| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php"Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
08.09.2010, 18:07
| #31 |
 |  Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" Bitte schön! Firefox und Thunderbird habe ich aktualisiert statt sie zu deinstallieren. Geht ok, oder? Code:
ATTFilter OTL logfile created on: 08.09.2010 19:04:55 - Run 2 OTL by OldTimer - Version 3.2.11.0 Folder = C:\Dokumente und Einstellungen\Ich\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.11) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 65,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): C:\pagefile.sys 1024 1024 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 72,65 Gb Total Space | 19,08 Gb Free Space | 26,26% Space Free | Partition Type: FAT32 Drive D: | 73,45 Gb Total Space | 50,81 Gb Free Space | 69,17% Space Free | Partition Type: NTFS Drive E: | 455,16 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: FINN Current User Name: Ich Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010.09.08 19:04:20 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe PRC - [2010.09.08 18:33:53 | 000,908,248 | ---- | M] (Mozilla Corporation) -- D:\Programme\Mozilla Firefox\firefox.exe PRC - [2010.07.21 17:07:04 | 001,778,064 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliType Pro\itype.exe PRC - [2010.07.21 17:07:04 | 000,493,456 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliType Pro\dpupdchk.exe PRC - [2009.12.07 22:32:12 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Shockwave 10\PostUpdate.exe PRC - [2009.09.26 07:35:02 | 000,819,600 | ---- | M] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE PRC - [2009.09.23 15:04:56 | 000,203,608 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe PRC - [2009.09.23 15:04:52 | 000,447,832 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Application Virtualization Client\sftlist.exe PRC - [2008.04.14 04:22:46 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE PRC - [2007.06.16 12:50:28 | 000,068,856 | ---- | M] (Google Inc.) -- C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe PRC - [2006.03.11 22:23:16 | 000,221,184 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\system32\UAService7.exe PRC - [2005.06.27 14:32:28 | 000,278,528 | ---- | M] (T-Online International AG, Marmiko IT-Solutions GmbH) -- D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe PRC - [2004.07.12 09:54:26 | 000,015,360 | ---- | M] (Microsoft® Corporation) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkCalRem.exe ========== Modules (SafeList) ========== MOD - [2010.09.08 19:04:20 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe MOD - [2008.04.14 04:21:06 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx MOD - [2004.05.04 19:39:02 | 000,075,776 | ---- | M] () -- C:\Programme\TuneUp WinStyler\WinStylerThemeHelper.dll ========== Win32 Services (SafeList) ========== SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2010.06.14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2009.09.26 07:35:02 | 000,819,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE -- (cvhsvc) SRV - [2009.09.26 04:28:22 | 004,639,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc) SRV - [2009.09.26 03:31:58 | 000,149,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose) SRV - [2009.09.23 15:04:56 | 000,203,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2009.09.23 15:04:52 | 000,447,832 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2006.03.11 22:23:16 | 000,221,184 | ---- | M] (Sony DADC Austria AG.) [Auto | Running] -- C:\WINDOWS\system32\UAService7.exe -- (UserAccess7) SecuROM User Access Service (V7) SRV - [2005.04.04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004.05.04 19:39:04 | 000,117,760 | ---- | M] (TuneUp Software GmbH) [Auto | Stopped] -- C:\Programme\TuneUp WinStyler\WinStylerThemeSvc.exe -- (TUWinStylerThemeSvc) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\usbaapl.sys -- (USBAAPL) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -- (upperdev) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\Sandra.sys -- (SANDRA) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\point32.sys -- (Point32) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\ov530vid.sys -- (ovt530) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS -- (MTOnlPktAlyX) DRV - File not found [Kernel | Auto | Stopped] -- C:\Programme\Acer\eRecovery\int15.sys -- (int15.sys) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOKUME~1\Ich\LOKALE~1\Temp\DMSKSSRh.sys -- (DMSKSSRh) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\cofi\catchme.sys -- (catchme) DRV - [2010.07.21 17:07:04 | 000,021,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nuidfltr.sys -- (NuidFltr) DRV - [2010.02.26 14:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2009.09.23 15:05:06 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Sftredirxp.sys -- (Sftredir) DRV - [2009.09.23 15:04:56 | 000,014,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Programme\Microsoft Application Virtualization Client\drivers\SftVolXP.sys -- (sftvol) DRV - [2009.09.23 15:04:54 | 000,190,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Programme\Microsoft Application Virtualization Client\drivers\sftplayxp.sys -- (sftplay) DRV - [2009.09.23 15:04:52 | 000,543,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Programme\Microsoft Application Virtualization Client\drivers\SftFSXP.sys -- (sftfs) DRV - [2009.06.15 22:23:50 | 000,717,296 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2009.05.11 09:12:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | Unknown | Stopped] -- C:\WINDOWS\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009.02.04 09:27:20 | 003,488,768 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008.10.31 20:52:16 | 000,093,184 | R--- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008.04.13 20:53:10 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm) DRV - [2008.04.13 20:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE) DRV - [2008.04.13 20:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB-Audiotreiber (WDM) DRV - [2008.04.13 18:36:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus) DRV - [2007.10.12 03:40:00 | 000,009,096 | R--- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdide.sys -- (amdide) DRV - [2006.07.01 23:30:28 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2006.05.22 06:40:30 | 000,017,152 | ---- | M] (T-Online International AG, Marmiko IT-Solutions GmbH) [Kernel | On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys -- (MIINPazX) DRV - [2006.05.05 05:53:30 | 000,985,472 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AVerBDA3x.sys -- (AVerA700) DRV - [2005.11.03 16:40:08 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x) DRV - [2005.10.22 07:38:00 | 000,006,144 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NTIDrvr.sys -- (NTIDrvr) DRV - [2005.07.01 06:30:32 | 000,230,272 | R--- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2005.07.01 06:29:28 | 003,134,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2005.06.08 08:31:30 | 002,319,680 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2005.06.01 17:40:10 | 000,097,920 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SI3112r.sys -- (SI3112r) DRV - [2005.06.01 17:40:10 | 000,010,240 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys -- (SiFilter) DRV - [2005.03.04 11:10:26 | 000,074,496 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp) DRV - [2005.02.23 14:58:56 | 000,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc) DRV - [2005.01.07 17:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) DRV - [2004.12.17 17:14:44 | 000,013,952 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\UBHelper.sys -- (UBHelper) DRV - [2004.08.03 22:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) DRV - [2004.01.30 15:29:38 | 000,055,808 | ---- | M] (Saitek) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SaiH0464.sys -- (SaiH0464) DRV - [2004.01.28 09:09:36 | 000,026,624 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SaiNtBus.sys -- (SaiNtBus) DRV - [2004.01.28 09:09:34 | 000,015,232 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SaiMini.sys -- (SaiMini) DRV - [2003.09.19 15:45:48 | 000,021,248 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc) DRV - [2003.07.02 04:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1) DRV - [2000.07.24 01:01:00 | 000,019,537 | ---- | M] (Brother Industries Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\BrPar.sys -- (BrPar) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://fullarticles.net IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "schueler.cc|travian.at|youtube.com" FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.1 FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.3.42 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8 FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010.09.01 03:44:34 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.12\extensions\\Components: D:\Programme\Mozilla Firefox\components [2010.09.08 18:34:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.12\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2010.09.08 18:34:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2007.05.01 16:30:44 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2008.09.05 15:05:18 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010.09.01 03:44:32 | 000,000,000 | ---D | M] [2010.04.13 14:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions [2010.09.08 18:35:44 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.04.13 14:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions [2010.04.13 14:35:58 | 000,000,000 | ---D | M] (Linkification) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2010.09.06 16:07:58 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010.08.19 23:50:02 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.09.01 04:39:28 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} [2010.04.18 14:08:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\youtube2mp3@mondayx.de [2010.09.08 16:16:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\9ochijs3.001\extensions [2010.01.14 23:08:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions [2010.04.11 18:03:30 | 000,000,000 | ---D | M] (Linkification) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2010.09.06 16:07:58 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010.04.11 15:12:12 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.03.17 14:48:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\Foxdie@tanjihay.com O1 HOSTS File: ([2010.09.07 23:38:22 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation) O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider) O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation) O4 - HKLM..\Run: [itype] C:\Programme\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation) O4 - HKLM..\Run: [LaunchApp] C:\WINDOWS\Alaunch.exe (Acer Inc.) O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [ToADiMon.exe] D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (T-Online International AG, Marmiko IT-Solutions GmbH) O4 - HKCU..\Run: [ICQ] D:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.) O4 - HKCU..\Run: [Steam] d:\programme\steam\steam.exe (Valve Corporation) O4 - HKCU..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - HKCU..\RunOnce: [SWHelper] C:\WINDOWS\System32\Macromed\Shockwave 10\PostUpdate.exe () O4 - Startup: C:\Dokumente und Einstellungen\Ich\Startmenü\Programme\Zubehör\Autostart\WKCALREM.LNK = C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkCalRem.exe (Microsoft® Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_21.dll (Sun Microsystems, Inc.) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1135673099383 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.EXE (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2005.10.22 07:38:32 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ] O32 - AutoRun File - [2009.11.01 14:36:42 | 000,000,098 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.09.08 19:04:19 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe [2010.09.08 18:15:05 | 000,926,032 | ---- | C] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\Norton_Removal_Tool.exe [2010.09.08 17:14:52 | 014,668,664 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\IPx86_1031_8.0.225.0.exe [2010.09.08 16:34:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Desktop\Microsoft IntelliPoint [2010.09.08 16:32:15 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft IntelliType Pro [2010.09.08 16:29:34 | 014,880,640 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\ITPx86_1031_8.0.225.0.exe [2010.09.08 06:46:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Skype [2010.09.08 06:46:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype [2010.09.08 06:45:30 | 000,958,856 | ---- | C] (Skype Technologies S.A.) -- C:\Dokumente und Einstellungen\Ich\Desktop\SkypeSetup-Beta.exe [2010.09.08 01:05:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\InstallShield [2010.09.08 00:54:39 | 000,000,000 | -HSD | C] -- C:\Recycled [2010.09.07 23:25:31 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010.09.07 23:21:19 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010.09.07 23:21:19 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010.09.07 23:21:19 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010.09.07 23:21:19 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010.09.07 23:20:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010.09.07 23:16:35 | 000,000,000 | ---D | C] -- C:\Qoobox [2010.09.07 23:04:36 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Ich\Recent [2010.09.07 22:57:09 | 003,427,248 | ---- | C] (Piriform Ltd) -- C:\Dokumente und Einstellungen\Ich\Desktop\ccsetup235.exe [2010.09.07 21:12:19 | 000,000,000 | ---D | C] -- C:\Programme\trend micro [2010.09.07 21:11:23 | 000,000,000 | ---D | C] -- C:\rsit [2010.09.07 18:28:14 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2010.09.07 17:06:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe [2010.09.07 17:06:22 | 004,747,136 | ---- | C] (Adobe Systems Inc.) -- C:\Dokumente und Einstellungen\Ich\Desktop\Shockwave_Installer_Slim.exe [2010.09.07 16:59:37 | 000,000,000 | ---D | C] -- C:\Programme\Windows Sidebar [2010.09.07 16:59:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton [2010.09.07 16:56:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NortonInstaller [2010.09.07 16:54:13 | 132,049,776 | ---- | C] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\TT_159_SYMTB_TMD.exe [2010.09.06 23:29:18 | 000,000,000 | ---D | C] -- C:\_OTL [2010.09.06 22:16:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Malwarebytes [2010.09.06 22:16:28 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.09.06 22:16:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.09.06 22:16:21 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.09.06 22:15:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\MFTools [2010.09.06 16:35:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mp3tag [2010.09.06 16:07:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DVDVideoSoftIEHelpers [2010.09.06 07:27:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\Neuer Ordner [2010.09.01 21:27:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia Ovi Suite [2010.09.01 04:05:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\NokiaAccount [2010.09.01 03:50:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Globalization [2010.09.01 03:50:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic [2010.09.01 03:50:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Nokia [2010.09.01 03:44:21 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys [2010.09.01 03:44:11 | 000,000,000 | ---D | C] -- C:\Programme\PC Connectivity Solution [2010.09.01 03:43:22 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01009.dll [2010.09.01 03:43:22 | 000,662,016 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll [2010.09.01 03:43:22 | 000,018,176 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys [2010.09.01 03:40:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache [2010.08.21 18:33:32 | 000,000,000 | ---D | C] -- C:\FOUND.069 [2010.08.20 03:55:24 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.08.20 03:55:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.08.20 03:55:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.08.11 04:42:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard Entertainment [2010.08.11 04:41:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard [2010.08.11 04:41:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Blizzard Entertainment [2010.08.10 05:25:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\Lil Wayne - The Blue Martian [Deluxe Edition] - Mixtape Evolution [2007.05.31 19:23:56 | 001,673,576 | ---- | C] (Microsoft Corporation) -- C:\Programme\dsetup32.dll [2007.05.31 19:23:56 | 000,503,144 | ---- | C] (Microsoft Corporation) -- C:\Programme\DXSETUP.exe [2007.05.31 19:23:56 | 000,077,160 | ---- | C] (Microsoft Corporation) -- C:\Programme\DSETUP.dll [3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.09.08 19:04:20 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe [2010.09.08 18:50:22 | 000,012,718 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.09.08 18:50:16 | 000,121,808 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap [2010.09.08 18:47:56 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.09.08 18:47:46 | 1609,093,120 | -HS- | M] () -- C:\hiberfil.sys [2010.09.08 18:47:46 | 000,274,168 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.09.08 18:46:32 | 000,004,661 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat [2010.09.08 18:46:28 | 015,466,496 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\ntuser.dat [2010.09.08 18:46:28 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Ich\ntuser.ini [2010.09.08 18:22:10 | 000,071,688 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2010.09.08 18:15:06 | 000,926,032 | ---- | M] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\Norton_Removal_Tool.exe [2010.09.08 18:14:12 | 000,897,643 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\registrycleaner_de.zip [2010.09.08 17:15:04 | 014,668,664 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\IPx86_1031_8.0.225.0.exe [2010.09.08 16:33:44 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job [2010.09.08 16:32:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01009.Wdf [2010.09.08 16:29:46 | 014,880,640 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\ITPx86_1031_8.0.225.0.exe [2010.09.08 06:46:20 | 000,001,872 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk [2010.09.08 06:45:32 | 000,958,856 | ---- | M] (Skype Technologies S.A.) -- C:\Dokumente und Einstellungen\Ich\Desktop\SkypeSetup-Beta.exe [2010.09.08 03:34:32 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010.09.08 03:30:18 | 000,505,776 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.09.08 03:30:18 | 000,481,956 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.09.08 03:30:18 | 000,088,156 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.09.08 03:30:16 | 001,151,674 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010.09.08 03:30:16 | 000,104,852 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.09.08 02:35:12 | 000,002,261 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Google Chrome.lnk [2010.09.08 01:11:14 | 000,000,844 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Meine freigegebenen Ordner.lnk [2010.09.08 01:05:16 | 000,000,226 | ---- | M] () -- C:\WINDOWS\Brownie.ini [2010.09.08 01:05:16 | 000,000,023 | ---- | M] () -- C:\WINDOWS\BRDIAG.INI [2010.09.08 01:05:16 | 000,000,011 | ---- | M] () -- C:\WINDOWS\BRVIDEO.INI [2010.09.07 23:40:32 | 000,000,827 | ---- | M] () -- C:\WINDOWS\system.ini [2010.09.07 23:25:38 | 000,000,339 | RHS- | M] () -- C:\boot.ini [2010.09.07 22:58:46 | 000,000,562 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\CCleaner.lnk [2010.09.07 22:57:14 | 003,427,248 | ---- | M] (Piriform Ltd) -- C:\Dokumente und Einstellungen\Ich\Desktop\ccsetup235.exe [2010.09.07 22:55:06 | 003,840,033 | R--- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\cofi.exe [2010.09.07 21:10:56 | 000,339,991 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe [2010.09.07 18:02:34 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm [2010.09.07 18:02:34 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm [2010.09.07 17:48:54 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm [2010.09.07 17:48:54 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm [2010.09.07 17:35:32 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm [2010.09.07 17:35:32 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm [2010.09.07 17:22:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm [2010.09.07 17:22:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm [2010.09.07 17:13:46 | 000,000,692 | ---- | M] () -- C:\WINDOWS\win.ini [2010.09.07 17:13:46 | 000,000,222 | ---- | M] () -- C:\Boot.bak [2010.09.07 17:08:46 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm [2010.09.07 17:08:46 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm [2010.09.07 17:06:26 | 004,747,136 | ---- | M] (Adobe Systems Inc.) -- C:\Dokumente und Einstellungen\Ich\Desktop\Shockwave_Installer_Slim.exe [2010.09.07 17:06:00 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm [2010.09.07 17:06:00 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm [2010.09.07 17:00:38 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm [2010.09.07 17:00:36 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm [2010.09.07 16:56:08 | 132,049,776 | ---- | M] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\TT_159_SYMTB_TMD.exe [2010.09.07 16:55:40 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm [2010.09.07 16:55:40 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm [2010.09.07 16:42:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm [2010.09.07 16:42:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm [2010.09.07 16:28:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm [2010.09.07 16:28:42 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm [2010.09.07 16:28:18 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm [2010.09.07 16:28:18 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm [2010.09.07 08:27:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm [2010.09.07 08:27:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm [2010.09.07 08:13:50 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm [2010.09.07 08:13:50 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm [2010.09.07 08:00:30 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm [2010.09.07 08:00:30 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm [2010.09.07 07:47:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm [2010.09.07 07:47:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm [2010.09.07 07:33:58 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm [2010.09.07 07:33:58 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm [2010.09.07 07:20:40 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm [2010.09.07 07:20:40 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm [2010.09.07 07:07:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm [2010.09.07 07:07:06 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm [2010.09.07 07:06:54 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm [2010.09.07 07:06:54 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm [2010.09.07 02:13:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm [2010.09.07 02:13:26 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm [2010.09.06 22:16:34 | 000,000,556 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.09.06 22:15:32 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\defogger.exe [2010.09.06 22:15:28 | 000,284,915 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Gmer.zip [2010.09.06 22:14:50 | 000,388,197 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Load.exe [2010.09.06 16:34:58 | 000,000,542 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mp3tag.lnk [2010.09.06 16:07:44 | 000,000,819 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\DVDVideoSoft Free Studio.lnk [2010.09.01 04:13:04 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf [2010.09.01 04:12:58 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_user_01_09_00.Wdf [2010.09.01 04:07:14 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2010.09.01 04:07:14 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf [2010.09.01 03:50:42 | 000,001,880 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Player.lnk [2010.09.01 03:49:10 | 000,001,673 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Suite.lnk [2010.08.22 17:30:56 | 000,031,001 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\JAck the Ripper.odt [3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.09.08 18:14:15 | 000,897,643 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\registrycleaner_de.zip [2010.09.08 16:33:42 | 000,000,280 | ---- | C] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job [2010.09.08 16:32:53 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01009.Wdf [2010.09.08 06:46:19 | 000,001,872 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk [2010.09.08 03:02:59 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2010.09.08 01:11:13 | 000,000,844 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Meine freigegebenen Ordner.lnk [2010.09.07 23:25:36 | 000,000,222 | ---- | C] () -- C:\Boot.bak [2010.09.07 23:25:34 | 000,262,448 | RHS- | C] () -- C:\cmldr [2010.09.07 23:21:19 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010.09.07 23:21:19 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010.09.07 23:21:19 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010.09.07 23:21:19 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010.09.07 23:21:19 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010.09.07 22:58:45 | 000,000,562 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\CCleaner.lnk [2010.09.07 22:55:05 | 003,840,033 | R--- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\cofi.exe [2010.09.07 21:11:00 | 000,339,991 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe [2010.09.06 23:38:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm [2010.09.06 23:38:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata19.sqm [2010.09.06 23:19:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm [2010.09.06 23:19:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata18.sqm [2010.09.06 23:15:54 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm [2010.09.06 23:15:54 | 000,000,232 | -H-- | C] () -- C:\sqmdata17.sqm [2010.09.06 23:06:38 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm [2010.09.06 23:06:38 | 000,000,232 | -H-- | C] () -- C:\sqmdata16.sqm [2010.09.06 22:53:08 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm [2010.09.06 22:53:08 | 000,000,232 | -H-- | C] () -- C:\sqmdata15.sqm [2010.09.06 22:45:34 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm [2010.09.06 22:45:34 | 000,000,232 | -H-- | C] () -- C:\sqmdata14.sqm [2010.09.06 22:16:32 | 000,000,556 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.09.06 22:15:31 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\defogger.exe [2010.09.06 22:15:26 | 000,284,915 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Gmer.zip [2010.09.06 22:14:50 | 000,388,197 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Load.exe [2010.09.06 22:13:26 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm [2010.09.06 22:13:26 | 000,000,232 | -H-- | C] () -- C:\sqmdata13.sqm [2010.09.06 21:46:25 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm [2010.09.06 21:46:25 | 000,000,232 | -H-- | C] () -- C:\sqmdata12.sqm [2010.09.06 21:33:02 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt11.sqm [2010.09.06 21:33:02 | 000,000,232 | -H-- | C] () -- C:\sqmdata11.sqm [2010.09.06 21:19:43 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt10.sqm [2010.09.06 21:19:43 | 000,000,232 | -H-- | C] () -- C:\sqmdata10.sqm [2010.09.06 21:06:24 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm [2010.09.06 21:06:24 | 000,000,232 | -H-- | C] () -- C:\sqmdata09.sqm [2010.09.06 20:53:01 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm [2010.09.06 20:53:01 | 000,000,232 | -H-- | C] () -- C:\sqmdata08.sqm [2010.09.06 20:41:28 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm [2010.09.06 20:41:28 | 000,000,232 | -H-- | C] () -- C:\sqmdata07.sqm [2010.09.06 20:26:22 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm [2010.09.06 20:26:22 | 000,000,232 | -H-- | C] () -- C:\sqmdata06.sqm [2010.09.06 20:13:15 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm [2010.09.06 20:13:15 | 000,000,232 | -H-- | C] () -- C:\sqmdata05.sqm [2010.09.06 19:59:50 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm [2010.09.06 19:59:50 | 000,000,232 | -H-- | C] () -- C:\sqmdata04.sqm [2010.09.06 19:48:39 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm [2010.09.06 19:48:39 | 000,000,232 | -H-- | C] () -- C:\sqmdata03.sqm [2010.09.06 16:34:57 | 000,000,542 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mp3tag.lnk [2010.09.02 20:30:40 | 000,159,072 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2010.09.01 04:13:03 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf [2010.09.01 04:12:56 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_user_01_09_00.Wdf [2010.09.01 04:07:13 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf [2010.09.01 04:07:12 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2010.09.01 03:50:40 | 000,001,880 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Player.lnk [2010.09.01 03:49:08 | 000,001,673 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Suite.lnk [2010.08.22 16:34:49 | 000,031,001 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\JAck the Ripper.odt [2009.12.30 14:27:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini [2009.12.30 14:27:41 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\brlmw03a.ini [2009.11.05 21:09:57 | 000,000,064 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.ldb [2009.06.15 11:30:37 | 000,002,876 | ---- | C] () -- C:\WINDOWS\ATICIM.INI [2008.12.26 21:27:55 | 000,383,238 | ---- | C] () -- C:\WINDOWS\System32\libmp3lame-0.dll [2008.06.30 19:50:08 | 000,000,012 | ---- | C] () -- C:\WINDOWS\dirsaver.ini [2008.01.13 16:48:55 | 000,000,110 | ---- | C] () -- C:\WINDOWS\AVerText.ini [2007.12.24 17:27:41 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll [2007.12.24 17:27:41 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd(2).dll [2007.12.24 17:27:35 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll [2007.08.01 17:29:04 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2007.05.31 19:43:44 | 000,703,258 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x64.cab [2007.05.31 19:43:42 | 001,611,772 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x64.cab [2007.05.31 19:43:42 | 000,701,218 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x86.cab [2007.05.31 19:43:40 | 001,610,203 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x86.cab [2007.05.31 19:43:40 | 000,200,646 | ---- | C] () -- C:\Programme\JUN2007_XACT_x64.cab [2007.05.31 19:43:40 | 000,155,892 | ---- | C] () -- C:\Programme\JUN2007_XACT_x86.cab [2007.05.31 19:43:38 | 000,044,687 | ---- | C] () -- C:\Programme\dxdllreg_x86.cab [2007.05.31 19:23:58 | 000,086,401 | ---- | C] () -- C:\Programme\dxupdate.cab [2007.05.31 19:23:56 | 001,413,862 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x64.cab [2007.05.31 19:23:56 | 001,336,890 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x64.cab [2007.05.31 19:23:56 | 001,128,177 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x86.cab [2007.05.31 19:23:56 | 001,065,813 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x86.cab [2007.05.31 19:23:56 | 000,183,321 | ---- | C] () -- C:\Programme\OCT2006_XACT_x64.cab [2007.05.31 19:23:56 | 000,181,745 | ---- | C] () -- C:\Programme\JUN2006_XACT_x64.cab [2007.05.31 19:23:56 | 000,138,977 | ---- | C] () -- C:\Programme\OCT2006_XACT_x86.cab [2007.05.31 19:23:56 | 000,134,631 | ---- | C] () -- C:\Programme\JUN2006_XACT_x86.cab [2007.05.31 19:23:56 | 000,086,925 | ---- | C] () -- C:\Programme\Oct2005_xinput_x64.cab [2007.05.31 19:23:56 | 000,046,247 | ---- | C] () -- C:\Programme\Oct2005_xinput_x86.cab [2007.05.31 19:23:54 | 001,610,958 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x64.cab [2007.05.31 19:23:54 | 001,609,639 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x86.cab [2007.05.31 19:23:54 | 001,575,336 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x86.cab [2007.05.31 19:23:54 | 001,572,114 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x64.cab [2007.05.31 19:23:54 | 001,363,684 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x64.cab [2007.05.31 19:23:54 | 001,358,864 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x64.cab [2007.05.31 19:23:54 | 001,351,430 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x64.cab [2007.05.31 19:23:54 | 001,248,387 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x64.cab [2007.05.31 19:23:54 | 001,085,608 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x86.cab [2007.05.31 19:23:54 | 001,080,344 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x86.cab [2007.05.31 19:23:54 | 001,078,532 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x86.cab [2007.05.31 19:23:54 | 001,014,113 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x86.cab [2007.05.31 19:23:54 | 000,699,465 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x86.cab [2007.05.31 19:23:54 | 000,213,767 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x64.cab [2007.05.31 19:23:54 | 000,199,366 | ---- | C] () -- C:\Programme\APR2007_XACT_x64.cab [2007.05.31 19:23:54 | 000,198,275 | ---- | C] () -- C:\Programme\FEB2007_XACT_x64.cab [2007.05.31 19:23:54 | 000,193,435 | ---- | C] () -- C:\Programme\DEC2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,192,680 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x86.cab [2007.05.31 19:23:54 | 000,183,863 | ---- | C] () -- C:\Programme\AUG2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,179,247 | ---- | C] () -- C:\Programme\Feb2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,154,825 | ---- | C] () -- C:\Programme\APR2007_XACT_x86.cab [2007.05.31 19:23:54 | 000,151,583 | ---- | C] () -- C:\Programme\FEB2007_XACT_x86.cab [2007.05.31 19:23:54 | 000,146,559 | ---- | C] () -- C:\Programme\DEC2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,138,195 | ---- | C] () -- C:\Programme\AUG2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,133,297 | ---- | C] () -- C:\Programme\Feb2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,100,417 | ---- | C] () -- C:\Programme\APR2007_xinput_x64.cab [2007.05.31 19:23:54 | 000,088,102 | ---- | C] () -- C:\Programme\AUG2006_xinput_x64.cab [2007.05.31 19:23:54 | 000,056,902 | ---- | C] () -- C:\Programme\APR2007_xinput_x86.cab [2007.05.31 19:23:54 | 000,047,018 | ---- | C] () -- C:\Programme\AUG2006_xinput_x86.cab [2007.05.31 19:23:52 | 013,265,040 | ---- | C] () -- C:\Programme\dxnt.cab [2007.05.31 19:23:52 | 004,163,518 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86_Archive.cab [2007.05.31 19:23:52 | 001,398,718 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x64.cab [2007.05.31 19:23:52 | 001,348,242 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x64.cab [2007.05.31 19:23:52 | 001,156,363 | ---- | C] () -- C:\Programme\BDANT.cab [2007.05.31 19:23:52 | 001,116,109 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x86.cab [2007.05.31 19:23:52 | 001,079,850 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x86.cab [2007.05.31 19:23:52 | 000,976,020 | ---- | C] () -- C:\Programme\BDAXP.cab [2007.05.31 19:23:52 | 000,917,318 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86.cab [2007.05.31 19:23:52 | 000,702,212 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x64.cab [2007.05.31 19:23:52 | 000,180,021 | ---- | C] () -- C:\Programme\Apr2006_XACT_x64.cab [2007.05.31 19:23:52 | 000,133,991 | ---- | C] () -- C:\Programme\Apr2006_XACT_x86.cab [2007.05.31 19:23:52 | 000,087,989 | ---- | C] () -- C:\Programme\Apr2006_xinput_x64.cab [2007.05.31 19:23:52 | 000,046,898 | ---- | C] () -- C:\Programme\Apr2006_xinput_x86.cab [2007.03.04 21:35:48 | 000,000,084 | ---- | C] () -- C:\WINDOWS\StyleBuilder.INI [2007.02.03 23:04:37 | 000,000,214 | -H-- | C] () -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\xpy.ini [2007.02.02 15:48:37 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys [2007.01.29 16:48:00 | 000,229,888 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007.01.26 16:50:31 | 000,025,054 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\wklnhst.dat [2007.01.26 16:46:15 | 000,000,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2006.12.24 18:19:50 | 000,299,008 | ---- | C] () -- C:\WINDOWS\System32\LAME_MP3.dll [2006.12.24 18:18:44 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2006.12.24 18:18:44 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2006.12.24 18:18:44 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2006.12.24 18:18:44 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2006.08.29 16:59:33 | 000,000,226 | ---- | C] () -- C:\WINDOWS\Brownie.ini [2006.08.29 16:59:33 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BRDIAG.INI [2006.08.29 16:59:33 | 000,000,011 | ---- | C] () -- C:\WINDOWS\BRVIDEO.INI [2006.08.29 16:59:06 | 000,000,432 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2006.08.24 15:50:28 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll [2006.08.24 15:50:28 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll [2006.08.19 12:45:25 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html [2006.08.15 21:24:23 | 000,002,927 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QTSBandwidthCache [2006.08.11 19:57:47 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2006.08.08 18:34:56 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\mbr_sqlite.dll [2006.08.04 23:58:35 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006.07.29 16:52:06 | 000,000,122 | ---- | C] () -- C:\WINDOWS\SecurityandPrivacy2.ini [2006.07.26 16:39:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini [2006.05.17 21:31:20 | 000,000,025 | ---- | C] () -- C:\WINDOWS\CDEC64Euro.ini [2006.04.13 14:38:33 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\SAICFG.dll [2006.02.14 17:03:55 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006.02.12 14:27:40 | 000,000,053 | ---- | C] () -- C:\WINDOWS\Fahrenheit_Screen.ini [2005.12.27 10:10:49 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2005.12.27 08:05:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini [2005.10.28 19:32:17 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2005.10.22 07:38:52 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMP3.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll [2005.10.22 07:34:05 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2005.10.22 07:34:02 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2005.10.22 07:29:22 | 000,008,073 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2005.10.22 07:23:00 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2005.10.22 07:13:21 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo(2).dll [2005.04.28 05:22:34 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2005.04.28 05:22:34 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll [2004.12.20 11:08:28 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2004.12.20 11:03:26 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2004.12.17 17:14:44 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\UBHelper.sys [2001.12.26 16:12:30 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll [2001.09.03 23:46:38 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Hmpg12.dll [2001.07.30 16:33:56 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll [2001.07.23 22:04:36 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll [1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [1980.01.01 00:00:00 | 000,000,083 | ---- | C] () -- C:\WINDOWS\ALaunch.ini < End of report > |
|
08.09.2010, 20:46
| #32 |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" Upps, iwie habe ich ja den Extra-Log vergessen
__________________ Hier nochmal ein ganz aktueller Bericht, den oberen bitte nicht beachten  OTL Logfile: Code:
ATTFilter OTL logfile created on: 08.09.2010 21:43:38 - Run 3 OTL by OldTimer - Version 3.2.11.0 Folder = C:\Dokumente und Einstellungen\Ich\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.11) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 49,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 72,00% Paging File free Paging file location(s): C:\pagefile.sys 1024 1024 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 72,65 Gb Total Space | 19,03 Gb Free Space | 26,19% Space Free | Partition Type: FAT32 Drive D: | 73,45 Gb Total Space | 50,81 Gb Free Space | 69,17% Space Free | Partition Type: NTFS Drive E: | 455,16 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: FINN Current User Name: Ich Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging) PRC - D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - D:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.) PRC - C:\Programme\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation) PRC - C:\Programme\Microsoft IntelliType Pro\dpupdchk.exe (Microsoft Corporation) PRC - C:\WINDOWS\system32\Macromed\Shockwave 10\PostUpdate.exe () PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) PRC - C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) PRC - C:\Programme\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) PRC - C:\WINDOWS\system32\mmc.exe (Microsoft Corporation) PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation) PRC - C:\WINDOWS\system32\dfrgfat.exe (Microsoft Corporation und Executive Software International, Inc.) PRC - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) PRC - C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.) PRC - D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (T-Online International AG, Marmiko IT-Solutions GmbH) PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkCalRem.exe (Microsoft® Corporation) ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) MOD - C:\Programme\TuneUp WinStyler\WinStylerThemeHelper.dll () ========== Win32 Services (SafeList) ========== SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia) SRV - (cvhsvc) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) SRV - (osppsvc) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (sftvsa) -- C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) SRV - (sftlist) -- C:\Programme\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) SRV - (UserAccess7) SecuROM User Access Service (V7) -- C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.) SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation) SRV - (TUWinStylerThemeSvc) -- C:\Programme\TuneUp WinStyler\WinStylerThemeSvc.exe (TuneUp Software GmbH) ========== Driver Services (SafeList) ========== DRV - (USBAAPL) -- C:\WINDOWS\System32\Drivers\usbaapl.sys File not found DRV - (upperdev) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys File not found DRV - (SANDRA) -- D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\Sandra.sys File not found DRV - (Point32) -- C:\WINDOWS\System32\DRIVERS\point32.sys File not found DRV - (ovt530) -- C:\WINDOWS\System32\Drivers\ov530vid.sys File not found DRV - (MTOnlPktAlyX) -- D:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS File not found DRV - (int15.sys) -- C:\Programme\Acer\eRecovery\int15.sys File not found DRV - (DMSKSSRh) -- C:\DOKUME~1\Ich\LOKALE~1\Temp\DMSKSSRh.sys File not found DRV - (catchme) -- C:\cofi\catchme.sys File not found DRV - (NuidFltr) -- C:\WINDOWS\system32\drivers\nuidfltr.sys (Microsoft Corporation) DRV - (nmwcd) -- C:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia) DRV - (Sftredir) -- C:\WINDOWS\system32\drivers\Sftredirxp.sys (Microsoft Corporation) DRV - (sftvol) -- C:\Programme\Microsoft Application Virtualization Client\drivers\SftVolXP.sys (Microsoft Corporation) DRV - (sftplay) -- C:\Programme\Microsoft Application Virtualization Client\drivers\sftplayxp.sys (Microsoft Corporation) DRV - (sftfs) -- C:\Programme\Microsoft Application Virtualization Client\drivers\SftFSXP.sys (Microsoft Corporation) DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys (Duplex Secure Ltd.) DRV - (ssmdrv) -- C:\WINDOWS\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.) DRV - (AtiHdmiService) -- C:\WINDOWS\system32\drivers\AtiHdmi.sys (ATI Research Inc.) DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia) DRV - (nm) -- C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation) DRV - (MPE) -- C:\WINDOWS\system32\drivers\mpe.sys (Microsoft Corporation) DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows (R) Server 2003 DDK provider) DRV - (amdide) -- C:\WINDOWS\system32\DRIVERS\amdide.sys (Advanced Micro Devices) DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices) DRV - (MIINPazX) -- C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys (T-Online International AG, Marmiko IT-Solutions GmbH) DRV - (AVerA700) -- C:\WINDOWS\system32\drivers\AVerBDA3x.sys (AVerMedia TECHNOLOGIES, Inc.) DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfvfs02.sys (Protection Technology) DRV - (NTIDrvr) -- C:\WINDOWS\system32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.) DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.) DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.) DRV - (SI3112r) -- C:\WINDOWS\system32\DRIVERS\SI3112r.sys (Silicon Image, Inc.) DRV - (SiFilter) -- C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys (Silicon Image, Inc.) DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation ) DRV - (Afc) -- C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.) DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\Hdaudio.sys (Windows (R) Server 2003 DDK provider) DRV - (UBHelper) -- C:\WINDOWS\System32\drivers\UBHelper.sys () DRV - (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation) DRV - (SaiH0464) -- C:\WINDOWS\system32\drivers\SaiH0464.sys (Saitek) DRV - (SaiNtBus) -- C:\WINDOWS\system32\drivers\SaiNtBus.sys (Saitek) DRV - (SaiMini) -- C:\WINDOWS\system32\drivers\SaiMini.sys (Saitek) DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.) DRV - (viaagp1) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.) DRV - (BrPar) -- C:\WINDOWS\System32\drivers\BrPar.sys (Brother Industries Ltd.