Trojaner-Board
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Google-Startseite lädt nicht (https://www.trojaner-board.de/106354-google-startseite-laedt.html)

Duncanizer 16.12.2011 17:45
Google-Startseite lädt nicht
 
Guten Abend Trojaner-Board,

Vorab verzeiht mir bitte meine eventuelle unwissenheit...ich bin totaler novize!

mein Problem ist das sich, wie in der Überschrift schon beschrieben, die Google-Startseite nicht lädt bzw auch keine Suche durchgeführt wird. Immer wird angezeigt: 404 Not Found
In allen Browsern die ich benutze: Firefox,IE u. Opera.
Mein Betriebssystem ist Windows XP.

Die OTL.zip und Extra.zip sind im Anhang. Bei Gmer ist mein Notebook immer runtergefahren und ich konnte kein Logfile erstellen.
Ich hoffe sehr das ich alles, wie in der Anleitung beschrieben, richtig gemacht habe und Ihr mir helfen könnt.Viel Dank vorab.

Lg

cosinus 18.12.2011 13:46
Bitte nun routinemäßig einen Vollscan mit malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset





Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
hier steht das Log

Duncanizer 18.12.2011 17:15
Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8393

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

18.12.2011 16:55:42
mbam-log-2011-12-18 (16-55-42).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 308458
Laufzeit: 2 Stunde(n), 12 Minute(n), 53 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Duncanizer 18.12.2011 20:48
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=c4a4f86715db4f4aa6792c147a25de9f
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-12-18 07:38:21
# local_time=2011-12-18 08:38:21 (+0100, Westeuropäische Normalzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1792 16777175 100 0 241182 241182 0 0
# compatibility_mode=8192 67108863 100 0 3799 3799 0 0
# scanned=98683
# found=2
# cleaned=0
# scan_time=11825
C:\Dokumente und Einstellungen\****\Anwendungsdaten\phonostar-Player\update2.exe        a variant of Win32/Adware.ADON application (unable to clean)        00000000000000000000000000000000        I
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\15\472bdecf-2baf7115        a variant of Java/Agent.BR trojan (unable to clean)        00000000000000000000000000000000        I
Vielen Dank schon mal vorab!

Lg

cosinus 19.12.2011 11:56
Mach bitte ein neues OTL-Log

CustomScan mit OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT

Duncanizer 19.12.2011 17:42
Code:
OTL logfile created on: 19.12.2011 17:16:58 - Run 2
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Dokumente und Einstellungen\****\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1015,42 Mb Total Physical Memory | 484,91 Mb Available Physical Memory | 47,75% Memory free
2,39 Gb Paging File | 1,88 Gb Available in Paging File | 78,88% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 61,53 Gb Total Space | 19,56 Gb Free Space | 31,80% Space Free | Partition Type: NTFS
Drive D: | 13,02 Gb Total Space | 7,56 Gb Free Space | 58,09% Space Free | Partition Type: FAT32
 
Computer Name: **** | User Name: **** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Dokumente und Einstellungen\Magnus Lange\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Programme\phonostar\ps_timer.exe (phonostar)
PRC - C:\WINDOWS\system32\FsUsbExService.Exe (Teruten)
PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe (Sony Ericsson Mobile Communications AB)
PRC - C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
PRC - C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe (Adobe Systems Incorporated)
PRC - C:\Programme\Gemeinsame Dateien\Teleca Shared\Generic.exe (Teleca AB)
PRC - C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
PRC - C:\Programme\Ulead Systems\Ulead Photo Express 5 SE\CalCheck.exe (Ulead Systems, Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Programme\Avira\AntiVir Desktop\sqlite3.dll ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
MOD - C:\WINDOWS\system32\sbe.dll ()
MOD - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
MOD - C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application LauncherBmp.dll ()
MOD - C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application LauncherLg.dll ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
MOD - C:\Programme\Gemeinsame Dateien\Teleca Shared\boost_log-vc71-mt-1_33.dll ()
MOD - C:\Programme\Ulead Systems\Ulead Photo Express 5 SE\CalRemiRC.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (HidServ) --  File not found
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (FsUsbExService) -- C:\WINDOWS\system32\FsUsbExService.Exe (Teruten)
SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (UleadBurningHelper) -- C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avkmgr) -- C:\WINDOWS\system32\drivers\avkmgr.sys (Avira GmbH)
DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (FsUsbExDisk) -- C:\WINDOWS\system32\FsUsbExDisk.Sys ()
DRV - (ss_bmdm) -- C:\WINDOWS\system32\drivers\ss_bmdm.sys (MCCI Corporation)
DRV - (ss_bbus) SAMSUNG USB Mobile Device (WDM) -- C:\WINDOWS\system32\drivers\ss_bbus.sys (MCCI)
DRV - (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV - (atksgt) -- C:\WINDOWS\system32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\WINDOWS\system32\drivers\lirsgt.sys ()
DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (s816mdm) -- C:\WINDOWS\system32\drivers\s816mdm.sys (MCCI Corporation)
DRV - (s816mgmt) Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\s816mgmt.sys (MCCI Corporation)
DRV - (s816unic) Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM) -- C:\WINDOWS\system32\drivers\s816unic.sys (MCCI)
DRV - (s816obex) -- C:\WINDOWS\system32\drivers\s816obex.sys (MCCI Corporation)
DRV - (s816nd5) Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS) -- C:\WINDOWS\system32\drivers\s816nd5.sys (MCCI Corporation)
DRV - (s816mdfl) -- C:\WINDOWS\system32\drivers\s816mdfl.sys (MCCI Corporation)
DRV - (s816bus) Sony Ericsson Device 816 driver (WDM) -- C:\WINDOWS\system32\drivers\s816bus.sys (MCCI Corporation)
DRV - (s115mgmt) Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\s115mgmt.sys (MCCI Corporation)
DRV - (s115obex) -- C:\WINDOWS\system32\drivers\s115obex.sys (MCCI Corporation)
DRV - (s115mdm) -- C:\WINDOWS\system32\drivers\s115mdm.sys (MCCI Corporation)
DRV - (s115mdfl) -- C:\WINDOWS\system32\drivers\s115mdfl.sys (MCCI Corporation)
DRV - (s115bus) Sony Ericsson Device 115 driver (WDM) -- C:\WINDOWS\system32\drivers\s115bus.sys (MCCI Corporation)
DRV - (ACEDRV07) -- C:\WINDOWS\system32\drivers\ACEDRV07.sys (Protect Software GmbH)
DRV - (ACEDRV05) -- C:\WINDOWS\system32\drivers\ACEDRV05.sys (Protect Software GmbH)
DRV - (SSHDRV51) -- C:\WINDOWS\system32\drivers\SSHDRV51.sys ()
DRV - (SSHDRV85) -- C:\WINDOWS\system32\drivers\SSHDRV85.sys ()
DRV - (prodrv04) -- C:\WINDOWS\System32\drivers\prodrv04.sys (Protection Technology Co.)
DRV - (K320bus) Sony Ericsson K320 driver (WDM) -- C:\WINDOWS\system32\drivers\K320bus.sys (MCCI)
DRV - (K320mdm) -- C:\WINDOWS\system32\drivers\K320mdm.sys (MCCI)
DRV - (K320mdfl) -- C:\WINDOWS\system32\drivers\K320mdfl.sys (MCCI)
DRV - (K320mgmt) Sony Ericsson K320 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\K320mgmt.sys (MCCI)
DRV - (K320obex) -- C:\WINDOWS\system32\drivers\K320obex.sys (MCCI)
DRV - (w800obex) -- C:\WINDOWS\system32\drivers\w800obex.sys (MCCI)
DRV - (w800mgmt) -- C:\WINDOWS\system32\drivers\w800mgmt.sys (MCCI)
DRV - (w800mdm) -- C:\WINDOWS\system32\drivers\w800mdm.sys (MCCI)
DRV - (w800mdfl) -- C:\WINDOWS\system32\drivers\w800mdfl.sys (MCCI)
DRV - (w800bus) Sony Ericsson W800 driver (WDM) -- C:\WINDOWS\system32\drivers\w800bus.sys (MCCI)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (w29n51) Intel(R) -- C:\WINDOWS\system32\drivers\w29n51.sys (Intel® Corporation)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation                          )
DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology)
DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology)
DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\Hdaudio.sys (Windows (R) Server 2003 DDK provider)
DRV - (sfsync02) StarForce Protection Synchronization Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfsync02.sys (Protection Technology)
DRV - (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (prohlp02) -- C:\WINDOWS\System32\drivers\prohlp02.sys (Protection Technology)
DRV - (prodrv06) -- C:\WINDOWS\System32\drivers\prodrv06.sys (Protection Technology)
DRV - (sfhlp01) -- C:\WINDOWS\System32\drivers\sfhlp01.sys (Protection Technology)
DRV - (prosync1) -- C:\WINDOWS\System32\drivers\prosync1.sys (Protection Technology)
DRV - (PCANDIS5) -- C:\Programme\HotSpot Manager\Pcandis5.sys (Printing Communications Assoc., Inc. (PCAUSA))
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = hxxp://dnl.crawler.com/support/sa_customize.aspx?TbId=60347
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.crawler.com/search/ie.aspx?tb_id=60347
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60347
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.crawler.com/homepage.aspx?tbid=60347
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Crawler Search"
FF - prefs.js..browser.search.order.1: "Crawler Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://www.web.de/"
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 9
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: cacaoweb@cacaoweb.org:1.0.11
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.15: C:\Dokumente und Einstellungen\Magnus Lange\Desktop\TV\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.15: C:\Dokumente und Einstellungen\Magnus Lange\Desktop\TV\Veetle\Player\npvlc.dll (Veetle Inc)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.11.08 23:10:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.03.27 12:46:37 | 000,000,000 | ---D | M]
 
