| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Firefox plötzlich sehr langsam / Verbindung fehlgeschlagenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
01.09.2010, 17:34
| #1 |
| |  Firefox plötzlich sehr langsam / Verbindung fehlgeschlagen Hallo zusammen, war die letzten Tage bei Freunden. Internet ging dort problemlos schnell. Gestern, als ich meinen PC wie gewohnt zum Switch ,der mit dem Router verbunden ist, stecken und lossurfen wollte, wurden die Seiten nur noch sehr langsam geladen bzw. zuerst gar nicht und wenn ich öfters auf "Nochmals versuchen" drückte, irgendwann gings dann. Meistens kam ein Seiten-Ladefehler (Server nicht gefunden). Downloads funktionieren allerdings ohne Probleme mit 200+kb/sec. Daraufhin versuchte ich einige Sachen... 1.) h**p://www.journal.kylaloo.net/2004-12/firefox-beine-machen 2.) Kam ich hier ins Forum. - Deinstallierte ZoneAlarm und aktivierte die Windows Firewall  - Malwarebytes hab ich heruntegeladen und hab einen QuickScan gemacht ---------------------------------------------------- Malwarebytes' Anti-Malware 1.46 w*w.malwarebytes.org Datenbank Version: 4524 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 01.09.2010 18:31:32 mbam-log-2010-09-01 (18-31-32).txt Art des Suchlaufs: Quick-Scan Durchsuchte Objekte: 127976 Laufzeit: 3 Minute(n), 16 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) ---------------------------------------------------- Ich hoffe die Beschreibung reicht für weitere Tipps eurerseits. Danke schonmal im voraus Manuel  ---------------------------------------------------- EDIT: Browser ist der Mozilla Firefox Geändert von semmlbroesl (01.09.2010 um 18:11 Uhr) |
|
01.09.2010, 18:53
| #2 |
| | Firefox plötzlich sehr langsam / Verbindung fehlgeschlagen Hallo nochmal,
__________________habe jetzt Malwarebytes vollständig drüber laufen lassen. Hier der log: ---------------------------------------------------- Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4524 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 01.09.2010 19:17:55 mbam-log-2010-09-01 (19-17-55).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|) Durchsuchte Objekte: 220418 Laufzeit: 38 Minute(n), 11 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: F:\Programme\TuneUp Utilities\tuneup2010 keygen.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully. ---------------------------------------------------- OTL Logfile: Code:
ATTFilter OTL logfile created on: 01.09.2010 19:37:42 - Run 1 OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\manuel\Desktop Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 73,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 84,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 434,66 Gb Total Space | 372,89 Gb Free Space | 85,79% Space Free | Partition Type: NTFS Drive D: | 30,00 Gb Total Space | 23,03 Gb Free Space | 76,78% Space Free | Partition Type: NTFS E: Drive not present or media not loaded Drive F: | 298,08 Gb Total Space | 196,37 Gb Free Space | 65,88% Space Free | Partition Type: NTFS G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: MANUEL-PC Current User Name: manuel Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Users\manuel\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme_2\Mozilla Firefox\plugin-container.exe (Mozilla Corporation) PRC - C:\Programme_2\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme_2\TuneUp 2010\TuneUpUtilitiesApp32.exe (TuneUp Software) PRC - C:\Programme_2\TuneUp 2010\TuneUpUtilitiesService32.exe (TuneUp Software) PRC - C:\Programme_2\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme_2\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme_2\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme_2\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation) PRC - C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Users\manuel\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation) MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation) MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation) MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation) MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation) MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation) MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation) MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation) MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation) MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation) MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation) SRV - (TuneUp.Defrag) -- C:\Programme_2\TuneUp 2010\TuneUpDefragService.exe (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Programme_2\TuneUp 2010\TuneUpUtilitiesService32.