| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen SpeicherplatzWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.04.2011, 17:33
| #1 |
 |  Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Hallo, ich habe ein Problem mit meinem Laptop: Plötzlich und unerwartet (ich habe an dem Tag nichts runtergeladen oder ähnliches) hat mir mein Rechner Fehler angezeigt, von wegen der RAM-speicher wäre beschädigt, Windows fände keinen Speicherplatz, etc. Ich habe die Fehlermeldungen dann bei Google eingegeben und bin dadurch auf dieses Forum hier gestoßen. Ich habe mir schon verschiedene Themen angeguckt und daraufhin den Virenscanner SUPERAntiSpyware durchlaufen lassen, und mach auch gleich mit dem zweiten beschriebenen weiter, Malwarebytes. Um nochmal auf das Problem zu kommen, es wurden wie schon gesagt, diese Fehlermeldungen angezeigt, die, wenn ich alles richtig verstanden hab, nur Fake sind, oder? Und dann hat sich nach einer Weile auch mein Computer von allein runtergefahren. Im Moment, nachdem ich den ersten Virenscan durch laufen lassen und die Datein in Quarantäne verschoben habe, scheint erstmal nichts mehr zu passieren. Es kommen keine Fehlermeldungen mehr und gar nichts. Ich hoffe ihr könnt mir helfen, meinen Laptop wieder vollkommen zu reinigen, ich kenne mich mit solchen Sachen gar nicht aus und habe angst, dass zum Beispiel meine externe Festplatte noch betroffen werden oder ich das ganze durch Email weitergeben könnte. Vielen Dank schon mal im Vorraus, in den nächsten Post kopiere ich das Protokoll von SUPERAntiSpyware. Elen Okay, hier das Protokoll: SUPERAntiSpyware Scan Log hxxp://www.superantispyware.com Generated 04/19/2011 at 05:15 PM Application Version : 4.50.1002 Core Rules Database Version : 6868 Trace Rules Database Version: 4680 Scan type : Complete Scan Total Scan Time : 03:03:40 Memory items scanned : 637 Memory threats detected : 1 Registry items scanned : 14017 Registry threats detected : 1 File items scanned : 220753 File threats detected : 40 Trojan.Agent/Gen-FakeAlert[BitSprx] C:\PROGRAMDATA\PFMPBJOHGUT.EXE C:\PROGRAMDATA\PFMPBJOHGUT.EXE (x86) [PFmPbJoHGuT] C:\PROGRAMDATA\PFMPBJOHGUT.EXE C:\USERS\LENE\APPDATA\LOCAL\TEMP\TMP9B9A.TMP C:\USERS\LENE\APPDATA\LOCAL\TEMP\TMPB65B.TMP C:\Windows\Prefetch\PFMPBJOHGUT.EXE-F3C9DD13.pf Adware.Tracking Cookie C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@adtech[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@serving-sys[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@adserver2.clipkit[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@ads.boonty[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@tradedoubler[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@atwola[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@eaeacom.112.2o7[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@bs.serving-sys[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@ad.adnet[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@mediaplex[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@tracking.mlsat02[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@doubleclick[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@atdmt.combing[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@ad.yieldmanager[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@atdmt[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@ad.zanox[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@content.yieldmanager[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@ar.atwola[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@adfarm1.adition[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@vodafonegrupoes.solution.weborama[2].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@invitemedia[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@yieldmanager[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@content.yieldmanager[3].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@webmasterplan[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@apmebf[1].txt C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Cookies\lene@weborama[1].txt content.oddcast.com [ C:\Users\Lene\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7SYF9UY ] counter.cam-content.com [ C:\Users\Lene\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7SYF9UY ] ia.media-imdb.com [ C:\Users\Lene\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7SYF9UY ] media.y8.com [ C:\Users\Lene\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7SYF9UY ] stat.easydate.biz [ C:\Users\Lene\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7SYF9UY ] track.webgains.com [ C:\Users\Lene\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7SYF9UY ] www.99counters.com [ C:\Users\Lene\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7SYF9UY ] www.ardmediathek.de [ C:\Users\Lene\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\P7SYF9UY ] Trojan.Agent/Gen-FakeAntiSpy C:\USERS\LENE\APPDATA\LOCAL\TEMP\ERR.LOG127424487 Trojan.Agent/Gen-FraudLoad C:\USERS\LENE\APPDATA\LOCAL\TEMP\OREWMNXACS.EXE und hier das zweite Protokoll: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Datenbank Version: 6399 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 19.04.2011 18:54:17 mbam-log-2011-04-19 (18-54-10).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|Z:\|) Durchsuchte Objekte: 378937 Laufzeit: 1 Stunde(n), 14 Minute(n), 17 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 4 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: c:\program files (x86)\cryptload\ocr\netload.in\asmcaptcha\test.exe (Malware.Packer) -> No action taken. c:\program files (x86)\cryptload\router\fritz!box\nc.exe (PUP.KeyLogger) -> No action taken. c:\Users\Lene\AppData\Local\Temp\adobe_flash_player.exe (Trojan.Agent) -> No action taken. c:\Users\Lene\AppData\Local\Temp\ldrb6c8.tmp (Trojan.Agent) -> No action taken. |
|
20.04.2011, 18:15
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.
__________________
__________________ |
|
20.04.2011, 19:35
| #3 |
| | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz nein, da gibt es überhaupt keine Logdateien. Die, die ich schon gepostet habe musste ich direkt in einem Ordner speichern, und die ist auch in der Liste nicht drin.
__________________Was ich gerade noch gesehen habe: wenn ich den Laptop starte zeigt es mir was an, von wegen: "Catalyst Control Center: Host application funktioniert nicht mehr." |
|
21.04.2011, 14:35
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
21.04.2011, 20:25
| #5 |
| | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz OTL Logfile: Code:
ATTFilter OTL logfile created on: 21.04.2011 20:15:00 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = D:\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 62,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 85,09 Gb Total Space | 28,74 Gb Free Space | 33,78% Space Free | Partition Type: NTFS Drive D: | 204,61 Gb Total Space | 44,64 Gb Free Space | 21,82% Space Free | Partition Type: NTFS Drive E: | 4,38 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive Z: | 7,99 Gb Total Space | 1,43 Gb Free Space | 17,91% Space Free | Partition Type: NTFS Computer Name: MARLENE | User Name: Lene | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - D:\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.) PRC - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann) PRC - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION) PRC - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe (TOSHIBA CORPORATION) PRC - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION) ========== Modules (SafeList) ========== MOD - D:\Downloads\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software) SRV:64bit: - (TOSHIBA eco Utility Service) -- C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA Corporation) SRV:64bit: - (TosCoSrv) -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation) SRV:64bit: - (TPCHSrv) -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (TODDSrv) -- C:\Windows\SysNative\TODDSrv.exe (TOSHIBA Corporation) SRV - (Akamai) -- c:\Program Files (x86)\Common Files\Akamai\netsession_win_a35e6b9.dll () SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (!SASCORE) -- C:\Program Files (x86)\Neuer Ordner\SASCORE64.EXE (SUPERAntiSpyware.com) SRV - (npggsvc) -- C:\Windows\SysWow64\GameMon.des (INCA Internet Co., Ltd.) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (TuneUp.Defrag) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software) SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software) SRV - (TMachInfo) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (TOSHIBA Corporation) SRV - (cfWiMAXService) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (TOSHIBA CORPORATION) SRV - (TemproMonitoringService) Notebook Performance Tuning Service (TEMPRO) -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (Toshiba Europe GmbH) SRV - (TOSHIBA Bluetooth Service) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION) SRV - (ConfigFree Gadget Service) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe (TOSHIBA CORPORATION) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (ConfigFree Service) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION) ========== Driver Services (SafeList) ========== DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys () DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) DRV:64bit: - (rtl8192se) -- C:\Windows\SysNative\drivers\rtl8192se.sys (Realtek Semiconductor Corporation ) DRV:64bit: - (Tosrfusb) -- C:\Windows\SysNative\drivers\tosrfusb.sys (TOSHIBA CORPORATION) DRV:64bit: - (TosRfSnd) -- C:\Windows\SysNative\drivers\TosRfSnd.sys (TOSHIBA Corporation) DRV:64bit: - (LPCFilter) -- C:\Windows\SysNative\drivers\LPCFilter.sys (COMPAL ELECTRONIC INC.) DRV:64bit: - (tdcmdpst) -- C:\Windows\SysNative\drivers\tdcmdpst.sys (TOSHIBA Corporation.) DRV:64bit: - (RSUSBSTOR) -- C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.) DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (Tosrfcom) -- C:\Windows\SysNative\drivers\tosrfcom.sys (TOSHIBA Corporation) DRV:64bit: - (tos_sps64) -- C:\Windows\SysNative\drivers\tos_sps64.sys (TOSHIBA Corporation) DRV:64bit: - (tosrfnds) -- C:\Windows\SysNative\drivers\tosrfnds.sys (TOSHIBA Corporation.) DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated) DRV:64bit: - (TVALZ) -- C:\Windows\SysNative\drivers\TVALZ_O.SYS (TOSHIBA Corporation) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (BrSerIb) Brother MFC Serial Interface Driver(WDM) -- C:\Windows\SysNative\drivers\BrSerIb.sys (Brother Industries Ltd.) DRV:64bit: - (ROOTMODEM) -- C:\Windows\SysNative\drivers\rootmdm.sys (Microsoft Corporation) DRV:64bit: - (tosrfec) -- C:\Windows\SysNative\drivers\tosrfec.sys (TOSHIBA Corporation) DRV:64bit: - (tosrfbd) -- C:\Windows\SysNative\drivers\tosrfbd.sys (TOSHIBA CORPORATION) DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.) DRV:64bit: - (TVALZFL) -- C:\Windows\SysNative\drivers\TVALZFL.sys (TOSHIBA Corporation) DRV:64bit: - (Tosrfhid) -- C:\Windows\SysNative\drivers\Tosrfhid.sys (TOSHIBA Corporation.) DRV:64bit: - (tosrfbnp) -- C:\Windows\SysNative\drivers\tosrfbnp.sys (TOSHIBA Corporation) DRV:64bit: - (tosporte) -- C:\Windows\SysNative\drivers\tosporte.sys (TOSHIBA Corporation) DRV:64bit: - (BrUsbSIb) Brother MFC Serial USB Driver(WDM) -- C:\Windows\SysNative\drivers\BrUsbSIb.sys (Brother Industries Ltd.) DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation) DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (RTHDMIAzAudService) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys (Realtek Semiconductor Corp.) DRV:64bit: - (vcd10bus) -- C:\Windows\SysNative\drivers\vcd10bus.sys (H+H Software GmbH) DRV:64bit: - (s117unic) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM) -- C:\Windows\SysNative\drivers\s117unic.sys (MCCI Corporation) DRV:64bit: - (s117obex) -- C:\Windows\SysNative\drivers\s117obex.sys (MCCI Corporation) DRV:64bit: - (s117nd5) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS) -- C:\Windows\SysNative\drivers\s117nd5.sys (MCCI Corporation) DRV:64bit: - (s117mdm) -- C:\Windows\SysNative\drivers\s117mdm.sys (MCCI Corporation) DRV:64bit: - (s117mgmt) Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM) -- C:\Windows\SysNative\drivers\s117mgmt.sys (MCCI Corporation) DRV:64bit: - (s117mdfl) -- C:\Windows\SysNative\drivers\s117mdfl.sys (MCCI Corporation) DRV:64bit: - (s117bus) Sony Ericsson Device 117 driver (WDM) -- C:\Windows\SysNative\drivers\s117bus.sys (MCCI Corporation) DRV - (SASDIFSV) -- C:\Program Files (x86)\Neuer Ordner\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (SASKUTIL) -- C:\Program Files (x86)\Neuer Ordner\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys (TuneUp Software) DRV - (NPPTNT2) -- C:\Windows\SysWOW64\npptNT2.sys (INCA Internet Co., Ltd.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSEH&bmod=TSEH IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://mystart.incredimail.com/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "MyStart Search" FF - prefs.js..browser.search.selectedEngine: "Wikipedia (de)" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "www.google.de" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6 FF - prefs.js..extensions.enabledItems: {097d3191-e6fa-4728-9826-b533d755359d}:0.7.13 FF - prefs.js..extensions.enabledItems: tabscope@xuldev.org:1.1.1 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.2 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906 FF - prefs.js..keyword.URL: "hxxp://mystart.incredimail.com/?loc=ff_address_bar_im2_test_v2&search=" FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.03.27 11:09:03 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.03.27 11:09:03 | 000,000,000 | ---D | M] [2009.12.25 19:28:08 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Lene\AppData\Roaming\mozilla\Extensions [2011.04.20 14:05:03 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Lene\AppData\Roaming\mozilla\Firefox\Profiles\1bp4bkgz.default\extensions [2011.03.17 17:48:07 | 000,000,000 | -H-D | M] (All-in-One Sidebar) -- C:\Users\Lene\AppData\Roaming\mozilla\Firefox\Profiles\1bp4bkgz.default\extensions\{097d3191-e6fa-4728-9826-b533d755359d} [2011.04.06 23:54:59 | 000,000,000 | -H-D | M] (Adblock Plus) -- C:\Users\Lene\AppData\Roaming\mozilla\Firefox\Profiles\1bp4bkgz.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.03.12 22:36:45 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Lene\AppData\Roaming\mozilla\Firefox\Profiles\1bp4bkgz.default\extensions\glowywine-ff3-30@glowplug.bitasylum.net [2011.03.13 14:50:43 | 000,000,000 | -H-D | M] (Personas) -- C:\Users\Lene\AppData\Roaming\mozilla\Firefox\Profiles\1bp4bkgz.default\extensions\personas@christopher.beard [2011.03.30 07:27:23 | 000,000,000 | -H-D | M] (Tab Scope) -- C:\Users\Lene\AppData\Roaming\mozilla\Firefox\Profiles\1bp4bkgz.default\extensions\tabscope@xuldev.org [2011.01.02 01:30:59 | 000,001,047 | -H-- | M] () -- C:\Users\Lene\AppData\Roaming\Mozilla\Firefox\Profiles\1bp4bkgz.default\searchplugins\dramawiki-en.xml [2010.06.01 19:32:09 | 000,002,149 | -H-- | M] () -- C:\Users\Lene\AppData\Roaming\Mozilla\Firefox\Profiles\1bp4bkgz.default\searchplugins\MyStart Search.xml [2011.03.16 20:33:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2011.03.16 20:33:54 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2011.03.22 19:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll [2011.03.06 15:41:03 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2011.03.06 15:41:03 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-de.xml [2011.03.06 15:41:03 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\leo_ende_de.xml [2011.03.06 15:41:03 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-de.xml [2011.03.06 15:41:03 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O4:64bit: - HKLM..\Run: [HSON] C:\Programme\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Programme\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [SmoothView] C:\Programme\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [Toshiba Registration] C:\Programme\TOSHIBA\Registration\ToshibaReminder.exe (Toshiba Europe GmbH) O4:64bit: - HKLM..\Run: [TosWaitSrv] C:\Programme\TOSHIBA\TPHM\TosWaitSrv.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [TPwrMain] C:\Programme\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [ITSecMng] C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA) O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation) O4 - HKCU..\Run: [EA Core] File not found O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files (x86)\Neuer Ordner\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 80.58.61.250 80.58.61.254 O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{6fe17448-4897-11df-834f-002622429548}\Shell - "" = AutoRun O33 - MountPoints2\{6fe17448-4897-11df-834f-002622429548}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.04.19 17:36:52 | 000,000,000 | ---D | C] -- C:\Users\Lene\AppData\Roaming\Malwarebytes [2011.04.19 17:36:46 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2011.04.19 17:36:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011.04.19 17:36:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011.04.19 17:36:42 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2011.04.19 17:36:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2011.04.19 14:04:06 | 000,000,000 | -H-D | C] -- C:\Users\Lene\AppData\Roaming\SUPERAntiSpyware.com [2011.04.19 14:04:06 | 000,000,000 | -H-D | C] -- C:\ProgramData\SUPERAntiSpyware.com [2011.04.19 14:03:59 | 000,000,000 | -H-D | C] -- C:\ProgramData\!SASCORE [2011.04.19 14:03:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware [2011.04.19 14:03:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Neuer Ordner [2011.04.19 14:03:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SUPERAntiSpyware [2011.04.14 22:58:11 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll [2011.04.14 22:58:11 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll [2011.04.14 22:58:09 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2011.04.14 22:58:09 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2011.04.14 22:58:09 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2011.04.14 22:58:05 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll [2011.04.14 22:58:05 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll [2011.04.14 22:58:05 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll [2011.04.14 22:58:05 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll [2011.04.14 22:58:01 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2011.04.14 22:58:01 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2011.04.14 22:58:01 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2011.04.14 22:58:01 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2011.04.14 22:57:53 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2011.04.14 22:57:53 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2011.04.14 22:57:52 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2011.04.14 22:57:52 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2011.04.14 22:57:52 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2011.04.14 22:57:52 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2011.04.14 22:57:52 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2011.04.14 22:57:52 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2011.04.14 22:57:52 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2011.04.14 22:57:52 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2011.04.14 22:57:52 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2011.04.14 22:57:52 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2011.04.14 22:57:52 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2011.04.14 22:57:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2011.04.14 22:57:24 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll [2011.04.14 22:57:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe [2011.04.14 22:57:23 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe [2011.04.14 22:57:21 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe [2011.04.14 22:57:19 | 000,603,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe [2011.04.14 22:57:19 | 000,518,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe [2011.04.14 22:57:18 | 000,640,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi [2011.04.14 22:57:18 | 000,556,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi [2011.04.14 22:57:18 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll [2011.04.14 22:57:18 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll [2011.04.14 22:57:18 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll [2011.04.09 15:39:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2011.04.09 15:36:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2011.03.26 12:35:57 | 000,000,000 | -H-D | C] -- C:\Users\Lene\AppData\Roaming\Apple Computer [2011.03.25 18:20:27 | 000,000,000 | -H-D | C] -- C:\Users\Lene\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audition Online [2011.03.24 17:51:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Akamai [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.04.21 20:17:36 | 