Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Msn verschickt Spam!

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 01.05.2011, 22:13   #1
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Ich weiss das das hier schon diskutiert wurde, aber ich habe nichts gefunden, dass auf meinen Fall zutrifft. Es ist so:
Ich habe vor ein paar Tagen von einem Freund eine E-Mail bekommen, diese hat einen Link enthalten, ich Dummkopf habe aus Neugier drauf geklickt. Ich kam dann auf eine Seite bei der man Viagra und andere Medikamente bestellen kann. Ich bin dann sofort wieder weg von dieser Seite.
Jetzt ein paar Tage später, finde ich in meinem Posteingang Nachrichten, die sagen, dass eine E-Mail an etwa zehn meiner Kontakte nicht versendet werden konnte. Die E-Mail enthätl auch den Link, der auf die Seite mit den Medikamenten führt.
Dann ein paar Stunden später erhalte ich eine E-Mail von mir selbst, da ich mich selbst auch als Kontakt habe, in der dieser Li9nk auch wieder drin ist.
Nun anschliessend habe i9ch mich im Internet etwas erkundigt und mein Passwort geändert.
Hier im Forum steht, dass es sein kann, dass man sich beim Besuch der Seite einen Virus oder Trojaner heruntergeladen hat, daher habe ich einen Vollständigen Systemscann mit Norton gemacht, der hat nichts gefunden.
Und jetzt ist noch etwas seltsam. Ich habe diesen Link, der mich auf die Seite mit den Medikamenten gebracht hat, nicht mit dem Computer geöffnet, sondern mit dem Ipod Touch.
Daher kann es ja fast kein Virus sein, aber was ist es dann?
Und was kann ich dagegen tun?

Ich hoffe Ihr könnt mir helfen.
glamp

Alt 02.05.2011, 09:25   #2
kira
/// Helfer-Team
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Hallo und Herzlich Willkommen!

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:
Zitat:
  • "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
    - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
    - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
  • Charakteristische Merkmale/Profilinformationen:
    - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] ersetzen
  • Die Systemprüfung und Bereinigung:
    - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
  • Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
  • Innerhalb der Betreuungszeit:
    - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
  • Die Reihenfolge:
    - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
  • GECRACKTE SOFTWARE werden hier nicht geduldet!!!!
  • Ansonsten unsere Forumsregeln:
    - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
  • Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen
Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen
Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen!

1.
Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org
  • Installieren und per Doppelklick starten.
  • Deutsch einstellen und gleich mal die Datenbanken zu aktualisieren - online updaten
  • "Komplett Scan durchführen" wählen (überall Haken setzen)
  • wenn der Scanvorgang beendet ist, klicke auf "Zeige Resultate"
  • Alle Funde - falls MBAM meldet in C:\System Volume Information - den Haken bitte entfernen - markieren und auf "Löschen" - "Ausgewähltes entfernen") klicken.
  • Poste das Ergebnis hier in den Thread - den Bericht findest Du unter "Scan-Berichte"
eine bebilderte Anleitung findest Du hier: Anleitung

2.
Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in Code-Tags hier in den Thread.

3.
→ Lade Dir HJTscanlist.zip herunter
→ entpacke die Datei auf deinem Desktop
→ Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren
→ per Doppelklick starten
→ Wähle dein Betriebsystem aus - bei Win7 wähle Vista
→ Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen
→ Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren
→ Bitte kopiere den Inhalt hier in Deinen Thread.
** Falls es klappt auf einmal nicht, kannst den Text in mehrere Teile teilen und so posten

4.
Ich würde gerne noch all deine installierten Programme sehen:
Lade dir das Tool Ccleaner herunter
Download
installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen
dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..."
wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein

Zitat:
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B hjtsanlist o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]
** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw
gruß
Coverflow
__________________

__________________

Alt 02.05.2011, 12:09   #3
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Sie gehen davon aus, dass ich einen Virus oder so was habe richtig?
Nun aber wieso erkennt dann Norton nichts und wie kann ich diesen Virus bekommen haben, ich habe ja wie schon gesagt die Website nur von meinem Ipod Touch besucht.

Wäre es nicht einfacher anstatt alle diese Sachen zu tun sich einfach eine neu E-Mail Adresse anzuschaffen und dann halt überall wo man registriert ist die E-Mail Adresse zuändern?
__________________

Alt 02.05.2011, 16:00   #4
kira
/// Helfer-Team
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Sie gehen davon aus, dass ich einen Virus oder so was habe richtig?
Laut deinen Angaben ist nicht ausgeschlossen

Nun aber wieso erkennt dann Norton nichts
Jede Software funktioniert etwas anders und jedes Programm findet etwas anderes! Kannst Du mal mal im Netz schauen, findest unzählige Programme, aber keins ist davon 100%ig perfekt
geht auch nicht, weil die Aktivität der PC-Viren-Erzeuger steigen pro Minute. Das heißt, ein Schutzprogramm usw nur nach bestimmten Merkmalen und die in der Datenbank gesammelten Daten können nach Viren suchen, erkennen und diese zu entfernen

Wäre es nicht einfacher anstatt alle diese Sachen zu tun sich einfach eine neu E-Mail Adresse anzuschaffen und dann halt überall wo man registriert ist die E-Mail Adresse zuändern?
das kann ja wohl nicht dauernd die Lösung sein, muss herausgefunden werden, wo die Ursache der Problematik liegt!
__________________

Warnung!:
Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein!
Anhang nicht öffnen, in unserem Forum erst nachfragen!

Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
Bitte diese Warnung weitergeben, wo Du nur kannst!

Alt 02.05.2011, 20:01   #5
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Okay hier zuerst das von MBAM:
:
Code:
ATTFilter
 Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6492

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

02.05.2011 20:46:12
mbam-log-2011-05-02 (20-46-12).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|)
Durchsuchte Objekte: 288130
Laufzeit: 1 Stunde(n), 53 Minute(n), 15 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM\COMPONENTS\WIDGITOOLBARFF.DLL (Adware.WidgiToolbar) -> Value: WIDGITOOLBARFF.DLL -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\program files\common files\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
         
Es hat zwei infiszierte Dateien gefunden. Diese habe ich dann entfernt, nun stehen diese Dateien bei Quarantäne, muss ich dort jetzt noch löschen drücken?


Alt 02.05.2011, 20:03   #6
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Nun das vom 2 Schritt:

:
Code:
ATTFilter
OTL Extras logfile created on: 02.05.2011 20:53:52 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Timo\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 60.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 109.03 Gb Free Space | 37.61% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: TIMO-MOBIL | User Name: Timo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{401FF33D-6A49-4D27-BBDC-288AEC1B47AD}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{904A90D9-9334-44C7-84F4-19FBE45F3126}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | 
"{FFDFCD60-B8C4-466B-82DE-C37E26F0E777}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0997A8ED-77C6-4B94-9A5F-76027ADAF832}" = protocol=6 | dir=in | app=c:\program files\spamihilator\cdcc.exe | 
"{232838F7-EB3D-4154-8350-2D52133D83EE}" = protocol=17 | dir=in | app=c:\windows\system32\supdsvc.exe | 
"{41EAD167-C645-4291-988C-5E5FB5D96D14}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4E86B8B3-90AF-41B2-803E-08F68EF5DD05}" = protocol=6 | dir=in | app=c:\windows\system32\supdsvc.exe | 
"{7BB77A5D-DD19-48C1-94DE-84CEAA164402}" = protocol=6 | dir=in | app=c:\program files\spamihilator\spamihilator.exe | 
"{870998A7-077C-44F9-B329-07BB00BFE55B}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{8C5B5EDE-EC52-4FB0-88B2-53ABF6E23750}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{94752534-85DD-439D-9702-CE8A9F95CE99}" = dir=in | app=c:\program files\windows live\mesh\moe.exe | 
"{98439142-B30E-4303-A3BE-5078232DB6AE}" = protocol=6 | dir=in | app=c:\program files\spamihilator\dccproc.exe | 
"{9F2751DE-ECD1-407C-9DDB-0E12AA96A150}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{A68D62C1-2C51-4B3F-9232-9632E3CD4AEC}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{B2133616-A3F7-49B3-9DCD-EC1840293301}" = protocol=17 | dir=in | app=c:\program files\spamihilator\spamihilator.exe | 
"{CE35DEE9-D716-47B8-A16D-D010D06BD81E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{DB9F1547-3694-4EF1-914C-0F870F1F6091}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{E08C5138-0E63-4839-BD60-26E3321AB30E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{E625A7E7-FFE7-46F7-AB6F-33F118F5F629}" = protocol=17 | dir=in | app=c:\program files\spamihilator\cdcc.exe | 
"{F1E851DF-11D8-42F5-947E-6CFDF69F6CDC}" = protocol=17 | dir=in | app=c:\program files\spamihilator\dccproc.exe | 
"TCP Query User{BF006466-157E-4246-A8A3-1E8C88211742}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"UDP Query User{18A8ACC5-B149-4E3C-A053-817CC2E96366}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{077A7810-A937-4465-AD08-ACED9807995F}" = ANNO 1602 Königs-Edition
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Central Data
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B9B76C9-4967-59FC-C994-191AEA152F04}" = ATI Catalyst Install Manager
"{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1C2B3CEA-482E-4453-B3E2-C9731337828A}" = Microsoft SQL Server 2008 Native Client
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Central Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{202F2838-156B-FC76-013F-9241B9673F39}" = CCC Help Thai
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 24
"{2B4E24A0-A06F-488D-87D8-16738E5E1104}" = Windows Live Family Safety
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{325ED81A-EC15-7CE8-729B-0392A1DD3854}" = CCC Help Czech
"{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIO Guide
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver
"{353FE16B-30FE-469A-BF55-B978F4218003}" = iTunes
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCA23DD-CEDA-CC7F-C74C-4D1EDAE919AA}" = Catalyst Control Center Graphics Full New
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{42DD2173-B7CA-8AB3-8AC2-40DFE2CA6FBC}" = CCC Help German
"{430DD2C5-65FD-9781-F9F2-693CAF05CD10}" = Catalyst Control Center InstallProxy
"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{49B8916D-1DEA-F18A-731F-BF0FE209C63B}" = CCC Help Chinese Standard
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser
"{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"{4EEAF8D8-CB79-06CA-A566-EAC1726DAABB}" = CCC Help Finnish
"{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Easy Media Creator 10 LJ
"{540DB82A-EE11-BBC1-8BD8-BB7D937A53A4}" = CCC Help Hungarian
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5882396B-9FB3-37AC-1AE1-5EA344BD7705}" = Catalyst Control Center Graphics Previews Vista
"{5BA149D9-D5FA-5AB3-400B-9F1BF424B7CE}" = CCC Help Chinese Traditional
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5C5EE8F2-0B38-4C13-AE4E-A87A237FE718}" = 
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F5867F0-2D23-4338-A206-01A76C823924}" = VAIO Energie Verwaltung
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{642F96CC-1D3B-20DE-8673-44EE15B3DC2F}" = CCC Help Portuguese
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = Click to Disc
"{6D26ACF9-4919-0744-C509-28EAF53112D4}" = CCC Help Dutch
"{6E9CFEF5-0245-411F-8587-CF83DF9D4B05}" = Microsoft SQL Server 2008 Database Engine Services
"{71256374-2053-CF0F-BD54-20082980B95C}" = Catalyst Control Center Graphics Full Existing
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{72EEB695-388B-4835-8EA6-0C04545B06B9}" = Intel(R) PROSet/Wireless WiFi-Software
"{737D8F4D-24D4-D626-DEC0-9E39A6166890}" = CCC Help Danish
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Central Audio
"{74B705C2-173A-FFD1-98BC-AD5FB647AB38}" = CCC Help Polish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{784BDC03-2D22-BCAE-5CAC-84AFA799FBDE}" = CCC Help Turkish
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7C404084-C5A6-42FF-B731-0BAC79A6E134}" = VAIO Original Funktion Einstellungen
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{8572CE7D-46B0-70B3-96CD-534F07B35F5D}" = CCC Help Italian
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87544F2E-CCA5-01BC-AEBC-D8C1D759EE61}" = CCC Help English
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ED5D0B7-A193-413F-815A-530BE36B38F7}" = Spamihilator 0.9.9.53 (32-Bit)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90A40407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{90B38901-52C8-85A7-D6C8-9A5592C9FCAA}" = CCC Help Greek
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95229EF6-F4A1-413A-BA50-668311FAFE19}" = VAIO Original Function Settings
"{9648D00F-0589-619B-6114-BF2A0620168B}" = CCC Help Korean
"{96D0B6C6-5A72-4B47-8583-A87E55F5FE81}" = 
"{9805E4EE-9B66-CABD-AF6B-4B84F2A8EF46}" = Skins
"{9973498D-EA29-4A68-BE0B-C88D6E03E928}" = ArcSoft WebCam Companion 2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AA2D735-3375-42D4-9A61-3FFEF82599D6}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup 
"{9AC34FA1-BCDE-1D09-5DB7-EB6A064FDEA9}" = CCC Help Spanish
"{9B973FC0-E71F-6F89-10D6-1BFD063D1707}" = CCC Help Swedish
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9EAC0E21-510E-4259-A9C6-F5D5B8969036}" = Catalyst Control Center - Branding
"{A0B139A7-E8D5-49E8-A7BF-12421E652208}" = pdfforge Toolbar v4.3
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A3979A05-6834-D0A7-75CD-71B5A9E5F4C0}" = Catalyst Control Center Localization All
"{A6F21795-E629-35B2-9487-00A8363B28AA}" = Catalyst Control Center Graphics Light
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Central Copy
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B8E9F8A1-9F4D-43D5-ABD6-1DF067FAA469}" = Microsoft SQL Server 2008 Database Engine Services
"{C0AD2831-3398-A078-CBEB-39A6B381BB56}" = CCC Help Japanese
"{C18A02EC-966B-E7A7-9AC9-082F770ABF9B}" = CCC Help Russian
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{C9C390CC-F9B9-EFE8-27DF-6EB7FF8F8760}" = CCC Help Norwegian
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CD431A7B-88D8-0823-E66F-CCFAEA6DA7B4}" = ccc-core-static
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF0F8D1B-5FB9-468D-BD88-E6239906D2B7}" = Click to Disc
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D47E6B9C-F5A5-23B7-AB6A-3806AD4C9529}" = ccc-utility
"{D6DA6836-77C2-5338-10E3-D7A6CD65681D}" = Catalyst Control Center Core Implementation
"{DA8F979E-43B9-3EEC-721C-F297D9509992}" = Catalyst Control Center Graphics Previews Common
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Central Core
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}" = Microsoft SQL Server Native Client
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" = 
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FE0782BC-7AB0-CF6A-6E38-D3040462C7EC}" = CCC Help French
"{FE51662F-D8F6-43B5-99D9-D4894AF00F83}" = Roxio Easy Media Creator Home
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"BFG-Big Fish Games Spiel-Suite" = Big Fish Games Spiel-Suite
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DivX Setup.divx.com" = DivX-Setup
"dt icon module" = 
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free FLV Converter_is1" = Free FLV Converter V 6.96.0
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324
"Freemake Video Converter_is1" = Freemake Video Converter Version 2.0.1
"gtfirstboot Setting Request" = 
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"InstallShield_{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MFU Module" = 
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"NAV" = Norton AntiVirus
"ProInst" = Intel PROSet Wireless
"Samsung CLX-216x Series" = Samsung CLX-216x Series
"Samsung Universal Print Driver" = Samsung Universal Print Driver
"sp6" = Logitech SetPoint 6.20
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"VAIO Help and Support" = 
"VLC media player" = VLC media player 1.1.7
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Worms for Pocket PC" = Worms for Pocket PC
"xp-AntiSpy" = xp-AntiSpy 3.97-9
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Zattoo4" = Zattoo4 4.0.5
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 24.04.2011 06:02:37 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description = 
 