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software) SRV - (AntiVirService) -- C:\Programme_2\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Programme_2\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation) SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation) SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation) SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation) SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation) SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation) SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation) SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation) SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation) SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation) SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation) SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation) SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation) SRV - (AxInstSV) ActiveX-Installer (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation) SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation) SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation) SRV - (SeaPort) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) SRV - (wlidsvc) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH) DRV - (TuneUpUtilitiesDrv) -- C:\Programme_2\TuneUp 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software) DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH) DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.) DRV - (igfx) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation) DRV - (rtl8192se) -- C:\Windows\System32\drivers\rtl8192se.sys (Realtek Semiconductor Corporation ) DRV - (SynTP) -- C:\Windows\system32\DRIVERS\SynTP.sys (Synaptics Incorporated) DRV - (JME) -- C:\Windows\System32\drivers\JME.sys (JMicron Technology Corp.) DRV - (JMCR) -- C:\Windows\System32\drivers\jmcr.sys (JMicron Technology Corporation) DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.) DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.) DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.) DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.) DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.) DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.) DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices) DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.) DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices) DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.) DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation) DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation) DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation) DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation) DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation) DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.) DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation) DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation) DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation) DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation) DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation) DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex) DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.) DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company) DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation) DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation) DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation) DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation) DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.) DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation) DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation) DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation) DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems) DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation) DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.) DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology) DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation) DRV - (Brserid) Brother MFC-Seriellschnittstellentreiber (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.) DRV - (rdpbus) -- C:\Windows\system32\DRIVERS\rdpbus.sys (Microsoft Corporation) DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation) DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation) DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation) DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation) DRV - (vwififlt) -- C:\Windows\System32\drivers\vwififlt.sys (Microsoft Corporation) DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation) DRV - (1394ohci) -- C:\Windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation) DRV - (UmPass) -- C:\Windows\system32\DRIVERS\umpass.sys (Microsoft Corporation) DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation) DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation) DRV - (CompositeBus) -- C:\Windows\system32\DRIVERS\CompositeBus.sys (Microsoft Corporation) DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation) DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation) DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation) DRV - (HidBatt) -- C:\Windows\system32\DRIVERS\HidBatt.sys (Microsoft Corporation) DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation) DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation) DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (BrUsbMdm) Brother MFC-nur-Fax-Modem (USB) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.) DRV - (BrUsbSer) Brother MFC-WDM-Treiber (USB,seriell) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.) DRV - (BrSerWdm) Brother WDM-Treiber (seriell) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.) DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.) DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.) DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation) DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation) DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation) DRV - (IntcHdmiAddService) Intel(R) -- C:\Windows\System32\drivers\IntcHdmi.sys (Intel(R) Corporation) DRV - (pavboot) -- C:\Windows\system32\drivers\pavboot.sys (Panda Security, S.L.) DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (speedfan) -- C:\Windows\system32\speedfan.sys (Windows (R) 2000 DDK provider) DRV - (giveio) -- C:\Windows\system32\giveio.