000,016,304 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.04.21 20:17:36 | 000,016,304 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.04.21 20:10:10 | 000,001,100 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.04.21 20:09:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.04.21 20:09:37 | 3193,597,952 | -HS- | M] () -- C:\hiberfil.sys [2011.04.21 09:50:30 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.04.21 09:50:30 | 000,654,166 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2011.04.21 09:50:30 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.04.21 09:50:30 | 000,130,006 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2011.04.21 09:50:30 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.04.21 09:41:00 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.04.19 14:03:59 | 000,001,950 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2011.04.15 03:27:34 | 000,422,768 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011.04.01 18:11:01 | 002,478,383 | -H-- | M] () -- C:\Users\Lene\Desktop\lenza-74(klein2).jpg [2011.04.01 18:11:01 | 000,002,709 | -H-- | M] () -- C:\Users\Lene\.recently-used.xbel [2011.03.23 23:16:54 | 002,939,369 | -H-- | M] () -- C:\Users\Lene\Desktop\lenza-74(1).jpg [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.04.19 14:03:59 | 000,001,950 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk [2011.04.09 15:36:50 | 000,001,104 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.04.09 15:36:48 | 000,001,100 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.04.01 18:11:01 | 000,002,709 | -H-- | C] () -- C:\Users\Lene\.recently-used.xbel [2011.04.01 18:10:59 | 002,478,383 | -H-- | C] () -- C:\Users\Lene\Desktop\lenza-74(klein2).jpg [2011.03.23 23:16:52 | 002,939,369 | -H-- | C] () -- C:\Users\Lene\Desktop\lenza-74(1).jpg [2010.12.21 09:24:34 | 000,000,000 | -H-- | C] () -- C:\Users\Lene\AppData\Roaming\wklnhst.dat [2010.12.01 00:13:50 | 000,000,527 | ---- | C] () -- C:\Windows\eReg.dat [2010.08.11 13:49:22 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010.06.20 19:43:58 | 000,045,568 | ---- | C] () -- C:\Windows\UniFish3.exe [2010.05.14 10:48:49 | 000,038,198 | ---- | C] () -- C:\Windows\DIIUnin.dat [2010.05.01 16:20:45 | 000,000,432 | -H-- | C] () -- C:\Windows\BRWMARK.INI [2010.05.01 16:20:45 | 000,000,034 | ---- | C] () -- C:\Windows\SysWow64\BD7320.DAT [2010.04.30 13:06:46 | 000,051,712 | ---- | C] () -- C:\Windows\SysWow64\coodest.dll [2010.04.19 16:35:10 | 000,069,632 | R--- | C] () -- C:\Windows\SysWow64\xmltok.dll [2010.04.19 16:35:10 | 000,036,864 | R--- | C] () -- C:\Windows\SysWow64\xmlparse.dll [2010.02.03 14:28:00 | 000,000,169 | -H-- | C] () -- C:\Users\Lene\AppData\Roaming\default.rss [2010.02.03 14:02:00 | 000,003,584 | -H-- | C] () -- C:\Users\Lene\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.02.03 14:01:10 | 000,598,016 | ---- | C] () -- C:\Windows\SysWow64\viscomqtde.dll [2010.02.03 14:01:10 | 000,262,144 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll [2010.01.03 00:26:48 | 000,178,176 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2009.12.26 10:30:47 | 000,013,840 | ---- | C] () -- C:\Windows\SysWow64\wnaspi32.dll [2009.10.19 17:56:49 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:59:36 | 000,982,196 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin [2009.07.13 22:59:36 | 000,139,824 | ---- | C] () -- C:\Windows\SysWow64\igfcg500.bin [2009.07.13 22:59:36 | 000,097,448 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin [2009.07.13 22:59:35 | 000,417,344 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2009.04.28 03:37:00 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\SPCtl.dll [2005.01.17 06:10:16 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\BRTCPCON.DLL [2004.08.09 06:00:42 | 000,000,114 | ---- | C] () -- C:\Windows\SysWow64\BRLMW03A.INI ========== Alternate Data Streams ========== @Alternate Data Stream - 85 bytes -> C:\ProgramData:$SS_DESCRIPTOR_PVX2VCGKMVF9V8N4TKBRVDNGCMXLJ4M28WDP36MLTJ5KJ4VPXHAT @Alternate Data Stream - 168 bytes -> C:\ProgramData\TEMP:F84B8DB5 @Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:B8E6A060 @Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:6499508E @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:38B3DB6F @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:517B507A @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:7CEDF9F3 @Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:69FD6BF0 @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:88050731 @Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:F78CC2A2 < End of report > --------------------------------------------------------------------------OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 21.04.2011 20:15:00 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = D:\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 62,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 85,09 Gb Total Space | 28,74 Gb Free Space | 33,78% Space Free | Partition Type: NTFS
Drive D: | 204,61 Gb Total Space | 44,64 Gb Free Space | 21,82% Space Free | Partition Type: NTFS
Drive E: | 4,38 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive Z: | 7,99 Gb Total Space | 1,43 Gb Free Space | 17,91% Space Free | Partition Type: NTFS
Computer Name: MARLENE | User Name: Lene | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{0FB2E75A-1024-331F-77EF-D45F71505D58}" = ATI Catalyst Install Manager
"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}" = TOSHIBA PC Health Monitor
"{9EE58CAC-21D5-1412-F0F2-CB9CD8834B59}" = ccc-utility64
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility
"{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinRAR archiver" = WinRAR
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0163E195-D5EF-BF70-CBEE-73AA7CBBBEEE}" = CCC Help Thai
"{03323DD0-6EE9-5959-6387-775742E8AA11}" = L-Lingo Japanese Trial
"{03883959-80DA-6151-CEAE-46A058CF774F}" = CCC Help Danish
"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"{096D1CCF-0F1E-08FB-094F-C40A633D5AEB}" = ccc-core-static
"{0FB630AB-7BD8-40AE-B223-60397D57C3C9}" = Realtek WLAN Driver
"{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
"{13D0EB07-FCA0-C005-A6C5-B1A4B7E5BB48}" = Catalyst Control Center Core Implementation
"{15382D89-6EF6-4D21-9484-B500F2B10E46}" = PhotoMail Maker
"{1D4A3E7D-A580-5BB7-DED3-48508A53D2B2}" = CCC Help Chinese Standard
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22354A21-BE84-0D40-191D-6E530B715CCF}" = CCC Help Polish
"{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{25C8D9C5-4B62-4E3B-9EC9-C3D5EBE2AF81}" = Magicians Handbook
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 14
"{2F36BA32-7986-9E40-B3F6-908B214EC898}" = CCC Help Japanese
"{2F4A39B2-5A2D-3E9F-E8EA-6F891A097ACF}" = CCC Help English
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{324D81D5-49F3-4F6D-A4E7-DA54EEA4BEBB}" = AvalonHeroesEU
"{339902CB-BDCD-4CDE-88CD-0FA12922C1E7}" = Natalie Brooks
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3DBE8669-1F7D-E1C9-2BC8-CC4BAE0A5136}" = CCC Help Turkish
"{3F50AF3B-8997-4916-0095-99D63DDB785A}" = Harry Potter TM
"{3FF5FF03-DB97-2ACE-BAE7-61D6D4A39F9B}" = Catalyst Control Center Graphics Full Existing
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4AE6F6B4-CF82-4C92-89EC-E547FA893E3E}" = Youda Sushi Chef
"{4CEE0E9F-2116-BE92-CD54-8D1834935B54}" = Catalyst Control Center Localization All
"{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password
"{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{5DD59391-FED6-576D-B6BD-71111EF96522}" = CCC Help Russian
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6168260A-6D56-50BB-193C-BF6F471394AA}" = CCC Help Greek
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6A150790-FC79-D323-92D4-E773E3A03789}" = CCC Help Portuguese
"{6CB88B54-4C1C-E6AB-49C6-476DE56327BC}" = CCC Help Spanish
"{6DE880FE-F0C9-BC57-B7C5-2ABEAE1E501E}" = CCC Help German
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7506D1CD-B7FE-40C7-AE1F-FE8666361700}" = Dynasty Warriors 6
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder
"{79660B73-3DD0-9C3D-3F29-0E266F3AE5EA}" = CCC Help Norwegian
"{7C11154F-3539-4CB5-979D-EF7913473E53}" = Prince of Persia
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{81E5E076-F2C1-AE09-A360-0CAC2967FD5F}" = CCC Help Swedish
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C453F13-6877-4D34-8816-009ABDE306DB}" = Prince of Persia The Sands of Time
"{8EC703D0-985E-44C7-A6C2-B6270CE50832}" = Mystery Cookbook
"{8F4507EF-C5F3-46CE-9718-9D3698821333}" = Motorola Driver Installation
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0407-1000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{986CAA52-3249-B34F-DC64-07347926CF57}" = CCC Help Korean
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9E4FF410-471F-49E3-9358-74FF0D5E9901}" = Toshiba TEMPRO
"{A0DBDF40-559F-11E0-82E2-001D0926B1BF}" = Google Earth Plug-in
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker
"{A8DF8593-F619-47DE-AD27-BCABF233433A}" = STOIK Video Converter 2
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.3 - Deutsch
"{AC76BA86-7AD7-5670-0000-900000000003}" = Korean Fonts Support For Adobe Reader 9
"{AC76BA86-7AD7-5760-0000-900000000003}" = Japanese Fonts Support For Adobe Reader 9
"{AE395AC2-28CB-463F-87DC-00C8059781BF}" = 7Artifacs
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility
"{B5B8BA5D-55CA-9351-984B-048FEF97A544}" = Catalyst Control Center Graphics Previews Vista
"{B6DECBD2-EC09-17C3-35AE-8C72B08062C9}" = CCC Help Czech
"{B6F7DBE7-2FE2-458F-A738-B10832746036}" = Microsoft Reader
"{BF3AB290-563B-2F6F-9AF0-189B5CCF2C01}" = Catalyst Control Center Graphics Light
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3
"{C644BA4B-07D6-A67E-9EB4-157F6DEB68BE}" = CCC Help Chinese Traditional
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{D0831990-FF97-1F08-668D-4743CC32EFBC}" = CCC Help Finnish
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D9835CE0-E294-83FE-AF9F-BC113A0D2EA9}" = CCC Help Hungarian
"{E25FA4E1-678F-414F-9777-1E3FDBBDA4D1}" = Catalyst Control Center InstallProxy
"{E337B156-DF81-48D8-8977-B1574EE87BCF}" = USB2.0 Capture Device
"{E3D63B95-4B21-414A-A2C7-D6D6A6AC6D79}" = Catalyst Control Center - Branding
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{E8B28EF5-2A73-03A7-4F02-2DFF1D182940}" = Catalyst Control Center Graphics Full New
"{E94F833D-6435-40A2-112C-4BC18100B91D}" = CCC Help Italian
"{EE5BC0BB-9EDA-423C-8276-48857B735D68}" = Prince of Persia Warrior Within