Error - 24.04.2011 06:39:36 | Computer Name = Timo-Mobil | Source = EventSystem | ID = 4621
Description = 
 
Error - 24.04.2011 09:31:29 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description = 
 
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1158214
 
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1158214
 
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 9337502
 
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 9337502
 
Error - 25.04.2011 07:47:36 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 11.02.2011 12:16:55 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 11.02.2011 12:16:55 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 11.02.2011 18:41:04 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 11.02.2011 18:41:04 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 04:54:56 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 04:54:56 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 05:14:38 | Computer Name = Timo-Mobil | Source = DCOM | ID = 10005
Description = 
 
Error - 12.02.2011 05:14:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 12.02.2011 05:14:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 11:37:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
 
< End of report >
         

Alt 02.05.2011, 20:04   #7
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Die zweite Datei von Schritt Nummer 2:
:
Code:
ATTFilter
OTL logfile created on: 02.05.2011 20:53:52 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Timo\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 60.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 109.03 Gb Free Space | 37.61% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: TIMO-MOBIL | User Name: Timo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Timo\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
PRC - C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
PRC - C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
PRC - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Sony Corporation)
PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
PRC - C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
PRC - C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe ()
PRC - c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Timo\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (BBSvc) -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (Application Updater) -- C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (NAV) -- C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccSvcHst.exe (Symantec Corporation)
SRV - (LBTServ) -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (Samsung UPD Service) -- C:\Windows\System32\SUPDSvc.exe (Samsung Electronics CO., LTD.)
SRV - (VUAgent) -- C:\Program Files\Sony\VAIO Update 5\VUAgent.exe (Sony Corporation)
SRV - (EvtEng) Intel(R) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV - (RegSrvc) Intel(R) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV - (PACSPTISVR) -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe (Sony Corporation)
SRV - (RtkAudioService) -- C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
SRV - (VAIO Power Management) -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (IviRegMgr) -- c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (BHDrvx86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20110419.001\BHDrvx86.sys (Symantec Corporation)
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110502.002\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110502.002\NAVENG.SYS (Symantec Corporation)
DRV - (IDSVix86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20110429.002\IDSvix86.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SYMTDIv) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SYMTDIV.SYS (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SymEvent) -- C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SRTSP) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\system32\drivers\NAV\1205000.07D\SRTSPX.SYS (Symantec Corporation)
DRV - (SymEFA) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymIRON) -- C:\Windows\system32\drivers\NAV\1205000.07D\Ironx86.SYS (Symantec Corporation)
DRV - (SymDS) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMDS.SYS (Symantec Corporation)
DRV - (LUsbFilt) -- C:\Windows\System32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouFilt) -- C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (s1039bus) Sony Ericsson Device 1039 driver (WDM) -- C:\Windows\System32\drivers\s1039bus.sys (MCCI Corporation)
DRV - (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS) -- C:\Windows\System32\drivers\s1039nd5.sys (MCCI Corporation)
DRV - (s1039mdm) -- C:\Windows\System32\drivers\s1039mdm.sys (MCCI Corporation)
DRV - (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM) -- C:\Windows\System32\drivers\s1039unic.sys (MCCI Corporation)
DRV - (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s1039mgmt.sys (MCCI Corporation)
DRV - (s1039obex) -- C:\Windows\System32\drivers\s1039obex.sys (MCCI Corporation)
DRV - (s1039mdfl) -- C:\Windows\System32\drivers\s1039mdfl.sys (MCCI Corporation)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (RsFx0103) -- C:\Windows\System32\drivers\RsFx0103.sys (Microsoft Corporation)
DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (DMICall) -- C:\Windows\System32\drivers\DMICall.sys (Sony Corporation)
DRV - (risdptsk) -- C:\Windows\System32\drivers\risdptsk.sys (REDC)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (SFEP) -- C:\Windows\System32\drivers\SFEP.sys (Sony Corporation)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (regi) -- C:\Windows\System32\drivers\regi.sys (InterVideo)
DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.SYS (Samsung Electronics)
DRV - (DgiVecp) -- C:\Windows\System32\drivers\DGIVECP.SYS (Samsung Electronics Co., Ltd.)
DRV - (pfc) -- C:\Windows\System32\drivers\pfc.sys (Padus, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://eu.ask.com?o=15780&l=dis
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.ch/"
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.1
FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.4.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPlgn\ [2011.01.14 18:35:42 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.04.30 13:18:27 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.04.30 13:18:27 | 000,000,000 | ---D | M]
 
[2010.11.25 20:45:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Extensions
[2011.05.01 22:58:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions
[2010.12.21 22:28:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.03.08 22:57:00 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.03.28 17:39:36 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.02.10 18:47:22 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.02.02 23:20:09 | 000,000,000 | ---D | M] (20-20 3D Viewer) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\2020Player@2020Technologies.com
[2010.09.28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\searchplugins\askcom.xml
[2011.04.10 18:46:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.12.21 18:11:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.03.15 22:40:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011.03.10 18:53:15 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM
[2011.01.14 18:35:42 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPLGN
[2011.02.02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.10.27 07:44:13 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.10.27 07:44:13 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.10.27 07:44:13 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.10.27 07:44:13 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.10.27 07:44:13 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [Maple_S2P] C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Timo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Timo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll -  File not found
O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\Timo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Timo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) - F:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,000,766 | R--- | M] () - F:\Autorun.ico -- [ CDFS ]
O32 - AutoRun File - [2001.09.06 01:04:00 | 000,000,283 | R--- | M] () - F:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell\AutoRun\command - "" = G:\Startme.exe
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Acrobat\command - "" = F:\.\ar500deu.exe -- [2001.09.06 01:04:00 | 009,124,984 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN)
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\DirectX\command - "" = F:\.\DirectX\dxsetup.exe -- [2001.10.16 12:24:46 | 000,140,288 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Setup\command - "" = F:\.\Setup.exe -- [2002.12.02 15:33:00 | 000,107,512 | R--- | M] ()
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\Shell\AutoRun\command - "" = G:\wd_windows_tools\WDEULA.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.05.02 20:52:25 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Timo\Desktop\OTL.exe
[2011.05.02 16:58:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\Malwarebytes
[2011.05.02 16:58:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Malwarebytes' Anti-Malware
[2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.05.02 16:58:10 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.05.02 16:58:10 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.05.02 12:29:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{227CABBB-BF91-469F-8E02-D4D868EB4188}
[2011.05.01 15:19:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{1C9253E1-D764-429F-85F4-AA2052B834DF}
[2011.04.29 15:30:57 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{9802831A-8BF0-472C-921A-BC05E73CEEE3}
[2011.04.28 18:13:08 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{C651C691-93ED-4E9E-94B4-02731314E127}
[2011.04.27 20:00:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Free FLV Converter
[2011.04.27 20:00:17 | 000,000,000 | ---D | C] -- C:\Program Files\Free FLV Converter
[2011.04.27 17:22:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2011.04.27 17:22:26 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2011.04.27 17:22:22 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011.04.27 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{442D6840-DFC6-4D21-BDAC-44DEF9361D1B}
[2011.04.26 18:45:23 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{62042D88-21B2-49D2-9B41-BCCA7ED72F19}
[2011.04.25 17:23:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\iTunes
[2011.04.25 17:22:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011.04.25 17:22:44 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011.04.25 17:19:59 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011.04.25 17:19:30 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.04.25 13:48:05 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{23A5F032-A21F-4F28-85D9-A4FE4C85642A}
[2011.04.24 12:03:27 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{AFD43F2C-5F4F-495F-898D-F66F7301E02B}
[2011.04.23 22:03:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{6CE53D7B-F97B-408C-B5FC-386964457F1B}
[2011.04.23 00:20:31 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{1AE88077-B54F-49FA-B952-20C02E148367}
[2011.04.22 12:20:07 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{EA904536-19B8-4BA0-A089-F1BB29F222EB}
[2011.04.21 16:51:26 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{E8790765-5B89-44CD-AB59-0A1C66CE799C}
[2011.04.20 19:33:05 | 000,124,016 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdm.sys
[2011.04.20 19:33:05 | 000,123,504 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039unic.sys
[2011.04.20 19:33:05 | 000,117,872 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mgmt.sys
[2011.04.20 19:33:05 | 000,113,904 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039obex.sys
[2011.04.20 19:33:05 | 000,098,672 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039bus.sys
[2011.04.20 19:33:05 | 000,025,456 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039nd5.sys
[2011.04.20 19:33:05 | 000,014,960 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdfl.sys
[2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cmnt.sys
[2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cm.sys
[2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039whnt.sys
[2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039wh.sys
[2011.04.20 19:33:05 | 000,010,992 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cr.sys
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Sony Ericsson
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson
[2011.04.20 13:21:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{A93F3534-7BB5-402A-8155-74318E533724}
[2011.04.19 18:10:18 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{845A209A-BC21-4777-9122-6FD7E4A91BAF}
[2011.04.19 17:34:37 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011.04.19 17:34:37 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011.04.19 17:34:37 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011.04.19 17:34:37 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.19 17:34:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.19 17:34:36 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.19 17:34:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011.04.19 17:34:36 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011.04.19 17:34:35 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011.04.19 17:34:35 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011.04.19 17:34:35 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.19 17:34:35 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011.04.19 17:34:35 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.04.19 17:34:35 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011.04.19 17:34:35 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.19 17:34:35 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.19 17:34:35 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.19 17:34:34 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.19 17:34:34 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.19 17:34:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011.04.19 17:34:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011.04.19 17:34:34 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.19 17:34:33 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.19 17:34:33 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.19 17:34:33 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011.04.19 17:34:32 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.19 17:34:32 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011.04.19 17:34:32 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011.04.19 17:34:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.19 17:34:32 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011.04.19 17:34:32 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011.04.19 17:34:31 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.04.19 17:34:31 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.19 17:34:31 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011.04.19 17:34:31 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.19 17:34:31 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011.04.19 17:34:31 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.19 17:34:31 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011.04.19 17:34:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.16 00:30:31 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2011.04.15 17:50:29 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011.04.15 17:50:29 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011.04.15 17:50:13 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011.04.15 17:50:13 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011.04.15 17:50:03 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.04.15 17:49:59 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011.04.11 10:37:58 | 000,000,000 | ---D | C] -- C:\divx
[2011.04.10 18:37:46 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2011.04.10 18:37:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2011.04.10 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\Real
[2011.04.10 18:36:03 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft
[2011.04.10 17:59:57 | 000,000,000 | ---D | C] -- C:\OutputFolder
[2011.04.07 17:15:22 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\DonationCoder
[2011.04.07 17:15:21 | 000,000,000 | ---D | C] -- C:\Users\Timo\Documents\DonationCoder
[2011.04.06 16:20:16 | 000,197,920 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011.04.06 16:20:16 | 000,107,808 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011.04.06 16:20:16 | 000,091,424 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011.04.06 16:20:16 | 000,075,040 | ---- | C] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.05.02 20:56:14 | 000,002,097 | ---- | M] () -- C:\Users\Timo\Desktop\hjtscanlist.zip
[2011.05.02 20:52:27 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Timo\Desktop\OTL.exe
[2011.05.02 20:48:19 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.02 20:48:19 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.02 20:48:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.02 20:48:10 | 3186,659,328 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.02 16:58:13 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.01 23:31:53 | 000,056,832 | ---- | M] () -- C:\Users\Timo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.05.01 22:59:09 | 000,000,764 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.04.26 22:37:39 | 000,002,593 | ---- | M] () -- C:\Users\Timo\Desktop\Microsoft Office Excel 2007.lnk
[2011.04.25 19:43:51 | 000,002,591 | ---- | M] () -- C:\Users\Timo\Desktop\Microsoft Office Word 2007.lnk
[2011.04.25 17:23:50 | 000,001,624 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.04.20 19:37:59 | 000,745,254 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.04.20 19:37:58 | 000,794,826 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.04.20 19:37:58 | 000,193,608 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.04.20 19:37:58 | 000,161,784 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.04.19 17:34:53 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2011.04.19 17:34:53 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2011.04.19 17:34:37 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011.04.19 17:34:37 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011.04.19 17:34:37 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011.04.19 17:34:37 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.19 17:34:36 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.19 17:34:36 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.19 17:34:36 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011.04.19 17:34:36 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011.04.19 17:34:35 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011.04.19 17:34:35 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011.04.19 17:34:35 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.19 17:34:35 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011.04.19 17:34:35 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.04.19 17:34:35 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011.04.19 17:34:35 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.19 17:34:35 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.19 17:34:35 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011.04.19 17:34:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.19 17:34:34 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.19 17:34:34 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.19 17:34:34 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011.04.19 17:34:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011.04.19 17:34:34 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.19 17:34:33 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.19 17:34:33 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.19 17:34:33 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011.04.19 17:34:32 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.19 17:34:32 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011.04.19 17:34:32 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011.04.19 17:34:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.19 17:34:32 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011.04.19 17:34:32 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011.04.19 17:34:31 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.04.19 17:34:31 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.19 17:34:31 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011.04.19 17:34:31 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.19 17:34:31 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011.04.19 17:34:31 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.19 17:34:31 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011.04.19 17:34:31 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.16 13:51:33 | 000,403,848 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.04.13 17:24:10 | 000,000,447 | ---- | M] () -- C:\Users\Timo\Desktop\Schule - Verknüpfung.lnk
[2011.04.11 10:30:46 | 000,002,032 | ---- | M] () -- C:\Users\Timo\AppData\Local\d3d9caps.dat
[2011.04.09 18:13:09 | 000,005,146 | ---- | M] () -- C:\Users\Timo\.recently-used.xbel
[2011.04.07 21:38:48 | 000,000,011 | R--- | M] () -- C:\Windows\amunres.lsl
[2011.04.07 17:15:22 | 000,000,058 | ---- | M] () -- C:\Users\Timo\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.04.06 16:20:16 | 000,197,920 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011.04.06 16:20:16 | 000,107,808 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011.04.06 16:20:16 | 000,091,424 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011.04.06 16:20:16 | 000,075,040 | ---- | M] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
 
