| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: System Tool 2011?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
10.01.2011, 19:39
| #1 |
 |  System Tool 2011? OTL-ExtrasOTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 1/10/2011 7:03:51 PM - Run 2
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Tiago\Desktop
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 88.00% Memory free
7.00 Gb Paging File | 6.00 Gb Available in Paging File | 94.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 141.49 Gb Total Space | 89.92 Gb Free Space | 63.55% Space Free | Partition Type: NTFS
Drive D: | 141.50 Gb Total Space | 101.71 Gb Free Space | 71.88% Space Free | Partition Type: NTFS
Computer Name: TIAGO-PC | User Name: Tiago | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-347282546-1026266698-384504505-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~3\Office12\ONENOTE.EXE "%L" File not found
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{0A353130-D22C-41DD-8C67-1B02A05F2CE0}" = Samsung Support Center
"{0F796312-289C-40CA-856C-9FBCF5E83342}" = REALTEK Wireless LAN Software
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution 4
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}" = EasyBatteryManager
"{1AFA1FEF-8CF9-4A51-AC46-64FAA7F3D9E2}" = AnyPC Client
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 23
"{29042B1C-0713-4575-B7CA-5C8E7B0899D4}" = MySQL Connector/ODBC 5.1
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{34B76DCB-BF7C-440F-B058-C84172C1E338}" = Easy Network Manager
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3EED7541-55F8-4DC6-B9CD-28762D71310E}" = Samsung R-Series
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{639673E9-D53F-44F4-A046-485C8A6ADA15}" = Paint.NET v3.5.6
"{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110109903}" = Flip Words
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110160733}" = Slingo
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110245793}" = Insaniquarium Deluxe
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110521483}" = Gem Shop
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}" = Cake Mania
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}" = Mahjong Escape Ancient China
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111307457}" = Galapago
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111768557}" = Bonbon Quest
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113128447}" = Daycare Nightmare
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel
"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X - Deutsch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{D1434266-0486-4469-B338-A60082CC04E1}" = Atheros Client Installation Program
"{D1F6FBBB-B204-459A-9BF8-D06FFAB96CCC}_is1" = Game Pack
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D3F2FAA5-FEC4-42AA-9ABA-1F763919A2B5}" = Samsung Update Plus
"{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel(R) Turbo Boost Technology Driver
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EF367AA4-070B-493C-9575-85BE59D789C9}" = Easy SpeedUp Manager
"{EFCEF949-9821-4759-A573-3EB8C857DF46}" = Windows Live Family Safety
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"ASIO4ALL" = ASIO4ALL
"Drumaxx" = Drumaxx
"Free Studio_is1" = Free Studio version 5.0.2
"Hardcore" = Hardcore
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"IL Download Manager" = IL Download Manager
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"Marvell Miniport Driver" = Marvell Miniport Driver
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"MSC" = McAfee SecurityCenter
"MyWebSearch bar Uninstall" = My Web Search (Webfetti)
"NVIDIA Drivers" = NVIDIA Drivers
"PoiZone" = PoiZone
"Sakura" = Sakura
"Sawer" = Sawer
"Songr" = Songr
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Toxic Biohazard" = Toxic Biohazard
"Uninstall_is1" = Uninstall 1.0.0.1
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Zynga Toolbar" = Zynga Toolbar
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 12/26/2010 1:51:19 PM | Computer Name = Tiago-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Samsung\Samsung
Support Center\Drv\drv2x64\KStartMem.exe.Manifest". Die abhängige Assemblierung
"Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 12/26/2010 2:28:21 PM | Computer Name = Tiago-PC | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 192.168.1.4:5353 4 Tiago-PC.local.
Addr 192.168.1.4
Error - 12/26/2010 2:28:21 PM | Computer Name = Tiago-PC | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: ProbeCount 2; will rename 4 Tiago-PC.local.
Addr 192.168.1.5
Error - 12/26/2010 2:28:21 PM | Computer Name = Tiago-PC | Source = Bonjour Service | ID = 100
Description = Local Hostname Tiago-PC.local already in use; will try Tiago-PC-2.local
instead
Error - 12/26/2010 2:32:28 PM | Computer Name = Tiago-PC | Source = Microsoft-Windows-Backup | ID = 517
Description = Fehler bei der um 2010-12-26T18:20:56.855672600Z gestarteten Sicherung.
Fehlercode: "2155348020" (%%2155348020). Suchen Sie in den Ereignisdetails nach
einer Lösung, und führen Sie die Sicherung erneut aus, nachdem das Problem behoben
wurde.
Error - 12/26/2010 2:32:34 PM | Computer Name = Tiago-PC | Source = Windows Backup | ID = 4104
Description =
Error - 12/26/2010 3:12:37 PM | Computer Name = Tiago-PC | Source = Application Hang | ID = 1002
Description = Programm iTunes.exe, Version 10.1.1.4 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1ac4 Startzeit:
01cba52f8b88af3c Endzeit: 109 Anwendungspfad: C:\Program Files\iTunes\iTunes.exe Berichts-ID:
Error - 12/26/2010 4:23:55 PM | Computer Name = Tiago-PC | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 192.168.1.4:5353 4 Tiago-PC.local.
Addr 192.168.1.4
Error - 12/26/2010 4:23:55 PM | Computer Name = Tiago-PC | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: ProbeCount 2; will rename 4 Tiago-PC.local.
Addr 192.168.1.5
Error - 12/26/2010 4:23:55 PM | Computer Name = Tiago-PC | Source = Bonjour Service | ID = 100
Description = Local Hostname Tiago-PC.local already in use; will try Tiago-PC-2.local
instead
[ System Events ]
Error - 12/26/2010 2:20:22 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 12/26/2010 2:20:23 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 12/26/2010 2:20:24 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 12/26/2010 2:28:22 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 12/26/2010 2:28:22 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 12/26/2010 2:29:24 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 12/26/2010 2:29:24 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 12/26/2010 4:23:53 PM | Computer Name = Tiago-PC | Source = Server | ID = 2505
Description = Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht
\Device\NetBT_Tcpip_{081F041E-85A2-45C8-B03F-DE1BEDD8E91F} vom Serverdienst nicht
gebunden werden. Der Serverdienst konnte nicht gestartet werden.