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EEA02668-D5D9-AEFF-6FFB-1EB5BC765A52}" = CCC Help French
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3529665-D75E-4D6D-98F0-745C78C68E9B}" = TOSHIBA ConfigFree
"{FCD674E3-F281-46D6-7717-6EAFDD16D8FC}" = CCC Help Dutch
"A Fairy Tale 1.0.0.0" = A Fairy Tale 1.0.0.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Akamai" = Akamai NetSession Interface
"All To MP3 Converter_is1" = All To MP3 Converter 2.8
"Amelie's Restaurant 1.00" = Amelie's Restaurant 1.00
"Antique Shop 1.00" = Antique Shop 1.00
"Ashampoo Burning Studio 2010 Advanced_is1" = Ashampoo Burning Studio 2010 Advanced
"Ashtons - Family Resort 1.00" = Ashtons - Family Resort 1.00
"Audition Online1.2.6064" = Audition Online
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Beach Party Craze 1.0.0.0" = Beach Party Craze 1.0.0.0
"BFGC" = Big Fish Games Client
"BFG-Drawn - Der Turm" = Drawn: Der Turm ™
"Bilbo - Die vier Ecken der Welt 1.00" = Bilbo - Die vier Ecken der Welt 1.00
"BitTorrent" = BitTorrent
"Cake Mania - Main Street 1.0.0.0" = Cake Mania - Main Street 1.0.0.0
"Cake Mania 3 1.00" = Cake Mania 3 1.00
"Chocolatier 2 - Secret Ingredients 1.0.0.64" = Chocolatier 2 - Secret Ingredients 1.0.0.64
"Cooking Academy" = Cooking Academy (remove only)
"Cooking Academy 2 - World Cuisine_is1" = Cooking Academy 2 - World Cuisine v1.0
"Der Stein der Weisen" = Der Stein der Weisen
"Diablo II" = Diablo II
"DivX Setup.divx.com" = DivX-Setup
"Dracula 3_is1" = Dracula 3
"Drakensang_TRoT_is1" = Drakensang - Am Fluss der Zeit
"DVD Shrink_is1" = DVD Shrink 3.2
"Fiesta Online(EU_German)" = Fiesta Online(EU_German) 1.03.008
"Germany's Next Topmodel_is1" = Germany's Next Topmodel (PATCHED BY XEONKING©)
"Hardcopy(C__Program Files (x86)_Hardcopy)" = Hardcopy (C:\Program Files (x86)\Hardcopy)
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Hot Dish" = Hot Dish
"ImgBurn" = ImgBurn
"InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"InstallShield_{324D81D5-49F3-4F6D-A4E7-DA54EEA4BEBB}" = AvalonHeroesEU
"InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisorkennwort
"InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder
"InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility
"InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher
"IsoBuster_is1" = IsoBuster 2.7
"Japtra" = Japtra - Japanisch Trainer
"JDownloader" = JDownloader
"jpn-llingo-trl" = L-Lingo Japanese Trial
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)
"MPE" = MyPhoneExplorer
"PhotoMail" = PhotoMail Maker
"RollerCoaster Tycoon Setup" = Roll
"Sony Ericsson Themes Creator" = Sony Ericsson Themes Creator 4.12.2.4
"ST6UNST #1" = BEWERBUNGS-MASTER
"ST6UNST #2" = KanaTutor 2.0.
"TuneUp Utilities" = TuneUp Utilities
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.5
"Wakan" = Wakan 1.67
"Winamp" = Winamp
"WinGimp-2.0_is1" = GIMP 2.6.8
"WinLiveSuite_Wave3" = Windows Live Essentials
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"InstallShield_{7506D1CD-B7FE-40C7-AE1F-FE8666361700}" = DYNASTY WARRIORS 6
"Winamp Detect" = Winamp Anwendungserkennung
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 08.04.2011 20:16:47 | Computer Name = Marlene | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
(x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
"c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile 8. Die
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie
das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error - 10.04.2011 12:36:13 | Computer Name = Marlene | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files
(x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBt1st.exe". Fehler in Manifest- oder Richtliniendatei
"" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt
mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:.
Komponente
1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Komponente
2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Error - 10.04.2011 12:36:38 | Computer Name = Marlene | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files
(x86)\TOSHIBA\Bluetooth Toshiba Stack\Tools\AVRCPTestTool.exe". Fehler in Manifest-
oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion
steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt
stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
Komponente
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Error - 10.04.2011 12:38:19 | Computer Name = Marlene | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
(x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
"c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile 8. Die
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie
das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error - 11.04.2011 03:32:24 | Computer Name = Marlene | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
(x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei
"C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile 8. Die
im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente
überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition:
WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie
das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error - 11.04.2011 14:51:09 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 11.04.2011 14:51:09 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 12.04.2011 11:40:55 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Die Daten sind unzulässig. .
Error - 12.04.2011 11:40:58 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
Error - 12.04.2011 11:40:58 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
[ System Events ]
Error - 20.04.2011 14:27:07 | Computer Name = Marlene | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ASPI32
Error - 20.04.2011 16:32:00 | Computer Name = Marlene | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error - 20.04.2011 16:32:01 | Computer Name = Marlene | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error - 20.04.2011 16:32:01 | Computer Name = Marlene | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error - 20.04.2011 16:32:02 | Computer Name = Marlene | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error - 20.04.2011 16:32:02 | Computer Name = Marlene | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error - 21.04.2011 15:09:45 | Computer Name = Marlene | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
Error - 21.04.2011 15:09:45 | Computer Name = Marlene | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 21.04.2011 15:10:02 | Computer Name = Marlene | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Acronis OS Selector Reinstall Service" wurde aufgrund
folgenden Fehlers nicht gestartet: %%2
Error - 21.04.2011 15:10:11 | Computer Name = Marlene | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ASPI32
< End of report >
|
|
21.04.2011, 21:15
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!) Code:
ATTFilter :OTL
@Alternate Data Stream - 85 bytes -> C:\ProgramData:$SS_DESCRIPTOR_PVX2VCGKMVF9V8N4TKBRVDNGCMXLJ4M28WDP36MLTJ5KJ4VPXHAT
@Alternate Data Stream - 168 bytes -> C:\ProgramData\TEMP:F84B8DB5
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:B8E6A060
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:6499508E
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:38B3DB6F
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:517B507A
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:7CEDF9F3
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:69FD6BF0
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:88050731
@Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:F78CC2A2
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{6fe17448-4897-11df-834f-002622429548}\Shell - "" = AutoRun
O33 - MountPoints2\{6fe17448-4897-11df-834f-002622429548}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
:Commands
[purity]
[resethosts]
[emptytemp]
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet. Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.
__________________ --> Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz |
|
21.04.2011, 22:44
| #7 |
| | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Error: Unable to interpret <OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 21.04.2011 20:15:00 - Run 1> in the current context!
Error: Unable to interpret <OTL by OldTimer - Version 3.2.22.3 Folder = D:\Downloads> in the current context!
Error: Unable to interpret <64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation> in the current context!
Error: Unable to interpret <Internet Explorer (Version = 8.0.7600.16385)> in the current context!
Error: Unable to interpret <Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 62,00% Memory free> in the current context!
Error: Unable to interpret <8,00 Gb Paging File | 6,00 Gb Available in Paging File | 77,00% Paging File free> in the current context!
Error: Unable to interpret <Paging file location(s): ?:\pagefile.sys [binary data]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)> in the current context!
Error: Unable to interpret <Drive C: | 85,09 Gb Total Space | 28,74 Gb Free Space | 33,78% Space Free | Partition Type: NTFS> in the current context!
Error: Unable to interpret <Drive D: | 204,61 Gb Total Space | 44,64 Gb Free Space | 21,82% Space Free | Partition Type: NTFS> in the current context!
Error: Unable to interpret <Drive E: | 4,38 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF> in the current context!
Error: Unable to interpret <Drive Z: | 7,99 Gb Total Space | 1,43 Gb Free Space | 17,91% Space Free | Partition Type: NTFS> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Computer Name: MARLENE | User Name: Lene | Logged in as Administrator.> in the current context!
Error: Unable to interpret <Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans> in the current context!
Error: Unable to interpret <Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Extra Registry (SafeList) ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== File Associations ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]> in the current context!
Error: Unable to interpret <.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]> in the current context!
Error: Unable to interpret <.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]> in the current context!
Error: Unable to interpret <.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Shell Spawning ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]> in the current context!
Error: Unable to interpret <batfile [open] -- "%1" %* File not found> in the current context!
Error: Unable to interpret <cmdfile [open] -- "%1" %* File not found> in the current context!