========== Files Created - No Company Name ==========
 
[2011.05.02 20:56:29 | 000,030,259 | ---- | C] () -- C:\Users\Timo\Desktop\hjtscanlist.bat
[2011.05.02 20:56:08 | 000,002,097 | ---- | C] () -- C:\Users\Timo\Desktop\hjtscanlist.zip
[2011.05.02 16:58:13 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.04.25 17:23:50 | 000,001,624 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.04.19 17:34:35 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011.04.13 17:24:10 | 000,000,447 | ---- | C] () -- C:\Users\Timo\Desktop\Schule - Verknüpfung.lnk
[2011.04.09 18:13:09 | 000,005,146 | ---- | C] () -- C:\Users\Timo\.recently-used.xbel
[2011.04.07 21:38:48 | 000,000,011 | R--- | C] () -- C:\Windows\amunres.lsl
[2011.04.07 17:15:22 | 000,000,058 | ---- | C] () -- C:\Users\Timo\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.01.10 23:04:20 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2011.01.10 17:30:47 | 000,010,231 | ---- | C] () -- C:\Users\Timo\AppData\Roaming\SmarThruOptions.xml
[2011.01.10 17:30:35 | 000,036,864 | ---- | C] () -- C:\Windows\System32\SvcMan.exe
[2011.01.10 17:30:03 | 000,172,032 | ---- | C] () -- C:\Windows\System32\SecSNMP.dll
[2011.01.10 17:29:46 | 000,000,124 | ---- | C] () -- C:\Windows\Readiris.ini
[2011.01.10 17:29:42 | 000,023,040 | ---- | C] () -- C:\Windows\System32\irisco32.dll
[2011.01.10 17:27:03 | 000,458,752 | ---- | C] () -- C:\Windows\ssndii.exe
[2011.01.10 17:22:57 | 000,086,016 | R--- | C] () -- C:\Windows\WiaInst.exe
[2011.01.10 17:21:48 | 000,217,088 | R--- | C] () -- C:\Windows\System32\ssminidriver.dll
[2011.01.10 17:21:48 | 000,027,136 | R--- | C] () -- C:\Windows\System32\ssimgfilter.dll
[2011.01.10 17:21:48 | 000,011,264 | R--- | C] () -- C:\Windows\System32\sssegfilter.dll
[2011.01.10 17:21:48 | 000,010,752 | R--- | C] () -- C:\Windows\System32\sserrhandler.dll
[2011.01.10 17:20:21 | 000,022,723 | ---- | C] () -- C:\Windows\System32\cx21sl3.dll
[2010.11.29 23:06:13 | 000,000,079 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010.11.29 22:06:15 | 000,017,408 | ---- | C] () -- C:\Users\Timo\AppData\Local\WebpageIcons.db
[2010.11.29 20:10:47 | 000,056,832 | ---- | C] () -- C:\Users\Timo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.29 18:25:12 | 000,026,624 | ---- | C] () -- C:\Windows\System32\spd__l.dll
[2010.11.29 18:25:11 | 000,283,136 | ---- | C] () -- C:\Windows\System32\DscPnt.dll
[2010.11.29 18:25:11 | 000,259,888 | ---- | C] () -- C:\Windows\SUPDRun.exe
[2010.11.29 18:25:11 | 000,151,552 | ---- | C] () -- C:\Windows\System32\spd__ci.exe
[2010.11.29 13:59:13 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2010.11.25 20:56:16 | 000,524,288 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010.11.25 20:56:16 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010.11.25 16:02:30 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010.11.25 16:02:00 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010.11.25 16:02:00 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010.11.25 14:09:21 | 000,002,032 | ---- | C] () -- C:\Users\Timo\AppData\Local\d3d9caps.dat
[2010.11.25 08:24:42 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI
[2009.08.03 16:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009.08.03 16:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2009.05.14 23:22:08 | 000,011,264 | ---- | C] () -- C:\Windows\System32\atimuixx.dll
[2008.10.29 18:13:34 | 000,180,720 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2008.07.10 21:07:09 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1511.dll
[2008.07.10 21:07:08 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2008.07.10 21:07:08 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2008.07.10 21:07:08 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe
[2008.07.10 21:04:31 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2008.07.10 11:22:18 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2008.01.21 09:15:58 | 000,794,826 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.01.21 09:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.01.21 09:15:58 | 000,193,608 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.01.21 09:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 14:47:37 | 000,403,848 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 12:33:01 | 000,745,254 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 12:33:01 | 000,161,784 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2002.09.18 00:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 728 bytes -> C:\Users\Timo\Documents\Französisch.eml:OECustomProperty

< End of report >
         

Alt 02.05.2011, 20:05   #8
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Nun noch das von Schritt Nummer 3:
:
Code:
ATTFilter
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                        º                                    º 
                                    hjtscanlist v2.0              
                        º                                    º 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
 
Microsoft Windows [Version 6.0.6002]
 
 
C:
 
  02.05.2011 20:48     C:\System Volume Information --------- 24576   
       C:\hiberfil.sys ---------    
       C:\pagefile.sys ---------    
  02.05.2011 16:58     C:\ProgramData --------- 12288   
  02.05.2011 16:58     C:\Program Files --------- 32768   
  01.05.2011 22:59     C:\Windows --------- 24576   
  26.04.2011 18:43     C:\Config.Msi --------- 0   
  11.04.2011 10:38     C:\divx --------- 0   
  10.04.2011 17:59     C:\OutputFolder --------- 0   
  25.01.2011 19:15     C:\Error.log --------- 638   
  15.01.2011 01:06     C:\Dev-Cpp --------- 4096   
  12.01.2011 15:28     C:\Downloads --------- 0   
  31.12.2010 03:05     C:\IO.SYS --------- 0   
  31.12.2010 03:05     C:\MSDOS.SYS --------- 0   
  26.11.2010 11:58     C:\Update --------- 0   
  26.11.2010 10:07     C:\cc_20101126_090719.reg --------- 73708   
  25.11.2010 16:33     C:\MSOCache --------- 0   
  25.11.2010 16:28     C:\Boot --------- 4096   
  25.11.2010 14:11     C:\$Recycle.Bin --------- 4096   
  25.11.2010 14:09     C:\Users --------- 4096   
  25.11.2010 14:05     C:\Programme --------- 0   
  25.11.2010 14:05     C:\Dokumente und Einstellungen --------- 0   
  25.11.2010 08:24     C:\Documentation --------- 0   
  25.11.2010 08:01     C:\Installer_Setup.log --------- 187   
  25.11.2010 07:41     C:\Intel --------- 0   
  11.04.2009 00:36     C:\bootmgr --------- 333257   
  10.07.2008 20:58     C:\BOOTSECT.BAK --------- 8192   
  21.01.2008 04:32     C:\PerfLogs --------- 0   
  02.11.2006 15:02     C:\Documents and Settings --------- 0   
  18.09.2006 23:43     C:\config.sys --------- 10   
  18.09.2006 23:43     C:\autoexec.bat --------- 24   
----------------------------------------
 
 
C:\Windows
 
  02.05.2011 20:51     C:\Windows\WindowsUpdate.log --------- 1454512   
  02.05.2011 20:48     C:\Windows\bootstat.dat --------- 67584   
  07.04.2011 21:38     C:\Windows\amunres.lsl --------- 11   
  10.01.2011 23:27     C:\Windows\win.ini --------- 475   
  10.01.2011 17:29     C:\Windows\Readiris.ini --------- 124   
  25.11.2010 08:24     C:\Windows\VAIOUpdt.INI --------- 0   
  25.11.2010 07:49     C:\Windows\csup.txt --------- 12   
  10.11.2010 03:28     C:\Windows\WLXPGSS.SCR --------- 301936   
  09.08.2010 04:03     C:\Windows\SUPDRun.exe --------- 259888   
  11.04.2009 00:27     C:\Windows\explorer.exe --------- 2926592   
  29.12.2008 15:35     C:\Windows\atiogl.xml --------- 15485   
  10.07.2008 14:45     C:\Windows\ocsetup_install_OEMHelpCustomization.etl --------- 29425664   
  10.07.2008 14:45     C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.perf --------- 196608   
  10.07.2008 14:45     C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.dpx --------- 65536   
  10.07.2008 11:39     C:\Windows\DIFxAPI.dll --------- 319456   
  10.07.2008 11:39     C:\Windows\HideWin.exe --------- 315392   
  10.07.2008 11:22     C:\Windows\ativpsrm.bin --------- 0   
  03.07.2008 08:06     C:\Windows\SkyTel.exe --------- 1826816   
  03.07.2008 08:06     C:\Windows\RtlUpd.exe --------- 1196032   
  03.07.2008 08:06     C:\Windows\RTKAUDIOSERVICE.EXE --------- 104992   
  03.07.2008 08:06     C:\Windows\RtHDVCpl.exe --------- 6295552   
  03.07.2008 08:05     C:\Windows\USetup.iss --------- 553   
  03.07.2008 08:05     C:\Windows\RtlExUpd.dll --------- 520192   
  28.06.2008 02:33     C:\Windows\snymsico.dll --------- 626688   
  21.01.2008 04:43     C:\Windows\WindowsShell.Manifest --------- 749   
  21.01.2008 04:24     C:\Windows\regedit.exe --------- 134656   
  21.01.2008 04:24     C:\Windows\bfsvc.exe --------- 58880   
  21.01.2008 04:24     C:\Windows\fveupdate.exe --------- 13312   
  21.01.2008 04:24     C:\Windows\HelpPane.exe --------- 498176   
  21.01.2008 04:23     C:\Windows\notepad.exe --------- 151040   
  15.03.2007 12:07     C:\Windows\ssndii.exe --------- 458752   
  26.02.2007 03:44     C:\Windows\WiaInst.exe --------- 86016   
  17.01.2007 11:23     C:\Windows\Dr. Printer Icon.ico --------- 11502   
  02.11.2006 14:35     C:\Windows\WMSysPr9.prx --------- 316640   
  02.11.2006 14:34     C:\Windows\twunk_16.exe --------- 49680   
  02.11.2006 14:34     C:\Windows\twain_32.dll --------- 50688   
  02.11.2006 14:34     C:\Windows\twunk_32.exe --------- 31232   
  02.11.2006 14:34     C:\Windows\twain.dll --------- 94784   
  02.11.2006 11:45     C:\Windows\winhlp32.exe --------- 9216   
  02.11.2006 11:45     C:\Windows\hh.exe --------- 14848   
  02.11.2006 09:46     C:\Windows\mib.bin --------- 43131   
  19.09.2006 13:41     C:\Windows\HomePremium.xml --------- 8328   
  18.09.2006 23:46     C:\Windows\system.ini --------- 219   
  18.09.2006 23:43     C:\Windows\_default.pif --------- 707   
  18.09.2006 23:43     C:\Windows\winhelp.exe --------- 256192   
  18.09.2006 23:30     C:\Windows\msdfmap.ini --------- 1405   
  18.09.2002 00:45     C:\Windows\lsb_un20.exe --------- 119808   
  17.12.1999 11:13     C:\Windows\unvise32.exe --------- 86016   
----------------------------------------
 
 
C:\Windows\System
 
 02.11.2006 14:34      C:\Windows\System\mciseq.drv --------- 25264 
 02.11.2006 14:34      C:\Windows\System\mciwave.drv --------- 28160 
 02.11.2006 14:34      C:\Windows\System\avifile.dll --------- 109456 
 02.11.2006 14:34      C:\Windows\System\avicap.dll --------- 69584 
 02.11.2006 14:34      C:\Windows\System\mciavi.drv --------- 73376 
 02.11.2006 14:34      C:\Windows\System\msvideo.dll --------- 126912 
 02.11.2006 09:10      C:\Windows\System\OLESVR.DLL --------- 24064 
 02.11.2006 09:10      C:\Windows\System\WFWNET.DRV --------- 12704 
 02.11.2006 09:10      C:\Windows\System\COMMDLG.DLL --------- 32816 
 02.11.2006 09:10      C:\Windows\System\TIMER.DRV --------- 4048 
 02.11.2006 09:10      C:\Windows\System\MMSYSTEM.DLL --------- 68992 
 02.11.2006 09:10      C:\Windows\System\mmtask.tsk --------- 1152 
 02.11.2006 09:10      C:\Windows\System\mouse.drv --------- 2032 
 02.11.2006 09:10      C:\Windows\System\vga.drv --------- 2176 
 02.11.2006 09:10      C:\Windows\System\sound.drv --------- 1744 
 02.11.2006 09:10      C:\Windows\System\keyboard.drv --------- 2000 
 02.11.2006 09:10      C:\Windows\System\SHELL.DLL --------- 5120 
 02.11.2006 09:10      C:\Windows\System\system.drv --------- 3360 
 18.09.2006 23:43      C:\Windows\System\ver.dll --------- 9008 
 18.09.2006 23:43      C:\Windows\System\olecli.dll --------- 82944 
 18.09.2006 23:43      C:\Windows\System\lzexpand.dll --------- 9936 
 18.09.2006 23:35      C:\Windows\System\stdole.tlb --------- 5532 
----------------------------------------
 
