Hi,

Du must den Inhalt der angegebenen codebox in das große Eingabefeld kopieren und dann den Button "Quick Scan" klicken...

Was treibt der Rechner (wie läuft er)?

chris

Zitat von Chris4You

Was treibt der Rechner (wie läuft er)?

bis auf vorgenanntes unverändert unauffällig.

im Anhang das fehlende Quickscan-Protokoll (es wurde wieder nur eines angezeigt). Da keine speziellen Einstellungsanweisungen auf meine Nachfrage erfolgten haben ich die Einstellungen von OTL so belassen wie sie bei der Programmeröffnung vorgegeben waren und den Rest wie vorgegeben erledigt.OTL Logfile:

OTL logfile created on: 28.10.2010 01:42:32 - Run 4
OTL by OldTimer - Version 3.2.15.2     Folder = C:\Eigene Dateien (akt,vollst)\92b._Viren + Scanner + Firewall\1b._eigene Viren +Abhilfemaßnahmen\1._Viren-Entfern + Testprogr\OTL-Logfile\Software
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1.014,00 Mb Total Physical Memory | 503,00 Mb Available Physical Memory | 50,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 69,00% Paging File free
Paging file location(s): E:\pagefile.sys 720 1440 [binary data]
 
%SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Programme
Drive C: | 39,36 Gb Total Space | 23,20 Gb Free Space | 58,96% Space Free | Partition Type: FAT32
Drive E: | 35,15 Gb Total Space | 9,75 Gb Free Space | 27,73% Space Free | Partition Type: NTFS
 
Computer Name: *** | User Name: franz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 90 Days
 
========== Processes (SafeList) ==========
 
PRC - [2010.10.18 17:59:28 | 002,067,808 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\Programme\AVG\AVG9\avgtray.exe
PRC - [2010.10.18 16:58:28 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Eigene Dateien (akt,vollst)\92b._Viren + Scanner + Firewall\1b._eigene Viren +Abhilfemaßnahmen\1._Viren-Entfern + Testprogr\OTL-Logfile\Software\OTL.exe
PRC - [2010.10.13 19:35:40 | 000,134,808 | ---- | M] (Google Inc.) -- E:\Programme\Google\Update\1.2.183.39\GoogleCrashHandler.exe
PRC - [2010.09.28 16:04:57 | 002,424,560 | ---- | M] (SUPERAntiSpyware.com) -- E:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2010.09.22 20:58:31 | 000,621,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\Programme\AVG\AVG9\avgnsx.exe
PRC - [2010.09.21 20:37:40 | 000,932,288 | ---- | M] (Adobe Systems Incorporated) -- E:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe
PRC - [2010.08.20 21:45:26 | 001,164,584 | ---- | M] () -- E:\Programme\DivX\DivX Update\DivXUpdate.exe
PRC - [2010.08.11 01:56:59 | 000,515,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\Programme\AVG\AVG9\avgrsx.exe
PRC - [2010.08.11 01:56:49 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\Programme\AVG\AVG9\avgwdsvc.exe
PRC - [2010.08.11 01:54:37 | 000,723,296 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\Programme\AVG\AVG9\avgcsrvx.exe
PRC - [2010.08.11 01:54:32 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\Programme\AVG\AVG9\avgchsvx.exe
PRC - [2010.07.29 03:25:39 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- E:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
PRC - [2010.05.21 00:52:06 | 011,312,128 | ---- | M] (OpenOffice.org) -- E:\Programme\OpenOffice.org 3\program\soffice.bin
PRC - [2010.05.21 00:52:04 | 011,318,784 | ---- | M] (OpenOffice.org) -- E:\Programme\OpenOffice.org 3\program\soffice.exe
PRC - [2010.04.08 16:46:20 | 000,154,152 | ---- | M] (Authentium, Inc) -- E:\Programme\Gemeinsame Dateien\Authentium\AntiVirus5\vseqrts.exe
PRC - [2010.04.08 16:46:18 | 000,117,288 | R--- | M] (Authentium, Inc) -- E:\Programme\Gemeinsame Dateien\Authentium\AntiVirus5\vsedsps.exe
PRC - [2010.04.08 16:46:12 | 000,117,288 | R--- | M] (Authentium, Inc) -- E:\Programme\Gemeinsame Dateien\Authentium\AntiVirus5\vseamps.exe
PRC - [2010.02.18 11:43:18 | 000,248,040 | ---- | M] (Sun Microsystems, Inc.) -- E:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
PRC - [2009.10.30 17:06:47 | 002,276,744 | ---- | M] (mquadr.at software engineering und consulting GmbH) -- E:\Programme\Web.de\LiveUpdate\m2LUTray.exe
PRC - [2009.10.01 21:23:58 | 000,146,360 | ---- | M] (Panasonic Corporation) -- E:\Programme\Panasonic\PHOTOfunSTUDIO 4.0 HD\AutoStartupService.exe
PRC - [2009.06.19 11:44:02 | 000,195,072 | ---- | M] (ArcSoft Inc.) -- E:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2009.02.06 17:02:14 | 000,109,056 | ---- | M] (ArcSoft Inc.) -- E:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2008.04.22 18:23:02 | 000,098,488 | ---- | M] (SiSoftware) -- E:\Programme\SiSoftware\SiSoftware Sandra Lite XII.SP2c\RpcAgentSrv.exe
PRC - [2007.12.21 15:59:12 | 002,270,456 | ---- | M] (BinarySense, Inc.) -- E:\Programme\BinarySense\HDDlife 3\HDDlifePro.exe
PRC - [2007.12.13 16:13:40 | 000,820,472 | ---- | M] (BinarySense, Inc.) -- E:\Programme\Gemeinsame Dateien\BinarySense\hldasvc.exe
PRC - [2007.07.29 19:13:38 | 000,253,952 | ---- | M] () -- E:\Programme\Free Download Manager\FUM\fum.exe
PRC - [2007.06.15 12:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) -- E:\WINDOWS\system32\bgsvcgen.exe
PRC - [2007.06.10 18:02:38 | 000,040,960 | ---- | M] () -- E:\Programme\Free Download Manager\FUM\fumoei.exe
PRC - [2007.04.11 03:05:42 | 000,262,144 | ---- | M] (Silicon Integrated Systems Corporation) -- E:\WINDOWS\system32\sistray.exe
PRC - [2005.07.08 17:24:46 | 000,871,424 | ---- | M] (Nero AG) -- E:\Programme\Ahead\InCD\InCDsrv.exe
PRC - [2005.07.08 16:25:10 | 001,397,760 | ---- | M] (Nero AG) -- E:\Programme\Ahead\InCD\InCD.exe
PRC - [2005.04.12 10:11:26 | 000,229,376 | ---- | M] (CST) -- E:\Programme\lg_fwupdate\fwupdate.exe
PRC - [2004.11.02 20:24:46 | 000,032,768 | ---- | M] (Cyberlink Corp.) -- E:\Programme\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
PRC - [2004.08.04 06:57:54 | 001,035,264 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\explorer.exe
PRC - [2002.09.20 14:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) -- E:\Programme\Analog Devices\SoundMAX\SMAgent.exe
 