Error: Unable to interpret <comfile [open] -- "%1" %* File not found> in the current context!
Error: Unable to interpret <exefile [open] -- "%1" %* File not found> in the current context!
Error: Unable to interpret <helpfile [open] -- Reg Error: Key error.> in the current context!
Error: Unable to interpret <inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)> in the current context!
Error: Unable to interpret <InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)> in the current context!
Error: Unable to interpret <InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)> in the current context!
Error: Unable to interpret <piffile [open] -- "%1" %* File not found> in the current context!
Error: Unable to interpret <regfile [merge] -- Reg Error: Key error.> in the current context!
Error: Unable to interpret <scrfile [config] -- "%1" File not found> in the current context!
Error: Unable to interpret <scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found> in the current context!
Error: Unable to interpret <scrfile [open] -- "%1" /S File not found> in the current context!
Error: Unable to interpret <txtfile [edit] -- Reg Error: Key error.> in the current context!
Error: Unable to interpret <Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found> in the current context!
Error: Unable to interpret <Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()> in the current context!
Error: Unable to interpret <Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)> in the current context!
Error: Unable to interpret <Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <Directory [PlayWithVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()> in the current context!
Error: Unable to interpret <Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)> in the current context!
Error: Unable to interpret <Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)> in the current context!
Error: Unable to interpret <Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)> in the current context!
Error: Unable to interpret <Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <Folder [explore] -- Reg Error: Value error.> in the current context!
Error: Unable to interpret <Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]> in the current context!
Error: Unable to interpret <batfile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <cmdfile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <comfile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)> in the current context!
Error: Unable to interpret <exefile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <helpfile [open] -- Reg Error: Key error.> in the current context!
Error: Unable to interpret <inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)> in the current context!
Error: Unable to interpret <piffile [open] -- "%1" %*> in the current context!
Error: Unable to interpret <regfile [merge] -- Reg Error: Key error.> in the current context!
Error: Unable to interpret <scrfile [config] -- "%1"> in the current context!
Error: Unable to interpret <scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l> in the current context!
Error: Unable to interpret <scrfile [open] -- "%1" /S> in the current context!
Error: Unable to interpret <txtfile [edit] -- Reg Error: Key error.> in the current context!
Error: Unable to interpret <Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1> in the current context!
Error: Unable to interpret <Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()> in the current context!
Error: Unable to interpret <Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)> in the current context!
Error: Unable to interpret <Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <Directory [PlayWithVLC] -- "C:\Program Files (x86)\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()> in the current context!
Error: Unable to interpret <Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)> in the current context!
Error: Unable to interpret <Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)> in the current context!
Error: Unable to interpret <Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)> in the current context!
Error: Unable to interpret <Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret <Folder [explore] -- Reg Error: Value error.> in the current context!
Error: Unable to interpret <Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Security Center Settings ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]> in the current context!
Error: Unable to interpret <"cval" = 1> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]> in the current context!
Error: Unable to interpret <"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]> in the current context!
Error: Unable to interpret <"AntiVirusOverride" = 0> in the current context!
Error: Unable to interpret <"AntiSpywareOverride" = 0> in the current context!
Error: Unable to interpret <"FirewallOverride" = 0> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Firewall Settings ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]> in the current context!
Error: Unable to interpret <"DisableNotifications" = 0> in the current context!
Error: Unable to interpret <"EnableFirewall" = 1> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]> in the current context!
Error: Unable to interpret <"DisableNotifications" = 0> in the current context!
Error: Unable to interpret <"EnableFirewall" = 1> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]> in the current context!
Error: Unable to interpret <"DisableNotifications" = 0> in the current context!
Error: Unable to interpret <"EnableFirewall" = 1> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Authorized Applications List ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== HKEY_LOCAL_MACHINE Uninstall List ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]> in the current context!
Error: Unable to interpret <"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package> in the current context!
Error: Unable to interpret <"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)> in the current context!
Error: Unable to interpret <"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack> in the current context!
Error: Unable to interpret <"{0FB2E75A-1024-331F-77EF-D45F71505D58}" = ATI Catalyst Install Manager> in the current context!
Error: Unable to interpret <"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center> in the current context!
Error: Unable to interpret <"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17> in the current context!
Error: Unable to interpret <"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570> in the current context!
Error: Unable to interpret <"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007> in the current context!
Error: Unable to interpret <"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007> in the current context!
Error: Unable to interpret <"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting> in the current context!
Error: Unable to interpret <"{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}" = TOSHIBA PC Health Monitor> in the current context!
Error: Unable to interpret <"{9EE58CAC-21D5-1412-F0F2-CB9CD8834B59}" = ccc-utility64> in the current context!
Error: Unable to interpret <"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175> in the current context!
Error: Unable to interpret <"{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility> in the current context!
Error: Unable to interpret <"{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator> in the current context!
Error: Unable to interpret <"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053> in the current context!
Error: Unable to interpret <"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64> in the current context!
Error: Unable to interpret <"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware> in the current context!
Error: Unable to interpret <"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba> in the current context!
Error: Unable to interpret <"{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher> in the current context!
Error: Unable to interpret <"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148> in the current context!
Error: Unable to interpret <"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile> in the current context!
Error: Unable to interpret <"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile> in the current context!
Error: Unable to interpret <"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack> in the current context!
Error: Unable to interpret <"SynTPDeinstKey" = Synaptics Pointing Device Driver> in the current context!
Error: Unable to interpret <"WinRAR archiver" = WinRAR> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]> in the current context!
Error: Unable to interpret <"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator> in the current context!
Error: Unable to interpret <"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148> in the current context!
Error: Unable to interpret <"{0163E195-D5EF-BF70-CBEE-73AA7CBBBEEE}" = CCC Help Thai> in the current context!
Error: Unable to interpret <"{03323DD0-6EE9-5959-6387-775742E8AA11}" = L-Lingo Japanese Trial> in the current context!
Error: Unable to interpret <"{03883959-80DA-6151-CEAE-46A058CF774F}" = CCC Help Danish> in the current context!
Error: Unable to interpret <"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package> in the current context!
Error: Unable to interpret <"{096D1CCF-0F1E-08FB-094F-C40A633D5AEB}" = ccc-core-static> in the current context!
Error: Unable to interpret <"{0FB630AB-7BD8-40AE-B223-60397D57C3C9}" = Realtek WLAN Driver> in the current context!
Error: Unable to interpret <"{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver> in the current context!
Error: Unable to interpret <"{13D0EB07-FCA0-C005-A6C5-B1A4B7E5BB48}" = Catalyst Control Center Core Implementation> in the current context!
Error: Unable to interpret <"{15382D89-6EF6-4D21-9484-B500F2B10E46}" = PhotoMail Maker> in the current context!
Error: Unable to interpret <"{1D4A3E7D-A580-5BB7-DED3-48508A53D2B2}" = CCC Help Chinese Standard> in the current context!
Error: Unable to interpret <"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148> in the current context!
Error: Unable to interpret <"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool> in the current context!
Error: Unable to interpret <"{22354A21-BE84-0D40-191D-6E530B715CCF}" = CCC Help Polish> in the current context!
Error: Unable to interpret <"{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information> in the current context!
Error: Unable to interpret <"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT> in the current context!
Error: Unable to interpret <"{25C8D9C5-4B62-4E3B-9EC9-C3D5EBE2AF81}" = Magicians Handbook> in the current context!
Error: Unable to interpret <"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 14> in the current context!
Error: Unable to interpret <"{2F36BA32-7986-9E40-B3F6-908B214EC898}" = CCC Help Japanese> in the current context!
Error: Unable to interpret <"{2F4A39B2-5A2D-3E9F-E8EA-6F891A097ACF}" = CCC Help English> in the current context!
Error: Unable to interpret <"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform> in the current context!
Error: Unable to interpret <"{324D81D5-49F3-4F6D-A4E7-DA54EEA4BEBB}" = AvalonHeroesEU> in the current context!
Error: Unable to interpret <"{339902CB-BDCD-4CDE-88CD-0FA12922C1E7}" = Natalie Brooks> in the current context!
Error: Unable to interpret <"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works> in the current context!
Error: Unable to interpret <"{3DBE8669-1F7D-E1C9-2BC8-CC4BAE0A5136}" = CCC Help Turkish> in the current context!
Error: Unable to interpret <"{3F50AF3B-8997-4916-0095-99D63DDB785A}" = Harry Potter TM> in the current context!
Error: Unable to interpret <"{3FF5FF03-DB97-2ACE-BAE7-61D6D4A39F9B}" = Catalyst Control Center Graphics Full Existing> in the current context!
Error: Unable to interpret <"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR> in the current context!
Error: Unable to interpret <"{4AE6F6B4-CF82-4C92-89EC-E547FA893E3E}" = Youda Sushi Chef> in the current context!
Error: Unable to interpret <"{4CEE0E9F-2116-BE92-CD54-8D1834935B54}" = Catalyst Control Center Localization All> in the current context!
Error: Unable to interpret <"{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password> in the current context!
Error: Unable to interpret <"{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup> in the current context!
Error: Unable to interpret <"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent> in the current context!
Error: Unable to interpret <"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml> in the current context!
Error: Unable to interpret <"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime> in the current context!
Error: Unable to interpret <"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync> in the current context!
Error: Unable to interpret <"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411> in the current context!
Error: Unable to interpret <"{5DD59391-FED6-576D-B6BD-71111EF96522}" = CCC Help Russian> in the current context!