 
C:\Windows\System32
 
 02.05.2011 20:48     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 --------- 3616  
 02.05.2011 20:48     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 --------- 3616  
 02.05.2011 20:47     C:\Windows\system32\drivers --------- 65536  
 27.04.2011 17:20     C:\Windows\system32\catroot --------- 4096  
 27.04.2011 17:20     C:\Windows\system32\catroot2 --------- 4096  
 20.04.2011 19:37     C:\Windows\system32\perfh009.dat --------- 745254  
 20.04.2011 19:37     C:\Windows\system32\perfc009.dat --------- 161784  
 20.04.2011 19:37     C:\Windows\system32\perfh007.dat --------- 794826  
 20.04.2011 19:37     C:\Windows\system32\perfc007.dat --------- 193608  
 20.04.2011 19:37     C:\Windows\system32\PerfStringBackup.INI --------- 1894354  
 19.04.2011 18:05     C:\Windows\system32\de-DE --------- 327680  
 19.04.2011 18:05     C:\Windows\system32\migration --------- 4096  
 19.04.2011 18:05     C:\Windows\system32\wbem --------- 65536  
 19.04.2011 18:05     C:\Windows\system32\en-US --------- 12288  
 19.04.2011 17:34     C:\Windows\system32\icrav03.rat --------- 8798  
 19.04.2011 17:34     C:\Windows\system32\ticrf.rat --------- 1988  
 19.04.2011 17:34     C:\Windows\system32\msls31.dll --------- 161792  
 19.04.2011 17:34     C:\Windows\system32\wininet.dll --------- 1126912  
 19.04.2011 17:34     C:\Windows\system32\jsproxy.dll --------- 65024  
 19.04.2011 17:34     C:\Windows\system32\iertutil.dll --------- 1785344  
 19.04.2011 17:34     C:\Windows\system32\msrating.dll --------- 162304  
 19.04.2011 17:34     C:\Windows\system32\urlmon.dll --------- 1102336  
 19.04.2011 17:34     C:\Windows\system32\RegisterIEPKEYs.exe --------- 74752  
 19.04.2011 17:34     C:\Windows\system32\SetIEInstalledDate.exe --------- 76800  
 19.04.2011 17:34     C:\Windows\system32\mshtmler.dll --------- 48640  
 19.04.2011 17:34     C:\Windows\system32\iesysprep.dll --------- 86528  
 19.04.2011 17:34     C:\Windows\system32\ieui.dll --------- 176640  
 19.04.2011 17:34     C:\Windows\system32\ieframe.dll --------- 9702400  
 19.04.2011 17:34     C:\Windows\system32\tdc.ocx --------- 63488  
 19.04.2011 17:34     C:\Windows\system32\html.iec --------- 367104  
 19.04.2011 17:34     C:\Windows\system32\dxtrans.dll --------- 223232  
 19.04.2011 17:34     C:\Windows\system32\dxtmsft.dll --------- 353792  
 19.04.2011 17:34     C:\Windows\system32\ieapfltr.dat --------- 3695416  
 19.04.2011 17:34     C:\Windows\system32\ieapfltr.dll --------- 434176  
 19.04.2011 17:34     C:\Windows\system32\icardie.dll --------- 66048  
 19.04.2011 17:34     C:\Windows\system32\ie4uinit.exe --------- 74240  
 19.04.2011 17:34     C:\Windows\system32\iernonce.dll --------- 31744  
 19.04.2011 17:34     C:\Windows\system32\ieuinit.inf --------- 72822  
 19.04.2011 17:34     C:\Windows\system32\iesetup.dll --------- 74752  
 19.04.2011 17:34     C:\Windows\system32\url.dll --------- 231936  
 19.04.2011 17:34     C:\Windows\system32\iedkcs32.dll --------- 353584  
 19.04.2011 17:34     C:\Windows\system32\inetcpl.cpl --------- 1427456  
 19.04.2011 17:34     C:\Windows\system32\webcheck.dll --------- 203776  
 19.04.2011 17:34     C:\Windows\system32\licmgr10.dll --------- 23552  
 19.04.2011 17:34     C:\Windows\system32\inseng.dll --------- 78848  
 19.04.2011 17:34     C:\Windows\system32\mshtmled.dll --------- 72704  
 19.04.2011 17:34     C:\Windows\system32\wextract.exe --------- 152064  
 19.04.2011 17:34     C:\Windows\system32\iexpress.exe --------- 150528  
 19.04.2011 17:34     C:\Windows\system32\msfeeds.dll --------- 580608  
 19.04.2011 17:34     C:\Windows\system32\vbscript.dll --------- 420864  
 19.04.2011 17:34     C:\Windows\system32\mshtml.dll --------- 12268544  
 19.04.2011 17:34     C:\Windows\system32\mshtml.tlb --------- 2382848  
 19.04.2011 17:34     C:\Windows\system32\ieUnatt.exe --------- 142848  
 19.04.2011 17:34     C:\Windows\system32\occache.dll --------- 123392  
 19.04.2011 17:34     C:\Windows\system32\pngfilt.dll --------- 54272  
 19.04.2011 17:34     C:\Windows\system32\mshta.exe --------- 11776  
 19.04.2011 17:34     C:\Windows\system32\admparse.dll --------- 101888  
 19.04.2011 17:34     C:\Windows\system32\ieaksie.dll --------- 227840  
 19.04.2011 17:34     C:\Windows\system32\ieakui.dll --------- 163840  
 19.04.2011 17:34     C:\Windows\system32\jscript9.dll --------- 1797632  
 19.04.2011 17:34     C:\Windows\system32\jscript.dll --------- 716800  
 19.04.2011 17:34     C:\Windows\system32\imgutil.dll --------- 35840  
 19.04.2011 17:34     C:\Windows\system32\advpack.dll --------- 114176  
 19.04.2011 17:34     C:\Windows\system32\iepeers.dll --------- 118784  
 19.04.2011 17:34     C:\Windows\system32\msfeedsbs.dll --------- 41472  
 19.04.2011 17:34     C:\Windows\system32\msfeedssync.exe --------- 10752  
 19.04.2011 17:34     C:\Windows\system32\IEAdvpack.dll --------- 110592  
 19.04.2011 17:34     C:\Windows\system32\ieakeng.dll --------- 130560  
 18.04.2011 15:46     C:\Windows\system32\mrt.exe --------- 42181064  
 16.04.2011 13:51     C:\Windows\system32\FNTCACHE.DAT --------- 403848  
 11.04.2011 10:29     C:\Windows\system32\Tasks --------- 4096  
 06.04.2011 16:20     C:\Windows\system32\dnssd.dll --------- 91424  
 06.04.2011 16:20     C:\Windows\system32\dnssdX.dll --------- 197920  
 06.04.2011 16:20     C:\Windows\system32\jdns_sd.dll --------- 75040  
 06.04.2011 16:20     C:\Windows\system32\dns-sd.exe --------- 107808  
 15.03.2011 22:39     C:\Windows\system32\jupdate-1.6.0_24-b07.log --------- 3305  
 14.03.2011 15:57     C:\Windows\system32\TubeFinder.exe --------- 307200  
 13.03.2011 14:00     C:\Windows\system32\config --------- 12288  
 13.03.2011 14:00     C:\Windows\system32\Msdtc --------- 4096  
 13.03.2011 14:00     C:\Windows\system32\spool --------- 4096  
 12.03.2011 23:55     C:\Windows\system32\XpsPrint.dll --------- 876032  
 10.03.2011 19:03     C:\Windows\system32\mfc42u.dll --------- 1162240  
 10.03.2011 19:03     C:\Windows\system32\mfc42.dll --------- 1136640  
 03.03.2011 17:42     C:\Windows\system32\inetcomm.dll --------- 739328  
 03.03.2011 17:40     C:\Windows\system32\Apphlpdm.dll --------- 28672  
 03.03.2011 15:35     C:\Windows\system32\GameUXLegacyGDFs.dll --------- 4240384  
 03.03.2011 15:25     C:\Windows\system32\win32k.sys --------- 2041856  
 02.03.2011 17:44     C:\Windows\system32\dnsrslvr.dll --------- 86528  
 02.03.2011 17:44     C:\Windows\system32\dnsapi.dll --------- 168448  
 22.02.2011 16:13     C:\Windows\system32\XpsGdiConverter.dll --------- 288768  
 22.02.2011 15:33     C:\Windows\system32\DWrite.dll --------- 1068544  
 22.02.2011 15:33     C:\Windows\system32\FntCache.dll --------- 797696  
 18.02.2011 17:36     C:\Windows\system32\usbaaplrc.dll --------- 4184352  
 16.02.2011 18:16     C:\Windows\system32\atmlib.dll --------- 34304  
 16.02.2011 16:02     C:\Windows\system32\atmfd.dll --------- 292864  
 02.02.2011 22:40     C:\Windows\system32\javaws.exe --------- 157472  
 02.02.2011 22:40     C:\Windows\system32\javaw.exe --------- 145184  
 02.02.2011 22:40     C:\Windows\system32\java.exe --------- 145184  
 02.02.2011 22:40     C:\Windows\system32\deployJava1.dll --------- 472808  
 02.02.2011 18:11     C:\Windows\system32\MpSigStub.exe --------- 222080  
----------------------------------------
 
 
C:\Windows\Prefetch
 
----------------------------------------
 
 
C:\Windows\Tasks
 
 02.05.2011 20:48     C:\Windows\Tasks\SA.DAT --------- 6  
 02.05.2011 20:47     C:\Windows\Tasks\SCHEDLGU.TXT --------- 32554  
----------------------------------------
 
 
C:\Windows\Temp
 
----------------------------------------
 
 
C:\Users\Timo\AppData\Local\Temp
 
 02.05.2011 20:53     C:\Users\Timo\AppData\Local\Temp\jusched.log --------- 401  
 02.05.2011 20:49     C:\Users\Timo\AppData\Local\Temp\LuUpdater.log --------- 0  
 02.05.2011 20:49     C:\Users\Timo\AppData\Local\Temp\div9A0.tmp --------- 0  
 02.05.2011 20:48     C:\Users\Timo\AppData\Local\Temp\AdobeARM.log --------- 815  
 02.05.2011 20:48     C:\Users\Timo\AppData\Local\Temp\WPDNSE --------- 0  
 02.05.2011 20:48     C:\Users\Timo\AppData\Local\Temp\Adobe --------- 0  
 02.05.2011 20:48     C:\Users\Timo\AppData\Local\Temp\Timo.bmp --------- 31832  
 02.05.2011 15:11     C:\Users\Timo\AppData\Local\Temp\History --------- 0  
 02.05.2011 15:11     C:\Users\Timo\AppData\Local\Temp\Cookies --------- 0  
 02.05.2011 15:11     C:\Users\Timo\AppData\Local\Temp\Temporary Internet Files --------- 0  
 01.05.2011 22:59     C:\Users\Timo\AppData\Local\Temp\Low --------- 0  
----------------------------------------
 
