|
Log-Analyse und Auswertung: Antispyware SoftWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
18.05.2010, 11:51 | #1 |
| Antispyware Soft Hallo, habe einen Antispyware Soft auf meinem Rechner anbei die Logs von Malware-bytes Anti-Malware (habe die infizierten Programme dann da löschen lassen) und 2 Logs von OTL (habe dies in einem anderen Forum so nachgelesen) Habe bislang nur folgendes gemacht außer der erstellung der LOGS: Im Task-Manager bei Prozesse die Datei kipebwitssd.exe gelöscht. Seitdem lassen sich Programme wieder öffnen und der Rechner funkioniert wieder normal bis ich den wieder neustarte, dann ist der Wurm wieder drauf. Und der Anleitung vom CCleaner bin ich gefolgt. Vielen DAnk schonmal für die Hilfe!!! 2.LOG OTL: OTL Extras logfile created on: 18.05.2010 12:12:39 - Run 2 OTL by OldTimer - Version 3.2.4.1 Folder = C:\Dokumente und Einstellungen\Fransen\Eigene Dateien\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 67,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 150,00 Gb Total Space | 4,41 Gb Free Space | 2,94% Space Free | Partition Type: NTFS Drive D: | 446,17 Gb Total Space | 446,09 Gb Free Space | 99,98% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: WILLI-18C053332 Current User Name: Fransen Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = htmlfile] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNetisabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNetisabled:@xpsp2res.dll,-22008 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hposfx08.exe" = C:\Programme\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqfxt08.exe" = C:\Programme\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe -- (TODO: <Company name>) "C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Programme\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Programme\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\HP Software Update\hpwucli.exe" = C:\Programme\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Programme\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Programme\Zattoo\zattood.exe" = C:\Programme\Zattoo\zattood.exe:*:Enabled:zattood -- () "C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hposfx08.exe" = C:\Programme\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqfxt08.exe" = C:\Programme\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe -- (TODO: <Company name>) "C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Programme\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Programme\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\HP Software Update\hpwucli.exe" = C:\Programme\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Programme\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.) "C:\Programme\FRITZ!Box-Kindersicherung\avmident.exe" = C:\Programme\FRITZ!Box-Kindersicherung\avmident.exe:*:Enabled:AVM FRITZ!Box Kindersicherung -- (AVM Berlin) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{03A7C57A-B2C8-409b-92E5-524A0DFD0DD3}" = Status "{0506D727-1CC8-F5F9-2F3F-D4C34F42D4E1}" = CCC Help Japanese "{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center "{087A66B8-1F0F-4a8d-A649-0CFE276AA7C0}" = WebReg "{0A5F80AA-FCA7-41C5-BF1C-74727ECE1031}" = Nero 8 Essentials "{0FD4C5BB-3293-A611-996F-3EFA3A809060}" = Catalyst Control Center Graphics Full New "{110AA4F8-0EF0-2786-7307-07FC547D71D3}" = Catalyst Control Center Localization Chinese Traditional "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{20EBFB79-E5CC-2172-2A52-ED653C3F7496}" = Catalyst Control Center Localization Thai "{2223FC2F-B862-4F83-BC9E-DDF2DADF2859}" = Intel(R) Network Connections 13.0.44.0 "{22DED538-7827-1035-C111-0EFD89242EFF}" = ccc-utility "{244CF793-02E1-AD91-1818-35B1A3D45019}" = Catalyst Control Center Localization Finnish "{27510BCC-AD4C-64A0-2E21-68E648C4639A}" = Catalyst Control Center Localization Portuguese "{2A329FB6-389D-4396-A974-29656D6864AE}" = MarketResearch "{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8 "{2CF80394-EC02-9770-63F3-25EC9D65ABCD}" = Catalyst Control Center Graphics Full Existing "{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm "{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2 "{32541C15-620F-31D5-8E11-A43409577789}" = Catalyst Control Center Localization Greek "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup "{38DAE5F5-EC70-4aa5-801B-D11CA0A33B41}" = BPDSoftware "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker "{410AB9BC-B057-4D39-9260-660EE1B4BED2}" = Steuer 2009 "{47ECCB1F-2811-49C0-B6A7-26778639ABA0}" = 32 Bit HP CIO Components Installer "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter "{4AAF1096-FAC6-6078-26D6-A0FE44837D57}" = CCC Help Norwegian "{4D304678-738E-42a0-931A-2B022F49DEB8}" = TrayApp "{4D56FDD1-8F56-0B84-AD6A-8BE2098D3DB4}" = Catalyst Control Center Localization French "{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport "{4FBFF114-FAF2-3663-DE6C-9374465D7C50}" = Catalyst Control Center Localization German "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{56FDB311-6511-11DE-832F-0050560400B1}" = Haufe iDesk-Browser "{57F60D52-630B-43C5-BD20-176F5CD4EED6}" = bpd_scan "{59624372-3B85-47f4-9B04-4911E551DF1E}" = Lexware Info Service "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{60099F83-E390-A1FC-6A42-E9B458057C2D}" = CCC Help Greek "{63CFD835-FF50-4F8B-91CD-5662A8C640F8}" = Photo Transport "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 "{676981B7-A2D9-49D0-9F4C-03018F131DA9}" = DocProc "{6A1ACC15-7632-45ba-A3AB-0250EBD4B7DD}" = 6500_E709a "{6C2E461F-983A-C99D-CB19-CDDA2654B8C0}" = CCC Help Polish "{6CC080F1-2E00-41D5-BE47-A3BC784E9DFB}" = BPDSoftware_Ini "{6E6B6C0F-347F-DF74-F151-4209E34E010B}" = CCC Help Spanish "{6EED4269-588D-45b8-A80C-26A9CA62EE4E}" = HPSSupply "{710EFAF2-6F98-F11A-2899-5D300E05A861}" = Catalyst Control Center Localization Chinese Standard "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{737DEEB5-F019-4331-4C21-31EA4B8116BD}" = CCC Help Chinese Traditional "{76DBF55A-36A6-2956-A42B-0DC307A9421E}" = Catalyst Control Center Localization Japanese "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{794BEDA0-6D6E-C198-3978-A7BE87FA91F8}" = Catalyst Control Center Localization Danish "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{7D5BAE83-33AF-3C2E-CBE5-27DF7036DF0D}" = Catalyst Control Center Localization Korean "{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update "{83268C06-3DDA-3417-CBD0-886CBB3849BF}" = Catalyst Control Center Core Implementation "{87A9A9A9-FAB7-4224-9328-0FA2058C0FD5}" = Network "{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}" = ATI AVIVO Codecs "{89E6D5C5-5293-2F13-C586-95FE3711CC47}" = CCC Help Swedish "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8B1BA395-8A19-2689-EA04-6864986B1C83}" = Catalyst Control Center Localization Swedish "{8C8B1E9E-0E64-BCE1-6729-1059588A1133}" = CCC Help Thai "{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager "{9129B46A-51F0-431b-9838-DF7272F3204E}" = ProductContext "{97162EF5-1BBA-B705-C55B-B6723B5E7A8D}" = Catalyst Control Center Localization Polish "{9895B276-5E25-E402-DB4B-02268EBFD7CB}" = Catalyst Control Center Localization Spanish "{98D0EF6E-D7A6-98CB-EC91-8FC665696DB2}" = CCC Help Finnish "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C94D1CE-D6F1-2A5D-E23E-A53197ADA397}" = Catalyst Control Center Localization Czech "{9CCCFD9C-248F-47FE-9496-1680E3E5C163}" = Scan "{9FED980B-ABC9-D704-C6C7-15EBEB724150}" = CCC Help Turkish "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A37F84B9-3912-198A-687E-B4417B73AEBD}" = CCC Help Russian "{A47AFECA-7F0F-471A-82A3-68DEB673A311}" = AVM FRITZ!Box-Kindersicherung "{A4BCCD3C-074B-0E57-7099-54E0624AC6DE}" = Catalyst Control Center Localization Italian "{A52F05C9-7F2A-AAA9-DF78-2234C6D2E83F}" = Skins "{A6D2E392-DBB6-38E1-ECC7-893874705012}" = CCC Help English "{A70017C9-9573-BFCF-BA73-F3B81C8B63B0}" = ccc-core-preinstall "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder "{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}" = Join Air "{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter "{AB326AD3-CC82-E3B2-2CD5-ECDD5AF8D643}" = CCC Help French "{AC13BA3A-336B-45a4-B3FE-2D3058A7B533}" = Toolbox "{AC76BA86-7AD7-1031-7B44-A92000000001}" = Adobe Reader 9.2 - Deutsch "{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B4CFE93E-EB92-9FB2-D624-176FC8463939}" = Catalyst Control Center Localization Norwegian "{B581CD0C-4D54-45B9-15A5-C076CE92D2A1}" = CCC Help Korean "{B5C8D689-5094-CE73-81E6-72BE4A6E565C}" = CCC Help Czech "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Plus Web Player "{BBCB307D-791C-580C-AEA7-5784A989D714}" = CCC Help Italian "{BCFC75AE-4704-1F5F-72BC-39FC0960C613}" = Catalyst Control Center Localization Hungarian "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C29C1940-CB85-4F3B-906C-33FEE0E67103}" = DocMgr "{C3542652-4C59-4A96-982A-06EBB3F47819}" = Steuer-Hilfesammlung 2009 "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant "{C68E2DE7-15F6-D4A0-0188-03CFDC5A4056}" = CCC Help Dutch "{C9AEA36E-D579-DC0B-2D14-CE3448858E15}" = CCC Help Portuguese "{CB8BC1A7-27D3-CF14-10C2-F979CE0A6D73}" = CCC Help Hungarian "{CD4791D0-DDEB-30C0-5EE3-310683954DBE}" = ccc-core-static "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CF8DD053-4360-2D42-2306-7E5523204183}" = Catalyst Control Center Localization Dutch "{CFFC0E5E-1CC6-0A54-EA85-AB6C245A6450}" = Catalyst Control Center Graphics Previews Common "{D70A9D24-D059-6DA7-D245-5D1F12AEBC66}" = CCC Help German "{D765F1CE-5AE5-4C47-B134-AE58AC474740}" = OpenOffice.org 3.1 "{DBC0FEB8-7B6B-4AC3-9424-E5BDF0056C17}" = CCC Help Chinese Standard "{DE13432E-F0C1-4842-A5BA-CC997DA72A70}" = 6500_E709_eDocs "{E310227C-039D-34BA-079C-82DBC24861A8}" = CCC Help Danish "{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio "{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster "{EB5AE940-8E5D-11DE-992A-005056B12123}" = Haufe iDesk-Service "{EC9FF8F9-BF0F-90A4-E221-BA54843FA4DF}" = Catalyst Control Center Graphics Light "{EEE0742C-BB91-0818-9C77-A41B10564A76}" = Catalyst Control Center Localization Russian "{EEEB604C-C1A7-4f8c-B03F-56F9C1C9C45F}" = Fax "{EF9E56EE-0243-4BAD-88F4-5E7508AA7D96}" = Destination Component "{F185B35D-38E5-4D88-B275-15C8C7FC4357}" = 6500_E709_Help "{F769B78E-FF0E-4db5-95E2-9F4C8D6352FE}" = DeviceDiscovery "{F8463C0F-EC64-9E98-F4C2-97516F50764A}" = Catalyst Control Center Localization Turkish "{FA0F0A01-4631-4161-A6C2-948BF694382E}" = HP Officejet 6500 E709 Series "{FA3A247D-437A-455E-A88F-7EB6E5F9E799}" = Catalyst Control Center - Branding "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software "ATI Display Driver" = ATI Display Driver "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "AVMWLANCLI" = AVM FRITZ!WLAN "Casino-On-Net" = Casino-On-Net "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters "Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2 "Google Chrome" = Google Chrome "HP Document Manager" = HP Document Manager 2.0 "HP Imaging Device Functions" = HP Imaging Device Functions 12.0 "HP Smart Web Printing" = HP Smart Web Printing 4.60 "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 "HPExtendedCapabilities" = HP Customer Participation Program 12.0 "HPOCR" = OCR Software by I.R.I.S. 12.0 "ie8" = Windows Internet Explorer 8 "InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8 "Lidl-Fotos_is1" = Lidl-Fotos "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "McAfee Security Scan" = McAfee Security Scan "Microsoft .NET Framework 3.5 SP1" 1.LOG OTL: OTL logfile created on: 18.05.2010 12:12:39 - Run 2 OTL by OldTimer - Version 3.2.4.1 Folder = C:\Dokumente und Einstellungen\Fransen\Eigene Dateien\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 67,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 150,00 Gb Total Space | 4,41 Gb Free Space | 2,94% Space Free | Partition Type: NTFS Drive D: | 446,17 Gb Total Space | 446,09 Gb Free Space | 99,98% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: WILLI-18C053332 Current User Name: Fransen Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Fransen\Eigene Dateien\Downloads\OTL(3).exe (OldTimer Tools) PRC - C:\Dokumente und Einstellungen\Fransen\Lokale Einstellungen\Temp\Hnv.exe () PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\Join Air\AssistantServices.exe () PRC - C:\Programme\Join Air\UIExec.exe () PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin) PRC - C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin) PRC - C:\Programme\OpenOffice.org 3\program\soffice.bin (OpenOffice.org) PRC - C:\Programme\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe (Lexware GmbH & Co. KG) PRC - C:\Programme\IDT\WDM\sttray.exe (IDT, Inc.) PRC - c:\Programme\IDT\IntelXPV_v100\WDM\stacsv.exe (IDT, Inc.) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) PRC - C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Programme\CyberLink\PowerDVD8\PDVD8Serv.exe (Cyberlink Corp.) PRC - C:\Programme\Java\jre1.6.0_02\bin\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Programme\FRITZ!Box-Kindersicherung\avmident.exe (AVM Berlin) ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\Fransen\Eigene Dateien\Downloads\OTL(3).exe (OldTimer Tools) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (UI Assistant Service) -- C:\Programme\Join Air\AssistantServices.exe () SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (AVM WLAN Connection Service) -- C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin) SRV - (NMIndexingService) -- C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe (Nero AG) SRV - (STacSV) -- c:\Programme\IDT\IntelXPV_v100\WDM\stacsv.exe (IDT, Inc.) SRV - (IAANTMON) Intel(R) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation) SRV - (avmidentd) -- C:\Programme\FRITZ!Box-Kindersicherung\avmident.exe (AVM Berlin) SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation) ========== Driver Services (SafeList) ========== DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH) DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH) DRV - (fwlanusbn) -- C:\WINDOWS\system32\drivers\fwlanusbn.sys (AVM GmbH) DRV - (avmeject) -- C:\WINDOWS\system32\drivers\avmeject.sys (AVM Berlin) DRV - (FWLANUSB) -- C:\WINDOWS\system32\drivers\fwlanusb.sys (AVM GmbH) DRV - (massfilter) -- C:\WINDOWS\system32\drivers\massfilter.sys (ZTE Incorporated) DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH) DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH) DRV - (ZTEusbnmea) -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys (ZTE Incorporated) DRV - (ZTEusbser6k) -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys (ZTE Incorporated) DRV - (ZTEusbmdm6k) -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated) DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.) DRV - (AtiHdmiService) -- C:\WINDOWS\system32\drivers\AtiHdmi.sys (ATI Research Inc.) DRV - (e1yexpress) Intel(R) -- C:\WINDOWS\system32\drivers\e1y5132.sys (Intel Corporation) DRV - (STHDA) -- C:\WINDOWS\system32\drivers\sthda.sys (IDT, Inc.) DRV - (iaStor) -- C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider) DRV - (NAL) -- C:\WINDOWS\system32\drivers\iqvw32.sys (Intel Corporation ) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local> IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555 ========== FireFox ========== FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.02.06 15:02:18 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.04.20 17:26:22 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.04.03 09:20:35 | 000,000,000 | ---D | M] [2009.08.10 20:49:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fransen\Anwendungsdaten\Mozilla\Extensions [2010.05.17 18:50:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fransen\Anwendungsdaten\Mozilla\Firefox\Profiles\vurt4b7g.default\extensions [2009.08.10 22:05:04 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Fransen\Anwendungsdaten\Mozilla\Firefox\Profiles\vurt4b7g.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.03.25 20:06:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Dokumente und Einstellungen\Fransen\Anwendungsdaten\Mozilla\Firefox\Profiles\vurt4b7g.default\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} [2010.03.25 20:05:50 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010.03.13 16:14:24 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.03.13 16:14:24 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.03.13 16:14:24 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.03.13 16:14:24 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.03.13 16:14:24 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2008.04.14 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Programme\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [AVMWlanClient] C:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin) O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [LexwareInfoService] C:\Programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe (Lexware GmbH & Co. KG) O4 - HKLM..