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.medion.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://medion.msn.com [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.medion.com IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "hxxp://www.google.at/" FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Programme_2\Mozilla Firefox\components [2010.08.27 23:06:41 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Programme_2\Mozilla Firefox\plugins [2010.08.27 23:06:40 | 000,000,000 | ---D | M] [2010.08.25 13:41:57 | 000,000,000 | ---D | M] -- C:\Users\manuel\AppData\Roaming\mozilla\Extensions [2010.08.31 23:54:46 | 000,000,000 | ---D | M] -- C:\Users\manuel\AppData\Roaming\mozilla\Firefox\Profiles\ren1ywhb.default\extensions O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) O2 - BHO: (Windows Live ID-Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) O4 - HKLM..\Run: [avgnt] C:\Programme_2\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [ Malwarebytes Anti-Malware (reboot)] C:\Programme_2\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - File not found O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - File not found O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (livessp) - C:\Windows\System32\livessp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.09.01 17:15:23 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\manuel\Desktop\OTL.exe [2010.09.01 17:04:06 | 000,000,000 | ---D | C] -- C:\Windows\Internet Logs [2010.09.01 00:32:49 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2010.09.01 00:01:12 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\Malwarebytes [2010.09.01 00:01:03 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2010.09.01 00:01:00 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2010.09.01 00:01:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.08.31 23:31:42 | 000,028,552 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\pavboot.sys [2010.08.31 23:30:32 | 000,000,000 | ---D | C] -- C:\Programme\Panda Security [2010.08.31 03:02:44 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\S2 [2010.08.31 03:02:41 | 000,000,000 | ---D | C] -- C:\Users\manuel\Documents\S2 [2010.08.31 02:53:05 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_5.dll [2010.08.31 02:53:04 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_42.dll [2010.08.31 02:53:04 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_42.dll [2010.08.31 02:53:04 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_5.dll [2010.08.31 02:53:03 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll [2010.08.31 02:53:03 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll [2010.08.31 02:53:03 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_42.dll [2010.08.31 02:53:02 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_41.dll [2010.08.31 02:53:02 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll [2010.08.31 02:53:02 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_4.dll [2010.08.31 02:53:02 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll [2010.08.31 02:53:02 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll [2010.08.31 02:53:01 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_4.dll [2010.08.31 02:53:01 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_6.dll [2010.08.31 02:53:00 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll [2010.08.31 02:52:59 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll [2010.08.31 02:52:59 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll [2010.08.31 02:52:59 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll [2010.08.31 02:52:59 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll [2010.08.31 02:52:59 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll [2010.08.31 02:52:58 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll [2010.08.31 02:52:58 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll [2010.08.31 02:52:58 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll [2010.08.31 02:52:58 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll [2010.08.31 02:52:58 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll [2010.08.31 02:52:57 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll [2010.08.31 02:52:57 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll [2010.08.31 02:52:57 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll [2010.08.31 02:52:57 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll [2010.08.31 02:52:56 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll [2010.08.31 02:52:56 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll [2010.08.31 02:52:56 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll [2010.08.31 02:52:56 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll [2010.08.31 02:52:55 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll [2010.08.31 02:52:55 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll [2010.08.31 02:52:54 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll [2010.08.31 02:52:54 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll [2010.08.31 02:52:54 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll [2010.08.31 02:52:54 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll [2010.08.31 02:52:54 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll [2010.08.31 