[2008.09.06 12:04:53 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Extensions
[2011.11.13 10:38:32 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions
[2011.03.03 10:55:34 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.08.01 18:04:22 | 000,000,000 | ---D | M] (BitDefender QuickScan) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}(2)
[2011.11.13 10:38:32 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010.09.24 19:12:21 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb(2).org
[2011.03.03 10:55:28 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org
[2009.12.19 12:07:03 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\firefox@tvunetworks.com
[2011.12.17 14:27:38 | 000,000,944 | ---- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\searchplugins\icqplugin.xml
[2011.11.08 23:11:14 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011.10.29 10:04:16 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011.11.08 23:10:24 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011.10.03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2010.12.06 23:03:18 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Programme\mozilla firefox\plugins\npwachk.dll
[2011.08.30 21:35:55 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.08.30 21:29:49 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2009.09.21 11:24:16 | 000,001,329 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\crawlersrch.xml
[2011.08.30 21:35:55 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2011.08.30 21:35:55 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.08.30 21:35:55 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.08.30 21:35:55 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2010.05.04 11:08:44 | 000,001,998 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: 74.125.45.100 4-open-davinci.com
O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com
O1 - Hosts: 74.125.45.100 privatesecuredpayments.com
O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com
O1 - Hosts: 74.125.45.100 getantivirusplusnow.com
O1 - Hosts: 74.125.45.100 secure-plus-payments.com
O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com
O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com
O1 - Hosts: 74.125.45.100 www.getavplusnow.com
O1 - Hosts: 74.125.45.100 safebrowsing-cache.google.com
O1 - Hosts: 74.125.45.100 urs.microsoft.com
O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com
O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com
O1 - Hosts: 74.125.45.100 paysoftbillsolution.com
O1 - Hosts: 74.125.45.100 protected.maxisoftwaremart.com
O1 - Hosts: 217.23.15.139 www.google.com
O1 - Hosts: 217.23.15.139 google.com
O1 - Hosts: 217.23.15.139 google.com.au
O1 - Hosts: 217.23.15.139 www.google.com.au
O1 - Hosts: 217.23.15.139 google.be
O1 - Hosts: 217.23.15.139 www.google.be
O1 - Hosts: 217.23.15.139 google.com.br
O1 - Hosts: 217.23.15.139 www.google.com.br
O1 - Hosts: 217.23.15.139 google.ca
O1 - Hosts: 38 more lines...
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [DivXUpdate] C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [UDC Integration]  File not found
O4 - HKLM..\Run: [Ulead Photo Express 5 SE Calendar Checker] C:\Programme\Ulead Systems\Ulead Photo Express 5 SE\CalCheck.exe (Ulead Systems, Inc.)
O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [PhonostarTimer] C:\Programme\phonostar\ps_timer.exe (phonostar)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Dokumente und Einstellungen\Magnus Lange\Startmenü\Programme\Autostart\Registration Die Siedler II - Die nächste Generation.LNK =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Programme\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: PartyCasino.com - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Programme\PartyGaming\PartyCasino\RunCasino.exe File not found
O9 - Extra 'Tools' menuitem : PartyCasino.com - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Programme\PartyGaming\PartyCasino\RunCasino.exe File not found
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Dokumente und Einstellungen\Magnus Lange\Desktop\PartyPoker.lnk ()
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Dokumente und Einstellungen\Magnus Lange\Desktop\PartyPoker.lnk ()
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra Button: PartyBingo.com - {B987E7E7-5997-4330-A5F9-9FFEFC1CCFD0} - C:\Programme\PartyGaming\PartyBingo\RunBingo.exe File not found
O9 - Extra 'Tools' menuitem : PartyBingo.com - {B987E7E7-5997-4330-A5F9-9FFEFC1CCFD0} - C:\Programme\PartyGaming\PartyBingo\RunBingo.exe File not found
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Dokumente und Einstellungen\Magnus Lange\Eigene Dateien\Downloads\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Dokumente und Einstellungen\Magnus Lange\Eigene Dateien\Downloads\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\PartyGaming.Net\PartyPokerNet\RunPF.exe File not found
O9 - Extra 'Tools' menuitem : PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\PartyGaming.Net\PartyPokerNet\RunPF.exe File not found
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} hxxp://static.pe.studivz.net/photouploader/ImageUploader5.cab?nocache=1220288948 (Image Uploader Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1155189992902 (WUWebControl Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Programme\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Magnus Lange\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Magnus Lange\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.08.09 14:59:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: 6to4 -  File not found
NetSvcs: HidServ -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
 
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
 
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: nm -  File not found
SafeBootNet: nm.sys -  File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {1BC46932-21B2-4130-86E0-B4EB4F7A7A7B} - Microsoft .NET Framework 1.0 Hotfix (KB887998)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {29E7D24F-BF30-45E7-8A40-AD27AFD8F5C6} - Microsoft .NET Framework 1.0 Hotfix (KB979904)
ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {407408d4-94ed-4d86-ab69-a7f649d112ee} - %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection QuickLaunchShortcut 640 %systemroot%\inf\mcdftreg.inf
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4F00D11B-8327-4C55-B7DA-B8D8C10F28A8} - Microsoft .NET Framework 1.0 Hotfix (KB2572066)
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {8b15971b-5355-4c82-8c07-7e181ea07608} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {94de52c8-2d59-4f1b-883e-79663d2d9a8c} - Fax Provider
ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework
ActiveX: {BDE0FA43-6952-4BA8-8C58-09AF690F88E1} - Microsoft .NET Framework 1.0 Hotfix (KB930494)
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C314CE45-3392-3B73-B4E1-139CD41CA933} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E78BFA60-5393-4C38-82AB-E8019E464EB4} - .NET Framework
ActiveX: {E8EA5BD6-D931-4001-ABF6-81BAA500360A} - Microsoft .NET Framework 1.0 Hotfix (KB953295)
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {EA29D410-CE41-4953-A862-2DE706A1DAD7} - Microsoft .NET Framework 1.0 Service Pack 3
ActiveX: {EFCE7BE0-510E-4932-9475-F44CD90DE16A} - Microsoft .NET Framework 1.1 Security Update (KB2572067)
ActiveX: {FDC11A6F-17D1-48f9-9EA3-9051954BAA24} - .NET Framework
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
ActiveX: KB910393 - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\EasyCDBlock.inf,PerUserInstall
ActiveX: Microsoft Base Smart Card Crypto Provider Package -
 
