|
Log-Analyse und Auswertung: AV Security Suite AuswertungWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
12.07.2010, 14:11 | #1 |
| AV Security Suite Auswertung OTL Extras Auswertung: OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 12.07.2010 14:45:31 - Run 1 OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Zocker\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 76,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 698,54 Gb Total Space | 402,25 Gb Free Space | 57,59% Space Free | Partition Type: NTFS Drive D: | 6,83 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: HELLMACHINE Current User Name: Zocker Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes] "C:\Nexon\Combat Arms EU\CombatArms.exe" = C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe -- (Nexon) "C:\Nexon\Combat Arms EU\Engine.exe" = C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe?? -- (Nexon) "C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes] "C:\Nexon\Combat Arms EU\CombatArms.exe" = C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe -- (Nexon) "C:\Nexon\Combat Arms EU\Engine.exe" = C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe?? -- (Nexon) ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{2D5D9603-22CF-4B99-83F6-0CD20330F62E}" = FRITZ!DSL64 "{328CC232-CFDC-468B-A214-2E21300E4CB5}" = Apple Mobile Device Support "{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 "{4B55F339-396E-29A9-B6D0-24B6D251C90A}" = AMD Drag and Drop Transcoding "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{4FBB2E98-1A3B-396A-A662-73E17009C076}" = ATI Catalyst Install Manager "{53529DAD-F7C9-476E-87CC-1547C4E3E821}" = iTunes "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}" = Bonjour "{D0CE053E-0E5E-4C12-9BAE-D0F36021E911}" = POV-Ray for Windows v3.62 "{D285FC5F-3021-32E9-9C59-24CA325BDC5C}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 "{ED066E02-C49A-D5D9-7ACD-1014EB7571D1}" = ccc-utility64 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "CPUID CPU-Z_is1" = CPUID CPU-Z 1.54 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "PerformanceTest 7_is1" = PerformanceTest v7.0 (64-bit) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{19C64880-BBCA-11D4-9EEE-0004ACDDDB3B}" = CyberLink InstantBurn "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 17 "{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010 "{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime "{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}" = CyberLink BD Advisor 2.0 "{2E1A71D5-7897-4F3F-B0E3-B412C86A646D}" = Need for Speed™ ProStreet "{310BC5E2-31AF-49BB-904D-E71EB93645DC}" = AI Suite "{322F75E0-71A3-4125-8EB3-761834EDC166}" = Eragon "{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMicron JMB36X Driver "{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2 "{3C850287-4CD5-4FAD-BE39-A4AF7851A7C6}" = GRID Demo "{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker "{434D0820-3AA6-493A-80B9-301000028501}" = DiRT2 "{50BC3F90-EE42-E2CA-20FE-BC5556473F79}" = Application Profiles "{52D1D62C-FEAB-4580-849E-1DB624BADBBD}" = DiRT2 "{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features "{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6A782F9A-57EB-48C8-91CD-D017A376F372}" = Split/Second Demo "{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R) "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE) "{7F3AD00A-1819-4B15-BB7D-08B3586336D7}" = 3DMark06 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{87323561-58BA-4D5B-BADA-A791B69D1705}" = Catalyst Control Center - Branding "{8769100B-B645-51A7-5D0F-77AE578A3EBA}" = EA Download Manager UI "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver "{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7 "{8A74DEFD-A224-49CC-AB80-4E88BC730125}" = LogMeIn Hamachi "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8B681A3B-C924-23F9-AAD0-9FB1715C763A}" = Catalyst Control Center InstallProxy "{8F0190AB-D147-4FE3-A30B-F5FF35610695}" = Slickr "{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable "{92AF2F5A-4407-4A03-A80A-5A2582264746}" = Crysis(R) SP Demo "{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM) "{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X "{96ED9087-7A6A-22A9-135F-901AF77474AC}" = ccc-core-static "{974C4B12-4D02-4879-85E0-61C95CC63E9E}" = Fallout 3 "{99E862CC-6F69-4D39-99AA-DBF71BF3B585}" = OpenOffice.org 3.1 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A2770F50-89C7-433E-8E19-7148B21172EB}" = RESIDENT EVIL 5 Benchmark Version "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR "{A31951C5-DCD8-4DFE-A525-CFC701F54792}" = TurboV "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A64240FF-9C31-4858-AE9D-65483C5DE63A}" = Living Hell Light "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder "{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter "{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.2 "{AE04B8FC-4CD9-4A94-BE8F-C2434470FB11}" = DiRT2 Demo "{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support "{B2D4D657-DAA4-4C68-B01E-11736C1D8C0D}" = Unigine Heaven Benchmark v1.0 "{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player "{B83F7FA5-3191-4E39-A1F2-8A9038BD0B04}" = Turbo Key "{BBF0A67B-5DBA-452F-9D2E-6F168BC226E5}" = Need for Speed™ SHIFT Demo "{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo "{C40C3C3D-97CF-44B5-836C-766E374464B3}" = 3DMark Vantage "{C580908C-B3BA-4C19-BD60-16F02F272201}" = BattleForge™ "{C6E6B1D1-EC88-7270-3819-AA924908CFDA}" = Catalyst Control Center Graphics Previews Vista "{C7027BD9-C90F-79C7-8CFF-8F32E2806631}" = CCC Help English "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1 "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game "{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities "{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock "{E6FC9938-1B6E-41F6-98BD-ECD70C371DBE}" = VibrateGameDeviceDriver "{EA0B63C1-E579-43DD-A5F7-0DA5E9092554}" = CryEngine(R)2 Sandbox(TM)2 "{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2 "{F7338FA3-DAB5-49B2-900D-0AFB5760C166}" = PC Probe II "{F7B0939E-58DF-11DF-B3A6-005056806466}" = Google Earth "{F8365857-3233-E29E-65C6-6C0AB4F99622}" = Catalyst Control Center Graphics Previews Common "{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE "{FBE5AA96-22F0-4C4A-8E92-4BE3498D4CCB}" = Media Go "{FEFAF112-4DA8-479C-89E2-7DE25091711A}" = Call of Juarez - Bound in Blood "Acoustica MP3 To Wave Converter PLUS" = Acoustica MP3 To Wave Converter PLUS "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe SVG Viewer" = Adobe SVG Viewer 3.0 "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "AVMWLANCLI" = AVM FRITZ!WLAN "CCleaner" = CCleaner "Clash of the Titans" = Clash of the Titans Screen Saver "com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Download Manager UI "Combat Arms EU" = Combat Arms EU "Crysis WARHEAD(R)" = Crysis WARHEAD(R) "Debut" = Debut Video Capture Software "Digg Arc" = Digg Arc Screen Saver "Digg Bigspy" = Digg Bigspy Screen Saver "Direct MP3 Joiner_is1" = Direct MP3 Joiner version 3.0.1.5 "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters "EA Download Manager" = EA Download Manager "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "ExpressBurn" = Express Burn "Fireflies" = Fireflies Screensaver (remove only) "Fraps" = Fraps "Free Audio Converter_is1" = Free Audio Converter version 1.2 "Free FLV Converter_is1" = Free FLV Converter V 6.7.8 "Free HD Converter_is1" = Free HD Converter V 1.6 "Free Video Converter_is1" = Free Video Converter V 2.8 "Grand Theft Auto IV Screenshot" = Grand Theft Auto IV Screenshot Screen Saver "Guild Wars" = GUILD WARS "ICQToolbar" = ICQ Toolbar "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager "InstallShield_{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM) "InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X "InstallShield_{FEFAF112-4DA8-479C-89E2-7DE25091711A}" = Call of Juarez - Bound in Blood "LimeWire" = LimeWire 5.5.7 "Living Hell Light" = Living Hell Light "LogMeIn Hamachi" = LogMeIn Hamachi "Loopy" = Loopy Screen Saver "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Manhunt 2" = Manhunt 2 "Mercedes Benz SLR McLaren Screensaver" = Mercedes Benz SLR McLaren Screensaver "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "mp3-2-wav" = mp3-2-wav converter 1.14 "OpenAL" = OpenAL "oZone3D.Net FurMark_is1" = oZone3D.Net FurMark v1.7.0 "PolarClock3" = PolarClock3 Screen Saver "Porsche 911 GT3 Screensaver" = Porsche 911 GT3 Screensaver "potc fdk" = potc fdk Screen Saver "PunkBusterSvc" = PunkBuster Services "rFactor" = rFactor (remove only) "SpeedFan" = SpeedFan (remove only) "SPIDER-MAN HERO" = SPIDER-MAN HERO Screen Saver "SPIDER-MAN INTRO" = SPIDER-MAN INTRO Screen Saver "Steam App 400" = Portal "Steam App 41300" = Altitude "SUPER ©" = SUPER © Version 2010.bld.37 (Jan 2, 2010) "The Simpsons Movie - Sleeping Homer" = The Simpsons Movie - Sleeping Homer Screen Saver "TuneUp Utilities" = TuneUp Utilities "Uninstall_is1" = Uninstall 1.0.0.1 "VideoPad" = VideoPad Video Editor "VLC media player" = VLC media player 1.0.3 "WebTemp_is1" = WebTemp 3.30 (kostenlose Version) "WinGimp-2.0_is1" = GIMP 2.6.8 "WinRAR archiver" = WinRAR ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 24.05.2010 14:54:46 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842815 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" in Zeile 3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error - 24.05.2010 14:55:37 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842832 Description = Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\magictune premium\MagicTuneCore.dll.Manifest". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_88dce9872fb18caf.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5.manifest. Error - 25.05.2010 05:14:14 | Computer Name = Hellmachine | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: setup.exe_InstallShield, Version: 12.0.0.58855, Zeitstempel: 0x46d48420 Name des fehlerhaften Moduls: setup.exe, Version: 12.0.0.58855, Zeitstempel: 0x46d48420 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001ec42 ID des fehlerhaften Prozesses: 0x12d4 Startzeit der fehlerhaften Anwendung: 0x01cafbeaa3bdeff2 Pfad der fehlerhaften Anwendung: C:\Users\Zocker\Documents\ICQ\498284366\ReceivedFiles\372109239 *****\setup.exe Pfad des fehlerhaften Moduls: C:\Users\Zocker\Documents\ICQ\498284366\ReceivedFiles\372109239 *****\setup.exe Berichtskennung: e2abc1bf-67dd-11df-849c-00040ec51eb0 Error - 25.05.2010 07:08:52 | Computer Name = Hellmachine | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.16385, Zeitstempel: 0x4a5bc69e Name des fehlerhaften Moduls: Flash10e.ocx, Version: 10.0.45.2, Zeitstempel: 0x4b5f8faa Ausnahmecode: 0xc0000005 Fehleroffset: 0x001582b2 ID des fehlerhaften Prozesses: 0xc60 Startzeit der fehlerhaften Anwendung: 0x01cafbe2893c0220 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\iexplore.exe Pfad des fehlerhaften Moduls: C:\Windows\SysWow64\Macromed\Flash\Flash10e.ocx Berichtskennung: e61e78b6-67ed-11df-849c-00040ec51eb0 Error - 25.05.2010 07:09:43 | Computer Name = Hellmachine | Source = Application Hang | ID = 1002 Description = Programm iexplore.exe, Version 8.0.7600.16385 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: d2c Startzeit: 01cafbe2886a8908 Endzeit: 0 Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe Berichts-ID: 007c953d-67ee-11df-849c-00040ec51eb0 Error - 25.05.2010 07:11:05 | Computer Name = Hellmachine | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: Dwm.