02:52:53 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll [2010.08.31 02:52:53 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll [2010.08.31 02:52:52 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll [2010.08.31 02:52:52 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll [2010.08.31 02:52:52 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll [2010.08.31 02:52:52 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll [2010.08.31 02:52:51 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll [2010.08.31 02:52:51 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll [2010.08.31 02:52:51 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll [2010.08.31 02:52:50 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll [2010.08.31 02:52:50 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll [2010.08.31 02:52:50 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll [2010.08.31 02:52:49 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll [2010.08.31 02:52:48 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_33.dll [2010.08.31 02:52:48 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll [2010.08.31 02:52:48 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll [2010.08.31 02:52:48 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll [2010.08.31 02:52:47 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll [2010.08.31 02:52:47 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll [2010.08.31 02:52:47 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll [2010.08.31 02:52:46 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll [2010.08.31 02:52:46 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll [2010.08.31 02:52:45 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll [2010.08.31 02:52:45 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_3.dll [2010.08.31 02:52:45 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_2.dll [2010.08.31 02:52:45 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_2.dll [2010.08.31 02:52:44 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_1.dll [2010.08.31 02:52:44 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_1.dll [2010.08.31 02:52:34 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll [2010.08.31 02:52:33 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_29.dll [2010.08.31 02:52:33 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_28.dll [2010.08.31 02:52:33 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_0.dll [2010.08.31 02:52:33 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_0.dll [2010.08.31 02:52:32 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_27.dll [2010.08.31 02:52:32 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_26.dll [2010.08.31 02:52:31 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_25.dll [2010.08.31 02:52:30 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_24.dll [2010.08.31 02:50:58 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\WinRAR [2010.08.30 05:59:43 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Blizzard Entertainment [2010.08.26 18:57:27 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\teamspeak2 [2010.08.26 18:57:20 | 000,034,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lhacm.acm [2010.08.26 14:01:01 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\Seven Zip [2010.08.26 06:21:12 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat [2010.08.26 06:19:57 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe [2010.08.26 06:19:57 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll [2010.08.26 06:19:57 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll [2010.08.26 06:16:21 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe [2010.08.26 03:11:09 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\ir32_32.dll [2010.08.26 03:11:09 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll [2010.08.26 03:11:07 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010.08.26 03:11:04 | 001,037,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll [2010.08.26 03:11:04 | 000,133,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys [2010.08.26 03:10:53 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll [2010.08.26 03:10:31 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll [2010.08.26 03:10:27 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll [2010.08.26 03:10:26 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll [2010.08.26 03:10:26 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax [2010.08.26 03:10:25 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll [2010.08.26 03:10:25 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax [2010.08.26 03:10:15 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2010.08.26 03:10:14 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll [2010.08.26 03:10:10 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll [2010.08.26 03:10:09 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll [2010.08.26 03:10:09 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll [2010.08.26 03:10:07 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2010.08.26 03:10:07 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2010.08.26 03:10:02 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll [2010.08.26 03:10:01 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2010.08.26 03:10:01 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2010.08.26 03:10:01 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2010.08.26 03:10:01 