| |
| |||||||
Log-Analyse und Auswertung: Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
03.02.2011, 01:05
| #1 |
| |  Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! Hallo. Bin ganz neu hier. Hatte vor kurzem nen Virus vom Facebook-Chat erhalten. Danach Pc neu aufgesetzt.. Läuft sonst ganz normal mit Kabel-Internet. 16000 aber jetzt lahmt er extrem..vorallem wenn ich Frontville,Farmville spiele auf Fb.Lädt nur sehr sehr sehr langsam. reagiert oftmals nicht friert ein.einmal ist er abgestürtzt..( blauer Bildschirm mit ner weißen Schrift) Habe jetzt den treiber für die Grafikkarte aktuallisiert.Cpu Auslastung auf 100%.wenn ich dann den Taskmanager öffne,nachdem nix mehr geht...senkt sich die cpu Auslastung. Alles defragmentiert,Temp Ordner geleert,chache..usw..und nichts tut sich...Hat des was mit dem AVG was zu tun?  Woran könnte das liegen?..Was kann ich machen. Wer könnte mir da Ratschläge geben bitte  Intel Pentium 4 CPU 2,80 GHz 2,00 GB Ram Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 00:00:36, on 03.02.2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\PROGRA~1\AVG\AVG10\avgchsvx.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe C:\Programme\AVG\AVG10\avgtray.exe C:\Programme\Lexmark 2500 Series\lxddmon.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe C:\Programme\AVG\AVG10\avgwdsvc.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Programme\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe C:\WINDOWS\system32\lxddcoms.exe C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\svchost.exe C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe C:\Programme\AVG\AVG10\avgnsx.exe C:\Programme\AVG\AVG10\avgemcx.exe C:\Programme\Mozilla Firefox\firefox.exe C:\Programme\Lavasoft\Ad-Aware\AAWTray.exe C:\Programme\Mozilla Firefox\plugin-container.exe C:\PROGRA~1\AVG\AVG10\avgrsx.exe C:\Programme\AVG\AVG10\avgcsrvx.exe C:\Programme\IncrediMail\Bin\IncMail.exe C:\Programme\IncrediMail\Bin\ImApp.exe C:\Programme\AVG\AVG10\avgcsrvx.exe C:\WINDOWS\system32\msiexec.exe C:\Programme\TrendMicro\HiJackThis\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG10\avgssie.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O4 - HKLM\..\Run: [HDAudDeck] C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe 1 O4 - HKLM\..\Run: [AVG_TRAY] C:\Programme\AVG\AVG10\avgtray.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe /installquiet O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG10\avgpp.dll O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft - C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Programme\AVG\AVG10\avgwdsvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing) O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programme\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: lxddCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe O23 - Service: lxdd_device - - C:\WINDOWS\system32\lxddcoms.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 6191 bytes ------------------------------------------------------------------------ OTL logfile created on: 03.02.2011 00:41:06 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 55,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 465,75 Gb Total Space | 419,02 Gb Free Space | 89,97% Space Free | Partition Type: NTFS Computer Name: PRIVAT-DFBC6387 | User Name: Manfred | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days ========== Processes (All) ========== PRC - [2011.02.03 00:23:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads\OTL.exe PRC - [2011.01.31 20:20:39 | 000,936,712 | ---- | M] (Lavasoft) -- C:\Programme\Lavasoft\Ad-Aware\AAWTray.exe PRC - [2011.01.31 20:20:38 | 001,402,272 | ---- | M] (Lavasoft) -- C:\Programme\Lavasoft\Ad-Aware\AAWService.exe PRC - [2011.01.31 17:24:57 | 000,353,736 | ---- | M] (IncrediMail, Ltd.) -- C:\Programme\IncrediMail\Bin\IncMail.exe PRC - [2011.01.31 17:24:57 | 000,255,432 | ---- | M] (IncrediMail, Ltd.) -- C:\Programme\IncrediMail\Bin\ImApp.exe PRC - [2011.01.07 01:22:54 | 002,747,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgtray.exe PRC - [2011.01.07 01:22:44 | 001,084,256 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgnsx.exe PRC - [2011.01.07 01:22:12 | 001,052,512 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgemcx.exe PRC - [2011.01.06 15:23:20 | 000,737,872 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe PRC - [2011.01.06 15:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe PRC - [2010.12.05 16:26:40 | 000,654,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgrsx.exe PRC - [2010.12.05 16:26:12 | 000,650,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgchsvx.exe PRC - [2010.12.03 20:44:45 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe PRC - [2010.12.03 20:44:45 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\plugin-container.exe PRC - [2010.10.22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgwdsvc.exe PRC - [2010.10.22 04:56:58 | 000,845,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgcsrvx.exe PRC - [2010.08.17 14:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spoolsv.exe PRC - [2010.07.09 16:24:16 | 000,155,752 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe PRC - [2009.02.09 12:21:35 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\services.exe PRC - [2009.02.06 11:10:02 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiprvse.exe PRC - [2008.08.21 13:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008.08.21 13:00:00 | 000,513,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winlogon.exe PRC - [2008.08.21 13:00:00 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\NOTEPAD.EXE PRC - [2008.08.21 13:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\smss.exe PRC - [2008.08.21 13:00:00 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\alg.exe PRC - [2008.08.21 13:00:00 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\rundll32.exe PRC - [2008.08.21 13:00:00 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\unsecapp.exe PRC - [2008.08.21 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [RPCSS] PRC - [2008.08.21 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [NETWORKSERVICE] PRC - [2008.08.21 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [NETSVCS] PRC - [2008.08.21 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [LOCALSERVICE] PRC - [2008.08.21 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [LOCALSERVICE] PRC - [2008.08.21 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [IMGSVC] PRC - [2008.08.21 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [DCOMLAUNCH] PRC - [2008.08.21 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\lsass.exe PRC - [2008.08.21 13:00:00 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\csrss.exe PRC - [2008.08.15 04:13:26 | 030,003,200 | ---- | M] (VIA Technologies, Inc.) -- C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe PRC - [2008.07.25 11:17:02 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe PRC - [2007.10.11 08:45:56 | 000,051,712 | ---- | M] (ArcSoft) -- C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe PRC - [2007.05.28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2007.05.04 07:38:34 | 000,291,760 | ---- | M] () -- C:\Programme\Lexmark 2500 Series\lxddmon.exe PRC - [2007.04.26 06:21:22 | 000,537,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxddcoms.exe ========== Modules (All) ========== MOD - [2011.02.03 00:23:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads\OTL.exe MOD - [2010.11.06 01:21:13 | 001,210,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\urlmon.dll MOD - [2010.11.06 01:21:09 | 001,991,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\iertutil.dll MOD - [2010.11.06 01:21:08 | 011,080,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ieframe.dll MOD - [2010.08.23 17:11:46 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2010.08.16 09:44:05 | 000,590,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\rpcrt4.dll MOD - [2010.07.27 07:29:42 | 008,503,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shell32.dll MOD - [2010.07.16 13:05:01 | 001,288,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ole32.dll MOD - [2009.12.08 10:23:28 | 000,474,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shlwapi.dll MOD - [2009.06.25 09:25:23 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\secur32.dll MOD - [2009.03.21 15:06:58 | 001,063,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\kernel32.dll MOD - [2009.02.09 11:51:44 | 000,678,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\advapi32.dll MOD - [2009.02.09 11:51:43 | 000,740,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ntdll.dll MOD - [2008.10.23 13:36:55 | 000,286,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\gdi32.dll MOD - [2008.10.15 17:35:02 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\netapi32.dll MOD - [2008.08.21 13:00:00 | 000,989,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\setupapi.dll MOD - [2008.08.21 13:00:00 | 000,846,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\comres.dll MOD - [2008.08.21 13:00:00 | 000,580,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\user32.dll MOD - [2008.08.21 13:00:00 | 000,551,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\oleaut32.dll MOD - [2008.08.21 13:00:00 | 000,498,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\clbcatq.dll MOD - [2008.08.21 13:00:00 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcrt.dll MOD - [2008.08.21 13:00:00 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\comdlg32.dll MOD - [2008.08.21 13:00:00 | 000,219,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\uxtheme.dll MOD - [2008.08.21 13:00:00 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\framedyn.dll MOD - [2008.08.21 13:00:00 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MSCTFIME.IME MOD - [2008.08.21 13:00:00 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wldap32.dll MOD - [2008.08.21 13:00:00 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winspool.drv MOD - [2008.08.21 13:00:00 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\apphelp.dll MOD - [2008.08.21 13:00:00 | 000,119,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ntmarta.dll MOD - [2008.08.21 13:00:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx MOD - [2008.08.21 13:00:00 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\imm32.dll MOD - [2008.08.21 13:00:00 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\olepro32.dll MOD - [2008.08.21 13:00:00 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\srclient.dll MOD - [2008.08.21 13:00:00 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\samlib.dll MOD - [2008.08.21 13:00:00 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\psapi.dll MOD - [2008.08.21 13:00:00 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\version.dll ========== Win32 Services (All) ========== SRV - File not found [On_Demand | Stopped] -- -- (IDriverT) SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2011.01.31 20:20:38 | 001,402,272 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Programme\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service) SRV - [2011.01.06 15:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2010.10.22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Programme\AVG\AVG10\avgwdsvc.exe -- (avgwd) SRV - [2010.08.27 06:57:36 | 000,099,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\srvsvc.dll -- (LanmanServer) SRV - [2010.08.17 14:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\spoolsv.exe -- (Spooler) SRV - [2010.07.09 16:24:16 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc) SRV - [2009.06.10 07:14:21 | 000,132,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wkssvc.dll -- (lanmanworkstation) SRV - [2009.02.09 12:21:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\services.exe -- (PlugPlay) SRV - [2009.02.09 12:21:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\services.exe -- (Eventlog) SRV - [2009.02.09 11:51:45 | 000,401,408 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\rpcss.dll -- (RpcSs) Remoteprozeduraufruf (RPC) SRV - [2009.02.09 11:51:45 | 000,401,408 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\rpcss.dll -- (DcomLaunch) SRV - [2009.02.09 11:51:44 | 000,678,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\advapi32.dll -- (Wmi) SRV - [2008.08.21 13:00:00 | 000,483,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wzcsvc.dll -- (WZCSVC) SRV - [2008.08.21 13:00:00 | 000,438,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\ntmssvc.dll -- (NtmsSvc) SRV - [2008.08.21 13:00:00 | 000,409,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\qmgr.dll -- (BITS) SRV - [2008.08.21 13:00:00 | 000,334,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wiaservc.dll -- (stisvc) Windows-Bilderfassung (WIA) SRV - [2008.08.21 13:00:00 | 000,334,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\ipnathlp.dll -- (SharedAccess) SRV - [2008.08.21 13:00:00 | 000,297,472 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\termsrv.dll -- (TermService) SRV - [2008.08.21 13:00:00 | 000,294,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\qagentrt.dll -- (napagent) NAP-Agent (Network Access Protection) SRV - [2008.08.21 13:00:00 | 000,292,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\vssvc.exe -- (VSS) SRV - [2008.08.21 13:00:00 | 000,249,856 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\tapisrv.dll -- (TapiSrv) SRV - [2008.08.21 13:00:00 | 000,225,280 | ---- | M] (Microsoft Corp., Veritas Software) [On_Demand | Stopped] -- C:\WINDOWS\System32\dmadmin.exe -- (dmadmin) SRV - [2008.08.21 13:00:00 | 000,198,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\netman.dll -- (Netman) SRV - [2008.08.21 13:00:00 | 000,193,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\schedsvc.dll -- (Schedule) SRV - [2008.08.21 13:00:00 | 000,186,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\upnphost.dll -- (upnphost) SRV - [2008.08.21 13:00:00 | 000,186,368 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\rasmans.dll -- (RasMan) SRV - [2008.08.21 13:00:00 | 000,177,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\w32time.dll -- (W32Time) SRV - [2008.08.21 13:00:00 | 000,175,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\appmgmts.dll -- (AppMgmt) SRV - [2008.08.21 13:00:00 | 000,171,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\srsvc.dll -- (srservice) SRV - [2008.08.21 13:00:00 | 000,150,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\imapi.exe -- (ImapiService) SRV - [2008.08.21 13:00:00 | 000,145,408 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wbem\wmisvc.dll -- (winmgmt) SRV - [2008.08.21 13:00:00 | 000,143,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\sessmgr.exe -- (RDSessMgr) SRV - [2008.08.21 13:00:00 | 000,135,168 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\shsvcs.dll -- (Themes) SRV - [2008.08.21 13:00:00 | 000,135,168 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\shsvcs.dll -- (ShellHWDetection) SRV - [2008.08.21 13:00:00 | 000,135,168 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\shsvcs.dll -- (FastUserSwitchingCompatibility) SRV - [2008.08.21 13:00:00 | 000,133,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\dot3svc.dll -- (Dot3svc) Automatische Konfiguration (verkabelt) SRV - [2008.08.21 13:00:00 | 000,132,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\rsvp.exe -- (RSVP) SRV - [2008.08.21 13:00:00 | 000,129,024 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\xmlprov.dll -- (xmlprov) SRV - [2008.08.21 13:00:00 | 000,127,488 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\dhcpcsvc.dll -- (Dhcp) SRV - [2008.08.21 13:00:00 | 000,126,464 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\wbem\wmiapsrv.exe -- (WmiApSrv) SRV - [2008.08.21 13:00:00 | 000,114,176 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDEdsdm) SRV - [2008.08.21 13:00:00 | 000,114,176 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDE) SRV - [2008.08.21 13:00:00 | 000,099,840 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\scardsvr.exe -- (SCardSvr) SRV - [2008.08.21 13:00:00 | 000,094,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\smlogsvc.exe -- (SysmonLog) SRV - [2008.08.21 13:00:00 | 000,090,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\trkwks.dll -- (TrkWks) Überwachung verteilter Verknüpfungen (Client) SRV - [2008.08.21 13:00:00 | 000,088,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\rasauto.dll -- (RasAuto) SRV - [2008.08.21 13:00:00 | 000,080,896 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wscsvc.dll -- (wscsvc) SRV - [2008.08.21 13:00:00 | 000,078,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\msiexec.exe -- (MSIServer) SRV - [2008.08.21 13:00:00 | 000,077,824 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\browser.dll -- (Browser) SRV - [2008.08.21 13:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\tlntsvr.exe -- (TlntSvr) SRV - [2008.08.21 13:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\locator.exe -- (RpcLocator) SRV - [2008.08.21 13:00:00 | 000,071,680 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\ssdpsrv.dll -- (SSDPSRV) SRV - [2008.08.21 13:00:00 | 000,068,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\webclnt.dll -- (WebClient) SRV - [2008.08.21 13:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\cryptsvc.dll -- (CryptSvc) SRV - [2008.08.21 13:00:00 | 000,061,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\kmsvc.dll -- (hkmsvc) SRV - [2008.08.21 13:00:00 | 000,059,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\regsvc.dll -- (RemoteRegistry) SRV - [2008.08.21 13:00:00 | 000,053,248 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\mprdim.dll -- (RemoteAccess) SRV - [2008.08.21 13:00:00 | 000,045,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\dnsrslvr.dll -- (Dnscache) SRV - [2008.08.21 13:00:00 | 000,044,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\alg.exe -- (ALG) SRV - [2008.08.21 13:00:00 | 000,042,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\audiosrv.dll -- (AudioSrv) SRV - [2008.08.21 13:00:00 | 000,039,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\sens.dll -- (SENS) SRV - [2008.08.21 13:00:00 | 000,038,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll -- (helpsvc) SRV - [2008.08.21 13:00:00 | 000,033,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\msgsvc.dll -- (Messenger) SRV - [2008.08.21 13:00:00 | 000,033,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\eapsvc.dll -- (EapHost) SRV - [2008.08.21 13:00:00 | 000,033,280 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\clipsrv.exe -- (ClipSrv) SRV - [2008.08.21 13:00:00 | 000,032,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\mnmsrvc.exe -- (mnmsrvc) SRV - [2008.08.21 13:00:00 | 000,024,064 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\WINDOWS\system32\dmserver.dll -- (dmserver) SRV - [2008.08.21 13:00:00 | 000,023,040 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\ersvc.dll -- (ERSvc) SRV - [2008.08.21 13:00:00 | 000,018,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\seclogon.dll -- (seclogon) SRV - [2008.08.21 13:00:00 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\ups.exe -- (UPS) SRV - [2008.08.21 13:00:00 | 000,017,408 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\alrsvc.dll -- (Alerter) SRV - [2008.08.21 13:00:00 | 000,015,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\w3ssl.dll -- (HTTPFilter) SRV - [2008.08.21 13:00:00 | 000,013,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\lmhsvc.dll -- (LmHosts) SRV - [2008.08.21 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\lsass.exe -- (SamSs) SRV - [2008.08.21 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\lsass.exe -- (ProtectedStorage) SRV - [2008.08.21 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\lsass.exe -- (PolicyAgent) SRV - [2008.08.21 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\lsass.exe -- (NtLmSsp) SRV - [2008.08.21 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\lsass.exe -- (Netlogon) SRV - [2008.08.21 13:00:00 | 000,006,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wuauserv.dll -- (wuauserv) SRV - [2008.08.21 13:00:00 | 000,006,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\msdtc.exe -- (MSDTC) SRV - [2008.08.21 13:00:00 | 000,005,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\cisvc.exe -- (CiSvc) SRV - [2008.08.21 13:00:00 | 000,005,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\dllhost.exe -- (SwPrv) SRV - [2008.08.21 13:00:00 | 000,005,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\dllhost.exe -- (COMSysApp) SRV - [2008.07.29 21:10:04 | 000,046,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0) SRV - [2008.07.29 19:24:50 | 000,881,664 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc) SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing) SRV - [2008.07.25 11:17:02 | 000,069,632 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008.07.25 11:16:40 | 000,034,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state) SRV - [2008.07.07 21:26:58 | 000,253,952 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\es.dll -- (EventSystem) SRV - [2008.06.20 18:46:10 | 000,247,296 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\WINDOWS\system32\mswsock.dll -- (Nla) NLA (Network Location Awareness) SRV - [2007.10.11 08:45:56 | 000,051,712 | ---- | M] (ArcSoft) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2007.05.28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007.04.26 06:21:42 | 000,099,248 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe -- (lxddCATSCustConnectService) SRV - [2007.04.26 06:21:22 | 000,537,520 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxddcoms.exe -- (lxdd_device) SRV - [2006.10.24 20:05:06 | 000,920,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc) SRV - [2006.10.18 22:47:16 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\mspmsnsv.dll -- (WmdmPmSN) SRV - [2006.09.28 18:56:14 | 000,055,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\WudfSvc.dll -- (WudfSvc) SRV - [2003.07.28 12:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose) ========== Driver Services (All) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | Disabled | Stopped] -- -- (ViaIde) DRV - File not found [Kernel | Disabled | Stopped] -- -- (ultra) DRV - File not found [Kernel | Disabled | Stopped] -- -- (TosIde) DRV - File not found [Kernel | Disabled | Stopped] -- -- (symc8xx) DRV - File not found [Kernel | Disabled | Stopped] -- -- (symc810) DRV - File not found [Kernel | Disabled | Stopped] -- -- (sym_u3) DRV - File not found [Kernel | Disabled | Stopped] -- -- (sym_hi) DRV - File not found [Kernel | Disabled | Stopped] -- -- (Sparrow) DRV - File not found [Kernel | Disabled | Stopped] -- -- (Simbad) DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql1280) DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql1240) DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql12160) DRV - File not found [Kernel | Disabled | Stopped] -- -- (Ql10wnt) DRV - File not found [Kernel | Disabled | Stopped] -- -- (ql1080) DRV - File not found [Kernel | Disabled | Stopped] -- -- (perc2hib) DRV - File not found [Kernel | Disabled | Stopped] -- -- (perc2) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | Disabled | Stopped] -- -- (mraid35x) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | Disabled | Stopped] -- -- (IntelIde) DRV - File not found [Kernel | Disabled | Stopped] -- -- (ini910u) DRV - File not found [Kernel | Disabled | Stopped] -- -- (i2omp) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | Disabled | Stopped] -- -- (hpn) DRV - File not found [Kernel | Disabled | Stopped] -- -- (dpti2o) DRV - File not found [Kernel | Disabled | Stopped] -- -- (dac960nt) DRV - File not found [Kernel | Disabled | Stopped] -- -- (Cpqarray) DRV - File not found [Kernel | Disabled | Stopped] -- -- (CmdIde) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | Disabled | Stopped] -- -- (cd20xrnt) DRV - File not found [Kernel | Disabled | Stopped] -- -- (Atdisk) DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc3550) DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc3350p) DRV - File not found [Kernel | Disabled | Stopped] -- -- (asc) DRV - File not found [Kernel | Disabled | Stopped] -- -- (amsint) DRV - File not found [Kernel | Disabled | Stopped] -- -- (AliIde) DRV - File not found [Kernel | Disabled | Stopped] -- -- (aic78xx) DRV - File not found [Kernel | Disabled | Stopped] -- -- (aic78u2) DRV - File not found [Kernel | Disabled | Stopped] -- -- (Aha154x) DRV - File not found [Kernel | Disabled | Stopped] -- -- (adpu160m) DRV - File not found [Kernel | Disabled | Stopped] -- -- (abp480n5) DRV - File not found [Kernel | Disabled | Stopped] -- -- (Abiosdsk) DRV - [2011.01.31 18:04:46 | 000,685,816 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010.12.08 04:12:38 | 000,251,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2010.12.03 10:05:34 | 000,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd) DRV - [2010.12.03 10:05:33 | 000,015,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Programme\Lavasoft\Ad-Aware\kernexplorer.sys -- (Lavasoft Kernexplorer) DRV - [2010.11.12 13:19:38 | 000,299,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2010.11.02 16:17:02 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\ndproxy.sys -- (NDProxy) DRV - [2010.09.13 15:27:24 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH) DRV - [2010.09.07 03:48:56 | 000,034,384 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2010.09.07 03:48:50 | 000,026,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86) DRV - [2010.08.26 14:39:50 | 000,357,248 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\srv.sys -- (Srv) DRV - [2010.08.03 15:23:36 | 000,026,192 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim) DRV - [2010.08.03 15:23:34 | 000,123,472 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver) DRV - [2010.08.03 15:23:32 | 000,030,288 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter) DRV - [2010.07.10 05:38:00 | 010,604,128 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2010.02.24 14:11:07 | 000,455,680 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\mrxsmb.sys -- (MRxSmb) DRV - [2009.10.20 17:20:16 | 000,265,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\http.sys -- (HTTP) DRV - [2009.06.24 12:18:41 | 000,092,928 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\ksecdd.sys -- (KSecDD) DRV - [2008.08.21 13:00:00 | 000,800,384 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dmboot.sys -- (dmboot) DRV - [2008.08.21 13:00:00 | 000,574,976 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\ntfs.sys -- (Ntfs) DRV - [2008.08.21 13:00:00 | 000,384,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\update.sys -- (Update) DRV - [2008.08.21 13:00:00 | 000,188,800 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ACPI.sys -- (ACPI) DRV - [2008.08.21 13:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\ndis.sys -- (NDIS) DRV - [2008.08.21 13:00:00 | 000,180,608 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mrxdav.sys -- (MRxDAV) DRV - [2008.08.21 13:00:00 | 000,175,744 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\rdbss.sys -- (Rdbss) DRV - [2008.08.21 13:00:00 | 000,162,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\netbt.sys -- (NetBT) DRV - [2008.08.21 13:00:00 | 000,154,112 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\dmio.sys -- (dmio) DRV - [2008.08.21 13:00:00 | 000,152,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ipnat.sys -- (IpNat) DRV - [2008.08.21 13:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008.08.21 13:00:00 | 000,143,744 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\fastfat.sys -- (Fastfat) DRV - [2008.08.21 13:00:00 | 000,139,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\rdpwd.sys -- (RDPWD) DRV - [2008.08.21 13:00:00 | 000,129,792 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\fltMgr.sys -- (FltMgr) DRV - [2008.08.21 13:00:00 | 000,126,336 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ftdisk.sys -- (Ftdisk) DRV - [2008.08.21 13:00:00 | 000,120,576 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\pcmcia.sys -- (Pcmcia) DRV - [2008.08.21 13:00:00 | 000,105,344 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\System32\drivers\mup.sys -- (Mup) DRV - [2008.08.21 13:00:00 | 000,091,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndiswan.sys -- (NdisWan) DRV - [2008.08.21 13:00:00 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\parport.sys -- (Parport) DRV - [2008.08.21 13:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ipsec.sys -- (IPSec) DRV - [2008.08.21 13:00:00 | 000,073,472 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sr.sys -- (sr) DRV - [2008.08.21 13:00:00 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psched.sys -- (PSched) DRV - [2008.08.21 13:00:00 | 000,066,048 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\udfs.sys -- (Udfs) DRV - [2008.08.21 13:00:00 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\serial.sys -- (Serial) DRV - [2008.08.21 13:00:00 | 000,063,744 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Running] -- C:\WINDOWS\System32\drivers\cdfs.sys -- (Cdfs) DRV - [2008.08.21 13:00:00 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cdrom.sys -- (Cdrom) DRV - [2008.08.21 13:00:00 | 000,059,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atmarpc.sys -- (Atmarpc) DRV - [2008.08.21 13:00:00 | 000,053,760 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\volsnap.sys -- (VolSnap) DRV - [2008.08.21 13:00:00 | 000,052,992 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\i8042prt.sys -- (i8042prt) DRV - [2008.08.21 13:00:00 | 000,051,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rasl2tp.sys -- (Rasl2tp) WAN-Miniport (L2TP) DRV - [2008.08.21 13:00:00 | 000,048,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspptp.sys -- (PptpMiniport) WAN-Miniport (PPTP) DRV - [2008.08.21 13:00:00 | 000,044,672 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\fips.sys -- (Fips) DRV - [2008.08.21 13:00:00 | 000,042,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\mountmgr.sys -- (MountMgr) DRV - [2008.08.21 13:00:00 | 000,042,112 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\imapi.sys -- (Imapi) DRV - [2008.08.21 13:00:00 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspppoe.sys -- (RasPppoe) DRV - [2008.08.21 13:00:00 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\intelppm.sys -- (intelppm) DRV - [2008.08.21 13:00:00 | 000,036,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ip6fw.sys -- (Ip6Fw) DRV - [2008.08.21 13:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\disk.sys -- (Disk) DRV - [2008.08.21 13:00:00 | 000,035,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msgpc.sys -- (Gpc) DRV - [2008.08.21 13:00:00 | 000,034,688 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\netbios.sys -- (NetBIOS) DRV - [2008.08.21 13:00:00 | 000,034,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wanarp.sys -- (Wanarp) DRV - [2008.08.21 13:00:00 | 000,032,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipfltdrv.sys -- (IpFilterDriver) DRV - [2008.08.21 13:00:00 | 000,032,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkfwd.sys -- (NwlnkFwd) DRV - [2008.08.21 13:00:00 | 000,032,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbccgp.sys -- (usbccgp) DRV - [2008.08.21 13:00:00 | 000,030,848 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\npfs.sys -- (Npfs) DRV - [2008.08.21 13:00:00 | 000,030,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\modem.sys -- (Modem) DRV - [2008.08.21 13:00:00 | 000,027,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\fdc.sys -- (Fdc) DRV - [2008.08.21 13:00:00 | 000,025,216 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kbdclass.sys -- (Kbdclass) DRV - [2008.08.21 13:00:00 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mouclass.sys -- (Mouclass) DRV - [2008.08.21 13:00:00 | 000,021,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\tdtcp.sys -- (TDTCP) DRV - [2008.08.21 13:00:00 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\vga.sys -- (VgaSave) DRV - [2008.08.21 13:00:00 | 000,020,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ipinip.sys -- (IpInIp) DRV - [2008.08.21 13:00:00 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\flpydisk.sys -- (Flpydisk) DRV - [2008.08.21 13:00:00 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv) DRV - [2008.08.21 13:00:00 | 000,019,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\partmgr.sys -- (PartMgr) DRV - [2008.08.21 13:00:00 | 000,019,072 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\msfs.sys -- (Msfs) DRV - [2008.08.21 13:00:00 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\cdaudio.sys -- (Cdaudio) DRV - [2008.08.21 13:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink) DRV - [2008.08.21 13:00:00 | 000,016,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\raspti.sys -- (Raspti) Parallelanschluss (direkt) DRV - [2008.08.21 13:00:00 | 000,015,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\serenum.sys -- (serenum) DRV - [2008.08.21 13:00:00 | 000,015,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mssmbios.sys -- (mssmbios) DRV - [2008.08.21 13:00:00 | 000,014,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndisuio.sys -- (Ndisuio) DRV - [2008.08.21 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\asyncmac.sys -- (AsyncMac) DRV - [2008.08.21 13:00:00 | 000,013,952 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\cbidf2k.sys -- (cbidf2k) DRV - [2008.08.21 13:00:00 | 000,012,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkflt.sys -- (NwlnkFlt) DRV - [2008.08.21 13:00:00 | 000,012,160 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\acpiec.sys -- (ACPIEC) DRV - [2008.08.21 13:00:00 | 000,012,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\tdpipe.sys -- (TDPIPE) DRV - [2008.08.21 13:00:00 | 000,011,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\sfloppy.sys -- (Sfloppy) DRV - [2008.08.21 13:00:00 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\irenum.sys -- (IRENUM) DRV - [2008.08.21 13:00:00 | 000,010,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hidusb.sys -- (hidusb) DRV - [2008.08.21 13:00:00 | 000,010,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndistapi.sys -- (NdisTapi) DRV - [2008.08.21 13:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\rasacd.sys -- (RasAcd) DRV - [2008.08.21 13:00:00 | 000,007,040 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\parvdm.sys -- (ParVdm) DRV - [2008.08.21 13:00:00 | 000,005,888 | ---- | M] (Microsoft Corp., Veritas Software.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\dmload.sys -- (dmload) DRV - [2008.08.21 13:00:00 | 000,004,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\swenum.sys -- (swenum) DRV - [2008.08.21 13:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\rdpcdd.sys -- (RDPCDD) DRV - [2008.08.21 13:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\mnmdd.sys -- (mnmdd) DRV - [2008.08.21 13:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\beep.sys -- (Beep) DRV - [2008.08.21 13:00:00 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\null.sys -- (Null) DRV - [2008.08.14 11:04:36 | 000,138,496 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\afd.sys -- (AFD) DRV - [2008.07.25 13:09:24 | 000,845,184 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV - [2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip.sys -- (Tcpip) DRV - [2008.04.14 07:53:28 | 000,040,840 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\termdd.sys -- (TermDD) DRV - [2008.04.14 07:32:14 | 000,068,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\pci.sys -- (PCI) DRV - [2008.04.14 07:28:04 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\isapnp.sys -- (isapnp) DRV - [2008.04.14 07:22:52 | 000,057,728 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\redbook.sys -- (redbook) DRV - [2008.04.14 00:47:20 | 000,083,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wdmaud.sys -- (wdmaud) DRV - [2008.04.14 00:45:56 | 000,060,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sysaudio.sys -- (sysaudio) DRV - [2008.04.14 00:17:38 | 000,025,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbprint.sys -- (usbprint) DRV - [2008.04.14 00:16:26 | 000,085,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NABTSFEC.sys -- (NABTSFEC) DRV - [2008.04.14 00:16:26 | 000,019,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WSTCODEC.SYS -- (WSTCODEC) DRV - [2008.04.14 00:16:24 | 000,017,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CCDECODE.sys -- (CCDECODE) DRV - [2008.04.14 00:16:24 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SLIP.sys -- (SLIP) DRV - [2008.04.14 00:16:24 | 000,010,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NdisIP.sys -- (NdisIP) DRV - [2008.04.14 00:16:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\StreamIP.sys -- (streamip) DRV - [2008.04.14 00:15:40 | 000,026,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBSTOR.SYS -- (USBSTOR) DRV - [2008.04.14 00:15:38 | 000,059,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbhub.sys -- (usbhub) DRV - [2008.04.14 00:15:36 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbehci.sys -- (usbehci) DRV - [2008.04.14 00:15:36 | 000,020,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbuhci.sys -- (usbuhci) DRV - [2008.04.14 00:15:36 | 000,015,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbscan.sys -- (usbscan) DRV - [2008.04.14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB-Audiotreiber (WDM) DRV - [2008.04.14 00:15:14 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\drmkaud.sys -- (drmkaud) DRV - [2008.04.14 00:15:10 | 000,172,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\kmixer.sys -- (kmixer) DRV - [2008.04.14 00:15:10 | 000,056,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\swmidi.sys -- (swmidi) DRV - [2008.04.14 00:15:08 | 000,006,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\splitter.sys -- (splitter) DRV - [2008.04.14 00:15:02 | 000,052,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DMusic.sys -- (DMusic) DRV - [2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\atapi.sys -- (atapi) DRV - [2008.04.14 00:09:54 | 000,007,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MSKSSRV.sys -- (MSKSSRV) DRV - [2008.04.14 00:09:52 | 000,005,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MSTEE.sys -- (MSTEE) DRV - [2008.04.14 00:09:52 | 000,005,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MSPCLOCK.sys -- (MSPCLOCK) DRV - [2008.04.14 00:09:52 | 000,004,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MSPQM.sys -- (MSPQM) DRV - [2008.04.14 00:02:52 | 000,196,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rdpdr.sys -- (rdpdr) DRV - [2008.04.13 22:09:24 | 000,142,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\aec.sys -- (aec) DRV - [2008.02.14 07:12:00 | 001,389,056 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\monfilt.sys -- (monfilt) DRV - [2007.11.21 20:09:22 | 000,104,320 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2007.09.10 08:50:56 | 000,457,984 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PAC7302.SYS -- (PAC7302) DRV - [2007.05.30 19:15:08 | 000,013,184 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter) DRV - [2006.11.10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc) DRV - [2006.09.28 19:00:34 | 000,082,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WudfRd.sys -- (WudfRd) DRV - [2006.09.28 18:55:50 | 000,077,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WudfPf.sys -- (WudfPf) DRV - [2004.08.15 11:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) DRV - [2001.08.18 04:30:42 | 000,003,328 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\pciide.sys -- (PCIIde) DRV - [2001.08.17 13:59:44 | 000,003,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\audstub.sys -- (audstub) ========== Standard Registry (All) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "www.google.at" FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1178 FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.2.1 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13 FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Programme\AVG\AVG10\Firefox\ [2011.01.31 15:36:06 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2011.02.02 13:17:16 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.01.31 16:34:23 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.01.31 16:59:19 | 000,000,000 | ---D | M] [2011.01.31 16:34:33 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Mozilla\Extensions [2011.01.31 16:34:33 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2011.02.02 19:37:39 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Mozilla\Firefox\Profiles\y8xol58j.default\extensions [2011.02.02 19:37:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Mozilla\Firefox\Profiles\y8xol58j.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.02.02 19:37:39 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2011.01.31 16:34:05 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2011.01.31 17:03:01 | 000,000,000 | ---D | M] (Skype extension) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2011.01.31 15:36:06 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAMME\AVG\AVG10\FIREFOX [2010.12.03 20:44:45 | 000,025,048 | ---- | M] (Mozilla Foundation) -- C:\Programme\Mozilla Firefox\components\browserdirprovider.dll [2010.12.03 20:44:45 | 000,140,248 | ---- | M] (Mozilla Foundation) -- C:\Programme\Mozilla Firefox\components\brwsrcmp.dll [2010.12.03 20:44:45 | 000,066,520 | ---- | M] (mozilla.org) -- C:\Programme\Mozilla Firefox\plugins\npnul32.dll [2003.07.14 22:56:52 | 000,013,888 | ---- | M] (Microsoft Corporation) -- C:\Programme\Mozilla Firefox\plugins\NPOFFICE.DLL [2010.12.03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.12.03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.12.03 19:14:08 | 000,002,371 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\google.xml [2010.12.03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.12.03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.12.03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2008.08.21 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3 - HKCU\..\Toolbar\WebBrowser: (&Adresse) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O4 - HKLM..\Run: [AVG_TRAY] C:\Programme\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [HDAudDeck] C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe (VIA Technologies, Inc.) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe (Microsoft Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation) O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation) O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation) O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation) O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation) O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011.01.28 20:16:33 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Programme\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Programme\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) |
|
03.02.2011, 14:18
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! OTL-Log ist unvollständig. Bitte nur vollständig posten!!
__________________Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.
__________________ |
|
03.02.2011, 14:38
| #3 |
| | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! Hallo...Ok versuche alles rein zu posten...DankeOTL EXTRAS Logfile:
__________________Code:
ATTFilter OTL Extras logfile created on: 03.02.2011 14:26:25 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 60,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 465,75 Gb Total Space | 421,17 Gb Free Space | 90,43% Space Free | Partition Type: NTFS
Computer Name: PRIVAT-DFBC6387 | User Name: Manfred | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\Lexmark 2500 Series\app4r.exe" = C:\Programme\Lexmark 2500 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio -- ()
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\AVG\AVG10\avgnsx.exe" = C:\Programme\AVG\AVG10\avgnsx.exe:*:Enabled:Online Shield -- (AVG Technologies CZ, s.r.o.)
"C:\Programme\AVG\AVG10\avgmfapx.exe" = C:\Programme\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG-Installationsprogramm -- (AVG Technologies CZ, s.r.o.)
"C:\Programme\AVG\AVG10\avgemcx.exe" = C:\Programme\AVG\AVG10\avgemcx.exe:*:Enabled:Personal eMail-Scanner -- (AVG Technologies CZ, s.r.o.)
"C:\WINDOWS\system32\usmt\migwiz.exe" = C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistent zum Übertragen von Dateien und Einstellungen -- (Microsoft Corporation)
"C:\WINDOWS\system32\lxddcoms.exe" = C:\WINDOWS\system32\lxddcoms.exe:*:Enabled:2500 Series Server -- ( )
"C:\Programme\Lexmark 2500 Series\lxddamon.exe" = C:\Programme\Lexmark 2500 Series\lxddamon.exe:*:Enabled:Device Monitor Application -- (Lexmark)
"C:\Programme\Lexmark 2500 Series\App4R.exe" = C:\Programme\Lexmark 2500 Series\App4R.exe:*:Enabled:Printing Application -- ()
"C:\Programme\IncrediMail\Bin\IncMail.exe" = C:\Programme\IncrediMail\Bin\IncMail.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"C:\Programme\IncrediMail\Bin\ImApp.exe" = C:\Programme\IncrediMail\Bin\ImApp.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"C:\Programme\IncrediMail\Bin\ImpCnt.exe" = C:\Programme\IncrediMail\Bin\ImpCnt.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe:*:Enabled: -- ()
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe:*:Enabled: -- ()
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe:*:Enabled: -- (Lexmark International, Inc.)