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://fullarticles.net IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "schueler.cc|travian.at|youtube.com" FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.1 FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.3.42 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8 FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010.09.01 03:44:34 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.12\extensions\\Components: D:\Programme\Mozilla Firefox\components [2010.09.08 18:34:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.12\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2010.09.08 18:34:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2007.05.01 16:30:44 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2008.09.05 15:05:18 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010.09.01 03:44:32 | 000,000,000 | ---D | M] [2010.04.13 14:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions [2010.09.08 18:35:44 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.04.13 14:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions [2010.04.13 14:35:58 | 000,000,000 | ---D | M] (Linkification) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2010.09.06 16:07:58 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010.08.19 23:50:02 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.09.01 04:39:28 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} [2010.04.18 14:08:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\youtube2mp3@mondayx.de [2010.09.08 16:16:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\9ochijs3.001\extensions [2010.01.14 23:08:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions [2010.04.11 18:03:30 | 000,000,000 | ---D | M] (Linkification) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2010.09.06 16:07:58 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010.04.11 15:12:12 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.03.17 14:48:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\Foxdie@tanjihay.com O1 HOSTS File: ([2010.09.07 23:38:22 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation) O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider) O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation) O4 - HKLM..\Run: [itype] C:\Programme\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation) O4 - HKLM..\Run: [LaunchApp] C:\WINDOWS\Alaunch.exe (Acer Inc.) O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [ToADiMon.exe] D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (T-Online International AG, Marmiko IT-Solutions GmbH) O4 - HKCU..\Run: [ICQ] D:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.) O4 - HKCU..\Run: [Steam] d:\programme\steam\steam.exe (Valve Corporation) O4 - HKCU..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - HKCU..\RunOnce: [SWHelper] C:\WINDOWS\System32\Macromed\Shockwave 10\PostUpdate.exe () O4 - Startup: C:\Dokumente und Einstellungen\Ich\Startmenü\Programme\Zubehör\Autostart\WKCALREM.LNK = C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkCalRem.exe (Microsoft® Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_21.dll (Sun Microsystems, Inc.) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1135673099383 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.EXE (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2005.10.22 07:38:32 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ] O32 - AutoRun File - [2009.11.01 14:36:42 | 000,000,098 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.09.08 19:04:19 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe [2010.09.08 18:15:05 | 000,926,032 | ---- | C] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\Norton_Removal_Tool.exe [2010.09.08 17:14:52 | 014,668,664 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\IPx86_1031_8.0.225.0.exe [2010.09.08 16:34:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Desktop\Microsoft IntelliPoint [2010.09.08 16:32:15 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft IntelliType Pro [2010.09.08 16:29:34 | 014,880,640 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\ITPx86_1031_8.0.225.0.exe [2010.09.08 06:46:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Skype [2010.09.08 06:46:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype [2010.09.08 06:45:30 | 000,958,856 | ---- | C] (Skype Technologies S.A.) -- C:\Dokumente und Einstellungen\Ich\Desktop\SkypeSetup-Beta.exe [2010.09.08 01:05:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\InstallShield [2010.09.08 00:54:39 | 000,000,000 | -HSD | C] -- C:\Recycled [2010.09.07 23:25:31 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010.09.07 23:21:19 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010.09.07 23:21:19 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010.09.07 23:21:19 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010.09.07 23:21:19 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010.09.07 23:20:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010.09.07 23:16:35 | 000,000,000 | ---D | C] -- C:\Qoobox [2010.09.07 23:04:36 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Ich\Recent [2010.09.07 22:57:09 | 003,427,248 | ---- | C] (Piriform Ltd) -- C:\Dokumente und Einstellungen\Ich\Desktop\ccsetup235.exe [2010.09.07 21:12:19 | 000,000,000 | ---D | C] -- C:\Programme\trend micro [2010.09.07 21:11:23 | 000,000,000 | ---D | C] -- C:\rsit [2010.09.07 18:28:14 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2010.09.07 17:06:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe [2010.09.07 17:06:22 | 004,747,136 | ---- | C] (Adobe Systems Inc.) -- C:\Dokumente und Einstellungen\Ich\Desktop\Shockwave_Installer_Slim.exe [2010.09.07 16:59:37 | 000,000,000 | ---D | C] -- C:\Programme\Windows Sidebar [2010.09.07 16:59:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton [2010.09.07 16:56:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NortonInstaller [2010.09.07 16:54:13 | 132,049,776 | ---- | C] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\TT_159_SYMTB_TMD.exe [2010.09.06 23:29:18 | 000,000,000 | ---D | C] -- C:\_OTL [2010.09.06 22:16:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Malwarebytes [2010.09.06 22:16:28 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.09.06 22:16:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.09.06 22:16:21 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.09.06 22:15:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\MFTools [2010.09.06 16:35:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mp3tag [2010.09.06 16:07:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DVDVideoSoftIEHelpers [2010.09.06 07:27:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\Neuer Ordner [2010.09.01 21:27:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia Ovi Suite [2010.09.01 04:05:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\NokiaAccount [2010.09.01 03:50:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Globalization [2010.09.01 03:50:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic [2010.09.01 03:50:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Nokia [2010.09.01 03:44:21 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys [2010.09.01 03:44:11 | 000,000,000 | ---D | C] -- C:\Programme\PC Connectivity Solution [2010.09.01 03:43:22 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01009.dll [2010.09.01 03:43:22 | 000,662,016 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll [2010.09.01 03:43:22 | 000,018,176 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys [2010.09.01 03:40:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache [2010.08.21 18:33:32 | 000,000,000 | ---D | C] -- C:\FOUND.069 [2010.08.20 03:55:24 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.08.20 03:55:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.08.20 03:55:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.08.11 04:42:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard Entertainment [2010.08.11 04:41:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard [2010.08.11 04:41:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Blizzard Entertainment [2010.08.10 05:25:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\Lil Wayne - The Blue Martian [Deluxe Edition] - Mixtape Evolution [2007.05.31 19:23:56 | 001,673,576 | ---- | C] (Microsoft Corporation) -- C:\Programme\dsetup32.dll [2007.05.31 19:23:56 | 000,503,144 | ---- | C] (Microsoft Corporation) -- C:\Programme\DXSETUP.exe [2007.05.31 19:23:56 | 000,077,160 | ---- | C] (Microsoft Corporation) -- C:\Programme\DSETUP.dll [3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.09.08 19:04:20 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe [2010.09.08 18:50:22 | 000,012,718 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.09.08 18:50:16 | 000,121,808 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap [2010.09.08 18:47:56 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.09.08 18:47:46 | 1609,093,120 | -HS- | M] () -- C:\hiberfil.sys [2010.09.08 18:47:46 | 000,274,168 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.09.08 18:46:32 | 000,004,661 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat [2010.09.08 18:46:28 | 015,466,496 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\ntuser.dat [2010.09.08 18:46:28 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Ich\ntuser.ini [2010.09.08 18:22:10 | 000,071,688 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2010.09.08 18:15:06 | 000,926,032 | ---- | M] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\Norton_Removal_Tool.exe [2010.09.08 18:14:12 | 000,897,643 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\registrycleaner_de.zip [2010.09.08 17:15:04 | 014,668,664 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\IPx86_1031_8.0.225.0.exe [2010.09.08 16:33:44 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job [2010.09.08 16:32:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01009.Wdf [2010.09.08 16:29:46 | 014,880,640 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\ITPx86_1031_8.0.225.0.exe [2010.09.08 06:46:20 | 000,001,872 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk [2010.09.08 06:45:32 | 000,958,856 | ---- | M] (Skype Technologies S.A.) -- C:\Dokumente und Einstellungen\Ich\Desktop\SkypeSetup-Beta.exe [2010.09.08 03:34:32 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010.09.08 03:30:18 | 000,505,776 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.09.08 03:30:18 | 000,481,956 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.09.08 03:30:18 | 000,088,156 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.09.08 03:30:16 | 001,151,674 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010.09.08 03:30:16 | 000,104,852 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.09.08 02:35:12 | 000,002,261 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Google Chrome.lnk [2010.09.08 01:11:14 | 000,000,844 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Meine freigegebenen Ordner.lnk [2010.09.08 01:05:16 | 000,000,226 | ---- | M] () -- C:\WINDOWS\Brownie.ini [2010.09.08 01:05:16 | 000,000,023 | ---- | M] () -- C:\WINDOWS\BRDIAG.INI [2010.09.08 01:05:16 | 000,000,011 | ---- | M] () -- C:\WINDOWS\BRVIDEO.INI [2010.09.07 23:40:32 | 000,000,827 | ---- | M] () -- C:\WINDOWS\system.ini [2010.09.07 23:25:38 | 000,000,339 | RHS- | M] () -- C:\boot.ini [2010.09.07 22:58:46 | 000,000,562 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\CCleaner.lnk [2010.09.07 22:57:14 | 003,427,248 | ---- | M] (Piriform Ltd) -- C:\Dokumente und Einstellungen\Ich\Desktop\ccsetup235.exe [2010.09.07 22:55:06 | 003,840,033 | R--- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\cofi.exe [2010.09.07 21:10:56 | 000,339,991 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe [2010.09.07 18:02:34 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm [2010.09.07 18:02:34 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm [2010.09.07 17:48:54 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm [2010.09.07 17:48:54 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm [2010.09.07 17:35:32 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm [2010.09.07 17:35:32 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm [2010.09.07 17:22:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm [2010.09.07 17:22:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm [2010.09.07 17:13:46 | 000,000,692 | ---- | M] () -- C:\WINDOWS\win.ini [2010.09.07 17:13:46 | 000,000,222 | ---- | M] () -- C:\Boot.bak [2010.09.07 17:08:46 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm [2010.09.07 17:08:46 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm [2010.09.07 17:06:26 | 004,747,136 | ---- | M] (Adobe Systems Inc.) -- C:\Dokumente und Einstellungen\Ich\Desktop\Shockwave_Installer_Slim.exe [2010.09.07 17:06:00 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm [2010.09.07 17:06:00 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm [2010.09.07 17:00:38 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm [2010.09.07 17:00:36 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm [2010.09.07 16:56:08 | 132,049,776 | ---- | M] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\TT_159_SYMTB_TMD.exe [2010.09.07 16:55:40 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm [2010.09.07 16:55:40 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm [2010.09.07 16:42:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm [2010.09.07 16:42:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm [2010.09.07 16:28:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm [2010.09.07 16:28:42 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm [2010.09.07 16:28:18 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm [2010.09.07 16:28:18 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm [2010.09.07 08:27:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm [2010.09.07 08:27:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm [2010.09.07 08:13:50 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm [2010.09.07 08:13:50 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm [2010.09.07 08:00:30 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm [2010.09.07 08:00:30 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm [2010.09.07 07:47:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm [2010.09.07 07:47:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm [2010.09.07 07:33:58 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm [2010.09.07 07:33:58 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm [2010.09.07 07:20:40 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm [2010.09.07 07:20:40 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm [2010.09.07 07:07:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm [2010.09.07 07:07:06 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm [2010.09.07 07:06:54 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm [2010.09.07 07:06:54 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm [2010.09.07 02:13:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm [2010.09.07 02:13:26 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm [2010.09.06 22:16:34 | 000,000,556 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.09.06 22:15:32 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\defogger.exe [2010.09.06 22:15:28 | 000,284,915 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Gmer.zip [2010.09.06 22:14:50 | 000,388,197 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Load.exe [2010.09.06 16:34:58 | 000,000,542 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mp3tag.lnk [2010.09.06 16:07:44 | 000,000,819 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\DVDVideoSoft Free Studio.lnk [2010.09.01 04:13:04 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf [2010.09.01 04:12:58 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_user_01_09_00.Wdf [2010.09.01 04:07:14 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2010.09.01 04:07:14 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf [2010.09.01 03:50:42 | 000,001,880 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Player.lnk [2010.09.01 03:49:10 | 000,001,673 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Suite.lnk [2010.08.22 17:30:56 | 000,031,001 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\JAck the Ripper.odt [3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.09.08 18:14:15 | 000,897,643 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\registrycleaner_de.zip [2010.09.08 16:33:42 | 000,000,280 | ---- | C] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job [2010.09.08 16:32:53 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01009.Wdf [2010.09.08 06:46:19 | 000,001,872 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk [2010.09.08 03:02:59 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2010.09.08 01:11:13 | 000,000,844 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Meine freigegebenen Ordner.lnk [2010.09.07 23:25:36 | 000,000,222 | ---- | C] () -- C:\Boot.bak [2010.09.07 23:25:34 | 000,262,448 | RHS- | C] () -- C:\cmldr [2010.09.07 23:21:19 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010.09.07 23:21:19 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010.09.07 23:21:19 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010.09.07 23:21:19 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010.09.07 23:21:19 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010.09.07 22:58:45 | 000,000,562 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\CCleaner.lnk [2010.09.07 22:55:05 | 003,840,033 | R--- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\cofi.exe [2010.09.07 21:11:00 | 000,339,991 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe [2010.09.06 23:38:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm [2010.09.06 23:38:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata19.sqm [2010.09.06 23:19:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm [2010.09.06 23:19:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata18.sqm [2010.09.06 23:15:54 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm [2010.09.06 23:15:54 | 000,000,232 | -H-- | C] () -- C:\sqmdata17.sqm [2010.09.06 23:06:38 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm [2010.09.06 23:06:38 | 000,000,232 | -H-- | C] () -- C:\sqmdata16.sqm [2010.09.06 22:53:08 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm [2010.09.06 22:53:08 | 000,000,232 | -H-- | C] () -- C:\sqmdata15.sqm [2010.09.06 22:45:34 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm [2010.09.06 22:45:34 | 000,000,232 | -H-- | C] () -- C:\sqmdata14.sqm [2010.09.06 22:16:32 | 000,000,556 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.09.06 22:15:31 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\defogger.exe [2010.09.06 22:15:26 | 000,284,915 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Gmer.zip [2010.09.06 22:14:50 | 000,388,197 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Load.exe [2010.09.06 22:13:26 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm [2010.09.06 22:13:26 | 000,000,232 | -H-- | C] () -- C:\sqmdata13.sqm [2010.09.06 21:46:25 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm [2010.09.06 21:46:25 | 000,000,232 | -H-- | C] () -- C:\sqmdata12.sqm [2010.09.06 21:33:02 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt11.sqm [2010.09.06 21:33:02 | 000,000,232 | -H-- | C] () -- C:\sqmdata11.sqm [2010.09.06 21:19:43 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt10.sqm [2010.09.06 21:19:43 | 000,000,232 | -H-- | C] () -- C:\sqmdata10.sqm [2010.09.06 21:06:24 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm [2010.09.06 21:06:24 | 000,000,232 | -H-- | C] () -- C:\sqmdata09.sqm [2010.09.06 20:53:01 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm [2010.09.06 20:53:01 | 000,000,232 | -H-- | C] () -- C:\sqmdata08.sqm [2010.09.06 20:41:28 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm [2010.09.06 20:41:28 | 000,000,232 | -H-- | C] () -- C:\sqmdata07.sqm [2010.09.06 20:26:22 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm [2010.09.06 20:26:22 | 000,000,232 | -H-- | C] () -- C:\sqmdata06.sqm [2010.09.06 20:13:15 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm [2010.09.06 20:13:15 | 000,000,232 | -H-- | C] () -- C:\sqmdata05.sqm [2010.09.06 19:59:50 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm [2010.09.06 19:59:50 | 000,000,232 | -H-- | C] () -- C:\sqmdata04.sqm [2010.09.06 19:48:39 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm [2010.09.06 19:48:39 | 000,000,232 | -H-- | C] () -- C:\sqmdata03.sqm [2010.09.06 16:34:57 | 000,000,542 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mp3tag.lnk [2010.09.02 20:30:40 | 000,159,072 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2010.09.01 04:13:03 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf [2010.09.01 04:12:56 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_user_01_09_00.Wdf [2010.09.01 04:07:13 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf [2010.09.01 04:07:12 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2010.09.01 03:50:40 | 000,001,880 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Player.lnk [2010.09.01 03:49:08 | 000,001,673 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Suite.lnk [2010.08.22 16:34:49 | 000,031,001 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\JAck the Ripper.odt [2009.12.30 14:27:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini [2009.12.30 14:27:41 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\brlmw03a.ini [2009.11.05 21:09:57 | 000,000,064 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.ldb [2009.06.15 11:30:37 | 000,002,876 | ---- | C] () -- C:\WINDOWS\ATICIM.INI [2008.12.26 21:27:55 | 000,383,238 | ---- | C] () -- C:\WINDOWS\System32\libmp3lame-0.dll [2008.06.30 19:50:08 | 000,000,012 | ---- | C] () -- C:\WINDOWS\dirsaver.ini [2008.01.13 16:48:55 | 000,000,110 | ---- | C] () -- C:\WINDOWS\AVerText.ini [2007.12.24 17:27:41 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll [2007.12.24 17:27:41 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd(2).dll [2007.12.24 17:27:35 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll [2007.08.01 17:29:04 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2007.05.31 19:43:44 | 000,703,258 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x64.cab [2007.05.31 19:43:42 | 001,611,772 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x64.cab [2007.05.31 19:43:42 | 000,701,218 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x86.cab [2007.05.31 19:43:40 | 001,610,203 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x86.cab [2007.05.31 19:43:40 | 000,200,646 | ---- | C] () -- C:\Programme\JUN2007_XACT_x64.cab [2007.05.31 19:43:40 | 000,155,892 | ---- | C] () -- C:\Programme\JUN2007_XACT_x86.cab [2007.05.31 19:43:38 | 000,044,687 | ---- | C] () -- C:\Programme\dxdllreg_x86.cab [2007.05.31 19:23:58 | 000,086,401 | ---- | C] () -- C:\Programme\dxupdate.cab [2007.05.31 19:23:56 | 001,413,862 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x64.cab [2007.05.31 19:23:56 | 001,336,890 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x64.cab [2007.05.31 19:23:56 | 001,128,177 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x86.cab [2007.05.31 19:23:56 | 001,065,813 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x86.cab [2007.05.31 19:23:56 | 000,183,321 | ---- | C] () -- C:\Programme\OCT2006_XACT_x64.cab [2007.05.31 19:23:56 | 000,181,745 | ---- | C] () -- C:\Programme\JUN2006_XACT_x64.cab [2007.05.31 19:23:56 | 000,138,977 | ---- | C] () -- C:\Programme\OCT2006_XACT_x86.cab [2007.05.31 19:23:56 | 000,134,631 | ---- | C] () -- C:\Programme\JUN2006_XACT_x86.cab [2007.05.31 19:23:56 | 000,086,925 | ---- | C] () -- C:\Programme\Oct2005_xinput_x64.cab [2007.05.31 19:23:56 | 000,046,247 | ---- | C] () -- C:\Programme\Oct2005_xinput_x86.cab [2007.05.31 19:23:54 | 001,610,958 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x64.cab [2007.05.31 19:23:54 | 001,609,639 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x86.cab [2007.05.31 19:23:54 | 001,575,336 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x86.cab [2007.05.31 19:23:54 | 001,572,114 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x64.cab [2007.05.31 19:23:54 | 001,363,684 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x64.cab [2007.05.31 19:23:54 | 001,358,864 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x64.cab [2007.05.31 19:23:54 | 001,351,430 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x64.cab [2007.05.31 19:23:54 | 001,248,387 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x64.cab [2007.05.31 19:23:54 | 001,085,608 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x86.cab [2007.05.31 19:23:54 | 001,080,344 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x86.cab [2007.05.31 19:23:54 | 001,078,532 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x86.cab [2007.05.31 19:23:54 | 001,014,113 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x86.cab [2007.05.31 19:23:54 | 000,699,465 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x86.cab [2007.05.31 19:23:54 | 000,213,767 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x64.cab [2007.05.31 19:23:54 | 000,199,366 | ---- | C] () -- C:\Programme\APR2007_XACT_x64.cab [2007.05.31 19:23:54 | 000,198,275 | ---- | C] () -- C:\Programme\FEB2007_XACT_x64.cab [2007.05.31 19:23:54 | 000,193,435 | ---- | C] () -- C:\Programme\DEC2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,192,680 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x86.cab [2007.05.31 19:23:54 | 000,183,863 | ---- | C] () -- C:\Programme\AUG2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,179,247 | ---- | C] () -- C:\Programme\Feb2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,154,825 | ---- | C] () -- C:\Programme\APR2007_XACT_x86.cab [2007.05.31 19:23:54 | 000,151,583 | ---- | C] () -- C:\Programme\FEB2007_XACT_x86.cab [2007.05.31 19:23:54 | 000,146,559 | ---- | C] () -- C:\Programme\DEC2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,138,195 | ---- | C] () -- C:\Programme\AUG2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,133,297 | ---- | C] () -- C:\Programme\Feb2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,100,417 | ---- | C] () -- C:\Programme\APR2007_xinput_x64.cab [2007.05.31 19:23:54 | 000,088,102 | ---- | C] () -- C:\Programme\AUG2006_xinput_x64.cab [2007.05.31 19:23:54 | 000,056,902 | ---- | C] () -- C:\Programme\APR2007_xinput_x86.cab [2007.05.31 19:23:54 | 000,047,018 | ---- | C] () -- C:\Programme\AUG2006_xinput_x86.cab [2007.05.31 19:23:52 | 013,265,040 | ---- | C] () -- C:\Programme\dxnt.cab [2007.05.31 19:23:52 | 004,163,518 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86_Archive.cab [2007.05.31 19:23:52 | 001,398,718 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x64.cab [2007.05.31 19:23:52 | 001,348,242 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x64.cab [2007.05.31 19:23:52 | 001,156,363 | ---- | C] () -- C:\Programme\BDANT.cab [2007.05.31 19:23:52 | 001,116,109 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x86.cab [2007.05.31 19:23:52 | 001,079,850 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x86.cab [2007.05.31 19:23:52 | 000,976,020 | ---- | C] () -- C:\Programme\BDAXP.cab [2007.05.31 19:23:52 | 000,917,318 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86.cab [2007.05.31 19:23:52 | 000,702,212 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x64.cab [2007.05.31 19:23:52 | 000,180,021 | ---- | C] () -- C:\Programme\Apr2006_XACT_x64.cab [2007.05.31 19:23:52 | 000,133,991 | ---- | C] () -- C:\Programme\Apr2006_XACT_x86.cab [2007.05.31 19:23:52 | 000,087,989 | ---- | C] () -- C:\Programme\Apr2006_xinput_x64.cab [2007.05.31 19:23:52 | 000,046,898 | ---- | C] () -- C:\Programme\Apr2006_xinput_x86.cab [2007.03.04 21:35:48 | 000,000,084 | ---- | C] () -- C:\WINDOWS\StyleBuilder.INI [2007.02.03 23:04:37 | 000,000,214 | -H-- | C] () -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\xpy.ini [2007.02.02 15:48:37 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys [2007.01.29 16:48:00 | 000,229,888 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007.01.26 16:50:31 | 000,025,054 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\wklnhst.dat [2007.01.26 16:46:15 | 000,000,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2006.12.24 18:19:50 | 000,299,008 | ---- | C] () -- C:\WINDOWS\System32\LAME_MP3.dll [2006.12.24 18:18:44 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2006.12.24 18:18:44 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2006.12.24 18:18:44 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2006.12.24 18:18:44 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2006.08.29 16:59:33 | 000,000,226 | ---- | C] () -- C:\WINDOWS\Brownie.ini [2006.08.29 16:59:33 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BRDIAG.INI [2006.08.29 16:59:33 | 000,000,011 | ---- | C] () -- C:\WINDOWS\BRVIDEO.INI [2006.08.29 16:59:06 | 000,000,432 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2006.08.24 15:50:28 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll [2006.08.24 15:50:28 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll [2006.08.19 12:45:25 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html [2006.08.15 21:24:23 | 000,002,927 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QTSBandwidthCache [2006.08.11 19:57:47 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2006.08.08 18:34:56 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\mbr_sqlite.dll [2006.08.04 23:58:35 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006.07.29 16:52:06 | 000,000,122 | ---- | C] () -- C:\WINDOWS\SecurityandPrivacy2.ini [2006.07.26 16:39:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini [2006.05.17 21:31:20 | 000,000,025 | ---- | C] () -- C:\WINDOWS\CDEC64Euro.ini [2006.04.13 14:38:33 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\SAICFG.dll [2006.02.14 17:03:55 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006.02.12 14:27:40 | 000,000,053 | ---- | C] () -- C:\WINDOWS\Fahrenheit_Screen.ini [2005.12.27 10:10:49 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2005.12.27 08:05:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini [2005.10.28 19:32:17 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2005.10.22 07:38:52 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMP3.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll [2005.10.22 07:34:05 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2005.10.22 07:34:02 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2005.10.22 07:29:22 | 000,008,073 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2005.10.22 07:23:00 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2005.10.22 07:13:21 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo(2).dll [2005.04.28 05:22:34 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2005.04.28 05:22:34 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll [2004.12.20 11:08:28 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2004.12.20 11:03:26 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2004.12.17 17:14:44 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\UBHelper.sys [2001.12.26 16:12:30 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll [2001.09.03 23:46:38 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Hmpg12.dll [2001.07.30 16:33:56 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll [2001.07.23 22:04:36 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll [1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [1980.01.01 00:00:00 | 000,000,083 | ---- | C] () -- C:\WINDOWS\ALaunch.ini ========== LOP Check ========== [2006.02.14 17:02:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eConsole [2006.06.15 18:10:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software [2006.07.31 14:33:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online [2006.07.31 14:36:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online DSL-Manager [2008.04.17 14:58:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Software4u [2008.08.12 13:45:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations [2008.08.12 13:49:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite [2009.01.11 02:56:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nokia [2009.07.28 15:06:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Azureus [2009.12.24 19:54:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2010.02.22 21:03:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ [2010.03.17 00:58:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\VirtualizedApplications [2010.05.25 21:05:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PMB Files [2010.09.01 03:40:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache [2010.09.01 03:50:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic [2007.01.26 16:46:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQLite [2007.01.26 16:50:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Template [2007.01.26 16:51:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\MSNInstaller [2007.02.02 16:02:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ Toolbar [2007.02.06 21:38:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\T-Online [2007.02.13 15:41:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Petroglyph [2007.05.01 16:30:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Thunderbird [2007.10.03 20:10:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\LimeWire [2008.03.20 20:42:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\FileZilla [2008.04.17 14:58:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Software4u [2008.08.12 13:48:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\PC Suite [2008.08.12 13:48:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia [2008.11.18 16:03:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\SendSpace Wizard [2009.03.25 14:57:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TeamViewer [2009.06.15 22:23:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DAEMON Tools [2009.06.17 20:29:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\NewsLeecher [2009.07.28 14:59:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Azureus [2009.09.27 14:50:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Radmin [2009.10.14 20:13:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TweakNow RegCleaner [2009.10.14 20:22:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ(2) [2009.10.17 21:49:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ(3) [2009.10.17 23:01:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ [2010.03.16 22:44:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TP [2010.03.16 22:47:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\SoftGrid Client [2010.03.16 22:47:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\NVD [2010.05.25 15:25:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\LolClient [2010.09.01 21:27:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia Ovi Suite [2010.09.06 16:07:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DVDVideoSoftIEHelpers [2010.09.06 16:35:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mp3tag ========== Purity Check ========== < End of report > OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 08.09.2010 21:43:38 - Run 3
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Dokumente und Einstellungen\Ich\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 49,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 72,00% Paging File free
Paging file location(s): C:\pagefile.sys 1024 1024 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 72,65 Gb Total Space | 19,03 Gb Free Space | 26,19% Space Free | Partition Type: FAT32
Drive D: | 73,45 Gb Total Space | 50,81 Gb Free Space | 69,17% Space Free | Partition Type: NTFS
Drive E: | 455,16 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: FINN
Current User Name: Ich
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation)
https [open] -- "D:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"58096:TCP" = 58096:TCP:*:Enabled:Pando Media Booster
"58096:UDP" = 58096:UDP:*:Enabled:Pando Media Booster
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3724:TCP" = 3724:TCP:*:Enabled:Blizzard Downloader: 3724
"8394:TCP" = 8394:TCP:*:Enabled:League of Legends Launcher
"8394:UDP" = 8394:UDP:*:Enabled:League of Legends Launcher
"58096:TCP" = 58096:TCP:*:Enabled:Pando Media Booster
"58096:UDP" = 58096:UDP:*:Enabled:Pando Media Booster
"6965:TCP" = 6965:TCP:*:Enabled:League of Legends Launcher
"6965:UDP" = 6965:UDP:*:Enabled:League of Legends Launcher
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Programme\ICQ7.0\ICQ.exe" = D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"D:\Programme\ICQ7.0\aolload.exe" = D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\Pando Networks\Media Booster\PMB.exe" = C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"C:\Programme\MSN Messenger\msnmsgr.exe" = C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- File not found
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Programme\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe" = D:\Programme\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe:*:Enabled:BattlefrontII -- ()
"C:\WINDOWS\System32\dplaysvr.exe" = C:\WINDOWS\System32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"D:\Programme\T-Online\T-Online_Software_6\Browser\browser.exe" = D:\Programme\T-Online\T-Online_Software_6\Browser\browser.exe:*:Disabled:T-Online Browser 6.0 -- (T-Online International AG)
"C:\Programme\TeamViewer\Version4\TeamViewer.exe" = C:\Programme\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application -- (TeamViewer GmbH)
"C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater -- (Nokia Corporation)
"C:\Programme\Java\jre6\bin\java.exe" = C:\Programme\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"D:\Programme\Counter-Strike 1.6\hl.exe" = D:\Programme\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher -- File not found
"D:\Programme\Azureus\Azureus.exe" = D:\Programme\Azureus\Azureus.exe:*:Enabled:Azureus -- File not found
"C:\Programme\Microsoft Games\Rise Of Legends\legends.exe" = C:\Programme\Microsoft Games\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends -- (Big Huge Games, Inc.)
"D:\Programme\ICQ6.5\ICQ.exe" = D:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\RpcSandraSrv.exe" = D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service -- File not found
"C:\Programme\TMbot\TM.EXE" = C:\Programme\TMbot\TM.EXE:*:Enabled:TMbot -- File not found
"D:\Programme\Anno 1701\Anno1701.exe" = D:\Programme\Anno 1701\Anno1701.exe:*:Enabled:Anno 1701 -- File not found
"D:\Programme\ICQ7.0\ICQ.exe" = D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"D:\Programme\ICQ7.0\aolload.exe" = D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"D:\Programme\Steam\Steam.exe" = D:\Programme\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Dokumente und Einstellungen\Ich\Desktop\Counter-Strike Source\hl2.exe" = C:\Dokumente und Einstellungen\Ich\Desktop\Counter-Strike Source\hl2.exe:*:Disabled:hl2 -- ()
"D:\Programme\League of Legends\Air\LolClient.exe" = D:\Programme\League of Legends\Air\LolClient.exe:*:Enabled:League of Legends Lobby -- File not found
"D:\Programme\League of Legends\Game\League of Legends.exe" = D:\Programme\League of Legends\Game\League of Legends.exe:*:Enabled:League of Legends Game Client -- File not found
"C:\Programme\Pando Networks\Media Booster\PMB.exe" = C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"D:\Programme\Steam\SteamApps\weithoff007\counter-strike source\hl2.exe" = D:\Programme\Steam\SteamApps\weithoff007\counter-strike source\hl2.exe:*:Enabled:Counter-Strike: Source -- ()
"C:\Programme\MSN Messenger\msnmsgr.exe" = C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- File not found
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
"C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Temp\7zS1B3.tmp\SymNRT.exe" = C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Temp\7zS1B3.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool -- File not found
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{03ADCA1C-BCF0-4B12-AFCF-8EBF2CB3AB07}" = SST Programming Software
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0863885D-E64B-9E5A-9747-03321A2D2A49}" = CCC Help Korean
"{0C40E716-2558-01E2-4797-484E4CCB2500}" = Catalyst Control Center Localization All
"{10FDD69C-2428-0FFB-12A2-2A6907D6282F}" = CCC Help Japanese
"{1373559F-6DC6-44EA-9079-6ABDCCE8CDAD}" = OviMPlatform
"{139DEC1F-D380-EB76-B0DF-88BC99B3B7BB}" = Catalyst Control Center Graphics Light
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker
"{20140000-006D-0407-0000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010 (Beta)
"{20140062-0062-0407-0000-0000000FF1CE}" = Microsoft Office Home and Business 2010 (Beta) - Deutsch
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2347E903-6299-A99F-C46C-05EB55912539}" = CCC Help Chinese Traditional
"{2638924D-DC58-4C40-BB1C-48C2B24B7B1B}" = T-Online Router Web-IF Management
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java(TM) 6 Update 21
"{29F563F4-8807-4496-8463-441EAA0E96AB}" = PC Connectivity Solution
"{2B3A996D-CCBF-3D62-B0AD-EA05553D3CEE}" = CCC Help Chinese Standard
"{2D10FC46-1D96-44C4-8855-85F21B9B011E}" = Ovi Desktop Sync Engine
"{300D2ECE-DA75-1623-871F-935A205FC450}" = CCC Help German
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{33D7EA48-0E99-4C45-A4D2-27D5DB9AF50F}" = Pacz
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{385979FE-DC4F-4140-8EAD-A59625000D72}" = NTI Backup NOW! 4
"{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}" = ATI HYDRAVISION
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4BF8A8A5-B3EA-6073-0457-669CC1E929C8}" = CCC Help Hungarian
"{501C0FDB-DCA5-E211-956C-26ADC4C54B66}" = Catalyst Control Center Core Implementation
"{50D25574-2C48-4AEC-8FFC-32AEAD2EAEFF}" = Nokia Ovi Player
"{57F85CF9-B9EF-6C77-8095-A2CF95738099}" = CCC Help Danish
"{5DA6F06A-B389-407B-BF8C-1548767914D8}" = ATI Problem Report Wizard
"{5DE1B7CF-7429-40CA-987F-6BEE09B63787}" = Prime95
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{63A17691-ABC0-E86F-5D7A-A2F7EE36145E}" = CCC Help Dutch
"{6501E9B8-77C7-7D81-7F1A-4C2D7E36B403}" = CCC Help Italian
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6FE7F94E-7AF8-421F-9A19-04681A099AE3}" = TuneUp WinStyler
"{70B31335-50EE-4834-8431-27412CDE62BD}" = Nokia_Multimedia_Common_Components_2_5
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72A5824D-08E9-9A96-2104-19E4FE86E5FA}" = CCC Help Spanish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7907CAB0-6C4F-C554-34EA-93EAC98B42F9}" = CCC Help Turkish
"{8070452B-15D6-4169-B9B9-FCC3B54588AD}" = Nokia Ovi Suite
"{82982D26-D60E-27D8-361F-F14A8F6440E7}" = Catalyst Control Center HydraVision Full
"{87934EAD-CE6F-16C6-6004-73E092AA15A6}" = Catalyst Control Center Graphics Previews Common
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{89B80F72-CCD0-95C3-21CB-89BA03D98155}" = CCC Help Finnish
"{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}" = ATI AVIVO Codecs
"{90120407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Standard
"{906D95BA-4515-59A5-F2E4-072B1E73BB75}" = CCC Help English
"{92DF2F1B-F63C-4D9A-B3E1-B2D11AE29790}" = Windows Presentation Foundation Language Pack (DEU)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D8BE52A-2C9A-91F2-310E-560CCE4FD247}" = CCC Help Russian
"{A0D62771-4353-8D52-44B8-0FCFF07D5FF1}" = ccc-core-preinstall
"{A0D65C73-F2C5-432F-8788-90F8A2E99B98}" = Nokia Ovi Suite Software Updater
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3AE78AD-093F-57F1-280D-A31B0C1C1425}" = CCC Help Greek
"{A41A9C99-0029-783E-40C3-3AA0D1A6535D}" = CCC Help Polish
"{A680CE58-7B2C-9A45-D05F-5AC22DFA2F76}" = CCC Help Portuguese
"{A97B911E-8B1F-3B0F-F3D1-63B04084CC0F}" = Skins
"{AD3AE2EE-E0DB-7818-3F05-7E8B2FB22C49}" = CCC Help Norwegian
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B1275E23-717A-4D52-997A-1AD1E24BC7F3}" = T-Online 6.0
"{B26E3B0D-C2FA-4370-B068-7C476766F029}" = Microsoft Works
"{B414174C-97E4-9E8B-018E-AC77055D0107}" = CCC Help Thai
"{B6D0AACC-1F01-A901-5348-FF3599EFE70D}" = CCC Help French
"{B98604A2-5229-CBE6-98A4-A6D7C63B7458}" = ccc-utility
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C19BE821-89B1-4A96-AC7C-873810C0CB5F}" = ContentSAFER for Wizmax
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{CADDE354-C78C-46CB-A006-E2B178EFC271}" = Rise Of Legends
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBD1A47D-691E-56C2-AC6A-1B3F80E3EC14}" = CCC Help Swedish
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D34313F7-B5E2-D3AF-FBB1-EF3ED1DEF5AB}" = CCC Help Czech
"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding
"{D4CFC5F3-481C-40AA-9944-E7E4E732136C}" = Microsoft IntelliType Pro 8.0
"{E3A6437F-DE5B-6F3E-7BB3-39185D0BBDCE}" = ccc-core-static
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{EB1446FB-A3EF-D04D-C224-EEC74F11805F}" = Catalyst Control Center Graphics Full New
"{EF4F620F-F295-41D7-92C0-6B635709C850}" = Nokia Software Updater
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1FDAA01-988C-423F-AC12-0D8F333943FD}" = Nokia Connectivity Cable Driver
"{F27483DD-A574-441E-AC55-69625B58D562}" = Brother HL-2035
"{F2A7F421-1679-48D5-B918-96999014ED53}" = Microsoft .NET Framework 3.0 German Language Pack
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}" = HighMAT-Erweiterung für den Microsoft Windows XP-Assistenten zum Schreiben von CDs
"{FE931AAE-B6D9-8A02-60C7-EF4862306F58}" = Catalyst Control Center Graphics Full Existing
"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows-Treiberpaket - Nokia Modem (02/15/2007 3.1)
"3B18191663CDFABAA2A93D4267E54D683153FF60" = Windows-Treiberpaket - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Windows-Treiberpaket - Nokia Modem (05/22/2008 7.00.0.1)
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"Ask Toolbar_is1" = Ask Toolbar
"ATI Display Driver" = ATI Display Driver
"B726756F5B5A5AA9D798B399386FC6205A45F19E" = Windows-Treiberpaket - Nokia Modem (02/15/2007 3.1)
"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Windows-Treiberpaket - Nokia Modem (05/22/2008 3.8)
"CBF192A85B624E32B8D19ADEEF2DCFC5BC3AA73A" = Windows-Treiberpaket - Nokia Modem (03/05/2008 3.7)
"CCleaner" = CCleaner
"CD8424B9400BFF7D34AA18F816C71322AC4BDAA7" = Windows-Treiberpaket - Nokia Modem (05/24/2007 6.84.0.1)
"Cossacks : Back To War" = Cossacks - Back To War
"E092B2EBF2FFE83E896F8F7F829A7B5D7D1B2F9D" = Windows-Treiberpaket - Nokia Modem (03/13/2008 6.86.0.1)
"Fraps" = Fraps
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{CADDE354-C78C-46CB-A006-E2B178EFC271}" = Rise Of Legends
"Lame MP3 Codec (for the ACM)" = Lame ACM MP3 Codec
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.0 German Language Pack" = Microsoft .NET Framework 3.0 German Language Pack
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.12)" = Mozilla Firefox (3.5.12)
"Mozilla Thunderbird (3.1.2)" = Mozilla Thunderbird (3.1.2)
"Mp3tag" = Mp3tag v2.46a
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia Ovi Suite" = Nokia Ovi Suite
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010 (Beta)
"Steam App 240" = Counter-Strike: Source
"SystemRequirementsLab" = System Requirements Lab
"TeamViewer 4" = TeamViewer 4
"Uninstall_is1" = Uninstall 1.0.0.1
"VP3 Codec Version 3.2.6.1" = VP3 Codec Version 3.2.6.1
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"XviD_is1" = XviD MPEG-4 Video Codec
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 06.09.2010 14:28:39 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:01 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:03 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:03 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 07.09.2010 14:41:07 | Computer Name = FINN | Source = crypt32 | ID = 131083
Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich
nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel
in der signierten Datei. .