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\WINDOWS\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.avis - C:\WINDOWS\System32\ffvfw.dll ()
Drivers32: msacm.dvacm - C:\Programme\Gemeinsame Dateien\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.mpegacm - C:\Programme\Gemeinsame Dateien\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.scg726 - C:\WINDOWS\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.dvsd - C:\WINDOWS\System32\mcdvd_32.dll (MainConcept)
Drivers32: vidc.fvfw - C:\WINDOWS\System32\ffvfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\Ir50_32.dll (Ligos Corporation)
Drivers32: vidc.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.12.18 17:17:58 | 000,000,000 | ---D | C] -- C:\Programme\ESET
[2011.12.16 21:31:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\Scan
[2011.12.16 17:37:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\7-Zip
[2011.12.16 17:37:56 | 000,000,000 | ---D | C] -- C:\Programme\7-Zip
[2011.12.16 16:49:22 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\OTL.exe
[2011.12.15 23:25:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Avira
[2011.12.15 23:21:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2011.12.15 23:21:36 | 000,134,856 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011.12.15 23:21:36 | 000,074,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011.12.15 23:21:36 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2011.12.15 23:21:35 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2011.12.15 23:21:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2011.12.15 22:50:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Malwarebytes
[2011.12.15 22:50:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2011.12.15 22:50:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2011.12.15 22:50:39 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011.12.15 22:50:38 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2011.12.15 22:13:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Magnus Lange\Lokale Einstellungen\Anwendungsdaten\Opera
[2011.12.15 22:13:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Opera
[2011.12.15 22:13:19 | 000,000,000 | ---D | C] -- C:\Programme\Opera
[2011.12.01 21:54:11 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Magnus Lange\Recent
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011.12.19 17:09:59 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.12.19 17:06:51 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.12.19 17:06:48 | 1064,812,544 | -HS- | M] () -- C:\hiberfil.sys
[2011.12.16 16:49:25 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\OTL.exe
[2011.12.16 16:46:47 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\defogger_reenable
[2011.12.15 23:21:58 | 000,001,675 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2011.12.15 22:50:45 | 000,000,760 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.12.15 22:29:50 | 001,776,528 | ---- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\Galaxy_S_Plus_Bedienungsanleitung.zip
[2011.12.15 22:13:33 | 000,001,460 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk
[2011.12.15 21:32:09 | 000,002,953 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011.12.15 21:17:44 | 000,232,776 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.12.15 21:11:09 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011.12.15 21:08:33 | 000,089,324 | ---- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\avira_antivir_antirootkit_en.zip
[2011.12.14 20:05:54 | 000,002,243 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2011.12.09 12:40:20 | 000,134,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011.12.09 12:40:20 | 000,074,640 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011.12.09 12:40:20 | 000,036,000 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2011.12.06 22:11:20 | 000,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2011.12.01 20:51:53 | 000,428,432 | ---- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\Formular_Kuendigung070108.pdf
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011.12.16 16:46:47 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\defogger_reenable
[2011.12.15 23:21:57 | 000,001,675 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2011.12.15 22:50:45 | 000,000,760 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.12.15 22:29:47 | 001,776,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\Galaxy_S_Plus_Bedienungsanleitung.zip
[2011.12.15 22:13:33 | 000,001,466 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Opera.lnk
[2011.12.15 22:13:33 | 000,001,460 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Opera.lnk
[2011.12.15 21:08:33 | 000,089,324 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\avira_antivir_antirootkit_en.zip
[2011.12.15 21:03:42 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011.12.01 20:51:50 | 000,428,432 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Desktop\Formular_Kuendigung070108.pdf
[2010.12.07 12:09:48 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\ZCompress.EXE
[2010.12.07 12:09:48 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\WinSFX.bin
[2010.12.07 12:09:48 | 000,062,716 | ---- | C] () -- C:\WINDOWS\System32\Uninstall985F.DAT
[2010.12.07 12:09:46 | 000,516,096 | ---- | C] () -- C:\WINDOWS\System32\BldSetup.EXE
[2010.12.07 12:09:46 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\BldDat.EXE
[2010.12.07 12:09:46 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\BldOpt.EXE
[2010.12.07 12:09:46 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\GkSui20.EXE
[2010.12.07 12:09:46 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\Dspan.bin
[2010.06.21 22:21:08 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010.03.09 17:06:47 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010.03.09 17:06:47 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010.03.09 17:06:32 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\$_hpcst$.hpc
[2010.02.07 17:29:40 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\AVSMediaPlayer.m3u
[2009.12.12 11:52:24 | 000,002,072 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe.dat
[2009.12.12 11:52:24 | 000,000,464 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe.ini
[2009.12.12 11:47:05 | 000,027,892 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe3.dat
[2009.12.12 11:47:04 | 000,157,763 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe1.dat
[2009.12.12 11:47:04 | 000,046,342 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe2.dat
[2009.12.12 11:47:03 | 000,044,756 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe0.dat
[2009.09.13 17:12:16 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2009.08.30 11:36:23 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009.01.15 17:15:48 | 000,000,413 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009.01.15 17:07:01 | 000,001,795 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2008.10.04 13:07:16 | 000,088,576 | ---- | C] () -- C:\WINDOWS\RAUNINST.EXE
[2008.09.06 12:04:55 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008.06.22 21:52:06 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008.04.28 10:11:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008.01.06 21:17:32 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\wklnhst.dat
[2007.12.24 13:28:36 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2007.12.24 13:28:35 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2007.10.25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2007.09.29 20:56:12 | 000,000,020 | ---- | C] () -- C:\WINDOWS\powerplayer.ini
[2007.09.29 20:56:00 | 000,000,381 | ---- | C] () -- C:\WINDOWS\psnetwork.ini
[2007.04.19 21:18:31 | 000,000,035 | ---- | C] () -- C:\WINDOWS\ULEAD32.INI
[2007.03.19 17:05:58 | 000,045,568 | ---- | C] () -- C:\WINDOWS\UniFish3.exe
[2007.02.10 18:23:09 | 000,003,267 | ---- | C] () -- C:\WINDOWS\tm.ini
[2007.01.04 17:19:45 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4704.dll
[2006.12.30 20:40:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI
[2006.12.13 18:54:26 | 000,080,384 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.12.11 21:35:50 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006.12.10 19:17:16 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2006.12.03 20:14:33 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2006.12.03 20:14:33 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2006.12.01 22:19:12 | 000,021,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\SSHDRV51.sys
[2006.12.01 20:57:04 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2006.12.01 19:42:55 | 000,078,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\SSHDRV85.sys
[2006.12.01 19:42:25 | 000,000,599 | ---- | C] () -- C:\WINDOWS\WISO.INI
[2006.12.01 19:39:41 | 000,000,223 | ---- | C] () -- C:\WINDOWS\BUHL.INI
[2006.11.27 19:47:44 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2006.11.27 19:47:44 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2006.11.27 19:47:43 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2006.11.27 19:43:53 | 000,000,035 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2006.11.27 18:11:31 | 000,000,145 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2006.09.19 19:12:15 | 000,000,380 | ---- | C] () -- C:\WINDOWS\LEXSTAT.INI
[2006.09.19 19:08:17 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2006.09.19 19:08:17 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2006.08.10 07:52:05 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006.08.10 07:01:16 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2006.08.10 06:56:23 | 000,004,704 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2006.08.10 06:56:23 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\3792CB38D7.sys
[2006.08.10 06:52:49 | 000,000,926 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006.08.10 06:48:34 | 000,000,929 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2006.08.10 06:15:25 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2006.08.09 15:45:42 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006.08.09 15:44:22 | 000,232,776 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2006.08.09 15:03:31 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2006.08.09 14:54:52 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2006.03.24 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2006.03.24 13:00:00 | 000,490,378 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2006.03.24 13:00:00 | 000,467,766 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2006.03.24 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2006.03.24 13:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2006.03.24 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2006.03.24 13:00:00 | 000,099,046 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2006.03.24 13:00:00 | 000,083,092 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2006.03.24 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2006.03.24 13:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2006.03.24 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2006.03.24 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006.03.24 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2006.03.24 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2005.08.05 13:26:04 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2004.09.28 22:54:30 | 003,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll
[2004.04.23 08:36:42 | 000,298,496 | ---- | C] () -- C:\WINDOWS\System32\dbfb.dll
[2003.10.28 18:07:20 | 000,372,736 | ---- | C] () -- C:\WINDOWS\System32\ffvfw.dll
[2003.10.28 15:51:41 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2001.09.04 14:12:28 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001.09.04 14:10:20 | 000,004,518 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
 
========== LOP Check ==========
 
[2010.05.04 11:21:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\464789e
[2009.07.23 10:42:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AA3DeployClient
[2011.12.15 21:32:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVAST Software
[2011.04.27 16:59:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ElsterFormular
[2010.09.16 11:24:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\F-Secure
[2006.08.10 06:42:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HotSpot Manager
[2009.03.09 21:38:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
[2010.03.09 17:13:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2008.07.05 15:10:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Teleca
[2006.09.19 19:11:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ulead Systems
[2009.12.07 20:53:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Ankh
[2007.01.06 15:04:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\BitTorrent
[2011.01.19 20:55:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\cacaoweb
[2009.12.23 11:37:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ChessBase
[2008.06.30 15:20:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\eMule
[2008.04.14 19:48:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\flightgear.org
[2010.10.14 20:42:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ICQ
[2006.12.25 13:28:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ICQLite
[2009.03.25 20:04:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Imperium Romanum
[2008.10.06 18:53:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\InterTrust
[2006.12.24 17:38:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Leadertech
[2009.06.17 20:39:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\MSNInstaller
[2011.08.02 21:07:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\My Games
[2011.12.15 22:13:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Opera
[2010.03.09 17:13:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\PC Suite
[2009.10.03 11:26:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\phonostar GmbH
[2011.01.01 15:10:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\phonostar-Player
[2009.07.27 15:51:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\pokerth
[2007.09.29 20:47:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\PPMate
[2007.09.29 20:56:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ppStream
[2011.07.31 13:03:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\QuickScan
[2010.03.09 17:06:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Samsung
[2007.05.08 11:45:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\SecondLife
[2011.06.18 09:37:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\streamripper
[2009.11.28 17:11:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\StreamTorrent
[2008.07.05 15:14:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Teleca
[2006.12.24 02:19:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Ulead Systems
[2007.04.05 15:24:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Uniblue
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2010.10.03 18:48:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Adobe
[2008.07.05 19:05:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\AdobeUM
[2007.01.04 17:26:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Ahead
[2009.12.07 20:53:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Ankh
[2011.12.15 23:25:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Avira
[2007.01.06 15:04:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\BitTorrent
[2011.01.19 20:55:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\cacaoweb
[2009.12.23 11:37:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ChessBase
[2006.08.10 07:28:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\CyberLink
[2010.08.24 17:10:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\DivX
[2008.06.30 15:20:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\eMule
[2008.04.14 19:48:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\flightgear.org
[2007.03.12 22:42:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Google
[2007.02.02 20:19:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Help
[2010.10.14 20:42:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ICQ
[2006.12.25 13:28:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ICQLite
[2006.08.09 15:11:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Identities
[2009.03.25 20:04:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Imperium Romanum
[2008.10.06 18:50:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\InstallShield Installation Information
[2008.10.06 18:53:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\InterTrust
[2006.12.24 17:38:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Leadertech
[2006.08.10 07:30:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Macromedia
[2011.12.15 22:50:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Malwarebytes
[2008.10.04 12:36:18 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Microsoft
[2008.09.06 12:04:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla
[2011.01.23 22:31:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla-Cache
[2009.06.17 20:39:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\MSNInstaller
[2011.08.02 21:07:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\My Games
[2011.12.15 22:13:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Opera
[2010.03.09 17:13:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\PC Suite
[2009.10.03 11:26:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\phonostar GmbH
[2011.01.01 15:10:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\phonostar-Player
[2009.07.27 15:51:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\pokerth
[2007.09.29 20:47:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\PPMate
[2007.09.29 20:56:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ppStream
[2011.07.31 13:03:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\QuickScan
[2010.03.09 17:06:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Samsung
[2007.05.08 11:45:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\SecondLife
[2008.11.28 20:05:16 | 000,000,000 | RH-D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\SecuROM
[2011.12.14 22:03:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Skype
[2011.12.14 20:06:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\skypePM
[2006.12.30 17:20:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Sony Ericsson
[2008.01.06 22:44:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\SopCast
[2011.06.18 09:37:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\streamripper
[2009.11.28 17:11:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\StreamTorrent
[2006.12.10 19:23:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Sun
[2008.07.05 15:14:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Teleca
[2007.09.28 21:24:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\TVU Networks
[2006.12.24 02:19:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Ulead Systems
[2007.04.05 15:24:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Uniblue
[2011.12.01 22:00:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Winamp
 