"C:\Programme\Lexmark 2500 Series\lxddmon.exe" = C:\Programme\Lexmark 2500 Series\lxddmon.exe:*:Enabled: -- ()
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}" = HiJackThis
"{1F0D5576-C383-4E5E-9906-0B47BECBB8B6}" = Hama Webcam Suite
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{2DD388FF-6422-43C9-86A1-C7A99C83E946}" = ASUS nVidia Driver
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3F7A9E82-5A85-4119-A8A5-7D840A0F76DC}" = Photo Notifier and Animation Creator
"{50316C0A-CC2A-460A-9EA5-F486E54AC17D}_is1" = AVG PC Tuneup 2011
"{6CF47FD1-3CF8-4206-BA24-A2B1E43D8CCA}" = IncrediMail
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{A276502A-8979-44FB-8090-90CF72F22ABC}" = AVG 2011
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A59AB961-BE82-41E0-B0FB-648DFA6DDEA4}" = Hama PC-Webcam Circle
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4C68898-EBA5-46A9-82B3-2D30426086BF}" = AVG 2011
"Ad-Aware" = Ad-Aware
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AVG" = AVG 2011
"ie8" = Windows Internet Explorer 8
"IncrediMail" = IncrediMail 2.0
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"Lexmark 2500 Series" = Lexmark 2500 Series
"Lexmark Fax Solutions" = Lexmark Fax-Lösungen
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Photo Notifier and Animation Creator" = Photo Notifier and Animation Creator
"UseNeXT_is1" = UseNeXT
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XP Codec Pack" = XP Codec Pack
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 31.01.2011 12:57:19 | Computer Name = PRIVAT-DFBC6387 | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
[ System Events ]
Error - 31.01.2011 17:00:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .
Error - 31.01.2011 17:00:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\Programme\IncrediMail\Bin\MFC80U.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .
Error - 31.01.2011 17:00:54 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.
Error - 31.01.2011 17:00:54 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .
Error - 31.01.2011 17:00:54 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\Programme\IncrediMail\Bin\MFC80U.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\Programme\IncrediMail\Bin\MFC80U.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .
< End of report >
|
|
03.02.2011, 14:40
| #4 |
| | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 03.02.2011 14:26:25 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 60,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 465,75 Gb Total Space | 421,17 Gb Free Space | 90,43% Space Free | Partition Type: NTFS
Computer Name: PRIVAT-DFBC6387 | User Name: Manfred | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\Lexmark 2500 Series\app4r.exe" = C:\Programme\Lexmark 2500 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio -- ()
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\AVG\AVG10\avgnsx.exe" = C:\Programme\AVG\AVG10\avgnsx.exe:*:Enabled:Online Shield -- (AVG Technologies CZ, s.r.o.)
"C:\Programme\AVG\AVG10\avgmfapx.exe" = C:\Programme\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG-Installationsprogramm -- (AVG Technologies CZ, s.r.o.)
"C:\Programme\AVG\AVG10\avgemcx.exe" = C:\Programme\AVG\AVG10\avgemcx.exe:*:Enabled:Personal eMail-Scanner -- (AVG Technologies CZ, s.r.o.)
"C:\WINDOWS\system32\usmt\migwiz.exe" = C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistent zum Übertragen von Dateien und Einstellungen -- (Microsoft Corporation)
"C:\WINDOWS\system32\lxddcoms.exe" = C:\WINDOWS\system32\lxddcoms.exe:*:Enabled:2500 Series Server -- ( )
"C:\Programme\Lexmark 2500 Series\lxddamon.exe" = C:\Programme\Lexmark 2500 Series\lxddamon.exe:*:Enabled:Device Monitor Application -- (Lexmark)
"C:\Programme\Lexmark 2500 Series\App4R.exe" = C:\Programme\Lexmark 2500 Series\App4R.exe:*:Enabled:Printing Application -- ()
"C:\Programme\IncrediMail\Bin\IncMail.exe" = C:\Programme\IncrediMail\Bin\IncMail.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"C:\Programme\IncrediMail\Bin\ImApp.exe" = C:\Programme\IncrediMail\Bin\ImApp.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"C:\Programme\IncrediMail\Bin\ImpCnt.exe" = C:\Programme\IncrediMail\Bin\ImpCnt.exe:*:Enabled:IncrediMail -- (IncrediMail, Ltd.)
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddpswx.exe:*:Enabled: -- ()
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddjswx.exe:*:Enabled: -- ()
"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxddtime.exe:*:Enabled: -- (Lexmark International, Inc.)
"C:\Programme\Lexmark 2500 Series\lxddmon.exe" = C:\Programme\Lexmark 2500 Series\lxddmon.exe:*:Enabled: -- ()
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}" = HiJackThis
"{1F0D5576-C383-4E5E-9906-0B47BECBB8B6}" = Hama Webcam Suite
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{2DD388FF-6422-43C9-86A1-C7A99C83E946}" = ASUS nVidia Driver
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3F7A9E82-5A85-4119-A8A5-7D840A0F76DC}" = Photo Notifier and Animation Creator
"{50316C0A-CC2A-460A-9EA5-F486E54AC17D}_is1" = AVG PC Tuneup 2011
"{6CF47FD1-3CF8-4206-BA24-A2B1E43D8CCA}" = IncrediMail
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{A276502A-8979-44FB-8090-90CF72F22ABC}" = AVG 2011
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A59AB961-BE82-41E0-B0FB-648DFA6DDEA4}" = Hama PC-Webcam Circle
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4C68898-EBA5-46A9-82B3-2D30426086BF}" = AVG 2011
"Ad-Aware" = Ad-Aware
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AVG" = AVG 2011
"ie8" = Windows Internet Explorer 8
"IncrediMail" = IncrediMail 2.0
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"Lexmark 2500 Series" = Lexmark 2500 Series
"Lexmark Fax Solutions" = Lexmark Fax-Lösungen
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Photo Notifier and Animation Creator" = Photo Notifier and Animation Creator
"UseNeXT_is1" = UseNeXT
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XP Codec Pack" = XP Codec Pack
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 31.01.2011 12:57:19 | Computer Name = PRIVAT-DFBC6387 | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
[ System Events ]
Error - 31.01.2011 17:00:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .
Error - 31.01.2011 17:00:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\Programme\IncrediMail\Bin\MFC80U.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .
Error - 31.01.2011 17:00:54 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.
Error - 31.01.2011 17:00:54 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .
Error - 31.01.2011 17:00:54 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\Programme\IncrediMail\Bin\MFC80U.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\Programme\IncrediMail\Bin\MFC80U.DLL
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.
Error - 31.01.2011 17:05:48 | Computer Name = PRIVAT-DFBC6387 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .
< End of report >
|
|
03.02.2011, 14:45
| #5 |
| | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! hallo..Danke Für Deine Antwort schon mal.. Werde es versuchen,alles zu posten. Braucht einfach ewig dazu.. Malwarebytes' Anti-Malware 1.50.1.1100 Malwarebytes Datenbank Version: 5668 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 03.02.2011 14:45:23 mbam-log-2011-02-03 (14-45-23).txt Art des Suchlaufs: Quick-Scan Durchsuchte Objekte: 178583 Laufzeit: 2 Minute(n), 10 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
|
03.02.2011, 19:06
| #6 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm!Zitat:
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss! Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!
__________________ --> Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! |
|
03.02.2011, 20:04
| #7 |
| | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! nein leider nicht...hab heut erst Malwarebytes installiert...Lg.. Hier der neueste scan.....infizierten habe ich entfernen lassen.. Malwarebytes' Anti-Malware 1.50.1.1100 Malwarebytes Datenbank Version: 5668 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 03.02.2011 20:01:26 mbam-log-2011-02-03 (20-01-26).txt Art des Suchlaufs: Vollständiger Suchlauf (A:\|C:\|D:\|E:\|) Durchsuchte Objekte: 242341 Laufzeit: 1 Stunde(n), 1 Minute(n), 28 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: c:\system volume information\_restore{6f3701f3-b8c1-4680-b65e-4b1a553d313f}\RP19\A0004249.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully. |
|
03.02.2011, 20:05
| #8 |
| | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! Malwarebytes' Anti-Malware 1.50.1.1100 Malwarebytes Datenbank Version: 5668 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 03.02.2011 20:01:26 mbam-log-2011-02-03 (20-01-26).txt Art des Suchlaufs: Vollständiger Suchlauf (A:\|C:\|D:\|E:\|) Durchsuchte Objekte: 242341 Laufzeit: 1 Stunde(n), 1 Minute(n), 28 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: c:\system volume information\_restore{6f3701f3-b8c1-4680-b65e-4b1a553d313f}\RP19\A0004249.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully. |
|
03.02.2011, 20:06
| #9 |
| | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! nein leider habe heute erst Malwarebytes installiert...hier der neueste scan.. infizierten habe ich entfernen lassen..lg..manfred |
|
03.02.2011, 21:03
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! Poste das OTL-Log (nicht die Extras!) bitte vollständig.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
03.02.2011, 21:27
| #11 |
| | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! OTL Logfile: Code:
ATTFilter OTL logfile created on: 03.02.2011 21:17:04 - Run 2 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 61,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 81,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 465,75 Gb Total Space | 421,12 Gb Free Space | 90,42% Space Free | Partition Type: NTFS Computer Name: PRIVAT-DFBC6387 | User Name: Manfred | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.02.03 14:25:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads\OTL.exe PRC - [2011.01.31 20:20:39 | 000,936,712 | ---- | M] (Lavasoft) -- C:\Programme\Lavasoft\Ad-Aware\AAWTray.exe PRC - [2011.01.31 20:20:38 | 001,402,272 | ---- | M] (Lavasoft) -- C:\Programme\Lavasoft\Ad-Aware\AAWService.exe PRC - [2011.01.31 17:24:57 | 000,353,736 | ---- | M] (IncrediMail, Ltd.) -- C:\Programme\IncrediMail\Bin\IncMail.exe PRC - [2011.01.31 17:24:57 | 000,255,432 | ---- | M] (IncrediMail, Ltd.) -- C:\Programme\IncrediMail\Bin\ImApp.exe PRC - [2011.01.07 01:22:54 | 002,747,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgtray.exe PRC - [2011.01.07 01:22:44 | 001,084,256 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgnsx.exe PRC - [2011.01.07 01:22:12 | 001,052,512 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgemcx.exe PRC - [2011.01.06 15:23:20 | 000,737,872 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe PRC - [2011.01.06 15:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe PRC - [2010.12.05 16:26:40 | 000,654,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgrsx.exe PRC - [2010.12.05 16:26:12 | 000,650,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgchsvx.exe PRC - [2010.12.03 20:44:45 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe PRC - [2010.12.03 20:44:45 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\plugin-container.exe PRC - [2010.10.22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgwdsvc.exe PRC - [2010.10.22 04:56:58 | 000,845,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Programme\AVG\AVG10\avgcsrvx.exe PRC - [2008.08.21 13:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007.10.11 08:45:56 | 000,051,712 | ---- | M] (ArcSoft) -- C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe PRC - [2007.05.28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2007.04.26 06:21:22 | 000,537,520 | ---- | M] ( ) -- C:\WINDOWS\system32\lxddcoms.exe ========== Modules (SafeList) ========== MOD - [2011.02.03 14:25:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads\OTL.exe MOD - [2010.08.23 17:11:46 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - File not found [On_Demand | Stopped] -- -- (IDriverT) SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - [2011.01.31 20:20:38 | 001,402,272 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Programme\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service) SRV - [2011.01.06 15:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Programme\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2010.10.22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Programme\AVG\AVG10\avgwdsvc.exe -- (avgwd) SRV - [2007.10.11 08:45:56 | 000,051,712 | ---- | M] (ArcSoft) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2007.05.28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007.04.26 06:21:42 | 000,099,248 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe -- (lxddCATSCustConnectService) SRV - [2007.04.26 06:21:22 | 000,537,520 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxddcoms.exe -- (lxdd_device) SRV - [2003.07.28 12:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose) ========== Driver Services (SafeList) ========== DRV - [2011.01.31 18:04:46 | 000,685,816 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010.12.08 04:12:38 | 000,251,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2010.12.03 10:05:34 | 000,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd) DRV - [2010.12.03 10:05:33 | 000,015,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Programme\Lavasoft\Ad-Aware\kernexplorer.sys -- (Lavasoft Kernexplorer) DRV - [2010.11.12 13:19:38 | 000,299,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2010.09.13 15:27:24 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH) DRV - [2010.09.07 03:48:56 | 000,034,384 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2010.09.07 03:48:50 | 000,026,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86) DRV - [2010.08.03 15:23:36 | 000,026,192 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim) DRV - [2010.08.03 15:23:34 | 000,123,472 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver) DRV - [2010.08.03 15:23:32 | 000,030,288 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter) DRV - [2010.07.10 05:38:00 | 010,604,128 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2008.08.21 13:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008.07.25 13:09:24 | 000,845,184 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV - [2008.04.14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB-Audiotreiber (WDM) DRV - [2008.02.14 07:12:00 | 001,389,056 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\monfilt.sys -- (monfilt) DRV - [2007.11.21 20:09:22 | 000,104,320 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2007.09.10 08:50:56 | 000,457,984 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PAC7302.SYS -- (PAC7302) DRV - [2007.05.30 19:15:08 | 000,013,184 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter) DRV - [2006.11.10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc) DRV - [2004.08.15 11:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "www.google.at" FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1178 FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Programme\AVG\AVG10\Firefox\ [2011.01.31 15:36:06 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.01.31 16:34:23 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.01.31 16:59:19 | 000,000,000 | ---D | M] [2011.01.31 16:34:33 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Mozilla\Extensions [2011.02.03 20:32:34 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Mozilla\Firefox\Profiles\y8xol58j.default\extensions [2011.02.02 19:37:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Mozilla\Firefox\Profiles\y8xol58j.