| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Auch einen TR\Kazy.mekm.1 oder 42589960.exe eingefangenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
17.04.2011, 20:31
| #1 |
| |  Auch einen TR\Kazy.mekm.1 oder 42589960.exe eingefangen Hallo, Habe mir heute den o.g Trojaner eingefangen eund auch was gegen gemacht. Wollte mal fragen ob ihr mir anhand der angehängten daten sagen könnt ob der rechner jetzt sauber ist.OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 17.04.2011 21:17:26 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Kloppe\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19048)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 49,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 144,09 Gb Total Space | 43,63 Gb Free Space | 30,28% Space Free | Partition Type: NTFS
Drive D: | 144,00 Gb Total Space | 143,90 Gb Free Space | 99,93% Space Free | Partition Type: NTFS
Computer Name: KALETKALAPTOP | User Name: Kloppe | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [CEWE FOTOSCHAU] -- "C:\Program Files\CeWe Color\Mein CEWE FOTOBUCH\CEWE FOTOSCHAU.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Mein CEWE FOTOBUCH] -- "C:\Program Files\CeWe Color\Mein CEWE FOTOBUCH\Mein CEWE FOTOBUCH.exe" "%1" ()
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{17C9712C-B0FF-4DE2-8825-DACFF07A2A6D}" = lport=445 | protocol=6 | dir=in | app=system |
"{1ACC8B81-4A32-4952-B23E-3B83139AA64F}" = lport=138 | protocol=17 | dir=in | app=system |
"{20000877-69F7-4346-B4CE-B9E1BB47C55E}" = rport=138 | protocol=17 | dir=out | app=system |
"{2677158A-5F0E-4049-969B-0CF2018C79DB}" = rport=445 | protocol=6 | dir=out | app=system |
"{3FD0B431-FA3C-48C4-97FD-5484C4111559}" = rport=137 | protocol=17 | dir=out | app=system |
"{5A5CACB9-A9DC-4CA0-8C73-6ADEB81F3B58}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{B90197B0-98B8-4132-BB41-BF493DD0CD59}" = lport=139 | protocol=6 | dir=in | app=system |
"{C644570E-17B8-4601-A65F-E80EE9425ABE}" = lport=137 | protocol=17 | dir=in | app=system |
"{E0F18376-F1E7-4603-81C9-6688EDF26ACA}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{E912E8C0-725B-4AAE-89C4-D664C62E8944}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{FC0AEC55-BED7-4381-B956-96A224A80686}" = rport=139 | protocol=6 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1A120041-D7B9-4DED-B01F-27D141829EC5}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\cinergydvr.exe |
"{1A5BA915-8DCC-44CF-A9CB-A88B4215FE73}" = protocol=6 | dir=in | app=c:\windows\system32\lmabcoms.exe |
"{1C370087-6889-462E-B1B1-60296883EE45}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{1C792D07-5BF1-445C-8AFB-CC5DC3CA7623}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\cinergydvrhelper.exe |
"{291D306C-48AA-4223-B4A4-5D53D8E45FDD}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{2B483DC6-0414-4C8E-B262-DA53EBC5E88E}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{2FF5B126-ED23-4367-8556-E56E6A58835A}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\insttool.exe |
"{35A3779F-1D36-4A27-B8DA-0771AF95C0DF}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{47A4BC4D-5698-41DC-9DCF-6E1A4DD59E02}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{490C16AD-CDD2-4E46-8260-B1FB3FB93325}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{580B165C-5F47-4BB2-B3CB-C5155CB4FB8C}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{5E6FD617-A241-4E14-A9C2-88EE4D2304FE}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\igdctrl.exe |
"{6779FCAE-5815-46CF-89C3-D6A107FAA6AC}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{6C708175-E552-40D1-A8A6-13CFD9899760}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{70CAECDD-3609-48C8-B42D-5A4606C5A40F}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\cinergydvrhelper.exe |
"{721A3DB8-48C0-4B60-8579-D7A99D398020}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\igdctrl.exe |
"{7CFA43B6-5D59-4F06-8118-185477E4EEB1}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{8BBEC67A-5820-4091-9448-E9ACD204393E}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{990D56B8-1A36-492F-ADB7-6CA1F453F443}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\fboxupd.exe |
"{A422AEA7-F3D0-4134-B876-9CFC5F1F2EEB}" = protocol=17 | dir=in | app=c:\windows\system32\lmabcoms.exe |
"{A858637A-CAAD-4F8C-8FD9-9924298B2F67}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\webwaigd.exe |
"{A92B32CD-6D22-41DA-B641-A293E467042D}" = protocol=6 | dir=in | app=c:\program files\fritz!dsl\webwaigd.exe |
"{AC5CDD93-32AD-4450-B2C2-BD4ED9CA417F}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\insttool.exe |
"{C6820BDC-B2BA-4951-B972-EC99FA0429AC}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\cinergydvr.exe |
"{C6D57AC7-5A8C-4AB0-B8C3-88B136C248E9}" = protocol=17 | dir=in | app=c:\program files\terratec\terratec home cinema\tvtvsetup\tvtv_wizard.exe |
"{C99F5CC4-959D-4C98-A5F4-6A3FF56D9A2F}" = protocol=6 | dir=in | app=c:\program files\terratec\terratec home cinema\tvtvsetup\tvtv_wizard.exe |
"{D143A981-CBDE-480C-9F92-01F33CA46274}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{E4AAD5FD-BB3D-4BD7-9A0A-20F47548FAAF}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{E75CBF35-506F-418D-825D-14AC26E40972}" = dir=in | app=c:\program files\cyberlink\powerdvd\powerdvd.exe |
"{FEECD9A7-332B-44C3-9FD2-6818A4F5823E}" = protocol=17 | dir=in | app=c:\program files\fritz!dsl\fboxupd.exe |
"{FFE802C9-B147-4651-9BE1-5B48A6CDC045}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"TCP Query User{29564674-80B8-42A0-A24C-C9F982966198}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{BCC31D80-BAD4-4608-8554-31A4630AE636}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{DE3A3A41-36F0-406C-B326-6D287190E981}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{E4F77458-37A1-4B34-9CD2-42155C3D358C}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{004C5DA2-2051-4D25-94BA-51CF810C91EB}" = LightScribe System Software 1.12.37.1