 
C:\Program Files
 
 02.05.2011 16:58     C:\Program Files\Malwarebytes' Anti-Malware --------- 4096  
 01.05.2011 22:59     C:\Program Files\CCleaner --------- 0  
 30.04.2011 13:18     C:\Program Files\Mozilla Firefox --------- 24576  
 27.04.2011 20:00     C:\Program Files\Free FLV Converter --------- 8192  
 25.04.2011 17:23     C:\Program Files\iTunes --------- 8192  
 25.04.2011 17:22     C:\Program Files\iPod --------- 0  
 25.04.2011 17:20     C:\Program Files\Bonjour --------- 4096  
 21.04.2011 21:57     C:\Program Files\Microsoft Silverlight --------- 4096  
 20.04.2011 19:32     C:\Program Files\InstallShield Installation Information --------- 20480  
 20.04.2011 19:32     C:\Program Files\Sony Ericsson --------- 0  
 19.04.2011 18:05     C:\Program Files\Internet Explorer --------- 4096  
 16.04.2011 13:48     C:\Program Files\Windows Mail --------- 4096  
 11.04.2011 10:32     C:\Program Files\DivX --------- 4096  
 11.04.2011 10:29     C:\Program Files\Real --------- 0  
 11.04.2011 10:29     C:\Program Files\Common Files --------- 8192  
 11.04.2011 10:28     C:\Program Files\eRightSoft --------- 0  
 03.04.2011 16:37     C:\Program Files\Microsoft SQL Server --------- 4096  
 28.03.2011 17:38     C:\Program Files\DVDVideoSoft --------- 0  
 26.03.2011 11:58     C:\Program Files\Microsoft --------- 0  
 20.03.2011 19:47     C:\Program Files\Windows Live --------- 4096  
 15.03.2011 22:39     C:\Program Files\Java --------- 4096  
 10.03.2011 18:53     C:\Program Files\Application Updater --------- 0  
 10.03.2011 18:53     C:\Program Files\pdfforge Toolbar --------- 0  
 01.02.2011 22:58     C:\Program Files\Freemake --------- 0  
 29.01.2011 13:48     C:\Program Files\Tersus Visual Programming Platform --------- 4096  
 26.01.2011 21:30     C:\Program Files\FreeTime --------- 0  
 25.01.2011 19:18     C:\Program Files\QuickMediaConverter --------- 0  
 15.01.2011 00:49     C:\Program Files\Microsoft Visual Studio 9.0 --------- 0  
 15.01.2011 00:42     C:\Program Files\Microsoft Synchronization Services --------- 0  
 15.01.2011 00:42     C:\Program Files\Microsoft SQL Server Compact Edition --------- 0  
 15.01.2011 00:38     C:\Program Files\Microsoft Visual Studio 10.0 --------- 4096  
 15.01.2011 00:36     C:\Program Files\Microsoft Help Viewer --------- 0  
 15.01.2011 00:36     C:\Program Files\Microsoft SDKs --------- 0  
 15.01.2011 00:36     C:\Program Files\MSBuild --------- 0  
 10.01.2011 23:09     C:\Program Files\Riva --------- 0  
 10.01.2011 23:04     C:\Program Files\AviSynth 2.5 --------- 0  
 10.01.2011 17:43     C:\Program Files\VideoLAN --------- 0  
 10.01.2011 17:30     C:\Program Files\SmarThru 4 --------- 28672  
 10.01.2011 17:29     C:\Program Files\Readiris10 --------- 40960  
 10.01.2011 17:20     C:\Program Files\Samsung --------- 0  
 08.01.2011 12:56     C:\Program Files\AVS4YOU --------- 0  
 08.01.2011 12:49     C:\Program Files\ALLCapture 3.0 Testversion --------- 8192  
 08.01.2011 12:43     C:\Program Files\Mainconcept --------- 0  
 08.01.2011 12:42     C:\Program Files\ProgDVB --------- 0  
 07.01.2011 19:43     C:\Program Files\SlySoft --------- 0  
 02.01.2011 17:30     C:\Program Files\ANNO 1602 K”nigs-Edition --------- 4096  
 02.01.2011 17:30     C:\Program Files\directx --------- 0  
 30.12.2010 20:38     C:\Program Files\Adobe --------- 0  
 14.12.2010 22:37     C:\Program Files\QuickTime --------- 4096  
 06.12.2010 18:34     C:\Program Files\Google --------- 4096  
 29.11.2010 22:03     C:\Program Files\Zattoo4 --------- 4096  
 29.11.2010 18:57     C:\Program Files\Apple Software Update --------- 4096  
 29.11.2010 18:51     C:\Program Files\GIMP-2.0 --------- 0  
 29.11.2010 18:34     C:\Program Files\Spamihilator --------- 8192  
 29.11.2010 18:26     C:\Program Files\Samsung Printers --------- 0  
 29.11.2010 13:59     C:\Program Files\PDFCreator --------- 4096  
 26.11.2010 13:22     C:\Program Files\Logitech --------- 0  
 26.11.2010 12:14     C:\Program Files\xp-AntiSpy --------- 4096  
 26.11.2010 11:56     C:\Program Files\Sony --------- 12288  
 26.11.2010 11:13     C:\Program Files\Cisco --------- 0  
 26.11.2010 11:10     C:\Program Files\ATI Technologies --------- 0  
 25.11.2010 23:53     C:\Program Files\Windows Portable Devices --------- 0  
 25.11.2010 20:56     C:\Program Files\Xvid --------- 4096  
 25.11.2010 20:54     C:\Program Files\WinRAR --------- 4096  
 25.11.2010 20:35     C:\Program Files\Windows Media Player --------- 4096  
 25.11.2010 20:35     C:\Program Files\Movie Maker --------- 4096  
 25.11.2010 17:35     C:\Program Files\Microsoft.NET --------- 4096  
 25.11.2010 16:53     C:\Program Files\Microsoft Works --------- 4096  
 25.11.2010 16:41     C:\Program Files\Microsoft Office --------- 4096  
 25.11.2010 16:20     C:\Program Files\Windows Calendar --------- 0  
 25.11.2010 16:20     C:\Program Files\Windows Sidebar --------- 4096  
 25.11.2010 16:20     C:\Program Files\Windows Collaboration --------- 4096  
 25.11.2010 16:20     C:\Program Files\Windows Journal --------- 4096  
 25.11.2010 16:20     C:\Program Files\Windows Photo Gallery --------- 4096  
 25.11.2010 16:20     C:\Program Files\Windows Defender --------- 4096  
 25.11.2010 15:48     C:\Program Files\Symantec --------- 0  
 25.11.2010 15:48     C:\Program Files\Norton AntiVirus --------- 0  
 25.11.2010 15:46     C:\Program Files\NortonInstaller --------- 0  
 25.11.2010 14:05     C:\Program Files\Gemeinsame Dateien --------- 0  
 25.11.2010 14:05     C:\Program Files\Windows NT --------- 4096  
 25.11.2010 08:29     C:\Program Files\Intel --------- 0  
 25.11.2010 08:28     C:\Program Files\InterVideo --------- 0  
 25.11.2010 08:24     C:\Program Files\ArcSoft --------- 0  
 25.11.2010 08:16     C:\Program Files\Skype --------- 0  
 25.11.2010 08:16     C:\Program Files\Roxio --------- 4096  
 25.11.2010 07:59     C:\Program Files\Google BAE --------- 0  
 25.11.2010 07:58     C:\Program Files\ATI --------- 0  
 25.11.2010 07:54     C:\Program Files\Big Fish Games Spiel-Suite --------- 4096  
 25.11.2010 07:53     C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites --------- 8192  
 10.07.2008 11:41     C:\Program Files\Synaptics --------- 0  
 10.07.2008 11:41     C:\Program Files\CONEXANT --------- 0  
 10.07.2008 11:39     C:\Program Files\Realtek --------- 0  
 21.01.2008 04:43     C:\Program Files\desktop.ini --------- 174  
 02.11.2006 15:01     C:\Program Files\Uninstall Information --------- 0  
 02.11.2006 14:37     C:\Program Files\Microsoft Games --------- 4096  
 02.11.2006 14:37     C:\Program Files\Reference Assemblies --------- 0  
----------------------------------------
 
 
C:\ProgramData\.. 
 
Timo    
Public    
Default    
desktop.ini    
Default User    
All Users    
----------------------------------------
 
 
C:\Windows\system32\drivers\etc\hosts
 
127.0.0.1       localhost
::1             localhost
 
----------------------------------------
 
 
 
Abbildname                     PID Sitzungsname       Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                   0            24 K
System                           4 Services                   0        15'364 K
smss.exe                       504 Services                   0           772 K
csrss.exe                      636 Services                   0         6'196 K
wininit.exe                    700 Services                   0         4'084 K
csrss.exe                      712 Console                    1        10'376 K
services.exe                   744 Services                   0         6'968 K
lsass.exe                      760 Services                   0         2'316 K
lsm.exe                        768 Services                   0         3'992 K
winlogon.exe                   836 Console                    1         5'784 K
svchost.exe                    960 Services                   0         5'820 K
svchost.exe                   1020 Services                   0         6'808 K
svchost.exe                   1056 Services                   0        38'192 K
Ati2evxx.exe                  1156 Services                   0         4'244 K
svchost.exe                   1208 Services                   0        13'444 K
svchost.exe                   1248 Services                   0        74'036 K
svchost.exe                   1268 Services                   0        28'920 K
audiodg.exe                   1336 Services                   0        17'176 K
svchost.exe                   1360 Services                   0         4'772 K
SLsvc.exe                     1376 Services                   0        11'592 K
svchost.exe                   1400 Services                   0        10'684 K
RTKAUDIOSERVICE.EXE           1496 Services                   0         3'136 K
dwm.exe                       1684 Console                    1        45'656 K
explorer.exe                  1716 Console                    1        48'316 K
Ati2evxx.exe                  1816 Console                    1         6'296 K
svchost.exe                   1900 Services                   0        14'916 K
wlanext.exe                   2008 Services                   0        14'804 K
spoolsv.exe                    316 Services                   0        10'560 K
svchost.exe                    440 Services                   0        15'688 K
taskeng.exe                    592 Console                    1        10'680 K
AppleMobileDeviceService.     1620 Services                   0         6'912 K
ApplicationUpdater.exe        1424 Services                   0         3'504 K
mDNSResponder.exe             1896 Services                   0         4'976 K
EvtEng.exe                    1120 Services                   0        15'912 K
iviRegMgr.exe                 2080 Services                   0         3'312 K
sqlservr.exe                  2116 Services                   0         1'952 K
sqlservr.exe                  2204 Services                   0        43'360 K
ccsvchst.exe                  2272 Services                   0        10'424 K
svchost.exe                   2356 Services                   0         5'240 K
RegSrvc.exe                   2376 Services                   0         4'392 K
SeaPort.EXE                   2400 Services                   0         8'316 K
sqlbrowser.exe                2448 Services                   0         3'588 K
sqlwriter.exe                 2492 Services                   0         7'076 K
svchost.exe                   2572 Services                   0         6'900 K
SPMService.exe                2608 Services                   0        28'544 K
WLIDSVC.EXE                   2696 Services                   0         8'936 K
SearchIndexer.exe             2732 Services                   0        18'376 K
XAudio.exe                    2868 Services                   0         2'480 K
WLIDSVCM.EXE                  2916 Services                   0         2'812 K
WUDFHost.exe                  3088 Services                   0         5'040 K
ccsvchst.exe                  3224 Console                    1        10'332 K
WmiPrvSE.exe                  3332 Services                   0         6'132 K
SPMgr.exe                     3632 Console                    1         4'900 K
taskeng.exe                   3680 Console                    1         4'908 K
VAIOUpdt.exe                  3780 Console                    1         7'308 K
MSASCui.exe                   1236 Console                    1        17'828 K
SynTPEnh.exe                  2220 Console                    1         6'612 K
ISBMgr.exe                    2344 Console                    1         5'956 K
taskeng.exe                   3608 Services                   0         5'508 K
dllhost.exe                   3016 Services                   0         3'968 K
MOM.exe                       4124 Console                    1        11'088 K
SetPoint.exe                  4220 Console                    1        13'228 K
Scan2pc.exe                   4336 Console                    1         8'700 K
SSMMgr.exe                    4352 Console                    1         4'812 K
SearchSettings.exe            4384 Console                    1         8'656 K
jusched.exe                   4608 Console                    1         3'720 K
mobsync.exe                   4624 Console                    1         6'876 K
DivXUpdate.exe                4652 Console                    1        14'360 K
iTunesHelper.exe              4696 Console                    1        11'924 K
ONENOTEM.EXE                  4980 Console                    1           700 K
spamihilator.exe              4988 Console                    1         4'844 K
KHALMNPR.exe                  5016 Console                    1         9'716 K
iPodService.exe               5584 Services                   0         5'236 K
CCC.exe                       5792 Console                    1        24'964 K
svchost.exe                   1672 Services                   0         6'180 K
firefox.exe                   1048 Console                    1        78'924 K
plugin-container.exe          3524 Console                    1        19'432 K
OTL.exe                       5528 Console                    1        29'020 K
SearchProtocolHost.exe        4720 Services                   0         8'704 K
cmd.exe                       4900 Console                    1         3'032 K
conime.exe                    3244 Console                    1         3'376 K
notepad.exe                   5944 Console                    1         4'624 K
notepad.exe                   3876 Console                    1         7'428 K
dllhost.exe                   5188 Console                    1         4'176 K
tasklist.exe                  5716 Console                    1         4'736 K
WmiPrvSE.exe                  3592 Services                   0         5'800 K
SearchFilterHost.exe          2480 Services                   0         4'452 K
 