 
========== Modules (SafeList) ==========
 
MOD - [2010.10.18 16:58:28 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Eigene Dateien (akt,vollst)\92b._Viren + Scanner + Firewall\1b._eigene Viren +Abhilfemaßnahmen\1._Viren-Entfern + Testprogr\OTL-Logfile\Software\OTL.exe
MOD - [2010.07.29 03:27:15 | 000,040,960 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll
MOD - [2008.05.15 15:34:57 | 000,499,712 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\system32\msvcp71.dll
MOD - [2008.05.15 15:34:57 | 000,348,160 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\system32\msvcr71.dll
MOD - [2004.08.04 06:54:28 | 001,050,624 | R--- | M] (Microsoft Corporation) -- E:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
MOD - [2004.08.04 05:01:18 | 000,102,400 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\system32\msscript.ocx
 
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Auto | Stopped] -- C:\WINDOWS\system32\wuauserv.dll -- (wuauserv)
SRV - [2010.10.06 11:31:48 | 000,517,448 | ---- | M] () [On_Demand | Stopped] -- E:\Programme\AVG\AVG9\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2010.08.11 01:56:49 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- E:\Programme\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2010.04.08 16:46:20 | 000,154,152 | ---- | M] (Authentium, Inc) [Auto | Running] -- E:\Programme\Gemeinsame Dateien\Authentium\AntiVirus5\vseqrts.exe -- (vseqrts)
SRV - [2010.04.08 16:46:18 | 000,117,288 | R--- | M] (Authentium, Inc) [Auto | Running] -- E:\Programme\Gemeinsame Dateien\Authentium\AntiVirus5\vsedsps.exe -- (vsedsps)
SRV - [2010.04.08 16:46:12 | 000,117,288 | R--- | M] (Authentium, Inc) [Auto | Running] -- E:\Programme\Gemeinsame Dateien\Authentium\AntiVirus5\vseamps.exe -- (vseamps)
SRV - [2009.02.06 17:02:14 | 000,109,056 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- E:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2008.04.22 18:23:02 | 000,098,488 | ---- | M] (SiSoftware) [Auto | Running] -- E:\Programme\SiSoftware\SiSoftware Sandra Lite XII.SP2c\RpcAgentSrv.exe -- (SandraAgentSrv)
SRV - [2007.12.13 16:13:40 | 000,820,472 | ---- | M] (BinarySense, Inc.) [Auto | Running] -- E:\Programme\Gemeinsame Dateien\BinarySense\hldasvc.exe -- (HDDlife HDD Access service)
SRV - [2007.06.15 12:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- E:\WINDOWS\System32\bgsvcgen.exe -- (bgsvcgen)
SRV - [2005.11.14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- E:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2005.07.08 17:24:46 | 000,871,424 | ---- | M] (Nero AG) [Auto | Running] -- E:\Programme\Ahead\InCD\InCDsrv.exe -- (InCDsrv)
SRV - [2002.09.20 14:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- E:\Programme\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- E:\DOKUME~1\franz\LOKALE~1\Temp\catchme.sys -- (catchme)
DRV - [2010.08.11 01:57:02 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010.08.11 01:54:38 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010.06.02 20:14:24 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- E:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2010.05.10 20:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- E:\Programme\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.02.17 20:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- E:\Programme\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009.05.08 11:22:28 | 001,358,720 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2009.03.09 03:36:58 | 006,278,016 | R--- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2008.10.31 05:38:08 | 004,942,336 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008.10.30 15:14:20 | 000,117,888 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008.10.16 17:14:00 | 000,030,720 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\l251x86.sys -- (AtcL002)
DRV - [2008.03.10 19:30:36 | 000,021,408 | ---- | M] (SiSoftware) [Kernel | On_Demand | Stopped] -- E:\Programme\SiSoftware\SiSoftware Sandra Lite XII.SP2c\WNt500x86\sandra.sys -- (SANDRA)
DRV - [2008.02.14 14:12:00 | 001,389,056 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\monfilt.sys -- (monfilt)
DRV - [2007.04.10 21:30:16 | 000,018,304 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\srvkp.sys -- (SiSkp)
DRV - [2007.04.10 21:09:08 | 000,321,024 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\sisgrp.sys -- (SiS315)
DRV - [2006.12.20 06:00:00 | 000,041,600 | R--- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\SiSGbeXP.sys -- (SiSGbeXP)
DRV - [2006.11.10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2006.02.20 19:17:40 | 000,033,408 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- E:\WINDOWS\System32\drivers\cdrbsdrv.sys -- (cdrbsdrv)
DRV - [2005.07.08 17:17:54 | 000,099,584 | ---- | M] (Nero AG) [File_System | Disabled | Running] -- E:\WINDOWS\System32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2005.07.08 17:17:36 | 000,029,696 | ---- | M] (Nero AG) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\InCDpass.sys -- (InCDPass)
DRV - [2005.07.08 16:17:32 | 000,028,672 | ---- | M] (Nero AG) [Kernel | System | Running] -- E:\WINDOWS\System32\drivers\InCDrm.sys -- (incdrm)
DRV - [2005.03.01 06:01:40 | 000,392,704 | ---- | M] (Sensaura) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\senfilt.sys -- (senfilt)
DRV - [2005.01.07 17:07:18 | 000,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus)
DRV - [2004.09.14 06:55:44 | 000,088,960 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\MidiSyn.sys -- (MidiSyn)
DRV - [2001.08.17 13:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.de/
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - E:\Programme\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "WEB.DE Suche"
FF - prefs.js..browser.search.order.1: "GMX Suche"
FF - prefs.js..browser.search.order.2: "1und1 Suche"
FF - prefs.js..browser.search.order.3: "amazon.de"
FF - prefs.js..browser.search.order.4: "WEB.DE Suche"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://web.de"
FF - prefs.js..extensions.enabledItems: {6E19037A-12E3-4295-8915-ED48BC341614}:1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {95f24680-9e31-11da-a746-0800200c9a66}:0.1.5.5
FF - prefs.js..extensions.enabledItems: {a82d0125-000a-4a57-abbc-5d4b0dbaab54}:1.7.2
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.3
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.825
FF - prefs.js..extensions.enabledItems: avg@igeared:4.002.023.004
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..keyword.URL: "hxxp://wa.ui-portal.de/webde/webde/s?produkte.browser.link.searchlink&s_brand=webde&t_link=searchlink&ns_type=clickin&ns_url=hxxp://go.web.de/suchbox/webdesuche/?origin=product&su="
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: E:\Programme\AVG\AVG9\Firefox [2010.10.26 17:00:25 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: E:\Programme\AVG\AVG9\Toolbar\Firefox\avg@igeared [2010.10.26 16:11:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010.07.29 03:27:15 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0b3\extensions\\Components: E:\Programme\Mozilla Firefox 4.0 Beta 1\components [2010.09.20 17:20:42 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0b3\extensions\\Plugins: E:\Programme\Mozilla Firefox 4.0 Beta 1\plugins [2010.08.16 20:31:24 | 000,000,000 | ---D | M]
 
[2009.01.31 01:36:14 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Extensions
[2010.10.27 05:26:12 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Firefox\Profiles\9tt1pydx.default\extensions
[2010.04.10 02:19:21 | 000,000,000 | ---D | M] (WEB.DE Firefox Addon) -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Firefox\Profiles\9tt1pydx.default\extensions\{a82d0125-000a-4a57-abbc-5d4b0dbaab54}
[2010.08.08 21:18:10 | 000,000,000 | ---D | M] (No name found) -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Firefox\Profiles\9tt1pydx.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.01.25 01:27:38 | 000,005,591 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Firefox\Profiles\9tt1pydx.default\searchplugins\1und1-suche.xml
[2010.01.25 01:27:37 | 000,001,371 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Firefox\Profiles\9tt1pydx.default\searchplugins\amazonde.xml
[2010.01.25 01:27:37 | 000,010,605 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Firefox\Profiles\9tt1pydx.default\searchplugins\gmx-suche.xml
[2010.04.16 03:00:00 | 000,001,420 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Firefox\Profiles\9tt1pydx.default\searchplugins\preisvergleich.xml
[2010.01.25 01:27:38 | 000,005,588 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Mozilla\Firefox\Profiles\9tt1pydx.default\searchplugins\webde-suche.xml
[2010.07.13 22:39:12 | 000,000,000 | ---D | M] -- E:\Programme\Mozilla Firefox\extensions
[2010.05.17 23:18:25 | 000,000,000 | ---D | M] (Java Console) -- E:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.04.12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- E:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
 