< %APPDATA%\*.exe /s >
[2007.02.02 19:40:09 | 023,813,608 | ---- | M] (                            ) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Adobe\Acrobat\7.0\Updater\AdbeRdr709_de_DE.exe
[2008.05.11 09:43:24 | 022,319,360 | ---- | M] (                                  ) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Adobe\Acrobat\7.0\Updater\AdbeRdr710_de_DE.exe
[2008.10.04 12:36:18 | 000,040,960 | R--- | M] (InstallShield Software Corp.) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Microsoft\Installer\{EBB11C78-68A6-42D7-84FC-517F9DBF9D55}\ARPPRODUCTICON.exe
[2008.10.04 12:36:19 | 000,045,056 | R--- | M] (InstallShield Software Corp.) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Microsoft\Installer\{EBB11C78-68A6-42D7-84FC-517F9DBF9D55}\GameShadow.exe1_BAB1DDFC9AE64358B0AD15DC2FDBA636.exe
[2008.10.04 12:36:18 | 000,045,056 | R--- | M] (InstallShield Software Corp.) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Microsoft\Installer\{EBB11C78-68A6-42D7-84FC-517F9DBF9D55}\GameShadow.exe_BAB1DDFC9AE64358B0AD15DC2FDBA636.exe
[2008.10.04 12:36:18 | 000,040,960 | R--- | M] (InstallShield Software Corp.) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Microsoft\Installer\{EBB11C78-68A6-42D7-84FC-517F9DBF9D55}\GSDR.exe_BAB1DDFC9AE64358B0AD15DC2FDBA636.exe
[2008.10.04 12:36:19 | 000,008,854 | R--- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Microsoft\Installer\{EBB11C78-68A6-42D7-84FC-517F9DBF9D55}\Uninstall_GameShadow_BAB1DDFC9AE64358B0AD15DC2FDBA636.exe
[2009.06.17 20:39:40 | 000,827,368 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\MSNInstaller\msnauins.exe
[2009.05.15 15:43:20 | 000,045,056 | ---- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\phonostar-Player\update.exe
[2009.05.15 15:43:25 | 002,628,303 | ---- | M] (                                                            ) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\phonostar-Player\update2.exe
[2 C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\phonostar-Player\*.tmp files -> C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\phonostar-Player\*.tmp -> ]
[2007.09.29 20:56:39 | 000,091,648 | ---- | M] (PPStream Inc.) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\ppStream\update.exe
[2011.12.06 22:09:23 | 089,280,248 | ---- | M] (Samsung Electronics Co., Ltd.                                ) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Samsung\New PC Studio\LiveUpdate\Setup_For_Full_Update_IH2_7.exe
[2007.05.08 13:23:56 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\SecondLife\logs\SecondLife.exec_marker
[2007.07.14 11:34:38 | 000,260,944 | ---- | M] (www.sopcast.com) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\SopCast\adv\SopAdver.exe
[2008.11.24 22:11:36 | 005,241,488 | ---- | M] (TVU networks) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\TVU Networks\TVU AutoUpgrade\TVUPlayer2.4.1.0.exe
[2009.11.07 18:28:03 | 005,519,752 | ---- | M] (TVU networks) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\TVU Networks\TVU AutoUpgrade\TVUPlayer2.4.7.2.exe
 
< %SYSTEMDRIVE%\*.exe >
 
 
< MD5 for: AGP440.SYS  >
[2006.03.24 13:00:00 | 017,006,491 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.09.06 10:25:49 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.09.06 10:25:49 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
 
< MD5 for: ATAPI.SYS  >
[2006.03.24 13:00:00 | 017,006,491 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.09.06 10:25:49 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.09.06 10:25:49 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2006.03.24 13:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\atapi.sys
 
< MD5 for: EVENTLOG.DLL  >
[2008.04.14 03:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 03:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll
[2006.03.24 13:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
 
< MD5 for: IASTOR.SYS  >
[2005.10.12 12:07:12 | 000,874,240 | ---- | M] (Intel Corporation) MD5=309C4D86D989FB1FCF64BD30DC81C51B -- C:\WINDOWS\OEMDRV\iastor.sys
 
< MD5 for: NETLOGON.DLL  >
[2008.04.14 03:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 03:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll
[2006.03.24 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
 
< MD5 for: NVATABUS.SYS  >
[2005.02.12 01:11:02 | 000,089,856 | ---- | M] (NVIDIA Corporation) MD5=83F0275A21D9772B51CEF57E35AFAE61 -- C:\WINDOWS\OEMDRV\nvatabus.sys
 
< MD5 for: SCECLI.DLL  >
[2008.04.14 03:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 03:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll
[2006.03.24 13:00:00 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
 
< MD5 for: USER32.DLL  >
[2005.03.02 19:09:46 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=3751D7CF0E0A113D84414992146BCE6A -- C:\WINDOWS\$NtUninstallKB925902$\user32.dll
[2007.03.08 16:36:30 | 000,579,072 | ---- | M] (Microsoft Corporation) MD5=492E166CFD26A50FB9160DB536FF7D2B -- C:\WINDOWS\$NtServicePackUninstall$\user32.dll
[2005.03.02 19:19:56 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=4C90159A69A5FD3EB39C71411F28FCFF -- C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
[2007.03.08 16:48:39 | 000,579,584 | ---- | M] (Microsoft Corporation) MD5=78785EFF8CB90CEC1862A4CCFD9A3C3A -- C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll
[2008.04.14 03:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\ServicePackFiles\i386\user32.dll
[2008.04.14 03:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008.04.14 03:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 03:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe
[2006.03.24 13:00:00 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
 
< MD5 for: VIAMRAID.SYS  >
[2004.05.18 15:55:26 | 000,074,112 | ---- | M] (VIA Technologies inc,.ltd) MD5=F199939205DCCC7836AE5AB8B5DD5E83 -- C:\WINDOWS\OEMDRV\viamraid.sys
 
< MD5 for: WINLOGON.EXE  >
[2006.03.24 13:00:00 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 03:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 03:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2006.03.24 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys
[2006.03.24 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
[2006.08.09 16:43:17 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2006.08.09 16:43:17 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2006.08.09 16:43:17 | 000,421,888 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< End of report >