Error - 12/26/2010 4:23:53 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 12/26/2010 4:23:53 PM | Computer Name = Tiago-PC | Source = NetBT | ID = 4321
Description = Der Name "TIAGO-PC :20" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.1.5 registriert werden. Der Computer mit IP-Adresse 192.168.1.4
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
< End of report >
|
|
10.01.2011, 19:40
| #2 |
| | System Tool 2011? OTL-OTL
__________________OTL Logfile: Code:
ATTFilter OTL logfile created on: 1/10/2011 7:03:51 PM - Run 2 OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Tiago\Desktop Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000409 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy 3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 88.00% Memory free 7.00 Gb Paging File | 6.00 Gb Available in Paging File | 94.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files Drive C: | 141.49 Gb Total Space | 89.92 Gb Free Space | 63.55% Space Free | Partition Type: NTFS Drive D: | 141.50 Gb Total Space | 101.71 Gb Free Space | 71.88% Space Free | Partition Type: NTFS Computer Name: TIAGO-PC | User Name: Tiago | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Tiago\Desktop\OTL.exe (OldTimer Tools) PRC - c:\PROGRA~1\mcafee.com\agent\mcagent.exe (McAfee, Inc.) PRC - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Users\Tiago\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation) MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation) MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation) MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation) MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation) MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation) MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation) MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation) MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (MyWebSearchService) -- C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (MyWebSearch.com) SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation) SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (mfefire) -- C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.) SRV - (McShield) -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe () SRV - (mfevtp) -- C:\Windows\System32\mfevtps.exe (McAfee, Inc.) SRV - (McODS) -- C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.) SRV - (fsssvc) -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (MSK80Service) -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.) SRV - (McProxy) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) SRV - (McNASvc) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) SRV - (McNaiAnn) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) SRV - (mcmscsvc) -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) SRV - (McMPFSvc) -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.) SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation) SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation) SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation) SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation) SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation) SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation) SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation) SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation) SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation) SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation) SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation) SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation) SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation) SRV - (AxInstSV) ActiveX-Installer (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation) SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation) SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation) SRV - (Rezip) -- C:\Windows\System32\Rezip.exe () SRV - (McAfee SiteAdvisor Service) -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe () ========== Driver Services (SafeList) ========== DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.) DRV - (mfehidk) -- C:\windows\system32\drivers\mfehidk.sys (McAfee, Inc.) DRV - (mfefirek) -- C:\Windows\System32\drivers\mfefirek.sys (McAfee, Inc.) DRV - (mfewfpk) -- C:\Windows\System32\drivers\mfewfpk.sys (McAfee, Inc.) DRV - (mfeavfk) -- C:\Windows\System32\drivers\mfeavfk.sys (McAfee, Inc.) DRV - (mfeapfk) -- C:\Windows\System32\drivers\mfeapfk.sys (McAfee, Inc.) DRV - (mferkdet) -- C:\Windows\System32\drivers\mferkdet.sys (McAfee, Inc.) DRV - (mfenlfk) -- C:\Windows\System32\drivers\mfenlfk.sys (McAfee, Inc.) DRV - (cfwids) -- C:\Windows\System32\drivers\cfwids.sys (McAfee, Inc.) DRV - (mfebopk) -- C:\Windows\System32\drivers\mfebopk.sys (McAfee, Inc.) DRV - (rtport) -- C:\Windows\System32\drivers\rtport.sys (Windows (R) 2003 DDK 3790 provider) DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics Incorporated) DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation) DRV - (Impcd) -- C:\Windows\System32\drivers\Impcd.sys (Intel Corporation) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.) DRV - (KSecPkg) -- C:\windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation) DRV - (iaStor) -- C:\windows\system32\DRIVERS\iaStor.sys (Intel Corporation) DRV - (yukonw7) -- C:\Windows\System32\drivers\yk62x86.sys () DRV - (fssfltr) -- C:\Windows\System32\drivers\fssfltr.sys (Microsoft Corporation) DRV - (cmdide) -- C:\windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.) DRV - (adpahci) -- C:\windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.) DRV - (adp94xx) -- C:\windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.) DRV - (amdsbs) -- C:\windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.) DRV - (adpu320) -- C:\windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.) DRV - (arcsas) -- C:\windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.) DRV - (amdsata) -- C:\windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices) DRV - (arc) -- C:\windows\system32\DRIVERS\arc.sys (Adaptec, Inc.) DRV - (amdxata) -- C:\windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices) DRV - (aliide) -- C:\windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.) DRV - (nvstor) -- C:\windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation) DRV - (nvraid) -- C:\windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation) DRV - (nfrd960) -- C:\windows\system32\DRIVERS\nfrd960.sys (IBM Corporation) DRV - (LSI_SAS) -- C:\windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation) DRV - (iaStorV) -- C:\windows\system32\DRIVERS\iaStorV.sys (Intel Corporation) DRV - (MegaSR) -- C:\windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.) DRV - (LSI_SCSI) -- C:\windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation) DRV - (LSI_FC) -- C:\windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation) DRV - (LSI_SAS2) -- C:\windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation) DRV - (iirsp) -- C:\windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH) DRV - (megasas) -- C:\windows\system32\DRIVERS\megasas.sys (LSI Corporation) DRV - (hwpolicy) -- C:\windows\System32\drivers\hwpolicy.sys (Microsoft Corporation) DRV - (elxstor) -- C:\windows\system32\DRIVERS\elxstor.sys (Emulex) DRV - (aic78xx) -- C:\windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.) DRV - (HpSAMD) -- C:\windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company) DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation) DRV - (vsmraid) -- C:\windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd) DRV - (vhdmp) -- C:\windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation) DRV - (vdrvroot) -- C:\windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation) DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation) DRV - (viaide) -- C:\windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.) DRV - (ql2300) -- C:\windows\system32\DRIVERS\ql2300.sys (QLogic Corporation) DRV - (rdyboost) -- C:\windows\System32\drivers\rdyboost.sys (Microsoft Corporation) DRV - (ql40xx) -- C:\windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation) DRV - (SiSRaid4) -- C:\windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems) DRV - (pcw) -- C:\windows\System32\drivers\pcw.sys (Microsoft Corporation) DRV - (SiSRaid2) -- C:\windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.) DRV - (stexstor) -- C:\windows\system32\DRIVERS\stexstor.sys (Promise Technology) DRV - (CNG) -- C:\windows\System32\Drivers\cng.sys (Microsoft Corporation) DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.) DRV - (rdpbus) -- C:\windows\system32\DRIVERS\rdpbus.sys (Microsoft Corporation) DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation) DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation) DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation) DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation) DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation) DRV - (vwififlt) -- C:\Windows\System32\drivers\vwififlt.sys (Microsoft Corporation) DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation) DRV - (1394ohci) -- C:\windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation) DRV - (UmPass) -- C:\windows\system32\DRIVERS\umpass.sys (Microsoft Corporation) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (mshidkmdf) -- C:\windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation) DRV - (MTConfig) -- C:\windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation) DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation) DRV - (AppID) -- C:\windows\system32\drivers\appid.sys (Microsoft Corporation) DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation) DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation) DRV - (AcpiPmi) -- C:\windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation) DRV - (AmdPPM) -- C:\windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation) DRV - (hcw85cir) -- C:\windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (BrUsbMdm) -- C:\windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.) DRV - (BrUsbSer) -- C:\windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.) DRV - (BrSerWdm) -- C:\windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.) DRV - (BrFiltLo) -- C:\windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.) DRV - (BrFiltUp) -- C:\windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.) DRV - (RTL8167) -- C:\Windows\System32\drivers\Rt86win7.sys (Realtek Corporation ) DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation) DRV - (ebdrv) -- C:\windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation) DRV - (b06bdrv) -- C:\windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation) DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation) DRV - (igfx) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation) DRV - (SABI) -- C:\Windows\System32\drivers\SABI.sys (SAMSUNG ELECTRONICS) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\URLSearchHook: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files\Zynga\tbZyng.dll (Conduit Ltd.) IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-347282546-1026266698-384504505-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn IE - HKU\S-1-5-21-347282546-1026266698-384504505-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.ch/ IE - HKU\S-1-5-21-347282546-1026266698-384504505-1000\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com) IE - HKU\S-1-5-21-347282546-1026266698-384504505-1000\..\URLSearchHook: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files\Zynga\tbZyng.dll (Conduit Ltd.) IE - HKU\S-1-5-21-347282546-1026266698-384504505-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-347282546-1026266698-384504505-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "hxxp://www.google.ch/webhp?rls=ig" FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:2.8 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..network.proxy.no_proxies_on: "*.local" FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2011/01/10 04:42:56 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\1.bin [2011/01/09 18:58:53 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/01/06 07:32:09 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/01/06 07:32:08 | 000,000,000 | ---D | M] [2010/12/31 18:40:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tiago\AppData\Roaming\mozilla\Extensions [2011/01/09 06:04:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tiago\AppData\Roaming\mozilla\Firefox\Profiles\tjr14v7f.default\extensions [2011/01/01 19:51:00 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Tiago\AppData\Roaming\mozilla\Firefox\Profiles\tjr14v7f.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010/12/31 18:39:41 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions [2011/01/10 04:42:56 | 000,000,000 | ---D | M] (McAfee SiteAdvisor) -- C:\PROGRAM FILES\MCAFEE\SITEADVISOR [2010/10/13 22:28:54 | 000,024,376 | ---- | M] (McAfee, Inc.) -- C:\Program Files\mozilla firefox\components\Scriptff.dll [2010/12/03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2010/12/03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2010/12/03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2010/12/03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2010/12/03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009/06/10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (MyWebSearch Search Assistant BHO) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com) O2 - BHO: (mwsBar BHO) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com) O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll () O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Zynga Toolbar) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files\Zynga\tbZyng.dll (Conduit Ltd.) O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110101134531.dll (McAfee, Inc.) O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll () O3 - HKLM\..\Toolbar: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com) O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll () O3 - HKLM\..\Toolbar: (Zynga Toolbar) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - C:\Program Files\Zynga\tbZyng.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-347282546-1026266698-384504505-1000\..\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com) O3 - HKU\S-1-5-21-347282546-1026266698-384504505-1000\..\Toolbar\WebBrowser: (Zynga Toolbar) - {7B13EC3E-999A-4B70-B9CB-2617B8323822} - C:\Program Files\Zynga\tbZyng.dll (Conduit Ltd.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [APLangApp] C:\Program Files\AnyPC Client\APLangApp.exe (DoctorSoft) O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.) O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.) O4 - HKLM..\Run: [My Web Search Bar Search Scope Monitor] C:\Programme\MyWebSearch\bar\1.bin\M3SRCHMN.EXE File not found O4 - HKLM..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe (MyWebSearch.com) O4 - HKLM..\Run: [NvCplDaemon] C:\windows\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.) O4 - HKLM..\Run: [RemoteControl8] C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [UCam_Menu] C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePDRShortCut] C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKU\S-1-5-21-347282546-1026266698-384504505-1000..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe File not found O4 - HKU\S-1-5-21-347282546-1026266698-384504505-1000..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe (MyWebSearch.com) O4 - HKLM..\RunOnce: [Cleanup] C:\cleanup.exe File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-347282546-1026266698-384504505-1000..\RunOnce: [pAdPd01814] C:\ProgramData\pAdPd01814\pAdPd01814.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: Free YouTube Download - C:\Users\Tiago\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Tiago\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll () O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O30 - LSA: Security Packages - (pku2u) - C:\windows\System32\pku2u.