| |
| |||||||
Log-Analyse und Auswertung: Maus bleibt hängen, installation von Antivirensoftware unmöglichWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
17.07.2010, 15:57
| #1 |
| |  Maus bleibt hängen, installation von Antivirensoftware unmöglich Hallo Leute, ein Freund hat mir seinen Laptop ausgeliehen und der ist wohl ganz schön verseucht. Zuerst ließen sich verschiedene Programme nicht installieren, jetzt bleibt nach wenigen Sekunden nach dem Hochfahren der Mauszeiger hängen, die Installation von Antivirenprogrammen ist auch im abgesicherten Modus nicht möglich, dafür funktioniert die Maus wiederum. Ich dreh langsam am Teller, denn auch als ich XP installieren wollte, weil mir Vista irgendwie zu blöde ist, scheiterte das an der Nichterkennung der Partitionen. Ich habe es mit Onlinescannern versucht, aber das Löschen geht auch dort nicht. Auch mit einem Tool von Kaspersky bin ich nicht weitergekommen. Welcher gute Mensch weiß einen Rat? Hier ein paar Daten: Fujitsu Siemens Computers AMD Turion 64 X2 Mobile Technology TL-64 2.00 GHz 2047 MB RAM 32 Bit Vista Home Premium HiJackthis Logfile: Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:29:34, on 17.07.2010 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16982) Boot mode: Safe mode with network support Running processes: C:\Windows\Explorer.EXE C:\Windows\helppane.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Users\Alekos\Downloads\HiJackThis(2).exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.ask.com?o=15421&l=dis R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe O4 - HKLM\..\Run: [FIC HotKey] C:\Program Files\Hotkey Utility\tray.exe O4 - HKLM\..\Run: [PowerManager] C:\Program Files\Power Manager\PM.exe O4 - HKLM\..\Run: [Silent Mode] C:\Program Files\Light Sensor Utility\Sensor.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui O4 - HKCU\..\Run: [Raptr] C:\PROGRA~1\Raptr\raptrstub.exe --startup O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O4 - Startup: setup_9.0.0.722_16.07.2010_19-22.lnk = C:\Users\Alekos\Desktop\Virus Removal Tool\setup_9.0.0.722_16.07.2010_19-22\startup.exe O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O13 - Gopher Prefix: O16 - DPF: {E6BB2089-163F-466B-812A-748096614DFD} (CAScanner Control) - hxxp://cainternetsecurity.net/scanner/cascanner.cab O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 5721 bytes |
|
17.07.2010, 20:35
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  Maus bleibt hängen, installation von Antivirensoftware unmöglich Hallo und
__________________ bitte nen Vollscan mit Malwarebytes machen und Log posten. Danach OTL: Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
__________________ |
|
18.07.2010, 11:25
| #3 |
| | Maus bleibt hängen, installation von Antivirensoftware unmöglich Danke für Deine Hilfe. Habe alles hier gepostet.
__________________Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4323 Windows 6.0.6000 (Safe Mode) Internet Explorer 7.0.6000.16982 18.07.2010 11:59:57 mbam-log-2010-07-18 (11-59-57).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Durchsuchte Objekte: 235630 Laufzeit: 41 Minute(n), 19 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) --------------------------------------------------------------------- OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 18.07.2010 12:11:46 - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Alekos\Desktop
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 62,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 92,21 Gb Total Space | 28,05 Gb Free Space | 30,42% Space Free | Partition Type: NTFS
Drive D: | 45,12 Gb Total Space | 31,17 Gb Free Space | 69,08% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: *****
Current User Name: *****
Logged in as Administrator.