Error - 07.09.2010 14:41:07 | Computer Name = FINN | Source = crypt32 | ID = 131083
Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich
nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel
in der signierten Datei. .
Error - 07.09.2010 17:31:29 | Computer Name = FINN | Source = CVHSVC | ID = 100
Description = Nur zur Information. (Patch task for {20140062-0062-0407-0000-0000000FF1CE}):
DownloadLatest Failed:
Error - 07.09.2010 18:50:42 | Computer Name = FINN | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung javara.exe, Version 1.16.1.1763, fehlgeschlagenes
Modul ntdll.dll, Version 5.1.2600.5755, Fehleradresse 0x0000100b.
Error - 08.09.2010 10:48:11 | Computer Name = FINN | Source = MsiInstaller | ID = 11706
Description = Produkt: Microsoft Office XP Standard -- Fehler 1706. Setup kann die
benötigten Dateien nicht finden. Überprüfen Sie Ihre Verbindung mit dem Netzwerk
oder dem CD-ROM-Laufwerk. Um mehr über mögliche Lösungen für dieses Problem zu
erfahren, sehen sie bitte nach in C:\Programme\Microsoft Office\Office10\1031\SETUP.HLP.
Error - 08.09.2010 10:48:12 | Computer Name = FINN | Source = MsiInstaller | ID = 1024
Description = Produkt: Microsoft Office XP Standard - Update "{4757E865-0292-4E04-940D-9C51052A5DD6}"
konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle
erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen
behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung
der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
[ System Events ]
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:11 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:49:02 | Computer Name = FINN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "int15.sys" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error - 08.09.2010 12:49:02 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:49:24 | Computer Name = FINN | Source = Service Control Manager | ID = 7034
Description = Dienst "TuneUp WinStyler Theme Service" wurde unerwartet beendet.
Dies ist bereits 1 Mal passiert.
< End of report >
|
|
09.09.2010, 14:27
| #33 |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" Hmm, mir ist aufgefallen, dass die Lautstärkesteuerung meiner Tastatur nicht mehr funktioniert... habe Treiber und den Krams schon neuinstalliert.
__________________Kann das hiermit zu tun haben oder ist das eher ein Hardwareproblem? Lg Finn |
|
09.09.2010, 17:24
| #34 | ||
  | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php"Zitat:
Hast du dich wirklich an meine Anweisungen gehalten? Dort ist noch immer die Askbar zu sehen! (nicht wirklich schädlich, aber Adware, deshalb weg damit!) OK, dann auf den traditionellen Weg: 1.) Starte HJT => Do a system scan only => Markiere Code:
ATTFilter Alle R0, R1, R3, O2, O3, O9 und O16-Einträge
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programme\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre6\bin\jusched.exe
O4 - HKCU\..\Run: [Google Update] "C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Steam] "d:\programme\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ICQ] "D:\Programme\ICQ7.0\ICQ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [SWHelper] "C:\WINDOWS\system32\Macromed\Shockwave 10\PostUpdate.exe" 1014020
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: WKCALREM.LNK = C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
2.) Nach dieser Löschorgie brauche ich neue Logs von RSIT und OTL. 3.) Zitat:
ciao, andreas
__________________ Kein Support per PN! Das ist hier ein Forum und keine Privatbetreuung! Für alle NeuenPrivatbetreuung nur gegen Bezahlung und ich koste sehr teuer.  Anleitungen Virenscanner Kompromittierung unvermeidbar? |
|
09.09.2010, 19:28
| #35 |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" Den Askbar konnte ich leider nicht entfernen... Weder über Programme noch per Suche... kA wie ich den wegbekommen soll... Werde dann vor dem Fix noch Firefox und Thunderbird entfernen. Ich melde mich, wenn ich fertig bin Edit: Soll ich eigentlich stattdessen Internet Explorer installieren? Oder mir schon das Firefox Setup downloaden? Ich komme ja sonst gar nicht mehr ins Internet ohne Browser, oder? Geändert von .Anti. (09.09.2010 um 19:34 Uhr) |
|
09.09.2010, 20:01
| #36 |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" RSIT Logfile: RSIT Logfile: Code:
ATTFilter Logfile of random's system information tool 1.08 (written by random/random) Run by Ich at 2010-09-09 21:00:23 Microsoft Windows XP Home Edition Service Pack 3 System drive C: has 20 GB (26%) free of 74 GB Total RAM: 1534 MB (62% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:00:27, on 09.09.2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.17080) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Programme\TuneUp WinStyler\WinStylerThemeSvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Programme\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\rundll32.exe D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe C:\WINDOWS\RTHDCPL.EXE C:\Programme\Microsoft IntelliType Pro\itype.exe C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\UAService7.exe C:\Programme\Microsoft IntelliType Pro\dpupdchk.exe C:\Programme\Microsoft Application Virtualization Client\sftlist.exe C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\wuauclt.exe D:\Programme\ICQ7.0\ICQ.exe D:\Programme\Mozilla Firefox\firefox.exe C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Programme\trend micro\Ich.exe O4 - HKLM\..\Run: [LaunchApp] Alaunch O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [ToADiMon.exe] D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe -TOnlineAutodialStart O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [itype] "C:\Programme\Microsoft IntelliType Pro\itype.exe" O4 - HKCU\..\Run: [swg] "C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-18\..\Run: [InfoCockpit] D:\Programme\T-Online\T-Online_Software_6\Info-Cockpit\INFOCOCKPIT.EXE /nosplash (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [InfoCockpit] D:\Programme\T-Online\T-Online_Software_6\Info-Cockpit\INFOCOCKPIT.EXE /nosplash (User 'Default user') O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: ServiceLayer - Nokia - C:\Programme\PC Connectivity Solution\ServiceLayer.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Programme\TuneUp WinStyler\WinStylerThemeSvc.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe -- End of file - 4622 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IPoint_exe.job C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3598312876-1066895871-4027723870-1007Core1cb0cc11dcdc67c.job C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job ======Registry dump====== [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "LaunchApp"=Alaunch [] "MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-04 59392] "BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent [] "ToADiMon.exe"=D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe [2005-06-27 278528] "High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-07-01 14477312] "StartCCC"=C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-03 61440] "itype"=C:\Programme\Microsoft IntelliType Pro\itype.exe [2010-07-21 1778064] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "swg"=C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-06-16 68856] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ Malwarebytes Anti-Malware (reboot)] D:\Programme\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Programme\Messenger\msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer] C:\Programme\Gemeinsame Dateien\Nokia\MPlatform\NokiaMServer /watchfiles startup [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMusic FastStart] C:\Programme\Nokia\Ovi Player\NokiaOviPlayer.exe [2010-03-04 2192672] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntiMUI] c:\Programme\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-11 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Profiler] C:\Programme\Saitek\Software\Profiler.exe [2004-01-28 159744] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SaiSmart] C:\Programme\Saitek\Software\SaiSmart.exe [2004-01-28 98304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^Ich^Startmenü^Programme^Zubehör^Autostart^Registration .LNK] C:\Programme\Ubisoft\Peter Jackson's King Kong - The Official Game of the Movie\RegistrationReminder.exe -d 803617 -l german -r 7 -g -c us -i 2309 [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] C:\WINDOWS\system32\Ati2evxx.dll [2009-02-04 155648] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDriveAutoRun"=67108863 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "HonorAutoRunSetting"=1 "NoDriveAutoRun"=67108863 "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "D:\Programme\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe"="D:\Programme\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe:*:Enabled:BattlefrontII" "C:\WINDOWS\System32\LEXPPS.EXE"="C:\WINDOWS\System32\LEXPPS.EXE:*:Disabled:LEXPPS" "C:\WINDOWS\System32\dplaysvr.exe"="C:\WINDOWS\System32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper" "C:\WINDOWS\Network Diagnostic\xpnetdiag.exe"="C:\WINDOWS\Network Diagnostic\xpnetdiag.exe:*:Disabled:@xpsp3res.dll,-20000" "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019" "D:\Programme\T-Online\T-Online_Software_6\Browser\browser.exe"="D:\Programme\T-Online\T-Online_Software_6\Browser\browser.exe:*:Disabled:T-Online Browser 6.0" "C:\Programme\Messenger\msmsgs.exe"="C:\Programme\Messenger\msmsgs.exe:*:Disabled:Windows Messenger" "C:\Programme\TeamViewer\Version4\TeamViewer.exe"="C:\Programme\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application" "C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater" "C:\Programme\Java\jre6\bin\java.exe"="C:\Programme\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary" "D:\Programme\Counter-Strike 1.6\hl.exe"="D:\Programme\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher" "D:\Programme\Azureus\Azureus.exe"="D:\Programme\Azureus\Azureus.exe:*:Enabled:Azureus" "C:\Programme\Microsoft Games\Rise Of Legends\legends.exe"="C:\Programme\Microsoft Games\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends" "D:\Programme\ICQ6.5\ICQ.exe"="D:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6" "C:\Programme\Skype\Plugin Manager\skypePM.exe"="C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\RpcSandraSrv.exe"="D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service" "C:\Programme\TMbot\TM.EXE"="C:\Programme\TMbot\TM.EXE:*:Enabled:TMbot" "D:\Programme\Anno 1701\Anno1701.exe"="D:\Programme\Anno 1701\Anno1701.exe:*:Enabled:Anno 1701" "D:\Programme\ICQ7.0\ICQ.exe"="D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7" "D:\Programme\ICQ7.0\aolload.exe"="D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe" "D:\Programme\Steam\Steam.exe"="D:\Programme\Steam\Steam.exe:*:Enabled:Steam" "C:\Dokumente und Einstellungen\Ich\Desktop\Counter-Strike Source\hl2.exe"="C:\Dokumente und Einstellungen\Ich\Desktop\Counter-Strike Source\hl2.exe:*:Disabled:hl2" "D:\Programme\League of Legends\Air\LolClient.exe"="D:\Programme\League of Legends\Air\LolClient.exe:*:Enabled:League of Legends Lobby" "D:\Programme\League of Legends\Game\League of Legends.exe"="D:\Programme\League of Legends\Game\League of Legends.exe:*:Enabled:League of Legends Game Client" "C:\Programme\Pando Networks\Media Booster\PMB.exe"="C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster" "D:\Programme\Steam\SteamApps\weithoff007\counter-strike source\hl2.exe"="D:\Programme\Steam\SteamApps\weithoff007\counter-strike source\hl2.exe:*:Enabled:Counter-Strike: Source" "C:\Programme\MSN Messenger\msnmsgr.exe"="C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Temp\7zS1B3.tmp\SymNRT.exe"="C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Temp\7zS1B3.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool" "C:\Dokumente und Einstellungen\Ich\Desktop\Warcraft3\Warcraft III.exe"="C:\Dokumente und Einstellungen\Ich\Desktop\Warcraft3\Warcraft III.exe:*:Disabled:Warcraft III" "C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "D:\Programme\ICQ7.0\ICQ.exe"="D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7" "D:\Programme\ICQ7.0\aolload.exe"="D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe" "C:\Programme\Pando Networks\Media Booster\PMB.exe"="C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster" "C:\Programme\MSN Messenger\msnmsgr.exe"="C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1" "C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" ======List of files/folders created in the last 1 months====== 2010-09-08 16:32:15 ----D---- C:\Programme\Microsoft IntelliType Pro 2010-09-08 06:46:17 ----D---- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Skype 2010-09-08 06:46:12 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype 2010-09-08 03:34:26 ----HD---- C:\WINDOWS\$NtUninstallKB982214$ 2010-09-08 03:34:20 ----HD---- C:\WINDOWS\$NtUninstallKB2115168$ 2010-09-08 03:34:14 ----HD---- C:\WINDOWS\$NtUninstallKB2229593$ 2010-09-08 03:33:23 ----HD---- C:\WINDOWS\$NtUninstallKB981852$ 2010-09-08 03:32:21 ----HD---- C:\WINDOWS\$NtUninstallKB2079403$ 2010-09-08 03:18:13 ----HD---- C:\WINDOWS\$NtUninstallKB2160329$ 2010-09-08 03:17:48 ----HD---- C:\WINDOWS\$NtUninstallKB980436$ 2010-09-08 03:03:52 ----HD---- C:\WINDOWS\$NtUninstallKB2286198$ 2010-09-08 03:03:23 ----HD---- C:\WINDOWS\$NtUninstallKB981997$ 2010-09-08 03:02:59 ----A---- C:\WINDOWS\imsins.BAK 2010-09-08 03:02:24 ----HD---- C:\WINDOWS\$NtUninstallKB982665$ 2010-09-08 01:05:55 ----D---- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\InstallShield 2010-09-08 00:54:39 ----SHD---- C:\Recycled 2010-09-07 23:51:29 ----A---- C:\ComboFix.txt 2010-09-07 23:25:36 ----A---- C:\Boot.bak 2010-09-07 23:25:31 ----RASHD---- C:\cmdcons 2010-09-07 23:21:19 ----A---- C:\WINDOWS\zip.exe 2010-09-07 23:21:19 ----A---- C:\WINDOWS\SWXCACLS.exe 2010-09-07 23:21:19 ----A---- C:\WINDOWS\SWSC.exe 2010-09-07 23:21:19 ----A---- C:\WINDOWS\SWREG.exe 2010-09-07 23:21:19 ----A---- C:\WINDOWS\sed.exe 2010-09-07 23:21:19 ----A---- C:\WINDOWS\PEV.exe 2010-09-07 23:21:19 ----A---- C:\WINDOWS\NIRCMD.exe 2010-09-07 23:21:19 ----A---- C:\WINDOWS\MBR.exe 2010-09-07 23:21:19 ----A---- C:\WINDOWS\grep.exe 2010-09-07 23:20:37 ----D---- C:\WINDOWS\ERDNT 2010-09-07 23:16:35 ----D---- C:\Qoobox 2010-09-07 21:12:19 ----D---- C:\Programme\trend micro 2010-09-07 21:11:23 ----D---- C:\rsit 2010-09-07 17:06:29 ----D---- C:\WINDOWS\system32\Adobe 2010-09-07 16:59:37 ----D---- C:\Programme\Windows Sidebar 2010-09-07 16:59:36 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton 2010-09-07 16:56:10 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NortonInstaller 2010-09-06 23:29:18 ----D---- C:\_OTL 2010-09-06 22:16:47 ----D---- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Malwarebytes 2010-09-06 22:16:28 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2010-09-06 22:16:22 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes 2010-09-06 22:16:21 ----A---- C:\WINDOWS\system32\drivers\mbam.sys 2010-09-06 16:35:22 ----D---- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mp3tag 2010-09-06 16:07:54 ----D---- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DVDVideoSoftIEHelpers 2010-09-02 20:38:39 ----A---- C:\WINDOWS\ModemLog_Standardmodem über Bluetooth-Verbindung.txt 2010-09-01 21:27:52 ----D---- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia Ovi Suite 2010-09-01 04:12:41 ----HD---- C:\WINDOWS\$NtUninstallWudf01009$ 2010-09-01 04:06:53 ----HD---- C:\WINDOWS\$NtUninstallWdf01009$ 2010-09-01 03:50:49 ----D---- C:\WINDOWS\Globalization 2010-09-01 03:50:22 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic 2010-09-01 03:44:21 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys 2010-09-01 03:44:11 ----D---- C:\Programme\PC Connectivity Solution 2010-09-01 03:43:22 ----A---- C:\WINDOWS\system32\wdfcoinstaller01009.dll 2010-09-01 03:43:22 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll 2010-09-01 03:43:22 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys 2010-09-01 03:40:39 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache 2010-08-21 18:33:32 ----D---- C:\FOUND.069 2010-08-20 03:55:24 ----A---- C:\WINDOWS\system32\javaws.exe 2010-08-20 03:55:24 ----A---- C:\WINDOWS\system32\javaw.exe 2010-08-20 03:55:24 ----A---- C:\WINDOWS\system32\java.exe 2010-08-11 04:42:15 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard Entertainment 2010-08-11 04:41:24 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard ======List of files/folders modified in the last 1 months====== 2010-09-08 03:30:16 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2010-09-08 01:05:16 ----A---- C:\WINDOWS\BRVIDEO.INI 2010-09-08 01:05:16 ----A---- C:\WINDOWS\Brownie.ini 2010-09-08 01:05:16 ----A---- C:\WINDOWS\BRDIAG.INI 2010-09-07 23:40:32 ----A---- C:\WINDOWS\system.ini 2010-09-07 23:25:38 ----RASH---- C:\boot.ini 2010-09-07 17:13:46 ----A---- C:\WINDOWS\win.ini ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 amdide;amdide; C:\WINDOWS\system32\DRIVERS\amdide.sys [2007-10-12 9096] R0 gagp30kx;Microsoft Allgemeiner AGPv3.0-Filter für K8-Prozessorplattformen; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-13 46464] R0 ohci1394;VIA OHCI-konformer IEEE 1394-Hostcontroller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696] R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944] R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488] R0 SI3112r;ATI-437A Serial ATA Controller; C:\WINDOWS\system32\DRIVERS\SI3112r.sys [2005-06-01 97920] R0 SiFilter;SATALink driver accelerator; C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys [2005-06-01 10240] R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2003-07-02 27904] R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904] R1 AmdK8;AMD-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520] R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848] R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952] R1 WS2IFSL;Windows Socket 2.0 Non-IFS-Dienstanbieter-Unterstützungsumgebung; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032] R2 BrPar;BrPar; C:\WINDOWS\System32\drivers\BrPar.sys [2000-07-24 19537] R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776] R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-02-04 3488768] R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-10-31 93184] R3 BthEnum;Bluetooth-Auflistungsdienst; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024] R3 BTHMODEM;Bluetooth-Modemkommunikationstreiber; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888] R3 BthPan;Bluetooth-Gerät (PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120] R3 BTHUSB;USB-Treiber für Bluetooth-Funkgerät; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944] R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 HidBth;Microsoft Bluetooth-HID-Miniport; C:\WINDOWS\system32\DRIVERS\hidbth.sys [2008-04-14 25856] R3 hidusb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-07-01 3134976] R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288] R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-10-22 6144] R3 NuidFltr;NUID filter driver; C:\WINDOWS\system32\DRIVERS\NuidFltr.sys [2010-07-21 21520] R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-19 21248] R3 RFCOMM;Bluetooth-Gerät (RFCOMM-Protokoll-TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136] R3 SaiMini;SaiMini; C:\WINDOWS\system32\DRIVERS\SaiMini.sys [2004-01-28 15232] R3 SaiNtBus;SaiNtBus; C:\WINDOWS\system32\drivers\SaiNtBus.sys [2004-01-28 26624] R3 sftfs;sftfs; \??\C:\Programme\Microsoft Application Virtualization Client\drivers\sftfsXP.sys [] R3 sftplay;sftplay; \??\C:\Programme\Microsoft Application Virtualization Client\drivers\sftplayXP.sys [] R3 Sftredir;Sftredir; C:\WINDOWS\system32\DRIVERS\Sftredirxp.sys [2009-09-23 21864] R3 sftvol;sftvol; \??\C:\Programme\Microsoft Application Virtualization Client\drivers\sftvolXP.sys [] R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136] R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2005-07-01 230272] S2 int15.sys;int15.sys; \??\C:\Programme\Acer\eRecovery\int15.sys [] S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-06-08 2319680] S3 AVerA700;A700 service; C:\WINDOWS\system32\DRIVERS\AVerBDA3x.sys [2006-05-05 985472] S3 BTHPORT;Bluetooth-Porttreiber; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 273024] S3 catchme;catchme; \??\C:\cofi\catchme.sys [] S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 DMSKSSRh;DMSKSSRh; \??\C:\DOKUME~1\Ich\LOKALE~1\Temp\DMSKSSRh.sys [] S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys [] S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920] S3 MIINPazX;MIINPazX NDIS Protocol Driver; \??\C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [] S3 MPE;BDA MPE-Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 MTOnlPktAlyX;MTOnlPktAlyX NDIS Protocol Driver; \??\D:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [] S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 nm;Netzwerkmonitortreiber; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320] S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176] S3 ovt530;TM507A USB Camera; C:\WINDOWS\System32\Drivers\ov530vid.sys [] S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816] S3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [] S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496] S3 rtl8139;NT-Treiber für Realtek RTL8139(A/B/C)-basierten PCI-Fast Ethernet-Adapter; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992] S3 SaiH0464;SaiH0464; C:\WINDOWS\system32\DRIVERS\SaiH0464.sys [2004-01-30 55808] S3 SANDRA;SANDRA; \??\D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\Sandra.sys [] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [] S3 usbaudio;USB-Audiotreiber (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616] S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] S3 usbvideo;USB-Videogerät (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S4 mchInjDrv;mchInjDrv; \??\C:\WINDOWS\TEMP\mc21.tmp [] S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-06-15 717296] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-02-04 602112] R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 cvhsvc;Client Virtualization Handler; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2009-09-26 819600] R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2010-07-17 153376] R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2002-02-14 299008] R2 sftlist;Application Virtualization Client; C:\Programme\Microsoft Application Virtualization Client\sftlist.exe [2009-09-23 447832] R2 TUWinStylerThemeSvc;TuneUp WinStyler Theme Service; C:\Programme\TuneUp WinStyler\WinStylerThemeSvc.exe [2004-05-04 117760] R2 UserAccess7;SecuROM User Access Service (V7); C:\WINDOWS\system32\UAService7.exe [2006-03-11 221184] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R3 sftvsa;Application Virtualization Service Agent; C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe [2009-09-23 203608] S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-02-03 593920] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800] S3 aspnet_state;ASP.NET-Zustandsdienst; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 gusvc;Google Updater Service; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-02 138168] S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2009-09-26 149336] S3 osppsvc;Office Software Protection Platform; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-09-26 4639136] S3 ServiceLayer;ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936] S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576] S4 NetTcpPortSharing;Net.Tcp-Portfreigabedienst; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- |