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found NetSvcs: Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation) NetSvcs: BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation) SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: mcmscsvc - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) SafeBootMin: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.) SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Power - C:\Windows\System32\umpo.dll (Microsoft Corporation) SafeBootMin: Primary disk - Driver Group SafeBootMin: RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: Dhcp - C:\Windows\System32\dhcpcore.dll (Microsoft Corporation) SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: McMPFSvc - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.) SafeBootNet: mcmscsvc - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.) SafeBootNet: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.) SafeBootNet: Messenger - Service SafeBootNet: mfefire - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.) SafeBootNet: mfefirek - C:\Windows\System32\drivers\mfefirek.sys (McAfee, Inc.) SafeBootNet: mfefirek.sys - C:\Windows\System32\drivers\mfefirek.sys (McAfee, Inc.) SafeBootNet: mfehidk - C:\windows\system32\drivers\mfehidk.sys (McAfee, Inc.) SafeBootNet: mfehidk.sys - C:\windows\system32\drivers\mfehidk.sys (McAfee, Inc.) SafeBootNet: mfevtp - C:\Windows\System32\mfevtps.exe (McAfee, Inc.) SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: ndiscap - C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation) SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Power - C:\Windows\System32\umpo.dll (Microsoft Corporation) SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation) SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.vorbis - C:\windows\System32\vorbis.acm (HMS hxxp://hp.vector.co.jp/authors/VA012897/) Drivers32: MSVideo8 - C:\windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\windows\System32\iccvid.dll (Radius Inc.) ========== Files/Folders - Created Within 30 Days ========== [2011/01/10 18:52:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee [2011/01/10 18:43:16 | 000,000,000 | ---D | C] -- C:\Avenger [2011/01/10 18:17:20 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\ElevatedDiagnostics [2011/01/10 18:08:44 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Tiago\Desktop\OTL.exe [2011/01/10 17:36:59 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tool [2011/01/10 13:51:58 | 000,000,000 | ---D | C] -- C:\ProgramData\pAdPd01814 [2011/01/10 13:24:22 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit [2011/01/10 13:24:20 | 000,000,000 | ---D | C] -- C:\Program Files\Zynga [2011/01/09 18:58:51 | 000,032,768 | ---- | C] (FunWebProducts.com) -- C:\windows\System32\f3PSSavr.scr [2011/01/09 18:58:46 | 000,000,000 | ---D | C] -- C:\Program Files\MyWebSearch [2011/01/09 18:58:03 | 000,000,000 | ---D | C] -- C:\Program Files\FunWebProducts [2011/01/07 01:43:49 | 000,000,000 | ---D | C] -- C:\ProgramData\TrackMania [2011/01/07 01:43:42 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\TrackMania [2011/01/07 01:24:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Steam [2011/01/06 07:31:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2011/01/06 07:30:48 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime [2011/01/06 03:34:12 | 000,000,000 | ---D | C] -- C:\Program Files\World of Warcraft [2011/01/06 02:28:12 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Blizzard Entertainment [2011/01/05 22:04:49 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\WoW-BurningCrusade-deDE-Full-Installer [2011/01/05 22:04:21 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\WoW-2.0.0-deDE-Installer [2011/01/05 21:34:04 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Blizzard Entertainmentm [2011/01/05 11:48:12 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSCOMCTL.OCX [2011/01/05 11:48:12 | 000,364,544 | ---- | C] (Tools & Components) -- C:\windows\System32\sevDataGrid2.ocx [2011/01/05 11:48:12 | 000,291,328 | ---- | C] (Tools & Components) -- C:\windows\System32\sevEin20.ocx [2011/01/05 11:48:12 | 000,231,424 | ---- | C] (Tools & Components) -- C:\windows\System32\sevXPCtl.ocx [2011/01/05 11:48:12 | 000,190,464 | ---- | C] (Tools & Components) -- C:\windows\System32\sevImLib.dll [2011/01/05 11:48:12 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSCMCDE.DLL [2011/01/05 11:48:12 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\COMDLG32.OCX [2011/01/05 11:48:12 | 000,148,992 | ---- | C] (Tools & Components) -- C:\windows\System32\sevMenuXP2.ocx [2011/01/05 11:48:12 | 000,140,288 | ---- | C] (Tools & Components) -- C:\windows\System32\sevCmd3.ocx [2011/01/05 11:48:12 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\VB6DE.DLL [2011/01/05 11:48:12 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSSTDFMT.DLL [2011/01/05 11:48:12 | 000,108,336 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mswinsck.ocx [2011/01/05 11:48:12 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\VB6STKIT.DLL [2011/01/05 11:48:12 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSBIND.DLL [2011/01/05 11:48:12 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msado28.tlb [2011/01/05 11:48:12 | 000,062,976 | ---- | C] (Tools & Components) -- C:\windows\System32\sevList32.ocx [2011/01/05 11:48:12 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CMDLGDE.DLL [2011/01/05 11:48:12 | 000,032,768 | ---- | C] (Microsoft) -- C:\windows\System32\classFileDownload.dll [2011/01/05 11:48:12 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msadox28.tlb [2011/01/05 11:48:12 | 000,012,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\SCRRNDE.DLL [2011/01/05 11:48:12 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\STDFTDE.DLL [2011/01/05 11:48:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nordschlacht Privatserver [2011/01/05 10:34:30 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\GetRight [2011/01/05 10:08:28 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\GetRightToGo [2011/01/05 03:36:42 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games [2011/01/04 23:23:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft.temp [2011/01/02 02:27:50 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 [2011/01/02 02:27:50 | 000,000,000 | ---D | C] -- C:\Program Files\ASIO4ALL v2 [2011/01/02 02:27:39 | 000,225,280 | ---- | C] (Propellerhead Software AB) -- C:\windows\System32\rewire.dll [2011/01/02 02:27:38 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\Image-Line [2011/01/02 02:27:27 | 001,554,944 | ---- | C] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) -- C:\windows\System32\vorbis.acm [2011/01/02 02:26:49 | 000,000,000 | ---D | C] -- C:\Program Files\VstPlugins [2011/01/02 02:26:49 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line [2011/01/02 02:26:45 | 000,000,000 | ---D | C] -- C:\Program Files\Outsim [2011/01/02 02:23:37 | 000,000,000 | ---D | C] -- C:\Program Files\Image-Line [2011/01/02 02:23:09 | 000,000,000 | ---D | C] -- C:\Program Files\FlStudio [2011/01/01 19:57:33 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cooliris [2011/01/01 19:57:32 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Cooliris [2011/01/01 19:50:59 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\DVDVideoSoftIEHelpers [2011/01/01 19:50:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft [2011/01/01 19:49:25 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\DVDVideoSoft [2011/01/01 19:49:17 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2011/01/01 19:49:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2011/01/01 19:49:13 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\DVDVideoSoft [2010/12/31 22:05:55 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Documents\Scanned Documents [2010/12/31 22:05:54 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\Fax [2010/12/31 18:40:01 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Mozilla [2010/12/31 18:40:01 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Mozilla [2010/12/31 18:39:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox [2010/12/31 18:39:35 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2010/12/30 22:49:30 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\gtk-2.0 [2010/12/30 22:49:30 | 000,000,000 | ---D | C] -- C:\Users\Tiago\.thumbnails [2010/12/30 22:45:16 | 000,000,000 | ---D | C] -- C:\Program Files\Paint.NET [2010/12/30 22:44:51 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Paint.NET [2010/12/30 22:44:39 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\gegl-0.0 [2010/12/30 22:44:39 | 000,000,000 | ---D | C] -- C:\Users\Tiago\.gimp-2.6 [2010/12/30 22:44:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP [2010/12/30 22:43:46 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0 [2010/12/30 22:10:22 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\LolClient [2010/12/30 22:09:22 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_39.dll [2010/12/30 22:09:22 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_39.dll [2010/12/30 22:09:22 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAudio2_2.dll [2010/12/30 22:09:22 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_39.dll [2010/12/30 22:09:22 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAPOFX1_1.dll [2010/12/30 22:05:19 | 000,000,000 | ---D | C] -- C:\Riot Games [2010/12/30 21:24:37 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\PMB Files [2010/12/30 21:24:35 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files [2010/12/30 21:24:19 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks [2010/12/30 19:27:57 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe [2010/12/30 19:26:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LightScribe [2010/12/30 16:45:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment [2010/12/30 16:08:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard [2010/12/30 16:05:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010/12/30 16:00:03 | 000,000,000 | ---D | C] -- C:\Program Files\MySQL [2010/12/28 11:54:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2010/12/28 11:54:23 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\javaws.exe [2010/12/28 11:54:23 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\javaw.exe [2010/12/28 11:54:23 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\java.exe [2010/12/26 23:54:36 | 000,000,000 | ---D | C] -- C:\Program Files\Safari [2010/12/26 22:56:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010/12/26 22:56:09 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\deployJava1.dll [2010/12/26 22:55:55 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2010/12/26 22:54:42 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\WinRAR [2010/12/26 22:35:23 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2010/12/26 22:35:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2010/12/26 22:35:16 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2010/12/26 19:42:47 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Songr [2010/12/26 19:42:29 | 000,000,000 | ---D | C] -- C:\Program Files\Songr [2010/12/26 19:39:21 | 000,000,000 | ---D | C] -- C:\ProgramData\eMule [2010/12/26 19:34:00 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Apple Computer [2010/12/26 19:34:00 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Apple Computer [2010/12/26 19:33:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2010/12/26 19:33:15 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\windows\System32\GEARAspi.dll [2010/12/26 19:32:02 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2010/12/26 19:32:00 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2010/12/26 19:32:00 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2010/12/26 19:29:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010/12/26 19:29:20 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Apple [2010/12/26 19:29:15 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update [2010/12/26 19:28:16 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2010/12/26 19:27:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010/12/26 19:27:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2010/12/25 17:59:08 | 000,009,344 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mfeclnk.sys [2010/12/25 17:58:59 | 000,141,792 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\mfevtps.exe [2010/12/25 17:58:58 | 000,386,840 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mfehidk.sys [2010/12/25 17:58:58 | 000,313,288 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mfefirek.sys [2010/12/25 17:58:58 | 000,164,840 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mfewfpk.sys [2010/12/25 17:58:58 | 000,152,960 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mfeavfk.sys [2010/12/25 17:58:58 | 000,095,600 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mfeapfk.sys [2010/12/25 17:58:58 | 000,084,264 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mferkdet.sys [2010/12/25 17:58:58 | 000,064,304 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mfenlfk.sys [2010/12/25 17:58:58 | 000,055,840 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\cfwids.sys [2010/12/25 17:58:58 | 000,052,104 | ---- | C] (McAfee, Inc.) -- C:\windows\System32\drivers\mfebopk.sys [2010/12/25 14:52:44 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\Youcam [2010/12/25 14:39:51 | 000,000,000 | ---D | C] -- C:\windows\System32\Adobe [2010/12/25 14:39:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR [2010/12/25 14:37:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2010/12/25 14:37:32 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2010/12/25 11:57:04 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntoskrnl.exe [2010/12/25 11:57:03 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntkrnlpa.exe [2010/12/25 11:48:59 | 000,000,000 | ---D | C] -- C:\windows\System32\Wat [2010/12/25 11:38:25 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PresentationHost.exe [2010/12/25 11:38:25 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\PresentationHostProxy.dll [2010/12/25 11:38:25 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\netfxperf.dll [2010/12/25 11:29:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2010/12/25 11:25:53 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\browserchoice.exe [2010/12/25 11:24:21 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ks.sys [2010/12/25 11:22:55 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mstime.dll [2010/12/25 11:22:55 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll [2010/12/25 11:22:54 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iedkcs32.dll [2010/12/25 11:22:54 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iepeers.dll [2010/12/25 11:22:54 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll [2010/12/25 11:22:54 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeedsbs.dll [2010/12/25 11:22:54 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\licmgr10.dll [2010/12/25 11:22:53 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb [2010/12/25 11:22:53 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\html.iec [2010/12/25 11:22:53 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll [2010/12/25 11:22:53 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeedssync.exe [2010/12/25 11:22:41 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\t2embed.dll [2010/12/25 11:22:37 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CPFilters.dll [2010/12/25 11:22:37 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSNP.ax [2010/12/25 11:22:36 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\psisdecd.dll [2010/12/25 11:22:36 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdri.dll [2010/12/25 11:22:36 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mpg2splt.ax [2010/12/25 11:22:18 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc40.dll [2010/12/25 11:22:18 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc40u.dll [2010/12/25 11:22:03 | 001,037,312 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\lsasrv.dll [2010/12/25 11:22:03 | 000,133,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ksecpkg.sys [2010/12/25 11:21:57 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\windows\explorer.exe [2010/12/25 11:21:48 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmploc.DLL [2010/12/25 11:21:44 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzres.dll [2010/12/25 11:21:29 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\webio.dll [2010/12/25 11:21:28 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript.dll [2010/12/25 11:21:24 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\quartz.dll [2010/12/25 11:21:24 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\avifil32.dll [2010/12/25 11:21:24 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mciavi32.dll [2010/12/25 11:21:23 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\atmfd.dll [2010/12/25 11:21:23 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\windows\System32\atmlib.dll [2010/12/25 11:21:22 | 