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc541 Name des fehlerhaften Moduls: fraps64.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4af24185 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000006357e04a ID des fehlerhaften Prozesses: 0xb98 Startzeit der fehlerhaften Anwendung: 0x01cafbe260b6c88c Pfad der fehlerhaften Anwendung: C:\Windows\system32\Dwm.exe Pfad des fehlerhaften Moduls: fraps64.dll Berichtskennung: 35ba842f-67ee-11df-849c-00040ec51eb0 Error - 26.05.2010 06:51:47 | Computer Name = Hellmachine | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.16385, Zeitstempel: 0x4a5bc69e Name des fehlerhaften Moduls: Flash10e.ocx, Version: 10.0.45.2, Zeitstempel: 0x4b5f8faa Ausnahmecode: 0xc0000005 Fehleroffset: 0x001582b2 ID des fehlerhaften Prozesses: 0x1040 Startzeit der fehlerhaften Anwendung: 0x01cafcbdabdde138 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\iexplore.exe Pfad des fehlerhaften Moduls: C:\Windows\SysWow64\Macromed\Flash\Flash10e.ocx Berichtskennung: ae08ff5a-68b4-11df-9adc-00040ec51eb0 Error - 26.05.2010 07:11:42 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842787 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files (x86)\Sony\Media Go\MediaGo.exe". Fehler in Manifest- oder Richtliniendatei "c:\Program Files (x86)\Sony\Media Go\Sony.Mrs.MANIFEST" in Zeile 3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0". Definition: Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error - 26.05.2010 07:11:44 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842815 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" in Zeile 3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error - 26.05.2010 07:12:51 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842832 Description = Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\magictune premium\MagicTuneCore.dll.Manifest". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_88dce9872fb18caf.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5.manifest. [ Media Center Events ] Error - 27.03.2010 06:08:40 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 11:08:40 - Fehler beim Herstellen der Internetverbindung. 11:08:40 - Serververbindung konnte nicht hergestellt werden.. Error - 27.03.2010 06:08:51 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 11:08:46 - Fehler beim Herstellen der Internetverbindung. 11:08:46 - Serververbindung konnte nicht hergestellt werden.. Error - 06.04.2010 09:41:24 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 15:41:24 - Fehler beim Herstellen der Internetverbindung. 15:41:24 - Serververbindung konnte nicht hergestellt werden.. Error - 06.04.2010 09:41:33 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 15:41:29 - Fehler beim Herstellen der Internetverbindung. 15:41:29 - Serververbindung konnte nicht hergestellt werden.. Error - 06.04.2010 10:41:37 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 16:41:37 - Fehler beim Herstellen der Internetverbindung. 16:41:37 - Serververbindung konnte nicht hergestellt werden.. Error - 06.04.2010 10:41:43 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 16:41:42 - Fehler beim Herstellen der Internetverbindung. 16:41:42 - Serververbindung konnte nicht hergestellt werden.. Error - 09.04.2010 04:23:13 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 10:23:13 - Fehler beim Herstellen der Internetverbindung. 10:23:13 - Serververbindung konnte nicht hergestellt werden.. Error - 09.04.2010 04:23:23 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 10:23:18 - Fehler beim Herstellen der Internetverbindung. 10:23:18 - Serververbindung konnte nicht hergestellt werden.. Error - 09.05.2010 05:23:38 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 11:23:37 - Fehler beim Herstellen der Internetverbindung. 11:23:38 - Serververbindung konnte nicht hergestellt werden.. Error - 09.05.2010 05:23:46 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0 Description = 11:23:43 - Fehler beim Herstellen der Internetverbindung. 11:23:43 - Serververbindung konnte nicht hergestellt werden.. [ System Events ] Error - 12.07.2010 08:14:05 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:14:05 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:14:06 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:14:06 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:14:56 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:14:56 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:14:56 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:15:01 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:15:05 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error - 12.07.2010 08:15:06 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000 Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 < End of report > OTL Auswertung: OTL Logfile: Code:
ATTFilter OTL logfile created on: 12.07.2010 14:45:31 - Run 1 OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Zocker\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 76,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 698,54 Gb Total Space | 402,25 Gb Free Space | 57,59% Space Free | Partition Type: NTFS Drive D: | 6,83 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: HELLMACHINE Current User Name: Zocker Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\Zocker\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10h_ActiveX.exe (Adobe Systems, Inc.) PRC - C:\Windows\SysWOW64\PnkBstrA.exe () PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Program Files (x86)\WebTemp\WebTemp.exe (Coolhardware.de) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe () PRC - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) PRC - C:\Program Files (x86)\SpeedFan\speedfan.exe (Almico Software (www.almico.com)) PRC - C:\Fraps\fraps.exe (Beepa P/L) PRC - C:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe () PRC - C:\Programme\ASUS\TurboV\TurboV.exe () PRC - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe () PRC - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (AVM Berlin) PRC - C:\Program Files (x86)\avmwlanstick\WlanNetService.exe (AVM Berlin) ========== Modules (SafeList) ========== MOD - C:\Users\Zocker\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Fraps\fraps32.dll (Beepa P/L) MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (WMPNetworkSvc) -- C:\Program Files\Windows Media Player\wmpnetwk.exe File not found SRV:64bit: - (PnkBstrA) -- C:\Windows\SysNative\PnkBstrA.exe File not found SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software) SRV:64bit: - (IGDCTRL) -- C:\Program Files\FRITZ!DSL\IGDCTRL.EXE (AVM Berlin) SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe () SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (Hamachi2Svc) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.) SRV - (TuneUp.Defrag) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software) SRV - (clr_optimization_v4.0.30319_64) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe () SRV - (AsSysCtrlService) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe () SRV - (AVM WLAN Connection Service) -- C:\Program Files (x86)\avmwlanstick\WlanNetService.exe (AVM Berlin) ========== Driver Services (SafeList) ========== DRV:64bit: - (DynCal) -- C:\Windows\SysNative\drivers\Dyncal.sys File not found DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.) DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (cpuz133) -- C:\Windows\SysNative\drivers\cpuz133_x64.sys (Windows (R) Win 7 DDK provider) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.) DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (JRAID) -- C:\Windows\SysNative\drivers\jraid.sys (JMicron Technology Corp.) DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ASACPI.sys () DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (RMCAST) -- C:\Windows\SysNative\drivers\rmcast.sys (Microsoft Corporation) DRV:64bit: - (VIAHdAudAddService) -- C:\Windows\SysNative\drivers\viahduaa.sys (VIA Technologies, Inc.) DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.) DRV:64bit: - (FWLANUSB) -- C:\Windows\SysNative\drivers\fwlanusb.sys (AVM GmbH) DRV:64bit: - (MagicTune) -- C:\Windows\SysNative\drivers\MTiCtwl.sys (Samsung Electronics, Inc. ) DRV:64bit: - (ENTECH64) -- C:\Windows\SysNative\drivers\Entech64.sys (EnTech Taiwan) DRV:64bit: - (regi) -- C:\Windows\SysNative\drivers\regi.sys (InterVideo) DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys (TuneUp Software) DRV - (ENTECH64) -- C:\Windows\SysWOW64\drivers\Entech64.sys (EnTech Taiwan) DRV - (speedfan) -- C:\Windows\SysWOW64\speedfan.sys (Windows (R) Server 2003 DDK provider) DRV - (CLBUDF) -- C:\Windows\CLBUDF.tbl () DRV - (DynCal) -- C:\Windows\SysWOW64\drivers\DynCal.sys (Windows (R) 2000 DDK provider) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://giga.de/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 13 D9 89 C9 47 7F CA 01 [binary data] IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/" FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.2 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.05.02 11:39:03 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.05.28 12:26:53 | 000,000,000 | ---D | M] [2010.03.17 15:11:05 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\mozilla\Extensions [2010.03.17 15:11:05 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org [2010.07.12 13:15:20 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\mozilla\Firefox\Profiles\zxjcd9km.default\extensions [2010.03.23 16:35:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Zocker\AppData\Roaming\mozilla\Firefox\Profiles\zxjcd9km.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010.01.31 13:47:23 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Zocker\AppData\Roaming\mozilla\Firefox\Profiles\zxjcd9km.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.07.11 10:45:46 | 000,000,944 | ---- | M] () -- C:\Users\Zocker\AppData\Roaming\Mozilla\FireFox\Profiles\zxjcd9km.default\searchplugins\icqplugin.xml [2010.01.27 15:04:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010.04.22 19:09:27 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2010.04.22 19:09:27 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2010.04.22 19:09:27 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2010.04.22 19:09:27 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2010.04.22 19:09:27 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.4.4525.1752\swg64.dll (Google Inc.