cosinus 19.12.2011 19:29
Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:
:OTL
PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
MOD - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60347
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60347
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60347
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.crawler.com/homepage.aspx?tbid=60347
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
FF - prefs.js..browser.search.defaultenginename: "Crawler Search"
FF - prefs.js..browser.search.order.1: "Crawler Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.web.de/"
FF - prefs.js..extensions.enabledItems: cacaoweb@cacaoweb.org:1.0.11
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&q="
[2010.09.24 19:12:21 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb(2).org
[2011.03.03 10:55:28 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org
[2011.12.17 14:27:38 | 000,000,944 | ---- | M] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\searchplugins\icqplugin.xml
[2009.09.21 11:24:16 | 000,001,329 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\crawlersrch.xml
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKLM..\Run: [UDC Integration]  File not found
O9 - Extra Button: PartyCasino.com - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Programme\PartyGaming\PartyCasino\RunCasino.exe File not found
O9 - Extra 'Tools' menuitem : PartyCasino.com - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Programme\PartyGaming\PartyCasino\RunCasino.exe File not found
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Dokumente und Einstellungen\Magnus Lange\Desktop\PartyPoker.lnk ()
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Dokumente und Einstellungen\Magnus Lange\Desktop\PartyPoker.lnk ()
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra Button: PartyBingo.com - {B987E7E7-5997-4330-A5F9-9FFEFC1CCFD0} - C:\Programme\PartyGaming\PartyBingo\RunBingo.exe File not found
O9 - Extra 'Tools' menuitem : PartyBingo.com - {B987E7E7-5997-4330-A5F9-9FFEFC1CCFD0} - C:\Programme\PartyGaming\PartyBingo\RunBingo.exe File not found
O9 - Extra Button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\PartyGaming.Net\PartyPokerNet\RunPF.exe File not found
O9 - Extra 'Tools' menuitem : PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\PartyGaming.Net\PartyPokerNet\RunPF.exe File not found
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Programme\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.08.09 14:59:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
[2009.12.12 11:52:24 | 000,002,072 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe.dat
[2009.12.12 11:52:24 | 000,000,464 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe.ini
[2009.12.12 11:47:05 | 000,027,892 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe3.dat
[2009.12.12 11:47:04 | 000,157,763 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe1.dat
[2009.12.12 11:47:04 | 000,046,342 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe2.dat
[2009.12.12 11:47:03 | 000,044,756 | ---- | C] () -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Patch-Master.exe0.dat
[2010.05.04 11:21:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\464789e
[2011.01.19 20:55:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\cacaoweb
[2007.04.05 15:24:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Magnus Lange\Anwendungsdaten\Uniblue
:Files
C:\Programme\ICQ6Toolbar
:Commands
[emptytemp]
[resethosts]
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Duncanizer 19.12.2011 20:09
Alles ausgeführt:

Code:
All processes killed
========== OTL ==========
No active process named ICQ Service.exe was found!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\CustomizeSearch| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\Default_Search_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\SearchMigratedDefaultName| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\SearchMigratedDefaultURL| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ deleted successfully.
C:\Programme\ICQ6Toolbar\ICQToolBar.dll moved successfully.
Prefs.js: "Crawler Search" removed from browser.search.defaultenginename
Prefs.js: "Crawler Search" removed from browser.search.order.1
Prefs.js: "Google" removed from browser.search.selectedEngine
Prefs.js: "hxxp://www.web.de/" removed from browser.startup.homepage
Prefs.js: cacaoweb@cacaoweb.org:1.0.11 removed from extensions.enabledItems
Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=" removed from keyword.URL
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb(2).org\defaults(2)\preferences(2) folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb(2).org\defaults(2) folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb(2).org\chrome(2)\skin(2) folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb(2).org\chrome(2)\content(2) folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb(2).org\chrome(2) folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb(2).org folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\defaults\preferences folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\defaults folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\chrome\skin folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\fr-FR folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\es-ES folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\en-US folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\de-DE folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\chrome\locale folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\chrome\content folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org\chrome folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\extensions\cacaoweb@cacaoweb.org folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Mozilla\Firefox\Profiles\dpomd1zx.default\searchplugins\icqplugin.xml moved successfully.
C:\Programme\Mozilla Firefox\searchplugins\crawlersrch.xml moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
File C:\Programme\ICQ6Toolbar\ICQToolBar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NPSStartup deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\UDC Integration deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B4B52284-A248-4c51-9F7C-F0A0C67FCC9D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4B52284-A248-4c51-9F7C-F0A0C67FCC9D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B4B52284-A248-4c51-9F7C-F0A0C67FCC9D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B4B52284-A248-4c51-9F7C-F0A0C67FCC9D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
C:\Dokumente und Einstellungen\****\Desktop\PartyPoker.lnk moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
File C:\Dokumente und Einstellungen\****\Desktop\PartyPoker.lnk not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B987E7E7-5997-4330-A5F9-9FFEFC1CCFD0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B987E7E7-5997-4330-A5F9-9FFEFC1CCFD0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B987E7E7-5997-4330-A5F9-9FFEFC1CCFD0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B987E7E7-5997-4330-A5F9-9FFEFC1CCFD0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F4430FE8-2638-42e5-B849-800749B94EED}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4430FE8-2638-42e5-B849-800749B94EED}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F4430FE8-2638-42e5-B849-800749B94EED}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4430FE8-2638-42e5-B849-800749B94EED}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\x-sdch\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B1759355-3EEC-4C1E-B0F1-B719FE26E377}\ deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\AUTOEXEC.BAT moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Patch-Master.exe.dat moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Patch-Master.exe.ini moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Patch-Master.exe3.dat moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Patch-Master.exe1.dat moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Patch-Master.exe2.dat moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Patch-Master.exe0.dat moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\464789e\MSESys folder moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\464789e folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\cacaoweb folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Uniblue\Registry Booster folder moved successfully.
C:\Dokumente und Einstellungen\****\Anwendungsdaten\Uniblue folder moved successfully.
========== FILES ==========
C:\Programme\ICQ6Toolbar folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 360448 bytes
->Flash cache emptied: 348 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 360582 bytes
->Flash cache emptied: 431 bytes
 
User: Gast
->Temp folder emptied: 392417 bytes
->Temporary Internet Files folder emptied: 1201436 bytes
->Flash cache emptied: 621 bytes
 
User: ***
->Temp folder emptied: 7617468 bytes
->Temporary Internet Files folder emptied: 16642015 bytes
->Java cache emptied: 14491495 bytes
->FireFox cache emptied: 64807922 bytes
->Flash cache emptied: 6067 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 10901993 bytes
->Flash cache emptied: 456 bytes
 
User: ****
->Temp folder emptied: 143332349 bytes
->Temporary Internet Files folder emptied: 23655065 bytes
->Java cache emptied: 36557074 bytes
->FireFox cache emptied: 247360046 bytes
->Opera cache emptied: 2226361 bytes
->Flash cache emptied: 39873 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1240390 bytes
%systemroot%\System32 .tmp files removed: 4737415 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2902348 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 552,00 mb
 
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.31.0 log created on 12192011_195235

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...
Vielen Dank!

Duncanizer 19.12.2011 20:25
Hallo,

klappt wieder! Bin total glücklich. Super..vielen,vielen Dank!
Darf ich fragen woran es gelegen hat? Wie oben schon geschrieben..ich bin totaler Novize und hab alles nur im vollsten Vertrauen ausgeführt. Und ich bin wahrlich nicht enttäuscht worden! Vielen Dank!! :bussi::dankeschoen:

Lg

cosinus 19.12.2011 20:34
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg


Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
http://www.trojaner-board.de/images/icons/icon4.gif Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen! http://www.trojaner-board.de/images/icons/icon4.gif