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2010.08.26 03:10:01 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2010.08.26 03:10:01 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2010.08.26 03:10:01 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2010.08.26 03:09:51 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll [2010.08.26 03:09:51 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll [2010.08.26 03:09:51 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe [2010.08.26 03:09:51 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe [2010.08.26 03:09:50 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe [2010.08.26 03:09:50 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe [2010.08.26 03:09:50 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll [2010.08.26 03:09:50 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll [2010.08.26 03:09:49 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2010.08.26 03:09:28 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2010.08.26 03:09:19 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2010.08.26 03:09:18 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll [2010.08.26 03:09:18 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2010.08.26 03:09:13 | 002,326,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2010.08.25 15:17:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010.08.25 14:56:29 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\skypePM [2010.08.25 14:55:48 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\Skype [2010.08.25 14:55:35 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Skype [2010.08.25 14:55:34 | 000,000,000 | R--D | C] -- C:\Programme\Skype [2010.08.25 14:55:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010.08.25 14:53:08 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Adobe [2010.08.25 14:51:09 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\Adobe [2010.08.25 14:44:18 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\vlc [2010.08.25 14:15:16 | 000,000,000 | ---D | C] -- C:\Users\manuel\Documents\ForceField Shared Files [2010.08.25 14:15:16 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\CheckPoint [2010.08.25 14:13:27 | 000,000,000 | ---D | C] -- C:\Programme\Conduit [2010.08.25 14:13:05 | 000,000,000 | ---D | C] -- C:\Programme\CheckPoint [2010.08.25 14:13:02 | 000,046,592 | ---- | C] (Zone Labs Inc.) -- C:\Windows\System32\vsutil_loc0407.dll [2010.08.25 14:12:49 | 000,240,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys [2010.08.25 14:11:55 | 000,000,000 | ---D | C] -- C:\ProgramData\CheckPoint [2010.08.25 14:01:41 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\Macromedia [2010.08.25 14:01:41 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\Adobe [2010.08.25 13:56:14 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\Diagnostics [2010.08.25 13:44:13 | 000,030,528 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2010.08.25 13:44:10 | 000,030,016 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll [2010.08.25 13:44:10 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2010.08.25 13:44:01 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\TuneUp Software [2010.08.25 13:43:04 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2010.08.25 13:43:01 | 000,000,000 | -HSD | C] -- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} [2010.08.25 13:41:51 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\Mozilla [2010.08.25 13:41:51 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\Mozilla [2010.08.25 13:37:28 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys [2010.08.25 13:37:27 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2010.08.25 13:37:27 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys [2010.08.25 13:37:27 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys [2010.08.25 13:37:27 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys [2010.08.25 13:37:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2010.08.25 13:31:27 | 000,000,000 | ---D | C] -- C:\Programme_2 [2010.08.25 12:55:10 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\Power2Go [2010.08.25 12:55:00 | 000,000,000 | R--D | C] -- C:\Users\manuel\Searches [2010.08.25 12:54:50 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\Identities [2010.08.25 12:54:49 | 000,000,000 | R--D | C] -- C:\Users\manuel\Contacts [2010.08.25 12:54:48 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2010.08.25 12:54:40 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\VirtualStore [2010.08.25 12:54:38 | 000,000,000 | --SD | C] -- C:\Users\manuel\AppData\Roaming\Microsoft [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Videos [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Saved Games [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Pictures [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Music [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Links [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Favorites [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Downloads [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Documents [2010.08.25 12:54:38 | 000,000,000 | R--D | C] -- C:\Users\manuel\Desktop [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Vorlagen [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\AppData\Local\Verlauf [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\AppData\Local\Temporary Internet Files [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Startmenü [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\SendTo [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Recent [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Netzwerkumgebung [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Lokale Einstellungen [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Documents\Eigene Videos [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Documents\Eigene Musik [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Eigene Dateien [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Documents\Eigene Bilder [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Druckumgebung [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Cookies [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\AppData\Local\Anwendungsdaten [2010.08.25 12:54:38 | 000,000,000 | -HSD | C] -- C:\Users\manuel\Anwendungsdaten [2010.08.25 12:54:38 | 000,000,000 | -H-D | C] -- C:\Users\manuel\AppData [2010.08.25 12:54:38 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\Temp [2010.08.25 12:54:38 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Local\Microsoft [2010.08.25 12:54:38 | 000,000,000 | ---D | C] -- C:\Users\manuel\AppData\Roaming\Media Center Programs [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\Recovery [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\Programme [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2010.08.25 12:54:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2010.08.25 12:53:34 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution ========== Files - Modified Within 30 Days ========== [2010.09.01 19:38:21 | 001,048,576 | ---- | M] () -- C:\Users\manuel\NTUSER.DAT [2010.09.01 19:27:28 | 000,010,096 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.09.01 19:27:28 | 000,010,096 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.09.01 19:24:31 | 001,472,002 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2010.09.01 19:24:31 | 000,643,866 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2010.09.01 19:24:31 | 000,607,190 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2010.09.01 19:24:31 | 000,126,394 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2010.09.01 19:24:31 | 000,103,568 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2010.09.01 19:20:15 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010.09.01 19:20:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.09.01 19:20:07 | 2363,129,856 | -HS- | M] () -- C:\hiberfil.sys [2010.09.01 19:19:22 | 002,671,364 | -H-- | M] () -- C:\Users\manuel\AppData\Local\IconCache.db [2010.09.01 17:15:27 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\manuel\Desktop\OTL.exe [2010.09.01 17:01:27 | 000,078,304 | ---- | M] () -- C:\Users\manuel\AppData\Local\GDIPFONTCACHEV1.DAT [2010.09.01 14:34:15 | 000,330,480 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2010.09.01 00:53:26 | 000,029,208 | ---- | M] () -- C:\Users\manuel\Documents\cc_20100901_005256.reg [2010.09.01 00:49:26 | 000,000,045 | ---- | M] () -- C:\Windows\System32\initdebug.nfo [2010.08.31 13:15:20 | 000,000,853 | ---- | M] () -- C:\Users\manuel\Desktop\World of Warcraft.lnk [2010.08.27 20:55:38 | 000,524,288 | -HS- | M] () -- C:\Users\manuel\NTUSER.DAT{61a97af1-b1b8-11df-976a-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms [2010.08.27 20:55:38 | 000,524,288 | -HS- | M] () -- C:\Users\manuel\NTUSER.DAT{61a97af1-b1b8-11df-976a-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms [2010.08.27 20:55:38 | 000,065,536 | -HS- | M] () -- C:\Users\manuel\NTUSER.DAT{61a97af1-b1b8-11df-976a-806e6f6e6963}.TM.blf [2010.08.27 10:53:28 | 000,786,432 | -HS- | M] () -- C:\Users\manuel\NTUSER.DAT_tureg_old [2010.08.26 19:33:42 | 000,000,806 | ---- | M] () -- C:\Users\Public\Desktop\TS 3.lnk [2010.08.26 18:57:20 | 000,034,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lhacm.acm [2010.08.26 18:57:18 | 000,000,749 | ---- | M] () -- C:\Users\manuel\Desktop\TS 2.lnk [2010.08.25 14:56:29 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat [2010.08.25 14:39:02 | 000,524,288 | -HS- | M] () -- C:\Users\manuel\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2010.08.25 14:39:02 | 000,524,288 | -HS- | M] () -- C:\Users\manuel\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2010.08.25 14:39:02 | 000,065,536 | -HS- | M] () -- C:\Users\manuel\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2010.08.25 14:12:49 | 000,000,508 | ---- | M] () -- C:\Users\manuel\Desktop\externe Festplatte.lnk [2010.08.25 14:12:46 | 000,000,484 | ---- | M] () -- C:\Users\manuel\Desktop\Daten.lnk [2010.08.25 13:41:52 | 000,000,000 | ---- | M] () -- C:\Windows\nsreg.dat [2010.08.25 12:54:38 | 000,000,020 | -HS- | M] () -- C:\Users\manuel\ntuser.ini [2010.08.25 12:53:24 | 000,052,953 | ---- | M] () -- C:\Windows\System32\license.rtf [2010.08.12 21:26:04 | 000,030,528 | ---- | M] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe [2010.08.12 21:20:06 | 000,021,312 | ---- | M] (TuneUp Software) -- C:\Windows\System32\authuitu.dll [2010.08.12 21:19:54 | 000,030,016 | ---- | M] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll ========== Files Created - No Company Name ========== [2010.09.01 00:53:15 | 000,029,208 | ---- | C] () -- C:\Users\manuel\Documents\cc_20100901_005256.reg [2010.09.01 00:49:24 | 000,000,045 | ---- | C] () -- C:\Windows\System32\initdebug.nfo [2010.08.27 10:58:17 | 000,524,288 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT{61a97af1-b1b8-11df-976a-806e6f6e6963}.TMContainer00000000000000000002.regtrans-ms [2010.08.27 10:58:17 | 000,524,288 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT{61a97af1-b1b8-11df-976a-806e6f6e6963}.TMContainer00000000000000000001.regtrans-ms [2010.08.27 10:58:17 | 000,065,536 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT{61a97af1-b1b8-11df-976a-806e6f6e6963}.TM.blf [2010.08.27 10:53:20 | 000,000,000 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT_tureg_new.LOG2 [2010.08.27 10:53:20 | 000,000,000 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT_tureg_new.LOG1 [2010.08.26 19:33:42 | 000,000,806 | ---- | C] () -- C:\Users\Public\Desktop\TS 3.lnk [2010.08.26 18:57:18 | 000,000,749 | ---- | C] () -- C:\Users\manuel\Desktop\TS 2.lnk [2010.08.25 15:16:43 | 000,000,853 | ---- | C] () -- C:\Users\manuel\Desktop\World of Warcraft.lnk [2010.08.25 14:56:29 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010.08.25 14:12:49 | 000,000,508 | ---- | C] () -- C:\Users\manuel\Desktop\externe Festplatte.lnk [2010.08.25 14:12:46 | 000,000,484 | ---- | C] () -- C:\Users\manuel\Desktop\Daten.lnk [2010.08.25 13:41:52 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010.08.25 12:54:38 | 001,048,576 | ---- | C] () -- C:\Users\manuel\NTUSER.DAT [2010.08.25 12:54:38 | 000,786,432 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT_tureg_old [2010.08.25 12:54:38 | 000,524,288 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2010.08.25 12:54:38 | 000,524,288 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2010.08.25 12:54:38 | 000,262,144 | -HS- | C] () -- C:\Users\manuel\ntuser.dat.LOG1 [2010.08.25 12:54:38 | 000,065,536 | -HS- | C] () -- C:\Users\manuel\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2010.08.25 12:54:38 | 000,000,020 | -HS- | C] () -- C:\Users\manuel\ntuser.ini [2010.08.25 12:54:38 | 000,000,000 | -HS- | C] () -- C:\Users\manuel\ntuser.dat.LOG2 [2010.08.25 12:48:19 | 2363,129,856 | -HS- | C] () -- C:\hiberfil.sys [2009.11.23 13:19:39 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll [2009.11.23 13:13:13 | 000,004,608 | ---- | C] () -- C:\Windows\System32\HdmiCoin.dll [2009.11.23 12:58:33 | 000,017,408 | ---- | C] () -- C:\Windows\System32\rpcnetp.dll [2009.08.03 16:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll [2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [1996.04.03 21:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys < End of report > OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 01.09.2010 19:37:42 - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\manuel\Desktop
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 73,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 434,66 Gb Total Space | 372,89 Gb Free Space | 85,79% Space Free | Partition Type: NTFS
Drive D: | 30,00 Gb Total Space | 23,03 Gb Free Space | 76,78% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 298,08 Gb Total Space | 196,37 Gb Free Space | 65,88% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: MANUEL-PC
Current User Name: manuel
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme_2\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme_2\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme_2\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{10A44844-4465-456E-8C97-80BDD4F68845}" = Windows Live ID-Anmelde-Assistent
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron Flash Media Controller Driver
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}" = JMicron Ethernet Adapter NDIS Driver
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9D3D8C60-A55F-4fed-B2B9-173F09590E16}" = REALTEK Wireless LAN Driver
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.3 - Deutsch
"{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}" = Microsoft SQL Server 2005 Compact Edition [DEU]
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"SpeedFan" = SpeedFan (remove only)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TuneUp Utilities" = TuneUp Utilities
"TVWiz" = Intel(R) TV Wizard
"VLC media player" = VLC media player 1.1.2
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 30.08.2010 16:53:16 | Computer Name = manuel-PC | Source = | ID = 0
Description =
Error - 30.08.2010 16:53:16 | Computer Name = manuel-PC | Source = | ID = 0
Description =
Error - 30.08.2010 20:03:29 | Computer Name = manuel-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
9.0.4500.26, Zeitstempel: 0x4c644a0c Name des fehlerhaften Moduls: TuneUpUtilitiesService32.exe,
Version: 9.0.4500.26, Zeitstempel: 0x4c644a0c Ausnahmecode: 0xc0000005 Fehleroffset:
0x00013876 ID des fehlerhaften Prozesses: 0x7b0 Startzeit der fehlerhaften Anwendung:
0x01cb47bcaec5f79a Pfad der fehlerhaften Anwendung: C:\Programme_2\TuneUp 2010\TuneUpUtilitiesService32.exe
Pfad
des fehlerhaften Moduls: C:\Programme_2\TuneUp 2010\TuneUpUtilitiesService32.exe
Berichtskennung:
2ee58479-b493-11df-a37b-0022200921c9
Error - 30.08.2010 20:51:55 | Computer Name = manuel-PC | Source = VSS | ID = 8194
Description =
Error - 30.08.2010 22:32:31 | Computer Name = manuel-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\windows
live\messenger\wlcsdk.exe". Die abhängige Assemblierung "UCCAPI,processorArchitecture="x86",type="win32",version="2.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 30.08.2010 22:32:43 | Computer Name = manuel-PC | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\microsoft\search
enhancement pack\search helper\sepsearchhelperie.dll". Fehler in Manifest- oder
Richtliniendatei "c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll"
in Zeile 2. Ungültige XML-Syntax.