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.) O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ) O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [AVMWlanClient] C:\Program Files (x86)\avmwlanstick\wlangui.exe (AVM Berlin) O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA) O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe () O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [QFan Help] C:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe () O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [TurboV] C:\Program Files\ASUS\TurboV\TurboV.exe () O4 - HKLM..\Run: [WebTemp] C:\Program Files (x86)\WebTemp\WebTemp.exe (Coolhardware.de) O4 - HKCU..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:64bit: - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.) O8 - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe (ICQ, LLC.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.11.23 14:05:40 | 006,321,456 | R--- | M] (Codemasters Software Co.) - D:\Autorun.exe -- [ UDF ] O32 - AutoRun File - [2009.09.28 15:23:06 | 000,000,068 | R--- | M] () - D:\autorun.inf -- [ UDF ] O33 - MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\Shell - "" = AutoRun O33 - MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -- File not found O33 - MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Autorun.exe -- [2009.11.23 14:05:40 | 006,321,456 | R--- | M] (Codemasters Software Co.) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.07.12 14:17:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner [2010.07.12 13:25:05 | 000,000,000 | ---D | C] -- C:\Users\Zocker\AppData\Roaming\Malwarebytes [2010.07.12 13:24:56 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.07.12 13:24:56 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.07.12 13:24:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.07.12 13:24:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010.07.11 18:21:39 | 000,000,000 | ---D | C] -- C:\Users\Zocker\AppData\Local\fcgbrohij [2010.07.08 20:13:40 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2010.07.08 20:13:40 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2010.07.08 20:13:40 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2010.07.08 20:13:40 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2010.07.08 20:13:39 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2010.07.08 20:13:39 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2010.07.08 20:13:39 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2010.07.08 20:13:39 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll [2010.07.08 20:11:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Disney Interactive Studios [2010.06.26 16:41:12 | 000,000,000 | -H-D | C] -- C:\ProgramData\{0691F710-1ECA-4B5A-9727-25554F1BFDC6} [2010.06.26 14:06:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010.06.24 15:38:16 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2010.06.24 15:38:16 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2010.06.24 15:38:16 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2010.06.24 15:38:16 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2010.06.24 15:38:16 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2010.06.24 15:38:16 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2010.06.24 15:38:16 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2010.06.24 15:38:16 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2010.06.24 14:21:52 | 027,628,920 | ---- | C] (EA Digital Illusions CE AB) -- C:\Users\Zocker\Desktop\BFBC2Game.exe [2010.06.24 13:09:12 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2010.06.24 13:09:02 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010.06.24 13:09:02 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010.06.24 13:09:02 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010.06.24 13:09:02 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2010.06.24 13:09:02 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2010.06.24 13:09:01 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010.06.24 13:09:01 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010.06.23 14:03:34 | 000,000,000 | ---D | C] -- C:\Converted Audio Files [2010.06.23 13:48:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acoustica MP3 To Wave Converter PLUS [2010.06.23 13:28:15 | 000,000,000 | ---D | C] -- C:\Programme\iTunes [2010.06.23 13:28:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2010.06.23 13:28:15 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010.06.23 13:26:39 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour [2010.06.23 13:26:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2010.06.20 11:52:14 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2010.06.20 11:52:10 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\ATI Technologies [2010.06.20 11:52:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies [2010.06.20 11:51:22 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies [2010.06.12 20:35:29 | 000,000,000 | ---D | C] -- C:\Users\Zocker\Documents\Games for Windows - LIVE Demos [2007.04.17 00:44:08 | 000,208,896 | ---- | C] ( ) -- C:\Windows\nspring.dll [2006.09.04 08:08:01 | 000,131,072 | ---- | C] ( ) -- C:\Windows\SysWow64\Interop.SHDocVw.dll [2006.09.04 08:08:01 | 000,049,152 | ---- | C] ( ) -- C:\Windows\SysWow64\AxInterop.SHDocVw.dll [6 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.07.12 14:46:58 | 003,932,160 | -HS- | M] () -- C:\Users\Zocker\ntuser.dat [2010.07.12 14:41:00 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010.07.12 14:26:43 | 000,038,772 | ---- | M] () -- C:\Users\Zocker\Documents\cc_20100712_142633.reg [2010.07.12 14:20:02 | 000,014,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.07.12 14:20:02 | 