O1 HOSTS File: ([2010.10.23 22:21:53 | 000,000,027 | ---- | M]) - E:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - E:\Programme\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - E:\Programme\Canon\Easy-WebPrint\EWPBrowseLoader.dll ()
O2 - BHO: (no name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found.
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - E:\Programme\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\Programme\Google\GoogleToolbar1.dll (Google Germany GmbH)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - E:\Programme\Free Download Manager\iefdm2.dll ()
O2 - BHO: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\Programme\Google\GoogleToolbar1.dll (Google Germany GmbH)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - E:\Programme\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - E:\Programme\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\ShellBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - E:\Programme\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - e:\Programme\Google\GoogleToolbar1.dll (Google Germany GmbH)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - E:\Programme\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [Adobe ARM] E:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ArcSoft Connection Service] E:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] E:\Programme\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DivXUpdate] E:\Programme\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Easy-PrintToolBox] E:\Programme\Canon\Easy-PrintToolBox\BJPSMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [InCD] E:\Programme\Ahead\InCD\InCD.exe (Nero AG)
O4 - HKLM..\Run: [LGODDFU] E:\Programme\lg_fwupdate\fwupdate.exe (CST)
O4 - HKLM..\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [RemoteControl] E:\Programme\CyberLink DVD Solution\PowerDVD\PDVDServ.exe (Cyberlink Corp.)
O4 - HKLM..\Run: [SiSPower] E:\WINDOWS\System32\SiSPower.dll (Silicon Integrated Systems Corporation)
O4 - HKLM..\Run: [SoundMAXPnP] E:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] E:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TkBellExe] E:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [WEB.DE Update] E:\Programme\Web.de\LiveUpdate\m2LUTray.exe (mquadr.at software engineering und consulting GmbH)
O4 - HKCU..\Run: [Free Upload Manager] E:\Programme\Free Download Manager\fum\fum.exe ()
O4 - HKCU..\Run: [Free Uploader Oe Integration] E:\Programme\Free Download Manager\FUM\fumoei.exe ()
O4 - HKCU..\Run: [SUPERAntiSpyware] E:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - Startup: E:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk = E:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: E:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\PHOTOfunSTUDIO 4.0 HD Edition.lnk = E:\Programme\Panasonic\PHOTOfunSTUDIO 4.0 HD\AutoStartupService.exe (Panasonic Corporation)
O4 - Startup: E:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Utility Tray.lnk = E:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
O4 - Startup: E:\Dokumente und Einstellungen\franz\Startmenü\Programme\Autostart\HDDlife.lnk = E:\Programme\BinarySense\HDDlife 3\HDDlifePro.exe (BinarySense, Inc.)
O4 - Startup: E:\Dokumente und Einstellungen\franz\Startmenü\Programme\Autostart\OpenOffice.org 3.2.lnk = E:\Programme\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Alles mit FDM herunterladen - E:\Programme\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Auswahl mit FDM herunterladen - E:\Programme\Free Download Manager\dlselected.htm ()
O8 - Extra context menu item: Datei mit FDM herunterladen - E:\Programme\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Easy-WebPrint - Drucken - E:\Programme\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint - Schnelldruck - E:\Programme\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint - Vorschau - E:\Programme\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint - Zu Druckliste hinzufügen - E:\Programme\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Free YouTube Download - E:\Dokumente und Einstellungen\franz\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - E:\Dokumente und Einstellungen\franz\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Videos mit FDM herunterladen - E:\Programme\Free Download Manager\dlfvideo.htm ()
O9 - Extra Button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - E:\Programme\Free Download Manager\FUM\fumiebtn.dll ()
O15 - HKCU\..Trusted Domains: comdirect.de ([isht] https in Vertrauenswürdige Sites)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1 196.3.81.5 200.88.127.22
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - E:\Programme\AVG\AVG9\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\hddlife {BD758015-47D9-477A-8873-4B688A2BC0E2} - E:\Programme\Gemeinsame Dateien\BinarySense\hlAPP.dll (BinarySense, Inc.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - E:\Programme\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - E:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - E:\Programme\SUPERAntiSpyware\SASWINLO.DLL - E:\Programme\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - E:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - E:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - E:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.05.14 16:17:12 | 000,000,134 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: 6to4 -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: wuauserv - C:\WINDOWS\system32\wuauserv.dll File not found
 
 
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
 
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: vsmon - Service
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offlinebrowsingpaket
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection E:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer-Hilfe
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection E:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsererweiterungen
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Zugang zu MSN Site
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - E:\WINDOWS\system32\Rundll32.exe E:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9309DD7E-EBFE-3C95-8B47-30D3A012F606} - .NET Framework
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML-Datenbindung
ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} - 
ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer-Hauptschriftarten
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML-Hilfe
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - E:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
 
Drivers32: msacm.ac3filter - E:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.at3 - E:\WINDOWS\System32\atrac3.acm ()
Drivers32: msacm.divxa32 - E:\WINDOWS\System32\DivXa32.acm (Packed With Joy !)
Drivers32: msacm.iac2 - E:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - E:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codec - E:\WINDOWS\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - E:\WINDOWS\System32\lameACM.acm (hxxp://www.mp3dev.org/)
Drivers32: msacm.sl_anet - E:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - E:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - E:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - E:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.ffds - E:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.hfyu - E:\WINDOWS\System32\huffyuv.dll (Disappearing Inc.)
Drivers32: vidc.iv31 - E:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - E:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - E:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - E:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.vp60 - E:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.vp61 - E:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.vp62 - E:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.xvid - E:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - E:\WINDOWS\System32\DivX.dll (DivX, Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (54619756233228288)
 