"{00AF10C1-44BD-4862-9D7F-24E6BA3E87FD}" = imagine digital freedom - Samsung
"{00C58EBE-223E-4AB6-8AE9-38F27F4420BD}" = WISO Sparbuch 2009
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = WIDCOMM Bluetooth Software 6.0.1.6300
"{04830D0F-F980-4EC0-89F1-594F2FD2A1B5}" = ElsterFormular 2008/2009
"{04983D37-2202-4295-94A2-8B547C66133F}" = Atheros WLAN Client
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{09298F26-A95C-31E2-9D95-2C60F586F075}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}" = Uniblue RegistryBooster
"{12FEC00C-027C-4A34-9AAB-562EDA43DC18}_is1" = MiniTool Partition Wizard Home Edition 5.2
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution III
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2457326B-C110-40C3-89B0-889CC913871A}" = AVM FRITZ!DSL
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java(TM) 6 Update 24
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}" = Samsung Magic Doctor
"{36BEAD11-8577-49AD-9250-E06A50AE87B0}" = Microsoft SOAP Toolkit 2.0 SP2
"{3749D33C-26C8-4669-ACAA-DA3B0ADA67B6}" = Das große Tafelwerk interaktiv
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3DB5FD00-BB93-4AF3-B925-77DAA0E4E2F4}" = eBay Toolbar
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4cb9f93c-9edc-4be9-ae61-af128ddbecfa}" = Business Contact Manager für Outlook 2007 SP2
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{4EA8EA5D-8E46-4698-9BF7-2F2AD8E1C185}" = Easy Network Manager 3.0
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{639673E9-D53F-44F4-A046-485C8A6ADA15}" = Paint.NET v3.5.6
"{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}" = TerraTec Home Cinema
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{685707A4-911C-468D-BFC4-64A50E5E3A0C}" = Samsung Update Plus
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6F730513-8688-4C3C-90A3-6B9792CE2EF3}" = Easy Battery Manager
"{71A51B09-E7D3-11DB-A386-005056C00008}" = Vimicro UVC Camera
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B63B2922B174135AFC0E1377DD81EC2}" =
"{804F1285-8CBF-408D-8CDC-D4D40003B2E4}" = PlayCamera
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 2.9.1
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{87441A59-5E64-4096-A170-14EFE67200C3}" = Picture Control Utility
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}_PROHYBRIDR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0407-0000-0000000FF1CE}_PROHYBRIDR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{90A40407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0120-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{955597D8-E5E1-474D-B647-60AC44566D24}" = Play AVStation
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{AC76BA86-7AD7-1031-7B44-A81000000003}" = Adobe Reader 8.1.0 - Deutsch
"{B014EE44-9197-4513-9613-71E6EB1B514E}" = Nikon Message Center 2
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{BA5F3E0E-8F3E-47BD-88E4-AD3EB5225F51}" = Intel(R) PROSet/Wireless WiFi-Software
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D1E7142C-6BC3-49EB-A71A-E5D7ADAC7599}" = Nikon File Uploader 2
"{DDD62492-32A7-412B-8AF1-2CF032AD42E3}" = ViewNX 2
"{ED636101-1959-4360-8BF7-209436E7DEE4}" = Windows Live Sync
"{EF367AA4-070B-493C-9575-85BE59D789C9}" = Easy SpeedUp Manager
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}" = Microsoft SQL Server Native Client
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FDE96E86-7780-431C-92F7-679C6A7CEC51}" = Microsoft SQL Server VSS Writer
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Agere Systems Soft Modem" = Agere Systems HDA Modem
"AntiVir PersonalEdition Classic" = Avira AntiVir Personal - Free Antivirus
"AutocompletePro3_is1" = AutocompletePro
"AVMFBox" = AVM FRITZ!Box Dokumentation
"AVMFBoxPrinter" = AVM FRITZ!Box Druckeranschluss
"AVS DVD Player_is1" = AVS DVD Player version 2.4
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.2
"Business Contact Manager" = Business Contact Manager für Outlook 2007 SP2
"conduitEngine" = Conduit Engine
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"ElsterFormular 11.3.0.4235" = ElsterFormular
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"EPSON Scanner" = EPSON Scan
"FormatFactory" = FormatFactory 2.50
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free YouTube Download_is1" = Free YouTube Download version 2.10.33.324
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8
"Google Updater" = Google Updater
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{4EA8EA5D-8E46-4698-9BF7-2F2AD8E1C185}" = Easy Network Manager 3.0
"InstallShield_{685707A4-911C-468D-BFC4-64A50E5E3A0C}" = Samsung Update Plus
"InstallShield_{955597D8-E5E1-474D-B647-60AC44566D24}" = Play AVStation
"Lexmark_HostCD" = Lexmark Software Uninstall
"McAfee Security Scan" = McAfee Security Scan Plus
"Mein CEWE FOTOBUCH" = Mein CEWE FOTOBUCH
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mp3tag" = Mp3tag v2.43
"Music Editor Free" = Music Editor Free
"myphotobook" = myphotobook 3.6
"NSS" = Norton Security Scan
"NVIDIA Drivers" = NVIDIA Drivers
"PhotoScape" = PhotoScape
"PROHYBRIDR" = 2007 Microsoft Office system
"ProInst" = Intel PROSet Wireless
"PunkBusterSvc" = PunkBuster Services
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Trojan Remover_is1" = Trojan Remover 6.8.2
"Trojancheck_is1" = Trojancheck 6
"Uniblue RegistryBooster" = Uniblue RegistryBooster
"Uninstall_is1" = Uninstall 1.0.0.1
"uTorrent" = µTorrent