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.02.02 19:37:39 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2011.01.31 17:03:01 | 000,000,000 | ---D | M] (Skype extension) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2011.01.31 15:36:06 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAMME\AVG\AVG10\FIREFOX [2010.12.03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.12.03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.12.03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.12.03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.12.03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2008.08.21 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O4 - HKLM..\Run: [AVG_TRAY] C:\Programme\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011.01.28 20:16:33 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Programme\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Programme\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.02.03 14:42:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Malwarebytes [2011.02.03 14:42:16 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011.02.03 14:42:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Malwarebytes' Anti-Malware [2011.02.03 14:42:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Malwarebytes [2011.02.03 14:42:13 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011.02.03 14:42:13 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2011.02.02 23:57:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\HiJackThis [2011.02.02 23:57:53 | 000,000,000 | ---D | C] -- C:\Programme\TrendMicro [2011.02.02 23:11:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Ebay [2011.02.02 23:03:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2011.02.02 22:30:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\NVIDIA Corporation [2011.02.02 22:29:50 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2011.02.01 14:03:40 | 000,000,000 | ---D | C] -- C:\Programme\Reference Assemblies [2011.02.01 14:03:13 | 000,000,000 | ---D | C] -- C:\b9e2f8cc5aea98ed471d [2011.02.01 12:23:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Diverses [2011.02.01 12:11:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2011.01.31 23:09:39 | 000,000,000 | ---D | C] -- C:\Programme\MSECache [2011.01.31 22:47:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Uniblue [2011.01.31 22:47:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\PackageAware [2011.01.31 22:43:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\WinMaximizer [2011.01.31 21:31:06 | 000,000,000 | -H-D | C] -- C:\$AVG [2011.01.31 20:21:37 | 000,098,392 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys [2011.01.31 20:19:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\Sunbelt Software [2011.01.31 20:18:27 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\{2162CCC0-3A5F-4887-B51F-CE5F195B3620} [2011.01.31 20:18:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Lavasoft [2011.01.31 18:44:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Macromedia [2011.01.31 18:44:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Adobe [2011.01.31 18:22:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\ArcSoft [2011.01.31 18:21:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\ArcSoft Connect [2011.01.31 18:20:44 | 000,018,688 | ---- | C] (Arcsoft, Inc.) -- C:\WINDOWS\System32\drivers\afc.sys [2011.01.31 18:19:35 | 000,056,064 | ---- | C] (ArcSoft, Inc.) -- C:\WINDOWS\System32\ArcSoftKsUFilter.dll [2011.01.31 18:19:35 | 000,013,184 | ---- | C] (ArcSoft, Inc.) -- C:\WINDOWS\System32\drivers\ArcSoftKsUFilter.sys [2011.01.31 18:19:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Hama Webcam Suite [2011.01.31 18:19:00 | 000,212,480 | ---- | C] (Eastman Kodak) -- C:\WINDOWS\System32\PCDLIB32.DLL [2011.01.31 18:19:00 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\ArcSoft [2011.01.31 18:17:47 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\InstallShield [2011.01.31 18:16:12 | 000,048,128 | ---- | C] (PixArt Imaging Incorporation) -- C:\WINDOWS\System32\Remove.exe [2011.01.31 18:16:10 | 000,457,984 | ---- | C] (PixArt Imaging Inc.) -- C:\WINDOWS\System32\drivers\PAC7302.SYS [2011.01.31 18:16:10 | 000,006,656 | ---- | C] (PixArt Imaging Inc.) -- C:\WINDOWS\System32\CoInst_070910.dll [2011.01.31 18:16:07 | 000,000,000 | ---D | C] -- C:\Programme\Hama [2011.01.31 18:16:06 | 000,129,024 | ---- | C] (PixArt Imaging Incorporation) -- C:\WINDOWS\System32\SP7302.ax [2011.01.31 18:16:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Hama [2011.01.31 18:16:05 | 000,014,336 | ---- | C] (PixArt Imaging Inc.) -- C:\WINDOWS\System32\P7302USD.dll [2011.01.31 18:16:04 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\PAC7302 [2011.01.31 18:07:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Alcohol 120% [2011.01.31 18:07:09 | 000,000,000 | ---D | C] -- C:\Programme\Alcohol Soft [2011.01.31 18:06:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\FaxCtr [2011.01.31 18:04:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\WinRAR [2011.01.31 18:02:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\WinRAR [2011.01.31 18:02:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\WinRAR [2011.01.31 18:02:36 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR [2011.01.31 18:00:46 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Eigene Videos [2011.01.31 17:58:45 | 000,000,000 | ---D | C] -- C:\Programme\Windows Media Connect 2 [2011.01.31 17:57:43 | 000,064,288 | ---- | C] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys [2011.01.31 17:56:29 | 000,000,000 | ---D | C] -- C:\Programme\Lavasoft [2011.01.31 17:56:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Lavasoft [2011.01.31 17:54:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Application Data [2011.01.31 17:54:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\XP Codec Pack 2.5.0 [2011.01.31 17:54:06 | 000,000,000 | ---D | C] -- C:\Programme\XP Codec Pack [2011.01.31 17:51:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\UseNeXT [2011.01.31 17:51:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\UseNeXT [2011.01.31 17:51:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\UseNeXT [2011.01.31 17:51:52 | 000,000,000 | ---D | C] -- C:\Programme\UseNeXT [2011.01.31 17:28:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Photo Notifier and Animation Creator [2011.01.31 17:28:19 | 000,000,000 | ---D | C] -- C:\Programme\Photo Notifier and Animation Creator [2011.01.31 17:25:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\IM [2011.01.31 17:25:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\IncrediMail [2011.01.31 17:25:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Games [2011.01.31 17:25:07 | 000,000,000 | ---D | C] -- C:\Programme\IncrediMail [2011.01.31 17:25:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\IncrediMail [2011.01.31 17:25:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\IM [2011.01.31 17:21:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Programme [2011.01.31 17:15:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Bewerbungen aktuell.FAB [2011.01.31 17:07:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Paul [2011.01.31 17:06:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Eigene Kurzfilme [2011.01.31 17:06:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Nokia [2011.01.31 17:06:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Nicht weitergeleitete Mails [2011.01.31 17:04:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\skypePM [2011.01.31 17:02:54 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Skype [2011.01.31 17:02:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Skype [2011.01.31 17:02:53 | 000,000,000 | R--D | C] -- C:\Programme\Skype [2011.01.31 17:02:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Skype [2011.01.31 17:02:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Skype [2011.01.31 16:59:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Microsoft Office [2011.01.31 16:58:54 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DESIGNER [2011.01.31 16:58:42 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\ODBC [2011.01.31 16:58:42 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office [2011.01.31 16:52:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Lexmark Productivity Studio [2011.01.31 16:52:02 | 000,000,000 | ---D | C] -- C:\Programme\lx_cats [2011.01.31 16:51:44 | 000,000,000 | ---D | C] -- C:\logs [2011.01.31 16:50:12 | 000,339,968 | ---- | C] (Data Techniques, Inc.) -- C:\WINDOWS\System32\IMGMAN32.DLL [2011.01.31 16:50:12 | 000,098,345 | ---- | C] (Data Techniques, Inc.) -- C:\WINDOWS\System32\IMHOST32.DLL [2011.01.31 16:50:12 | 000,098,304 | ---- | C] (Data Techniques, Inc.) -- C:\WINDOWS\System32\IM31XPNG.DEL [2011.01.31 16:50:12 | 000,069,632 | ---- | C] (Data Techniques, Inc.) -- C:\WINDOWS\System32\IM31XTIF.DEL [2011.01.31 16:50:12 | 000,049,152 | ---- | C] (Data Techniques, Inc.) -- C:\WINDOWS\System32\IM31IMG.DIL [2011.01.31 16:50:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Lexmark Fax-Lösungen [2011.01.31 16:50:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\FaxCtr [2011.01.31 16:44:13 | 000,000,000 | ---D | C] -- C:\Programme\Lexmark Fax Solutions [2011.01.31 16:44:03 | 000,000,000 | ---D | C] -- C:\Programme\Lexmark Toolbar [2011.01.31 16:43:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\ABBYY FineReader 6.0 Sprint [2011.01.31 16:43:42 | 000,000,000 | ---D | C] -- C:\Programme\Abbyy FineReader 6.0 Sprint [2011.01.31 16:42:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Lexmark 2500 Series [2011.01.31 16:42:51 | 000,000,000 | ---D | C] -- C:\Programme\Lexmark 2500 Series [2011.01.31 16:42:39 | 000,413,696 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddinpa.dll [2011.01.31 16:42:39 | 000,323,584 | ---- | C] ( ) -- C:\WINDOWS\System32\LXDDhcp.dll [2011.01.31 16:42:38 | 001,232,896 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddserv.dll [2011.01.31 16:42:38 | 000,999,424 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddusb1.dll [2011.01.31 16:42:38 | 000,397,312 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddiesc.dll [2011.01.31 16:42:38 | 000,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddprox.dll [2011.01.31 16:42:37 | 000,643,072 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddpmui.dll [2011.01.31 16:42:37 | 000,585,728 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddlmpm.dll [2011.01.31 16:42:37 | 000,385,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddih.exe [2011.01.31 16:42:37 | 000,094,208 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddpplc.dll [2011.01.31 16:42:36 | 000,700,416 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddhbn3.dll [2011.01.31 16:42:36 | 000,537,520 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddcoms.exe [2011.01.31 16:42:35 | 000,684,032 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddcomc.dll [2011.01.31 16:42:35 | 000,425,984 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddcomm.dll [2011.01.31 16:42:35 | 000,394,160 | ---- | C] ( ) -- C:\WINDOWS\System32\lxddcfg.exe [2011.01.31 16:35:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Downloads [2011.01.31 16:34:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\Mozilla [2011.01.31 16:34:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Mozilla [2011.01.31 16:34:02 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox [2011.01.31 16:33:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Windows Genuine Advantage [2011.01.31 16:32:25 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\IECompatCache [2011.01.31 16:31:35 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\PrivacIE [2011.01.31 16:30:15 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\IETldCache [2011.01.31 16:22:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\KB905474 [2011.01.31 15:54:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\AVG [2011.01.31 15:52:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP [2011.01.31 15:51:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\AVG PC Tuneup 2011 [2011.01.31 15:39:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\AVG10 [2011.01.31 15:37:47 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Common Files [2011.01.31 15:37:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\AVG 2011 [2011.01.31 15:35:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\AVG10 [2011.01.31 15:35:16 | 000,000,000 | ---D | C] -- C:\Programme\AVG [2011.01.31 15:34:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\MFAData [2011.01.31 15:24:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\nView_Profiles [2011.01.31 15:23:01 | 000,000,000 | ---D | C] -- C:\Programme\My Company Name [2011.01.31 15:17:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Realtek [2011.01.31 15:16:43 | 000,000,000 | ---D | C] -- C:\Programme\Realtek [2011.01.31 15:16:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\InstallShield [2011.01.31 15:15:12 | 000,008,704 | R--- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\WINDOWS\System32\viahdcpl.cpl [2011.01.31 15:10:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Identities [2011.01.31 15:10:04 | 000,000,000 | -H-D | C] -- C:\Programme\Uninstall Information [2011.01.31 15:10:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Eigene Musik [2011.01.31 15:10:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien [2011.01.31 15:10:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\Eigene Bilder [2011.01.31 15:09:47 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Microsoft [2011.01.31 15:09:47 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten [2011.01.31 15:09:47 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Favoriten [2011.01.31 15:09:47 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Cookies [2011.01.31 15:09:47 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Druckumgebung [2011.01.31 15:09:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\Microsoft [2011.01.31 15:09:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop [2011.01.31 15:09:46 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\SendTo [2011.01.31 15:09:46 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Recent [2011.01.31 15:09:46 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\Zubehör [2011.01.31 15:09:46 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü [2011.01.31 15:09:46 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\Autostart [2011.01.31 15:09:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Vorlagen [2011.01.31 15:09:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Netzwerkumgebung [2011.01.31 15:09:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen [2011.01.31 15:03:01 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2011.01.31 15:03:01 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2011.01.31 15:03:01 | 000,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll [2011.01.31 15:01:54 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys [2011.01.31 15:00:02 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\DRM [2011.01.31 14:59:37 | 000,000,000 | -H-D | C] -- C:\Programme\WindowsUpdate [2011.01.31 14:58:28 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Dokumente\Eigene Bilder [2011.01.31 14:58:00 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Spiele [2011.01.31 14:57:43 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Verwaltung [2011.01.31 14:57:34 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Dokumente\Eigene Musik [2011.01.31 14:56:49 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Dokumente\Eigene Videos [2011.01.31 14:56:29 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Zubehör [2011.01.31 14:50:02 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü [2011.01.31 14:50:02 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Dokumente [2011.01.31 14:50:02 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart [2011.01.31 14:50:02 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Vorlagen [2011.01.31 14:50:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Favoriten [2011.01.31 14:50:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop [2011.01.31 14:48:25 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Microsoft [2011.01.31 14:48:25 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten [2011.01.31 14:28:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\setup.pss [2011.01.31 14:00:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData [2011.01.30 21:19:53 | 000,000,000 | -H-D | C] -- C:\$AVG8.VAULT$ [2011.01.30 21:13:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt [2011.01.29 11:38:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer [2011.01.29 11:38:50 | 000,000,000 | ---D | C] -- C:\Programme\MSBuild [2011.01.29 11:38:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US [2011.01.29 11:38:28 | 000,000,000 | ---D | C] -- C:\962c673a26ea57f167231ecd068314 [2011.01.29 02:32:51 | 000,000,000 | ---D | C] -- C:\6e2c93be57838004279d24513c15d2 [2011.01.29 02:32:39 | 000,000,000 | ---D | C] -- C:\15818708f24a1d46b3375b454df3 [2011.01.29 01:37:32 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ShellNew [2011.01.29 01:37:31 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft.NET [2011.01.29 01:34:43 | 000,000,000 | RH-D | C] -- C:\MSOCache [2011.01.29 00:34:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\PixArt [2011.01.29 00:25:44 | 000,000,000 | ---D | C] -- C:\drivers [2011.01.28 22:22:08 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly [2011.01.28 22:21:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET [2011.01.28 22:19:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF [2011.01.28 22:19:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2011.01.28 21:49:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe [2011.01.28 21:13:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates [2011.01.28 21:13:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2011.01.28 21:12:44 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-de [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028 [2011.01.28 20:48:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025 [2011.01.28 20:48:06 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts [2011.01.28 20:48:06 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache [2011.01.28 20:48:06 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web [2011.01.28 20:48:06 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32 [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32 [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\system [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\security [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\java [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch [2011.01.28 20:48:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins [2011.01.28 20:43:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg [2011.01.28 20:37:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall [2011.01.28 20:37:42 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$ [2011.01.28 20:35:06 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2011.01.28 20:33:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview [2011.01.28 20:29:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution [2011.01.28 20:29:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\OPTIONS [2011.01.28 20:27:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\AsusInstAll [2011.01.28 20:27:48 | 000,000,000 | -H-D | C] -- C:\Programme\InstallShield Installation Information [2011.01.28 20:27:19 | 000,000,000 | ---D | C] -- C:\Programme\VIA [2011.01.28 20:24:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups [2011.01.28 20:24:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2011.01.28 20:24:04 | 000,000,000 | ---D | C] -- C:\Programme\Intel [2011.01.28 20:23:54 | 000,000,000 | ---D | C] -- C:\Intel [2011.01.28 20:21:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2011.01.28 20:20:59 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft [2011.01.28 20:20:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2011.01.28 20:20:58 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft [2011.01.28 20:20:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft [2011.01.28 20:20:09 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft [2011.01.28 20:20:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft [2011.01.28 20:16:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom [2011.01.28 20:16:54 | 000,000,000 | ---D | C] -- C:\Programme\xerox [2011.01.28 20:16:54 | 000,000,000 | ---D | C] -- C:\Programme\microsoft frontpage [2011.01.28 20:15:33 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files [2011.01.28 20:15:33 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages [2011.01.28 20:15:20 | 000,000,000 | ---D | C] -- C:\Programme\Online-Dienste [2011.01.28 20:15:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2011.01.28 20:14:51 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks [2011.01.28 20:14:50 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\MSSoap [2011.01.28 20:14:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst [2011.01.28 20:14:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed [2011.01.28 20:14:40 | 000,000,000 | ---D | C] -- C:\Programme\Movie Maker [2011.01.28 20:14:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore [2011.01.28 20:14:20 | 000,000,000 | ---D | C] -- C:\Programme\NetMeeting [2011.01.28 20:14:18 | 000,000,000 | ---D | C] -- C:\Programme\Outlook Express [2011.01.28 20:14:13 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\System [2011.01.28 20:14:12 | 000,000,000 | ---D | C] -- C:\Programme\Internet Explorer [2011.01.28 20:13:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration [2011.01.28 20:13:27 | 000,000,000 | ---D | C] -- C:\Programme\Windows Media Player [2011.01.28 20:13:27 | 000,000,000 | ---D | C] -- C:\Programme\Online Services [2011.01.28 20:13:21 | 000,000,000 | ---D | C] -- C:\Programme\Messenger [2011.01.28 20:13:18 | 000,000,000 | ---D | C] -- C:\Programme\MSN Gaming Zone [2011.01.28 20:12:50 | 000,000,000 | ---D | C] -- C:\Programme\MSN [2011.01.28 20:12:49 | 000,282,624 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe [2011.01.28 20:12:48 | 000,000,000 | ---D | C] -- C:\Programme\Windows NT [2011.01.28 20:12:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc [2011.01.28 20:12:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com [2011.01.28 20:04:54 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer [2011.01.28 20:04:48 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\SpeechEngines [2011.01.28 20:04:47 | 000,000,000 | R--D | C] -- C:\Programme [2011.01.28 20:04:47 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared [2011.01.28 20:04:47 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien [2011.01.28 20:02:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2 [2011.01.28 20:02:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot [2011.01.28 20:01:33 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2011.01.28 20:01:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen [2004.11.24 19:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.02.03 21:14:49 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{40A7E12B-925D-4C35-AF3E-65B886DE12E1}.job [2011.02.03 20:10:57 | 000,000,470 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2011.02.03 20:10:20 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011.02.03 20:08:38 | 000,000,296 | ---- | M] () -- C:\WINDOWS\tasks\WinMaximizer-Manfred-Startup.job [2011.02.03 20:08:38 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\RegistryBooster.job [2011.02.03 20:08:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011.02.03 18:20:35 | 105,198,533 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2011.02.03 17:51:07 | 000,000,459 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\lxdd [2011.02.03 14:42:16 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Malwarebytes' Anti-Malware.lnk [2011.02.03 14:19:01 | 000,023,040 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Bewerbung.doc [2011.02.03 09:46:55 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2011.02.03 09:43:43 | 000,209,696 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011.02.02 23:58:22 | 000,002,461 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\HiJackThis.lnk [2011.02.02 22:30:08 | 000,232,968 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2011.02.02 22:30:08 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin [2011.02.02 22:30:06 | 000,232,968 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2011.02.02 22:30:06 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\nvdrswr.lk [2011.02.02 19:33:16 | 000,002,243 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Skype.lnk [2011.02.02 18:45:12 | 000,006,144 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.02.02 18:35:54 | 106,447,530 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Am young couple - 050.wmv [2011.02.02 18:29:57 | 040,098,296 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Filmchen8.mpg [2011.02.02 18:28:38 | 089,025,468 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Filmchen6.mpg [2011.02.02 17:51:16 | 000,182,038 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2011.02.02 14:04:31 | 000,002,509 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Office Word.lnk [2011.02.02 13:23:36 | 000,448,470 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2011.02.02 13:23:36 | 000,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011.02.02 13:23:36 | 000,079,910 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2011.02.02 13:23:36 | 000,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011.02.01 13:31:45 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011.02.01 00:49:09 | 000,020,480 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\KSV-Masseforderung.doc [2011.01.31 20:21:34 | 000,098,392 | ---- | M] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys [2011.01.31 20:21:30 | 000,015,880 | ---- | M] () -- C:\WINDOWS\System32\lsdelete.exe [2011.01.31 20:18:23 | 000,000,847 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Ad-Aware.lnk [2011.01.31 18:20:51 | 000,001,729 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Hama Webcam Suite.lnk [2011.01.31 18:07:28 | 000,000,805 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Alcohol 120%.lnk [2011.01.31 18:06:26 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2011.01.31 18:06:26 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2011.01.31 18:04:46 | 000,685,816 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2011.01.31 17:55:33 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf [2011.01.31 17:53:36 | 000,001,484 