========== Files/Folders - Created Within 90 Days ==========
 
[2010.10.27 05:26:30 | 000,000,000 | -HSD | C] -- E:\RECYCLER
[2010.10.24 14:43:15 | 000,000,000 | ---D | C] -- E:\WINDOWS\CSC
[2010.10.23 22:41:52 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\PriceGong
[2010.10.23 22:09:24 | 000,212,480 | ---- | C] (SteelWerX) -- E:\WINDOWS\SWXCACLS.exe
[2010.10.23 22:09:24 | 000,161,792 | ---- | C] (SteelWerX) -- E:\WINDOWS\SWREG.exe
[2010.10.23 22:09:24 | 000,136,704 | ---- | C] (SteelWerX) -- E:\WINDOWS\SWSC.exe
[2010.10.23 22:09:24 | 000,031,232 | ---- | C] (NirSoft) -- E:\WINDOWS\NIRCMD.exe
[2010.10.23 22:09:14 | 000,000,000 | ---D | C] -- E:\WINDOWS\ERDNT
[2010.10.23 21:57:19 | 000,000,000 | ---D | C] -- E:\Qoobox
[2010.10.20 20:31:18 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\SUPERAntiSpyware.com
[2010.10.20 20:31:18 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com
[2010.10.20 20:30:52 | 000,000,000 | ---D | C] -- E:\Programme\SUPERAntiSpyware
[2010.10.20 02:44:46 | 000,000,000 | ---D | C] -- E:\Programme\CyberDefender
[2010.10.20 02:44:33 | 000,000,000 | ---D | C] -- E:\Programme\Gemeinsame Dateien\Authentium
[2010.10.18 02:17:27 | 000,446,464 | ---- | C] (OldTimer Tools) -- E:\Dokumente und Einstellungen\franz\Desktop\TFC.exe
[2010.10.17 18:28:46 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Malwarebytes
[2010.10.17 18:28:39 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- E:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.10.17 18:28:38 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- E:\WINDOWS\System32\drivers\mbam.sys
[2010.10.17 18:28:38 | 000,000,000 | ---D | C] -- E:\Programme\Malwarebytes' Anti-Malware
[2010.10.17 18:28:38 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.08.16 21:01:39 | 000,000,000 | R--D | C] -- E:\Dokumente und Einstellungen\franz\Eigene Dateien\Eigene Bilder
[2010.08.16 20:30:46 | 000,000,000 | ---D | C] -- E:\Programme\QuickTime
[2010.08.16 20:30:43 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple Computer
[2010.08.16 20:30:18 | 000,000,000 | ---D | C] -- E:\Programme\Gemeinsame Dateien\Apple
[2010.08.16 20:30:11 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\Apple
[2010.08.16 20:30:01 | 000,000,000 | ---D | C] -- E:\Programme\Apple Software Update
[2010.08.16 20:30:01 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple
[2010.08.16 20:29:30 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\Apple Computer
[2010.08.16 20:28:46 | 000,000,000 | ---D | C] -- E:\Programme\ISL
[2010.08.16 20:28:15 | 000,000,000 | ---D | C] -- E:\WINDOWS\Downloaded Installations
[2010.08.16 20:25:53 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\ArcSoft
[2010.08.16 20:25:49 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\ArcSoft
[2010.08.16 20:25:22 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ArcSoft
[2010.08.16 20:24:43 | 000,018,688 | ---- | C] (Arcsoft, Inc.) -- E:\WINDOWS\System32\drivers\afc.sys
[2010.08.16 20:24:33 | 000,000,000 | ---D | C] -- E:\Programme\Gemeinsame Dateien\ArcSoft
[2010.08.16 20:24:33 | 000,000,000 | ---D | C] -- E:\Programme\ArcSoft
[2010.08.16 20:17:35 | 000,033,408 | ---- | C] (B.H.A Corporation) -- E:\WINDOWS\System32\drivers\cdrbsdrv.sys
[2010.08.16 20:17:33 | 000,145,504 | ---- | C] (B.H.A Corporation) -- E:\WINDOWS\System32\bgsvcgen.exe
[2010.08.16 20:17:33 | 000,059,488 | ---- | C] (B.H.A Corporation) -- E:\WINDOWS\System32\GenSvcInst.exe
[2010.08.16 20:16:09 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\InstallShield
[2010.08.16 20:06:14 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Panasonic
[2010.08.16 20:06:13 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\Panasonic
[2010.08.16 19:50:48 | 000,000,000 | ---D | C] -- E:\Programme\Microsoft Synchronization Services
[2010.08.16 19:50:47 | 000,000,000 | ---D | C] -- E:\Programme\Microsoft SQL Server Compact Edition
[2010.08.16 16:25:38 | 000,000,000 | ---D | C] -- E:\Programme\Panasonic
[2010.08.11 01:56:58 | 000,012,536 | ---- | C] (AVG Technologies CZ, s.r.o.) -- E:\WINDOWS\System32\avgrsstx.dll
[2010.08.10 02:01:17 | 000,000,000 | ---D | C] -- E:\Programme\Seagate
[2010.08.08 21:18:17 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\DVDVideoSoftTB
[2010.08.08 21:18:17 | 000,000,000 | ---D | C] -- E:\Programme\Conduit
[2010.08.08 21:18:17 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\Conduit
[2010.08.08 21:18:16 | 000,000,000 | ---D | C] -- E:\Programme\DVDVideoSoftTB
[2010.08.08 21:18:09 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\DVDVideoSoftIEHelpers
[2010.08.08 21:17:57 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Eigene Dateien\DVDVideoSoft
[2010.08.08 21:17:43 | 000,000,000 | ---D | C] -- E:\Programme\Gemeinsame Dateien\DVDVideoSoft
[2010.08.08 21:17:43 | 000,000,000 | ---D | C] -- E:\Programme\DVDVideoSoft
[2010.08.06 22:07:45 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\franz\Eigene Dateien\Eigene Musik
[5 E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
 