Error - 01.09.2010 08:41:35 | Computer Name = manuel-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
9.0.4500.26, Zeitstempel: 0x4c644a0c Name des fehlerhaften Moduls: TuneUpUtilitiesService32.exe,
Version: 9.0.4500.26, Zeitstempel: 0x4c644a0c Ausnahmecode: 0xc0000005 Fehleroffset:
0x00013876 ID des fehlerhaften Prozesses: 0x6c Startzeit der fehlerhaften Anwendung:
0x01cb49d204695c89 Pfad der fehlerhaften Anwendung: C:\Programme_2\TuneUp 2010\TuneUpUtilitiesService32.exe
Pfad
des fehlerhaften Moduls: C:\Programme_2\TuneUp 2010\TuneUpUtilitiesService32.exe
Berichtskennung:
4130a9df-b5c6-11df-a54d-0022200921c9
Error - 01.09.2010 08:54:40 | Computer Name = manuel-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\windows
live\messenger\wlcsdk.exe". Die abhängige Assemblierung "UCCAPI,processorArchitecture="x86",type="win32",version="2.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 01.09.2010 08:54:51 | Computer Name = manuel-PC | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\microsoft\search
enhancement pack\search helper\sepsearchhelperie.dll". Fehler in Manifest- oder
Richtliniendatei "c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll"
in Zeile 2. Ungültige XML-Syntax.
Error - 01.09.2010 11:33:56 | Computer Name = manuel-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
9.0.4500.26, Zeitstempel: 0x4c644a0c Name des fehlerhaften Moduls: TuneUpUtilitiesService32.exe,
Version: 9.0.4500.26, Zeitstempel: 0x4c644a0c Ausnahmecode: 0xc0000005 Fehleroffset:
0x00013876 ID des fehlerhaften Prozesses: 0x70c Startzeit der fehlerhaften Anwendung:
0x01cb49e6d048f9dd Pfad der fehlerhaften Anwendung: C:\Programme_2\TuneUp 2010\TuneUpUtilitiesService32.exe
Pfad
des fehlerhaften Moduls: C:\Programme_2\TuneUp 2010\TuneUpUtilitiesService32.exe
Berichtskennung:
549802c5-b5de-11df-813f-0022200921c9
[ System Events ]
Error - 01.09.2010 10:53:31 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 10:55:21 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 10:55:25 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 10:56:53 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 10:57:03 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 10:57:27 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 10:57:44 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 10:57:44 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 10:58:02 | Computer Name = manuel-PC | Source = Schannel | ID = 36888
Description = Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus
lautet: 10.
Error - 01.09.2010 11:33:56 | Computer Name = manuel-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "TuneUp Utilities Service" wurde unerwartet beendet. Dies ist
bereits 1 Mal passiert.
< End of report >
Danke schonmal im voraus für die Tipps Manuel |
|
01.09.2010, 18:55
| #3 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  Firefox plötzlich sehr langsam / Verbindung fehlgeschlagenZitat:
 Nicht nur dass TuneUp der letzte Schrott ist, aber das auch noch illegal freischalten zu müssen ist einfach nur  Die (Be)nutzung von Cracks, Serials und Keygens ist illegal, somit gibt es im Trojaner-Board keinen weiteren Support mehr. Für Dich geht es hier weiter => Neuaufsetzen des Systems Bitte auch alle Passwörter abändern (für E-Mail-Konten, StudiVZ, Ebay...einfach alles!) da nicht selten in dieser dubiosen Software auch Keylogger und Backdoorfunktionen stecken. Danach nie wieder sowas anrühren!
__________________ |
|
| Themen zu Firefox plötzlich sehr langsam / Verbindung fehlgeschlagen |
| anti-malware, dateien, explorer, firefox, firewall, freunde, funktionieren, hallo zusammen, internet, langsam, malwarebytes, nicht gefunden, plötzlich, probleme, problemlos, sache, sehr langsam, seite, seiten, server, tipps, verbindung, verbindung fehlgeschlagen, version, windows, windows firewall, zonealarm, zusammen |
Linear-Darstellung