 
***** Ende des Scans 02.05.2011 um 20:58:10.57 ***
         
Und noch Nummer 4:
:
Code:
ATTFilter
Activation Assistant for the 2007 Microsoft Office suites    Microsoft Corporation    24.11.2010    13.1MB    
Adobe Flash Player 10 Plugin    Adobe Systems Incorporated    25.04.2011        10.2.159.1
Adobe Flash Player ActiveX    Adobe Systems Incorporated    24.11.2010        9.0.124.0
Adobe Reader X (10.0.1) - Deutsch    Adobe Systems Incorporated    11.02.2011    114.8MB    10.0.1
ANNO 1602 Königs-Edition        01.01.2011    100.3MB    1.00
Apple Application Support    Apple Inc.    24.04.2011    50.5MB    1.5.1
Apple Mobile Device Support    Apple Inc.    07.03.2011    21.3MB    3.4.0.25
Apple Software Update    Apple Inc.    28.11.2010    2.21MB    2.1.2.120
ArcSoft WebCam Companion 2    ArcSoft    24.11.2010    22.5MB    
ATI Catalyst Install Manager    ATI Technologies, Inc.    25.11.2010    13.7MB    3.0.710.0
Big Fish Games Spiel-Suite        24.11.2010    160.5MB    
Bing Bar    Microsoft Corporation    25.03.2011    18.8MB    7.0.609.0
Bonjour    Apple Inc.    24.04.2011    1.09MB    2.0.5.0
Browser Address Error Redirector        24.11.2010        
CCleaner    Piriform    30.04.2011    2.90MB    3.06
Click to Disc    Sony Corporation    25.11.2010    67.9MB    1.2.73.04270
Click to Disc Editor    Sony Corporation    25.11.2010    185.4MB    2.0.03.04150
Dev-C++ 5 beta 9 release (4.9.9.2)        14.01.2011        
DivX-Setup    DivX, LLC    10.04.2011    2.24MB    2.4.1.4
Free Audio CD Burner version 1.4.7    DVDVideoSoft Limited.    27.03.2011    3.04MB    
Free FLV Converter V 6.96.0    Koyote Soft    26.04.2011    11.5MB    6.96.0.0
Free YouTube to MP3 Converter version 3.9.35.324    DVDVideoSoft Limited.    27.03.2011    3.71MB    
Freemake Video Converter Version 2.0.1    Ellora Assets Corporation    31.01.2011    39.6MB    2.0.1
GIMP 2.6.11    The GIMP Team    28.11.2010    109.0MB    2.6.11
Google Chrome    Google Inc.    05.12.2010    156.2MB    8.0.552.215
Google Earth    Google    24.11.2010    31.9MB    4.2.198.2451
HDAUDIO SoftV92 Data Fax Modem with SmartCP        09.07.2008    1.01MB    
Intel(R) PROSet/Wireless WiFi-Software    Intel(R) Corporation    25.11.2010    79.0MB    12.04.3000
iTunes    Apple Inc.    24.04.2011    141.8MB    10.2.2.12
Java(TM) 6 Update 24    Oracle    20.12.2010    95.0MB    6.0.240
Java(TM) 6 Update 6    Sun Microsystems, Inc.    09.07.2008    171.1MB    1.6.0.60
Logitech SetPoint 6.20    Logitech    25.11.2010        6.20.64
Malwarebytes' Anti-Malware    Malwarebytes Corporation    01.05.2011    4.73MB    
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU    Microsoft Corporation    24.11.2010    36.7MB    
Microsoft .NET Framework 3.5 SP1    Microsoft Corporation    24.11.2010    36.7MB    
Microsoft .NET Framework 4 Client Profile    Microsoft Corporation    24.11.2010    120.2MB    4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack    Microsoft Corporation    24.11.2010    24.5MB    4.0.30319
Microsoft .NET Framework 4 Extended    Microsoft Corporation    14.01.2011    45.9MB    4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack    Microsoft Corporation    14.01.2011    11.6MB    4.0.30319
Microsoft .NET Framework 4 Multi-Targeting Pack    Microsoft Corporation    13.01.2011    83.2MB    4.0.30319
Microsoft Help Viewer 1.0    Microsoft Corporation    14.01.2011    6.04MB    1.0.30319
Microsoft Help Viewer 1.0 Language Pack - DEU    Microsoft Corporation    14.01.2011    6.04MB    1.0.30319
Microsoft Office 2003 Web Components    Microsoft Corporation    25.11.2010    21.7MB    11.0.8003.0
Microsoft Office Home and Student 2007    Microsoft Corporation    24.11.2010    307MB    12.0.6425.1000
Microsoft Silverlight    Microsoft Corporation    20.04.2011    20.1MB    4.0.60310.0
Microsoft SQL Server 2005    Microsoft Corporation    24.11.2010    42.5MB    
Microsoft SQL Server 2005 Compact Edition [ENU]    Microsoft Corporation    28.11.2010    1.73MB    3.1.0000
Microsoft SQL Server 2008    Microsoft Corporation    14.01.2011    563MB    
Microsoft SQL Server 2008 Browser    Microsoft Corporation    13.01.2011    7.99MB    10.1.2531.0
Microsoft SQL Server 2008 Native Client    Microsoft Corporation    13.01.2011    3.23MB    10.1.2531.0
Microsoft SQL Server Compact 3.5 SP2 DEU    Microsoft Corporation    13.01.2011    3.66MB    3.5.8080.0
Microsoft SQL Server Native Client    Microsoft Corporation    02.04.2011    2.63MB    9.00.5000.00
Microsoft SQL Server VSS Writer    Microsoft Corporation    13.01.2011    1.79MB    10.1.2531.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053    Microsoft Corporation    25.11.2010    0.24MB    8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable - KB2467175    Microsoft Corporation    18.04.2011    0.30MB    8.0.51011
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148    Microsoft Corporation    25.11.2010    0.19MB    9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570    Microsoft Corporation    18.04.2011    0.58MB    9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17    Microsoft Corporation    25.11.2010    0.57MB    9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974    Microsoft Corporation    13.01.2011    0.58MB    9.0.30729.4974
Microsoft Visual C++ 2010 Express - DEU    Microsoft Corporation    14.01.2011    387MB    10.0.30319
Mozilla Firefox (3.6.17)    Mozilla    29.04.2011    29.3MB    3.6.17 (de)
MSXML 4.0 SP2 (KB954430)    Microsoft Corporation    24.11.2010    35.00KB    4.20.9870.0
MSXML 4.0 SP2 (KB973688)    Microsoft Corporation    24.11.2010    1.33MB    4.20.9876.0
Music Transfer    Sony Corporation    24.11.2010    40.6MB    1.2.00.17290
Norton AntiVirus    Symantec Corporation    24.11.2010    69.3MB    18.5.0.125
OpenMG Secure Module 5.4.00    Sony Corporation    25.11.2010        5.4.00.04020
PDFCreator    Frank Heindörfer, Philip Chinery    28.11.2010    24.9MB    1.1.0
pdfforge Toolbar v4.3    Spigot, Inc.    09.03.2011    2.44MB    4.3
QuickTime    Apple Inc.    13.12.2010    72.9MB    7.69.80.9
Readiris Pro 10        09.01.2011    99.8MB    
Realtek High Definition Audio Driver    Realtek Semiconductor Corp.    09.07.2008    22.0MB    6.0.1.5653
Roxio Easy Media Creator 10 LJ    Roxio    24.11.2010    5.22MB    10.1
Samsung CLX-216x Series    Samsung Electronics CO.,LTD    09.01.2011    238MB    
Samsung Universal Print Driver    Samsung Electronics Co., Ltd.    28.11.2010    2.39MB    2.02.05.00:24
Setting Utility Series    Sony Corporation    09.07.2008    10.3MB    4.1.00.07030
Skype™ 3.8    Skype Technologies S.A.    24.11.2010    27.9MB    3.8.115
SmarThru 4        09.01.2011    12.9MB    
Spamihilator 0.9.9.53 (32-Bit)    Michel Krämer    28.11.2010    5.41MB    0.9.9.53
Synaptics Pointing Device Driver    Synaptics    09.07.2008    12.9MB    9.1.13.0
Uninstall 1.0.0.1        27.03.2011    31.1MB    
Unity Web Player    Unity Technologies ApS    17.12.2010    0.20MB    
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)    Microsoft Corporation    02.04.2011    23.2MB    9.00.5000.00
Unterstützungsdateien für Microsoft SQL Server 2008-Setup     Microsoft Corporation    13.01.2011    29.8MB    10.1.2731.0
VAIO Control Center    Sony Corporation    09.07.2008    4.63MB    3.1.00.07040
VAIO Data Restore Tool    Sony Corporation    24.11.2010    6.49MB    1.0.04.01170
VAIO Energie Verwaltung    Sony Corporation    09.07.2008    6.33MB    3.1.00.06190
VAIO Guide    Sony Corporation    24.11.2010    10.3MB    2.4.00.06190
VAIO Launcher    Sony Corporation    24.11.2010    7.45MB    2.1.00.06130
VAIO Original Funktion Einstellungen    Sony Corporation    25.11.2010    1.76MB    2.0.2.02240
VAIO Update    Sony Corporation    25.11.2010    17.3MB    5.1.1.04090
VLC media player 1.1.7    VideoLAN    05.02.2011    77.4MB    1.1.7
Windows Live Essentials    Microsoft Corporation    20.03.2011        15.4.3508.1109
Windows Live Mesh ActiveX control for remote connections    Microsoft Corporation    28.11.2010    5.57MB    15.4.5722.2
WinDVD for VAIO    InterVideo Inc.    24.11.2010    96.5MB    8.0-B9.513
WinRAR        24.11.2010    3.77MB    
Worms for Pocket PC        25.12.2010        
xp-AntiSpy 3.97-9    Christian Taubenheim    25.11.2010    0.65MB    
Xvid 1.2.2 final uninstall    Xvid team (Koepi)    24.11.2010    0.75MB    1.2
Zattoo4 4.0.5    Zattoo Inc.    28.11.2010    39.9MB    4.0.5
         
Ich hoffe du kannst mit dem etwas anfangen.

Alt 02.05.2011, 22:31   #9
kira
/// Helfer-Team
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



1.
Die alte Java-Versionen verbleiben auf dem PC...aus Sicherheitsgründen müssen entfernt werden,auch in Zukunft darauf achten!
Falls nach einen neuen Systemstart noch existieren, die alten Einträge bitte deinstallieren
Code:
ATTFilter
Java(TM) 6 Update 6
         
2.
deinstalliere:
unter `Systemsteuerung -->Software -->Ändern/Entfernen...`
Code:
ATTFilter
pdfforge Toolbar <- Adware -Toolbar
         
Bestandteile der Standardinstallation vieler Freeware-Programme und teilweise sogar von kostenpflichtigen Programmen. Daher:
Immer die benutzerdefinierte Installation wählen, nicht die Standardinstallation, weil dann oft Sachen mitinstalliert werden, die man nicht braucht oder nicht möchte.
Bei Installation bitte die Lizenzbestimmungen immer lesen, und nicht sofort überall den Haken setzen bzw gesetzten Haken belassen, weil damit stimmt man nämlich zu, dass andere "Fremdprogramm", oder sogar Adware (Werbe-Pop-ups) durch Partnerprogrammen, Sponsoren etc - mitinstalliert wird, weil sich Freeware damit finanziert.

in diese Kategorie gehören noch einige, wie z.B: -> Unerwünschte Toolbars deinstallieren

3.
Zitat:
**Vor dem Löschen temporärer Dateien sollte man unbedingt alle Anwendungen beenden!
**lösche nur den Inhalt der Ordner, nicht die Ordner selbst!
**Der Temp Ordner,ist für temporäre Dateien,also der Inhalt kann man ohne weiteres löschen.- Dateien, die noch in Benutzung sind,nicht löschbar.
alle Anwendungen schließen → Ordner für temporäre Dateien bitte leeren
lösche nur den Inhalt der Ordner, nicht die Ordner selbst! - Dateien, die noch in Benutzung sind,nicht löschbar.
gib in der Suchleiste unter dem Windows Start Button folgendes ein:
Code:
ATTFilter
 %temp%
         
Inhalt markieren und löschen:
- anschließend den Papierkorb leeren

4.
reinige dein System mit Ccleaner:
  • "Cleaner"→ "Analysieren"→ Klick auf den Button "Start CCleaner"
  • "Registry""Fehler suchen"→ "Fehler beheben"→ "Alle beheben"
  • Starte dein System neu auf

5.
erneut einen Scan mit OTL:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in Code-Tags hier in den Thread.
__________________

Warnung!:
Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein!
Anhang nicht öffnen, in unserem Forum erst nachfragen!

Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
Bitte diese Warnung weitergeben, wo Du nur kannst!

Alt 03.05.2011, 12:39   #10
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Ich kann den %temp% Ordner nicht finden, wenn ich nach ihm suche findet es Ihn nicht.
Wie kann ich Ihn sonst noch finden?

Aber kann ich den nicht auch mit dem CCleaner leeren?

Ach ja und noch eine Frage die beiden Dateien, die bei MBAM unter Quarantäne stehen, kann ich die endgültig löschen?

Alt 03.05.2011, 21:14   #11
kira
/// Helfer-Team
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Start-> Alle Programme-> Zubehör-> Ausführen-> dort %temp% reinschreiben...

mit CCleaner geht ja auch:
CCleaner als Admin starten => gehe auf den Button links oben "Cleaner", setze Häkchen unter Reiter "Windows" (alle außer "Eingabefeld Verlauf" und bei "Erweitert" nur ein Häkchen bei "Alte Prefetchdaten" und "Benutzerdefinierte Dateien und Ordner").
Einstellungen => Benutzerdefiniert => Zu bereinigende Dateien und Ordner => Ordner hinzufügen =>
Anstelle von <DeinBenutzername> trägst Du den Namen ein, mit dem Du bei Vista eingeloggt bist.

C:\Users\<DeinBenutzername>\AppData\Local\Temp\*.*
C:\Users\Default\AppData\Local\Temp\*.*
C:\Windows\Temp\*.*
__________________

Warnung!:
Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein!
Anhang nicht öffnen, in unserem Forum erst nachfragen!

Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
Bitte diese Warnung weitergeben, wo Du nur kannst!

Alt 03.05.2011, 21:58   #12
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Ich habe bereits diese Ordner.
C:\Users\xxxx\AppData\Local\Temp\*.*
C:\Windows\Temp\*.*
Wie kann ich diesen (C:\Users\Default\AppData\Local\Temp\*.*) erstellen, brauche ich den überhaupt?

Wie bereits gefragt, kann ich die beiden Datein die bei MBAM unter Quarantäne stehen endgültig löschen?

Alt 03.05.2011, 22:48   #13
kira
/// Helfer-Team
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



brauche ich den überhaupt?
nein, muss nicht

Wie bereits gefragt, kann ich die beiden Datein die bei MBAM unter Quarantäne stehen endgültig löschen?
ja natürlich
__________________

Warnung!:
Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein!
Anhang nicht öffnen, in unserem Forum erst nachfragen!

Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
Bitte diese Warnung weitergeben, wo Du nur kannst!

Alt 03.05.2011, 23:05   #14
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Also hier dir Ergebnisse von OTL:
:
Code:
ATTFilter
OTL logfile created on: 03.05.2011 23:53:28 - Run 2
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\xxx
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: xxxxxxx| Language: DES | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 53.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 106.34 Gb Free Space | 36.68% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: xxxxxx | User Name: xxxx| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Timo\Documents\sonstiges\Sonstiges\Sicherheit\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
PRC - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Sony Corporation)
PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
PRC - C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
PRC - C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe ()
PRC - c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\x\Documents\sonstiges\Sonstiges\Sicherheit\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (BBSvc) -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (NAV) -- C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccSvcHst.exe (Symantec Corporation)
SRV - (LBTServ) -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (Samsung UPD Service) -- C:\Windows\System32\SUPDSvc.exe (Samsung Electronics CO., LTD.)
SRV - (VUAgent) -- C:\Program Files\Sony\VAIO Update 5\VUAgent.exe (Sony Corporation)
SRV - (EvtEng) Intel(R) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV - (RegSrvc) Intel(R) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV - (PACSPTISVR) -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe (Sony Corporation)
SRV - (RtkAudioService) -- C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
SRV - (VAIO Power Management) -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (IviRegMgr) -- c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (BHDrvx86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20110430.001\BHDrvx86.sys (Symantec Corporation)
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110503.003\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110503.003\NAVENG.SYS (Symantec Corporation)
DRV - (IDSVix86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20110429.002\IDSvix86.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SYMTDIv) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SYMTDIV.SYS (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SymEvent) -- C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SRTSP) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\system32\drivers\NAV\1205000.07D\SRTSPX.SYS (Symantec Corporation)
DRV - (SymEFA) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymIRON) -- C:\Windows\system32\drivers\NAV\1205000.07D\Ironx86.SYS (Symantec Corporation)
DRV - (SymDS) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMDS.SYS (Symantec Corporation)
DRV - (LUsbFilt) -- C:\Windows\System32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouFilt) -- C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (s1039bus) Sony Ericsson Device 1039 driver (WDM) -- C:\Windows\System32\drivers\s1039bus.sys (MCCI Corporation)
DRV - (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS) -- C:\Windows\System32\drivers\s1039nd5.sys (MCCI Corporation)
DRV - (s1039mdm) -- C:\Windows\System32\drivers\s1039mdm.sys (MCCI Corporation)
DRV - (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM) -- C:\Windows\System32\drivers\s1039unic.sys (MCCI Corporation)
DRV - (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s1039mgmt.sys (MCCI Corporation)
DRV - (s1039obex) -- C:\Windows\System32\drivers\s1039obex.sys (MCCI Corporation)
DRV - (s1039mdfl) -- C:\Windows\System32\drivers\s1039mdfl.sys (MCCI Corporation)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (RsFx0103) -- C:\Windows\System32\drivers\RsFx0103.sys (Microsoft Corporation)
DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (DMICall) -- C:\Windows\System32\drivers\DMICall.sys (Sony Corporation)
DRV - (risdptsk) -- C:\Windows\System32\drivers\risdptsk.sys (REDC)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (SFEP) -- C:\Windows\System32\drivers\SFEP.sys (Sony Corporation)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (regi) -- C:\Windows\System32\drivers\regi.sys (InterVideo)
DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.SYS (Samsung Electronics)
DRV - (DgiVecp) -- C:\Windows\System32\drivers\DGIVECP.SYS (Samsung Electronics Co., Ltd.)
DRV - (pfc) -- C:\Windows\System32\drivers\pfc.sys (Padus, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://eu.ask.com?o=15780&l=dis
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.ch/"
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.1
FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.4.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPlgn\ [2011.01.14 18:35:42 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.04.30 13:18:27 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.04.30 13:18:27 | 000,000,000 | ---D | M]
 