========== Files - Modified Within 90 Days ==========
 
[2010.10.28 01:32:52 | 066,884,656 | ---- | M] () -- E:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010.10.28 01:29:35 | 000,000,813 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Startmenü\Programme\Autostart\HDDlife.lnk
[2010.10.28 01:28:56 | 000,000,284 | ---- | M] () -- E:\WINDOWS\lgfwup.ini
[2010.10.28 01:28:21 | 000,001,084 | ---- | M] () -- E:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cb6afd21e51ec8.job
[2010.10.28 01:28:19 | 000,000,270 | ---- | M] () -- E:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-725345543-813497703-839522115-1003.job
[2010.10.28 01:27:39 | 000,002,048 | --S- | M] () -- E:\WINDOWS\bootstat.dat
[2010.10.27 16:08:26 | 000,002,477 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Desktop\Microsoft Word.lnk
[2010.10.27 01:11:38 | 000,139,264 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.10.26 16:02:06 | 000,002,206 | ---- | M] () -- E:\WINDOWS\System32\wpa.dbl
[2010.10.25 17:42:15 | 000,294,912 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Desktop\2mkrymfp.exe
[2010.10.23 22:21:53 | 000,000,027 | ---- | M] () -- E:\WINDOWS\System32\drivers\etc\hosts
[2010.10.23 21:06:01 | 003,884,040 | R--- | M] () -- E:\Dokumente und Einstellungen\franz\Desktop\ComboFix.exe
[2010.10.23 02:11:26 | 000,000,278 | ---- | M] () -- E:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-813497703-839522115-1003.job
[2010.10.22 16:58:00 | 000,000,276 | ---- | M] () -- E:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.10.20 20:30:56 | 000,001,642 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010.10.18 02:17:27 | 000,446,464 | ---- | M] (OldTimer Tools) -- E:\Dokumente und Einstellungen\franz\Desktop\TFC.exe
[2010.10.17 18:28:42 | 000,000,676 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.10.17 02:02:56 | 000,000,116 | ---- | M] () -- E:\WINDOWS\NeroDigital.ini
[2010.10.12 20:51:18 | 000,000,572 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk
[2010.10.04 21:19:02 | 000,001,887 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk
[2010.09.30 15:25:34 | 000,002,243 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2010.09.29 02:27:15 | 000,002,513 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Desktop\Microsoft Excel.lnk
[2010.08.31 01:56:52 | 000,001,484 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Desktop\DivX Movies.lnk
[2010.08.31 01:55:21 | 000,000,757 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\DivX Plus Player.lnk
[2010.08.17 01:26:59 | 000,138,848 | ---- | M] () -- E:\WINDOWS\System32\FNTCACHE.DAT
[2010.08.16 20:31:14 | 000,001,584 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\QuickTime Player.lnk
[2010.08.16 20:25:00 | 000,001,734 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Panorama Maker 4.lnk
[2010.08.16 20:22:36 | 000,001,877 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\PHOTOfunSTUDIO 4.0 HD Edition.lnk
[2010.08.16 20:18:14 | 000,001,811 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\PHOTOfunSTUDIO 4.0 HD Edition.lnk
[2010.08.11 01:57:02 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\WINDOWS\System32\drivers\avgtdix.sys
[2010.08.11 01:56:58 | 000,012,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\WINDOWS\System32\avgrsstx.dll
[2010.08.11 01:54:38 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- E:\WINDOWS\System32\drivers\avgldx86.sys
[2010.08.10 02:02:13 | 000,002,313 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\SeaTools for Windows.lnk
[2010.08.09 20:21:04 | 000,001,041 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Desktop\Free YouTube to MP3 Converter.lnk
[2010.08.08 21:17:49 | 000,000,955 | ---- | M] () -- E:\Dokumente und Einstellungen\franz\Desktop\Free YouTube Download.lnk
[2010.07.30 03:10:10 | 000,000,664 | ---- | M] () -- E:\WINDOWS\System32\d3d9caps.dat
[5 E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010.10.25 17:45:16 | 000,294,912 | ---- | C] () -- E:\Dokumente und Einstellungen\franz\Desktop\2mkrymfp.exe
[2010.10.23 22:09:24 | 000,256,512 | ---- | C] () -- E:\WINDOWS\PEV.exe
[2010.10.23 22:09:24 | 000,098,816 | ---- | C] () -- E:\WINDOWS\sed.exe
[2010.10.23 22:09:24 | 000,080,412 | ---- | C] () -- E:\WINDOWS\grep.exe
[2010.10.23 22:09:24 | 000,077,312 | ---- | C] () -- E:\WINDOWS\MBR.exe
[2010.10.23 22:09:24 | 000,068,096 | ---- | C] () -- E:\WINDOWS\zip.exe
[2010.10.23 21:05:58 | 003,884,040 | R--- | C] () -- E:\Dokumente und Einstellungen\franz\Desktop\ComboFix.exe
[2010.10.20 20:30:56 | 000,001,642 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010.10.17 18:28:42 | 000,000,676 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.10.13 19:36:13 | 000,001,084 | ---- | C] () -- E:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cb6afd21e51ec8.job
[2010.10.04 21:19:02 | 000,001,887 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Google Earth.lnk
[2010.08.31 01:56:52 | 000,001,484 | ---- | C] () -- E:\Dokumente und Einstellungen\franz\Desktop\DivX Movies.lnk
[2010.08.31 01:55:21 | 000,000,757 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\DivX Plus Player.lnk
[2010.08.16 20:31:14 | 000,001,584 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\QuickTime Player.lnk
[2010.08.16 20:30:12 | 000,000,276 | ---- | C] () -- E:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.08.16 20:25:00 | 000,001,734 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Panorama Maker 4.lnk
[2010.08.16 20:22:36 | 000,001,877 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\PHOTOfunSTUDIO 4.0 HD Edition.lnk
[2010.08.16 20:18:14 | 000,001,811 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\PHOTOfunSTUDIO 4.0 HD Edition.lnk
[2010.08.16 19:54:17 | 000,111,932 | ---- | C] () -- E:\WINDOWS\System32\EPPICPrinterDB.dat
[2010.08.16 19:54:17 | 000,031,053 | ---- | C] () -- E:\WINDOWS\System32\EPPICPattern131.dat
[2010.08.16 19:54:17 | 000,027,417 | ---- | C] () -- E:\WINDOWS\System32\EPPICPattern121.dat
[2010.08.16 19:54:17 | 000,026,154 | ---- | C] () -- E:\WINDOWS\System32\EPPICPattern1.dat
[2010.08.16 19:54:17 | 000,024,903 | ---- | C] () -- E:\WINDOWS\System32\EPPICPattern3.dat
[2010.08.16 19:54:17 | 000,021,390 | ---- | C] () -- E:\WINDOWS\System32\EPPICPattern5.dat
[2010.08.16 19:54:17 | 000,020,148 | ---- | C] () -- E:\WINDOWS\System32\EPPICPattern2.dat
[2010.08.16 19:54:17 | 000,013,732 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_EN.cfg
[2010.08.16 19:54:17 | 000,011,811 | ---- | C] () -- E:\WINDOWS\System32\EPPICPattern4.dat
[2010.08.16 19:54:17 | 000,006,442 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_IT.cfg
[2010.08.16 19:54:17 | 000,006,347 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_PT.cfg
[2010.08.16 19:54:17 | 000,006,347 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_BP.cfg
[2010.08.16 19:54:17 | 000,006,335 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_GE.cfg
[2010.08.16 19:54:17 | 000,006,195 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_FR.cfg
[2010.08.16 19:54:17 | 000,006,195 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_CF.cfg
[2010.08.16 19:54:17 | 000,006,122 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_DU.cfg
[2010.08.16 19:54:17 | 000,006,103 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_ES.cfg
[2010.08.16 19:54:17 | 000,005,817 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_KO.cfg
[2010.08.16 19:54:17 | 000,005,436 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_SC.cfg
[2010.08.16 19:54:17 | 000,004,943 | ---- | C] () -- E:\WINDOWS\System32\EPPICPattern6.dat
[2010.08.16 19:54:17 | 000,002,889 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_RU.cfg
[2010.08.16 19:54:17 | 000,002,426 | ---- | C] () -- E:\WINDOWS\System32\EPPICLocal_TC.cfg
[2010.08.16 19:54:17 | 000,001,146 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_DU.dat
[2010.08.16 19:54:17 | 000,001,139 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_PT.dat
[2010.08.16 19:54:17 | 000,001,139 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_BP.dat
[2010.08.16 19:54:17 | 000,001,136 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_ES.dat
[2010.08.16 19:54:17 | 000,001,129 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_FR.dat
[2010.08.16 19:54:17 | 000,001,129 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_CF.dat
[2010.08.16 19:54:17 | 000,001,120 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_IT.dat
[2010.08.16 19:54:17 | 000,001,107 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_GE.dat
[2010.08.16 19:54:17 | 000,001,104 | ---- | C] () -- E:\WINDOWS\System32\EPPICPresetData_EN.dat
[2010.08.16 19:54:17 | 000,000,097 | ---- | C] () -- E:\WINDOWS\System32\PICSDK.ini
[2010.08.10 02:01:23 | 000,002,313 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\SeaTools for Windows.lnk
[2010.08.09 20:21:04 | 000,001,041 | ---- | C] () -- E:\Dokumente und Einstellungen\franz\Desktop\Free YouTube to MP3 Converter.lnk
[2010.08.08 21:17:49 | 000,000,955 | ---- | C] () -- E:\Dokumente und Einstellungen\franz\Desktop\Free YouTube Download.lnk
[2010.07.30 03:10:10 | 000,000,664 | ---- | C] () -- E:\WINDOWS\System32\d3d9caps.dat
[2010.07.17 02:29:13 | 001,417,069 | ---- | C] () -- E:\WINDOWS\System32\ffmpegmt.dll
[2010.07.16 23:24:05 | 000,080,680 | ---- | C] () -- E:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2009.10.13 16:34:36 | 000,147,456 | R--- | C] () -- E:\WINDOWS\System32\igfxCoIn_v4990.dll
[2009.04.10 19:45:19 | 000,000,955 | ---- | C] () -- E:\WINDOWS\cdplayer.ini
[2008.06.27 14:19:46 | 000,000,138 | ---- | C] () -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008.05.30 23:36:38 | 007,118,848 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.mda
[2008.05.29 18:57:06 | 000,000,116 | ---- | C] () -- E:\WINDOWS\NeroDigital.ini
[2008.05.28 04:43:12 | 000,040,960 | ---- | C] () -- E:\Programme\Uninstall_CDS.exe
[2008.05.28 04:33:51 | 000,000,284 | ---- | C] () -- E:\WINDOWS\lgfwup.ini
[2008.05.16 17:56:33 | 000,139,264 | ---- | C] () -- E:\Dokumente und Einstellungen\franz\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.05.15 15:16:23 | 000,000,403 | ---- | C] () -- E:\WINDOWS\ODBC.INI
[2008.05.14 17:33:30 | 000,004,161 | ---- | C] () -- E:\WINDOWS\ODBCINST.INI
[2008.05.14 16:58:40 | 000,092,426 | ---- | C] () -- E:\WINDOWS\VGAsetup.ini
[2008.05.14 16:58:03 | 000,078,549 | ---- | C] () -- E:\WINDOWS\System32\VGAunistlog.ini
[2008.02.15 21:13:04 | 004,469,957 | ---- | C] () -- E:\WINDOWS\System32\libavcodec.dll
[2008.02.15 21:13:04 | 000,830,380 | ---- | C] () -- E:\WINDOWS\System32\ff_x264.dll
[2008.02.15 21:13:04 | 000,828,029 | ---- | C] () -- E:\WINDOWS\System32\xvidcore.dll
[2008.02.15 21:13:04 | 000,741,376 | ---- | C] () -- E:\WINDOWS\System32\audxlib.dll
[2008.02.15 21:13:04 | 000,557,469 | ---- | C] () -- E:\WINDOWS\System32\libmplayer.dll
[2008.02.15 21:13:04 | 000,486,400 | ---- | C] () -- E:\WINDOWS\System32\ff_libfaad2.dll
[2008.02.15 21:13:04 | 000,425,040 | ---- | C] () -- E:\WINDOWS\System32\TomsMoComp_ff.dll
[2008.02.15 21:13:04 | 000,328,334 | ---- | C] () -- E:\WINDOWS\System32\ff_kernelDeint.dll
[2008.02.15 21:13:04 | 000,257,024 | ---- | C] () -- E:\WINDOWS\System32\ff_libdts.dll
[2008.02.15 21:13:04 | 000,183,296 | ---- | C] () -- E:\WINDOWS\System32\ff_samplerate.dll
[2008.02.15 21:13:04 | 000,178,688 | ---- | C] () -- E:\WINDOWS\System32\ff_libmad.dll
[2008.02.15 21:13:04 | 000,146,944 | ---- | C] () -- E:\WINDOWS\System32\ff_tremor.dll
[2008.02.15 21:13:04 | 000,146,098 | ---- | C] () -- E:\WINDOWS\System32\libmpeg2_ff.dll
[2008.02.15 21:13:04 | 000,143,360 | ---- | C] () -- E:\WINDOWS\System32\ff_theora.dll
[2008.02.15 21:13:04 | 000,142,848 | ---- | C] () -- E:\WINDOWS\System32\ff_liba52.dll
[2008.02.15 21:13:04 | 000,113,152 | ---- | C] () -- E:\WINDOWS\System32\ff_unrar.dll
[2008.02.15 21:13:04 | 000,098,304 | ---- | C] () -- E:\WINDOWS\System32\ff_wmv9.dll
[2008.02.15 21:13:04 | 000,097,280 | ---- | C] () -- E:\WINDOWS\System32\ff_realaac.dll
[2008.02.15 21:13:04 | 000,084,480 | ---- | C] () -- E:\WINDOWS\System32\ff_vfw.dll
[2008.02.15 21:13:04 | 000,008,192 | ---- | C] () -- E:\WINDOWS\System32\FLT_ffdshow.dll
[2007.12.29 02:04:02 | 000,159,744 | ---- | C] () -- E:\WINDOWS\System32\mmfinfo.dll
[2007.12.29 02:04:00 | 000,245,248 | ---- | C] () -- E:\WINDOWS\System32\dxr.dll
[2007.12.29 02:03:56 | 000,102,400 | ---- | C] () -- E:\WINDOWS\System32\avss.dll
[2007.12.29 02:03:48 | 000,163,840 | ---- | C] () -- E:\WINDOWS\System32\ts.dll
[2007.12.29 02:03:48 | 000,148,480 | ---- | C] () -- E:\WINDOWS\System32\mkx.dll
[2007.12.29 02:03:46 | 000,141,312 | ---- | C] () -- E:\WINDOWS\System32\mp4.dll
[2007.12.29 02:03:46 | 000,108,032 | ---- | C] () -- E:\WINDOWS\System32\avi.dll
[2007.12.29 02:03:40 | 000,120,832 | ---- | C] () -- E:\WINDOWS\System32\ogm.dll
[2007.12.29 02:03:38 | 000,097,280 | ---- | C] () -- E:\WINDOWS\System32\avs.dll
[2007.12.29 02:03:34 | 000,079,360 | ---- | C] () -- E:\WINDOWS\System32\mkzlib.dll
[2007.12.29 02:03:34 | 000,023,552 | ---- | C] () -- E:\WINDOWS\System32\mkunicode.dll
[2007.12.12 00:34:56 | 003,596,288 | ---- | C] () -- E:\WINDOWS\System32\qt-dx331.dll
[2007.06.28 20:54:10 | 000,180,224 | ---- | C] () -- E:\WINDOWS\System32\xvidvfw.dll
[2004.08.04 06:57:22 | 000,081,920 | ---- | C] () -- E:\WINDOWS\System32\ieencode.dll
[2004.07.17 17:36:38 | 000,027,440 | ---- | C] () -- E:\WINDOWS\System32\drivers\secdrv.sys
[1999.01.23 00:46:58 | 000,065,536 | ---- | C] () -- E:\WINDOWS\System32\MSRTEDIT.DLL
 