Duncanizer 19.12.2011 20:47
Code:
20:40:50.0812 3016        TDSS rootkit removing tool 2.6.23.0 Dec 13 2011 10:39:31
20:40:51.0062 3016        ============================================================
20:40:51.0062 3016        Current date / time: 2011/12/19 20:40:51.0062
20:40:51.0062 3016        SystemInfo:
20:40:51.0062 3016       
20:40:51.0062 3016        OS Version: 5.1.2600 ServicePack: 3.0
20:40:51.0062 3016        Product type: Workstation
20:40:51.0062 3016        ComputerName: MAGNUS
20:40:51.0062 3016        UserName: ****
20:40:51.0062 3016        Windows directory: C:\WINDOWS
20:40:51.0062 3016        System windows directory: C:\WINDOWS
20:40:51.0062 3016        Processor architecture: Intel x86
20:40:51.0062 3016        Number of processors: 1
20:40:51.0062 3016        Page size: 0x1000
20:40:51.0062 3016        Boot type: Normal boot
20:40:51.0062 3016        ============================================================
20:40:53.0000 3016        Initialize success
20:42:53.0828 2384        ============================================================
20:42:53.0828 2384        Scan started
20:42:53.0828 2384        Mode: Manual; SigCheck; TDLFS;
20:42:53.0828 2384        ============================================================
20:42:55.0531 2384        Abiosdsk - ok
20:42:55.0734 2384        abp480n5 - ok
20:42:55.0890 2384        ACEDRV05        (0a1e97197609f92d2425b67da0bb0a7f) C:\WINDOWS\system32\drivers\ACEDRV05.sys
20:42:57.0312 2384        ACEDRV05 ( UnsignedFile.Multi.Generic ) - warning
20:42:57.0312 2384        ACEDRV05 - detected UnsignedFile.Multi.Generic (1)
20:42:57.0375 2384        ACEDRV07        (4e5451dd0aec8504d7f8030dd2d4c416) C:\WINDOWS\system32\drivers\ACEDRV07.sys
20:42:57.0406 2384        ACEDRV07 ( UnsignedFile.Multi.Generic ) - warning
20:42:57.0406 2384        ACEDRV07 - detected UnsignedFile.Multi.Generic (1)
20:42:57.0500 2384        ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
20:42:59.0187 2384        ACPI - ok
20:42:59.0359 2384        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
20:42:59.0578 2384        ACPIEC - ok
20:42:59.0640 2384        adpu160m - ok
20:42:59.0750 2384        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
20:43:00.0015 2384        aec - ok
20:43:00.0078 2384        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
20:43:00.0125 2384        AFD - ok
20:43:00.0187 2384        Aha154x - ok
20:43:00.0218 2384        aic78u2 - ok
20:43:00.0234 2384        aic78xx - ok
20:43:00.0265 2384        AliIde - ok
20:43:00.0296 2384        amsint - ok
20:43:00.0343 2384        Arp1394        (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
20:43:00.0593 2384        Arp1394 - ok
20:43:00.0609 2384        asc - ok
20:43:00.0640 2384        asc3350p - ok
20:43:00.0656 2384        asc3550 - ok
20:43:00.0718 2384        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
20:43:00.0968 2384        AsyncMac - ok
20:43:01.0015 2384        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
20:43:01.0140 2384        atapi - ok
20:43:01.0156 2384        Atdisk - ok
20:43:01.0234 2384        atksgt          (6e996cf8459a2594e0e9609d0e34d41f) C:\WINDOWS\system32\DRIVERS\atksgt.sys
20:43:01.0281 2384        atksgt ( UnsignedFile.Multi.Generic ) - warning
20:43:01.0281 2384        atksgt - detected UnsignedFile.Multi.Generic (1)
20:43:01.0312 2384        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
20:43:01.0468 2384        Atmarpc - ok
20:43:01.0531 2384        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
20:43:01.0671 2384        audstub - ok
20:43:01.0718 2384        avgntflt        (7713e4eb0276702faa08e52a6e23f2a6) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
20:43:01.0828 2384        avgntflt - ok
20:43:01.0875 2384        avipbb          (475fbb85956534720858ae72010c0a43) C:\WINDOWS\system32\DRIVERS\avipbb.sys
20:43:01.0890 2384        avipbb - ok
20:43:01.0921 2384        avkmgr          (271cfd1a989209b1964e24d969552bf7) C:\WINDOWS\system32\DRIVERS\avkmgr.sys
20:43:01.0937 2384        avkmgr - ok
20:43:01.0984 2384        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
20:43:02.0171 2384        Beep - ok
20:43:02.0234 2384        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
20:43:02.0421 2384        cbidf2k - ok
20:43:02.0453 2384        CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
20:43:02.0656 2384        CCDECODE - ok
20:43:02.0671 2384        cd20xrnt - ok
20:43:02.0703 2384        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
20:43:02.0843 2384        Cdaudio - ok
20:43:02.0890 2384        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
20:43:03.0031 2384        Cdfs - ok
20:43:03.0062 2384        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
20:43:03.0218 2384        Cdrom - ok
20:43:03.0234 2384        Changer - ok
20:43:03.0281 2384        CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
20:43:03.0406 2384        CmBatt - ok
20:43:03.0437 2384        CmdIde - ok
20:43:03.0500 2384        CoachUsb        (7a0b457eefef8cbaa0cc44c8819113bd) C:\WINDOWS\system32\DRIVERS\CoachUsb.sys
20:43:03.0578 2384        CoachUsb - ok
20:43:03.0640 2384        CoachVc        (614ca0bfa09861e42ad8d14b83540758) C:\WINDOWS\system32\DRIVERS\CoachVc.sys
20:43:03.0671 2384        CoachVc - ok
20:43:03.0703 2384        Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
20:43:03.0843 2384        Compbatt - ok
20:43:03.0875 2384        Cpqarray - ok
20:43:03.0890 2384        dac2w2k - ok
20:43:03.0921 2384        dac960nt - ok
20:43:03.0937 2384        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
20:43:04.0140 2384        Disk - ok
20:43:04.0234 2384        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
20:43:04.0515 2384        dmboot - ok
20:43:04.0546 2384        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
20:43:04.0718 2384        dmio - ok
20:43:04.0734 2384        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
20:43:04.0937 2384        dmload - ok
20:43:05.0000 2384        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
20:43:05.0171 2384        DMusic - ok
20:43:05.0187 2384        dpti2o - ok
20:43:05.0234 2384        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
20:43:05.0390 2384        drmkaud - ok
20:43:05.0406 2384        EagleNT - ok
20:43:05.0468 2384        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
20:43:05.0656 2384        Fastfat - ok
20:43:05.0687 2384        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
20:43:05.0843 2384        Fdc - ok
20:43:05.0875 2384        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
20:43:06.0015 2384        Fips - ok
20:43:06.0046 2384        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
20:43:06.0171 2384        Flpydisk - ok
20:43:06.0218 2384        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
20:43:06.0375 2384        FltMgr - ok
20:43:06.0437 2384        FsUsbExDisk    (790a4ca68f44be35967b3df61f3e4675) C:\WINDOWS\system32\FsUsbExDisk.SYS
20:43:06.0484 2384        FsUsbExDisk ( UnsignedFile.Multi.Generic ) - warning
20:43:06.0484 2384        FsUsbExDisk - detected UnsignedFile.Multi.Generic (1)
20:43:06.0531 2384        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
20:43:06.0671 2384        Fs_Rec - ok
20:43:06.0703 2384        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
20:43:06.0890 2384        Ftdisk - ok
20:43:06.0906 2384        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
20:43:07.0109 2384        Gpc - ok
20:43:07.0156 2384        HdAudAddService (2a013e7530beab6e569faa83f517e836) C:\WINDOWS\system32\drivers\HdAudio.sys
20:43:07.0281 2384        HdAudAddService - ok
20:43:07.0328 2384        HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
20:43:07.0828 2384        HDAudBus - ok
20:43:07.0875 2384        HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
20:43:08.0187 2384        HidUsb - ok
20:43:08.0203 2384        hpn - ok
20:43:08.0250 2384        HSFHWAZL        (14b15d0d803ef4ab9b525b7e2da303ef) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
20:43:08.0296 2384        HSFHWAZL - ok
20:43:08.0421 2384        HSF_DPV        (cbf6831420a97e8fbb91e5f52b707ef7) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
20:43:08.0500 2384        HSF_DPV - ok
20:43:08.0578 2384        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
20:43:08.0625 2384        HTTP - ok
20:43:08.0640 2384        i2omgmt - ok
20:43:08.0671 2384        i2omp - ok
20:43:08.0687 2384        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
20:43:08.0875 2384        i8042prt - ok
20:43:09.0000 2384        ialm            (6fcb904910da07c9dc2593d66438fa29) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
20:43:09.0218 2384        ialm - ok
20:43:09.0265 2384        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
20:43:09.0484 2384        Imapi - ok
20:43:09.0515 2384        ini910u - ok
20:43:09.0781 2384        IntcAzAudAddService (8443479648f804445e9dafef0f219231) C:\WINDOWS\system32\drivers\RtkHDAud.sys
20:43:10.0203 2384        IntcAzAudAddService - ok
20:43:10.0296 2384        IntelIde        (69c4e3c9e67a1f103b94e14fdd5f3213) C:\WINDOWS\system32\DRIVERS\intelide.sys
20:43:10.0593 2384        IntelIde - ok
20:43:10.0640 2384        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
20:43:10.0781 2384        intelppm - ok
20:43:10.0812 2384        Ip6Fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
20:43:10.0968 2384        Ip6Fw - ok
20:43:11.0031 2384        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
20:43:11.0171 2384        IpFilterDriver - ok