Current Boot Mode: SafeMode with Networking
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- Reg Error: Key error. File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\opera.exe" "%1" File not found
https [open] -- "C:\Program Files\Opera\opera.exe" "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{4F2597AE-D5B0-4A9B-8026-C7AD69A4485C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{BA913A45-4060-4CF3-83F1-1F5199668514}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0C3E8B65-DB95-4C93-ABA2-20DC9C6FD150}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{3BE3F0CD-6D68-4429-82AD-F2CE295DDF2C}" = dir=in | app=c:\program files\avg\avg9\avgnsx.exe |
"{42B7AE0A-4DD3-414B-BEDF-C680E70247B4}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe |
"{4A8BB9EC-D5E4-4B41-831D-BE6677A1E351}" = dir=in | app=c:\program files\avg\avg9\avgam.exe |
"{5FF598F3-5135-4431-8635-A1EF168F48C4}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe |
"{6141C751-0674-4653-BD1A-A40476B85170}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{7638A3A7-66F7-4A5B-82B3-951C79D20B71}" = dir=in | app=c:\program files\avg\avg9\avgdiagex.exe |
"{9EF618C7-D1D6-40FB-B009-9F1544168370}" = dir=in | app=c:\program files\avg\avg9\avgupd.exe |
"{AB02B6C8-83CF-40D9-8DEE-DA9DDE7C8560}" = dir=in | app=c:\program files\cyberlink\powerdv\powerdv.exe |
"{F0671372-9925-4BA1-9553-2BE8B1A5F28C}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"TCP Query User{439C5B85-DE13-4314-859B-566D9EFAC688}C:\program files\intervideo\dvd8\windvd.exe" = protocol=6 | dir=in | app=c:\program files\intervideo\dvd8\windvd.exe |
"TCP Query User{A3399872-B8F2-4785-8C28-F11EEBB87999}C:\program files\intervideo\dvd8\windvd.exe" = protocol=6 | dir=in | app=c:\program files\intervideo\dvd8\windvd.exe |
"TCP Query User{CBDB0077-BC46-49E5-AE54-B0FDE2AFEEC6}C:\programdata\kaspersky lab setup files\kaspersky internet security 2011 11.0.0.232\german\setup.exe" = protocol=6 | dir=in | app=c:\programdata\kaspersky lab setup files\kaspersky internet security 2011 11.0.0.232\german\setup.exe |
"UDP Query User{4ADC09AD-04CB-4818-8CB1-C89D8DE169E5}C:\program files\intervideo\dvd8\windvd.exe" = protocol=17 | dir=in | app=c:\program files\intervideo\dvd8\windvd.exe |
"UDP Query User{916AFAAC-44C1-4107-A6CF-9CCA043D1E5B}C:\programdata\kaspersky lab setup files\kaspersky internet security 2011 11.0.0.232\german\setup.exe" = protocol=17 | dir=in | app=c:\programdata\kaspersky lab setup files\kaspersky internet security 2011 11.0.0.232\german\setup.exe |
"UDP Query User{E5066CD1-A7FB-460A-880C-D34C870E5463}C:\program files\intervideo\dvd8\windvd.exe" = protocol=17 | dir=in | app=c:\program files\intervideo\dvd8\windvd.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (KIS)
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = InterVideo WinDVD 8
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{4A57592C-FF92-4083-97A9-92783BD5AFB4}" = Bison WebCam
"{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{61aa2993-1f0c-4d1d-a134-bc5b4489aa73}" = Nero 9 Lite
"{6432E863-ED60-4A69-A018-2811601CD764}" = KUBUS light
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}" = No23 Recorder
"{7148F0A8-6813-11D6-A77B-00B0D0142050}" = Java 2 Runtime Environment, SE v1.4.2_05
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7A92A322-1A10-4153-B551-D547AA9B4649}" = WFP Food Force
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7FB12670-0F93-4E1E-B2F5-4F339199A03A}" = Microsoft SQL Server Native Client
"{81CD6232-10F5-4832-B3DA-1B88B1571031}" = Nero 7 Essentials
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{849A32C3-E75A-4791-9B11-E568BA3525A4}" = Microsoft SQL Server VSS Writer
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{912CE296-3D73-4A9D-B3FB-70A5CF7A8568}" = Empire Earth Ultimate Edition
"{91E04CA7-0B13-4F8C-AA4D-2A573AC96D19}" = Windows Live Essentials
"{94D66D71-12F0-48A5-B46A-D4B835A0F1B7}" = FirstSteps Diagnostics
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{AC76BA86-7AD7-1031-7B44-A81000000003}" = Adobe Reader 8.1.0 - Deutsch
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B804C424-B66D-447A-84BD-C6B88C392C3A}" = PowerDV
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCD90636-D97D-4130-A44A-3AD4E63B9220}" = OpenOffice.org 2.4
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D30764EB-A6C4-4A5A-9205-073113975F84}" = MEAG-Angebotssoftware
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F37C014C-B18E-4A36-A699-7837C620068E}" = MEAG-Angebotssoftware
"8461-7759-5462-8226" = Vuze
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"avast5" = avast! Free Antivirus
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F10001" = HDAUDIO Soft Data Fax Modem with SmartCP