========== LOP Check ==========
 
[2010.10.19 17:22:43 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG Security Toolbar
[2010.10.23 22:02:33 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\avg9
[2008.05.17 21:10:47 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2008.05.17 03:24:45 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FreeDownloadManager.ORG
[2010.01.25 01:24:25 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\IEConfiguration1und1
[2008.05.29 22:30:51 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier
[2010.08.16 20:06:14 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Panasonic
[2010.10.28 01:28:07 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2010.01.25 01:25:02 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{363125FC-D631-4A88-96A6-7ABCF7CE18F0}
[2010.01.25 01:24:53 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{B35DFC47-860C-44AC-9747-AD6208420DED}
[2010.04.25 20:53:24 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\AVG9
[2010.07.10 23:31:17 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\BinarySense
[2010.08.09 20:21:31 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\DVDVideoSoftIEHelpers
[2010.07.14 02:20:43 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Foxit
[2010.07.14 02:20:46 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Foxit Software
[2010.10.28 01:44:19 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Free Download Manager
[2010.07.11 23:06:49 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\OpenOffice.org
[2009.06.16 02:09:20 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Opera
[2010.07.17 19:35:55 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\Philipp Winterberg
[2010.10.23 22:41:52 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\franz\Anwendungsdaten\PriceGong
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*.exe >
 
