![]() |
|
Plagegeister aller Art und deren Bekämpfung: icq virus hat mich erwischt...img0737830249202010.JPG.scrWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() icq virus hat mich erwischt...img0737830249202010.JPG.scr meine Freundin hat sich den ICQ Bild Virus eingefangen. sie hat von einem Kontakt aus ihrer Liste ein Bild geschickt bekommen und geöffnet! nun habe ich hier schon einiges gelesen und die OTL und Malwarebytes Logs gepostet. hoffe ihr könnt mir helfen! MfG matschi hier mein Extras.txt von OTL OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 09.06.2010 21:44:51 - Run 1 OTL by OldTimer - Version 3.2.6.0 Folder = C:\Dokumente und Einstellungen\HannaH\Eigene Dateien\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 53,00% Memory free 3,00 Gb Paging File | 3,00 Gb Available in Paging File | 81,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 149,04 Gb Total Space | 74,02 Gb Free Space | 49,66% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: COMPUTERNAME Current User Name: HannaH Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Programme\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Programme\ICQLite\ICQLite.exe" = C:\Programme\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite -- File not found "C:\Programme\LimeWire\LimeWire.exe" = C:\Programme\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- File not found "C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.) "C:\Programme\Electronic Arts\EADM\Core.exe" = C:\Programme\Electronic Arts\EADM\Core.exe:*:Disabled:EA Download Manager -- File not found "C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation) "C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.) "C:\Programme\iWin Games\iWinGames.exe" = C:\Programme\iWin Games\iWinGames.exe:*:Enabled:iWin Games application. -- (iWin Inc.) "C:\Programme\iWin Games\WebUpdater.exe" = C:\Programme\iWin Games\WebUpdater.exe:*:Enabled:iWin Games updater. -- () "C:\Dokumente und Einstellungen\HannaH\Anwendungsdaten\winscdvn.exe" = C:\Dokumente und Einstellungen\HannaH\Anwendungsdaten\winscdvn.exe:*:Enabled:Windows Firewall Manager -- () ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour "{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series" = Canon MP250 series MP Drivers "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter "{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{190B4E60-FE37-4B8C-A661-172997347A90}" = Sony Media Manager 2.2 "{192A107E-C6B9-41B9-BDBF-38E3AA226054}" = OpenOffice.org 3.2 "{1A15507A-8551-4626-915D-3D5FA095CC1B}" = Corel Paint Shop Pro X "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = Multimedia Launcher "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{237CD223-1B9D-47E8-A76C-E478B83CCEA2}" = File Uploader "{266C7330-C0F4-49E5-8F20-A56F9F822875}" = SweetIM Toolbar for Internet Explorer 3.3 "{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18 "{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie "{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6 "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3AC54383-31D1-4907-961B-B12CBB1D0AE8}" = MobileMe Control Panel "{3AF8FCCD-F51A-4014-9002-F195E1CBC876}" = Logitech QuickCam "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform "{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support "{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker "{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger "{49FC50FC-F965-40D9-89B4-CBFF80941031}" = Windows Movie Maker 2.0 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack "{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent "{53735ECE-E461-4FD0-B742-23A352436D3A}" = Logitech Updater "{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3 "{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call "{6179550A-3E7C-499E-BCC9-9E8113E0A285}" = LG ODD Auto Firmware Update "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = Die Sims 2 "{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{73DD6B69-02CB-4DA8-A0E0-FC56EE13EB18}" = SweetIM for Messenger 2.6 "{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync "{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762 "{769033E4-C119-496A-8144-3F468081F8D7}" = Movavi Video Suite 8 "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{84DDE556-43EF-43ed-B2DF-37AF9E5DDD75}" = Die Sims™ 2 H&M®-Fashion-Accessoires "{87441A59-5E64-4096-A170-14EFE67200C3}" = Picture Control Utility "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86) "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{91CA0407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Small Business Edition 2003 "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{95120000-0122-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector "{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6 "{994223F3-A99B-4DDD-9E1D-0190A17C6860}" = Windows Live Family Safety "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder "{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter "{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support "{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3 - Deutsch "{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8 "{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player "{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer "{B97CF5C3-0487-11D8-A36E-0050BAE317E1}" = DVD Solution "{BD57EA4D-026E-4F08-9B93-080E282B81FE}" = iPod for Windows 2006-06-28 "{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86) "{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3 "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C151CE54-E7EA-4804-854B-F515368B0798}" = Athlon 64 Processor Driver "{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center "{D45E8C45-B601-4A80-AFD8-E16338744DE1}" = ArcSoft Panorama Maker 4 "{DB9E4EAB-2717-499F-8D56-4CC8A644AB60}" = MPlayer für Windows (Full Package) "{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}" = Die Sims™ 2 Vier Jahreszeiten "{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) "{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer "{E1180142-3B31-4DCC-9D27-7AC2D37662BF}" = LightScribe 1.4.124.1 "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E9757890-7EC5-46C8-99AB-B00F07B6525C}" = Nikon Transfer "{F007CBCE-D714-4C0B-8CE9-9B0D78116468}" = ViewNX "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}" = iTunes "{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player "Amelie's Cafe" = Amelie's Cafe (nur deinstallation) "Antique Shop" = Antique Shop (nur deinstallation) "AntiVir PersonalEdition Classic" = Avira AntiVir Personal - Free Antivirus "Ashton's Family Resort" = Ashton's Family Resort (nur deinstallation) "Ask Toolbar_is1" = Ask Toolbar "Audacity_is1" = Audacity 1.2.6 "Babysitting Mania" = Babysitting Mania (nur deinstallation) "Beach Party Craze" = Beach Party Craze (nur deinstallation) "Burger Shop" = Burger Shop (nur deinstallation) "Cake Shop" = Cake Shop (nur deinstallation) "Canon MP250 series Benutzerregistrierung" = Canon MP250 series Benutzerregistrierung "CanonMyPrinter" = Canon Utilities My Printer "CanonSolutionMenu" = Canon Utilities Solution Menu "Cooking Academy 2" = Cooking Academy 2 (nur deinstallation) "Cooking Dash" = Cooking Dash (nur deinstallation) "Costume Chaos" = Costume Chaos (nur deinstallation) "Daycare Nightmare" = Daycare Nightmare (nur deinstallation) "Delicious: Emily's Tea Garden" = Delicious: Emily's Tea Garden (nur deinstallation) "Diner Dash 2" = Diner Dash 2 (nur entfernen) "Diner Dash 5: BOOM! Standard Edition" = Diner Dash 5: BOOM! Standard Edition (nur deinstallation) "Diner Dash: Flo on the Go" = Diner Dash: Flo on the Go (nur deinstallation) "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters "Doggie Dash" = Doggie Dash (nur deinstallation) "Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX "Easy-WebPrint EX" = Canon Easy-WebPrint EX "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "Family Feud™" = Family Feud™ (nur deinstallation) "Farm Frenzy" = Farm Frenzy (nur deinstallation) "Farm Frenzy 2" = Farm Frenzy 2 (nur deinstallation) "Farm Frenzy 3" = Farm Frenzy 3 (nur deinstallation) "Farm Frenzy: Pizza Party" = Farm Frenzy: Pizza Party (nur deinstallation) "Fitness Dash" = Fitness Dash (nur deinstallation) "Free Studio_is1" = Free Studio version 4.3 "Free YouTube Download_is1" = Free YouTube Download 2.2 "Free YouTube to Mp3 Converter_is1" = Free YouTube to Mp3 Converter version 3.1 "Free YouTube Uploader_is1" = Free YouTube Uploader version 2.2 "Frühling" = Frühling "Google Chrome" = Google Chrome "Graffiti Studio 2.0_is1" = Graffiti Studio 2.0 "Herbst" = Herbst "Home Sweet Home" = Home Sweet Home (nur deinstallation) "Home Sweet Home 2: Kitchens and Baths" = Home Sweet Home 2: Kitchens and Baths (nur deinstallation) "Hospital Hustle" = Hospital Hustle (nur deinstallation) "Hotel Mogul" = Hotel Mogul (nur deinstallation) "Icy Tower v1.3.1_is1" = Icy Tower v1.3.1 "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "InCD!UninstallKey" = InCD "InstallShield_{BD57EA4D-026E-4F08-9B93-080E282B81FE}" = iPod for Windows 2006-06-28 "IrfanView" = IrfanView (remove only) "iWinArcade" = iWin Games (remove only) "Janes Hotel" = Janes Hotel (nur deinstallation) "Janes Hotel Family Hero" = Janes Hotel Family Hero (nur deinstallation) "Jane's Realty" = Jane's Realty (nur deinstallation) "Jane's Realty 2" = Jane's Realty 2 (nur deinstallation) "Jessica's Cupcake Cafe" = Jessica's Cupcake Cafe (nur deinstallation) "JPGCOMPRESS" = JPGCOMPRESS Version 1.0 "kikin Plugin (Murb.com Edition)" = kikin Plugin (Murb.com Edition) 1.11 "legacyqcam_11.10" = Logitech Legacy USB Camera-Treiberpaket "Little Farm" = Little Farm (nur deinstallation) "Little Shop: Memories" = Little Shop: Memories (nur deinstallation) "lvdrivers_11.80" = Logitech QuickCam-Treiberpaket "McLoad Preinstaller" = McLoad Preinstaller "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "MixPad" = MixPad Audio Mixer "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "MP Navigator EX 3.0" = Canon MP Navigator