malwarebytes machen und Log posten. Danach OTL: Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
__________________ |
|
18.04.2010, 11:51
| #3 |
| | Avira 2010 Updatet nicht mehr So hier der von Malwqarebytes
__________________Malwarebytes' Anti-Malware 1.45 www.malwarebytes.org Datenbank Version: 3930 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18904 18.04.2010 12:48:37 mbam-log-2010-04-18 (12-48-37).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|H:\|S:\|) Durchsuchte Objekte: 262702 Laufzeit: 2 Stunde(n), 5 Minute(n), 40 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
|
18.04.2010, 11:56
| #4 |
| | Avira 2010 Updatet nicht mehr OTL logfile created on: 18.04.2010 12:50:39 - Run 1 OTL by OldTimer - Version 3.2.1.2 Folder = C:\Users\Jonas\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18904) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 41,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 65,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 217,68 Gb Total Space | 142,50 Gb Free Space | 65,46% Space Free | Partition Type: NTFS Drive D: | 20,01 Gb Total Space | 13,29 Gb Free Space | 66,45% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Drive J: | 7,41 Gb Total Space | 6,89 Gb Free Space | 92,97% Space Free | Partition Type: FAT32 Drive M: | 39,06 Gb Total Space | 38,44 Gb Free Space | 98,40% Space Free | Partition Type: NTFS Drive S: | 58,59 Gb Total Space | 30,62 Gb Free Space | 52,26% Space Free | Partition Type: NTFS Computer Name: JONAS Current User Name: Jonas Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\Jonas\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH) PRC - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) PRC - C:\Programme\Skype\Toolbars\Shared\SkypeNames2.exe (Skype Technologies S.A.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) PRC - C:\Programme\Windows Defender\MSASCui.exe (Microsoft Corporation) PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation) PRC - C:\Programme\Google\Google Desktop Search\GoogleDesktopIndex.exe (Google) PRC - C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe (Google) PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) PRC - C:\Programme\Medion\MEDIONbox\Program\GCS.exe (Empolis GmbH) PRC - C:\Programme\Common Files\Gnab\Service\GnabTray.exe (Empolis GmbH) PRC - c:\Programme\Common Files\Gnab\Service\ServiceController.exe (Empolis GmbH) PRC - C:\Programme\Home Cinema\TV Enhance\Kernel\TV\TVESched.exe () PRC - C:\Programme\Home Cinema\TV Enhance\Kernel\TV\TVECapSvc.exe () PRC - C:\Programme\Home Cinema\TV Enhance\TVEService.exe (CyberLink Corp.) PRC - C:\Programme\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) PRC - C:\Programme\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (Nero AG) PRC - C:\Programme\Home Cinema\PowerDVD\PDVDServ.exe (Cyberlink Corp.) PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems) PRC - C:\Programme\Common Files\X10\Common\X10nets.exe (X10) ========== Modules (SafeList) ========== MOD - C:\Users\Jonas\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (GoogleDesktopManager) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe (Google) SRV - (IAANTMON) Intel(R) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) SRV - (GnabService) -- c:\Programme\Common Files\Gnab\Service\ServiceController.exe (Empolis GmbH) SRV - (TVESched) TVEnhance Task Scheduler (TTS)) -- C:\Program Files\Home Cinema\TV Enhance\Kernel\TV\TVESched.exe () SRV - (TVECapSvc) TVEnhance Background Capture Service (TBCS) -- C:\Program Files\Home Cinema\TV Enhance\Kernel\TV\TVECapSvc.exe () SRV - (AgereModemAudio) -- C:\Windows\System32\agrsmsvc.exe (Agere Systems) SRV - (x10nets) -- C:\Programme\Common Files\X10\Common\X10nets.exe (X10) ========== Driver Services (SafeList) ========== DRV - (SASKUTIL) -- File not found DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH) DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys () DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys () DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (LSI Corporation) DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (acedrv11) -- C:\Windows\System32\drivers\acedrv11.sys (Protect Software GmbH) DRV - (WmXlCore) -- C:\Windows\System32\drivers\WmXlCore.sys (Logitech Inc.) DRV - (WmVirHid) -- C:\Windows\System32\drivers\WmVirHid.sys (Logitech Inc.) DRV - (WmFilter) -- C:\Windows\System32\drivers\WmFilter.sys (Logitech Inc.) DRV - (WmBEnum) -- C:\Windows\System32\drivers\WmBEnum.sys (Logitech Inc.) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.) DRV - (iaStor) -- C:\Windows\system32\DRIVERS\iaStor.sys (Intel Corporation) DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.) DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.) DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.) DRV - (Ph3xIB32) -- C:\Windows\System32\drivers\Ph3xIB32.sys (Philips Semiconductors GmbH) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.) DRV - (3xHybrid) -- C:\Windows\System32\drivers\3xHybrid.sys (Philips Semiconductors GmbH) DRV - (XUIF) -- C:\Windows\System32\drivers\x10ufx2.sys (X10 Wireless Technology, Inc.) DRV - (X10Hid) -- C:\Windows\System32\drivers\x10hid.sys (X10 Wireless Technology, Inc.) DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation) DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.) DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex) DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.) DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.) DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation) DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.) DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.) DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation) DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.) DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.) DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation) DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation) DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems) DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation) DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.) DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.) DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic) DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.) DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company) DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.) DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.) DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.) DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic) DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic) DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic) DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic) DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation) DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic) DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation) DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.) DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.) DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.) DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.) DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.) DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.) DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies) DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.) DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation) DRV - (rt70x86) -- C:\Windows\System32\drivers\netr70.sys (Ralink Technology Inc.) DRV - (netr73) -- C:\Windows\System32\drivers\netr73.sys (Ralink Technology Inc.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.medion.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.medion.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:4.0.53.0 FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.04.10 17:39:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.04.10 17:39:55 | 000,000,000 | ---D | M] [2010.01.02 17:24:22 | 000,000,000 | ---D | M] -- C:\Users\Jonas\AppData\Roaming\mozilla\Extensions [2010.04.18 12:12:22 | 000,000,000 | ---D | M] -- C:\Users\Jonas\AppData\Roaming\mozilla\Firefox\Profiles\2xoqroev.default\extensions [2010.01.07 20:18:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Jonas\AppData\Roaming\mozilla\Firefox\Profiles\2xoqroev.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.04.01 13:23:10 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Jonas\AppData\Roaming\mozilla\Firefox\Profiles\2xoqroev.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2010.04.16 07:04:06 | 000,000,000 | ---D | M] -- C:\Users\Jonas\AppData\Roaming\mozilla\Firefox\Profiles\2xoqroev.default\extensions\battlefieldheroespatcher@ea.com [2010.04.18 12:12:22 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010.04.03 12:22:48 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010.03.12 18:44:43 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.03.12 18:44:43 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.03.12 18:44:43 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.03.12 18:44:43 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.03.12 18:44:43 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [GnabTray] C:\Program Files\Common Files\Gnab\Service\GnabTray.exe (Empolis GmbH) O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google) O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation) O4 - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe File not found O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\Home Cinema\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [NeroFilterCheck] C:\Programme\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [RemoteControl] C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe (Cyberlink Corp.) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4 - HKLM..\Run: [toolbar_eula_launcher] C:\Programme\GoogleEULA\EULALauncher.exe ( ) O4 - HKLM..\Run: [TVEService] C:\Program Files\Home Cinema\TV Enhance\TVEService.exe (CyberLink Corp.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll (Google Inc.) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O15 - HKCU\..Trusted Ranges: GD ([http] in Lokales Intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) - C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Jonas\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\Jonas\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.04.18 12:01:01 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2010.04.18 12:00:39 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\SUPERAntiSpyware.com [2010.04.17 23:42:10 | 000,000,000 | ---D | C] -- C:\Programme\LSI SoftModem [2010.04.17 23:39:35 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2010.04.17 18:30:42 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\DataCast [2010.04.17 18:30:27 | 000,000,000 | ---D | C] -- C:\Programme\MarkAny [2010.04.15 07:01:30 | 003,600,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2010.04.15 07:01:30 | 003,548,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2010.04.15 07:01:27 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2010.04.15 07:01:25 | 000,220,672 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codecp.acm [2010.04.15 07:01:25 | 000,062,464 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm [2010.04.10 18:17:39 | 000,000,000 | ---D | C] -- C:\Programme\HP [2010.04.10 18:17:36 | 000,000,000 | -H-D | C] -- C:\Config.Msi [2010.04.10 18:15:40 | 000,000,000 | ---D | C] -- C:\ProgramData\HP [2010.04.10 18:15:32 | 000,000,000 | ---D | C] -- C:\Programme\HP PSE 9.0 SW [2010.04.10 17:42:57 | 000,000,000 | ---D | C] -- C:\Nero [2010.04.10 17:41:42 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\Apple Computer [2010.04.10 17:41:42 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Local\Apple Computer [2010.04.10 17:41:33 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll [2010.04.10 17:41:33 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE [2010.04.10 17:40:42 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010.04.10 17:40:34 | 000,000,000 | ---D | C] -- C:\Programme\iTunes [2010.04.10 17:40:34 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2010.04.10 17:39:21 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime [2010.04.10 17:39:21 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Local\Ahead [2010.04.10 17:39:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010.04.10 17:38:55 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Local\Apple [2010.04.10 17:38:51 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\Ahead [2010.04.10 17:38:33 | 000,000,000 | ---D | C] -- C:\Programme\Apple Software Update [2010.04.10 17:36:54 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour [2010.04.10 17:36:44 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Apple [2010.04.10 17:36:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010.04.09 23:16:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Synetic [2010.04.09 23:16:18 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\ProtectDisc [2010.04.09 23:10:10 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Local\Logitech [2010.04.09 23:07:58 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Logitech [2010.04.09 23:07:46 | 000,000,000 | ---D | C] -- C:\Programme\Logitech [2010.04.09 09:28:08 | 000,000,000 | ---D | C] -- C:\Programme\ProtectDisc Driver Installer [2010.04.08 23:06:11 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\EA Games [2010.04.08 23:02:12 | 000,000,000 | ---D | C] -- C:\Users\Jonas\Desktop\Programme [2010.04.08 23:00:37 | 000,000,000 | ---D | C] -- C:\Users\Jonas\Desktop\Virenprogramme, usw [2010.04.08 22:56:41 | 000,000,000 | ---D | C] -- C:\Users\Jonas\Documents\EA Games [2010.04.08 22:42:21 | 000,442,368 | R--- | C] (On2.com) -- C:\Windows\System32\vp6vfw.dll [2010.04.04 14:43:12 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\Malwarebytes [2010.04.04 14:43:02 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010.04.04 14:42:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.04.04 14:42:58 | 000,020,824 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010.04.04 14:42:58 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010.04.04 12:18:44 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\Avira [2010.04.04 12:05:29 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys [2010.04.04 12:05:27 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2010.04.04 12:05:27 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [2010.04.04 12:05:27 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys [2010.04.04 12:05:27 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys [2010.04.04 12:05:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2010.04.03 22:55:32 | 015,227,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll [2010.04.03 22:55:32 | 011,647,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll [2010.04.03 22:55:32 | 011,573,800 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys [2010.04.03 22:55:32 | 004,503,144 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll [2010.04.03 22:55:32 | 004,029,544 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll [2010.04.03 22:55:32 | 002,646,632 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll [2010.04.03 22:55:32 | 002,009,704 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll [2010.04.03 22:55:32 | 000,227,944 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcod1914.dll [2010.04.03 22:55:32 | 000,227,944 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcod.dll [2010.04.03 22:55:32 | 000,056,424 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll [2010.04.03 22:55:32 | 000,010,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvBridge.kmd [2010.04.03 18:27:00 | 013,683,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.dll [2010.04.03 18:27:00 | 000,985,704 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvsvc.dll [2010.04.03 18:27:00 | 000,110,696 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvmctray.dll [2010.04.03 18:27:00 | 000,066,664 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvshext.dll [2010.04.03 12:26:23 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\skypePM [2010.04.03 12:22:58 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Roaming\Skype [2010.04.03 12:22:28 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Skype [2010.04.03 12:22:27 | 000,000,000 | R--D | C] -- C:\Programme\Skype [2010.04.03 12:22:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010.03.31 19:53:03 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsSearch [2010.03.31 18:16:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe [2010.03.29 20:53:07 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2010.03.29 20:53:06 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2010.03.29 20:53:06 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010.03.29 20:53:06 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010.03.29 20:53:05 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010.03.29 20:53:05 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010.03.29 20:53:05 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2010.03.29 20:53:05 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2010.03.29 20:53:05 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010.03.29 20:53:04 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2010.03.29 20:53:04 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2010.03.29 20:53:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010.03.29 20:53:04 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010.03.29 20:53:03 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2010.03.29 20:53:03 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2010.03.29 17:15:15 | 000,000,000 | ---D | C] -- C:\Users\Jonas\Documents\Downloads [2010.03.29 15:54:52 | 000,000,000 | ---D | C] -- C:\Programme\Windows Portable Devices [2010.03.29 15:50:13 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll [2010.03.29 15:50:12 | 003,023,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll [2010.03.29 15:50:12 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll [2010.03.29 15:49:42 | 000,369,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll [2010.03.29 15:49:41 | 000,829,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll [2010.03.29 15:49:41 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll [2010.03.29 15:49:41 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll [2010.03.29 15:49:40 | 001,554,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll [2010.03.29 15:49:40 | 001,064,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2010.03.29 15:49:40 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll [2010.03.29 15:49:40 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll [2010.03.29 15:49:40 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll [2010.03.29 15:49:40 | 000,793,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll [2010.03.29 15:49:40 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe [2010.03.29 15:49:40 | 000,486,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll [2010.03.29 15:49:40 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2010.03.29 15:49:40 | 000,321,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll [2010.03.29 15:49:40 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2010.03.29 15:49:40 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiag.exe [2010.03.29 15:49:40 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll [2010.03.29 15:49:40 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll [2010.03.29 15:49:40 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll [2010.03.29 15:49:40 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll [2010.03.29 15:49:39 | 001,030,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll [2010.03.29 15:49:39 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll [2010.03.29 15:49:39 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll [2010.03.29 15:49:39 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll [2010.03.29 15:49:39 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll [2010.03.29 15:49:12 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BthMtpContextHandler.dll [2010.03.29 15:49:12 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDShextAutoplay.exe [2010.03.29 15:49:08 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceConnectApi.dll [2010.03.29 15:49:05 | 000,546,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll [2010.03.29 15:49:05 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll [2010.03.29 15:49:05 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdMtp.dll [2010.03.29 15:49:05 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWMDRM.dll [2010.03.29 15:49:05 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll [2010.03.29 15:49:05 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceClassExtension.dll [2010.03.29 15:49:05 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdMtpUS.dll [2010.03.29 15:49:05 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdConns.dll [2010.03.29 15:49:04 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll [2010.03.29 15:48:00 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll [2010.03.29 15:47:59 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll [2010.03.28 05:51:21 | 001,696,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll [2010.03.28 05:51:20 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll [2010.03.28 05:51:20 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll [2010.03.27 18:47:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\eu-ES [2010.03.27 18:47:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\ca-ES [2010.03.27 18:47:40 | 000,000,000 | ---D | C] -- C:\Windows\System32\vi-VN [2010.03.27 18:26:47 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders [2010.03.27 14:33:36 | 000,000,000 | ---D | C] -- C:\Users\Jonas\Documents\Werder Bremen [2010.03.27 14:33:07 | 000,000,000 | ---D | C] -- C:\Users\Jonas\Documents\Werder Bremen lll [2010.03.26 19:17:08 | 000,000,000 | ---D | C] -- C:\Users\Jonas\Documents\Werder Bremen-Dateien [2010.03.25 06:45:39 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe [2010.03.24 21:17:22 | 000,000,000 | ---D | C] -- C:\Users\Jonas\AppData\Local\Threat Expert [2010.03.24 19:31:44 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP ========== Files - Modified Within 30 Days ========== [2010.04.18 12:52:50 | 001,572,864 | -HS- | M] () -- C:\Users\Jonas\NTUSER.DAT [2010.04.18 12:52:40 | 000,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{363D057E-7CBA-400E-94B1-9548904C9419}.job [2010.04.18 12:29:55 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010.04.18 12:29:55 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010.04.18 12:16:01 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010.04.18 10:36:26 | 000,002,231 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.04.18 10:30:17 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.dat [2010.04.18 10:30:16 | 000,034,901 | ---- | M] () -- C:\ProgramData\nvModes.001 [2010.04.18 10:29:46 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010.04.18 10:29:43 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010.04.18 10:29:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.04.18 10:29:36 | 2145,902,592 | -HS- | M] () -- C:\hiberfil.sys [2010.04.18 09:55:41 | 000,524,288 | -HS- | M] () -- C:\Users\Jonas\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010.04.18 09:55:41 | 000,065,536 | -HS- | M] () -- C:\Users\Jonas\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010.04.18 09:55:04 | 002,026,158 | -H-- | M] () -- C:\Users\Jonas\AppData\Local\IconCache.db [2010.04.17 23:53:38 | 000,000,281 | ---- | M] () -- C:\Users\Jonas\Desktop\Volume (M) - Verknüpfung.lnk [2010.04.17 18:32:36 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf [2010.04.13 22:24:16 | 000,002,077 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2010.04.11 20:04:26 | 000,004,096 | ---- | M] () -- C:\Users\Public\Documents\00000D34.LCS [2010.04.11 17:08:27 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2010.04.11 12:12:42 | 178,458,507 | ---- | M] () -- C:\Windows\MEMORY.DMP [2010.04.10 18:35:15 | 000,005,632 | ---- | M] () -- C:\Users\Jonas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.04.10 18:21:59 | 000,147,863 | ---- | M] () -- C:\Windows\hpiins06.dat [2010.04.10 17:39:41 | 000,001,730 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010.04.04 16:15:47 | 000,002,379 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2010.04.04 12:49:00 | 000,000,680 | ---- | M] () -- C:\Users\Jonas\AppData\Local\d3d9caps.dat [2010.04.03 22:55:32 | 015,227,496 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll [2010.04.03 22:55:32 | 011,647,592 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll [2010.04.03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys [2010.04.03 22:55:32 | 009,386,600 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvd3dum.dll [2010.04.03 22:55:32 | 004,503,144 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll [2010.04.03 22:55:32 | 004,029,544 