 
< MD5 for: AGP440.SYS  >
[2004.08.04 07:10:00 | 018,782,319 | ---- | M] () .cab file -- E:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2004.08.04 07:10:00 | 018,782,319 | ---- | M] () .cab file -- E:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- E:\WINDOWS\ERDNT\cache\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- E:\WINDOWS\system32\dllcache\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- E:\WINDOWS\system32\drivers\atapi.sys
[2004.08.04 04:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- E:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- E:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys
 
< MD5 for: EVENTLOG.DLL  >
[2009.05.15 15:17:02 | 000,032,768 | ---- | M] (Panasonic Corporation) MD5=18312FA8B6AAEC330A2A9483A77FF650 -- E:\Programme\Panasonic\PHOTOfunSTUDIO 4.0 HD\HDWTools\EventLog.dll
[2009.09.16 13:07:32 | 000,043,008 | ---- | M] (Panasonic Corporation) MD5=251525E2648747393DC5180B5ABDD762 -- E:\Programme\Panasonic\PHOTOfunSTUDIO 4.0 HD\Core\EventLog\EventLog.dll
[2004.08.04 06:57:20 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- E:\WINDOWS\ERDNT\cache\eventlog.dll
[2004.08.04 06:57:20 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- E:\WINDOWS\system32\dllcache\eventlog.dll
[2004.08.04 06:57:20 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- E:\WINDOWS\system32\eventlog.dll
 
< MD5 for: NETLOGON.DLL  >
[2004.08.04 06:57:32 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- E:\WINDOWS\ERDNT\cache\netlogon.dll
[2004.08.04 06:57:32 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- E:\WINDOWS\system32\dllcache\netlogon.dll
[2004.08.04 06:57:32 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- E:\WINDOWS\system32\netlogon.dll
 
< MD5 for: SCECLI.DLL  >
[2004.08.04 06:57:34 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- E:\WINDOWS\ERDNT\cache\scecli.dll
[2004.08.04 06:57:34 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- E:\WINDOWS\system32\dllcache\scecli.dll
[2004.08.04 06:57:34 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- E:\WINDOWS\system32\scecli.dll
 
< MD5 for: USERINIT.EXE  >
[2004.08.04 06:58:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- E:\WINDOWS\ERDNT\cache\USERINIT.EXE
[2004.08.04 06:58:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- E:\WINDOWS\system32\dllcache\userinit.exe
[2004.08.04 06:58:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- E:\WINDOWS\system32\USERINIT.EXE
 
< MD5 for: WINLOGON.EXE  >
[2004.08.04 06:58:20 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- E:\WINDOWS\ERDNT\cache\winlogon.exe
[2004.08.04 06:58:20 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- E:\WINDOWS\system32\dllcache\winlogon.exe
[2004.08.04 06:58:20 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- E:\WINDOWS\system32\winlogon.exe
 
< MD5 for: WS2_32.DLL  >
[2004.08.04 06:57:40 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=D569240A22421D5F670BB6FB6DD522B5 -- E:\WINDOWS\ERDNT\cache\ws2_32.dll
[2004.08.04 06:57:40 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=D569240A22421D5F670BB6FB6DD522B5 -- E:\WINDOWS\system32\dllcache\ws2_32.dll
[2004.08.04 06:57:40 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=D569240A22421D5F670BB6FB6DD522B5 -- E:\WINDOWS\system32\ws2_32.dll
 