000,014,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.07.12 14:17:29 | 000,001,007 | ---- | M] () -- C:\Users\Zocker\Desktop\CCleaner.lnk [2010.07.12 14:13:03 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010.07.12 14:12:50 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010.07.12 14:12:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.07.12 14:12:43 | 3214,188,544 | -HS- | M] () -- C:\hiberfil.sys [2010.07.12 13:24:59 | 000,001,009 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.07.11 18:49:38 | 001,486,084 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.07.11 18:49:38 | 000,648,466 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.07.11 18:49:38 | 000,611,134 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.07.11 18:49:38 | 000,128,724 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.07.11 18:49:38 | 000,105,314 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.07.11 12:17:46 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2010.07.11 12:17:46 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010.07.08 20:12:42 | 000,002,326 | ---- | M] () -- C:\Users\Public\Desktop\Split Second Demo.lnk [2010.07.03 13:59:25 | 000,964,641 | ---- | M] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.mp3 [2010.07.03 13:44:15 | 000,983,347 | ---- | M] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.aac [2010.07.03 13:43:40 | 003,603,815 | ---- | M] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.mp4 [2010.07.03 13:42:00 | 000,001,141 | ---- | M] () -- C:\Users\Zocker\Desktop\Free Video Converter.lnk [2010.06.26 16:46:30 | 000,001,985 | ---- | M] () -- C:\Users\Zocker\Desktop\Crysis (2) - Verknüpfung.lnk [2010.06.26 16:37:22 | 000,010,118 | ---- | M] () -- C:\Windows\SysWow64\ealregsnapshot1.reg [2010.06.25 18:53:42 | 000,003,077 | ---- | M] () -- C:\Users\Zocker\unigine_20100625_1853.html [2010.06.23 13:55:22 | 000,001,239 | ---- | M] () -- C:\Users\Zocker\Desktop\DVDVideoSoft Free Studio.lnk [2010.06.23 13:48:05 | 000,001,988 | ---- | M] () -- C:\Users\Public\Desktop\Acoustica MP3 To Wave Converter PLUS.lnk [2010.06.23 13:28:30 | 000,002,429 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.06.20 19:26:19 | 000,075,064 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010.06.19 14:09:44 | 000,001,234 | ---- | M] () -- C:\Users\Public\Desktop\PESEdit.com 2010 Patch.lnk [6 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.07.12 14:26:35 | 000,038,772 | ---- | C] () -- C:\Users\Zocker\Documents\cc_20100712_142633.reg [2010.07.12 14:17:29 | 000,001,007 | ---- | C] () -- C:\Users\Zocker\Desktop\CCleaner.lnk [2010.07.12 13:24:59 | 000,001,009 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.07.08 20:12:42 | 000,002,326 | ---- | C] () -- C:\Users\Public\Desktop\Split Second Demo.lnk [2010.07.03 13:59:23 | 000,964,641 | ---- | C] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.mp3 [2010.07.03 13:44:13 | 000,983,347 | ---- | C] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.aac [2010.07.03 13:43:33 | 003,603,815 | ---- | C] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.mp4 [2010.06.25 18:53:42 | 000,003,077 | ---- | C] () -- C:\Users\Zocker\unigine_20100625_1853.html [2010.06.23 13:55:22 | 000,001,239 | ---- | C] () -- C:\Users\Zocker\Desktop\DVDVideoSoft Free Studio.lnk [2010.06.23 13:48:05 | 000,001,988 | ---- | C] () -- C:\Users\Public\Desktop\Acoustica MP3 To Wave Converter PLUS.lnk [2010.06.23 13:28:30 | 000,002,429 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.04.05 15:18:50 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll [2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2010.03.27 12:09:12 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys [2010.03.27 12:09:12 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys [2010.02.10 13:39:34 | 000,027,648 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll [2010.01.27 14:46:58 | 000,290,816 | ---- | C] () -- C:\Windows\SysWow64\decdll.dll [2009.12.16 19:37:47 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys [2009.12.15 20:48:52 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll [2009.12.15 20:48:52 | 000,013,368 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2009.12.15 20:35:01 | 000,033,855 | ---- | C] () -- C:\Windows\Ascd_log.ini [2009.12.15 20:34:42 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2009.12.15 20:34:37 | 000,022,546 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.07.06 04:48:34 | 000,013,368 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys [2009.06.19 21:06:22 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll [2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll [2009.04.02 14:30:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS [2007.04.17 00:44:08 | 002,441,216 | ---- | C] () -- C:\Windows\Tao.OpenGl.dll [2007.04.17 00:44:08 | 000,376,832 | ---- | C] () -- C:\Windows\freeglut.dll [2007.04.17 00:44:08 | 000,069,632 | ---- | C] () -- C:\Windows\Tao.Sdl.dll [2007.04.17 00:44:08 | 000,057,344 | ---- | C] () -- C:\Windows\Tao.Platform.Windows.dll [2007.04.17 00:44:08 | 000,036,864 | ---- | C] () -- C:\Windows\Tao.FreeGlut.dll ========== LOP Check ========== [2010.05.19 13:23:08 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FreeFLVConverter [2010.01.30 11:52:29 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FreeHDConverter [2010.07.03 13:42:08 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FreeVideoConverter [2010.01.30 23:29:27 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FRITZ! [2010.03.16 21:27:16 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FrostWire [2010.01.27 14:32:02 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\GrabPro [2010.04.28 18:15:32 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\gtk-2.0 [2010.07.11 13:58:47 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\ICQ [2010.07.05 17:41:37 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\LimeWire [2010.04.23 14:42:15 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\NCH Swift Sound [2009.12.16 19:49:48 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\OpenOffice.org [2010.01.31 14:20:31 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\Orbit [2010.04.15 13:40:42 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\POV-Ray [2010.01.23 12:33:04 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\Sony [2010.01.23 12:24:32 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\Sony Setup [2010.01.31 13:39:40 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\TuneUp Software [2010.06.03 14:48:15 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > Malewarebytes Auswertung: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4052 Windows 6.1.7600 (Safe Mode) Internet Explorer 8.0.7600.16385 12.07.2010 14:10:29 mbam-log-2010-07-12 (14-10-29).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|H:\|) Durchsuchte Objekte: 420268 Laufzeit: 43 Minute(n), 11 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 2 Infizierte Registrierungswerte: 1 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Apocalypse (Backdoor.IRCBot) -> No action taken. Infizierte Registrierungswerte: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\baagngqi (Rogue.AntivirusSuite.Gen) -> No action taken. Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: C:\Users\Zocker\AppData\Local\fcgbrohij\pdpgvtrtssd.exe (Rogue.AntivirusSuite.Gen) -> No action taken. Hoffe auf schnelle Antwort!!! |
12.07.2010, 18:24 | #2 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | AV Security Suite AuswertungZitat:
__________________ |
13.07.2010, 13:55 | #3 |
| AV Security Suite Auswertung So habs nochmal mit aktueller Version durchlaufen lassn:
__________________Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4308 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 13.07.2010 10:21:05 mbam-log-2010-07-13 (10-21-05).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Durchsuchte Objekte: 390541 Laufzeit: 42 Minute(n), 45 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
13.07.2010, 15:30 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | AV Security Suite Auswertung Beende alle Programme, starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!) Code:
ATTFilter :OTL IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577 O32 - AutoRun File - [2009.11.23 14:05:40 | 006,321,456 | R--- | M] (Codemasters Software Co.) - D:\Autorun.exe -- [ UDF ] O32 - AutoRun File - [2009.09.28 15:23:06 | 000,000,068 | R--- | M] () - D:\autorun.inf -- [ UDF ] O33 - MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\Shell - "" = AutoRun O33 - MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -- File not found O33 - MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Autorun.exe -- [2009.11.23 14:05:40 | 006,321,456 | R--- | M] (Codemasters Software Co.) [2010.07.11 18:21:39 | 000,000,000 | ---D | C] -- C:\Users\Zocker\AppData\Local\fcgbrohij :Commands [purity] [resethosts] [emptytemp] Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.
__________________ Logfiles bitte immer in CODE-Tags posten |
14.07.2010, 12:16 | #5 |
| AV Security Suite Auswertung Habe den Log wie oben beschreiben eingesetzt und auf Fix gedrückt: Hier die Ergebnisse: All processes killed ========== OTL ========== HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully! File move failed. D:\Autorun.exe scheduled to be moved on reboot. File move failed. D:\autorun.inf scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{482b01d5-fb8d-11de-9197-002618df608b}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{482b01d5-fb8d-11de-9197-002618df608b}\ not found. File I:\LaunchU3.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\ not found. File move failed. D:\Autorun.exe scheduled to be moved on reboot. C:\Users\Zocker\AppData\Local\fcgbrohij folder moved successfully. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes ->Flash cache emptied: 41620 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public User: Zocker ->Temp folder emptied: 32633042 bytes ->Temporary Internet Files folder emptied: 38288040 bytes ->Java cache emptied: 36508871 bytes ->FireFox cache emptied: 89646942 bytes ->Flash cache emptied: 47396 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 4849040 bytes %systemroot%\System32 (64bit) .tmp files removed: 67584 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 72258 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67832 bytes RecycleBin emptied: 214 bytes Total Files Cleaned = 193,00 mb OTL by OldTimer - Version 3.2.9.0 log created on 07142010_131057 Files\Folders moved on Reboot... File move failed. D:\Autorun.exe scheduled to be moved on reboot. File move failed. D:\autorun.inf scheduled to be moved on reboot. C:\Users\Zocker\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. Registry entries deleted on Reboot... |
14.07.2010, 13:59 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | AV Security Suite Auswertung Da Du ein 64-Bit-Windows verwendest, sind wir mit unseren "Standardtools" schon am Ende, denn viele sind mit dem 64-Bit-Win nicht kompatibel. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!!