000,026,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\Diskdump.sys [2010/12/25 11:21:18 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskschd.dll [2010/12/25 11:21:18 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmicmiplugin.dll [2010/12/25 11:21:18 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\taskcomp.dll [2010/12/25 11:21:18 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\schtasks.exe [2010/12/25 11:21:14 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\windows\System32\ir32_32.dll [2010/12/25 11:21:14 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\windows\System32\iccvid.dll [2010/12/25 11:21:13 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rtutils.dll [2010/12/25 11:21:07 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpmde.dll [2010/12/25 11:21:07 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\asycfilt.dll [2010/12/25 11:20:16 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc.dll [2010/12/25 11:20:16 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_isv.dll [2010/12/25 11:20:16 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_isv.exe [2010/12/25 11:20:16 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate.exe [2010/12/25 11:20:16 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_ssp.exe [2010/12/25 11:20:16 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_ssp_isv.exe [2010/12/25 11:20:16 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_ssp_isv.dll [2010/12/25 11:20:16 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_ssp.dll [2010/12/25 11:19:56 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\vbscript.dll [2010/12/25 11:19:55 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\StructuredQuery.dll [2010/12/25 11:19:54 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\consent.exe [2010/12/25 11:14:24 | 002,327,552 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys [2010/12/25 02:07:08 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Tracing [2010/12/25 01:20:41 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Macromedia [2010/12/25 01:19:23 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Adobe [2010/12/25 01:05:50 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Google [2010/12/25 01:05:49 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Google [2010/12/25 00:43:31 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Power2Go [2010/12/25 00:43:05 | 000,000,000 | R--D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2010/12/25 00:43:05 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Searches [2010/12/25 00:43:05 | 000,000,000 | R--D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2010/12/25 00:42:56 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Identities [2010/12/25 00:42:52 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Contacts [2010/12/25 00:42:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phoenix Technologies Ltd [2010/12/25 00:42:38 | 000,000,000 | ---D | C] -- C:\Program Files\Phoenix Technologies Ltd [2010/12/25 00:41:55 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam [2010/12/25 00:40:02 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight [2010/12/25 00:39:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in [2010/12/25 00:39:44 | 000,054,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\fssfltr.sys [2010/12/25 00:39:44 | 000,000,000 | ---D | C] -- C:\windows\System32\DRVSTORE [2010/12/25 00:38:40 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_32.dll [2010/12/25 00:37:59 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition [2010/12/25 00:37:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft [2010/12/25 00:36:56 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2010/12/25 00:36:51 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive [2010/12/25 00:36:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live [2010/12/25 00:36:34 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live [2010/12/25 00:35:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live [2010/12/25 00:34:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office Suite Activation Assistant [2010/12/25 00:31:51 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2010/12/25 00:31:46 | 000,032,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msonpmon.dll [2010/12/25 00:30:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2010/12/25 00:30:26 | 000,000,000 | ---D | C] -- C:\windows\PCHEALTH [2010/12/25 00:30:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2010/12/25 00:28:48 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Microsoft Help [2010/12/25 00:28:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010/12/25 00:28:24 | 000,000,000 | RH-D | C] -- C:\MSOCache [2010/12/25 00:27:23 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2010/12/25 00:27:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works [2010/12/25 00:26:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works [2010/12/25 00:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\OberonGameConsole [2010/12/25 00:23:20 | 000,000,000 | ---D | C] -- C:\Users\Tiago\Documents\My Pictures [2010/12/25 00:18:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Pack [2010/12/25 00:18:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Oberon Media [2010/12/25 00:17:48 | 000,000,000 | ---D | C] -- C:\Program Files\Game Pack [2010/12/25 00:17:41 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Adobe [2010/12/25 00:17:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010/12/25 00:16:33 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\VirtualStore [2010/12/25 00:16:32 | 000,000,000 | --SD | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft [2010/12/25 00:16:32 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Music [2010/12/25 00:16:32 | 000,000,000 | R--D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2010/12/25 00:16:32 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Links [2010/12/25 00:16:32 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Favorites [2010/12/25 00:16:32 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Downloads [2010/12/25 00:16:32 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Documents [2010/12/25 00:16:32 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Desktop [2010/12/25 00:16:32 | 000,000,000 | R--D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Vorlagen [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\AppData\Local\Verlauf [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\AppData\Local\Temporary Internet Files [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Startmenü [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\SendTo [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Recent [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Netzwerkumgebung [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Lokale Einstellungen [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Documents\Eigene Videos [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Documents\Eigene Musik [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Eigene Dateien [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Documents\Eigene Bilder [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Druckumgebung [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Cookies [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\AppData\Local\Anwendungsdaten [2010/12/25 00:16:32 | 000,000,000 | -HSD | C] -- C:\Users\Tiago\Anwendungsdaten [2010/12/25 00:16:32 | 000,000,000 | -H-D | C] -- C:\Users\Tiago\AppData [2010/12/25 00:16:32 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Temp [2010/12/25 00:16:32 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Local\Microsoft [2010/12/25 00:16:32 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Media Center Programs [2010/12/25 00:16:32 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite [2010/12/25 00:16:31 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Videos [2010/12/25 00:16:31 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Saved Games [2010/12/25 00:16:31 | 000,000,000 | R--D | C] -- C:\Users\Tiago\Pictures [2010/12/25 00:15:22 | 000,000,000 | -HSD | C] -- C:\Recovery ========== Files - Modified Within 30 Days ========== [2011/01/10 18:50:27 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2011/01/10 18:50:23 | 3611,873,280 | -HS- | M] () -- C:\hiberfil.sys [2011/01/10 18:16:00 | 000,013,243 | ---- | M] () -- C:\Users\Tiago\Desktop\Novo Documento do Microsoft Word.docx [2011/01/10 18:09:07 | 000,689,326 | ---- | M] () -- C:\windows\System32\perfh00C.dat [2011/01/10 18:09:07 | 000,684,250 | ---- | M] () -- C:\windows\System32\perfh010.dat [2011/01/10 18:09:07 | 000,648,704 | ---- | M] () -- C:\windows\System32\perfh007.dat [2011/01/10 18:09:07 | 000,611,332 | ---- | M] () -- C:\windows\System32\perfh009.dat [2011/01/10 18:09:07 | 000,129,150 | ---- | M] () -- C:\windows\System32\perfc00C.dat [2011/01/10 18:09:07 | 000,128,930 | ---- | M] () -- C:\windows\System32\perfc007.dat [2011/01/10 18:09:07 | 000,126,110 | ---- | M] () -- C:\windows\System32\perfc010.dat [2011/01/10 18:09:07 | 000,105,512 | ---- | M] () -- C:\windows\System32\perfc009.dat [2011/01/10 18:06:06 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tiago\Desktop\OTL.exe [2011/01/10 17:48:18 | 000,014,736 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011/01/10 17:48:18 | 000,014,736 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011/01/10 13:14:33 | 000,009,164 | ---- | M] () -- C:\Users\Tiago\.recently-used.xbel [2011/01/09 18:58:47 | 000,032,768 | ---- | M] (FunWebProducts.com) -- C:\windows\System32\f3PSSavr.scr [2011/01/07 01:36:02 | 000,000,000 | ---- | M] () -- C:\Users\Tiago\AppData\Roaming\wklnhst.dat [2011/01/06 07:31:45 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2011/01/03 02:46:06 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2011/01/03 02:46:06 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2011/01/02 02:29:45 | 000,001,464 | ---- | M] () -- C:\Users\Tiago\Desktop\FL (extended memory) - Verknüpfung.lnk [2011/01/01 19:50:53 | 000,001,197 | ---- | M] () -- C:\Users\Tiago\Desktop\DVDVideoSoft Free Studio.lnk [2010/12/31 18:39:45 | 000,001,885 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010/12/30 22:46:00 | 000,001,288 | ---- | M] () -- C:\Users\Public\Desktop\Paint.NET.lnk [2010/12/30 22:44:25 | 000,001,065 | ---- | M] () -- C:\Users\Public\Desktop\GIMP 2.lnk [2010/12/30 16:00:03 | 000,000,232 | ---- | M] () -- C:\windows\ODBCINST.INI [2010/12/26 23:54:43 | 000,002,479 | ---- | M] () -- C:\Users\Public\Desktop\Safari.lnk [2010/12/26 23:54:04 | 000,001,152 | ---- | M] () -- C:\windows\System32\mapisvc.inf [2010/12/26 22:35:23 | 000,000,997 | ---- | M] () -- C:\Users\Tiago\Desktop\WinRAR.lnk [2010/12/26 22:23:24 | 000,001,908 | ---- | M] () -- C:\windows\diagwrn.xml [2010/12/26 22:23:24 | 000,001,908 | ---- | M] () -- C:\windows\diagerr.xml [2010/12/26 20:02:36 | 000,000,000 | -H-- | M] () -- C:\windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010/12/26 19:42:37 | 000,000,981 | ---- | M] () -- C:\Users\Public\Desktop\Songr.lnk [2010/12/26 19:33:35 | 000,001,753 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2010/12/25 14:37:43 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2010/12/25 11:50:46 | 000,350,288 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT [2010/12/25 02:03:27 | 000,002,068 | ---- | M] () -- C:\Users\Tiago\Desktop\Windows Live Messenger .lnk [2010/12/25 00:23:53 | 000,000,033 | ---- | M] () -- C:\windows\0 [2010/12/25 00:17:01 | 000,000,000 | ---- | M] () -- C:\windows\System32\drivers\144D_SAMSUNG_N_R530_04KQ.mrk [2010/12/24 23:14:38 | 000,052,870 | ---- | M] () -- C:\windows\System32\license.rtf ========== Files Created - No Company Name ========== [2011/01/10 18:38:29 | 000,731,136 | ---- | C] () -- C:\Users\Tiago\Desktop\avenger.exe [2011/01/10 18:18:04 | 000,013,243 | ---- | C] () -- C:\Users\Tiago\Desktop\Novo Documento do Microsoft Word.docx [2011/01/10 13:14:33 | 000,009,164 | ---- | C] () -- C:\Users\Tiago\.recently-used.xbel [2011/01/07 01:36:02 | 000,000,000 | ---- | C] () -- C:\Users\Tiago\AppData\Roaming\wklnhst.dat [2011/01/06 07:31:45 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2011/01/05 11:48:12 | 000,036,352 | ---- | C] () -- C:\windows\System32\COMDLG32.oca [2011/01/05 11:48:12 | 000,003,026 | ---- | C] () -- C:\windows\System32\COMCT332.DEP [2011/01/05 11:48:12 | 000,002,494 | ---- | C] () -- C:\windows\System32\COMDLG32.DEP [2011/01/05 11:48:12 | 000,002,463 | ---- | C] () -- C:\windows\System32\MSWINSCK.DEP [2011/01/03 02:46:06 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2011/01/03 02:46:06 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2011/01/02 02:29:07 | 000,001,464 | ---- | C] () -- C:\Users\Tiago\Desktop\FL (extended memory) - Verknüpfung.lnk [2011/01/01 19:50:53 | 000,001,197 | ---- | C] () -- C:\Users\Tiago\Desktop\DVDVideoSoft Free Studio.lnk [2010/12/31 18:39:45 | 000,001,885 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010/12/30 22:46:00 | 000,001,288 | ---- | C] () -- C:\Users\Public\Desktop\Paint.NET.lnk [2010/12/30 22:44:25 | 000,001,065 | ---- | C] () -- C:\Users\Public\Desktop\GIMP 2.lnk [2010/12/30 16:00:03 | 000,000,232 | ---- | C] () -- C:\windows\ODBCINST.INI [2010/12/26 23:54:43 | 000,002,479 | ---- | C] () -- C:\Users\Public\Desktop\Safari.lnk [2010/12/26 22:35:23 | 000,000,997 | ---- | C] () -- C:\Users\Tiago\Desktop\WinRAR.lnk [2010/12/26 22:23:20 | 000,001,908 | ---- | C] () -- C:\windows\diagwrn.xml [2010/12/26 22:23:20 | 000,001,908 | ---- | C] () -- C:\windows\diagerr.xml [2010/12/26 20:02:36 | 000,000,000 | -H-- | C] () -- C:\windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010/12/26 19:42:37 | 000,000,981 | ---- | C] () -- C:\Users\Public\Desktop\Songr.lnk [2010/12/26 19:33:35 | 000,001,753 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010/12/25 14:37:43 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2010/12/25 00:37:21 | 000,002,068 | ---- | C] () -- C:\Users\Tiago\Desktop\Windows Live Messenger .lnk [2010/12/25 00:23:53 | 000,000,033 | ---- | C] () -- C:\windows\0 [2010/12/25 00:18:09 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe [2010/12/25 00:17:01 | 000,000,000 | ---- | C] () -- C:\windows\System32\drivers\144D_SAMSUNG_N_R530_04KQ.mrk [2010/04/26 07:37:19 | 000,000,455 | ---- | C] () -- C:\windows\HotFixList.ini [2010/04/26 07:17:25 | 000,000,109 | ---- | C] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log [2010/04/26 07:16:35 | 000,000,110 | ---- | C] () -- C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log [2010/04/26 07:15:43 | 000,000,106 | ---- | C] () -- C:\ProgramData\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}.log [2010/04/26 07:13:51 | 000,000,110 | ---- | C] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log [2010/04/26 07:12:51 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log [2010/04/26 07:12:24 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log [2009/09/28 10:22:00 | 000,315,392 | ---- | C] () -- C:\windows\System32\drivers\yk62x86.sys [2009/07/14 00:51:43 | 000,073,728 | ---- | C] () -- C:\windows\System32\BthpanContextHandler.dll [2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\windows\System32\BWContextHandler.dll [2006/10/08 11:33:54 | 000,000,000 | ---- | C] () -- C:\windows\R-series.ini ========== LOP Check ========== [2011/01/01 19:50:31 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\DVDVideoSoft [2011/01/01 19:50:59 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\DVDVideoSoftIEHelpers [2011/01/05 10:43:24 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\GetRight [2011/01/05 10:34:04 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\GetRightToGo [2011/01/10 13:14:33 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\gtk-2.0 [2010/12/30 22:10:22 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\LolClient [2009/07/14 05:53:46 | 000,012,952 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2010/12/25 14:39:19 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\Adobe [2010/12/26 23:56:01 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\Apple Computer [2011/01/01 19:50:31 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\DVDVideoSoft [2011/01/01 19:50:59 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\DVDVideoSoftIEHelpers [2011/01/05 10:43:24 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\GetRight [2011/01/05 10:34:04 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\GetRightToGo [2010/12/25 01:05:50 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\Google [2011/01/10 13:14:33 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\gtk-2.0 [2010/12/25 00:42:56 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\Identities [2010/12/30 22:10:22 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\LolClient [2010/12/25 01:20:41 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\Macromedia [2010/05/25 20:38:41 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\Media Center Programs [2011/01/10 18:18:15 | 000,000,000 | --SD | M] -- C:\Users\Tiago\AppData\Roaming\Microsoft [2010/12/31 18:40:16 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\Mozilla [2010/12/26 22:54:42 | 000,000,000 | ---D | M] -- C:\Users\Tiago\AppData\Roaming\WinRAR < %APPDATA%\*.exe /s > [2010/12/25 14:39:05 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Tiago\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe [2010/12/25 11:08:21 | 002,827,728 | ---- | M] (Adobe Systems, Inc.) -- C:\Users\Tiago\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys [2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys [2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys < MD5 for: ATAPI.SYS > [2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys [2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll [2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll < MD5 for: EVENTLOG.DLL > [2007/05/17 13:34:04 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files\CyberLink\PowerDirector\EventLog.dll < MD5 for: EXPLORER.EXE > [2009/10/06 07:06:36 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_523cdab8f40fe558\explorer.exe [2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe [2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\explorer.exe [2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe [2009/08/03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe [2009/08/03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe [2009/10/31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe [2009/10/06 06:53:03 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_51c00e6ddae85c4b\explorer.exe < MD5 for: IASTOR.SYS > [2009/11/20 06:59:26 | 000,432,664 | ---- | M] (Intel Corporation) MD5=EDF5ECC965FAAA533D35E02F47B9132E -- C:\Windows\System32\drivers\iaStor.sys [2009/11/20 06:59:26 | 000,432,664 | ---- | M] (Intel Corporation) MD5=EDF5ECC965FAAA533D35E02F47B9132E -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_x86_neutral_a3da184953a37ce8\iaStor.sys < MD5 for: IASTORV.SYS > [2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys [2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys [2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll [2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll < MD5 for: NVSTOR.SYS > [2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys [2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys [2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys < MD5 for: SCECLI.DLL > [2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll [2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll < MD5 for: USER32.DLL > [2009/07/14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\System32\user32.dll [2009/07/14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll < MD5 for: USERINIT.EXE > [2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe [2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe < MD5 for: WINLOGON.EXE > [2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe [2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe [2009/10/28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe [2009/07/14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009/07/14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys [2009/07/14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [2009/07/14 02:15:13 | 000,346,112 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll [2009/07/14 02:15:13 | 000,215,552 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll < End of report > |
|
10.01.2011, 19:45
| #3 |
| /// Malware-holic   | System Tool 2011? • Starte bitte die OTL.exe
__________________• Kopiere nun das Folgende in die Textbox. :OTL O4 - HKU\S-1-5-21-347282546-1026266698-384504505-1000..\RunOnce: [pAdPd01814] C:\ProgramData\pAdPd01814\pAdPd01814.exe () [2011/01/10 17:36:59 | 000,000,000 | ---D | C] -- C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tool :Files C:\ProgramData\pAdPd01814\ :Commands [purity] [EMPTYFLASH] [emptytemp] [Reboot] • Schliesse bitte nun alle Programme. • Klicke nun bitte auf den Fix Button. • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen. • Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren. öffne computer, c: dann _OTL dort rechtsklick auf moved files wähle zu moved files.rar oder zip hinzufügen. lade das archiv in unserem upload channel hoch. http://www.trojaner-board.de/54791-a...ner-board.html
__________________ |
|
10.01.2011, 20:07
| #4 |
| | System Tool 2011? Der Schluss noch immer während Abgesicheren Modus?? |
|
10.01.2011, 20:08
| #5 |
| /// Malware-holic | System Tool 2011? nö sollte im normalen klappen.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
10.01.2011, 20:10
| #6 |
| | System Tool 2011? Ok Mach ich!!!! |
|
10.01.2011, 20:16
| #7 |
| | System Tool 2011? All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-347282546-1026266698-384504505-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\pAdPd01814 deleted successfully. C:\ProgramData\pAdPd01814\pAdPd01814.exe moved successfully. C:\Users\Tiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tool folder moved successfully. ========== FILES ========== C:\ProgramData\pAdPd01814 folder moved successfully. ========== COMMANDS ========== [EMPTYFLASH] User: Administrator User: All Users User: Default ->Flash cache emptied: 56502 bytes User: Default User ->Flash cache emptied: 0 bytes User: Public User: Tiago ->Flash cache emptied: 15709704 bytes Total Flash Files Cleaned = 15.00 mb [EMPTYTEMP] User: Administrator User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public User: Tiago ->Temp folder emptied: 435797991 bytes ->Temporary Internet Files folder emptied: 227188341 bytes ->Java cache emptied: 661096 bytes ->FireFox cache emptied: 70859924 bytes ->Apple Safari cache emptied: 0 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 98588229 bytes RecycleBin emptied: 3821222918 bytes Total Files Cleaned = 4,439.00 mb OTL by OldTimer - Version 3.2.20.1 log created on 01102011_200935 Files\Folders moved on Reboot... Registry entries deleted on Reboot... |
|
10.01.2011, 20:22
| #8 |
| | System Tool 2011? Danke mein Pc Geht jetzt wieder!!  Vielen daankkk |
|
10.01.2011, 20:35
| #9 |
| /// Malware-holic | System Tool 2011? wir sind nicht fertig. wo ist der upload. dann gehts weiter.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
10.01.2011, 20:36
| #10 |
| | System Tool 2011? Was für ein Upload?? |
|
10.01.2011, 20:42
| #11 |
| /// Malware-holic | System Tool 2011? steht doch unter dem otl script. du musst schon alles lesen
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
10.01.2011, 20:48
| #12 |
| | System Tool 2011? Ich komme nicht draus mit dem Upload, ich check das Tutorial nicht  |
|
10.01.2011, 20:54
| #13 |
| /// Malware-holic | System Tool 2011? was ist da so schwierig, wo ist das problem. einfach den ordner moved files packen, dann im upload channel auf durchsuchen klicken. otl.rar oder zip auswählen und absenden.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
10.01.2011, 20:56
| #14 |
| | System Tool 2011? Ich habs jetzt gemacht! |
|
10.01.2011, 21:03
| #15 |
| /// Malware-holic | System Tool 2011? warum hast du keinen rechtsklick auf den ordner moved files gemacht und ihn mit winrar oder zip gepackt, das wäre einfacher gewesen. aber so passts auch. download malwarebytes: Malwarebytes instalieren, öffnen, registerkarte aktualisierung, programm updaten. schalte alle laufenden programme ab, trenne die internetverbindung. registerkarte scanner, komplett scan, funde entfernen, log posten.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
| Themen zu System Tool 2011? |
| .dll, adobe, dll, error, excel, explorer, fehler, firefox.exe, flash player, format, home, install.exe, installation, location, logfile, microsoft office word, mozilla, netzwerk, nicht gefunden, nvidia, office 2007, oldtimer, problem, realtek, registry, rundll, saver, scan, security, security update, server, shell32.dll, software, studio, system, windows |
Linear-Darstellung