< c:\windows\system32\drivers\*.sys /lockedfiles >
 
< c:\windows\system32\*.dll /lockedfiles >
 
< %systemroot%\*. /mp /s >
 
< %PROGRAMFILES%\*. >
[2010.01.01 21:18:42 | 000,000,000 | ---D | M] -- E:\Programme\Adobe
[2008.05.28 04:45:57 | 000,000,000 | ---D | M] -- E:\Programme\Ahead
[2008.05.14 17:01:32 | 000,000,000 | ---D | M] -- E:\Programme\Analog Devices
[2010.08.16 20:30:02 | 000,000,000 | ---D | M] -- E:\Programme\Apple Software Update
[2010.08.16 20:24:33 | 000,000,000 | ---D | M] -- E:\Programme\ArcSoft
[2010.07.14 02:18:00 | 000,000,000 | ---D | M] -- E:\Programme\Ask.com
[2010.04.23 04:30:12 | 000,000,000 | ---D | M] -- E:\Programme\AVG
[2010.04.02 16:40:55 | 000,000,000 | ---D | M] -- E:\Programme\Avidemux 2.4
[2010.07.10 23:30:40 | 000,000,000 | ---D | M] -- E:\Programme\BinarySense
[2008.05.17 21:16:57 | 000,000,000 | ---D | M] -- E:\Programme\Canon
[2008.05.17 21:10:19 | 000,000,000 | -H-D | M] -- E:\Programme\CanonBJ
[2010.07.16 23:28:52 | 000,000,000 | ---D | M] -- E:\Programme\ColdCut
[2008.05.31 22:18:36 | 000,000,000 | ---D | M] -- E:\Programme\Cole2k Media Toolbar
[2008.05.14 16:43:23 | 000,000,000 | ---D | M] -- E:\Programme\ComPlus Applications
[2010.08.08 21:18:17 | 000,000,000 | ---D | M] -- E:\Programme\Conduit
[2010.10.20 17:46:28 | 000,000,000 | ---D | M] -- E:\Programme\CyberDefender
[2008.05.28 04:43:34 | 000,000,000 | ---D | M] -- E:\Programme\CyberLink
[2008.05.28 04:44:49 | 000,000,000 | ---D | M] -- E:\Programme\CyberLink DVD Solution
[2009.11.04 03:58:40 | 000,000,000 | ---D | M] -- E:\Programme\DAF Desk
[2010.08.31 01:56:52 | 000,000,000 | ---D | M] -- E:\Programme\DivX
[2010.08.09 20:21:11 | 000,000,000 | ---D | M] -- E:\Programme\DVDVideoSoft
[2010.10.27 05:26:14 | 000,000,000 | ---D | M] -- E:\Programme\DVDVideoSoftTB
[2009.02.23 21:07:50 | 000,000,000 | ---D | M] -- E:\Programme\FDRLab
[2008.09.18 05:34:00 | 000,000,000 | ---D | M] -- E:\Programme\FLV-Media Player
[2009.03.25 22:40:07 | 000,000,000 | ---D | M] -- E:\Programme\FormatFactory
[2010.07.14 02:17:37 | 000,000,000 | ---D | M] -- E:\Programme\Foxit Software
[2008.05.17 03:24:49 | 000,000,000 | ---D | M] -- E:\Programme\Free Download Manager
[2009.03.25 22:59:19 | 000,000,000 | ---D | M] -- E:\Programme\Free FLV Converter
[2010.07.17 20:48:16 | 000,000,000 | ---D | M] -- E:\Programme\Free RAR Extract Frog
[2010.10.23 22:20:27 | 000,000,000 | ---D | M] -- E:\Programme\Gemeinsame Dateien
[2010.04.27 19:24:43 | 000,000,000 | ---D | M] -- E:\Programme\Gigaflat
[2010.10.04 21:18:42 | 000,000,000 | ---D | M] -- E:\Programme\Google
[2008.05.15 15:34:46 | 000,000,000 | ---D | M] -- E:\Programme\Grisoft
[2010.08.16 20:29:08 | 000,000,000 | -H-D | M] -- E:\Programme\InstallShield Installation Information
[2010.05.11 02:41:55 | 000,000,000 | ---D | M] -- E:\Programme\Intel
[2010.07.16 23:17:34 | 000,000,000 | ---D | M] -- E:\Programme\Internet Explorer
[2010.08.16 20:28:46 | 000,000,000 | ---D | M] -- E:\Programme\ISL
[2010.05.17 23:18:18 | 000,000,000 | ---D | M] -- E:\Programme\Java
[2010.07.11 23:00:29 | 000,000,000 | ---D | M] -- E:\Programme\JRE
[2008.05.31 22:28:19 | 000,000,000 | ---D | M] -- E:\Programme\KC Softwares
[2010.10.28 01:40:38 | 000,000,000 | ---D | M] -- E:\Programme\lg_fwupdate
[2010.10.17 18:28:43 | 000,000,000 | ---D | M] -- E:\Programme\Malwarebytes' Anti-Malware
[2008.05.14 16:43:07 | 000,000,000 | ---D | M] -- E:\Programme\Messenger
[2008.05.15 15:13:39 | 000,000,000 | ---D | M] -- E:\Programme\microsoft frontpage
[2008.05.15 15:13:50 | 000,000,000 | ---D | M] -- E:\Programme\Microsoft Office
[2010.08.16 19:50:47 | 000,000,000 | ---D | M] -- E:\Programme\Microsoft SQL Server Compact Edition
[2010.08.16 19:50:48 | 000,000,000 | ---D | M] -- E:\Programme\Microsoft Synchronization Services
[2008.05.14 16:44:28 | 000,000,000 | ---D | M] -- E:\Programme\Movie Maker
[2010.07.13 22:39:12 | 000,000,000 | ---D | M] -- E:\Programme\Mozilla Firefox
[2010.10.12 20:59:17 | 000,000,000 | ---D | M] -- E:\Programme\Mozilla Firefox 4.0 Beta 1
[2010.07.16 23:23:19 | 000,000,000 | ---D | M] -- E:\Programme\MSBuild
[2008.05.14 16:42:19 | 000,000,000 | ---D | M] -- E:\Programme\MSN
[2008.05.14 16:43:02 | 000,000,000 | ---D | M] -- E:\Programme\MSN Gaming Zone
[2010.07.16 23:15:00 | 000,000,000 | ---D | M] -- E:\Programme\MSXML 6.0
[2008.05.14 16:44:45 | 000,000,000 | ---D | M] -- E:\Programme\NetMeeting
[2008.05.15 16:17:32 | 000,000,000 | ---D | M] -- E:\Programme\NetMeter
[2009.05.30 00:48:14 | 000,000,000 | ---D | M] -- E:\Programme\NOS
[2008.05.14 16:43:12 | 000,000,000 | ---D | M] -- E:\Programme\Online Services
[2008.05.14 16:45:41 | 000,000,000 | ---D | M] -- E:\Programme\Online-Dienste
[2010.07.11 23:00:04 | 000,000,000 | ---D | M] -- E:\Programme\OpenOffice.org 3
[2010.10.12 20:51:15 | 000,000,000 | ---D | M] -- E:\Programme\Opera
[2008.05.14 16:44:41 | 000,000,000 | ---D | M] -- E:\Programme\Outlook Express
[2010.08.16 20:17:12 | 000,000,000 | ---D | M] -- E:\Programme\Panasonic
[2009.09.29 18:00:54 | 000,000,000 | ---D | M] -- E:\Programme\PowerQuest
[2010.08.16 20:31:23 | 000,000,000 | ---D | M] -- E:\Programme\QuickTime
[2010.07.29 03:26:37 | 000,000,000 | ---D | M] -- E:\Programme\Real
[2009.10.19 21:46:19 | 000,000,000 | ---D | M] -- E:\Programme\Realtek
[2010.07.16 23:22:57 | 000,000,000 | ---D | M] -- E:\Programme\Reference Assemblies
[2010.08.10 02:01:17 | 000,000,000 | ---D | M] -- E:\Programme\Seagate
[2008.05.14 16:58:40 | 000,000,000 | ---D | M] -- E:\Programme\SiS VGA Utilities V3.80
[2008.05.14 16:54:51 | 000,000,000 | ---D | M] -- E:\Programme\sisagp
[2008.05.30 23:36:36 | 000,000,000 | ---D | M] -- E:\Programme\SiSoftware
[2010.01.28 16:43:25 | 000,000,000 | R--D | M] -- E:\Programme\Skype
[2010.04.27 22:53:23 | 000,000,000 | ---D | M] -- E:\Programme\SourceCop 3.0
[2010.10.20 20:31:20 | 000,000,000 | ---D | M] -- E:\Programme\SUPERAntiSpyware
[2008.05.14 16:51:53 | 000,000,000 | -H-D | M] -- E:\Programme\Uninstall Information
[2010.05.11 02:59:51 | 000,000,000 | ---D | M] -- E:\Programme\VIA
[2008.05.16 17:23:18 | 000,000,000 | ---D | M] -- E:\Programme\VideoLAN
[2010.01.25 01:25:02 | 000,000,000 | ---D | M] -- E:\Programme\Web.de
[2008.05.14 16:47:11 | 000,000,000 | ---D | M] -- E:\Programme\Windows Media Player
[2008.05.14 16:42:50 | 000,000,000 | ---D | M] -- E:\Programme\Windows NT
[2008.05.14 16:45:44 | 000,000,000 | -H-D | M] -- E:\Programme\WindowsUpdate
[2010.07.17 21:33:17 | 000,000,000 | ---D | M] -- E:\Programme\WinRAR
[2009.02.01 02:19:25 | 000,000,000 | ---D | M] -- E:\Programme\WinZip
[2008.05.14 16:47:30 | 000,000,000 | ---D | M] -- E:\Programme\xerox
[2008.11.17 19:59:59 | 000,000,000 | ---D | M] -- E:\Programme\XMedia Recode
[2008.05.29 22:30:08 | 000,000,000 | ---D | M] -- E:\Programme\Zone Labs
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 125 bytes -> E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:2BE9FEFC

< End of report >
         

--- --- ---

Hi,

Abschließend noch Prevx:
Das Tool neigt zu Fehlalarmen und kann in der freien Version auch nichts löschen, ist aber sonst recht gut... (und läuft auch auf 64Bit-Plattformen)
Prevx 3.0 for Home and Family
Falls das Tool was findet, nicht das Log posten sondern einen Screenshot des dann angezeigten Fensters...

chris

Prevx hat keine aktive Bedrohung gefunden.

Hi,

gut wenn sich der Rechner normal verhält, dann wären wir durch...

chris

chris, VIELEN DANK für Deine kompetente Hilfe!!!

Ohne Dich + das Trojaner-Board hätte ich den Virus höchstwahrscheinlich nicht ohne Neuinstallation weggebracht !


Ich werde Eurer SUPER-Board mit einer Spende unterstützen !

Kannst Du mir vielleicht bitte noch versuchen meine Fragen 1+ 3 aus meinem Eingangspost zu beantworten?
Wie erklärst Du Dir die 30 verschiedenen Virusbezeichnungen von VirusTotal?

Hi,

jede Firma hat Ihre eigene Virendatenbank und ihre eigen Regeln Malware zu "klassifizieren" bzw. zu benennen... daher die unterschiedlichen Namen...und auch unterschiedliche Einschätzungen der "gefährlichkeit"..
So habe auch die meisten Hersteller eigene Datenbanken die man abfragen kann, avira, kaspersky, prevx etc...

chris