|
09.09.2010, 20:09
| #37 |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" Und hier die OTL Logs: OTL Logfile: Code:
ATTFilter OTL logfile created on: 09.09.2010 21:06:46 - Run 4 OTL by OldTimer - Version 3.2.11.0 Folder = C:\Dokumente und Einstellungen\Ich\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.11) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 61,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 81,00% Paging File free Paging file location(s): C:\pagefile.sys 1024 1024 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 72,65 Gb Total Space | 19,05 Gb Free Space | 26,22% Space Free | Partition Type: FAT32 Drive D: | 73,45 Gb Total Space | 50,81 Gb Free Space | 69,17% Space Free | Partition Type: NTFS Drive E: | 455,16 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: FINN Current User Name: Ich Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe (OldTimer Tools) PRC - D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - D:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.) PRC - C:\Programme\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation) PRC - C:\Programme\Microsoft IntelliType Pro\dpupdchk.exe (Microsoft Corporation) PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) PRC - C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) PRC - C:\Programme\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation) PRC - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) PRC - C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.) PRC - D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (T-Online International AG, Marmiko IT-Solutions GmbH) PRC - C:\Programme\TuneUp WinStyler\WinStylerThemeSvc.exe (TuneUp Software GmbH) ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) MOD - C:\Programme\TuneUp WinStyler\WinStylerThemeHelper.dll () ========== Win32 Services (SafeList) ========== SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia) SRV - (cvhsvc) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) SRV - (osppsvc) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (sftvsa) -- C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) SRV - (sftlist) -- C:\Programme\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) SRV - (UserAccess7) SecuROM User Access Service (V7) -- C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.) SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation) SRV - (TUWinStylerThemeSvc) -- C:\Programme\TuneUp WinStyler\WinStylerThemeSvc.exe (TuneUp Software GmbH) ========== Driver Services (SafeList) ========== DRV - (USBAAPL) -- C:\WINDOWS\System32\Drivers\usbaapl.sys File not found DRV - (upperdev) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys File not found DRV - (SANDRA) -- D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\Sandra.sys File not found DRV - (Point32) -- C:\WINDOWS\System32\DRIVERS\point32.sys File not found DRV - (ovt530) -- C:\WINDOWS\System32\Drivers\ov530vid.sys File not found DRV - (MTOnlPktAlyX) -- D:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS File not found DRV - (int15.sys) -- C:\Programme\Acer\eRecovery\int15.sys File not found DRV - (DMSKSSRh) -- C:\DOKUME~1\Ich\LOKALE~1\Temp\DMSKSSRh.sys File not found DRV - (catchme) -- C:\cofi\catchme.sys File not found DRV - (NuidFltr) -- C:\WINDOWS\system32\drivers\nuidfltr.sys (Microsoft Corporation) DRV - (nmwcd) -- C:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia) DRV - (Sftredir) -- C:\WINDOWS\system32\drivers\Sftredirxp.sys (Microsoft Corporation) DRV - (sftvol) -- C:\Programme\Microsoft Application Virtualization Client\drivers\SftVolXP.sys (Microsoft Corporation) DRV - (sftplay) -- C:\Programme\Microsoft Application Virtualization Client\drivers\sftplayxp.sys (Microsoft Corporation) DRV - (sftfs) -- C:\Programme\Microsoft Application Virtualization Client\drivers\SftFSXP.sys (Microsoft Corporation) DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys (Duplex Secure Ltd.) DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.) DRV - (AtiHdmiService) -- C:\WINDOWS\system32\drivers\AtiHdmi.sys (ATI Research Inc.) DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia) DRV - (nm) -- C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation) DRV - (MPE) -- C:\WINDOWS\system32\drivers\mpe.sys (Microsoft Corporation) DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows (R) Server 2003 DDK provider) DRV - (amdide) -- C:\WINDOWS\system32\DRIVERS\amdide.sys (Advanced Micro Devices) DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices) DRV - (MIINPazX) -- C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys (T-Online International AG, Marmiko IT-Solutions GmbH) DRV - (AVerA700) -- C:\WINDOWS\system32\drivers\AVerBDA3x.sys (AVerMedia TECHNOLOGIES, Inc.) DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfvfs02.sys (Protection Technology) DRV - (NTIDrvr) -- C:\WINDOWS\system32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.) DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.) DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.) DRV - (SI3112r) -- C:\WINDOWS\system32\DRIVERS\SI3112r.sys (Silicon Image, Inc.) DRV - (SiFilter) -- C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys (Silicon Image, Inc.) DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation ) DRV - (Afc) -- C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.) DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\Hdaudio.sys (Windows (R) Server 2003 DDK provider) DRV - (UBHelper) -- C:\WINDOWS\System32\drivers\UBHelper.sys () DRV - (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation) DRV - (SaiH0464) -- C:\WINDOWS\system32\drivers\SaiH0464.sys (Saitek) DRV - (SaiNtBus) -- C:\WINDOWS\system32\drivers\SaiNtBus.sys (Saitek) DRV - (SaiMini) -- C:\WINDOWS\system32\drivers\SaiMini.sys (Saitek) DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.) DRV - (viaagp1) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.) DRV - (BrPar) -- C:\WINDOWS\System32\drivers\BrPar.sys (Brother Industries Ltd.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "schueler.cc|travian.at|youtube.com" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2 FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.1 FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.3.42 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8 FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010.09.01 03:44:34 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.12\extensions\\Components: D:\Programme\Mozilla Firefox\components [2010.09.08 18:34:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.12\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2010.09.08 18:34:04 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010.09.01 03:44:32 | 000,000,000 | ---D | M] [2010.04.13 14:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions [2010.09.08 18:35:44 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.04.13 14:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions [2010.04.13 14:35:58 | 000,000,000 | ---D | M] (Linkification) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2010.09.06 16:07:58 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010.08.19 23:50:02 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.09.01 04:39:28 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} [2010.04.18 14:08:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\youtube2mp3@mondayx.de [2010.09.08 16:16:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\9ochijs3.001\extensions [2010.01.14 23:08:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions [2010.04.11 18:03:30 | 000,000,000 | ---D | M] (Linkification) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2010.09.06 16:07:58 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010.04.11 15:12:12 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.03.17 14:48:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\Foxdie@tanjihay.com O1 HOSTS File: ([2010.09.07 23:38:22 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation) O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider) O4 - HKLM..\Run: [itype] C:\Programme\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation) O4 - HKLM..\Run: [LaunchApp] C:\WINDOWS\Alaunch.exe (Acer Inc.) O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [ToADiMon.exe] D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (T-Online International AG, Marmiko IT-Solutions GmbH) O4 - HKCU..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.EXE (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2005.10.22 07:38:32 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ] O32 - AutoRun File - [2009.11.01 14:36:42 | 000,000,098 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.09.09 20:44:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Oberon Media [2010.09.09 20:42:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\backups [2010.09.09 20:38:00 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\Ich\Desktop\HiJackThis204.exe [2010.09.08 19:04:19 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe [2010.09.08 16:34:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Desktop\Microsoft IntelliPoint [2010.09.08 16:32:15 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft IntelliType Pro [2010.09.08 06:46:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Skype [2010.09.08 06:46:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype [2010.09.08 01:05:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\InstallShield [2010.09.08 00:54:39 | 000,000,000 | -HSD | C] -- C:\Recycled [2010.09.07 23:25:31 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010.09.07 23:21:19 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010.09.07 23:21:19 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010.09.07 23:21:19 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010.09.07 23:21:19 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010.09.07 23:20:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010.09.07 23:16:35 | 000,000,000 | ---D | C] -- C:\Qoobox [2010.09.07 23:04:36 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Ich\Recent [2010.09.07 21:12:19 | 000,000,000 | ---D | C] -- C:\Programme\trend micro [2010.09.07 21:11:23 | 000,000,000 | ---D | C] -- C:\rsit [2010.09.07 18:28:14 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2010.09.07 17:06:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe [2010.09.07 16:59:37 | 000,000,000 | ---D | C] -- C:\Programme\Windows Sidebar [2010.09.07 16:59:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton [2010.09.07 16:56:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NortonInstaller [2010.09.07 16:54:13 | 132,049,776 | ---- | C] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\TT_159_SYMTB_TMD.exe [2010.09.06 23:29:18 | 000,000,000 | ---D | C] -- C:\_OTL [2010.09.06 22:16:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Malwarebytes [2010.09.06 22:16:28 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.09.06 22:16:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.09.06 22:16:21 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.09.06 22:15:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\MFTools [2010.09.06 16:35:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mp3tag [2010.09.06 16:07:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DVDVideoSoftIEHelpers [2010.09.06 07:27:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\Neuer Ordner [2010.09.01 21:27:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia Ovi Suite [2010.09.01 04:05:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\NokiaAccount [2010.09.01 03:50:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Globalization [2010.09.01 03:50:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic [2010.09.01 03:50:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Nokia [2010.09.01 03:44:21 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys [2010.09.01 03:44:11 | 000,000,000 | ---D | C] -- C:\Programme\PC Connectivity Solution [2010.09.01 03:43:22 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01009.dll [2010.09.01 03:43:22 | 000,662,016 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll [2010.09.01 03:43:22 | 000,018,176 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys [2010.09.01 03:40:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache [2010.08.21 18:33:32 | 000,000,000 | ---D | C] -- C:\FOUND.069 [2010.08.20 03:55:24 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.08.20 03:55:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.08.20 03:55:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.08.11 04:42:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard Entertainment [2010.08.11 04:41:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard [2010.08.11 04:41:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Blizzard Entertainment [2007.05.31 19:23:56 | 001,673,576 | ---- | C] (Microsoft Corporation) -- C:\Programme\dsetup32.dll [2007.05.31 19:23:56 | 000,503,144 | ---- | C] (Microsoft Corporation) -- C:\Programme\DXSETUP.exe [2007.05.31 19:23:56 | 000,077,160 | ---- | C] (Microsoft Corporation) -- C:\Programme\DSETUP.dll [3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.09.09 20:51:34 | 000,121,808 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap [2010.09.09 20:50:24 | 000,012,718 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.09.09 20:50:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.09.09 20:50:12 | 1609,093,120 | -HS- | M] () -- C:\hiberfil.sys [2010.09.09 20:48:56 | 000,004,661 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat [2010.09.09 20:48:52 | 015,466,496 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\ntuser.dat [2010.09.09 20:48:52 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Ich\ntuser.ini [2010.09.09 20:37:54 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\Ich\Desktop\HiJackThis204.exe [2010.09.08 19:04:20 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe [2010.09.08 18:47:46 | 000,274,168 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.09.08 18:22:10 | 000,071,688 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2010.09.08 16:33:44 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job [2010.09.08 16:32:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01009.Wdf [2010.09.08 06:46:20 | 000,001,872 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk [2010.09.08 03:34:32 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010.09.08 03:30:18 | 000,505,776 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.09.08 03:30:18 | 000,481,956 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.09.08 03:30:18 | 000,088,156 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.09.08 03:30:16 | 001,151,674 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010.09.08 03:30:16 | 000,104,852 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.09.08 02:35:12 | 000,002,261 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Google Chrome.lnk [2010.09.08 01:11:14 | 000,000,844 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Meine freigegebenen Ordner.lnk [2010.09.08 01:05:16 | 000,000,226 | ---- | M] () -- C:\WINDOWS\Brownie.ini [2010.09.08 01:05:16 | 000,000,023 | ---- | M] () -- C:\WINDOWS\BRDIAG.INI [2010.09.08 01:05:16 | 000,000,011 | ---- | M] () -- C:\WINDOWS\BRVIDEO.INI [2010.09.07 23:40:32 | 000,000,827 | ---- | M] () -- C:\WINDOWS\system.ini [2010.09.07 23:25:38 | 000,000,339 | RHS- | M] () -- C:\boot.ini [2010.09.07 22:58:46 | 000,000,562 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\CCleaner.lnk [2010.09.07 22:55:06 | 003,840,033 | R--- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\cofi.exe [2010.09.07 21:10:56 | 000,339,991 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe [2010.09.07 18:02:34 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm [2010.09.07 18:02:34 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm [2010.09.07 17:48:54 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm [2010.09.07 17:48:54 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm [2010.09.07 17:35:32 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm [2010.09.07 17:35:32 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm [2010.09.07 17:22:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm [2010.09.07 17:22:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm [2010.09.07 17:13:46 | 000,000,692 | ---- | M] () -- C:\WINDOWS\win.ini [2010.09.07 17:13:46 | 000,000,222 | ---- | M] () -- C:\Boot.bak [2010.09.07 17:08:46 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm [2010.09.07 17:08:46 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm [2010.09.07 17:06:00 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm [2010.09.07 17:06:00 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm [2010.09.07 17:00:38 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm [2010.09.07 17:00:36 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm [2010.09.07 16:56:08 | 132,049,776 | ---- | M] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\TT_159_SYMTB_TMD.exe [2010.09.07 16:55:40 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm [2010.09.07 16:55:40 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm [2010.09.07 16:42:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm [2010.09.07 16:42:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm [2010.09.07 16:28:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm [2010.09.07 16:28:42 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm [2010.09.07 16:28:18 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm [2010.09.07 16:28:18 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm [2010.09.07 08:27:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm [2010.09.07 08:27:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm [2010.09.07 08:13:50 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm [2010.09.07 08:13:50 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm [2010.09.07 08:00:30 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm [2010.09.07 08:00:30 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm [2010.09.07 07:47:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm [2010.09.07 07:47:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm [2010.09.07 07:33:58 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm [2010.09.07 07:33:58 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm [2010.09.07 07:20:40 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm [2010.09.07 07:20:40 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm [2010.09.07 07:07:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm [2010.09.07 07:07:06 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm [2010.09.07 07:06:54 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm [2010.09.07 07:06:54 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm [2010.09.07 02:13:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm [2010.09.07 02:13:26 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm [2010.09.06 22:16:34 | 000,000,556 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.09.06 22:15:32 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\defogger.exe [2010.09.06 22:15:28 | 000,284,915 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Gmer.zip [2010.09.06 22:14:50 | 000,388,197 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Load.exe [2010.09.06 16:34:58 | 000,000,542 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mp3tag.lnk [2010.09.06 16:07:44 | 000,000,819 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\DVDVideoSoft Free Studio.lnk [2010.09.01 04:13:04 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf [2010.09.01 04:12:58 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_user_01_09_00.Wdf [2010.09.01 04:07:14 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2010.09.01 04:07:14 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf [2010.09.01 03:50:42 | 000,001,880 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Player.lnk [2010.09.01 03:49:10 | 000,001,673 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Suite.lnk [2010.08.22 17:30:56 | 000,031,001 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\JAck