20:43:11.0203 2384        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
20:43:11.0343 2384        IpInIp - ok
20:43:11.0390 2384        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
20:43:11.0515 2384        IpNat - ok
20:43:11.0562 2384        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
20:43:11.0703 2384        IPSec - ok
20:43:11.0734 2384        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
20:43:11.0828 2384        IRENUM - ok
20:43:11.0843 2384        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
20:43:12.0015 2384        isapnp - ok
20:43:12.0078 2384        K320bus        (603962b049a0018b3922fe4fc6050692) C:\WINDOWS\system32\DRIVERS\K320bus.sys
20:43:12.0109 2384        K320bus ( UnsignedFile.Multi.Generic ) - warning
20:43:12.0109 2384        K320bus - detected UnsignedFile.Multi.Generic (1)
20:43:12.0140 2384        K320mdfl        (9bbc21a904d7c873218f689fe210ed2b) C:\WINDOWS\system32\DRIVERS\K320mdfl.sys
20:43:12.0156 2384        K320mdfl ( UnsignedFile.Multi.Generic ) - warning
20:43:12.0156 2384        K320mdfl - detected UnsignedFile.Multi.Generic (1)
20:43:12.0203 2384        K320mdm        (76b5dfdec0bf89b2b9add07fc3288a03) C:\WINDOWS\system32\DRIVERS\K320mdm.sys
20:43:12.0234 2384        K320mdm ( UnsignedFile.Multi.Generic ) - warning
20:43:12.0234 2384        K320mdm - detected UnsignedFile.Multi.Generic (1)
20:43:12.0281 2384        K320mgmt        (e40fcab6e9c2b25c42216c233fbfb220) C:\WINDOWS\system32\DRIVERS\K320mgmt.sys
20:43:12.0312 2384        K320mgmt ( UnsignedFile.Multi.Generic ) - warning
20:43:12.0312 2384        K320mgmt - detected UnsignedFile.Multi.Generic (1)
20:43:12.0359 2384        K320obex        (26c7ba5d3ebedcc4447ec10b6a193047) C:\WINDOWS\system32\DRIVERS\K320obex.sys
20:43:12.0406 2384        K320obex ( UnsignedFile.Multi.Generic ) - warning
20:43:12.0406 2384        K320obex - detected UnsignedFile.Multi.Generic (1)
20:43:12.0453 2384        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
20:43:12.0625 2384        Kbdclass - ok
20:43:12.0671 2384        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
20:43:12.0859 2384        kmixer - ok
20:43:12.0921 2384        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
20:43:13.0046 2384        KSecDD - ok
20:43:13.0078 2384        lbrtfdc - ok
20:43:13.0156 2384        lirsgt          (975b6cf65f44e95883f3855bae8cecaf) C:\WINDOWS\system32\DRIVERS\lirsgt.sys
20:43:13.0171 2384        lirsgt ( UnsignedFile.Multi.Generic ) - warning
20:43:13.0171 2384        lirsgt - detected UnsignedFile.Multi.Generic (1)
20:43:13.0234 2384        MBAMProtector  (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys
20:43:13.0265 2384        MBAMProtector - ok
20:43:13.0343 2384        mdmxsdk        (3c318b9cd391371bed62126581ee9961) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
20:43:13.0359 2384        mdmxsdk - ok
20:43:13.0437 2384        MHNDRV          (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys
20:43:13.0468 2384        MHNDRV ( UnsignedFile.Multi.Generic ) - warning
20:43:13.0468 2384        MHNDRV - detected UnsignedFile.Multi.Generic (1)
20:43:13.0531 2384        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
20:43:13.0796 2384        mnmdd - ok
20:43:13.0859 2384        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
20:43:14.0000 2384        Modem - ok
20:43:14.0046 2384        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
20:43:14.0187 2384        Mouclass - ok
20:43:14.0250 2384        mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
20:43:14.0375 2384        mouhid - ok
20:43:14.0421 2384        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
20:43:14.0593 2384        MountMgr - ok
20:43:14.0609 2384        mraid35x - ok
20:43:14.0640 2384        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
20:43:14.0796 2384        MRxDAV - ok
20:43:14.0875 2384        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
20:43:14.0984 2384        MRxSmb - ok
20:43:15.0046 2384        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
20:43:15.0234 2384        Msfs - ok
20:43:15.0281 2384        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
20:43:15.0468 2384        MSKSSRV - ok
20:43:15.0515 2384        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
20:43:15.0750 2384        MSPCLOCK - ok
20:43:15.0796 2384        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
20:43:16.0031 2384        MSPQM - ok
20:43:16.0125 2384        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
20:43:16.0343 2384        mssmbios - ok
20:43:16.0375 2384        MSTEE          (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
20:43:16.0609 2384        MSTEE - ok
20:43:16.0671 2384        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
20:43:16.0703 2384        Mup - ok
20:43:16.0750 2384        NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
20:43:16.0984 2384        NABTSFEC - ok
20:43:17.0046 2384        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
20:43:17.0265 2384        NDIS - ok
20:43:17.0296 2384        NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
20:43:17.0453 2384        NdisIP - ok
20:43:17.0500 2384        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
20:43:17.0546 2384        NdisTapi - ok
20:43:17.0578 2384        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
20:43:17.0718 2384        Ndisuio - ok
20:43:17.0750 2384        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
20:43:17.0890 2384        NdisWan - ok
20:43:17.0953 2384        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
20:43:18.0000 2384        NDProxy - ok
20:43:18.0046 2384        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
20:43:18.0187 2384        NetBIOS - ok
20:43:18.0234 2384        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
20:43:18.0390 2384        NetBT - ok
20:43:18.0437 2384        NIC1394        (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
20:43:18.0625 2384        NIC1394 - ok
20:43:18.0656 2384        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
20:43:18.0812 2384        Npfs - ok
20:43:18.0859 2384        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
20:43:19.0046 2384        Ntfs - ok
20:43:19.0109 2384        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
20:43:19.0234 2384        Null - ok
20:43:19.0312 2384        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
20:43:19.0453 2384        NwlnkFlt - ok
20:43:19.0484 2384        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
20:43:19.0625 2384        NwlnkFwd - ok
20:43:19.0640 2384        ohci1394        (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
20:43:19.0781 2384        ohci1394 - ok
20:43:19.0828 2384        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\drivers\Parport.sys
20:43:19.0984 2384        Parport - ok
20:43:20.0000 2384        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
20:43:20.0156 2384        PartMgr - ok
20:43:20.0218 2384        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
20:43:20.0343 2384        ParVdm - ok
20:43:20.0453 2384        PCANDIS5        (d0084a9ade989fe703e4f22171f4e4dc) C:\Programme\HotSpot Manager\PCandis5.sys
20:43:20.0468 2384        PCANDIS5 ( UnsignedFile.Multi.Generic ) - warning
20:43:20.0468 2384        PCANDIS5 - detected UnsignedFile.Multi.Generic (1)
20:43:20.0515 2384        pccsmcfd        (175cc28dcf819f78caa3fbd44ad9e52a) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
20:43:20.0562 2384        pccsmcfd - ok
20:43:20.0609 2384        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
20:43:20.0765 2384        PCI - ok
20:43:20.0781 2384        PCIDump - ok
20:43:20.0828 2384        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
20:43:21.0015 2384        PCIIde - ok
20:43:21.0062 2384        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
20:43:21.0296 2384        Pcmcia - ok
20:43:21.0312 2384        PDCOMP - ok
20:43:21.0328 2384        PDFRAME - ok
20:43:21.0359 2384        PDRELI - ok
20:43:21.0375 2384        PDRFRAME - ok
20:43:21.0406 2384        perc2 - ok
20:43:21.0421 2384        perc2hib - ok
20:43:21.0468 2384        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
20:43:21.0656 2384        PptpMiniport - ok
20:43:21.0734 2384        prodrv04        (4aa86b6f5fdf5ed32adc723b0e5b052d) C:\WINDOWS\System32\drivers\prodrv04.sys
20:43:21.0750 2384        prodrv04 ( UnsignedFile.Multi.Generic ) - warning
20:43:21.0750 2384        prodrv04 - detected UnsignedFile.Multi.Generic (1)
20:43:21.0765 2384        prodrv06        (c051deb1ad5fdaae04114a30998ff869) C:\WINDOWS\System32\drivers\prodrv06.sys
20:43:21.0781 2384        prodrv06 ( UnsignedFile.Multi.Generic ) - warning
20:43:21.0781 2384        prodrv06 - detected UnsignedFile.Multi.Generic (1)
20:43:21.0812 2384        prohlp02        (d9d5cc53e73d7796ffc6266d52de80da) C:\WINDOWS\system32\drivers\prohlp02.sys
20:43:21.0890 2384        prohlp02 ( UnsignedFile.Multi.Generic ) - warning
20:43:21.0890 2384        prohlp02 - detected UnsignedFile.Multi.Generic (1)
20:43:21.0906 2384        prosync1        (f3471e7971ee62420451d958da635064) C:\WINDOWS\system32\drivers\prosync1.sys
20:43:21.0968 2384        prosync1 ( UnsignedFile.Multi.Generic ) - warning
20:43:21.0968 2384        prosync1 - detected UnsignedFile.Multi.Generic (1)
20:43:22.0046 2384        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
20:43:22.0218 2384        PSched - ok
20:43:22.0250 2384        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
20:43:22.0468 2384        Ptilink - ok
20:43:22.0546 2384        PxHelp20        (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