[2010.11.25 20:45:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Extensions
[2011.05.03 13:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\x\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions
[2010.12.21 22:28:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\xxxx\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.02.10 18:47:22 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\xxxx\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.02.02 23:20:09 | 000,000,000 | ---D | M] (20-20 3D Viewer) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\2020Player@2020Technologies.com
[2010.09.28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\searchplugins\askcom.xml
[2011.05.03 13:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.12.21 18:11:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.03.15 22:40:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011.01.14 18:35:42 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPLGN
[2011.02.02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.10.27 07:44:13 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.10.27 07:44:13 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.10.27 07:44:13 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.10.27 07:44:13 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.10.27 07:44:13 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [Maple_S2P] C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - Startup: C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Timo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll -  File not found
O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\x\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\x\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) - F:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,000,766 | R--- | M] () - F:\Autorun.ico -- [ CDFS ]
O32 - AutoRun File - [2001.09.06 01:04:00 | 000,000,283 | R--- | M] () - F:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell\AutoRun\command - "" = G:\Startme.exe
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Acrobat\command - "" = F:\.\ar500deu.exe -- [2001.09.06 01:04:00 | 009,124,984 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN)
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\DirectX\command - "" = F:\.\DirectX\dxsetup.exe -- [2001.10.16 12:24:46 | 000,140,288 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Setup\command - "" = F:\.\Setup.exe -- [2002.12.02 15:33:00 | 000,107,512 | R--- | M] ()
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\Shell\AutoRun\command - "" = G:\wd_windows_tools\WDEULA.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.05.03 13:18:50 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{B8DE6097-E19B-4757-8F9E-BA1FCD00B02E}
[2011.05.02 16:58:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\Malwarebytes
[2011.05.02 16:58:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Malwarebytes' Anti-Malware
[2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.05.02 16:58:10 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.05.02 16:58:10 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.05.02 12:29:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{227CABBB-BF91-469F-8E02-D4D868EB4188}
[2011.05.01 15:19:45 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{1C9253E1-D764-429F-85F4-AA2052B834DF}
[2011.04.29 15:30:57 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{9802831A-8BF0-472C-921A-BC05E73CEEE3}
[2011.04.28 18:13:08 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{C651C691-93ED-4E9E-94B4-02731314E127}
[2011.04.27 20:00:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Free FLV Converter
[2011.04.27 20:00:17 | 000,000,000 | ---D | C] -- C:\Program Files\Free FLV Converter
[2011.04.27 17:22:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2011.04.27 17:22:26 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2011.04.27 17:22:22 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011.04.27 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{442D6840-DFC6-4D21-BDAC-44DEF9361D1B}
[2011.04.26 18:45:23 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{62042D88-21B2-49D2-9B41-BCCA7ED72F19}
[2011.04.25 17:23:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\iTunes
[2011.04.25 17:22:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011.04.25 17:22:44 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011.04.25 17:19:59 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011.04.25 13:48:05 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{23A5F032-A21F-4F28-85D9-A4FE4C85642A}
[2011.04.24 12:03:27 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{AFD43F2C-5F4F-495F-898D-F66F7301E02B}
[2011.04.23 22:03:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{6CE53D7B-F97B-408C-B5FC-386964457F1B}
[2011.04.23 00:20:31 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{1AE88077-B54F-49FA-B952-20C02E148367}
[2011.04.22 12:20:07 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Local\{EA904536-19B8-4BA0-A089-F1BB29F222EB}
[2011.04.21 16:51:26 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Local\{E8790765-5B89-44CD-AB59-0A1C66CE799C}
[2011.04.20 19:33:05 | 000,124,016 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdm.sys
[2011.04.20 19:33:05 | 000,123,504 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039unic.sys
[2011.04.20 19:33:05 | 000,117,872 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mgmt.sys
[2011.04.20 19:33:05 | 000,113,904 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039obex.sys
[2011.04.20 19:33:05 | 000,098,672 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039bus.sys
[2011.04.20 19:33:05 | 000,025,456 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039nd5.sys
[2011.04.20 19:33:05 | 000,014,960 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdfl.sys
[2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cmnt.sys
[2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cm.sys
[2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039whnt.sys
[2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039wh.sys
[2011.04.20 19:33:05 | 000,010,992 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cr.sys
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Sony Ericsson
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson
[2011.04.20 13:21:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{A93F3534-7BB5-402A-8155-74318E533724}
[2011.04.19 18:10:18 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{845A209A-BC21-4777-9122-6FD7E4A91BAF}
[2011.04.19 17:34:37 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011.04.19 17:34:37 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011.04.19 17:34:37 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011.04.19 17:34:37 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.19 17:34:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.19 17:34:36 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.19 17:34:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011.04.19 17:34:36 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011.04.19 17:34:35 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011.04.19 17:34:35 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011.04.19 17:34:35 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.19 17:34:35 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011.04.19 17:34:35 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.04.19 17:34:35 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011.04.19 17:34:35 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.19 17:34:35 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.19 17:34:35 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.19 17:34:34 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.19 17:34:34 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.19 17:34:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011.04.19 17:34:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011.04.19 17:34:34 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.19 17:34:33 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.19 17:34:33 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.19 17:34:33 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011.04.19 17:34:32 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.19 17:34:32 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011.04.19 17:34:32 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011.04.19 17:34:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.19 17:34:32 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011.04.19 17:34:32 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011.04.19 17:34:31 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.04.19 17:34:31 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.19 17:34:31 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011.04.19 17:34:31 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.19 17:34:31 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011.04.19 17:34:31 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.19 17:34:31 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011.04.19 17:34:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.16 00:30:31 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2011.04.15 17:50:29 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011.04.15 17:50:29 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011.04.15 17:50:13 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011.04.15 17:50:13 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011.04.15 17:50:03 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.04.15 17:49:59 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011.04.11 10:37:58 | 000,000,000 | ---D | C] -- C:\divx
[2011.04.10 18:37:46 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2011.04.10 18:37:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2011.04.10 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Roaming\Real
[2011.04.10 18:36:03 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft
[2011.04.10 17:59:57 | 000,000,000 | ---D | C] -- C:\OutputFolder
[2011.04.07 17:15:22 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Roaming\DonationCoder
[2011.04.07 17:15:21 | 000,000,000 | ---D | C] -- C:\Users\xxxx\Documents\DonationCoder
[2011.04.06 16:20:16 | 000,197,920 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011.04.06 16:20:16 | 000,107,808 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011.04.06 16:20:16 | 000,091,424 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011.04.06 16:20:16 | 000,075,040 | ---- | C] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.05.03 23:17:32 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.03 23:17:32 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.03 21:17:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.03 21:17:31 | 3186,659,328 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.01 23:31:53 | 000,056,832 | ---- | M] () -- C:\Users\xxxx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.05.01 22:59:09 | 000,000,764 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.04.26 22:37:39 | 000,002,593 | ---- | M] () -- C:\Users\xxxx\Desktop\Microsoft Office Excel 2007.lnk
[2011.04.25 19:43:51 | 000,002,591 | ---- | M] () -- C:\Users\xxxx\Desktop\Microsoft Office Word 2007.lnk
[2011.04.25 17:23:50 | 000,001,624 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.04.20 19:37:59 | 000,745,254 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.04.20 19:37:58 | 000,794,826 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.04.20 19:37:58 | 000,193,608 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.04.20 19:37:58 | 000,161,784 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.04.19 17:34:53 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2011.04.19 17:34:53 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2011.04.19 17:34:37 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011.04.19 17:34:37 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011.04.19 17:34:37 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011.04.19 17:34:37 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.19 17:34:36 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.19 17:34:36 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.19 17:34:36 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011.04.19 17:34:36 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011.04.19 17:34:35 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011.04.19 17:34:35 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011.04.19 17:34:35 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.19 17:34:35 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011.04.19 17:34:35 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.04.19 17:34:35 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011.04.19 17:34:35 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.19 17:34:35 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.19 17:34:35 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011.04.19 17:34:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.19 17:34:34 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.19 17:34:34 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.19 17:34:34 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011.04.19 17:34:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011.04.19 17:34:34 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.19 17:34:33 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.19 17:34:33 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.19 17:34:33 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011.04.19 17:34:32 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.19 17:34:32 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011.04.19 17:34:32 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011.04.19 17:34:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.19 17:34:32 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011.04.19 17:34:32 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011.04.19 17:34:31 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.04.19 17:34:31 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.19 17:34:31 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011.04.19 17:34:31 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.19 17:34:31 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011.04.19 17:34:31 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.19 17:34:31 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011.04.19 17:34:31 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.16 13:51:33 | 000,403,848 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.04.13 17:24:10 | 000,000,447 | ---- | M] () -- C:\Users\xxxx\Desktop\Schule - Verknüpfung.lnk
[2011.04.11 10:30:46 | 000,002,032 | ---- | M] () -- C:\Users\xxxx\AppData\Local\d3d9caps.dat
[2011.04.09 18:13:09 | 000,005,146 | ---- | M] () -- C:\Users\Timo\.recently-used.xbel
[2011.04.07 21:38:48 | 000,000,011 | R--- | M] () -- C:\Windows\amunres.lsl
[2011.04.07 17:15:22 | 000,000,058 | ---- | M] () -- C:\Users\xxxx\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.04.06 16:20:16 | 000,197,920 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011.04.06 16:20:16 | 000,107,808 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011.04.06 16:20:16 | 000,091,424 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011.04.06 16:20:16 | 000,075,040 | ---- | M] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
 
========== Files Created - No Company Name ==========
 
[2011.04.25 17:23:50 | 000,001,624 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.04.19 17:34:35 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011.04.13 17:24:10 | 000,000,447 | ---- | C] () -- C:\Users\xxxx\Desktop\Schule - Verknüpfung.lnk
[2011.04.09 18:13:09 | 000,005,146 | ---- | C] () -- C:\Users\Timo\.recently-used.xbel
[2011.04.07 21:38:48 | 000,000,011 | R--- | C] () -- C:\Windows\amunres.lsl
[2011.04.07 17:15:22 | 000,000,058 | ---- | C] () -- C:\Users\xxxx\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.01.10 23:04:20 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2011.01.10 17:30:47 | 000,010,231 | ---- | C] () -- C:\Users\xxxx\AppData\Roaming\SmarThruOptions.xml
[2011.01.10 17:30:35 | 000,036,864 | ---- | C] () -- C:\Windows\System32\SvcMan.exe
[2011.01.10 17:30:03 | 000,172,032 | ---- | C] () -- C:\Windows\System32\SecSNMP.dll
[2011.01.10 17:29:46 | 000,000,124 | ---- | C] () -- C:\Windows\Readiris.ini
[2011.01.10 17:29:42 | 000,023,040 | ---- | C] () -- C:\Windows\System32\irisco32.dll
[2011.01.10 17:27:03 | 000,458,752 | ---- | C] () -- C:\Windows\ssndii.exe
[2011.01.10 17:22:57 | 000,086,016 | R--- | C] () -- C:\Windows\WiaInst.exe
[2011.01.10 17:21:48 | 000,217,088 | R--- | C] () -- C:\Windows\System32\ssminidriver.dll
[2011.01.10 17:21:48 | 000,027,136 | R--- | C] () -- C:\Windows\System32\ssimgfilter.dll
[2011.01.10 17:21:48 | 000,011,264 | R--- | C] () -- C:\Windows\System32\sssegfilter.dll
[2011.01.10 17:21:48 | 000,010,752 | R--- | C] () -- C:\Windows\System32\sserrhandler.dll
[2011.01.10 17:20:21 | 000,022,723 | ---- | C] () -- C:\Windows\System32\cx21sl3.dll
[2010.11.29 23:06:13 | 000,000,079 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010.11.29 22:06:15 | 000,017,408 | ---- | C] () -- C:\Users\xxxx\AppData\Local\WebpageIcons.db
[2010.11.29 20:10:47 | 000,056,832 | ---- | C] () -- C:\Users\xxxx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.29 18:25:12 | 000,026,624 | ---- | C] () -- C:\Windows\System32\spd__l.dll
[2010.11.29 18:25:11 | 000,283,136 | ---- | C] () -- C:\Windows\System32\DscPnt.dll
[2010.11.29 18:25:11 | 000,259,888 | ---- | C] () -- C:\Windows\SUPDRun.exe
[2010.11.29 18:25:11 | 000,151,552 | ---- | C] () -- C:\Windows\System32\spd__ci.exe
[2010.11.29 13:59:13 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2010.11.25 20:56:16 | 000,524,288 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010.11.25 20:56:16 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010.11.25 16:02:30 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010.11.25 16:02:00 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010.11.25 16:02:00 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010.11.25 14:09:21 | 000,002,032 | ---- | C] () -- C:\Users\xxxx\AppData\Local\d3d9caps.dat
[2010.11.25 08:24:42 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI
[2009.08.03 16:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009.08.03 16:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2009.05.14 23:22:08 | 000,011,264 | ---- | C] () -- C:\Windows\System32\atimuixx.dll
[2008.10.29 18:13:34 | 000,180,720 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2008.07.10 21:07:09 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1511.dll
[2008.07.10 21:07:08 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2008.07.10 21:07:08 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2008.07.10 21:07:08 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe
[2008.07.10 21:04:31 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2008.07.10 11:22:18 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2008.01.21 09:15:58 | 000,794,826 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.01.21 09:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.01.21 09:15:58 | 000,193,608 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.01.21 09:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 14:47:37 | 000,403,848 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 12:33:01 | 000,745,254 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 12:33:01 | 000,161,784 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2002.09.18 00:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 728 bytes -> C:\Users\xxxx\Documents\Französisch.eml:OECustomProperty

< End of report >
         

Alt 03.05.2011, 23:09   #15
glamp95
 
Msn verschickt Spam! - Standard

Msn verschickt Spam!