"FreeCommander_is1" = FreeCommander 2009.02a
"HijackThis" = HijackThis 2.0.2
"Hotkey Utility_is1" = Hotkey Utility
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = InterVideo WinDVD 8
"InstallShield_{6432E863-ED60-4A69-A018-2811601CD764}" = KUBUS light
"InstallShield_{7AA5E8A5-1EA4-4CF2-90D7-2A98550851EC}" = KUBUS light
"Light Sensor Utility 1.4_is1" = Light Sensor Utility 1.4
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox (3.6.6)" = Mozilla Firefox (3.6.6)
"Mystery Case Files - Prime Suspects" = Mystery Case Files - Prime Suspects (remove only)
"NVIDIA Drivers" = NVIDIA Drivers
"Power Manager_is1" = Power Manager 2.1.10
"RV-Win" = RV-Win
"UMTS USB Modem Manager" = UMTS USB Modem Manager
"Virtual Villagers" = Virtual Villagers (remove only)
"vis_geiss2.dllWinamp" = Geiss2 for Winamp 2x (remove only)
"VLC media player" = VLC media player 0.9.9
"VVB Basic" = VVB Basic
"Winamp" = Winamp
"WinLiveSuite_Wave3" = Windows Live Essentials
"Xfire" = Xfire (remove only)
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Facebook Plug-In" = Facebook Plug-In
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 17.07.2010 22:13:27 | Computer Name = Alekos-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Alwil
Software\Avast5\AvastUI.exe". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 17.07.2010 22:13:27 | Computer Name = Alekos-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Alwil
Software\Avast5\AvastUI.exe". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 17.07.2010 22:13:29 | Computer Name = Alekos-PC | Source = EventSystem | ID = 4609
Description =
Error - 17.07.2010 22:13:39 | Computer Name = Alekos-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Alwil
Software\Avast5\AvastUI.exe". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 17.07.2010 23:12:19 | Computer Name = Alekos-PC | Source = Microsoft-Windows-CAPI2 | ID = 131584
Description =
Error - 18.07.2010 04:47:33 | Computer Name = Alekos-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Alwil
Software\Avast5\AvastUI.exe". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 18.07.2010 04:47:33 | Computer Name = Alekos-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Alwil
Software\Avast5\AvastUI.exe". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 18.07.2010 04:47:34 | Computer Name = Alekos-PC | Source = EventSystem | ID = 4609
Description =
Error - 18.07.2010 04:47:45 | Computer Name = Alekos-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Alwil
Software\Avast5\AvastUI.exe". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 18.07.2010 04:56:55 | Computer Name = Alekos-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Alwil
Software\Avast5\AvastUI.exe". Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
[ System Events ]
Error - 04.06.2010 15:31:39 | Computer Name = Alekos-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI-BIOS enthält keinen IRQ für das Gerät im PCI-Steckplatz
11, Funktion 0. Wenden Sie sich an den Systemhersteller, um technische Unterstützung
zu erhalten.
Error - 04.06.2010 15:31:39 | Computer Name = Alekos-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI-BIOS enthält keinen IRQ für das Gerät im PCI-Steckplatz
12, Funktion 0. Wenden Sie sich an den Systemhersteller, um technische Unterstützung
zu erhalten.
Error - 04.06.2010 15:31:39 | Computer Name = Alekos-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI-BIOS enthält keinen IRQ für das Gerät im PCI-Steckplatz
13, Funktion 0. Wenden Sie sich an den Systemhersteller, um technische Unterstützung
zu erhalten.
Error - 04.06.2010 15:32:11 | Computer Name = Alekos-PC | Source = Microsoft-Windows-Kernel-WHEA | ID = 10
Description =
Error - 04.06.2010 15:41:07 | Computer Name = Alekos-PC | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 192.168.0.107 für die Netzwerkkarte mit der Netzwerkadresse
00164412912B wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server
hat eine DHCPNACK-Meldung gesendet).
Error - 06.06.2010 16:34:07 | Computer Name = Alekos-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI-BIOS enthält keinen IRQ für das Gerät im PCI-Steckplatz
11, Funktion 0. Wenden Sie sich an den Systemhersteller, um technische Unterstützung
zu erhalten.
Error - 06.06.2010 16:34:07 | Computer Name = Alekos-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI-BIOS enthält keinen IRQ für das Gerät im PCI-Steckplatz
12, Funktion 0. Wenden Sie sich an den Systemhersteller, um technische Unterstützung
zu erhalten.
Error - 06.06.2010 16:34:07 | Computer Name = Alekos-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI-BIOS enthält keinen IRQ für das Gerät im PCI-Steckplatz
13, Funktion 0. Wenden Sie sich an den Systemhersteller, um technische Unterstützung
zu erhalten.