Error: Unable to interpret <"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053> in the current context!
Error: Unable to interpret <"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5> in the current context!
Error: Unable to interpret <"{6168260A-6D56-50BB-193C-BF6F471394AA}" = CCC Help Greek> in the current context!
Error: Unable to interpret <"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update> in the current context!
Error: Unable to interpret <"{6A150790-FC79-D323-92D4-E773E3A03789}" = CCC Help Portuguese> in the current context!
Error: Unable to interpret <"{6CB88B54-4C1C-E6AB-49C6-476DE56327BC}" = CCC Help Spanish> in the current context!
Error: Unable to interpret <"{6DE880FE-F0C9-BC57-B7C5-2ABEAE1E501E}" = CCC Help German> in the current context!
Error: Unable to interpret <"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable> in the current context!
Error: Unable to interpret <"{7506D1CD-B7FE-40C7-AE1F-FE8666361700}" = Dynasty Warriors 6> in the current context!
Error: Unable to interpret <"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053> in the current context!
Error: Unable to interpret <"{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder> in the current context!
Error: Unable to interpret <"{79660B73-3DD0-9C3D-3F29-0E266F3AE5EA}" = CCC Help Norwegian> in the current context!
Error: Unable to interpret <"{7C11154F-3539-4CB5-979D-EF7913473E53}" = Prince of Persia> in the current context!
Error: Unable to interpret <"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)> in the current context!
Error: Unable to interpret <"{81E5E076-F2C1-AE09-A360-0CAC2967FD5F}" = CCC Help Swedish> in the current context!
Error: Unable to interpret <"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable> in the current context!
Error: Unable to interpret <"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie> in the current context!
Error: Unable to interpret <"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570> in the current context!
Error: Unable to interpret <"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver> in the current context!
Error: Unable to interpret <"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight> in the current context!
Error: Unable to interpret <"{8C453F13-6877-4D34-8816-009ABDE306DB}" = Prince of Persia The Sands of Time> in the current context!
Error: Unable to interpret <"{8EC703D0-985E-44C7-A6C2-B6270CE50832}" = Mystery Cookbook> in the current context!
Error: Unable to interpret <"{8F4507EF-C5F3-46CE-9718-9D3698821333}" = Motorola Driver Installation> in the current context!
Error: Unable to interpret <"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007> in the current context!
Error: Unable to interpret <"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007> in the current context!
Error: Unable to interpret <"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007> in the current context!
Error: Unable to interpret <"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007> in the current context!
Error: Unable to interpret <"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007> in the current context!
Error: Unable to interpret <"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007> in the current context!
Error: Unable to interpret <"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007> in the current context!
Error: Unable to interpret <"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System> in the current context!
Error: Unable to interpret <"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-002A-0407-1000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007> in the current context!
Error: Unable to interpret <"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007> in the current context!
Error: Unable to interpret <"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007> in the current context!
Error: Unable to interpret <"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007> in the current context!
Error: Unable to interpret <"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)> in the current context!
Error: Unable to interpret <"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)> in the current context!
Error: Unable to interpret <"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)> in the current context!
Error: Unable to interpret <"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader> in the current context!
Error: Unable to interpret <"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster> in the current context!
Error: Unable to interpret <"{986CAA52-3249-B34F-DC64-07347926CF57}" = CCC Help Korean> in the current context!
Error: Unable to interpret <"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17> in the current context!
Error: Unable to interpret <"{9E4FF410-471F-49E3-9358-74FF0D5E9901}" = Toshiba TEMPRO> in the current context!
Error: Unable to interpret <"{A0DBDF40-559F-11E0-82E2-001D0926B1BF}" = Google Earth Plug-in> in the current context!
Error: Unable to interpret <"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175> in the current context!
Error: Unable to interpret <"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker> in the current context!
Error: Unable to interpret <"{A8DF8593-F619-47DE-AD27-BCABF233433A}" = STOIK Video Converter 2> in the current context!
Error: Unable to interpret <"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress> in the current context!
Error: Unable to interpret <"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper> in the current context!
Error: Unable to interpret <"{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station> in the current context!
Error: Unable to interpret <"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.3 - Deutsch> in the current context!
Error: Unable to interpret <"{AC76BA86-7AD7-5670-0000-900000000003}" = Korean Fonts Support For Adobe Reader 9> in the current context!
Error: Unable to interpret <"{AC76BA86-7AD7-5760-0000-900000000003}" = Japanese Fonts Support For Adobe Reader 9> in the current context!
Error: Unable to interpret <"{AE395AC2-28CB-463F-87DC-00C8059781BF}" = 7Artifacs> in the current context!
Error: Unable to interpret <"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger> in the current context!
Error: Unable to interpret <"{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility> in the current context!
Error: Unable to interpret <"{B5B8BA5D-55CA-9351-984B-048FEF97A544}" = Catalyst Control Center Graphics Previews Vista> in the current context!
Error: Unable to interpret <"{B6DECBD2-EC09-17C3-35AE-8C72B08062C9}" = CCC Help Czech> in the current context!
Error: Unable to interpret <"{B6F7DBE7-2FE2-458F-A738-B10832746036}" = Microsoft Reader> in the current context!
Error: Unable to interpret <"{BF3AB290-563B-2F6F-9AF0-189B5CCF2C01}" = Catalyst Control Center Graphics Light> in the current context!
Error: Unable to interpret <"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3> in the current context!
Error: Unable to interpret <"{C644BA4B-07D6-A67E-9EB4-157F6DEB68BE}" = CCC Help Chinese Traditional> in the current context!
Error: Unable to interpret <"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials> in the current context!
Error: Unable to interpret <"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars> in the current context!
Error: Unable to interpret <"{D0831990-FF97-1F08-668D-4743CC32EFBC}" = CCC Help Finnish> in the current context!
Error: Unable to interpret <"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call> in the current context!
Error: Unable to interpret <"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities> in the current context!
Error: Unable to interpret <"{D9835CE0-E294-83FE-AF9F-BC113A0D2EA9}" = CCC Help Hungarian> in the current context!
Error: Unable to interpret <"{E25FA4E1-678F-414F-9777-1E3FDBBDA4D1}" = Catalyst Control Center InstallProxy> in the current context!
Error: Unable to interpret <"{E337B156-DF81-48D8-8977-B1574EE87BCF}" = USB2.0 Capture Device> in the current context!
Error: Unable to interpret <"{E3D63B95-4B21-414A-A2C7-D6D6A6AC6D79}" = Catalyst Control Center - Branding> in the current context!
Error: Unable to interpret <"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime> in the current context!
Error: Unable to interpret <"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant> in the current context!
Error: Unable to interpret <"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1> in the current context!
Error: Unable to interpret <"{E8B28EF5-2A73-03A7-4F02-2DFF1D182940}" = Catalyst Control Center Graphics Full New> in the current context!
Error: Unable to interpret <"{E94F833D-6435-40A2-112C-4BC18100B91D}" = CCC Help Italian> in the current context!
Error: Unable to interpret <"{EE5BC0BB-9EDA-423C-8276-48857B735D68}" = Prince of Persia Warrior Within> in the current context!
Error: Unable to interpret <"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support> in the current context!
Error: Unable to interpret <"{EEA02668-D5D9-AEFF-6FFB-1EB5BC765A52}" = CCC Help French> in the current context!
Error: Unable to interpret <"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]> in the current context!
Error: Unable to interpret <"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard> in the current context!
Error: Unable to interpret <"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver> in the current context!
Error: Unable to interpret <"{F3529665-D75E-4D6D-98F0-745C78C68E9B}" = TOSHIBA ConfigFree> in the current context!
Error: Unable to interpret <"{FCD674E3-F281-46D6-7717-6EAFDD16D8FC}" = CCC Help Dutch> in the current context!
Error: Unable to interpret <"A Fairy Tale 1.0.0.0" = A Fairy Tale 1.0.0.0> in the current context!
Error: Unable to interpret <"Adobe AIR" = Adobe AIR> in the current context!
Error: Unable to interpret <"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX> in the current context!
Error: Unable to interpret <"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin> in the current context!
Error: Unable to interpret <"Adobe Shockwave Player" = Adobe Shockwave Player 11.5> in the current context!
Error: Unable to interpret <"Akamai" = Akamai NetSession Interface> in the current context!
Error: Unable to interpret <"All To MP3 Converter_is1" = All To MP3 Converter 2.8> in the current context!
Error: Unable to interpret <"Amelie's Restaurant 1.00" = Amelie's Restaurant 1.00> in the current context!
Error: Unable to interpret <"Antique Shop 1.00" = Antique Shop 1.00> in the current context!
Error: Unable to interpret <"Ashampoo Burning Studio 2010 Advanced_is1" = Ashampoo Burning Studio 2010 Advanced> in the current context!
Error: Unable to interpret <"Ashtons - Family Resort 1.00" = Ashtons - Family Resort 1.00> in the current context!
Error: Unable to interpret <"Audition Online1.2.6064" = Audition Online> in the current context!
Error: Unable to interpret <"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus> in the current context!
Error: Unable to interpret <"Beach Party Craze 1.0.0.0" = Beach Party Craze 1.0.0.0> in the current context!
Error: Unable to interpret <"BFGC" = Big Fish Games Client> in the current context!
Error: Unable to interpret <"BFG-Drawn - Der Turm" = Drawn: Der Turm ™> in the current context!
Error: Unable to interpret <"Bilbo - Die vier Ecken der Welt 1.00" = Bilbo - Die vier Ecken der Welt 1.00> in the current context!