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\UseNeXT.lnk [2011.01.31 17:25:18 | 000,001,730 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\IncrediMail.lnk [2011.01.31 17:04:04 | 000,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat [2011.01.31 17:00:13 | 000,000,400 | ---- | M] () -- C:\WINDOWS\ODBC.INI [2011.01.31 16:59:19 | 000,002,102 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Office Excel.lnk [2011.01.31 16:52:37 | 000,000,712 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Lexmark Imaging Studio - 2500 Series.LNK [2011.01.31 16:51:50 | 000,139,275 | ---- | M] () -- C:\WINDOWS\System32\LexFiles.ulf [2011.01.31 16:34:29 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat [2011.01.31 16:34:07 | 000,001,566 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Mozilla Firefox.lnk [2011.01.31 15:51:57 | 000,000,802 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\AVG PC Tuneup 2011.lnk [2011.01.31 15:37:18 | 000,000,686 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\AVG 2011.lnk [2011.01.31 15:27:26 | 000,000,104 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Internet.lnk [2011.01.31 15:26:57 | 000,000,104 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Arbeitsplatz.lnk [2011.01.31 15:26:43 | 000,000,368 | ---- | M] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Eigene Dateien.lnk [2011.01.31 15:24:57 | 000,000,008 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat [2011.01.31 15:19:44 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.bak [2011.01.31 15:15:29 | 000,020,471 | ---- | M] () -- C:\WINDOWS\Ascd_log.ini [2011.01.31 15:15:16 | 000,000,821 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\HD ADeck.lnk [2011.01.31 15:11:14 | 000,020,228 | ---- | M] () -- C:\WINDOWS\Ascd_tmp.ini [2011.01.31 15:04:52 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2011.01.31 15:03:41 | 000,000,589 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2011.01.31 15:01:04 | 000,002,951 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011.01.31 15:01:00 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2011.01.31 15:00:48 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI [2011.01.31 14:57:58 | 000,021,740 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat [2011.01.31 14:50:58 | 000,004,996 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF [2011.01.28 20:16:33 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2011.01.28 20:16:33 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2011.01.28 20:16:33 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2011.01.28 20:16:33 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.02.03 18:20:35 | 105,198,533 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2011.02.03 14:42:16 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Malwarebytes' Anti-Malware.lnk [2011.02.02 23:57:54 | 000,002,461 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\HiJackThis.lnk [2011.02.02 22:30:08 | 000,232,968 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2011.02.02 22:30:06 | 000,232,968 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2011.02.02 22:30:06 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2011.02.02 22:30:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\nvdrswr.lk [2011.02.02 18:34:29 | 106,447,530 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Am young couple - 050.wmv [2011.02.02 18:29:57 | 040,098,296 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Filmchen8.mpg [2011.02.02 18:28:36 | 089,025,468 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Filmchen6.mpg [2011.02.01 00:49:08 | 000,020,480 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Eigene Dateien\KSV-Masseforderung.doc [2011.02.01 00:27:57 | 000,000,459 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\lxdd [2011.01.31 23:44:04 | 000,023,040 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Bewerbung.doc [2011.01.31 23:06:16 | 000,006,144 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.01.31 22:47:32 | 000,000,260 | ---- | C] () -- C:\WINDOWS\tasks\RegistryBooster.job [2011.01.31 22:43:46 | 000,000,296 | ---- | C] () -- C:\WINDOWS\tasks\WinMaximizer-Manfred-Startup.job [2011.01.31 20:18:23 | 000,000,847 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Ad-Aware.lnk [2011.01.31 18:29:44 | 000,015,880 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe [2011.01.31 18:20:51 | 000,001,729 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Hama Webcam Suite.lnk [2011.01.31 18:16:12 | 000,000,769 | ---- | C] () -- C:\WINDOWS\System32\Remover.ini [2011.01.31 18:16:06 | 000,000,566 | ---- | C] () -- C:\WINDOWS\System32\SP7302.ini [2011.01.31 18:07:28 | 000,000,805 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Alcohol 120%.lnk [2011.01.31 18:04:45 | 000,685,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2011.01.31 17:59:27 | 000,000,470 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2011.01.31 17:55:33 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf [2011.01.31 17:54:15 | 000,421,888 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.acm [2011.01.31 17:51:53 | 000,001,484 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\UseNeXT.lnk [2011.01.31 17:25:18 | 000,001,736 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\IncrediMail [2011.01.31 17:25:18 | 000,001,730 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\IncrediMail.lnk [2011.01.31 17:04:04 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2011.01.31 17:02:54 | 000,002,243 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Skype.lnk [2011.01.31 17:00:13 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2011.01.31 16:59:20 | 000,002,509 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Office Word.lnk [2011.01.31 16:59:19 | 000,002,102 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Office Excel.lnk [2011.01.31 16:52:37 | 000,000,712 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Lexmark Imaging Studio - 2500 Series.LNK [2011.01.31 16:51:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxddvs.dll [2011.01.31 16:51:06 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\lxddcoin.dll [2011.01.31 16:50:32 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdddrs.dll [2011.01.31 16:50:32 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxddcnv4.dll [2011.01.31 16:50:32 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxddcaps.dll [2011.01.31 16:50:12 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMON.DLL [2011.01.31 16:50:12 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxf3oem.dll [2011.01.31 16:50:12 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXF3FXPU.DLL [2011.01.31 16:50:12 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL [2011.01.31 16:44:04 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\lxddrwrd.ini [2011.01.31 16:42:39 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\LXDDinst.dll [2011.01.31 16:42:39 | 000,139,275 | ---- | C] () -- C:\WINDOWS\System32\LexFiles.ulf [2011.01.31 16:42:36 | 000,667,672 | ---- | C] () -- C:\WINDOWS\System32\lxddhelp.chm [2011.01.31 16:42:36 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxddgrd.dll [2011.01.31 16:42:34 | 000,001,932 | ---- | C] () -- C:\WINDOWS\System32\lxdd.loc [2011.01.31 16:34:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011.01.31 16:34:07 | 000,001,566 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Mozilla Firefox.lnk [2011.01.31 16:32:14 | 000,000,422 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{40A7E12B-925D-4C35-AF3E-65B886DE12E1}.job [2011.01.31 15:51:57 | 000,000,802 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\AVG PC Tuneup 2011.lnk [2011.01.31 15:48:41 | 000,000,084 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Lokale Einstellungen\Anwendungsdaten\FASTWiz.log [2011.01.31 15:46:58 | 000,000,589 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2011.01.31 15:37:18 | 000,000,686 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\AVG 2011.lnk [2011.01.31 15:27:26 | 000,000,104 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Internet.lnk [2011.01.31 15:26:57 | 000,000,104 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Arbeitsplatz.lnk [2011.01.31 15:26:43 | 000,000,368 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Desktop\Eigene Dateien.lnk [2011.01.31 15:24:57 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat [2011.01.31 15:22:17 | 000,213,493 | R--- | C] () -- C:\WINDOWS\System32\nvdspcht.chm [2011.01.31 15:22:17 | 000,182,038 | ---- | C] () -- C:\WINDOWS\System32\nvapps.xml [2011.01.31 15:22:17 | 000,139,792 | R--- | C] () -- C:\WINDOWS\System32\nv3dcht.chm [2011.01.31 15:22:17 | 000,124,817 | R--- | C] () -- C:\WINDOWS\System32\nvcplcht.chm [2011.01.31 15:22:17 | 000,059,261 | R--- | C] () -- C:\WINDOWS\System32\nvmobcht.chm [2011.01.31 15:22:16 | 000,219,669 | R--- | C] () -- C:\WINDOWS\System32\nvdspchs.chm [2011.01.31 15:22:16 | 000,134,133 | R--- | C] () -- C:\WINDOWS\System32\nv3dchs.chm [2011.01.31 15:22:16 | 000,124,229 | R--- | C] () -- C:\WINDOWS\System32\nvcplchs.chm [2011.01.31 15:22:16 | 000,058,607 | R--- | C] () -- C:\WINDOWS\System32\nvmobchs.chm [2011.01.31 15:22:15 | 000,210,720 | R--- | C] () -- C:\WINDOWS\System32\nvdsptrk.chm [2011.01.31 15:22:15 | 000,133,761 | R--- | C] () -- C:\WINDOWS\System32\nv3dtrk.chm [2011.01.31 15:22:15 | 000,126,892 | R--- | C] () -- C:\WINDOWS\System32\nvcpltrk.chm [2011.01.31 15:22:15 | 000,057,450 | R--- | C] () -- C:\WINDOWS\System32\nvmobtrk.chm [2011.01.31 15:22:14 | 000,220,312 | R--- | C] () -- C:\WINDOWS\System32\nvdsptha.chm [2011.01.31 15:22:14 | 000,137,045 | R--- | C] () -- C:\WINDOWS\System32\nv3dtha.chm [2011.01.31 15:22:14 | 000,128,148 | R--- | C] () -- C:\WINDOWS\System32\nvcpltha.chm [2011.01.31 15:22:14 | 000,059,225 | R--- | C] () -- C:\WINDOWS\System32\nvmobtha.chm [2011.01.31 15:22:14 | 000,055,693 | R--- | C] () -- C:\WINDOWS\System32\nvmobsve.chm [2011.01.31 15:22:13 | 000,206,105 | R--- | C] () -- C:\WINDOWS\System32\nvdspslv.chm [2011.01.31 15:22:13 | 000,195,910 | R--- | C] () -- C:\WINDOWS\System32\nvdspsve.chm [2011.01.31 15:22:13 | 000,128,913 | R--- | C] () -- C:\WINDOWS\System32\nv3dslv.chm [2011.01.31 15:22:13 | 000,124,964 | R--- | C] () -- C:\WINDOWS\System32\nvcplslv.chm [2011.01.31 15:22:13 | 000,122,675 | R--- | C] () -- C:\WINDOWS\System32\nvcplsve.chm [2011.01.31 15:22:13 | 000,118,734 | R--- | C] () -- C:\WINDOWS\System32\nv3dsve.chm [2011.01.31 15:22:13 | 000,057,380 | R--- | C] () -- C:\WINDOWS\System32\nvmobslv.chm [2011.01.31 15:22:12 | 000,217,076 | R--- | C] () -- C:\WINDOWS\System32\nvdspsky.chm [2011.01.31 15:22:12 | 000,129,499 | R--- | C] () -- C:\WINDOWS\System32\nv3dsky.chm [2011.01.31 15:22:12 | 000,126,105 | R--- | C] () -- C:\WINDOWS\System32\nvcplsky.chm [2011.01.31 15:22:12 | 000,057,545 | R--- | C] () -- C:\WINDOWS\System32\nvmobsky.chm [2011.01.31 15:22:11 | 000,214,210 | R--- | C] () -- C:\WINDOWS\System32\nvdsprus.chm [2011.01.31 15:22:11 | 000,126,976 | R--- | C] () -- C:\WINDOWS\System32\nv3drus.chm [2011.01.31 15:22:11 | 000,125,181 | R--- | C] () -- C:\WINDOWS\System32\nvcplrus.chm [2011.01.31 15:22:11 | 000,057,339 | R--- | C] () -- C:\WINDOWS\System32\nvmobrus.chm [2011.01.31 15:22:10 | 000,189,104 | R--- | C] () -- C:\WINDOWS\System32\nvdspptb.chm [2011.01.31 15:22:10 | 000,124,078 | R--- | C] () -- C:\WINDOWS\System32\nvcplptb.chm [2011.01.31 15:22:10 | 000,118,410 | R--- | C] () -- C:\WINDOWS\System32\nv3dptb.chm [2011.01.31 15:22:10 | 000,055,946 | R--- | C] () -- C:\WINDOWS\System32\nvmobptb.chm [2011.01.31 15:22:09 | 000,194,380 | R--- | C] () -- C:\WINDOWS\System32\nvdspptg.chm [2011.01.31 15:22:09 | 000,129,550 | R--- | C] () -- C:\WINDOWS\System32\nv3dptg.chm [2011.01.31 15:22:09 | 000,124,044 | R--- | C] () -- C:\WINDOWS\System32\nvcplptg.chm [2011.01.31 15:22:09 | 000,055,845 | R--- | C] () -- C:\WINDOWS\System32\nvmobptg.chm [2011.01.31 15:22:08 | 000,205,816 | R--- | C] () -- C:\WINDOWS\System32\nvdspplk.chm [2011.01.31 15:22:08 | 000,130,245 | R--- | C] () -- C:\WINDOWS\System32\nv3dplk.chm [2011.01.31 15:22:08 | 000,124,019 | R--- | C] () -- C:\WINDOWS\System32\nvcplplk.chm [2011.01.31 15:22:08 | 000,119,706 | R--- | C] () -- C:\WINDOWS\System32\nv3dnor.chm [2011.01.31 15:22:08 | 000,057,376 | R--- | C] () -- C:\WINDOWS\System32\nvmobplk.chm [2011.01.31 15:22:08 | 000,055,525 | R--- | C] () -- C:\WINDOWS\System32\nvmobnor.chm [2011.01.31 15:22:07 | 000,189,364 | R--- | C] () -- C:\WINDOWS\System32\nvdspnld.chm [2011.01.31 15:22:07 | 000,189,041 | R--- | C] () -- C:\WINDOWS\System32\nvdspnor.chm [2011.01.31 15:22:07 | 000,122,809 | R--- | C] () -- C:\WINDOWS\System32\nvcplnld.chm [2011.01.31 15:22:07 | 000,120,026 | R--- | C] () -- C:\WINDOWS\System32\nvcplnor.chm [2011.01.31 15:22:07 | 000,118,401 | R--- | C] () -- C:\WINDOWS\System32\nv3dnld.chm [2011.01.31 15:22:07 | 000,055,475 | R--- | C] () -- C:\WINDOWS\System32\nvmobnld.chm [2011.01.31 15:22:06 | 000,224,281 | R--- | C] () -- C:\WINDOWS\System32\nvdspkor.chm [2011.01.31 15:22:06 | 000,132,251 | R--- | C] () -- C:\WINDOWS\System32\nv3dkor.chm [2011.01.31 15:22:06 | 000,124,741 | R--- | C] () -- C:\WINDOWS\System32\nvcplkor.chm [2011.01.31 15:22:06 | 000,059,061 | R--- | C] () -- C:\WINDOWS\System32\nvmobkor.chm [2011.01.31 15:22:05 | 000,251,599 | R--- | C] () -- C:\WINDOWS\System32\nvdspjpn.chm [2011.01.31 15:22:05 | 000,144,421 | R--- | C] () -- C:\WINDOWS\System32\nv3djpn.chm [2011.01.31 15:22:05 | 000,129,704 | R--- | C] () -- C:\WINDOWS\System32\nvcpljpn.chm [2011.01.31 15:22:05 | 000,060,357 | R--- | C] () -- C:\WINDOWS\System32\nvmobjpn.chm [2011.01.31 15:22:04 | 000,201,378 | R--- | C] () -- C:\WINDOWS\System32\nvdspita.chm [2011.01.31 15:22:04 | 000,124,148 | R--- | C] () -- C:\WINDOWS\System32\nvcplita.chm [2011.01.31 15:22:04 | 000,121,053 | R--- | C] () -- C:\WINDOWS\System32\nv3dita.chm [2011.01.31 15:22:04 | 000,056,175 | R--- | C] () -- C:\WINDOWS\System32\nvmobita.chm [2011.01.31 15:22:03 | 000,203,902 | R--- | C] () -- C:\WINDOWS\System32\nvdsphun.chm [2011.01.31 15:22:03 | 000,131,070 | R--- | C] () -- C:\WINDOWS\System32\nv3dhun.chm [2011.01.31 15:22:03 | 000,125,552 | R--- | C] () -- C:\WINDOWS\System32\nvcplhun.chm [2011.01.31 15:22:03 | 000,058,340 | R--- | C] () -- C:\WINDOWS\System32\nvmobheb.chm [2011.01.31 15:22:03 | 000,057,512 | R--- | C] () -- C:\WINDOWS\System32\nvmobhun.chm [2011.01.31 15:22:02 | 000,207,116 | R--- | C] () -- C:\WINDOWS\System32\nvdspheb.chm [2011.01.31 15:22:02 | 000,132,088 | R--- | C] () -- C:\WINDOWS\System32\nv3dheb.chm [2011.01.31 15:22:02 | 000,126,196 | R--- | C] () -- C:\WINDOWS\System32\nvcplheb.chm [2011.01.31 15:22:02 | 000,119,315 | R--- | C] () -- C:\WINDOWS\System32\nv3dfra.chm [2011.01.31 15:22:02 | 000,056,087 | R--- | C] () -- C:\WINDOWS\System32\nvmobfra.chm [2011.01.31 15:22:01 | 000,195,677 | R--- | C] () -- C:\WINDOWS\System32\nvdspfin.chm [2011.01.31 15:22:01 | 000,189,184 | R--- | C] () -- C:\WINDOWS\System32\nvdspfra.chm [2011.01.31 15:22:01 | 000,124,278 | R--- | C] () -- C:\WINDOWS\System32\nv3dfin.chm [2011.01.31 15:22:01 | 000,122,227 | R--- | C] () -- C:\WINDOWS\System32\nvcplfra.chm [2011.01.31 15:22:01 | 000,056,934 | R--- | C] () -- C:\WINDOWS\System32\nvmobfin.chm [2011.01.31 15:22:00 | 000,197,555 | R--- | C] () -- C:\WINDOWS\System32\nvdspesm.chm [2011.01.31 15:22:00 | 000,124,544 | R--- | C] () -- C:\WINDOWS\System32\nvcplfin.chm [2011.01.31 15:22:00 | 000,124,138 | R--- | C] () -- C:\WINDOWS\System32\nvcplesm.chm [2011.01.31 15:22:00 | 000,118,608 | R--- | C] () -- C:\WINDOWS\System32\nv3desm.chm [2011.01.31 15:22:00 | 000,055,992 | R--- | C] () -- C:\WINDOWS\System32\nvmobesm.chm [2011.01.31 15:21:59 | 000,196,421 | R--- | C] () -- C:\WINDOWS\System32\nvdspesn.chm [2011.01.31 15:21:59 | 000,124,084 | R--- | C] () -- C:\WINDOWS\System32\nvcplesn.chm [2011.01.31 15:21:59 | 000,117,909 | R--- | C] () -- C:\WINDOWS\System32\nv3desn.chm [2011.01.31 15:21:59 | 000,055,669 | R--- | C] () -- C:\WINDOWS\System32\nvmobesn.chm [2011.01.31 15:21:58 | 000,182,024 | R--- | C] () -- C:\WINDOWS\System32\nvdspeng.chm [2011.01.31 15:21:58 | 000,121,758 | R--- | C] () -- C:\WINDOWS\System32\nvcpleng.chm [2011.01.31 15:21:58 | 000,117,083 | R--- | C] () -- C:\WINDOWS\System32\nv3deng.chm [2011.01.31 15:21:58 | 000,055,103 | R--- | C] () -- C:\WINDOWS\System32\nvmobeng.chm [2011.01.31 15:21:57 | 000,220,768 | R--- | C] () -- C:\WINDOWS\System32\nvdspell.chm [2011.01.31 15:21:57 | 000,131,422 | R--- | C] () -- C:\WINDOWS\System32\nv3dell.chm [2011.01.31 15:21:57 | 000,126,670 | R--- | C] () -- C:\WINDOWS\System32\nvcplell.chm [2011.01.31 15:21:57 | 000,059,100 | R--- | C] () -- C:\WINDOWS\System32\nvmobell.chm [2011.01.31 15:21:56 | 000,197,544 | R--- | C] () -- C:\WINDOWS\System32\nvdspdeu.chm [2011.01.31 15:21:56 | 000,124,590 | R--- | C] () -- C:\WINDOWS\System32\nvcpldeu.chm [2011.01.31 15:21:56 | 000,123,526 | R--- | C] () -- C:\WINDOWS\System32\nv3ddeu.chm [2011.01.31 15:21:56 | 000,118,926 | R--- | C] () -- C:\WINDOWS\System32\nv3ddan.chm [2011.01.31 15:21:56 | 000,056,087 | R--- | C] () -- C:\WINDOWS\System32\nvmobdeu.chm [2011.01.31 15:21:56 | 000,055,622 | R--- | C] () -- C:\WINDOWS\System32\nvmobdan.chm [2011.01.31 15:21:55 | 000,188,707 | R--- | C] () -- C:\WINDOWS\System32\nvdspdan.chm [2011.01.31 15:21:55 | 000,128,958 | R--- | C] () -- C:\WINDOWS\System32\nv3dcsy.chm [2011.01.31 15:21:55 | 000,120,933 | R--- | C] () -- C:\WINDOWS\System32\nvcpldan.chm [2011.01.31 15:21:55 | 000,057,387 | R--- | C] () -- C:\WINDOWS\System32\nvmobcsy.chm [2011.01.31 15:21:54 | 000,219,156 | R--- | C] () -- C:\WINDOWS\System32\nvdspcsy.chm [2011.01.31 15:21:54 | 000,200,405 | R--- | C] () -- C:\WINDOWS\System32\nvdspara.chm [2011.01.31 15:21:54 | 000,128,544 | R--- | C] () -- C:\WINDOWS\System32\nv3dara.chm [2011.01.31 15:21:54 | 000,124,067 | R--- | C] () -- C:\WINDOWS\System32\nvcplcsy.chm [2011.01.31 15:21:54 | 000,057,328 | R--- | C] () -- C:\WINDOWS\System32\nvmobara.chm [2011.01.31 15:21:53 | 000,181,895 | R--- | C] () -- C:\WINDOWS\System32\nvdsp.chm [2011.01.31 15:21:53 | 000,125,735 | R--- | C] () -- C:\WINDOWS\System32\nvcplara.chm [2011.01.31 15:21:53 | 000,121,529 | R--- | C] () -- C:\WINDOWS\System32\nvcpl.chm [2011.01.31 15:21:53 | 000,116,384 | R--- | C] () -- C:\WINDOWS\System32\nv3d.chm [2011.01.31 15:21:53 | 000,054,988 | R--- | C] () -- C:\WINDOWS\System32\nvmob.chm [2011.01.31 15:21:50 | 000,025,836 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu [2011.01.31 15:19:45 | 000,013,646 | ---- | C] () -- C:\WINDOWS\System32\wpa.bak [2011.01.31 15:15:16 | 000,000,827 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\HD ADeck.lnk [2011.01.31 15:15:16 | 000,000,821 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\HD ADeck.lnk [2011.01.31 15:11:21 | 000,020,471 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini [2011.01.31 15:11:15 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2011.01.31 15:11:02 | 000,020,228 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2011.01.31 15:11:02 | 000,010,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2011.01.31 15:10:07 | 000,000,718 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\Outlook Express.lnk [2011.01.31 15:10:04 | 000,000,783 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\Internet Explorer.lnk [2011.01.31 15:09:47 | 000,001,599 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\Remoteunterstützung.lnk [2011.01.31 15:09:47 | 000,000,768 | ---- | C] () -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Startmenü\Programme\Windows Media Player.lnk [2011.01.31 15:04:52 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2011.01.31 15:03:35 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011.01.31 15:02:55 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll [2011.01.31 15:02:36 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2011.01.31 15:02:29 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe [2011.01.31 15:02:28 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe [2011.01.31 15:02:26 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2011.01.31 15:02:17 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll [2011.01.31 15:02:12 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex [2011.01.31 15:02:08 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll [2011.01.31 15:01:57 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll [2011.01.31 15:01:04 | 000,002,951 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2011.01.31 15:01:00 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb [2011.01.31 15:00:59 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb [2011.01.31 15:00:58 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2011.01.31 14:59:36 | 000,000,758 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Windows Movie Maker.lnk [2011.01.31 14:59:25 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex [2011.01.31 14:59:11 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp [2011.01.31 14:59:11 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp [2011.01.31 14:59:06 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf [2011.01.31 14:58:41 | 000,380,416 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll [2011.01.31 14:58:00 | 000,000,621 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Windows Messenger.lnk [2011.01.31 14:57:58 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2011.01.31 14:57:34 | 000,002,004 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\MSN.lnk [2011.01.31 14:57:18 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe-Stuck.bmp [2011.01.31 14:57:18 | 000,026,680 | ---- | C] () -- C:\WINDOWS\Fächer.bmp [2011.01.31 14:57:18 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp [2011.01.31 14:57:18 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotek.bmp [2011.01.31 14:57:17 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Seifenblase.bmp [2011.01.31 14:57:17 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Präriewind.bmp [2011.01.31 14:57:17 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Granit.bmp [2011.01.31 14:57:17 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Angler.bmp [2011.01.31 14:57:17 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Kaffeetasse.bmp [2011.01.31 14:57:17 | 000,016,730 | ---- | C] () -- C:\WINDOWS\Feder.bmp [2011.01.31 14:57:17 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blaue Spitzen 16.bmp [2011.01.31 14:57:15 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h [2011.01.31 14:57:15 | 000,001,237 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd [2011.01.31 14:57:14 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h [2011.01.31 14:57:10 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc [2011.01.31 14:50:58 | 000,004,996 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF [2011.01.31 14:50:54 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2011.01.31 14:50:47 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011.01.31 14:50:21 | 000,001,806 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2011.01.31 14:48:46 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat [2011.01.31 14:48:46 | 000,105,926 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat [2011.01.31 14:48:46 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat [2011.01.31 14:48:46 | 000,021,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat [2011.01.31 14:48:46 | 000,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat [2011.01.31 14:48:46 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2011.01.31 14:48:45 | 000,817,199 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT [2011.01.31 14:48:45 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT [2011.01.31 14:48:45 | 000,041,270 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT [2011.01.31 14:48:45 | 000,033,765 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT [2011.01.31 14:48:45 | 000,016,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT [2011.01.31 14:48:45 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT [2011.01.31 14:48:45 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT [2011.01.31 14:48:45 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT [2011.01.31 14:48:45 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT [2011.01.31 14:48:45 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat [2011.01.31 14:48:44 | 001,246,463 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT [2011.01.31 14:48:43 | 002,039,179 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT [2011.01.31 14:48:43 | 000,631,338 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT [2011.01.31 14:48:01 | 000,209,696 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011.01.28 21:00:33 | 000,000,211 | -HS- | C] () -- C:\boot.ini [2011.01.28 20:16:33 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2011.01.28 20:16:33 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2011.01.28 20:16:33 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS [2011.01.28 20:16:33 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2011.01.28 20:04:50 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd [2011.01.28 20:04:50 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf [2011.01.28 20:04:49 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa [2011.01.28 20:04:48 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa [2008.12.19 15:15:58 | 004,338,246 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2008.12.17 17:41:18 | 000,884,237 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2008.12.17 17:22:58 | 000,093,184 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2008.12.17 17:22:48 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008.12.17 17:17:34 | 000,239,247 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2008.12.17 16:59:54 | 000,560,802 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2008.05.03 04:16:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2004.10.03 17:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll ========== LOP Check ========== [2011.01.31 15:38:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\AVG10 [2011.01.31 15:37:47 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Common Files [2011.01.31 17:28:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\IM [2011.01.31 17:25:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\IncrediMail [2011.01.31 15:35:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\MFAData [2011.01.31 17:28:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Photo Notifier and Animation Creator [2011.02.01 12:10:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP [2011.01.31 22:43:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\WinMaximizer [2011.01.31 20:18:28 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\{2162CCC0-3A5F-4887-B51F-CE5F195B3620} [2011.01.31 15:54:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\AVG [2011.01.31 15:39:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\AVG10 [2011.01.31 16:52:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Lexmark Productivity Studio [2011.01.31 22:50:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\Uniblue [2011.02.02 19:02:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Manfred.PRIVAT-DFBC6387\Anwendungsdaten\UseNeXT [2011.02.03 20:10:57 | 000,000,470 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job [2011.02.03 20:08:38 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\RegistryBooster.job [2011.02.03 21:14:49 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{40A7E12B-925D-4C35-AF3E-65B886DE12E1}.job [2011.02.03 20:08:38 | 000,000,296 | ---- | M] () -- C:\WINDOWS\Tasks\WinMaximizer-Manfred-Startup.job ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 130 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:0B4227B4 < End of report > |
|
03.02.2011, 21:43
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! Sieht aus, als wenn da viel Schrott drauf wär  Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Zuerst Facebook-Virus-Neu aufgesetzt,cpu Auslastung 100%,bei Facebook-Games extrem lahm! |
| 0x00000001, 100%, ad-aware, afd.sys, auslastung, auslastung 100%, awareness, bho, bildschirm, cpu, desktop, dllhost.exe, excel, firefox, format, hijack, hijackthis, hkus\s-1-5-18, internet explorer, lanmanworkstation, location, mozilla, oldtimer, plug-in, policyagent, realtek, rundll, schannel.dll, searchplugins, secur, security, server, software, sptd.sys, system, systray, taskmanager, ups.exe, virus, webcheck, windows, windows xp |
Linear-Darstellung