Error - 06.06.2010 16:34:34 | Computer Name = Alekos-PC | Source = Microsoft-Windows-Kernel-WHEA | ID = 10
Description =
Error - 06.06.2010 16:36:17 | Computer Name = Alekos-PC | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 192.168.1.51 für die Netzwerkkarte mit der Netzwerkadresse
00164412912B wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server
hat eine DHCPNACK-Meldung gesendet).
< End of report >
----------------------------------------------------------------------- OTL Logfile: Code:
ATTFilter OTL logfile created on: 18.07.2010 12:11:46 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Alekos\Desktop Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation Internet Explorer (Version = 7.0.6000.16982) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 62,00% Memory free 4,00 Gb Paging File | 4,00 Gb Available in Paging File | 88,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 92,21 Gb Total Space | 28,05 Gb Free Space | 30,42% Space Free | Partition Type: NTFS Drive D: | 45,12 Gb Total Space | 31,17 Gb Free Space | 69,08% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ***** Current User Name: ***** Logged in as Administrator. Current Boot Mode: SafeMode with Networking Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\Alekos\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Mozilla Firefox\plugin-container.exe (Mozilla Corporation) PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Windows\explorer.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Users\Alekos\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (CLTNetCnService) -- c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe File not found SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV - (NMSAccess) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe () SRV - (MSSQL$KIS) SQL Server (KIS) -- c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) SRV - (SQLWriter) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation) SRV - (SQLBrowser) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) SRV - (MSSQLServerADHelper) -- c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe (Microsoft Corporation) SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (WPRO_40_1340) WinPcap Packet Driver (WPRO_40_1340) -- C:\Windows\System32\drivers\WPRO_40_1340.sys File not found DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found DRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not found DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (ALWIL Software) DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (ALWIL Software) DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software) DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software) DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (ALWIL Software) DRV - (StarOpen) -- C:\Windows\System32\drivers\StarOpen.sys () DRV - (22025762) -- C:\Windows\system32\DRIVERS\22025762.sys (Kaspersky Lab) DRV - (setup_9.0.0.722_16.07.2010_19-22drv) -- C:\Windows\System32\drivers\2202576.sys (Kaspersky Lab) DRV - (22025761) -- C:\Windows\System32\drivers\22025761.sys (Kaspersky Lab) DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (nvstor32) -- C:\Windows\system32\DRIVERS\nvstor32.sys (NVIDIA Corporation) DRV - (RTSTOR) -- C:\Windows\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.) DRV - (Cam5603D) -- C:\Windows\System32\drivers\BisonCam.sys () DRV - (ApfiltrService) -- C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.) DRV - (HSF_DPV) -- C:\Windows\System32\drivers\HSX_DPV.sys (Conexant Systems, Inc.) DRV - (HSXHWAZL) -- C:\Windows\System32\drivers\HSXHWAZL.sys (Conexant Systems, Inc.) DRV - (winachsf) -- C:\Windows\System32\drivers\HSX_CNXT.sys (Conexant Systems, Inc.) DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.) DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvmfdx32.sys (NVIDIA Corporation) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.) DRV - (WINIO) -- C:\Windows\System32\WinIo.sys (hxxp://www.internals.com) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.) DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation) DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.) DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex) DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.) DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.) DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation) DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.) DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.) DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation) DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.) DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.) DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation) DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems) DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation) DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.) DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.) DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic) DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company) DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.) DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.) DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.) DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic) DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic) DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic) DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic) DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation) DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic) DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation) DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.) DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.) DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.) DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.) DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.) DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.) DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.) DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.) DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.) DRV - (HSFHWAZL) -- C:\Windows\System32\drivers\VSTAZL3.SYS (Conexant Systems, Inc.) DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies) DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation) DRV - (nvraid) NVIDIA nForce(tm) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation) DRV - (nvatabus) -- C:\Windows\system32\drivers\nvatabus.sys (NVIDIA Corporation) DRV - (iaStor) -- C:\Windows\system32\drivers\iastor.sys (Intel Corporation) DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.ask.com?o=15421&l=dis IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledItems: el-GR@dictionaries.addons.mozilla.org:0.8.3 FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:3.4 FF - prefs.js..extensions.enabledItems: {d5ea4520-61a1-11da-8cd6-0800200c9a66}:2009.07.19 FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.0.7 FF - prefs.js..extensions.enabledItems: {bee6eb20-01e0-ebd1-da83-080329fb9a3a}:0.1 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2 FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6 FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.5.2.106 FF - prefs.js..extensions.enabledItems: {2458abc0-f443-11dd-87af-0800200c9a66}:3.6.3.1.03.04.10 FF - prefs.js..keyword.URL: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=NRO2&o=15418&locale=de_DE&q=" FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.06.29 05:14:53 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.06.29 05:14:53 | 000,000,000 | ---D | M] [2010.06.15 14:26:41 | 000,000,000 | ---D | M] -- C:\Users\Alekos\AppData\Roaming\mozilla\Extensions [2010.07.18 04:23:49 | 000,000,000 | ---D | M] -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions [2010.07.10 07:26:26 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2010.06.15 16:05:47 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.06.16 07:22:15 | 000,000,000 | ---D | M] (Bloody Red) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{2458abc0-f443-11dd-87af-0800200c9a66} [2010.06.27 10:44:18 | 000,000,000 | ---D | M] (Vuze Remote Toolbar) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} [2010.06.16 07:33:36 | 000,000,000 | ---D | M] (Flash and Video Download) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2010.07.10 07:26:22 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} [2010.06.16 07:33:36 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.06.16 07:33:36 | 000,000,000 | ---D | M] (QuickProxy) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{d5ea4520-61a1-11da-8cd6-0800200c9a66} [2010.06.19 16:03:21 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2010.06.16 07:05:07 | 000,000,000 | ---D | M] -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\el-GR@dictionaries.addons.mozilla.org [2010.06.20 18:50:57 | 000,000,000 | ---D | M] -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\FirefoxAddon@similarWeb.com [2010.06.29 05:05:58 | 000,000,000 | ---D | M] -- C:\Users\Alekos\AppData\Roaming\mozilla\Firefox\Profiles\lvxhbuoy.default\extensions\toolbar@ask.com [2010.07.18 04:13:55 | 000,002,253 | ---- | M] () -- C:\Users\Alekos\AppData\Roaming\Mozilla\FireFox\Profiles\lvxhbuoy.default\searchplugins\askcom.xml [2010.06.27 16:41:12 | 000,001,101 | ---- | M] () -- C:\Users\Alekos\AppData\Roaming\Mozilla\FireFox\Profiles\lvxhbuoy.default\searchplugins\metager.xml [2010.06.15 14:25:20 | 000,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions [2010.04.01 18:54:38 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2010.04.01 18:54:38 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2010.04.01 18:54:38 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2010.04.01 18:54:38 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2010.04.01 18:54:38 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll File not found O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avast5] C:\Programme\Alwil Software\Avast5\AvastUI.exe File not found O4 - HKLM..