\Run: [NBKeyScan] C:\Programme\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Nero\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [owvinlbi] C:\Dokumente und Einstellungen\Fransen\Lokale Einstellungen\Anwendungsdaten\qiqojliye\kipebwitssd.exe () O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Programme\CyberLink\PowerDVD8\Language\Language.exe () O4 - HKLM..\Run: [RemoteControl8] C:\Programme\CyberLink\PowerDVD8\PDVD8Serv.exe (Cyberlink Corp.) O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.6.0_02\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray.exe (IDT, Inc.) O4 - HKLM..\Run: [UIExec] C:\Programme\Join Air\UIExec.exe () O4 - HKCU..\Run: [M5T8QL3YW3] C:\Dokumente und Einstellungen\Fransen\Lokale Einstellungen\Temp\Hnv.exe () O4 - HKCU..\Run: [owvinlbi] C:\Dokumente und Einstellungen\Fransen\Lokale Einstellungen\Anwendungsdaten\qiqojliye\kipebwitssd.exe () O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\McAfee Security Scan.lnk = C:\Programme\McAfee Security Scan\1.0.150\SSScheduler.exe File not found O4 - Startup: C:\Dokumente und Einstellungen\Fransen\Startmenü\Programme\Autostart\OpenOffice.org 3.1.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKC Geändert von alfredo (18.05.2010 um 11:58 Uhr) |
18.05.2010, 11:52 | #2 |
| Antispyware Soft 1.LOG Malware-bytes' Anti-Malware:
__________________Malwarebytes' Anti-Malware 1.46 Malwarebytes Datenbank Version: 4052 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 18.05.2010 12:10:50 mbam-log-2010-05-18 (12-10-50).txt Art des Suchlaufs: Quick-Scan Durchsuchte Objekte: 114747 Laufzeit: 4 Minute(n), 35 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 5 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully. Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
20.05.2010, 10:00 | #3 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Antispyware Soft__________________
__________________ |
20.05.2010, 19:23 | #4 |
| Antispyware Soft Ok habe ich getan, was jetzt? Unten die LOG-Datei Malwarebytes' Anti-Malware 1.46 Malwarebytes Datenbank Version: 4121 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 20.05.2010 20:11:26 mbam-log-2010-05-20 (20-11-26).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|) Durchsuchte Objekte: 208700 Laufzeit: 40 Minute(n), 13 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 7 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: C:\Dokumente und Einstellungen\Fransen\Lokale Einstellungen\Temporary Internet Files\Content.IE5\MZYM46ON\gotnewupdate000[1].exe (Malware.Packer.Gen) -> Quarantined and deleted successfully. C:\Dokumente und Einstellungen\Fransen\Lokale Einstellungen\Temporary Internet Files\Content.IE5\P6UUTLIU\yptozgozmu[1].htm (Rogue.AntispywareSoft) -> Quarantined and deleted successfully. C:\Dokumente und Einstellungen\Fransen\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UT3RX266\hypwhc[1].htm (Trojan.Downloader) -> Quarantined and deleted successfully. C:\Dokumente und Einstellungen\Fransen\Lokale Einstellungen\Temporary Internet Files\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\productinfo.dll (Adware.DoubleD) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{B02D7C7A-C637-41FA-8B36-6A968A5E8151}\RP159\A0037726.exe (Trojan.Downloader) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{B02D7C7A-C637-41FA-8B36-6A968A5E8151}\RP160\A0037855.exe (Rogue.AntispywareSoft) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{B02D7C7A-C637-41FA-8B36-6A968A5E8151}\RP160\A0037856.exe (Trojan.Fraudpack) -> Quarantined and deleted successfully. |
20.05.2010, 20:01 | #5 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Antispyware Soft Das eine OTL-Log ist unvollständig. Bitte vollständig posten!