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"2a4f70b48f669acd" = AA3Deploy
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 16.06.2010 12:19:36 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:36 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:44 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:44 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:46 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:46 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:50 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:50 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:51 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
Error - 16.06.2010 12:19:51 | Computer Name = KaletkaLaptop | Source = Windows Search Service | ID = 3013
Description =
[ System Events ]
Error - 17.04.2011 06:45:26 | Computer Name = KaletkaLaptop | Source = Service Control Manager | ID = 7022
Description =
Error - 17.04.2011 06:50:46 | Computer Name = KaletkaLaptop | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 17.04.2011 07:06:07 | Computer Name = KaletkaLaptop | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 17.04.2011 07:07:00 | Computer Name = KaletkaLaptop | Source = Service Control Manager | ID = 7000
Description =
Error - 17.04.2011 07:10:25 | Computer Name = KaletkaLaptop | Source = Service Control Manager | ID = 7022
Description =
Error - 17.04.2011 07:21:00 | Computer Name = KaletkaLaptop | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 17.04.2011 07:21:52 | Computer Name = KaletkaLaptop | Source = Service Control Manager | ID = 7000
Description =
Error - 17.04.2011 07:45:10 | Computer Name = KaletkaLaptop | Source = Service Control Manager | ID = 7000
Description =
Error - 17.04.2011 07:49:54 | Computer Name = KaletkaLaptop | Source = Service Control Manager | ID = 7022
Description =
Error - 17.04.2011 08:03:13 | Computer Name = KaletkaLaptop | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
< End of report >
hier die andere dateiOTL Logfile: OTL EXTRAS Logfile: Code:
ATTFilter OTL logfile created on: 17.04.2011 21:23:32 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Kloppe\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19048) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 49,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 74,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 144,09 Gb Total Space | 43,63 Gb Free Space | 30,28% Space Free | Partition Type: NTFS Drive D: | 144,00 Gb Total Space | 143,90 Gb Free Space | 99,93% Space Free | Partition Type: NTFS Computer Name: KALETKALAPTOP | User Name: Kloppe | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.04.17 21:15:30 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Kloppe\Desktop\OTL.exe PRC - [2011.04.17 13:48:58 | 000,303,104 | ---- | M] (Samsung Electronics Co. Ltd) -- C:\Programme\Samsung\Samsung Update Plus\Downloads\SupUpdateNotice.exe PRC - [2011.03.14 17:31:03 | 000,025,472 | ---- | M] (Uniblue Systems Limited) -- C:\Programme\Uniblue\RegistryBooster\rbmonitor.exe PRC - [2011.02.22 08:21:12 | 000,638,232 | ---- | M] (Microsoft Corporation) -- C:\Programme\Internet Explorer\iexplore.exe PRC - [2011.02.01 15:49:28 | 000,220,552 | ---- | M] (Geek Software GmbH) -- C:\Programme\PDF24\pdf24.exe PRC - [2010.12.10 18:30:50 | 000,086,880 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe PRC - [2010.12.10 18:29:30 | 000,238,944 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe PRC - [2010.12.08 23:15:44 | 000,063,360 | ---- | M] (DivX, LLC) -- C:\Programme\DivX\DivX Plus Web Player\DDMService.exe PRC - [2010.12.08 21:17:46 | 001,226,608 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe PRC - [2010.12.05 21:54:39 | 000,233,936 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10l_ActiveX.exe PRC - [2010.07.05 14:30:36 | 003,687,344 | -H-- | M] (Simply Super Software) -- C:\Programme\Trojan Remover\Rmvtrjan.exe PRC - [2009.05.19 11:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe PRC - [2009.04.11 08:28:03 | 001,233,920 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Sidebar\sidebar.exe PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009.04.11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe PRC - [2009.03.19 11:12:38 | 000,632,048 | ---- | M] (eBay Inc.) -- C:\Programme\eBay\eBay Toolbar2\eBayTBDaemon.exe PRC - [2008.11.04 12:06:36 | 001,105,920 | ---- | M] (TerraTec Electronic GmbH) -- C:\Programme\Common Files\TerraTec\Remote\TTTvRc.exe PRC - [2008.10.15 15:31:50 | 000,068,865 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe PRC - [2008.10.15 15:29:58 | 000,151,297 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe PRC - [2008.06.12 15:28:40 | 000,266,497 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe PRC - [2008.05.23 07:11:56 | 000,819,200 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Intel\WiFi\bin\EvtEng.exe PRC - [2008.05.23 06:43:52 | 000,466,944 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe PRC - [2008.05.22 10:33:54 | 000,688,128 | ---- | M] (SAMSUNG Electronics) -- C:\Programme\Samsung\Easy Display Manager\dmhkcore.exe PRC - [2008.05.13 02:12:46 | 000,482,984 | ---- | M] () -- C:\Programme\Samsung\Samsung Update Plus\SLUSelfUpdateClient.exe PRC - [2008.04.25 14:31:34 | 000,565,248 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Programme\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe PRC - [2008.04.17 08:26:46 | 000,352,256 | ---- | M] (SAMSUNG Electronics co., LTD.) -- C:\Programme\Samsung\EBM\EasyBatteryMgr3.exe PRC - [2008.04.17 04:50:00 | 006,111,232 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe PRC - [2008.02.12 06:19:52 | 000,723,496 | ---- | M] (Broadcom Corporation.) -- C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe PRC - [2008.01.21 04:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe PRC - [2008.01.21 04:25:33 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe PRC - [2008.01.21 04:24:46 | 000,226,816 | ---- | M] (Microsoft Corp.) -- C:\Windows\System32\Defrag.exe PRC - [2008.01.21 04:24:43 | 000,163,840 | ---- | M] (Microsoft Corp.) -- C:\Windows\System32\DfrgNtfs.exe PRC - [2008.01.21 04:23:32 | 000,319,544 | ---- | M] (Microsoft Corporation) -- c:\Programme\Windows Defender\MpCmdRun.exe PRC - [2008.01.16 10:51:44 | 000,030,312 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe PRC - [2007.09.11 15:50:28 | 000,804,144 | ---- | M] (AVM Berlin) -- C:\Programme\FRITZ!DSL\StCenter.exe PRC - [2007.09.04 10:14:34 | 000,087,344 | ---- | M] (AVM Berlin) -- C:\Programme\FRITZ!DSL\IGDCTRL.EXE PRC - [2007.07.05 00:41:42 | 000,045,056 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Programme\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe PRC - [2007.06.15 10:14:00 | 000,713,648 | ---- | M] (Lexmark International, Inc.) -- C:\Programme\Lexmark\ErrorApp\LMab1err.EXE ========== Modules (SafeList) ========== MOD - [2011.04.17 21:15:30 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Kloppe\Desktop\OTL.exe MOD - [2010.08.31 17:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - [2010.01.15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2008.10.15 15:31:50 | 000,068,865 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe -- (AntiVirScheduler) SRV - [2008.10.15 15:29:58 | 000,151,297 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe -- (AntiVirService) SRV - [2008.05.23 07:11:56 | 000,819,200 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV - [2008.05.23 06:43:52 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV - [2008.05.13 01:47:20 | 000,077,480 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe -- (Samsung Update Plus) SRV - [2008.01.21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008.01.16 10:51:44 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc) SRV - [2007.09.04 10:14:34 | 000,087,344 | ---- | M] (AVM Berlin) [Auto | Running] -- C:\Program Files\FRITZ!DSL\IGDCTRL.EXE -- (IGDCTRL) SRV - [2007.01.12 11:51:30 | 000,508,848 | ---- | M] ( ) [On_Demand | Stopped] -- C:\Windows\System32\LMabcoms.exe -- (lmab_device) ========== Driver Services (SafeList) ========== DRV - [2010.08.16 15:31:08 | 000,016,472 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\pwdrvio.sys -- (pwdrvio) DRV - [2010.08.16 15:31:06 | 000,011,104 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\pwdspio.sys -- (pwdspio) DRV - [2009.05.29 07:50:21 | 000,075,096 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2009.05.29 07:50:06 | 000,052,056 | ---- | M] (Avira GmbH) [File_System | On_Demand | Running] -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avgntflt.sys -- (avgntflt) DRV - [2009.05.29 07:50:02 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avgio.sys -- (avgio) DRV - [2008.06.09 00:23:00 | 007,522,624 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2008.05.20 21:36:12 | 003,663,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Intel(R) DRV - [2008.04.05 07:56:26 | 000,242,560 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vmc302.sys -- (VMC302) DRV - [2008.01.21 04:23:20 | 002,225,664 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R) DRV - [2007.11.16 14:50:08 | 000,449,408 | ---- | M] (DiBcom) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dvb7700all.sys -- (mod7700) DRV - [2007.11.08 20:03:26 | 000,021,248 | ---- | M] (AVIRA GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2007.09.13 08:17:58 | 000,755,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2007.05.23 10:13:10 | 000,013,312 | ---- | M] (SAMSUNG ELECTRONICS CO., LTD.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\KMDFMEMIO.sys -- (KMDFMEMIO) DRV - [2006.11.28 09:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2006.11.02 09:30:53 | 000,045,056 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcm4sbxp.sys -- (bcm4sbxp) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http:\\www.samsungcomputer.com IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.militaria-fundforum.de/ IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - HKLM\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2010.12.12 07:08:02 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2010.12.12 07:08:02 | 000,000,000 | ---D | M] [2009.12.30 21:55:02 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Kloppe\AppData\Roaming\mozilla\Extensions [2009.12.30 21:55:02 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Kloppe\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Programme\AutocompletePro\AutocompletePro.dll (SimplyGen) O2 - BHO: (eBay Toolbar Helper) - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Programme\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation) O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (eBay Toolbar) - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Programme\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.) O3 - HKLM\..\Toolbar: (&TerraTec Home Cinema) - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Programme\TerraTec\TerraTec Home Cinema\THCDeskBand.dll (TerraTec Electronic GmbH) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [DivX Download Manager] C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe (DivX, LLC) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [eBayToolbar] C:\Programme\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.) O4 - HKLM..\Run: [EPSON Stylus DX3800 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [Nikon Message Center 2] C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe (Nikon Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH) O4 - HKLM..