the Ripper.odt [3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.09.08 16:33:42 | 000,000,280 | ---- | C] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job [2010.09.08 16:32:53 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01009.Wdf [2010.09.08 06:46:19 | 000,001,872 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk [2010.09.08 03:02:59 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2010.09.08 01:11:13 | 000,000,844 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Meine freigegebenen Ordner.lnk [2010.09.07 23:25:36 | 000,000,222 | ---- | C] () -- C:\Boot.bak [2010.09.07 23:25:34 | 000,262,448 | RHS- | C] () -- C:\cmldr [2010.09.07 23:21:19 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010.09.07 23:21:19 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010.09.07 23:21:19 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010.09.07 23:21:19 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010.09.07 23:21:19 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010.09.07 22:58:45 | 000,000,562 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\CCleaner.lnk [2010.09.07 22:55:05 | 003,840,033 | R--- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\cofi.exe [2010.09.07 21:11:00 | 000,339,991 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe [2010.09.06 23:38:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm [2010.09.06 23:38:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata19.sqm [2010.09.06 23:19:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm [2010.09.06 23:19:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata18.sqm [2010.09.06 23:15:54 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm [2010.09.06 23:15:54 | 000,000,232 | -H-- | C] () -- C:\sqmdata17.sqm [2010.09.06 23:06:38 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm [2010.09.06 23:06:38 | 000,000,232 | -H-- | C] () -- C:\sqmdata16.sqm [2010.09.06 22:53:08 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm [2010.09.06 22:53:08 | 000,000,232 | -H-- | C] () -- C:\sqmdata15.sqm [2010.09.06 22:45:34 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm [2010.09.06 22:45:34 | 000,000,232 | -H-- | C] () -- C:\sqmdata14.sqm [2010.09.06 22:16:32 | 000,000,556 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.09.06 22:15:31 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\defogger.exe [2010.09.06 22:15:26 | 000,284,915 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Gmer.zip [2010.09.06 22:14:50 | 000,388,197 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Load.exe [2010.09.06 22:13:26 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm [2010.09.06 22:13:26 | 000,000,232 | -H-- | C] () -- C:\sqmdata13.sqm [2010.09.06 21:46:25 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm [2010.09.06 21:46:25 | 000,000,232 | -H-- | C] () -- C:\sqmdata12.sqm [2010.09.06 21:33:02 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt11.sqm [2010.09.06 21:33:02 | 000,000,232 | -H-- | C] () -- C:\sqmdata11.sqm [2010.09.06 21:19:43 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt10.sqm [2010.09.06 21:19:43 | 000,000,232 | -H-- | C] () -- C:\sqmdata10.sqm [2010.09.06 21:06:24 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm [2010.09.06 21:06:24 | 000,000,232 | -H-- | C] () -- C:\sqmdata09.sqm [2010.09.06 20:53:01 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm [2010.09.06 20:53:01 | 000,000,232 | -H-- | C] () -- C:\sqmdata08.sqm [2010.09.06 20:41:28 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm [2010.09.06 20:41:28 | 000,000,232 | -H-- | C] () -- C:\sqmdata07.sqm [2010.09.06 20:26:22 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm [2010.09.06 20:26:22 | 000,000,232 | -H-- | C] () -- C:\sqmdata06.sqm [2010.09.06 20:13:15 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm [2010.09.06 20:13:15 | 000,000,232 | -H-- | C] () -- C:\sqmdata05.sqm [2010.09.06 19:59:50 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm [2010.09.06 19:59:50 | 000,000,232 | -H-- | C] () -- C:\sqmdata04.sqm [2010.09.06 19:48:39 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm [2010.09.06 19:48:39 | 000,000,232 | -H-- | C] () -- C:\sqmdata03.sqm [2010.09.06 16:34:57 | 000,000,542 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mp3tag.lnk [2010.09.02 20:30:40 | 000,159,072 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2010.09.01 04:13:03 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf [2010.09.01 04:12:56 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_user_01_09_00.Wdf [2010.09.01 04:07:13 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf [2010.09.01 04:07:12 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2010.09.01 03:50:40 | 000,001,880 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Player.lnk [2010.09.01 03:49:08 | 000,001,673 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Suite.lnk [2010.08.22 16:34:49 | 000,031,001 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\JAck the Ripper.odt [2009.12.30 14:27:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini [2009.12.30 14:27:41 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\brlmw03a.ini [2009.11.05 21:09:57 | 000,000,064 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.ldb [2009.06.15 11:30:37 | 000,002,876 | ---- | C] () -- C:\WINDOWS\ATICIM.INI [2008.12.26 21:27:55 | 000,383,238 | ---- | C] () -- C:\WINDOWS\System32\libmp3lame-0.dll [2008.06.30 19:50:08 | 000,000,012 | ---- | C] () -- C:\WINDOWS\dirsaver.ini [2008.01.13 16:48:55 | 000,000,110 | ---- | C] () -- C:\WINDOWS\AVerText.ini [2007.12.24 17:27:41 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll [2007.12.24 17:27:41 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd(2).dll [2007.12.24 17:27:35 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll [2007.08.01 17:29:04 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2007.05.31 19:43:44 | 000,703,258 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x64.cab [2007.05.31 19:43:42 | 001,611,772 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x64.cab [2007.05.31 19:43:42 | 000,701,218 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x86.cab [2007.05.31 19:43:40 | 001,610,203 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x86.cab [2007.05.31 19:43:40 | 000,200,646 | ---- | C] () -- C:\Programme\JUN2007_XACT_x64.cab [2007.05.31 19:43:40 | 000,155,892 | ---- | C] () -- C:\Programme\JUN2007_XACT_x86.cab [2007.05.31 19:43:38 | 000,044,687 | ---- | C] () -- C:\Programme\dxdllreg_x86.cab [2007.05.31 19:23:58 | 000,086,401 | ---- | C] () -- C:\Programme\dxupdate.cab [2007.05.31 19:23:56 | 001,413,862 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x64.cab [2007.05.31 19:23:56 | 001,336,890 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x64.cab [2007.05.31 19:23:56 | 001,128,177 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x86.cab [2007.05.31 19:23:56 | 001,065,813 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x86.cab [2007.05.31 19:23:56 | 000,183,321 | ---- | C] () -- C:\Programme\OCT2006_XACT_x64.cab [2007.05.31 19:23:56 | 000,181,745 | ---- | C] () -- C:\Programme\JUN2006_XACT_x64.cab [2007.05.31 19:23:56 | 000,138,977 | ---- | C] () -- C:\Programme\OCT2006_XACT_x86.cab [2007.05.31 19:23:56 | 000,134,631 | ---- | C] () -- C:\Programme\JUN2006_XACT_x86.cab [2007.05.31 19:23:56 | 000,086,925 | ---- | C] () -- C:\Programme\Oct2005_xinput_x64.cab [2007.05.31 19:23:56 | 000,046,247 | ---- | C] () -- C:\Programme\Oct2005_xinput_x86.cab [2007.05.31 19:23:54 | 001,610,958 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x64.cab [2007.05.31 19:23:54 | 001,609,639 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x86.cab [2007.05.31 19:23:54 | 001,575,336 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x86.cab [2007.05.31 19:23:54 | 001,572,114 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x64.cab [2007.05.31 19:23:54 | 001,363,684 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x64.cab [2007.05.31 19:23:54 | 001,358,864 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x64.cab [2007.05.31 19:23:54 | 001,351,430 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x64.cab [2007.05.31 19:23:54 | 001,248,387 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x64.cab [2007.05.31 19:23:54 | 001,085,608 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x86.cab [2007.05.31 19:23:54 | 001,080,344 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x86.cab [2007.05.31 19:23:54 | 001,078,532 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x86.cab [2007.05.31 19:23:54 | 001,014,113 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x86.cab [2007.05.31 19:23:54 | 000,699,465 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x86.cab [2007.05.31 19:23:54 | 000,213,767 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x64.cab [2007.05.31 19:23:54 | 000,199,366 | ---- | C] () -- C:\Programme\APR2007_XACT_x64.cab [2007.05.31 19:23:54 | 000,198,275 | ---- | C] () -- C:\Programme\FEB2007_XACT_x64.cab [2007.05.31 19:23:54 | 000,193,435 | ---- | C] () -- C:\Programme\DEC2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,192,680 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x86.cab [2007.05.31 19:23:54 | 000,183,863 | ---- | C] () -- C:\Programme\AUG2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,179,247 | ---- | C] () -- C:\Programme\Feb2006_XACT_x64.cab [2007.05.31 19:23:54 | 000,154,825 | ---- | C] () -- C:\Programme\APR2007_XACT_x86.cab [2007.05.31 19:23:54 | 000,151,583 | ---- | C] () -- C:\Programme\FEB2007_XACT_x86.cab [2007.05.31 19:23:54 | 000,146,559 | ---- | C] () -- C:\Programme\DEC2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,138,195 | ---- | C] () -- C:\Programme\AUG2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,133,297 | ---- | C] () -- C:\Programme\Feb2006_XACT_x86.cab [2007.05.31 19:23:54 | 000,100,417 | ---- | C] () -- C:\Programme\APR2007_xinput_x64.cab [2007.05.31 19:23:54 | 000,088,102 | ---- | C] () -- C:\Programme\AUG2006_xinput_x64.cab [2007.05.31 19:23:54 | 000,056,902 | ---- | C] () -- C:\Programme\APR2007_xinput_x86.cab [2007.05.31 19:23:54 | 000,047,018 | ---- | C] () -- C:\Programme\AUG2006_xinput_x86.cab [2007.05.31 19:23:52 | 013,265,040 | ---- | C] () -- C:\Programme\dxnt.cab [2007.05.31 19:23:52 | 004,163,518 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86_Archive.cab [2007.05.31 19:23:52 | 001,398,718 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x64.cab [2007.05.31 19:23:52 | 001,348,242 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x64.cab [2007.05.31 19:23:52 | 001,156,363 | ---- | C] () -- C:\Programme\BDANT.cab [2007.05.31 19:23:52 | 001,116,109 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x86.cab [2007.05.31 19:23:52 | 001,079,850 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x86.cab [2007.05.31 19:23:52 | 000,976,020 | ---- | C] () -- C:\Programme\BDAXP.cab [2007.05.31 19:23:52 | 000,917,318 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86.cab [2007.05.31 19:23:52 | 000,702,212 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x64.cab [2007.05.31 19:23:52 | 000,180,021 | ---- | C] () -- C:\Programme\Apr2006_XACT_x64.cab [2007.05.31 19:23:52 | 000,133,991 | ---- | C] () -- C:\Programme\Apr2006_XACT_x86.cab [2007.05.31 19:23:52 | 000,087,989 | ---- | C] () -- C:\Programme\Apr2006_xinput_x64.cab [2007.05.31 19:23:52 | 000,046,898 | ---- | C] () -- C:\Programme\Apr2006_xinput_x86.cab [2007.03.04 21:35:48 | 000,000,084 | ---- | C] () -- C:\WINDOWS\StyleBuilder.INI [2007.02.03 23:04:37 | 000,000,214 | -H-- | C] () -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\xpy.ini [2007.02.02 15:48:37 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys [2007.01.29 16:48:00 | 000,229,888 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007.01.26 16:50:31 | 000,025,054 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\wklnhst.dat [2007.01.26 16:46:15 | 000,000,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2006.12.24 18:19:50 | 000,299,008 | ---- | C] () -- C:\WINDOWS\System32\LAME_MP3.dll [2006.12.24 18:18:44 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2006.12.24 18:18:44 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2006.12.24 18:18:44 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2006.12.24 18:18:44 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2006.08.29 16:59:33 | 000,000,226 | ---- | C] () -- C:\WINDOWS\Brownie.ini [2006.08.29 16:59:33 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BRDIAG.INI [2006.08.29 16:59:33 | 000,000,011 | ---- | C] () -- C:\WINDOWS\BRVIDEO.INI [2006.08.29 16:59:06 | 000,000,432 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2006.08.24 15:50:28 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll [2006.08.24 15:50:28 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll [2006.08.19 12:45:25 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html [2006.08.15 21:24:23 | 000,002,927 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QTSBandwidthCache [2006.08.11 19:57:47 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2006.08.08 18:34:56 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\mbr_sqlite.dll [2006.08.04 23:58:35 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2006.07.29 16:52:06 | 000,000,122 | ---- | C] () -- C:\WINDOWS\SecurityandPrivacy2.ini [2006.07.26 16:39:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini [2006.05.17 21:31:20 | 000,000,025 | ---- | C] () -- C:\WINDOWS\CDEC64Euro.ini [2006.04.13 14:38:33 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\SAICFG.dll [2006.02.14 17:03:55 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini [2006.02.12 14:27:40 | 000,000,053 | ---- | C] () -- C:\WINDOWS\Fahrenheit_Screen.ini [2005.12.27 10:10:49 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2005.12.27 08:05:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini [2005.10.28 19:32:17 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2005.10.22 07:38:52 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMP3.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll [2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll [2005.10.22 07:34:05 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2005.10.22 07:34:02 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2005.10.22 07:29:22 | 000,008,073 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2005.10.22 07:23:00 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2005.10.22 07:13:21 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo(2).dll [2005.04.28 05:22:34 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2005.04.28 05:22:34 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll [2004.12.20 11:08:28 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2004.12.20 11:03:26 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2004.12.17 17:14:44 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\UBHelper.sys [2001.12.26 16:12:30 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll [2001.09.03 23:46:38 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Hmpg12.dll [2001.07.30 16:33:56 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll [2001.07.23 22:04:36 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll [1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [1980.01.01 00:00:00 | 000,000,083 | ---- | C] () -- C:\WINDOWS\ALaunch.ini ========== LOP Check ========== [2006.02.14 17:02:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eConsole [2006.06.15 18:10:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software [2006.07.31 14:33:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online [2006.07.31 14:36:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online DSL-Manager [2008.04.17 14:58:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Software4u [2008.08.12 13:45:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations [2008.08.12 13:49:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite [2009.01.11 02:56:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nokia [2009.07.28 15:06:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Azureus [2009.12.24 19:54:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2010.02.22 21:03:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ [2010.03.17 00:58:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\VirtualizedApplications [2010.05.25 21:05:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PMB Files [2010.09.01 03:40:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache [2010.09.01 03:50:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic [2007.01.26 16:46:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQLite [2007.01.26 16:50:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Template [2007.01.26 16:51:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\MSNInstaller [2007.02.02 16:02:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ Toolbar [2007.02.06 21:38:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\T-Online [2007.02.13 15:41:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Petroglyph [2007.05.01 16:30:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Thunderbird [2007.10.03 20:10:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\LimeWire [2008.03.20 20:42:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\FileZilla [2008.04.17 14:58:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Software4u [2008.08.12 13:48:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\PC Suite [2008.08.12 13:48:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia [2008.11.18 16:03:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\SendSpace Wizard [2009.03.25 14:57:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TeamViewer [2009.06.15 22:23:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DAEMON Tools [2009.06.17 20:29:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\NewsLeecher [2009.07.28 14:59:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Azureus [2009.09.27 14:50:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Radmin [2009.10.14 20:13:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TweakNow RegCleaner [2009.10.14 20:22:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ(2) [2009.10.17 21:49:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ(3) [2009.10.17 23:01:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ [2010.03.16 22:44:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TP [2010.03.16 22:47:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\SoftGrid Client [2010.03.16 22:47:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\NVD [2010.05.25 15:25:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\LolClient [2010.09.01 21:27:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia Ovi Suite [2010.09.06 16:07:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DVDVideoSoftIEHelpers [2010.09.06 16:35:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mp3tag ========== Purity Check ========== < End of report > OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 09.09.2010 21:06:46 - Run 4
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Dokumente und Einstellungen\Ich\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 61,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 1024 1024 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 72,65 Gb Total Space | 19,05 Gb Free Space | 26,22% Space Free | Partition Type: FAT32
Drive D: | 73,45 Gb Total Space | 50,81 Gb Free Space | 69,17% Space Free | Partition Type: NTFS
Drive E: | 455,16 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: FINN
Current User Name: Ich
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation)
https [open] -- "D:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"58096:TCP" = 58096:TCP:*:Enabled:Pando Media Booster
"58096:UDP" = 58096:UDP:*:Enabled:Pando Media Booster
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3724:TCP" = 3724:TCP:*:Enabled:Blizzard Downloader: 3724
"8394:TCP" = 8394:TCP:*:Enabled:League of Legends Launcher
"8394:UDP" = 8394:UDP:*:Enabled:League of Legends Launcher
"58096:TCP" = 58096:TCP:*:Enabled:Pando Media Booster
"58096:UDP" = 58096:UDP:*:Enabled:Pando Media Booster
"6965:TCP" = 6965:TCP:*:Enabled:League of Legends Launcher
"6965:UDP" = 6965:UDP:*:Enabled:League of Legends Launcher
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Programme\ICQ7.0\ICQ.exe" = D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"D:\Programme\ICQ7.0\aolload.exe" = D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\Pando Networks\Media Booster\PMB.exe" = C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"C:\Programme\MSN Messenger\msnmsgr.exe" = C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- File not found
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Programme\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe" = D:\Programme\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe:*:Enabled:BattlefrontII -- ()
"C:\WINDOWS\System32\dplaysvr.exe" = C:\WINDOWS\System32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"D:\Programme\T-Online\T-Online_Software_6\Browser\browser.exe" = D:\Programme\T-Online\T-Online_Software_6\Browser\browser.exe:*:Disabled:T-Online Browser 6.0 -- (T-Online International AG)
"C:\Programme\TeamViewer\Version4\TeamViewer.exe" = C:\Programme\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application -- (TeamViewer GmbH)
"C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater -- (Nokia Corporation)
"C:\Programme\Java\jre6\bin\java.exe" = C:\Programme\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"D:\Programme\Counter-Strike 1.6\hl.exe" = D:\Programme\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher -- File not found
"D:\Programme\Azureus\Azureus.exe" = D:\Programme\Azureus\Azureus.exe:*:Enabled:Azureus -- File not found
"C:\Programme\Microsoft Games\Rise Of Legends\legends.exe" = C:\Programme\Microsoft Games\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends -- (Big Huge Games, Inc.)