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll [2010.04.03 22:55:32 | 002,646,632 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll [2010.04.03 22:55:32 | 002,009,704 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll [2010.04.03 22:55:32 | 001,296,488 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvapi.dll [2010.04.03 22:55:32 | 000,600,680 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvuninst.exe [2010.04.03 22:55:32 | 000,600,680 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvudisp.exe [2010.04.03 22:55:32 | 000,227,944 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcod1914.dll [2010.04.03 22:55:32 | 000,227,944 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcod.dll [2010.04.03 22:55:32 | 000,056,424 | ---- | M] (Khronos Group) -- C:\Windows\System32\OpenCL.dll [2010.04.03 22:55:32 | 000,010,920 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvBridge.kmd [2010.04.03 22:55:32 | 000,007,772 | ---- | M] () -- C:\Windows\System32\nvinfo.pb [2010.04.03 18:27:00 | 013,683,816 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.dll [2010.04.03 18:27:00 | 000,985,704 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvsvc.dll [2010.04.03 18:27:00 | 000,110,696 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvmctray.dll [2010.04.03 18:27:00 | 000,066,664 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvshext.dll [2010.04.03 18:26:56 | 000,276,196 | ---- | M] () -- C:\Windows\System32\NvApps.xml [2010.04.03 18:26:56 | 000,066,714 | ---- | M] () -- C:\Windows\System32\NvwsApps.xml [2010.04.03 12:26:25 | 000,000,056 | -H-- | M] () -- C:\Windows\System32\ezsidmv.dat [2010.03.31 22:06:37 | 000,001,036 | ---- | M] () -- C:\Users\Jonas\Desktop\DVDVideoSoft Free Studio.lnk [2010.03.29 15:54:31 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf [2010.03.29 15:24:58 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010.03.29 15:24:46 | 000,020,824 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010.03.27 18:52:55 | 000,271,128 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010.03.27 17:58:16 | 003,908,741 | ---- | M] () -- C:\Users\Jonas\Documents\Werder Bremen.mht [2010.03.27 16:37:32 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2010.03.27 16:37:32 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2010.03.26 19:17:10 | 000,002,416 | ---- | M] () -- C:\Users\Jonas\Documents\Werder Bremen.htm [2010.03.26 19:04:51 | 000,000,165 | -H-- | M] () -- C:\Users\Jonas\Documents\~$Werder Bremen.pptx [2010.03.25 23:59:47 | 002,412,169 | ---- | M] () -- C:\Users\Jonas\Documents\Werder Bremen.pptx ========== Files Created - No Company Name ========== [2010.04.18 09:28:49 | 000,034,901 | ---- | C] () -- C:\ProgramData\nvModes.001 [2010.04.17 23:53:38 | 000,000,281 | ---- | C] () -- C:\Users\Jonas\Desktop\Volume (M) - Verknüpfung.lnk [2010.04.17 23:42:05 | 000,034,901 | ---- | C] () -- C:\ProgramData\nvModes.dat [2010.04.17 18:32:36 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf [2010.04.13 22:24:16 | 000,002,077 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2010.04.10 18:17:12 | 000,004,365 | ---- | C] () -- C:\ProgramData\hpzinstall.log [2010.04.10 18:17:10 | 000,147,863 | ---- | C] () -- C:\Windows\hpiins06.dat [2010.04.10 18:17:10 | 000,000,000 | ---- | C] () -- C:\Windows\hpimdl06.dat [2010.04.10 17:41:35 | 000,002,231 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.04.10 17:39:41 | 000,001,730 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010.04.09 23:16:19 | 000,004,096 | ---- | C] () -- C:\Users\Public\Documents\00000D34.LCS [2010.04.03 22:55:32 | 000,007,772 | ---- | C] () -- C:\Windows\System32\nvinfo.pb [2010.04.03 18:26:56 | 000,276,196 | ---- | C] () -- C:\Windows\System32\NvApps.xml [2010.04.03 18:26:56 | 000,066,714 | ---- | C] () -- C:\Windows\System32\NvwsApps.xml [2010.04.03 12:26:25 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat [2010.04.03 12:22:29 | 000,002,379 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2010.03.29 15:54:31 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf [2010.03.27 16:37:32 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2010.03.27 16:37:32 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2010.03.26 19:18:22 | 003,908,741 | ---- | C] () -- C:\Users\Jonas\Documents\Werder Bremen.mht [2010.03.26 19:17:07 | 000,002,416 | ---- | C] () -- C:\Users\Jonas\Documents\Werder Bremen.htm [2010.03.26 19:04:51 | 000,000,165 | -H-- | C] () -- C:\Users\Jonas\Documents\~$Werder Bremen.pptx [2010.03.25 23:41:45 | 002,412,169 | ---- | C] () -- C:\Users\Jonas\Documents\Werder Bremen.pptx [2010.03.05 08:56:39 | 000,000,680 | ---- | C] () -- C:\Users\Jonas\AppData\Local\d3d9caps.dat [2010.02.28 15:17:31 | 000,000,375 | ---- | C] () -- C:\Windows\SIERRA.INI [2010.02.27 15:50:31 | 000,031,007 | ---- | C] () -- C:\Users\Jonas\AppData\Roaming\UserTile.png [2010.02.24 21:01:21 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010.02.21 15:48:55 | 000,000,281 | ---- | C] () -- C:\Windows\game.ini [2010.02.16 22:02:04 | 000,274,432 | ---- | C] () -- C:\Windows\System32\EMRegSys.dll [2010.02.13 15:18:08 | 000,005,632 | ---- | C] () -- C:\Users\Jonas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.01.13 17:26:56 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2010.01.13 17:26:55 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2010.01.02 17:03:56 | 000,000,093 | ---- | C] () -- C:\Users\Jonas\AppData\Local\fusioncache.dat [2010.01.02 17:03:32 | 000,524,288 | -HS- | C] () -- C:\Users\Jonas\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms [2010.01.02 17:03:32 | 000,524,288 | -HS- | C] () -- C:\Users\Jonas\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010.01.02 17:03:32 | 000,262,144 | -H-- | C] () -- C:\Users\Jonas\ntuser.dat.LOG1 [2010.01.02 17:03:32 | 000,065,536 | -HS- | C] () -- C:\Users\Jonas\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010.01.02 17:03:32 | 000,000,020 | -HS- | C] () -- C:\Users\Jonas\ntuser.ini [2010.01.02 17:03:32 | 000,000,000 | -H-- | C] () -- C:\Users\Jonas\ntuser.dat.LOG2 [2010.01.02 17:03:31 | 001,572,864 | -HS- | C] () -- C:\Users\Jonas\NTUSER.DAT [2007.10.04 16:10:50 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2007.08.28 16:24:04 | 000,003,072 | ---- | C] () -- C:\Windows\System32\34CoInstaller.dll [2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 12:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini ========== Alternate Data Streams ========== @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP  FC5A2B2@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8 < End of report > |