EX 3.0 "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "My Kingdom for the Princess" = My Kingdom for the Princess (nur deinstallation) "Mysterious City: Vegas" = Mysterious City: Vegas (nur deinstallation) "Nero - Burning Rom!UninstallKey" = Nero OEM "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "NVIDIA Drivers" = NVIDIA Drivers "Parking Dash" = Parking Dash (nur deinstallation) "Party Down" = Party Down (nur deinstallation) "Pet Show Craze" = Pet Show Craze (nur deinstallation) "Photo Mania" = Photo Mania (nur deinstallation) "Picasa 3" = Picasa 3 "Ranch Rush 2: Premium Edition" = Ranch Rush 2: Premium Edition (nur deinstallation) "Romopolis" = Romopolis (nur deinstallation) "SearchAnonymizer" = SearchAnonymizer "Sommer" = Sommer "SoundTap" = SoundTap Streaming Audio Recorder "Supermarket Management" = Supermarket Management (nur deinstallation) "Supermarket Mania" = Supermarket Mania (nur deinstallation) "Switch" = Switch Sound File Converter "The Enchanting Islands" = The Enchanting Islands (nur deinstallation) "Townopolis" = Townopolis (nur deinstallation) "Uninstall_is1" = Uninstall 1.0.0.1 "Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions "WavePad" = WavePad Sound Editor "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinGimp-2.0_is1" = GIMP 2.6.7 "WinLiveSuite_Wave3" = Windows Live Essentials "Winter" = Winter "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "Youda Marina" = Youda Marina (nur deinstallation) "Zulu" = Zulu DJ Software ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 03.04.2010 08:45:52 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung babysittingmania.ifn, Version 10.1.0.11, fehlgeschlagenes Modul babysittingmania.ifn, Version 10.1.0.11, Fehleradresse 0x0004e89a. Error - 04.04.2010 05:06:00 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung babysittingmania.ifn, Version 10.1.0.11, fehlgeschlagenes Modul babysittingmania.ifn, Version 10.1.0.11, Fehleradresse 0x0004e89a. Error - 25.04.2010 07:33:05 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.5512, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x00000000. Error - 27.04.2010 09:11:11 | Computer Name = COMPUTERNAME | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung ICQ.exe, Version 7.1.0.2096, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 28.04.2010 08:22:22 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung javaw.exe, Version 6.0.180.7, fehlgeschlagenes Modul java.dll, Version 6.0.180.7, Fehleradresse 0x00005875. Error - 01.05.2010 16:14:00 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung deliciousemilytea.ifn, Version 1.1.0.0, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x0000000f. Error - 01.05.2010 16:28:12 | Computer Name = COMPUTERNAME | Source = Ci | ID = 4124 Description = Der Inhaltsindex auf c:\system volume information\catalog.wci ist beschädigt. Fahren Sie den Indexdienst (cisvc) herunter, und starten Sie ihn erneut. Error - 01.05.2010 16:28:12 | Computer Name = COMPUTERNAME | Source = Ci | ID = 4126 Description = Die Metadaten des Inhaltsindex auf c:\system volume information\catalog.wci werden aufgeräumt. Wiederherstellen des Indexes erfolgt automatisch durch erneutes Filtern aller Dokumente. Error - 02.05.2010 15:34:56 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung deliciousemilytea.ifn, Version 1.1.0.0, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x0000000f. Error - 04.05.2010 11:22:22 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung javaw.exe, Version 6.0.180.7, fehlgeschlagenes Modul java.dll, Version 6.0.180.7, Fehleradresse 0x00005875. [ System Events ] Error - 06.06.2010 06:58:23 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 06.06.2010 11:29:56 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 07.06.2010 08:19:19 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 08.06.2010 00:52:24 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 08.06.2010 09:01:08 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 08.06.2010 15:45:34 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 09.06.2010 08:52:05 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 09.06.2010 14:14:15 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 09.06.2010 15:18:27 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt Error - 09.06.2010 15:37:09 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026 Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: i8042prt < End of report > Geändert von matschi (09.06.2010 um 21:44 Uhr) |
Themen zu icq virus hat mich erwischt...img0737830249202010.JPG.scr |
.dll, .jpg.scr, adobe, ask toolbar, audacity, avira, benutzerregistrierung, canon, desktop, diner dash, einstellungen, entfernen, error, explorer, extras.txt, firefox.exe, flash player, format, google, google chrome, home, limewire, location, logfile, mozilla, mp3, oldtimer, picasa, realtek, registry, rundll, saver, security, server, shell32.dll, software, starten, studio, sweetim, tower, usb, virus, windows internet, windows internet explorer |