\Run: [Remote Control Editor] C:\Programme\Common Files\TerraTec\Remote\TTTvRc.exe (TerraTec Electronic GmbH) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe (Simply Super Software) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [CijYFJMKlQ] C:\ProgramData\CijYFJMKlQ.exe (BitSprx) O4 - HKCU..\Run: [LMab1err] C:\Programme\Lexmark\ErrorApp\LMab1err.EXE (Lexmark International, Inc.) O4 - HKCU..\Run: [MsnMsgr] File not found O4 - HKCU..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited) O4 - HKCU..\Run: [Remote Control Editor] C:\Program Files\Common Files\TerraTec\Remote\TTTvRc.exe (TerraTec Electronic GmbH) O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation) O4 - Startup: C:\Users\Kloppe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Internet.lnk = C:\Programme\FRITZ!DSL\FritzDsl.exe (AVM Berlin) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Free YouTube Download - C:\Users\Kloppe\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Kloppe\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm () O8 - Extra context menu item: Suche - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O13 - gopher Prefix: missing O15 - HKCU\..Trusted Domains: fritz.box ([]* in Lokales Intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Kloppe\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\Kloppe\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{8536d90f-aec3-11df-a07c-0013779ff9c5}\Shell - "" = AutoRun O33 - MountPoints2\{8536d90f-aec3-11df-a07c-0013779ff9c5}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Start.hta O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.04.17 21:15:21 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Kloppe\Desktop\OTL.exe [2011.04.17 16:24:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Home Edition 5.2 [2011.04.17 16:24:29 | 000,000,000 | ---D | C] -- C:\Programme\MiniTool Partition Wizard Home Edition 5.2 [2011.04.17 16:24:13 | 008,246,408 | ---- | C] (MiniTool Solution Ltd. ) -- C:\Users\Kloppe\Desktop\pwhe52.exe [2011.04.17 13:00:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\TEMP [2011.04.17 12:59:28 | 000,000,000 | -H-D | C] -- C:\Users\Kloppe\Documents\Simply Super Software [2011.04.17 12:59:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover [2011.04.17 12:59:16 | 000,000,000 | -H-D | C] -- C:\Programme\Trojan Remover [2011.04.17 12:59:16 | 000,000,000 | -H-D | C] -- C:\Users\Kloppe\AppData\Roaming\Simply Super Software [2011.04.17 12:59:16 | 000,000,000 | -H-D | C] -- C:\ProgramData\Simply Super Software [2011.04.17 12:54:26 | 000,000,000 | ---D | C] -- C:\Programme\Trojancheck 6 [2011.04.17 12:54:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojancheck 6 [2011.04.17 12:49:22 | 000,000,000 | -H-D | C] -- C:\Users\Kloppe\AppData\Roaming\Uniblue [2011.04.17 12:49:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue [2011.04.17 12:49:14 | 000,000,000 | -H-D | C] -- C:\ProgramData\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A} [2011.04.17 12:49:13 | 000,000,000 | ---D | C] -- C:\Programme\Uniblue [2011.04.17 12:48:49 | 000,000,000 | -H-D | C] -- C:\Users\Kloppe\AppData\Local\PackageAware [2011.04.17 12:17:58 | 000,569,344 | -H-- | C] (BitSprx) -- C:\ProgramData\CijYFJMKlQ.exe [2011.04.06 19:08:28 | 000,000,000 | ---D | C] -- C:\Programme\ConduitEngine [2011.04.06 19:08:26 | 000,000,000 | -H-D | C] -- C:\Users\Kloppe\AppData\Local\Conduit [2010.09.02 14:33:42 | 000,360,448 | ---- | C] ( ) -- C:\Windows\System32\lexlog.dll [2010.09.02 14:33:34 | 001,204,224 | ---- | C] ( ) -- C:\Windows\System32\LMabserv.dll [2010.09.02 14:33:34 | 000,987,136 | ---- | C] ( ) -- C:\Windows\System32\LMabusb1.dll [2010.09.02 14:33:34 | 000,675,840 | ---- | C] ( ) -- C:\Windows\System32\LMabpmui.dll [2010.09.02 14:33:34 | 000,532,480 | ---- | C] ( ) -- C:\Windows\System32\LMabpar1.dll [2010.09.02 14:33:34 | 000,336,816 | ---- | C] ( ) -- C:\Windows\System32\LMabppls.exe [2010.09.02 14:33:34 | 000,163,840 | ---- | C] ( ) -- C:\Windows\System32\LMabprox.dll [2010.09.02 14:33:34 | 000,114,688 | ---- | C] ( ) -- C:\Windows\System32\LMabpplc.dll [2010.09.02 14:33:33 | 001,056,768 | ---- | C] ( ) -- C:\Windows\System32\LMabip1.dll [2010.09.02 14:33:33 | 000,614,400 | ---- | C] ( ) -- C:\Windows\System32\LMabcomc.dll [2010.09.02 14:33:33 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\LMabiobj.dll [2010.09.02 14:33:33 | 000,561,152 | ---- | C] ( ) -- C:\Windows\System32\LMablmpm.dll [2010.09.02 14:33:33 | 000,508,848 | ---- | C] ( ) -- C:\Windows\System32\LMabcoms.exe [2010.09.02 14:33:33 | 000,507,904 | ---- | C] ( ) -- C:\Windows\System32\LMabhcp.dll [2010.09.02 14:33:33 | 000,425,984 | ---- | C] ( ) -- C:\Windows\System32\LMabcomm.dll [2010.09.02 14:33:33 | 000,413,696 | ---- | C] ( ) -- C:\Windows\System32\LMabinpa.dll [2010.01.29 15:18:00 | 000,630,784 | ---- | C] ( ) -- C:\Windows\System32\softcoin.dll [2010.01.29 15:18:00 | 000,425,984 | ---- | C] ( ) -- C:\Windows\System32\gencoin.dll [2006.11.24 07:14:44 | 000,139,264 | ---- | C] ( ) -- C:\Windows\System32\MACSSDK_wiz.dll [2006.11.24 07:14:44 | 000,126,976 | ---- | C] ( ) -- C:\Windows\System32\MACSSDK.dll ========== Files - Modified Within 30 Days ========== [2011.04.17 21:15:30 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Kloppe\Desktop\OTL.exe [2011.04.17 21:01:01 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.04.17 20:34:57 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.04.17 20:34:57 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.04.17 20:16:09 | 000,000,476 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Kloppe.job [2011.04.17 19:45:13 | 000,287,032 | ---- | M] () -- C:\Users\Kloppe\Desktop\SoftonicDownloader_fuer_norton-antivirus.exe [2011.04.17 18:05:46 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{311D9149-CEE9-49B8-9323-38F1BD834F56}.job [2011.04.17 18:01:00 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.04.17 16:24:31 | 000,000,959 | ---- | M] () -- C:\Users\Public\Desktop\MiniTool Partition Wizard Home Edition.lnk [2011.04.17 16:24:13 | 008,246,408 | ---- | M] (MiniTool Solution Ltd. ) -- C:\Users\Kloppe\Desktop\pwhe52.exe [2011.04.17 13:46:55 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job [2011.04.17 13:43:48 | 000,000,334 | ---- | M] () -- C:\Windows\tasks\RegistryBooster.job [2011.04.17 13:43:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.04.17 13:43:21 | 3215,572,992 | -HS- | M] () -- C:\hiberfil.sys [2011.04.17 13:42:35 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2011.04.17 12:54:27 | 000,000,808 | -H-- | M] () -- C:\Users\Kloppe\Desktop\Trojancheck.lnk [2011.04.17 12:49:21 | 000,001,876 | ---- | M] () -- C:\Users\Public\Desktop\Uniblue RegistryBooster.lnk [2011.04.17 12:40:35 | 000,051,592 | -H-- | M] () -- C:\Users\Kloppe\Desktop\Aufzeichnen.JPG [2011.04.17 12:24:31 | 000,042,142 | -H-- | M] () -- C:\ProgramData\nvModes.001 [2011.04.17 12:23:10 | 000,042,142 | -H-- | M] () -- C:\ProgramData\nvModes.dat [2011.04.17 12:17:57 | 000,569,344 | -H-- | M] (BitSprx) -- C:\ProgramData\CijYFJMKlQ.exe [2011.04.16 19:37:26 | 000,287,949 | -H-- | M] () -- C:\Users\Kloppe\Desktop\DSC_0906.JPG [2011.04.16 19:34:32 | 000,097,280 | -H-- | M] () -- C:\Users\Kloppe\Desktop\photothumb.db [2011.04.15 21:28:33 | 000,146,373 | -H-- | M] () -- C:\Users\Kloppe\Desktop\DSC_0882.JPG [2011.04.15 21:28:15 | 000,230,334 | -H-- | M] () -- C:\Users\Kloppe\Desktop\DSC_0879.JPG [2011.04.15 21:06:46 | 000,021,695 | -H-- | M] () -- C:\Users\Kloppe\Desktop\eagle2.jpg [2011.04.14 14:44:05 | 768,687,303 | -H-- | M] () -- C:\Users\Kloppe\Desktop\Adolf Hitler - Mein Kampf - hoerbuech.zip [2011.04.14 11:58:19 | 000,441,232 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.04.14 06:22:25 | 000,643,612 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.04.14 06:22:24 | 000,686,620 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.04.14 06:22:24 | 000,150,888 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.04.14 06:22:24 | 000,122,500 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.04.12 21:23:18 | 000,060,975 | -H-- | M] () -- C:\Users\Kloppe\Desktop\thesimpsons_08.jpg [2011.04.10 08:46:19 | 000,081,892 | -H-- | M] () -- C:\Users\Kloppe\Desktop\DSC_0820.JPG [2011.04.08 08:31:30 | 000,022,669 | -H-- | M] () -- C:\Users\Kloppe\Desktop\Saugstube-Torrent.to_cultus-ferox-4-alben.torrent [2011.04.06 20:07:37 | 001,858,986 | -H-- | M] () -- C:\Users\Kloppe\Desktop\1 188.JPG [2011.04.06 20:03:44 | 000,106,316 | -H-- | M] () -- C:\Users\Kloppe\Desktop\MbO _Führungsstile_Klausuraufgaben.pdf [2011.04.06 13:02:50 | 001,691,632 | -H-- | M] () -- C:\Users\Kloppe\Desktop\06042011124.JPG [2011.04.05 22:56:45 | 000,057,442 | -H-- | M] () -- C:\Users\Kloppe\Desktop\Versuch3.odt [2011.04.05 20:22:45 | 000,025,889 | -H-- | M] () -- C:\Users\Kloppe\Desktop\DSC_0738.JPG [2011.04.02 22:43:35 | 000,057,995 | -H-- | M] () -- C:\Users\Kloppe\Desktop\DSCF3135.JPG [2011.04.02 22:42:19 | 000,013,312 | -H-- | M] () -- C:\Users\Kloppe\Documents\photothumb.db [2011.04.02 20:31:13 | 000,030,602 | -H-- | M] () -- C:\Users\Kloppe\Desktop\Besteck-2.jpg [2011.03.27 09:25:04 | 000,029,963 | -H-- | M] () -- C:\Users\Kloppe\Desktop\fa_09.jpg [2011.03.21 22:44:47 | 000,029,947 | -H-- | M] () -- C:\Users\Kloppe\Desktop\Aufzeichnen1.JPG [2011.03.21 21:32:11 | 000,509,985 | -H-- | M] () -- C:\Users\Kloppe\Desktop\Volumenmessger$C3$A4te++HA_GR.pdf [2011.03.21 20:16:28 | 000,296,789 | -H-- | M] () -- C:\Users\Kloppe\Desktop\CHP3_urpc_Saeure-Base-Titrationen.pdf ========== Files Created - No Company Name ========== [2011.04.17 19:45:09 | 000,287,032 | ---- | C] () -- C:\Users\Kloppe\Desktop\SoftonicDownloader_fuer_norton-antivirus.exe [2011.04.17 16:25:21 | 000,725,064 | ---- | C] () -- C:\Windows\System32\pwNative.exe [2011.04.17 16:25:21 | 000,016,472 | ---- | C] () -- C:\Windows\System32\pwdrvio.sys [2011.04.17 16:24:42 | 000,011,104 | ---- | C] () -- C:\Windows\System32\pwdspio.sys [2011.04.17 16:24:31 | 000,000,959 | ---- | C] () -- C:\Users\Public\Desktop\MiniTool Partition Wizard Home Edition.lnk [2011.04.17 12:59:19 | 000,162,304 | ---- | C] () -- C:\Windows\System32\ztvunrar36.dll [2011.04.17 12:59:19 | 000,153,088 | ---- | C] () -- C:\Windows\System32\UNRAR3.dll [2011.04.17 12:59:19 | 000,077,312 | ---- | C] () -- C:\Windows\System32\ztvunace26.dll [2011.04.17 12:59:19 | 000,075,264 | ---- | C] () -- C:\Windows\System32\unacev2.dll [2011.04.17 12:54:27 | 000,000,808 | -H-- | C] () -- C:\Users\Kloppe\Desktop\Trojancheck.lnk [2011.04.17 12:49:29 | 000,000,334 | ---- | C] () -- C:\Windows\tasks\RegistryBooster.job [2011.04.17 12:49:21 | 000,001,876 | ---- | C] () -- C:\Users\Public\Desktop\Uniblue RegistryBooster.lnk [2011.04.16 19:21:27 | 000,287,949 | -H-- | C] () -- C:\Users\Kloppe\Desktop\DSC_0906.JPG [2011.04.15 21:27:53 | 000,230,334 | -H-- | C] () -- C:\Users\Kloppe\Desktop\DSC_0879.JPG [2011.04.15 21:27:47 | 000,146,373 | -H-- | C] () -- C:\Users\Kloppe\Desktop\DSC_0882.JPG [2011.04.15 21:06:56 | 000,021,695 | -H-- | C] () -- C:\Users\Kloppe\Desktop\eagle2.jpg [2011.04.14 14:43:37 | 768,687,303 | -H-- | C] () -- C:\Users\Kloppe\Desktop\Adolf Hitler - Mein Kampf - hoerbuech.zip [2011.04.12 21:23:27 | 000,060,975 | -H-- | C] () -- C:\Users\Kloppe\Desktop\thesimpsons_08.jpg [2011.04.10 08:45:59 | 000,081,892 | -H-- | C] () -- C:\Users\Kloppe\Desktop\DSC_0820.JPG [2011.04.08 08:31:29 | 000,022,669 | -H-- | C] () -- C:\Users\Kloppe\Desktop\Saugstube-Torrent.to_cultus-ferox-4-alben.torrent [2011.04.06 20:12:42 | 000,081,688 | -H-- | C] () -- C:\Users\Kloppe\Desktop\DSC_1011 - Kopie.JPG [2011.04.06 20:07:37 | 001,858,986 | -H-- | C] () -- C:\Users\Kloppe\Desktop\1 188.JPG [2011.04.06 20:03:39 | 000,106,316 | -H-- | C] () -- C:\Users\Kloppe\Desktop\MbO _Führungsstile_Klausuraufgaben.pdf [2011.04.06 13:02:48 | 001,691,632 | -H-- | C] () -- C:\Users\Kloppe\Desktop\06042011124.JPG [2011.04.03 09:12:20 | 000,025,889 | -H-- | C] () -- C:\Users\Kloppe\Desktop\DSC_0738.JPG [2011.04.02 22:39:56 | 000,057,995 | -H-- | C] () -- C:\Users\Kloppe\Desktop\DSCF3135.JPG [2011.04.02 20:30:37 | 000,030,602 | -H-- | C] () -- C:\Users\Kloppe\Desktop\Besteck-2.jpg [2011.03.31 22:48:08 | 000,057,442 | -H-- | C] () -- C:\Users\Kloppe\Desktop\Versuch3.odt [2011.03.27 09:23:22 | 000,029,963 | -H-- | C] () -- C:\Users\Kloppe\Desktop\fa_09.jpg [2011.03.21 22:44:44 | 000,029,947 | -H-- | C] () -- C:\Users\Kloppe\Desktop\Aufzeichnen1.JPG [2011.03.21 22:44:14 | 000,051,592 | -H-- | C] () -- C:\Users\Kloppe\Desktop\Aufzeichnen.JPG [2011.03.21 21:32:11 | 000,509,985 | -H-- | C] () -- C:\Users\Kloppe\Desktop\Volumenmessger$C3$A4te++HA_GR.pdf [2011.03.21 20:16:28 | 000,296,789 | -H-- | C] () -- C:\Users\Kloppe\Desktop\CHP3_urpc_Saeure-Base-Titrationen.pdf [2010.12.03 20:37:01 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Image Units [2010.12.03 20:37:01 | 000,000,268 | RH-- | C] () -- C:\Users\Kloppe\AppData\Roaming\Hybrid Synthesizers [2010.12.03 20:37:01 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLev.DAT [2010.12.03 20:37:01 | 000,000,012 | RH-- | C] () -- C:\ProgramData\LaserPrinter [2010.12.03 20:37:00 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Image Manipulation [2010.12.03 20:37:00 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Image Capture [2010.12.03 20:37:00 | 000,000,268 | RH-- | C] () -- C:\Users\Kloppe\AppData\Roaming\Hybrid Morph [2010.12.03 20:37:00 | 000,000,268 | RH-- | C] () -- C:\Users\Kloppe\AppData\Roaming\Hybrid Chords [2010.12.03 20:37:00 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLet.DAT [2010.12.03 20:37:00 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLes.DAT [2010.12.03 20:37:00 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Keyboard Layouts [2010.12.03 20:37:00 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Jingles [2010.11.03 16:21:33 | 000,057,344 | ---- | C] () -- C:\Windows\System32\mupkernps11.dll [2010.06.09 12:36:02 | 000,139,152 | -H-- | C] () -- C:\Users\Kloppe\AppData\Roaming\PnkBstrK.sys [2010.06.09 12:36:02 | 000,137,888 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2010.06.09 12:34:18 | 000,189,288 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2010.06.09 12:34:15 | 000,075,064 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2010.06.09 12:34:14 | 000,794,408 | ---- | C] () -- C:\Windows\System32\pbsvc.exe [2009.09.26 23:12:56 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2009.09.26 23:12:55 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009.03.15 16:57:06 | 000,000,511 | ---- | C] () -- C:\Windows\wiso.ini [2008.12.16 04:39:22 | 000,000,680 | -H-- | C] () -- C:\Users\Kloppe\AppData\Local\d3d9caps.dat [2008.10.22 20:25:34 | 000,000,051 | -H-- | C] () -- C:\Users\Kloppe\AppData\Roaming\AVSDVDPlayer.m3u [2008.10.22 20:22:14 | 000,524,288 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2008.10.22 20:22:14 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2008.10.09 20:17:58 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2008.10.05 00:29:20 | 000,022,016 | -H-- | C] () -- C:\Users\Kloppe\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008.07.09 08:09:20 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat [2008.07.08 16:50:18 | 000,000,684 | ---- | C] () -- C:\Windows\HotFixList.ini [2008.07.08 16:39:09 | 000,042,142 | -H-- | C] () -- C:\ProgramData\nvModes.dat [2008.07.08 16:39:09 | 000,042,142 | -H-- | C] () -- C:\ProgramData\nvModes.001 [2008.07.08 16:32:17 | 000,307,200 | ---- | C] () -- C:\Windows\SetDisplayResolution.exe [2008.07.08 16:31:32 | 000,000,135 | R--- | C] () -- C:\Windows\System32\lngEng.ini [2008.07.08 16:31:32 | 000,000,117 | ---- | C] () -- C:\Windows\System32\lngKor.ini [2008.07.08 16:18:03 | 000,040,960 | ---- | C] () -- C:\Windows\System32\IhDEV.exe [2008.07.08 16:18:02 | 000,024,576 | ---- | C] () -- C:\Windows\System32\IhINF.exe [2008.07.08 14:54:14 | 000,686,620 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2008.07.08 14:54:14 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2008.07.08 14:54:14 | 000,150,888 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2008.07.08 14:54:14 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2008.07.08 14:45:50 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll [2008.02.09 18:03:07 | 000,024,576 | ---- | C] () -- C:\Windows\System32\drivers\Marker.exe [2007.02.26 09:49:12 | 006,139,774 | ---- | C] () -- C:\Windows\System32\imagine digital freedom.dat [2007.02.15 09:51:02 | 000,274,432 | ---- | C] () -- C:\Windows\System32\NDADLL.dll [2006.11.29 10:00:30 | 000,045,056 | ---- | C] () -- C:\Windows\System32\MAWebControl.exe [2006.11.29 10:00:28 | 000,307,200 | ---- | C] () -- C:\Windows\System32\LDBGenWizView.dll [2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 14:47:37 | 000,441,232 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 12:33:01 | 000,643,612 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006.11.02 12:33:01 | 000,122,500 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006.11.02 12:25:21 | 000,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll [2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2006.10.09 