"D:\Programme\ICQ6.5\ICQ.exe" = D:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\RpcSandraSrv.exe" = D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service -- File not found
"C:\Programme\TMbot\TM.EXE" = C:\Programme\TMbot\TM.EXE:*:Enabled:TMbot -- File not found
"D:\Programme\Anno 1701\Anno1701.exe" = D:\Programme\Anno 1701\Anno1701.exe:*:Enabled:Anno 1701 -- File not found
"D:\Programme\ICQ7.0\ICQ.exe" = D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"D:\Programme\ICQ7.0\aolload.exe" = D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"D:\Programme\Steam\Steam.exe" = D:\Programme\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Dokumente und Einstellungen\Ich\Desktop\Counter-Strike Source\hl2.exe" = C:\Dokumente und Einstellungen\Ich\Desktop\Counter-Strike Source\hl2.exe:*:Disabled:hl2 -- ()
"D:\Programme\League of Legends\Air\LolClient.exe" = D:\Programme\League of Legends\Air\LolClient.exe:*:Enabled:League of Legends Lobby -- File not found
"D:\Programme\League of Legends\Game\League of Legends.exe" = D:\Programme\League of Legends\Game\League of Legends.exe:*:Enabled:League of Legends Game Client -- File not found
"C:\Programme\Pando Networks\Media Booster\PMB.exe" = C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"D:\Programme\Steam\SteamApps\weithoff007\counter-strike source\hl2.exe" = D:\Programme\Steam\SteamApps\weithoff007\counter-strike source\hl2.exe:*:Enabled:Counter-Strike: Source -- ()
"C:\Programme\MSN Messenger\msnmsgr.exe" = C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- File not found
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
"C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Temp\7zS1B3.tmp\SymNRT.exe" = C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Temp\7zS1B3.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool -- File not found
"C:\Dokumente und Einstellungen\Ich\Desktop\Warcraft3\Warcraft III.exe" = C:\Dokumente und Einstellungen\Ich\Desktop\Warcraft3\Warcraft III.exe:*:Disabled:Warcraft III -- (Blizzard Entertainment)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{03ADCA1C-BCF0-4B12-AFCF-8EBF2CB3AB07}" = SST Programming Software
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0863885D-E64B-9E5A-9747-03321A2D2A49}" = CCC Help Korean
"{0C40E716-2558-01E2-4797-484E4CCB2500}" = Catalyst Control Center Localization All
"{10FDD69C-2428-0FFB-12A2-2A6907D6282F}" = CCC Help Japanese
"{1373559F-6DC6-44EA-9079-6ABDCCE8CDAD}" = OviMPlatform
"{139DEC1F-D380-EB76-B0DF-88BC99B3B7BB}" = Catalyst Control Center Graphics Light
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker
"{20140000-006D-0407-0000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010 (Beta)
"{20140062-0062-0407-0000-0000000FF1CE}" = Microsoft Office Home and Business 2010 (Beta) - Deutsch
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2347E903-6299-A99F-C46C-05EB55912539}" = CCC Help Chinese Traditional
"{2638924D-DC58-4C40-BB1C-48C2B24B7B1B}" = T-Online Router Web-IF Management
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java(TM) 6 Update 21
"{29F563F4-8807-4496-8463-441EAA0E96AB}" = PC Connectivity Solution
"{2B3A996D-CCBF-3D62-B0AD-EA05553D3CEE}" = CCC Help Chinese Standard
"{2D10FC46-1D96-44C4-8855-85F21B9B011E}" = Ovi Desktop Sync Engine
"{300D2ECE-DA75-1623-871F-935A205FC450}" = CCC Help German
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{33D7EA48-0E99-4C45-A4D2-27D5DB9AF50F}" = Pacz
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{385979FE-DC4F-4140-8EAD-A59625000D72}" = NTI Backup NOW! 4
"{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}" = ATI HYDRAVISION
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4BF8A8A5-B3EA-6073-0457-669CC1E929C8}" = CCC Help Hungarian
"{501C0FDB-DCA5-E211-956C-26ADC4C54B66}" = Catalyst Control Center Core Implementation
"{50D25574-2C48-4AEC-8FFC-32AEAD2EAEFF}" = Nokia Ovi Player
"{57F85CF9-B9EF-6C77-8095-A2CF95738099}" = CCC Help Danish
"{5DA6F06A-B389-407B-BF8C-1548767914D8}" = ATI Problem Report Wizard
"{5DE1B7CF-7429-40CA-987F-6BEE09B63787}" = Prime95
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{63A17691-ABC0-E86F-5D7A-A2F7EE36145E}" = CCC Help Dutch
"{6501E9B8-77C7-7D81-7F1A-4C2D7E36B403}" = CCC Help Italian
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6FE7F94E-7AF8-421F-9A19-04681A099AE3}" = TuneUp WinStyler
"{70B31335-50EE-4834-8431-27412CDE62BD}" = Nokia_Multimedia_Common_Components_2_5
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72A5824D-08E9-9A96-2104-19E4FE86E5FA}" = CCC Help Spanish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7907CAB0-6C4F-C554-34EA-93EAC98B42F9}" = CCC Help Turkish
"{8070452B-15D6-4169-B9B9-FCC3B54588AD}" = Nokia Ovi Suite
"{82982D26-D60E-27D8-361F-F14A8F6440E7}" = Catalyst Control Center HydraVision Full
"{87934EAD-CE6F-16C6-6004-73E092AA15A6}" = Catalyst Control Center Graphics Previews Common
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{89B80F72-CCD0-95C3-21CB-89BA03D98155}" = CCC Help Finnish
"{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}" = ATI AVIVO Codecs
"{90120407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Standard
"{906D95BA-4515-59A5-F2E4-072B1E73BB75}" = CCC Help English
"{92DF2F1B-F63C-4D9A-B3E1-B2D11AE29790}" = Windows Presentation Foundation Language Pack (DEU)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D8BE52A-2C9A-91F2-310E-560CCE4FD247}" = CCC Help Russian
"{A0D62771-4353-8D52-44B8-0FCFF07D5FF1}" = ccc-core-preinstall
"{A0D65C73-F2C5-432F-8788-90F8A2E99B98}" = Nokia Ovi Suite Software Updater
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3AE78AD-093F-57F1-280D-A31B0C1C1425}" = CCC Help Greek
"{A41A9C99-0029-783E-40C3-3AA0D1A6535D}" = CCC Help Polish
"{A680CE58-7B2C-9A45-D05F-5AC22DFA2F76}" = CCC Help Portuguese
"{A97B911E-8B1F-3B0F-F3D1-63B04084CC0F}" = Skins
"{AD3AE2EE-E0DB-7818-3F05-7E8B2FB22C49}" = CCC Help Norwegian
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B1275E23-717A-4D52-997A-1AD1E24BC7F3}" = T-Online 6.0
"{B26E3B0D-C2FA-4370-B068-7C476766F029}" = Microsoft Works
"{B414174C-97E4-9E8B-018E-AC77055D0107}" = CCC Help Thai
"{B6D0AACC-1F01-A901-5348-FF3599EFE70D}" = CCC Help French
"{B98604A2-5229-CBE6-98A4-A6D7C63B7458}" = ccc-utility
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C19BE821-89B1-4A96-AC7C-873810C0CB5F}" = ContentSAFER for Wizmax
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{CADDE354-C78C-46CB-A006-E2B178EFC271}" = Rise Of Legends
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBD1A47D-691E-56C2-AC6A-1B3F80E3EC14}" = CCC Help Swedish
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D34313F7-B5E2-D3AF-FBB1-EF3ED1DEF5AB}" = CCC Help Czech
"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding
"{D4CFC5F3-481C-40AA-9944-E7E4E732136C}" = Microsoft IntelliType Pro 8.0
"{E3A6437F-DE5B-6F3E-7BB3-39185D0BBDCE}" = ccc-core-static
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{EB1446FB-A3EF-D04D-C224-EEC74F11805F}" = Catalyst Control Center Graphics Full New
"{EF4F620F-F295-41D7-92C0-6B635709C850}" = Nokia Software Updater
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1FDAA01-988C-423F-AC12-0D8F333943FD}" = Nokia Connectivity Cable Driver
"{F27483DD-A574-441E-AC55-69625B58D562}" = Brother HL-2035
"{F2A7F421-1679-48D5-B918-96999014ED53}" = Microsoft .NET Framework 3.0 German Language Pack
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}" = HighMAT-Erweiterung für den Microsoft Windows XP-Assistenten zum Schreiben von CDs
"{FE931AAE-B6D9-8A02-60C7-EF4862306F58}" = Catalyst Control Center Graphics Full Existing
"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows-Treiberpaket - Nokia Modem (02/15/2007 3.1)
"3B18191663CDFABAA2A93D4267E54D683153FF60" = Windows-Treiberpaket - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Windows-Treiberpaket - Nokia Modem (05/22/2008 7.00.0.1)
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"Ask Toolbar_is1" = Ask Toolbar
"ATI Display Driver" = ATI Display Driver
"B726756F5B5A5AA9D798B399386FC6205A45F19E" = Windows-Treiberpaket - Nokia Modem (02/15/2007 3.1)
"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Windows-Treiberpaket - Nokia Modem (05/22/2008 3.8)
"CBF192A85B624E32B8D19ADEEF2DCFC5BC3AA73A" = Windows-Treiberpaket - Nokia Modem (03/05/2008 3.7)
"CCleaner" = CCleaner
"CD8424B9400BFF7D34AA18F816C71322AC4BDAA7" = Windows-Treiberpaket - Nokia Modem (05/24/2007 6.84.0.1)
"Cossacks : Back To War" = Cossacks - Back To War
"E092B2EBF2FFE83E896F8F7F829A7B5D7D1B2F9D" = Windows-Treiberpaket - Nokia Modem (03/13/2008 6.86.0.1)
"Fraps" = Fraps
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{CADDE354-C78C-46CB-A006-E2B178EFC271}" = Rise Of Legends
"Lame MP3 Codec (for the ACM)" = Lame ACM MP3 Codec
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.0 German Language Pack" = Microsoft .NET Framework 3.0 German Language Pack
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.12)" = Mozilla Firefox (3.5.12)
"Mp3tag" = Mp3tag v2.46a
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia Ovi Suite" = Nokia Ovi Suite
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010 (Beta)
"Steam App 240" = Counter-Strike: Source
"SystemRequirementsLab" = System Requirements Lab
"TeamViewer 4" = TeamViewer 4
"Uninstall_is1" = Uninstall 1.0.0.1
"VP3 Codec Version 3.2.6.1" = VP3 Codec Version 3.2.6.1
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"XviD_is1" = XviD MPEG-4 Video Codec
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 06.09.2010 14:28:39 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:01 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:03 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:03 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 07.09.2010 14:41:07 | Computer Name = FINN | Source = crypt32 | ID = 131083
Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich
nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel
in der signierten Datei. .
Error - 07.09.2010 14:41:07 | Computer Name = FINN | Source = crypt32 | ID = 131083
Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich
nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel
in der signierten Datei. .
Error - 07.09.2010 17:31:29 | Computer Name = FINN | Source = CVHSVC | ID = 100
Description = Nur zur Information. (Patch task for {20140062-0062-0407-0000-0000000FF1CE}):
DownloadLatest Failed:
Error - 07.09.2010 18:50:42 | Computer Name = FINN | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung javara.exe, Version 1.16.1.1763, fehlgeschlagenes
Modul ntdll.dll, Version 5.1.2600.5755, Fehleradresse 0x0000100b.
Error - 08.09.2010 10:48:11 | Computer Name = FINN | Source = MsiInstaller | ID = 11706
Description = Produkt: Microsoft Office XP Standard -- Fehler 1706. Setup kann die
benötigten Dateien nicht finden. Überprüfen Sie Ihre Verbindung mit dem Netzwerk
oder dem CD-ROM-Laufwerk. Um mehr über mögliche Lösungen für dieses Problem zu
erfahren, sehen sie bitte nach in C:\Programme\Microsoft Office\Office10\1031\SETUP.HLP.
Error - 08.09.2010 10:48:12 | Computer Name = FINN | Source = MsiInstaller | ID = 1024
Description = Produkt: Microsoft Office XP Standard - Update "{4757E865-0292-4E04-940D-9C51052A5DD6}"
konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle
erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen
behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung
der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
[ System Events ]
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:11 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:49:02 | Computer Name = FINN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "int15.sys" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error - 08.09.2010 12:49:02 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:49:24 | Computer Name = FINN | Source = Service Control Manager | ID = 7034
Description = Dienst "TuneUp WinStyler Theme Service" wurde unerwartet beendet.
Dies ist bereits 1 Mal passiert.
Error - 09.09.2010 14:51:12 | Computer Name = FINN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "int15.sys" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error - 09.09.2010 14:51:12 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:
%%126
< End of report >
PS: Firefox ist immernoch drauf, weil ich keinen Internetexplorer installiert habe. Soll ich mir den draufladen oder lieber das Setup von Firefox? Denn ohne Browser wäre ja iwie blöd... |
|
09.09.2010, 21:52
| #38 | |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php"Zitat:
=> Internet Explorer 8 Windows 7 Security Features Malware Privacy Sei sicher, ich liefere dir nur Links, die selbst mit dem MSIE (würg) sicher sind. ciao, andreas
__________________ Kein Support per PN! Das ist hier ein Forum und keine Privatbetreuung! Für alle NeuenPrivatbetreuung nur gegen Bezahlung und ich koste sehr teuer. Anleitungen Virenscanner Kompromittierung unvermeidbar? |
|
09.09.2010, 21:56
| #39 |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" Ok dann verabschiede ich mich mal von Firefox ;( Kann ich Bookmarks, etc extern speichern oder soll alles weg? Und brauchst du noch neue Scans? LG Finn |
|
09.09.2010, 22:59
| #40 | |||
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php"Zitat:
Zitat:
Zitat:
Für die Skripte brauche ich einige Zeit, du kannst weitermachen mit: 1.) Mit Online-Scans kann man den kompletten Rechner auf Schädlinge prüfen lassen. Nimm am besten gleich den Internet Explorer. Vorbereitung
ESET Online Scanner Bitte während der Online-Scans evtl. vorhandene externe Festplatten einschalten! Bitte während der Scans alle Hintergrundwächter (Anti-Virus-Programm, Firewall, Skriptblocking und ähnliches) abstellen und nicht vergessen, alles hinterher wieder einzuschalten.
2.) Kaspersky - Onlinescanner Dieser Scanner entfernt die Funde nicht, gibt aber einen guten Überblick über die vorhandene Malware. ---> hier herunterladen => Kaspersky Online Scanner => Hinweise zu älteren Versionen beachten! => Voraussetzung: Internet Explorer 6.0 oder höher => die nötigen ActiveX-Steuerelemente installieren => Update der Signaturen => Weiter => Scan-Einstellungen => Standard wählen => OK => Link "Arbeitsplatz" anklicken => Scan beginnt automatisch => Untersuchung wurde abgeschlossen => Protokoll speichern als => Dateityp auf .txt umstellen => auf dem Desktop als Kaspersky.txt speichern => Log hier posten => Deinstallation => Systemsteuerung => Software => Kaspersky Online Scanner entfernen 3.) Überprüfe den Rechner mit PrevXCSI. Poste ein Screenshot falls etwas gefunden werden sollte oder poste Namen und Pfade. ciao, andreas
__________________ Kein Support per PN! Das ist hier ein Forum und keine Privatbetreuung! Für alle NeuenPrivatbetreuung nur gegen Bezahlung und ich koste sehr teuer. Anleitungen Virenscanner Kompromittierung unvermeidbar? |
|
10.09.2010, 00:00
| #41 | |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php"Zitat:
IE suckt  |
|
10.09.2010, 06:00
| #42 | |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" ESET hat nichts gefunden Zitat:
|
|
10.09.2010, 06:08
| #43 |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" Prevx: Anzahl der Prüfungen: 2 Gesamtanzahl bereinigte Bedrohungen: 0 Aktive Bedrohungen: 0 |
|
10.09.2010, 22:54
| #44 | |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php"Zitat:
Eset und Prevx wieder deinstallieren. Zwischenfrage: Wie geht es dem Rechner? ciao, andreas
__________________ Kein Support per PN! Das ist hier ein Forum und keine Privatbetreuung! Für alle NeuenPrivatbetreuung nur gegen Bezahlung und ich koste sehr teuer. Anleitungen Virenscanner Kompromittierung unvermeidbar? |
|
11.09.2010, 11:58
| #45 |
| | Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" ESET und Prevx sind wieder runter. Rechner läuft immernoch und abgesehen von der Tastatur läuft auch noch alles einwandfrei, zumindest ist mir sonst noch nichts aufgefallen. Ich werd's dir aber hier reinschreiben, falls ich noch etwas bemerken sollte  LG Finn /edit: Vllt ist das Scrollen der Maus ein bisschen sensitiver geworden... aber das kann man ja iwo auch noch wieder einstellen. |
|
| Themen zu Skype Virus: "is this your pic h**p://anitapunja.net/photo_id.php" |
| bereits, eingefangen, gefangen, geholfen, gen, link, maßnahme, maßnahmen, msn, schei, skype, skype virus, this, troja, trojaner, verschicke, versuch, versucht, virus |
drücken.
Button.
Linear-Darstellung