__________________ Logfiles bitte immer in CODE-Tags posten |
21.05.2010, 13:13 | #6 |
| Antispyware Soft hoffe die sind so vollständig: (passen irgendwie nicht alles in einen Beitrag rein dewegen aufgeteilt in mehrere) OTL Extras logfile created on: 18.05.2010 00:27:04 - Run 1 OTL by OldTimer - Version 3.2.4.1 Folder = C:\Dokumente und Einstellungen\Fransen\Eigene Dateien\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 68,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 150,00 Gb Total Space | 4,43 Gb Free Space | 2,95% Space Free | Partition Type: NTFS Drive D: | 446,17 Gb Total Space | 446,09 Gb Free Space | 99,98% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: WILLI-18C053332 Current User Name: Fransen Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = htmlfile] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNetisabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNetisabled:@xpsp2res.dll,-22008 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hposfx08.exe" = C:\Programme\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqfxt08.exe" = C:\Programme\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe -- (TODO: <Company name>) "C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Programme\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Programme\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\HP Software Update\hpwucli.exe" = C:\Programme\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Programme\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Programme\Zattoo\zattood.exe" = C:\Programme\Zattoo\zattood.exe:*:Enabled:zattood -- () "C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hposfx08.exe" = C:\Programme\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqfxt08.exe" = C:\Programme\HP\Digital Imaging\bin\hpqfxt08.exe:*:Enabled:hpqfxt08.exe -- (TODO: <Company name>) "C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Programme\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Programme\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.) "C:\Programme\HP\HP Software Update\hpwucli.exe" = C:\Programme\HP\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard) "C:\Programme\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Programme\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.) "C:\Programme\FRITZ!Box-Kindersicherung\avmident.exe" = C:\Programme\FRITZ!Box-Kindersicherung\avmident.exe:*:Enabled:AVM FRITZ!Box Kindersicherung -- (AVM Berlin) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{03A7C57A-B2C8-409b-92E5-524A0DFD0DD3}" = Status "{0506D727-1CC8-F5F9-2F3F-D4C34F42D4E1}" = CCC Help Japanese "{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center "{087A66B8-1F0F-4a8d-A649-0CFE276AA7C0}" = WebReg "{0A5F80AA-FCA7-41C5-BF1C-74727ECE1031}" = Nero 8 Essentials "{0FD4C5BB-3293-A611-996F-3EFA3A809060}" = Catalyst Control Center Graphics Full New "{110AA4F8-0EF0-2786-7307-07FC547D71D3}" = Catalyst Control Center Localization Chinese Traditional "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{20EBFB79-E5CC-2172-2A52-ED653C3F7496}" = Catalyst Control Center Localization Thai "{2223FC2F-B862-4F83-BC9E-DDF2DADF2859}" = Intel(R) Network Connections 13.0.44.0 "{22DED538-7827-1035-C111-0EFD89242EFF}" = ccc-utility "{244CF793-02E1-AD91-1818-35B1A3D45019}" = Catalyst Control Center Localization Finnish "{27510BCC-AD4C-64A0-2E21-68E648C4639A}" = Catalyst Control Center Localization Portuguese "{2A329FB6-389D-4396-A974-29656D6864AE}" = MarketResearch "{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8 "{2CF80394-EC02-9770-63F3-25EC9D65ABCD}" = Catalyst Control Center Graphics Full Existing "{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm "{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2 "{32541C15-620F-31D5-8E11-A43409577789}" = Catalyst Control Center Localization Greek "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup "{38DAE5F5-EC70-4aa5-801B-D11CA0A33B41}" = BPDSoftware "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker "{410AB9BC-B057-4D39-9260-660EE1B4BED2}" = Steuer 2009 "{47ECCB1F-2811-49C0-B6A7-26778639ABA0}" = 32 Bit HP CIO Components Installer "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter "{4AAF1096-FAC6-6078-26D6-A0FE44837D57}" = CCC Help Norwegian "{4D304678-738E-42a0-931A-2B022F49DEB8}" = TrayApp "{4D56FDD1-8F56-0B84-AD6A-8BE2098D3DB4}" = Catalyst Control Center Localization French "{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport "{4FBFF114-FAF2-3663-DE6C-9374465D7C50}" = Catalyst Control Center Localization German "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{56FDB311-6511-11DE-832F-0050560400B1}" = Haufe iDesk-Browser "{57F60D52-630B-43C5-BD20-176F5CD4EED6}" = bpd_scan "{59624372-3B85-47f4-9B04-4911E551DF1E}" = Lexware Info Service "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{60099F83-E390-A1FC-6A42-E9B458057C2D}" = CCC Help Greek "{63CFD835-FF50-4F8B-91CD-5662A8C640F8}" = Photo Transport "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 "{676981B7-A2D9-49D0-9F4C-03018F131DA9}" = DocProc "{6A1ACC15-7632-45ba-A3AB-0250EBD4B7DD}" = 6500_E709a "{6C2E461F-983A-C99D-CB19-CDDA2654B8C0}" = CCC Help Polish "{6CC080F1-2E00-41D5-BE47-A3BC784E9DFB}" = BPDSoftware_Ini "{6E6B6C0F-347F-DF74-F151-4209E34E010B}" = CCC Help Spanish "{6EED4269-588D-45b8-A80C-26A9CA62EE4E}" = HPSSupply "{710EFAF2-6F98-F11A-2899-5D300E05A861}" = Catalyst Control Center Localization Chinese Standard "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{737DEEB5-F019-4331-4C21-31EA4B8116BD}" = CCC Help Chinese Traditional "{76DBF55A-36A6-2956-A42B-0DC307A9421E}" = Catalyst Control Center Localization Japanese "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{794BEDA0-6D6E-C198-3978-A7BE87FA91F8}" = Catalyst Control Center Localization Danish "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{7D5BAE83-33AF-3C2E-CBE5-27DF7036DF0D}" = Catalyst Control Center Localization Korean "{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update "{83268C06-3DDA-3417-CBD0-886CBB3849BF}" = Catalyst Control Center Core Implementation "{87A9A9A9-FAB7-4224-9328-0FA2058C0FD5}" = Network "{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}" = ATI AVIVO Codecs "{89E6D5C5-5293-2F13-C586-95FE3711CC47}" = CCC Help Swedish "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8B1BA395-8A19-2689-EA04-6864986B1C83}" = Catalyst Control Center Localization Swedish "{8C8B1E9E-0E64-BCE1-6729-1059588A1133}" = CCC Help Thai "{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager "{9129B46A-51F0-431b-9838-DF7272F3204E}" = ProductContext "{97162EF5-1BBA-B705-C55B-B6723B5E7A8D}" = Catalyst Control Center Localization Polish "{9895B276-5E25-E402-DB4B-02268EBFD7CB}" = Catalyst Control Center Localization Spanish "{98D0EF6E-D7A6-98CB-EC91-8FC665696DB2}" = CCC Help Finnish "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C94D1CE-D6F1-2A5D-E23E-A53197ADA397}" = Catalyst Control Center Localization Czech "{9CCCFD9C-248F-47FE-9496-1680E3E5C163}" = Scan "{9FED980B-ABC9-D704-C6C7-15EBEB724150}" = CCC Help Turkish "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A37F84B9-3912-198A-687E-B4417B73AEBD}" = CCC Help Russian "{A47AFECA-7F0F-471A-82A3-68DEB673A311}" = AVM FRITZ!Box-Kindersicherung "{A4BCCD3C-074B-0E57-7099-54E0624AC6DE}" = Catalyst Control Center Localization Italian "{A52F05C9-7F2A-AAA9-DF78-2234C6D2E83F}" = Skins "{A6D2E392-DBB6-38E1-ECC7-893874705012}" = CCC Help English "{A70017C9-9573-BFCF-BA73-F3B81C8B63B0}" = ccc-core-preinstall "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder "{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}" = Join Air "{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter "{AB326AD3-CC82-E3B2-2CD5-ECDD5AF8D643}" = CCC Help French "{AC13BA3A-336B-45a4-B3FE-2D3058A7B533}" = Toolbox "{AC76BA86-7AD7-1031-7B44-A92000000001}" = Adobe Reader 9.2 - Deutsch "{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B4CFE93E-EB92-9FB2-D624-176FC8463939}" = Catalyst Control Center Localization Norwegian "{B581CD0C-4D54-45B9-15A5-C076CE92D2A1}" = CCC Help Korean "{B5C8D689-5094-CE73-81E6-72BE4A6E565C}" = CCC Help Czech "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Plus Web Player "{BBCB307D-791C-580C-AEA7-5784A989D714}" = CCC Help Italian "{BCFC75AE-4704-1F5F-72BC-39FC0960C613}" = Catalyst Control Center Localization Hungarian "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C29C1940-CB85-4F3B-906C-33FEE0E67103}" = DocMgr "{C3542652-4C59-4A96-982A-06EBB3F47819}" = Steuer-Hilfesammlung 2009 "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant "{C68E2DE7-15F6-D4A0-0188-03CFDC5A4056}" = CCC Help Dutch "{C9AEA36E-D579-DC0B-2D14-CE3448858E15}" = CCC Help Portuguese "{CB8BC1A7-27D3-CF14-10C2-F979CE0A6D73}" = CCC Help Hungarian "{CD4791D0-DDEB-30C0-5EE3-310683954DBE}" = ccc-core-static "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CF8DD053-4360-2D42-2306-7E5523204183}" = Catalyst Control Center Localization Dutch "{CFFC0E5E-1CC6-0A54-EA85-AB6C245A6450}" = Catalyst Control Center Graphics Previews |
21.05.2010, 13:23 | #7 |
| Antispyware Soft Common "{D70A9D24-D059-6DA7-D245-5D1F12AEBC66}" = CCC Help German "{D765F1CE-5AE5-4C47-B134-AE58AC474740}" = OpenOffice.org 3.1 "{DBC0FEB8-7B6B-4AC3-9424-E5BDF0056C17}" = CCC Help Chinese Standard "{DE13432E-F0C1-4842-A5BA-CC997DA72A70}" = 6500_E709_eDocs "{E310227C-039D-34BA-079C-82DBC24861A8}" = CCC Help Danish "{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio "{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster "{EB5AE940-8E5D-11DE-992A-005056B12123}" = Haufe iDesk-Service "{EC9FF8F9-BF0F-90A4-E221-BA54843FA4DF}" = Catalyst Control Center Graphics Light "{EEE0742C-BB91-0818-9C77-A41B10564A76}" = Catalyst Control Center Localization Russian "{EEEB604C-C1A7-4f8c-B03F-56F9C1C9C45F}" = Fax "{EF9E56EE-0243-4BAD-88F4-5E7508AA7D96}" = Destination Component "{F185B35D-38E5-4D88-B275-15C8C7FC4357}" = 6500_E709_Help "{F769B78E-FF0E-4db5-95E2-9F4C8D6352FE}" = DeviceDiscovery "{F8463C0F-EC64-9E98-F4C2-97516F50764A}" = Catalyst Control Center Localization Turkish "{FA0F0A01-4631-4161-A6C2-948BF694382E}" = HP Officejet 6500 E709 Series "{FA3A247D-437A-455E-A88F-7EB6E5F9E799}" = Catalyst Control Center - Branding "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software "ATI Display Driver" = ATI Display Driver "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "AVMWLANCLI" = AVM FRITZ!WLAN "Casino-On-Net" = Casino-On-Net "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters "Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2 "Google Chrome" = Google Chrome "HP Document Manager" = HP Document Manager 2.0 "HP Imaging Device Functions" = HP Imaging Device Functions 12.0 "HP Smart Web Printing" = HP Smart Web Printing 4.60 "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 "HPExtendedCapabilities" = HP Customer Participation Program 12.0 "HPOCR" = OCR Software by I.R.I.S. 12.0 "ie8" = Windows Internet Explorer 8 "InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8 "Lidl-Fotos_is1" = Lidl-Fotos "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "McAfee Security Scan" = McAfee Security Scan "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "MSNINST" = MSN "NSS" = Norton Security Scan "Shop for HP Supplies" = Shop for HP Supplies "Uninstall_is1" = Uninstall 1.0.0.1 "VLC media player" = VLC media player 1.0.5 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 |
21.05.2010, 13:24 | #8 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Antispyware Soft Nö lassen wir das, mach es so: beide OTL Logs in eine ZIP Datei packen, dann diese ZIP dort hochladen => File-Upload.net <= und hier dann verlinken.
__________________ Logfiles bitte immer in CODE-Tags posten |