\Run: [FIC HotKey] C:\Program Files\Hotkey Utility\tray.exe () O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [PowerManager] C:\Program Files\Power Manager\PM.exe () O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [Silent Mode] C:\Program Files\Light Sensor Utility\Sensor.exe () O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe () O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [Raptr] C:\PROGRA~1\Raptr\raptrstub.exe File not found O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - Startup: C:\Users\Alekos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_16.07.2010_19-22.lnk = C:\Users\Alekos\Desktop\Virus Removal Tool\setup_9.0.0.722_16.07.2010_19-22\startup.exe () O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Java Plug-in 1.4.2_05) O16 - DPF: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA} hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Java Plug-in 1.4.2_05) O16 - DPF: {E6BB2089-163F-466B-812A-748096614DFD} hxxp://cainternetsecurity.net/scanner/cascanner.cab (CAScanner Control) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img19.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img19.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{5d990bed-ba8b-11de-9aac-00140b3b41be}\Shell - "" = AutoRun O33 - MountPoints2\{5d990bed-ba8b-11de-9aac-00140b3b41be}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -- File not found O33 - MountPoints2\{6fc01caa-ba82-11de-bd36-00140b3b41be}\Shell - "" = AutoRun O33 - MountPoints2\{6fc01caa-ba82-11de-bd36-00140b3b41be}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -- File not found O33 - MountPoints2\{ae161b63-5218-11de-8ddf-00140b3b41be}\Shell - "" = AutoRun O33 - MountPoints2\{ae161b63-5218-11de-8ddf-00140b3b41be}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found O33 - MountPoints2\{ae161b70-5218-11de-8ddf-00140b3b41be}\Shell - "" = AutoRun O33 - MountPoints2\{ae161b70-5218-11de-8ddf-00140b3b41be}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found O33 - MountPoints2\{ae161b72-5218-11de-8ddf-00140b3b41be}\Shell - "" = AutoRun O33 - MountPoints2\{ae161b72-5218-11de-8ddf-00140b3b41be}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found O33 - MountPoints2\{ae161b87-5218-11de-8ddf-00140b3b41be}\Shell - "" = AutoRun O33 - MountPoints2\{ae161b87-5218-11de-8ddf-00140b3b41be}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found O33 - MountPoints2\{dcb8e17c-91b0-11de-af54-00140b3b41be}\Shell - "" = AutoRun O33 - MountPoints2\{dcb8e17c-91b0-11de-af54-00140b3b41be}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found O33 - MountPoints2\{fe71ce03-5910-11de-8e56-00140b3b41be}\Shell - "" = AutoRun O33 - MountPoints2\{fe71ce03-5910-11de-8e56-00140b3b41be}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found O33 - MountPoints2\E\Shell - "" = AutoRun O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\setup.exe -- File not found O33 - MountPoints2\G\Shell - "" = AutoRun O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.07.18 10:54:55 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Alekos\Desktop\OTL.exe [2010.07.18 10:53:21 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Roaming\Malwarebytes [2010.07.18 10:53:09 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010.07.18 10:53:08 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010.07.18 10:53:08 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010.07.18 10:53:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.07.17 14:27:30 | 000,000,000 | ---D | C] -- C:\Users\Alekos\Documents\alekos [2010.07.17 14:25:48 | 000,000,000 | ---D | C] -- C:\Users\Alekos\Desktop\capsule [2010.07.17 04:47:32 | 000,165,456 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswSP.sys [2010.07.17 04:47:32 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswRdr.sys [2010.07.17 04:47:32 | 000,017,744 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswFsBlk.sys [2010.07.17 04:47:31 | 000,050,256 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswMonFlt.sys [2010.07.17 04:47:31 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswTdi.sys [2010.07.17 04:47:23 | 000,165,032 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe [2010.07.17 04:47:23 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\Windows\avastSS.scr [2010.07.17 04:47:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software [2010.07.17 04:47:09 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software [2010.07.17 04:13:10 | 000,000,000 | ---D | C] -- C:\ProgramData\CA [2010.07.16 18:31:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2010.07.16 18:31:11 | 000,311,312 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\2202576.sys [2010.07.16 18:31:11 | 000,128,016 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\22025761.sys [2010.07.16 18:31:11 | 000,037,392 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\22025762.sys [2010.07.16 18:31:11 | 000,000,000 | ---D | C] -- C:\Users\Alekos\Desktop\Virus Removal Tool [2010.07.16 18:20:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files [2010.07.14 19:04:49 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Roaming\Sierra [2010.07.14 19:04:49 | 000,000,000 | ---D | C] -- C:\Users\Alekos\Documents\Empire Earth II [2010.07.03 13:43:16 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Local\AskToolbar [2010.06.29 12:28:20 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Local\Apple Computer [2010.06.29 05:13:53 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime [2010.06.29 05:13:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010.06.29 05:12:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2010.06.29 05:12:00 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Local\Apple [2010.06.29 05:11:53 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update [2010.06.29 05:11:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010.06.29 05:03:03 | 000,000,000 | ---D | C] -- C:\Program Files\Food Force [2010.06.27 20:08:50 | 000,000,000 | ---D | C] -- C:\Heroes of Might and Magic V - Collectors Edition [2010.06.27 20:03:32 | 000,000,000 | ---D | C] -- C:\Heroes of Might and Magic V [2010.06.27 19:28:32 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Roaming\Canneverbe Limited [2010.06.27 19:28:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited [2010.06.27 19:27:21 | 000,000,000 | ---D | C] -- C:\Program Files\CDBurnerXP [2010.06.27 18:59:51 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Roaming\Nero [2010.06.27 18:53:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nero [2010.06.27 18:51:25 | 000,000,000 | ---D | C] -- C:\Program Files\Ask.com [2010.06.27 18:49:20 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Roaming\FreeCommander [2010.06.27 18:49:19 | 000,000,000 | ---D | C] -- C:\Program Files\FreeCommander [2010.06.27 18:42:39 | 033,373,392 | ---- | C] (Nero AG) -- C:\Users\Alekos\Desktop\Nero-Lite-9.4.12.708DE.exe [2010.06.27 11:16:02 | 000,000,000 | ---D | C] -- C:\Users\Alekos\Documents\Vuze Downloads [2010.06.27 11:04:39 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Roaming\Azureus [2010.06.27 10:57:29 | 000,000,000 | ---D | C] -- C:\Users\Alekos\Desktop\Windows [2010.06.27 10:44:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\i4j_jres [2010.06.27 10:44:19 | 000,000,000 | ---D | C] -- C:\Program Files\Vuze [2010.06.27 10:44:14 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit [2010.06.21 16:22:36 | 000,000,000 | ---D | C] -- C:\Program Files\Paradox Interactive [2010.06.21 16:20:37 | 000,000,000 | ---D | C] -- C:\Users\Alekos\Documents\sr2020-demo [2010.06.20 17:52:18 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Roaming\Xfire [2010.06.20 17:52:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Xfire [2010.06.20 17:52:13 | 000,000,000 | ---D | C] -- C:\Program Files\Xfire [2010.06.20 17:49:06 | 000,000,000 | ---D | C] -- C:\Program Files\SD EnterNET [2010.06.20 13:22:24 | 000,000,000 | ---D | C] -- C:\Program Files\No23 Recorder [2010.06.19 13:29:24 | 000,000,000 | ---D | C] -- C:\Users\Alekos\AppData\Roaming\dvdcss ========== Files - Modified Within 30 Days ========== [2010.07.18 12:09:35 | 002,097,152 | -HS- | M] () -- C:\Users\Alekos\ntuser.dat [2010.07.18 10:54:55 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Alekos\Desktop\OTL.exe [2010.07.18 10:53:11 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.07.18 10:47:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.07.18 10:46:00 | 000,000,680 | ---- | M] () -- C:\Users\Alekos\AppData\Local\d3d9caps.dat [2010.07.18 10:45:42 | 000,003,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2010.07.18 10:45:42 | 000,003,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2010.07.18 04:09:56 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010.07.17 16:24:06 | 000,032,113 | ---- | M] () -- C:\Users\Alekos\Desktop\Totentanz.gif [2010.07.17 04:47:32 | 000,001,846 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2010.07.17 04:47:31 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [2010.07.16 18:31:55 | 000,002,166 | ---- | M] () -- C:\Users\Alekos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_16.07.2010_19-22.lnk [2010.07.03 22:00:46 | 000,000,020 | ---- | M] () -- C:\Windows\System32\SYSTEM [2010.07.03 13:49:13 | 000,024,504 | ---- | M] () -- C:\Users\Alekos\albman[1].jpg [2010.06.29 05:14:31 | 000,001,732 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010.06.29 05:03:42 | 000,001,661 | ---- | M] () -- C:\Users\Alekos\Desktop\Food Force.lnk [2010.06.28 22:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\Windows\avastSS.scr [2010.06.28 22:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe [2010.06.28 22:37:52 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswTdi.sys [2010.06.28 22:37:30 | 000,165,456 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswSP.sys [2010.06.28 22:33:13 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswRdr.sys [2010.06.28 22:32:56 | 000,050,256 