__________________ --> AV Security Suite Auswertung |
16.07.2010, 12:52 | #7 |
| AV Security Suite Auswertung So auch noch den Log von SuperAntispyware: SUPERAntiSpyware Scan Log hxxp://www.superantispyware.com Generated 07/15/2010 at 03:06 PM Application Version : 4.40.1002 Core Rules Database Version : 5203 Trace Rules Database Version: 3015 Scan type : Complete Scan Total Scan Time : 01:21:53 Memory items scanned : 731 Memory threats detected : 0 Registry items scanned : 12692 Registry threats detected : 0 File items scanned : 266391 File threats detected : 9 Adware.Tracking Cookie C:\Users\Zocker\AppData\Roaming\Microsoft\Windows\Cookies\zocker@atwola[1].txt C:\Users\Zocker\AppData\Roaming\Microsoft\Windows\Cookies\zocker@sevenoneintermedia.112.2o7[1].txt C:\Users\Zocker\AppData\Roaming\Microsoft\Windows\Cookies\zocker@ar.atwola[1].txt C:\Users\Zocker\AppData\Roaming\Microsoft\Windows\Cookies\zocker@doubleclick[1].txt cdn5.specificclick.net [ C:\Users\Zocker\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\5RW8X54L ] vitamine.networldmedia.net [ C:\Users\Zocker\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\5RW8X54L ] Adware.Casino Games (Golden Palace Casino) C:\PROGRAM FILES\CASINOCLUB\CASINO.EXE Trojan.Agent/Gen-Krpytik C:\USERS\ZOCKER\DOWNLOADS\CRYSIS FROZEN ISLAND\RLD-CRWK.EXE C:\USERS\ZOCKER\DOWNLOADS\RLD-CRWK.EXE |
16.07.2010, 12:56 | #8 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | AV Security Suite AuswertungZitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
16.07.2010, 13:07 | #9 |
| AV Security Suite AuswertungDas sind Dateien der Crysis Demo Erweiterung Frozen Island... |
16.07.2010, 13:40 | #10 |
/// Winkelfunktion /// TB-Süch-Tiger™ | AV Security Suite Auswertung Was für Dateien sollen das genau sein?? Die sehen nicht ganz koscher aus!
__________________ Logfiles bitte immer in CODE-Tags posten |
16.07.2010, 19:15 | #11 |
| AV Security Suite Auswertung Des sind halt irgenwelche Dateien von Crysis Demo Erweiterung ka was für welche genau... . Ich versteh außerdem ned was das zur Sache soll???? |
17.07.2010, 17:33 | #12 |
/// Winkelfunktion /// TB-Süch-Tiger™ | AV Security Suite Auswertung Weswegen frag ich wohl nach! SASW wird die nicht grundlos als Schädling bemängeln und ich will klären ob das ein Fehlalarm ist oder nicht! Also beschreib bitte genauer was das ist! Wenn nach dem Dateinamen google, seh ich da eher illegale Seiten als Treffer
__________________ Logfiles bitte immer in CODE-Tags posten |
17.07.2010, 18:04 | #13 |
| AV Security Suite Auswertung Ja sry es handelt sich um einen illegalen keygen für crysis warhead... hat aba nix mit der AV Malware zu tun !!! |
17.07.2010, 18:38 | #14 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | AV Security Suite AuswertungZitat:
Die (Be)nutzung von Cracks, Serials und Keygens ist illegal, somit gibt es im Trojaner-Board keinen weiteren Support mehr. Für Dich geht es hier weiter => Neuaufsetzen des Systems Bitte auch alle Passwörter abändern (für E-Mail-Konten, StudiVZ, Ebay...einfach alles!) da nicht selten in dieser dubiosen Software auch Keylogger und Backdoorfunktionen stecken. Danach nie wieder sowas anrühren!
__________________ Logfiles bitte immer in CODE-Tags posten |
18.07.2010, 09:43 | #15 | |
| AV Security Suite AuswertungZitat:
PS: Trotzdem danke für den bisherigen support |
Themen zu AV Security Suite Auswertung |
0 bytes, 64-bit, acroiehelper.dll, adblock, autorun, avgntflt.sys, avira, backdoor.ircbot, bho, c:\windows\system32\rundll32.exe, components, cpu-z, d:\autorun.inf, desktop, downloader, dsl, dwm.exe, error, fehler, firefox, firefox.exe, flash player, google, grand theft auto, home, home premium, iexplore.exe, igdctrl.exe, install.exe, langs, limewire, location, logfile, malwarebytes' anti-malware, media center, mozilla, mp3, oldtimer, otl.exe, plug-in, programdata, programm, realtek, registry, richtlinie, saver, sched.exe, searchplugins, security, security suite, shell32.dll, shortcut, software, stick, super, syswow64, usb, vdeck.exe, video converter, vlc media player, webcheck, windows |