Error: Unable to interpret <"BitTorrent" = BitTorrent> in the current context!
Error: Unable to interpret <"Cake Mania - Main Street 1.0.0.0" = Cake Mania - Main Street 1.0.0.0> in the current context!
Error: Unable to interpret <"Cake Mania 3 1.00" = Cake Mania 3 1.00> in the current context!
Error: Unable to interpret <"Chocolatier 2 - Secret Ingredients 1.0.0.64" = Chocolatier 2 - Secret Ingredients 1.0.0.64> in the current context!
Error: Unable to interpret <"Cooking Academy" = Cooking Academy (remove only)> in the current context!
Error: Unable to interpret <"Cooking Academy 2 - World Cuisine_is1" = Cooking Academy 2 - World Cuisine v1.0> in the current context!
Error: Unable to interpret <"Der Stein der Weisen" = Der Stein der Weisen> in the current context!
Error: Unable to interpret <"Diablo II" = Diablo II> in the current context!
Error: Unable to interpret <"DivX Setup.divx.com" = DivX-Setup> in the current context!
Error: Unable to interpret <"Dracula 3_is1" = Dracula 3> in the current context!
Error: Unable to interpret <"Drakensang_TRoT_is1" = Drakensang - Am Fluss der Zeit> in the current context!
Error: Unable to interpret <"DVD Shrink_is1" = DVD Shrink 3.2> in the current context!
Error: Unable to interpret <"Fiesta Online(EU_German)" = Fiesta Online(EU_German) 1.03.008> in the current context!
Error: Unable to interpret <"Germany's Next Topmodel_is1" = Germany's Next Topmodel (PATCHED BY XEONKING©)> in the current context!
Error: Unable to interpret <"Hardcopy(C__Program Files (x86)_Hardcopy)" = Hardcopy (C:\Program Files (x86)\Hardcopy)> in the current context!
Error: Unable to interpret <"HOMESTUDENTR" = Microsoft Office Home and Student 2007> in the current context!
Error: Unable to interpret <"Hot Dish" = Hot Dish> in the current context!
Error: Unable to interpret <"ImgBurn" = ImgBurn> in the current context!
Error: Unable to interpret <"InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package> in the current context!
Error: Unable to interpret <"InstallShield_{324D81D5-49F3-4F6D-A4E7-DA54EEA4BEBB}" = AvalonHeroesEU> in the current context!
Error: Unable to interpret <"InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisorkennwort> in the current context!
Error: Unable to interpret <"InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup> in the current context!
Error: Unable to interpret <"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center> in the current context!
Error: Unable to interpret <"InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder> in the current context!
Error: Unable to interpret <"InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility> in the current context!
Error: Unable to interpret <"InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher> in the current context!
Error: Unable to interpret <"IsoBuster_is1" = IsoBuster 2.7> in the current context!
Error: Unable to interpret <"Japtra" = Japtra - Japanisch Trainer> in the current context!
Error: Unable to interpret <"JDownloader" = JDownloader> in the current context!
Error: Unable to interpret <"jpn-llingo-trl" = L-Lingo Japanese Trial> in the current context!
Error: Unable to interpret <"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware> in the current context!
Error: Unable to interpret <"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)> in the current context!
Error: Unable to interpret <"MPE" = MyPhoneExplorer> in the current context!
Error: Unable to interpret <"PhotoMail" = PhotoMail Maker> in the current context!
Error: Unable to interpret <"RollerCoaster Tycoon Setup" = Roll> in the current context!
Error: Unable to interpret <"Sony Ericsson Themes Creator" = Sony Ericsson Themes Creator 4.12.2.4> in the current context!
Error: Unable to interpret <"ST6UNST #1" = BEWERBUNGS-MASTER> in the current context!
Error: Unable to interpret <"ST6UNST #2" = KanaTutor 2.0.> in the current context!
Error: Unable to interpret <"TuneUp Utilities" = TuneUp Utilities> in the current context!
Error: Unable to interpret <"uTorrent" = µTorrent> in the current context!
Error: Unable to interpret <"VLC media player" = VLC media player 1.1.5> in the current context!
Error: Unable to interpret <"Wakan" = Wakan 1.67> in the current context!
Error: Unable to interpret <"Winamp" = Winamp> in the current context!
Error: Unable to interpret <"WinGimp-2.0_is1" = GIMP 2.6.8> in the current context!
Error: Unable to interpret <"WinLiveSuite_Wave3" = Windows Live Essentials> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== HKEY_CURRENT_USER Uninstall List ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]> in the current context!
Error: Unable to interpret <"InstallShield_{7506D1CD-B7FE-40C7-AE1F-FE8666361700}" = DYNASTY WARRIORS 6> in the current context!
Error: Unable to interpret <"Winamp Detect" = Winamp Anwendungserkennung> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <========== Last 10 Event Log Errors ==========> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[ Application Events ]> in the current context!
Error: Unable to interpret <Error - 08.04.2011 20:16:47 | Computer Name = Marlene | Source = SideBySide | ID = 16842787> in the current context!
Error: Unable to interpret <Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files> in the current context!
Error: Unable to interpret < (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei> in the current context!
Error: Unable to interpret < "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile 8. Die > in the current context!
Error: Unable to interpret <im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente> in the current context!
Error: Unable to interpret < überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".> in the current context!
Error: Unable to interpret <Definition:> in the current context!
Error: Unable to interpret < WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie> in the current context!
Error: Unable to interpret < das Programm "sxstrace.exe" für eine detaillierte Diagnose.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 10.04.2011 12:36:13 | Computer Name = Marlene | Source = SideBySide | ID = 16842832> in the current context!
Error: Unable to interpret <Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files> in the current context!
Error: Unable to interpret < (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBt1st.exe". Fehler in Manifest- oder Richtliniendatei> in the current context!
Error: Unable to interpret < "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt> in the current context!
Error: Unable to interpret < mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:.> in the current context!
Error: Unable to interpret <Komponente> in the current context!
Error: Unable to interpret < 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.> in the current context!
Error: Unable to interpret <Komponente> in the current context!
Error: Unable to interpret < 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 10.04.2011 12:36:38 | Computer Name = Marlene | Source = SideBySide | ID = 16842832> in the current context!
Error: Unable to interpret <Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files> in the current context!
Error: Unable to interpret < (x86)\TOSHIBA\Bluetooth Toshiba Stack\Tools\AVRCPTestTool.exe". Fehler in Manifest-> in the current context!
Error: Unable to interpret < oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion> in the current context!
Error: Unable to interpret < steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt> in the current context!
Error: Unable to interpret < stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.> in the current context!
Error: Unable to interpret <Komponente> in the current context!
Error: Unable to interpret < 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 10.04.2011 12:38:19 | Computer Name = Marlene | Source = SideBySide | ID = 16842787> in the current context!
Error: Unable to interpret <Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files> in the current context!
Error: Unable to interpret < (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei> in the current context!
Error: Unable to interpret < "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile 8. Die > in the current context!
Error: Unable to interpret <im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente> in the current context!
Error: Unable to interpret < überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".> in the current context!
Error: Unable to interpret <Definition:> in the current context!
Error: Unable to interpret < WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie> in the current context!
Error: Unable to interpret < das Programm "sxstrace.exe" für eine detaillierte Diagnose.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 11.04.2011 03:32:24 | Computer Name = Marlene | Source = SideBySide | ID = 16842787> in the current context!
Error: Unable to interpret <Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files> in the current context!
Error: Unable to interpret < (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei> in the current context!
Error: Unable to interpret < "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile 8. Die > in the current context!
Error: Unable to interpret <im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente> in the current context!
Error: Unable to interpret < überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".> in the current context!
Error: Unable to interpret <Definition:> in the current context!
Error: Unable to interpret < WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie> in the current context!
Error: Unable to interpret < das Programm "sxstrace.exe" für eine detaillierte Diagnose.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 11.04.2011 14:51:09 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107> in the current context!
Error: Unable to interpret <Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen> in the current context!
Error: Unable to interpret < Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.> in the current context!
Error: Unable to interpret < Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum> in the current context!
Error: Unable to interpret < gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 11.04.2011 14:51:09 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107> in the current context!
Error: Unable to interpret <Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen> in the current context!
Error: Unable to interpret < Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.> in the current context!
Error: Unable to interpret < Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum> in the current context!
Error: Unable to interpret < gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 12.04.2011 11:40:55 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107> in the current context!
Error: Unable to interpret <Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen> in the current context!
Error: Unable to interpret < Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.> in the current context!
Error: Unable to interpret < Fehler: Die Daten sind unzulässig. .> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 12.04.2011 11:40:58 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107> in the current context!
Error: Unable to interpret <Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen> in the current context!
Error: Unable to interpret < Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.> in the current context!
Error: Unable to interpret < Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum> in the current context!
Error: Unable to interpret < gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 12.04.2011 11:40:58 | Computer Name = Marlene | Source = Microsoft-Windows-CAPI2 | ID = 4107> in the current context!
Error: Unable to interpret <Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen> in the current context!
Error: Unable to interpret < Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.> in the current context!
Error: Unable to interpret < Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum> in the current context!
Error: Unable to interpret < gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <[ System Events ]> in the current context!
Error: Unable to interpret <Error - 20.04.2011 14:27:07 | Computer Name = Marlene | Source = Service Control Manager | ID = 7026> in the current context!
Error: Unable to interpret <Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:> in the current context!