Hier noch das zweite Ergebniss:
:OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 03.05.2011 23:53:28 - Run 2
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\x\Documents\sonstiges\Sonstiges\Sicherheit
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: xxxx| Language: xxx| Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 53.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 106.34 Gb Free Space | 36.68% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: x-MOBIL | User Name: x| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{401FF33D-6A49-4D27-BBDC-288AEC1B47AD}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{904A90D9-9334-44C7-84F4-19FBE45F3126}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | 
"{FFDFCD60-B8C4-466B-82DE-C37E26F0E777}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0997A8ED-77C6-4B94-9A5F-76027ADAF832}" = protocol=6 | dir=in | app=c:\program files\spamihilator\cdcc.exe | 
"{232838F7-EB3D-4154-8350-2D52133D83EE}" = protocol=17 | dir=in | app=c:\windows\system32\supdsvc.exe | 
"{41EAD167-C645-4291-988C-5E5FB5D96D14}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4E86B8B3-90AF-41B2-803E-08F68EF5DD05}" = protocol=6 | dir=in | app=c:\windows\system32\supdsvc.exe | 
"{7BB77A5D-DD19-48C1-94DE-84CEAA164402}" = protocol=6 | dir=in | app=c:\program files\spamihilator\spamihilator.exe | 
"{870998A7-077C-44F9-B329-07BB00BFE55B}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{8C5B5EDE-EC52-4FB0-88B2-53ABF6E23750}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{94752534-85DD-439D-9702-CE8A9F95CE99}" = dir=in | app=c:\program files\windows live\mesh\moe.exe | 
"{98439142-B30E-4303-A3BE-5078232DB6AE}" = protocol=6 | dir=in | app=c:\program files\spamihilator\dccproc.exe | 
"{9F2751DE-ECD1-407C-9DDB-0E12AA96A150}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{A68D62C1-2C51-4B3F-9232-9632E3CD4AEC}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{B2133616-A3F7-49B3-9DCD-EC1840293301}" = protocol=17 | dir=in | app=c:\program files\spamihilator\spamihilator.exe | 
"{CE35DEE9-D716-47B8-A16D-D010D06BD81E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{DB9F1547-3694-4EF1-914C-0F870F1F6091}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{E08C5138-0E63-4839-BD60-26E3321AB30E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{E625A7E7-FFE7-46F7-AB6F-33F118F5F629}" = protocol=17 | dir=in | app=c:\program files\spamihilator\cdcc.exe | 
"{F1E851DF-11D8-42F5-947E-6CFDF69F6CDC}" = protocol=17 | dir=in | app=c:\program files\spamihilator\dccproc.exe | 
"TCP Query User{BF006466-157E-4246-A8A3-1E8C88211742}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"UDP Query User{18A8ACC5-B149-4E3C-A053-817CC2E96366}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{077A7810-A937-4465-AD08-ACED9807995F}" = ANNO 1602 Königs-Edition
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Central Data
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B9B76C9-4967-59FC-C994-191AEA152F04}" = ATI Catalyst Install Manager
"{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1C2B3CEA-482E-4453-B3E2-C9731337828A}" = Microsoft SQL Server 2008 Native Client
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Central Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{202F2838-156B-FC76-013F-9241B9673F39}" = CCC Help Thai
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 24
"{2B4E24A0-A06F-488D-87D8-16738E5E1104}" = Windows Live Family Safety
"{325ED81A-EC15-7CE8-729B-0392A1DD3854}" = CCC Help Czech
"{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIO Guide
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver
"{353FE16B-30FE-469A-BF55-B978F4218003}" = iTunes
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCA23DD-CEDA-CC7F-C74C-4D1EDAE919AA}" = Catalyst Control Center Graphics Full New
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{42DD2173-B7CA-8AB3-8AC2-40DFE2CA6FBC}" = CCC Help German
"{430DD2C5-65FD-9781-F9F2-693CAF05CD10}" = Catalyst Control Center InstallProxy
"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{49B8916D-1DEA-F18A-731F-BF0FE209C63B}" = CCC Help Chinese Standard
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser
"{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"{4EEAF8D8-CB79-06CA-A566-EAC1726DAABB}" = CCC Help Finnish
"{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Easy Media Creator 10 LJ
"{540DB82A-EE11-BBC1-8BD8-BB7D937A53A4}" = CCC Help Hungarian
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5882396B-9FB3-37AC-1AE1-5EA344BD7705}" = Catalyst Control Center Graphics Previews Vista
"{5BA149D9-D5FA-5AB3-400B-9F1BF424B7CE}" = CCC Help Chinese Traditional
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5C5EE8F2-0B38-4C13-AE4E-A87A237FE718}" = 
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F5867F0-2D23-4338-A206-01A76C823924}" = VAIO Energie Verwaltung
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{642F96CC-1D3B-20DE-8673-44EE15B3DC2F}" = CCC Help Portuguese
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = Click to Disc
"{6D26ACF9-4919-0744-C509-28EAF53112D4}" = CCC Help Dutch
"{6E9CFEF5-0245-411F-8587-CF83DF9D4B05}" = Microsoft SQL Server 2008 Database Engine Services
"{71256374-2053-CF0F-BD54-20082980B95C}" = Catalyst Control Center Graphics Full Existing
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{72EEB695-388B-4835-8EA6-0C04545B06B9}" = Intel(R) PROSet/Wireless WiFi-Software
"{737D8F4D-24D4-D626-DEC0-9E39A6166890}" = CCC Help Danish
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Central Audio
"{74B705C2-173A-FFD1-98BC-AD5FB647AB38}" = CCC Help Polish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{784BDC03-2D22-BCAE-5CAC-84AFA799FBDE}" = CCC Help Turkish
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7C404084-C5A6-42FF-B731-0BAC79A6E134}" = VAIO Original Funktion Einstellungen
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{8572CE7D-46B0-70B3-96CD-534F07B35F5D}" = CCC Help Italian
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87544F2E-CCA5-01BC-AEBC-D8C1D759EE61}" = CCC Help English
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ED5D0B7-A193-413F-815A-530BE36B38F7}" = Spamihilator 0.9.9.53 (32-Bit)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90A40407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{90B38901-52C8-85A7-D6C8-9A5592C9FCAA}" = CCC Help Greek
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95229EF6-F4A1-413A-BA50-668311FAFE19}" = VAIO Original Function Settings
"{9648D00F-0589-619B-6114-BF2A0620168B}" = CCC Help Korean
"{96D0B6C6-5A72-4B47-8583-A87E55F5FE81}" = 
"{9805E4EE-9B66-CABD-AF6B-4B84F2A8EF46}" = Skins
"{9973498D-EA29-4A68-BE0B-C88D6E03E928}" = ArcSoft WebCam Companion 2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AA2D735-3375-42D4-9A61-3FFEF82599D6}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup 
"{9AC34FA1-BCDE-1D09-5DB7-EB6A064FDEA9}" = CCC Help Spanish
"{9B973FC0-E71F-6F89-10D6-1BFD063D1707}" = CCC Help Swedish
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9EAC0E21-510E-4259-A9C6-F5D5B8969036}" = Catalyst Control Center - Branding
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A3979A05-6834-D0A7-75CD-71B5A9E5F4C0}" = Catalyst Control Center Localization All
"{A6F21795-E629-35B2-9487-00A8363B28AA}" = Catalyst Control Center Graphics Light
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Central Copy
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B8E9F8A1-9F4D-43D5-ABD6-1DF067FAA469}" = Microsoft SQL Server 2008 Database Engine Services
"{C0AD2831-3398-A078-CBEB-39A6B381BB56}" = CCC Help Japanese
"{C18A02EC-966B-E7A7-9AC9-082F770ABF9B}" = CCC Help Russian
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{C9C390CC-F9B9-EFE8-27DF-6EB7FF8F8760}" = CCC Help Norwegian
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CD431A7B-88D8-0823-E66F-CCFAEA6DA7B4}" = ccc-core-static
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF0F8D1B-5FB9-468D-BD88-E6239906D2B7}" = Click to Disc
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D47E6B9C-F5A5-23B7-AB6A-3806AD4C9529}" = ccc-utility
"{D6DA6836-77C2-5338-10E3-D7A6CD65681D}" = Catalyst Control Center Core Implementation
"{DA8F979E-43B9-3EEC-721C-F297D9509992}" = Catalyst Control Center Graphics Previews Common
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Central Core
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}" = Microsoft SQL Server Native Client
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" = 
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FE0782BC-7AB0-CF6A-6E38-D3040462C7EC}" = CCC Help French
"{FE51662F-D8F6-43B5-99D9-D4894AF00F83}" = Roxio Easy Media Creator Home
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"BFG-Big Fish Games Spiel-Suite" = Big Fish Games Spiel-Suite
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DivX Setup.divx.com" = DivX-Setup
"dt icon module" = 
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free FLV Converter_is1" = Free FLV Converter V 6.96.0
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324
"Freemake Video Converter_is1" = Freemake Video Converter Version 2.0.1
"gtfirstboot Setting Request" = 
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"InstallShield_{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MFU Module" = 
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"NAV" = Norton AntiVirus
"ProInst" = Intel PROSet Wireless
"Samsung CLX-216x Series" = Samsung CLX-216x Series
"Samsung Universal Print Driver" = Samsung Universal Print Driver
"sp6" = Logitech SetPoint 6.20
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"VAIO Help and Support" = 
"VLC media player" = VLC media player 1.1.7
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Worms for Pocket PC" = Worms for Pocket PC
"xp-AntiSpy" = xp-AntiSpy 3.97-9
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Zattoo4" = Zattoo4 4.0.5
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 26.04.2011 12:44:27 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description = 
 
Error - 26.04.2011 13:07:56 | Computer Name = x-Mobil | Source = EventSystem | ID = x
Description = 
 
Error - 26.04.2011 16:12:40 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description = 
 
Error - 26.04.2011 17:16:02 | Computer Name = x-Mobil | Source = EventSystem | ID = 4621
Description = 
 
Error - 27.04.2011 11:13:22 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description = 
 
Error - 27.04.2011 14:07:05 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
 fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
 0xc0000005, Fehleroffset 0x7265766e,  Prozess-ID 0x150, Anwendungsstartzeit 01cc0505a59fd47e.
 
Error - 27.04.2011 14:08:09 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
 fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
 0xc0000005, Fehleroffset 0x7265766e,  Prozess-ID 0x1754, Anwendungsstartzeit 01cc0505a2c479ee.
 
Error - 27.04.2011 14:08:10 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
 fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
 0xc0000005, Fehleroffset 0x7265766e,  Prozess-ID 0x154c, Anwendungsstartzeit 01cc0505a08f235e.
 
Error - 27.04.2011 14:08:12 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
 fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
 0xc0000005, Fehleroffset 0x7265766e,  Prozess-ID 0x768, Anwendungsstartzeit 01cc0505a46b4c1e.
 
Error - 28.04.2011 12:12:31 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 11.02.2011 18:41:04 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 04:54:56 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 04:54:56 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 05:14:38 | Computer Name = x-Mobil | Source = DCOM | ID = 10005
Description = 
 
Error - 12.02.2011 05:14:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 12.02.2011 05:14:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 11:37:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description = 

Error - 12.02.2011 11:37:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 14:18:13 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 12.02.2011 14:18:13 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description = 
 
 
< End of report >
         
--- --- ---

Antwort

Themen zu Msn verschickt Spam!
andere, besuch, computer, e-mail, enthalten, erhalte, forum, freund, hoffe, interne, internet, link, msn, nachrichten, nichts, norton, passwort, posteingang, seite, sofort, spam, stunden, trojaner, verschickt, virus, wieder weg




Ähnliche Themen: Msn verschickt Spam!


  1. WEB.de verschickt selbständig Spam-Nachrichten
    Log-Analyse und Auswertung - 14.10.2015 (11)
  2. web.de Mailadresse verschickt Spam
    Log-Analyse und Auswertung - 20.05.2015 (7)
  3. Hotmail verschickt Spam
    Plagegeister aller Art und deren Bekämpfung - 19.12.2014 (15)
  4. Yahoo-Mail Account verschickt Spam, hinterlässt keine Spuren im Verschickt-Ordner Win8
    Plagegeister aller Art und deren Bekämpfung - 16.07.2014 (11)
  5. GMX Account verschickt Spam-Mails
    Plagegeister aller Art und deren Bekämpfung - 09.02.2014 (11)
  6. AOL Mailadresse verschickt Spam
    Plagegeister aller Art und deren Bekämpfung - 30.05.2013 (31)
  7. emailadresse verschickt spam
    Log-Analyse und Auswertung - 15.05.2013 (34)
  8. gmx konto verschickt spam mails
    Plagegeister aller Art und deren Bekämpfung - 20.02.2013 (39)
  9. Spam über GMX Konto verschickt
    Überwachung, Datenschutz und Spam - 01.01.2013 (5)
  10. GMX Account verschickt Spam-Mails
    Überwachung, Datenschutz und Spam - 10.08.2012 (102)
  11. web.de verschickt eigenständig Spam-mails
    Plagegeister aller Art und deren Bekämpfung - 21.06.2012 (30)
  12. Account hat spam-emails verschickt
    Log-Analyse und Auswertung - 21.11.2011 (11)
  13. Yahoo verschickt Spam-Mails
    Log-Analyse und Auswertung - 01.10.2011 (1)
  14. MBR-Infiziert, Rechner verschickt Spam
    Log-Analyse und Auswertung - 30.07.2011 (41)
  15. Mail-Account verschickt Spam
    Plagegeister aller Art und deren Bekämpfung - 09.12.2010 (30)
  16. PC verschickt SPAM!!!
    Plagegeister aller Art und deren Bekämpfung - 22.01.2008 (1)
  17. Services.exe verschickt Spam
    Plagegeister aller Art und deren Bekämpfung - 01.09.2007 (1)

Zum Thema Msn verschickt Spam! - Ich weiss das das hier schon diskutiert wurde, aber ich habe nichts gefunden, dass auf meinen Fall zutrifft. Es ist so: Ich habe vor ein paar Tagen von einem Freund - Msn verschickt Spam!...
Archiv
Du betrachtest: Msn verschickt Spam! auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.