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswMonFlt.sys [2010.06.28 22:32:33 | 000,017,744 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswFsBlk.sys [2010.06.27 19:27:25 | 000,001,740 | ---- | M] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk [2010.06.27 18:54:17 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk [2010.06.27 18:49:29 | 000,000,808 | ---- | M] () -- C:\Users\Alekos\Desktop\FreeCommander.lnk [2010.06.27 18:43:42 | 033,373,392 | ---- | M] (Nero AG) -- C:\Users\Alekos\Desktop\Nero-Lite-9.4.12.708DE.exe [2010.06.27 10:45:37 | 000,001,639 | ---- | M] () -- C:\Users\Public\Desktop\Vuze.lnk [2010.06.21 16:31:11 | 000,000,552 | ---- | M] () -- C:\Users\Alekos\AppData\Local\d3d8caps.dat [2010.06.20 13:22:57 | 000,000,936 | ---- | M] () -- C:\Users\Public\Desktop\No23 Recorder.lnk ========== Files Created - No Company Name ========== [2010.07.18 10:53:11 | 000,000,824 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.07.17 16:24:06 | 000,032,113 | ---- | C] () -- C:\Users\Alekos\Desktop\Totentanz.gif [2010.07.17 04:47:32 | 000,001,846 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2010.07.16 18:31:55 | 000,002,166 | ---- | C] () -- C:\Users\Alekos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_16.07.2010_19-22.lnk [2010.07.03 22:00:46 | 000,000,020 | ---- | C] () -- C:\Windows\System32\SYSTEM [2010.07.03 13:51:03 | 000,024,504 | ---- | C] () -- C:\Users\Alekos\albman[1].jpg [2010.06.29 05:14:31 | 000,001,732 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010.06.29 05:03:42 | 000,001,661 | ---- | C] () -- C:\Users\Alekos\Desktop\Food Force.lnk [2010.06.27 19:27:25 | 000,001,740 | ---- | C] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk [2010.06.27 19:27:23 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys [2010.06.27 18:54:17 | 000,002,505 | ---- | C] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk [2010.06.27 18:49:29 | 000,000,808 | ---- | C] () -- C:\Users\Alekos\Desktop\FreeCommander.lnk [2010.06.27 10:45:37 | 000,001,639 | ---- | C] () -- C:\Users\Public\Desktop\Vuze.lnk [2010.06.21 16:31:11 | 000,000,552 | ---- | C] () -- C:\Users\Alekos\AppData\Local\d3d8caps.dat [2010.06.20 13:22:57 | 000,000,936 | ---- | C] () -- C:\Users\Public\Desktop\No23 Recorder.lnk [2009.05.29 11:05:16 | 000,026,285 | ---- | C] () -- C:\Windows\kubus.ini [2008.12.11 22:38:34 | 000,042,320 | ---- | C] () -- C:\Windows\System32\xfcodec.dll [2008.09.05 10:41:22 | 000,000,273 | ---- | C] () -- C:\Windows\ConfigServer.ini [2008.07.22 17:51:11 | 000,000,507 | ---- | C] () -- C:\Windows\ODBC.INI [2007.01.06 14:40:57 | 000,135,168 | ---- | C] () -- C:\Windows\System32\property.dll [2007.01.06 06:28:43 | 000,753,456 | ---- | C] () -- C:\Windows\System32\drivers\BisonCam.sys [2007.01.06 06:28:43 | 000,015,190 | ---- | C] () -- C:\Windows\M2000Twn.ini [2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.08.11 10:52:02 | 000,012,288 | ---- | C] () -- C:\Windows\System32\EvOnlDiag.dll [2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI < End of report > |
|
18.07.2010, 11:32
| #4 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Maus bleibt hängen, installation von Antivirensoftware unmöglich Sieht alles ziemlich unauffällig aus. Welche Hinweise bzw. Funde hast Du, dass Du auf eine Infektion kommst? Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
08.08.2010, 17:09
| #5 |
| | Maus bleibt hängen, installation von Antivirensoftware unmöglich Die Installation der Updates war irgendwie nicht möglich, der PC hängte sich auf. Mein Kumpel hat anscheinend noch nie eina Update gemacht... egal, ich habe das Problem jedenfalls gelöst, danke für Deine Hilfe. Ein Virustool meldete irgendwelche Bedrohungen-jetzt installiere ich einen gescheiten Virenscanner... nochmals danke |
|
08.08.2010, 17:17
| #6 | ||
| /// Winkelfunktion /// TB-Süch-Tiger™ |  Maus bleibt hängen, installation von Antivirensoftware unmöglichZitat:
 Zitat:
Halte Dich am besten grob an diese fünf Regeln: 1) Sei misstrauisch im Internet und v.a. bei unbekannten E-Mails, sei vorsichtig bei der Herausgabe persönlicher Daten!! 2) Halte Windows und alle verwendeten Programme immer aktuell 3) Führe regelmäßig Backups auf externe Medien durch 4) Arbeite mit eingeschränkten Rechten 5) Nutze sichere Programme wie zB Opera oder Firefox zum Surfen statt den IE, zum Mailen Thunderbird statt Outlook Express - E-Mails nur als reinen text anzeigen lassen Alles noch genauer erklärt steht hier => Kompromittierung unvermeidbar?
__________________ --> Maus bleibt hängen, installation von Antivirensoftware unmöglich |
|
| Themen zu Maus bleibt hängen, installation von Antivirensoftware unmöglich |
| antivirus, ask toolbar, avast!, avg, bho, cdburnerxp, desktop, excel, firefox, friert ein, hijack, hijackthis, home, hängen, hängt sich auf, installation, internet, internet explorer, kaspersky, langsam, maus, maus bleibt hängen, mauszeiger, mozilla, nicht möglich, rundll, sekunden, software, symantec, system, virus, vista, windows |
Linear-Darstellung