Error: Unable to interpret < ASPI32> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 20.04.2011 16:32:00 | Computer Name = Marlene | Source = Disk | ID = 262155> in the current context!
Error: Unable to interpret <Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 20.04.2011 16:32:01 | Computer Name = Marlene | Source = Disk | ID = 262155> in the current context!
Error: Unable to interpret <Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 20.04.2011 16:32:01 | Computer Name = Marlene | Source = Disk | ID = 262155> in the current context!
Error: Unable to interpret <Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 20.04.2011 16:32:02 | Computer Name = Marlene | Source = Disk | ID = 262155> in the current context!
Error: Unable to interpret <Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 20.04.2011 16:32:02 | Computer Name = Marlene | Source = Disk | ID = 262155> in the current context!
Error: Unable to interpret <Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 21.04.2011 15:09:45 | Computer Name = Marlene | Source = atikmdag | ID = 52236> in the current context!
Error: Unable to interpret <Description = CPLIB :: General - Invalid Parameter> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 21.04.2011 15:09:45 | Computer Name = Marlene | Source = atikmdag | ID = 43029> in the current context!
Error: Unable to interpret <Description = Display is not active> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 21.04.2011 15:10:02 | Computer Name = Marlene | Source = Service Control Manager | ID = 7000> in the current context!
Error: Unable to interpret <Description = Der Dienst "Acronis OS Selector Reinstall Service" wurde aufgrund > in the current context!
Error: Unable to interpret <folgenden Fehlers nicht gestartet: %%2> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret <Error - 21.04.2011 15:10:11 | Computer Name = Marlene | Source = Service Control Manager | ID = 7026> in the current context!
Error: Unable to interpret <Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:> in the current context!
Error: Unable to interpret < ASPI32> in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret < > in the current context!
Error: Unable to interpret << End of report >
> in the current context! OTL by OldTimer - Version 3.2.22.3 log created on 04212011_224327 |
|
22.04.2011, 11:32
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Du musst auch das richtige in den OTL-Fix reinkopieren! Mach es bitte richtig!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
22.04.2011, 15:01
| #9 |
| | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz okay, sorry. Hab ich wahrscheinlich das falsche erwischt. habs jetzt nochmal durchlaufen lassen, da kam die Logfile: All processes killed ========== OTL ========== ADS C:\ProgramData:$SS_DESCRIPTOR_PVX2VCGKMVF9V8N4TKBRVDNGCMXLJ4M28WDP36MLTJ5KJ4VPXHAT deleted successfully. ADS C:\ProgramData\TEMP:F84B8DB5 deleted successfully. ADS C:\ProgramData\TEMP:B8E6A060 deleted successfully. ADS C:\ProgramData\TEMP:6499508E deleted successfully. ADS C:\ProgramData\TEMP:38B3DB6F deleted successfully. ADS C:\ProgramData\TEMP:517B507A deleted successfully. ADS C:\ProgramData\TEMP:7CEDF9F3 deleted successfully. ADS C:\ProgramData\TEMP:69FD6BF0 deleted successfully. ADS C:\ProgramData\TEMP:88050731 deleted successfully. ADS C:\ProgramData\TEMP:F78CC2A2 deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6fe17448-4897-11df-834f-002622429548}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6fe17448-4897-11df-834f-002622429548}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6fe17448-4897-11df-834f-002622429548}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6fe17448-4897-11df-834f-002622429548}\ not found. File G:\LaunchU3.exe -a not found. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 56502 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Lene ->Temp folder emptied: 2379189504 bytes ->Temporary Internet Files folder emptied: 155296465 bytes ->Java cache emptied: 10035 bytes ->FireFox cache emptied: 96042692 bytes ->Flash cache emptied: 224005 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 99524902 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50434 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 2.604,00 mb OTL by OldTimer - Version 3.2.22.3 log created on 04222011_145647 Files\Folders moved on Reboot... C:\Users\Lene\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. Registry entries deleted on Reboot... |
|
23.04.2011, 11:09
| #10 |
| | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz ich habe gerade noch eine andere Fehlermeldung bekommen, weiß nicht, ob die mit dem Trojaner zusammen hängt, deswegen schick ich die einfach mal. Microsoft.NET Framework Unbehandelte Ausnahme in der Anwendung. Klicken Sie auf "Weiter", um den Fehler zu ignorieren und die Anwendung fortzusetzen. Wenn Sie auf "Beenden" klicken, wird die Anwendung sofort beendet. Der Zugriff auf den Pfad "C:\ProgramData\ToshibaEurope\Registration\settings.xml" wurde verweigert. Details: Informationen über das Aufrufen von JIT-Debuggen anstelle dieses Dialogfelds finden Sie am Ende dieser Meldung. ************** Ausnahmetext ************** System.UnauthorizedAccessException: Der Zugriff auf den Pfad "C:\ProgramData\ToshibaEurope\Registration\settings.xml" wurde verweigert. bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) bei System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) bei System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding, Int32 bufferSize) bei System.IO.StreamWriter..ctor(String path) bei Toshiba.OOBE.Common.RegistrationSettings.Save() bei Toshiba.OOBE.Reminder.ReminderForm.reminderTimer_Tick(Object sender, EventArgs e) bei System.Windows.Forms.Timer.OnTick(EventArgs e) bei System.Windows.Forms.Timer.TimerNativeWindow.WndProc(Message& m) bei System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) ************** Geladene Assemblys ************** mscorlib Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4959 (win7RTMGDR.050727-4900). CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/mscorlib.dll. ---------------------------------------- ToshibaReminder Assembly-Version: 8.0.4.0. Win32-Version: 8.0.4.0. CodeBase: file:///C:/Program%20Files/TOSHIBA/Registration/ToshibaReminder.exe. ---------------------------------------- ToshibaCommon Assembly-Version: 8.0.4.0. Win32-Version: 8.0.4.0. CodeBase: file:///C:/Program%20Files/TOSHIBA/Registration/ToshibaCommon.DLL. ---------------------------------------- System.Windows.Forms Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900). CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll. ---------------------------------------- System Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900). CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll. ---------------------------------------- System.Drawing Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900). CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll. ---------------------------------------- System.Configuration Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900). CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll. ---------------------------------------- System.Xml Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900). CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll. ---------------------------------------- System.Management Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900). CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Management/2.0.0.0__b03f5f7f11d50a3a/System.Management.dll. ---------------------------------------- ToshibaReminder.resources Assembly-Version: 8.0.4.0. Win32-Version: 8.0.4.0. CodeBase: file:///C:/Program%20Files/TOSHIBA/Registration/de/ToshibaReminder.resources.DLL. ---------------------------------------- 2_ytoneh Assembly-Version: 8.0.4.0. Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900). CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll. ---------------------------------------- mscorlib.resources Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4959 (win7RTMGDR.050727-4900). CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/mscorlib.dll. ---------------------------------------- System.Windows.Forms.resources Assembly-Version: 2.0.0.0. Win32-Version: 2.0.50727.4927 (NetFXspW7.050727-4900). CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms.resources/2.0.0.0_de_b77a5c561934e089/System.Windows.Forms.resources.dll. ---------------------------------------- ************** JIT-Debuggen ************** Um das JIT-Debuggen (Just-In-Time) zu aktivieren, muss in der Konfigurationsdatei der Anwendung oder des Computers (machine.config) der jitDebugging-Wert im Abschnitt system.windows.forms festgelegt werden. Die Anwendung muss mit aktiviertem Debuggen kompiliert werden. Zum Beispiel: <configuration> <system.windows.forms jitDebugging="true" /> </configuration> Wenn das JIT-Debuggen aktiviert ist, werden alle nicht behandelten Ausnahmen an den JIT-Debugger gesendet, der auf dem Computer registriert ist, und nicht in diesem Dialogfeld behandelt. |
|
23.04.2011, 15:46
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, bitte unhide ausführen: Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop. Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )  Vista und 7 User müssen das Tool per Rechtsklick als Administrator ausführen!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
23.04.2011, 19:45
| #12 |
| | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Datenbank Version: 6399 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 23.04.2011 19:40:50 mbam-log-2011-04-23 (19-40-50).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|Z:\|) Durchsuchte Objekte: 372723 Laufzeit: 1 Stunde(n), 14 Minute(n), 9 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) meine Datein und Ordner sind auch wieder sichtbar. aber die fehler mit dem Catalyst Control Centre und dem Microsoft.NET Framework werden immer noch angezeigt |
|
25.04.2011, 13:35
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz Hast du irgendwie was falsch verstanden? Ich wollte das Log vom Kaspersky TDSS-Killer sehen und nicht noch eins von Malwarebytes...
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.04.2011, 19:24
| #14 |
| | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz oh sorry, ich hab nur gemacht, was auf der Seite stand... Ich hab den TDSS-Killer grad noch mal durchlaufen lassen und da hats mir gesagt, no infection found. Beim ersten Mal hat es glaub ich 2-3 Sachen gelöscht. Geändert von Elen (25.04.2011 um 19:36 Uhr) |
|
25.04.2011, 20:44
| #15 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen SpeicherplatzZitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Trojaner, kritischer Fehler auf der Festplatte, Windows findet keinen Speicherplatz |
| ad.yieldmanager, adfarm, beschädigt, computer, datei, email, externe festplatte, fake, fehler, fehlermeldungen, festplatte, forum, google, laptop, malware.packer, nichts, plötzlich, prefetch, problem, pup.keylogger, quarantäne, rechner, scan, scanner, speicherplatz, superantispyware, trojaner, verschiedene, virenscanner, windows |
Linear-Darstellung