03:01:28 | 000,061,440 | ---- | C] () -- C:\Windows\System32\AVSAudioWideStereoDMO.dll [2001.11.14 05:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll ========== LOP Check ========== [2010.11.07 21:11:12 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\bitmedia [2009.03.15 16:44:08 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Buhl Data Service [2010.11.07 21:11:14 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\contentlauncher [2011.04.06 19:07:11 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\DVDVideoSoftIEHelpers [2010.01.21 12:17:56 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\eBay [2010.08.03 10:04:18 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\elsterformular [2011.01.01 09:21:57 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\FRITZ! [2010.12.03 19:36:04 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\FUJIFILM [2008.10.04 21:50:33 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Groove Games [2009.12.12 22:45:44 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\inkscape [2010.12.12 07:08:09 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Local [2009.05.17 09:41:14 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Mp3tag [2010.12.13 23:28:52 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Music Editor Free [2009.05.17 00:25:29 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\myphotobook [2010.12.25 22:38:24 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Nikon [2011.04.17 12:59:16 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Simply Super Software [2009.01.27 22:42:57 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\TerraTec [2009.12.30 21:54:59 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Thunderbird [2011.04.17 12:49:22 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\Uniblue [2011.04.09 13:43:32 | 000,000,000 | -H-D | M] -- C:\Users\Kloppe\AppData\Roaming\uTorrent [2011.04.17 13:43:48 | 000,000,334 | ---- | M] () -- C:\Windows\Tasks\RegistryBooster.job [2011.04.17 13:42:36 | 000,032,510 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2011.04.17 18:05:46 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{311D9149-CEE9-49B8-9323-38F1BD834F56}.job ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:CB0AACC9 < End of report > --- --- --- |
|
17.04.2011, 21:22
| #2 |
| | Auch einen TR\Kazy.mekm.1 oder 42589960.exe eingefangen so dank dem durchlesen der andeen Beiträge habe ich es irgendwie geschafft den Trojaner loszuwerden. Jedenfalls kommen die Fehlermeldungen nichtmehr. Das einzige was ich jett noch habe ist das ich den Desktop nicht verändern kann (schwarz) und nich die dateien drauf sind die vorher drauf waren. Fehlen gut 20 stk.
__________________Wie kann ich das jetzt bewerkstelligen ? |
|
17.04.2011, 22:16
| #3 | ||||
| /// Helfer-Team    | Auch einen TR\Kazy.mekm.1 oder 42589960.exe eingefangen Hallo und Herzlich Willkommen!
__________________ Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]: Zitat:
Zitat:
Für Vista und Win7: Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen Zitat:
2. läuft unter XP, Vista mit (32Bit) und Windows 7 (32Bit) Achtung!: WENN GMER NICHT AUSGEFÜHRT WERDEN KANN ODER PROBMLEME VERURSACHT, fahre mit dem nächsten Punkt fort!- Es ist NICHT sinnvoll einen zweiten Versuch zu starten! Um einen tieferen Einblick in dein System, um eine mögliche Infektion mit einem Rootkit/Info v.wikipedia.org) aufzuspüren, werden wir ein Tool - Gmer - einsetzen :
** keine Verbindung zu einem Netzwerk und Internet - WLAN nicht vergessen Wenn der Scan beendet ist, bitte alle Programme und Tools wieder aktivieren! Anleitung:-> GMER - Rootkit Scanner 3. Kontrolle mit MBR -t, ob Master Boot Record in Ordnung ist (MBR-Rootkit) Mit dem folgenden Tool prüfen wir, ob sich etwas Schädliches im Master Boot Record eingenistet hat.
Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org
5. lade Dir HijackThis 2.0.4 von *von hier* herunter HijackThis starten→ "Do a system scan and save a logfile" klicken→ das erhaltene Logfile "markieren" → "kopieren"→ hier in deinem Thread (rechte Maustaste) "einfügen" 6. Bitte Versteckte - und Systemdateien sichtbar machen den Link hier anklicken: System-Dateien und -Ordner unter XP und Vista sichtbar machen Am Ende unserer Arbeit, kannst wieder rückgängig machen! 7. → Lade Dir HJTscanlist.zip herunter → entpacke die Datei auf deinem Desktop → Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren → per Doppelklick starten → Wähle dein Betriebsystem aus - bei Win7 wähle Vista → Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen → Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren → Bitte kopiere den Inhalt hier in Deinen Thread. ** Falls es klappt auf einmal nicht, kannst den Text in mehrere Teile teilen und so posten 8. Ich würde gerne noch all deine installierten Programme sehen: Lade dir das Tool Ccleaner herunter → Download installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..." wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein Zitat:
** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw grußCoverflow
__________________ |
|
| Themen zu Auch einen TR\Kazy.mekm.1 oder 42589960.exe eingefangen |
| alternate, avgntflt.sys, avira, c:\windows\system32\rundll32.exe, dsl, ebay, error, excel, flash player, format, frage, google, google earth, home, iexplore.exe, igdctrl.exe, install.exe, intranet, location, logfile, microsoft office 2003, microsoft office word, mp3, nvlddmkm.sys, office 2007, oldtimer, plug-in, realtek, registry, remote control, rundll, saver, scan, security, security scan, security update, server, shell32.dll, software, sparbuch, start menu, super, trojaner, trojaner eingefangen, vista, wiso, wlan |
Linear-Darstellung