|
18.04.2010, 12:00
| #5 |
| | Avira 2010 Updatet nicht mehr OTL Extras logfile created on: 18.04.2010 12:50:39 - Run 1 OTL by OldTimer - Version 3.2.1.2 Folder = C:\Users\Jonas\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18904) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 41,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 65,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 217,68 Gb Total Space | 142,50 Gb Free Space | 65,46% Space Free | Partition Type: NTFS Drive D: | 20,01 Gb Total Space | 13,29 Gb Free Space | 66,45% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Drive J: | 7,41 Gb Total Space | 6,89 Gb Free Space | 92,97% Space Free | Partition Type: FAT32 Drive M: | 39,06 Gb Total Space | 38,44 Gb Free Space | 98,40% Space Free | Partition Type: NTFS Drive S: | 58,59 Gb Total Space | 30,62 Gb Free Space | 52,26% Space Free | Partition Type: NTFS Computer Name: JONAS Current User Name: Jonas Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "AntiVirusDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0B750D8A-09C3-4931-AD9D-6B04F8E6DBBB}" = rport=139 | protocol=6 | dir=out | app=system | "{0DE38D39-BC73-4C76-83AE-E95B5C52799A}" = lport=137 | protocol=17 | dir=in | app=system | "{1C57EB38-97E7-4EDF-8913-517279FED17C}" = lport=139 | protocol=6 | dir=in | app=system | "{276A31B2-CB1A-4531-B186-7A3B680FD3B9}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{55D4E510-1D46-415F-82F9-9182A33551A3}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{5F746252-935D-4286-8E5E-813986BADEA4}" = rport=137 | protocol=17 | dir=out | app=system | "{6598F3BA-B0F1-411D-80EB-904BCF372AFB}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{659AD4E6-D1EF-4D30-925E-AF5F375A7AC8}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{65C8616C-F2D9-43AB-888B-6F235C67CCDB}" = lport=138 | protocol=17 | dir=in | app=system | "{7F3374BC-AC12-4CEF-A13D-C364BB53EE2F}" = rport=138 | protocol=17 | dir=out | app=system | "{84DFD419-ED4A-4755-A3B9-28AD3D7F628F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C8714C1E-22CC-4C3F-8B5B-C0A4E650E76C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{D95AC46F-7A97-4FBE-BF60-06D5B941BF2F}" = rport=445 | protocol=6 | dir=out | app=system | "{DBBC3F2A-1E05-42DD-A218-A6FECEA9BC87}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{DC68C912-3F72-4834-B236-E27B1B7A198F}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{DEE263DF-66D8-47FA-922C-F0700C03E9D0}" = lport=445 | protocol=6 | dir=in | app=system | "{FF270C6F-C35D-4FD9-9FFA-55FA6E884D3E}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{02BCE351-8294-4014-880E-693181CAB5F1}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{07BC02F8-EE3B-4CFB-B3D0-90155D34E44B}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe | "{14374AD9-185A-4A36-B1A1-21C34E97870A}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{1563EAEF-1CBB-4A64-AD9E-80C026303712}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{15FF9C57-9562-46EF-8276-DF499664A97E}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | "{168AB09D-525A-4CAE-8D63-E34B04E3CB1B}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{23B520E1-35C0-4BC1-AEDB-0E878EB3AD4C}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | "{3DDE7C39-E55B-40DB-8A91-A407E2726D14}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{4B536B9A-CB30-4288-BD2A-BEA34AE07737}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe | "{594D9AF5-AAC3-4E99-AE73-05C56F70D74C}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{5C418690-E8D7-4A12-AD96-D998E674AE97}" = protocol=6 | dir=in | app=c:\program files\home cinema\tv enhance\tveservice.exe | "{5E776BA5-2027-4D92-8D96-2D97673039D9}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{60542490-206A-44E7-B414-5C563FC36315}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{64BFB985-FD29-4398-8FAB-E2ED3F6A1EB0}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{64FEC240-493C-4059-A7FC-4813508B30D7}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\anno4.exe | "{75FC066B-3897-49B6-8E1C-BA85351A66EA}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{7D50C53E-92F1-491A-ABFB-26DEE760BE8D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{81528215-499B-434A-8ACC-360C1EA5C3CB}" = protocol=6 | dir=in | app=c:\program files\sierra entertainment\world in conflict\wic_online.exe | "{89E2B2C0-2592-423A-BAFB-39A3F9C263D5}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{8C0AC661-9FF3-485D-AF62-C733D50621AF}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\anno4web.exe | "{9045876C-5CD2-4B0D-99F4-A45859348B6D}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{953AE0AA-0814-462E-86F2-4743DDBCA191}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{9987AF2D-D589-48C7-A4EF-19772264E50E}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{A15649DC-1845-4378-9C9A-18EADB049D57}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{A18F4F94-595F-4F68-9840-401822CB8C4E}" = protocol=6 | dir=in | app=c:\program files\sierra entertainment\world in conflict\wic_ds.exe | "{A38AC633-68D6-47F8-90B0-9D425EAC2C8C}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\anno4.exe | "{B90B8F14-66C1-4FB6-83C5-7564E6DA2067}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{C472FE7E-7F09-48EE-B6A5-62718061A8A3}" = protocol=17 | dir=in | app=c:\program files\sierra entertainment\world in conflict\wic_online.exe | "{C8A034BB-B3F3-4A42-A19D-63F29806A46F}" = protocol=17 | dir=in | app=c:\program files\home cinema\tv enhance\tvenhance.exe | "{CB133320-B53D-4ADA-8380-391C93268282}" = protocol=17 | dir=in | app=c:\program files\home cinema\tv enhance\tveservice.exe | "{D291B2D0-ECAC-467F-AA27-832A47666330}" = protocol=17 | dir=in | app=c:\program files\sierra entertainment\world in conflict\wic_ds.exe | "{D6F5D9C4-A9F5-4B23-82A3-BDF2C0E7D0DC}" = protocol=6 | dir=in | app=c:\program files\home cinema\tv enhance\tvenhance.exe | "{DF01D9D5-DCB2-490A-8378-3826BB570B69}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\anno4web.exe | "{E0EF2928-4474-4558-B11C-1D761CED53CF}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{EBDA824E-DB8B-4FC2-B0E4-C3E0B0CECB92}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | "{F6493CA8-6967-47BF-B46F-B4F5C957F769}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{FF45E367-6B58-4911-AB6C-659CE4EBF0B9}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "TCP Query User{0A896E02-908D-4C4C-A73A-D77F24951AFC}S:\herr der ringe eroberung\conquest.exe" = protocol=6 | dir=in | app=s:\herr der ringe eroberung\conquest.exe | "TCP Query User{15C0F89A-3EC9-4E10-B6C5-3309A618C938}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "TCP Query User{798568E4-6F26-4CBE-BBB0-ACE1F56EDF85}S:\ee-zde\ee-aoc.exe" = protocol=6 | dir=in | app=s:\ee-zde\ee-aoc.exe | "TCP Query User{829C981A-D678-4394-9905-F2B267669068}C:\program files\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | "TCP Query User{8D965530-D206-4979-A7EE-11D76F4A784C}C:\users\jonas\downloads\fogdownloader-rom_2_1_6_2049.exe" = protocol=6 | dir=in | app=c:\users\jonas\downloads\fogdownloader-rom_2_1_6_2049.exe | "UDP Query User{2A5984C3-8940-492F-9098-FBF035B933AA}S:\herr der ringe eroberung\conquest.exe" = protocol=17 | dir=in | app=s:\herr der ringe eroberung\conquest.exe | "UDP Query User{4DAB940E-16D5-44D2-B47A-9743ECC5B7DD}C:\users\jonas\downloads\fogdownloader-rom_2_1_6_2049.exe" = protocol=17 | dir=in | app=c:\users\jonas\downloads\fogdownloader-rom_2_1_6_2049.exe | "UDP Query User{88DF4A08-1D30-4FAA-8D0E-BA0FCD3DAABA}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "UDP Query User{8D07B69A-842C-454A-AC51-4FF3CEB19004}C:\program files\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | "UDP Query User{D64C26CF-A66E-47FC-85D0-62B342F3E784}S:\ee-zde\ee-aoc.exe" = protocol=17 | dir=in | app=s:\ee-zde\ee-aoc.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{0513EE35-E0FB-4166-B663-BD1AE3A803DE}" = Anno 1404 "{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu "{08C0729E-3E50-11DF-9D81-005056806466}" = Google Earth "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{1C9A45C6-A367-472F-8FC7-45B10D661BF1}" = Wireless PCI-Express Network Adapter "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{2222B364-0854-4265-B32E-A142DB9DC7BB}" = Intel(R) PRO Network Connections 11.2.0.69 "{2315B23D-3E21-4920-837D-AE6460934ECB}" = FIFA 09 "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{2447500B-22D7-47BD-9B13-1A927F43A267}" = Empire Earth "{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 18 "{27FDF949-69CE-435A-8372-339F72336AC5}" = MEDIONbox "{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime "{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll "{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404 "{4817189D-1785-4627-A33C-39FD90919300}" = Die Sims™ 2 Haustiere "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E5EE953-0D92-A385-E3A0-FBFCB2DE15AA}" = EA Download Manager UI "{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support "{628C3D50-F524-4C49-A958-672CE7953756}" = Der Herr der Ringe® - Die Eroberung™ "{64B20B36-AEE7-4DD4-897C-C5DA5C218F60}" = Logitech Gaming Software 5.02 "{6522C636-B04C-4333-9BEB-9E0C0B6350D6}" = Die Sims™ 2 Küchen- und Bad-Einrichtungs-Accessoires "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = Die Sims 2 "{71702641-2849-45A4-8E62-4B85974B24A0}_is1" = BumpTop "{7655E113-C306-11D9-A373-0050BAE317E1}" = MCE Software Encoder 1.1 "{76BC2442-0002-47FA-9617-43BAD82BEF4C}" = Bonjour "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{81AB1374-098A-43CB-BE57-31CEB5EB1031}" = Nero 7 Essentials "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{89E0B0D4-DFC3-49B9-8E88-F1B801325C8A}" = Emergency 3 "{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007 "{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007 "{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007 "{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007 "{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007 "{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel(R) Matrix Storage Manager "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{990166FA-1ACB-4AA7-B592-4D370C7CDD1A}" = Spider-Man 3(TM) "{996A2FAA-7514-4628-9D12-A8FC34A0016E}" = iTunes "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A00F8237-F496-44D2-0001-E3CCF8CD58AE}" = Photomizer "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR "{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1031-7B44-A81000000003}" = Adobe Reader 8.1.0 - Deutsch "{B49C924C-A651-4378-94F6-5D9BF44A959F}" = EE-ZDE "{B5C3B892-0849-476C-9F46-B12F84819D57}" = Apple Mobile Device Support "{B6F5B704-06D3-4687-90F3-6195304AD755}" = Die Sims™ 2 Apartment-Leben "{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}" = Die Sims™ 2 Vier Jahreszeiten "{E1180142-3B31-4DCC-9D27-7AC2D37662BF}" = LightScribe 1.4.124.1 "{E4C891D6-6844-41B8-86E8-633CACCC644F}" = TV Enhance "{EF7E931D-DC84-471B-8DB6-A83358095474}" = EA Download Manager "{F11ADC64-C89E-47F4-A0B3-3665FF859397}" = WORLD IN CONFLICT "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F248ADFA-64E0-4b03-8A83-059078BED6A0}" = Die Sims™ 2 Gute Reise "{F7529650-B9DB-481B-0089-A2AC3C2821C1}" = Die Sims 2: Nightlife "{FB8148DD-C575-4B0A-9F6C-0CFC46937930}" = Opera 10.10 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Agere Systems Soft Modem" = Agere Systems PCI Soft Modem "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "BurningWheels" = Cobra 11 - Burning Wheels (remove only) "com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Download Manager UI "EA Download Manager" = EA Download Manager "Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2 "Google Desktop" = Google Desktop "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "LSI Soft Modem" = LSI PCI Soft Modem "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers "PROSet" = Intel(R) PRO Network Connections Drivers "PROSETDX" = Intel(R) PRO Network Connections 11.2.0.69 "ProtectDisc Driver 11" = ProtectDisc Driver, Version 11 "TeamSpeak 3 Client" = TeamSpeak 3 Client "Uninstall_is1" = Uninstall 1.0.0.1 "VLC media player" = VLC media player 1.0.5 "X10Hardware" = X10 Hardware(TM) "Your Protection" = Your Protection ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 17.04.2010 16:44:18 | Computer Name = Jonas | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 9069773 Error - 17.04.2010 16:44:19 | Computer Name = Jonas | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 17.04.2010 16:44:19 | Computer Name = Jonas | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 9070818 Error - 17.04.2010 16:44:19 | Computer Name = Jonas | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 9070818 Error - 17.04.2010 16:44:20 | Computer Name = Jonas | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 17.04.2010 16:44:20 | Computer Name = Jonas | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 9071957 Error - 17.04.2010 16:44:20 | Computer Name = Jonas | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 9071957 Error - 17.04.2010 17:49:17 | Computer Name = Jonas | Source = VSS | ID = 12310 Description = Error - 17.04.2010 17:49:17 | Computer Name = Jonas | Source = VSS | ID = 12298 Description = Error - 18.04.2010 06:11:00 | Computer Name = Jonas | Source = Microsoft-Windows-RestartManager | ID = 10006 Description = [ System Events ] Error - 16.04.2010 00:48:22 | Computer Name = Jonas | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am 15.04.2010 um 21:50:08 unerwartet heruntergefahren. Error - 16.04.2010 00:53:58 | Computer Name = Jonas | Source = DCOM | ID = 10005 Description = Error - 16.04.2010 00:53:58 | Computer Name = Jonas | Source = Service Control Manager | ID = 7009 Description = Error - 16.04.2010 00:53:58 | Computer Name = Jonas | Source = Service Control Manager | ID = 7000 Description = Error - 16.04.2010 00:58:21 | Computer Name = Jonas | Source = Service Control Manager | ID = 7009 Description = Error - 16.04.2010 00:58:21 | Computer Name = Jonas | Source = Service Control Manager | ID = 7000 Description = Error - 17.04.2010 05:43:24 | Computer Name = Jonas | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am 16.04.2010 um 15:29:15 unerwartet heruntergefahren. Error - 17.04.2010 05:43:39 | Computer Name = Jonas | Source = Microsoft-Windows-ResourcePublication | ID = 1002 Description = Error - 17.04.2010 11:39:23 | Computer Name = Jonas | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am 17.04.2010 um 12:19:57 unerwartet heruntergefahren. Error - 18.04.2010 06:11:13 | Computer Name = Jonas | Source = Service Control Manager | ID = 7000 Description = < End of report > |
|
18.04.2010, 12:27
| #6 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira 2010 Updatet nicht mehrZitat:
__________________ --> Avira 2010 Updatet nicht mehr |
|
18.04.2010, 12:46
| #7 |
| | Avira 2010 Updatet nicht mehr Oh sorry hatte ich vergessen also der Report folgt bald |
|
18.04.2010, 14:44
| #8 |
| | Avira 2010 Updatet nicht mehr Malwarebytes' Anti-Malware 1.45 www.malwarebytes.org Datenbank Version: 4003 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18904 18.04.2010 15:43:28 mbam-log-2010-04-18 (15-43-28).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|H:\|M:\|S:\|) Durchsuchte Objekte: 265365 Laufzeit: 1 Stunde(n), 16 Minute(n), 17 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 2 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 2 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Protection (Rogue.YourProtection) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Your Protection (Rogue.YourProtection) -> Quarantined and deleted successfully. Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: C:\Users\Jonas\Favorites\_favdata.dat (Malware.Trace) -> Quarantined and deleted successfully. C:\Users\Jonas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Your Protection.lnk (Rogue.YourProtection) -> Quarantined and deleted successfully. |
|
18.04.2010, 15:22
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira 2010 Updatet nicht mehr Starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!) Code:
ATTFilter :OTL
O4 - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe File not found
"Your Protection" = Your Protection
:Commands
[resethosts]
[emptytemp]
Das Logfilemüsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
18.04.2010, 16:15
| #10 |
| | Avira 2010 Updatet nicht mehr Seitdem ich das gemacht habe ist alles größer (herrangezoomt) All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ISW not found. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Jonas ->Temp folder emptied: 35397 bytes ->Temporary Internet Files folder emptied: 41167 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 3616247 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 434 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 88006317 bytes RecycleBin emptied: 57416029 bytes Total Files Cleaned = 142,00 mb OTL by OldTimer - Version 3.2.1.2 log created on 04182010_170507 Files\Folders moved on Reboot... File\Folder C:\Windows\temp\JETC39C.tmp not found! Registry entries deleted on Reboot... |
|
18.04.2010, 16:35
| #11 |
| | Avira 2010 Updatet nicht mehr So siehts aus aber eigentlich ist der ganze Planet zu sehen |
|
18.04.2010, 16:56
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira 2010 Updatet nicht mehr Ich seh dort kein Bild 
__________________ Logfiles bitte immer in CODE-Tags posten |
|
18.04.2010, 17:17
| #13 |
| | Avira 2010 Updatet nicht mehr ISt nicht so schlimm dieses Problem war das sich die Auflösung irgentwie geändert hat. Und ich habe gelesen das der server von Avira doch überlastet ist??? |
|
18.04.2010, 18:21
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Avira 2010 Updatet nicht mehr Ja, Überlastungen können auftreten. Ich seh auch nichts, was darauf hindeuten könnte, dass bösartige Sachen Dir den Zugang zu den Avira-Updateservern blockieren... Versuchs einfach später nochmal mit dem Update. Oder wenn zu nervig ist, kannst Du auch zu anderen kostenlosen Alternativen (für reine private Zwecke versteht sich) wechseln: AVG free oder Avast. AntiVir musst Du dann aber vorher deinstallieren.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
18.04.2010, 19:14
| #15 |
| | Avira 2010 Updatet nicht mehr Danke |
|
| Themen zu Avira 2010 Updatet nicht mehr |
| antivir, antivirus, avira, dateien, definitionen, desktop, durchgeführt, erfolgreich, files, free, langer, nicht mehr, personal, programdata, report, server, service, service pack 2, trojaner, update, update.exe, version, versuche, verzeichnis, virendefinitionen, vista |
Avira 2010 Updatet nicht mehr
Linear-Darstellung