20:43:22.0578 2384        PxHelp20 - ok
20:43:22.0609 2384        ql1080 - ok
20:43:22.0625 2384        Ql10wnt - ok
20:43:22.0640 2384        ql12160 - ok
20:43:22.0656 2384        ql1240 - ok
20:43:22.0687 2384        ql1280 - ok
20:43:22.0718 2384        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
20:43:22.0843 2384        RasAcd - ok
20:43:22.0875 2384        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
20:43:23.0015 2384        Rasl2tp - ok
20:43:23.0062 2384        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
20:43:23.0203 2384        RasPppoe - ok
20:43:23.0218 2384        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
20:43:23.0343 2384        Raspti - ok
20:43:23.0375 2384        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
20:43:23.0515 2384        Rdbss - ok
20:43:23.0546 2384        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
20:43:23.0687 2384        RDPCDD - ok
20:43:23.0718 2384        rdpdr          (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
20:43:23.0859 2384        rdpdr - ok
20:43:23.0921 2384        RDPWD          (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
20:43:23.0984 2384        RDPWD - ok
20:43:24.0031 2384        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
20:43:24.0171 2384        redbook - ok
20:43:24.0250 2384        RTL8023xp      (7f0413bdd7d53eb4c7a371e7f6f84df1) C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
20:43:24.0343 2384        RTL8023xp - ok
20:43:24.0390 2384        rtl8139        (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
20:43:24.0593 2384        rtl8139 - ok
20:43:24.0640 2384        s115bus        (e1ab463b36a7ef31d8a73a97a9b57afa) C:\WINDOWS\system32\DRIVERS\s115bus.sys
20:43:24.0687 2384        s115bus - ok
20:43:24.0734 2384        s115mdfl        (e24113fc13b8737c94cf4e3415488c76) C:\WINDOWS\system32\DRIVERS\s115mdfl.sys
20:43:24.0765 2384        s115mdfl - ok
20:43:24.0812 2384        s115mdm        (4029e49e7c673aa0670bd206b0af1b5b) C:\WINDOWS\system32\DRIVERS\s115mdm.sys
20:43:24.0875 2384        s115mdm - ok
20:43:24.0890 2384        s115mgmt        (eb02ab4ca8bccecfde236cad8fc6e135) C:\WINDOWS\system32\DRIVERS\s115mgmt.sys
20:43:24.0921 2384        s115mgmt - ok
20:43:24.0968 2384        s115obex        (089869db9ffd2ac807fa87fe82ac7761) C:\WINDOWS\system32\DRIVERS\s115obex.sys
20:43:25.0000 2384        s115obex - ok
20:43:25.0062 2384        s816bus        (8c156e6b568aa927eb5deadeb870bdd2) C:\WINDOWS\system32\DRIVERS\s816bus.sys
20:43:25.0093 2384        s816bus - ok
20:43:25.0140 2384        s816mdfl        (d4ed429953a2b8b09c702805813a26c8) C:\WINDOWS\system32\DRIVERS\s816mdfl.sys
20:43:25.0171 2384        s816mdfl - ok
20:43:25.0218 2384        s816mdm        (94306f371a6ff8b690bea81157111b3b) C:\WINDOWS\system32\DRIVERS\s816mdm.sys
20:43:25.0250 2384        s816mdm - ok
20:43:25.0312 2384        s816mgmt        (fafdd00abad1b6029bf7f4067764ab41) C:\WINDOWS\system32\DRIVERS\s816mgmt.sys
20:43:25.0343 2384        s816mgmt - ok
20:43:25.0390 2384        s816nd5        (fd0d1e39cb22558d79bff59b66a5874a) C:\WINDOWS\system32\DRIVERS\s816nd5.sys
20:43:25.0421 2384        s816nd5 - ok
20:43:25.0468 2384        s816obex        (8eacd5e46764463e75f171d9bf305348) C:\WINDOWS\system32\DRIVERS\s816obex.sys
20:43:25.0500 2384        s816obex - ok
20:43:25.0562 2384        s816unic        (e2090b041b935430abc8e184b7d6cd75) C:\WINDOWS\system32\DRIVERS\s816unic.sys
20:43:25.0593 2384        s816unic - ok
20:43:25.0687 2384        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
20:43:25.0828 2384        Secdrv - ok
20:43:25.0890 2384        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\drivers\Serial.sys
20:43:26.0140 2384        Serial - ok
20:43:26.0250 2384        sfdrv01        (00de597b81b381053cb5b21a7f20e365) C:\WINDOWS\system32\drivers\sfdrv01.sys
20:43:26.0281 2384        sfdrv01 ( UnsignedFile.Multi.Generic ) - warning
20:43:26.0281 2384        sfdrv01 - detected UnsignedFile.Multi.Generic (1)
20:43:26.0328 2384        sfhlp01        (462aee0ea0481ea8bd45cac876a4ccc4) C:\WINDOWS\system32\drivers\sfhlp01.sys
20:43:26.0359 2384        sfhlp01 ( UnsignedFile.Multi.Generic ) - warning
20:43:26.0359 2384        sfhlp01 - detected UnsignedFile.Multi.Generic (1)
20:43:26.0390 2384        sfhlp02        (64b9ab76f1b16eb059cb6cdd906c067a) C:\WINDOWS\system32\drivers\sfhlp02.sys
20:43:26.0421 2384        sfhlp02 ( UnsignedFile.Multi.Generic ) - warning
20:43:26.0421 2384        sfhlp02 - detected UnsignedFile.Multi.Generic (1)
20:43:26.0468 2384        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
20:43:26.0593 2384        Sfloppy - ok
20:43:26.0625 2384        sfsync02        (798d918d8f20380008277ce3ce5319d1) C:\WINDOWS\system32\drivers\sfsync02.sys
20:43:26.0687 2384        sfsync02 ( UnsignedFile.Multi.Generic ) - warning
20:43:26.0687 2384        sfsync02 - detected UnsignedFile.Multi.Generic (1)
20:43:26.0703 2384        Simbad - ok
20:43:26.0750 2384        SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
20:43:26.0921 2384        SLIP - ok
20:43:26.0953 2384        Sparrow - ok
20:43:27.0015 2384        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
20:43:27.0187 2384        splitter - ok
20:43:27.0234 2384        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
20:43:27.0343 2384        sr - ok
20:43:27.0421 2384        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
20:43:27.0500 2384        Srv - ok
20:43:27.0562 2384        SSHDRV51        (4217f2b8957c7e82e2a08d16bf4267cf) C:\WINDOWS\system32\drivers\SSHDRV51.sys
20:43:27.0640 2384        SSHDRV51 ( UnsignedFile.Multi.Generic ) - warning
20:43:27.0640 2384        SSHDRV51 - detected UnsignedFile.Multi.Generic (1)
20:43:27.0703 2384        SSHDRV85        (f0be373861a3f34cfab55c1b7ce1feb5) C:\WINDOWS\system32\drivers\SSHDRV85.sys
20:43:27.0718 2384        SSHDRV85 ( UnsignedFile.Multi.Generic ) - warning
20:43:27.0718 2384        SSHDRV85 - detected UnsignedFile.Multi.Generic (1)
20:43:27.0781 2384        ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
20:43:27.0812 2384        ssmdrv - ok
20:43:27.0875 2384        ss_bbus        (eaa66218cd39f5bb1b4853a78c67c787) C:\WINDOWS\system32\DRIVERS\ss_bbus.sys
20:43:27.0921 2384        ss_bbus - ok
20:43:27.0984 2384        ss_bmdfl        (91765f99914ed8693d8bc76524f21581) C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys
20:43:28.0046 2384        ss_bmdfl - ok
20:43:28.0078 2384        ss_bmdm        (840e7b738b03c10ee91d9b7d3d6eff15) C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys
20:43:28.0156 2384        ss_bmdm - ok
20:43:28.0218 2384        streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
20:43:28.0578 2384        streamip - ok
20:43:28.0625 2384        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
20:43:28.0750 2384        swenum - ok
20:43:28.0781 2384        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
20:43:28.0906 2384        swmidi - ok
20:43:28.0937 2384        symc810 - ok
20:43:28.0953 2384        symc8xx - ok
20:43:28.0968 2384        sym_hi - ok
20:43:29.0000 2384        sym_u3 - ok
20:43:29.0078 2384        SynTP          (1b75ec5d1a87a773a7c38855855466ae) C:\WINDOWS\system32\DRIVERS\SynTP.sys
20:43:29.0109 2384        SynTP - ok
20:43:29.0140 2384        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
20:43:29.0281 2384        sysaudio - ok
20:43:29.0359 2384        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
20:43:29.0453 2384        Tcpip - ok
20:43:29.0500 2384        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
20:43:29.0656 2384        TDPIPE - ok
20:43:29.0718 2384        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
20:43:29.0890 2384        TDTCP - ok
20:43:29.0937 2384        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
20:43:30.0140 2384        TermDD - ok
20:43:30.0171 2384        TosIde - ok
20:43:30.0218 2384        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
20:43:30.0375 2384        Udfs - ok
20:43:30.0390 2384        ultra - ok
20:43:30.0453 2384        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
20:43:30.0609 2384        Update - ok
20:43:30.0671 2384        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
20:43:30.0796 2384        usbehci - ok
20:43:30.0843 2384        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
20:43:30.0968 2384        usbhub - ok
20:43:31.0015 2384        usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
20:43:31.0156 2384        usbprint - ok
20:43:31.0234 2384        usbscan        (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
20:43:31.0390 2384        usbscan - ok
20:43:31.0421 2384        USBSTOR        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
20:43:31.0578 2384        USBSTOR - ok
20:43:31.0609 2384        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
20:43:31.0750 2384        usbuhci - ok
20:43:31.0796 2384        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
20:43:31.0937 2384        VgaSave - ok
20:43:31.0953 2384        ViaIde - ok
20:43:32.0015 2384        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
20:43:32.0156 2384        VolSnap - ok
20:43:32.0390 2384        w29n51          (67caa926ef06e07f2d31056b39f51c54) C:\WINDOWS\system32\DRIVERS\w29n51.sys
20:43:33.0218 2384        w29n51 - ok
20:43:33.0296 2384        w800bus        (b8c182df79ac8938311ac8e193d52762) C:\WINDOWS\system32\DRIVERS\w800bus.sys
20:43:33.0343 2384        w800bus ( UnsignedFile.Multi.Generic ) - warning
20:43:33.0343 2384        w800bus - detected UnsignedFile.Multi.Generic (1)
20:43:33.0421 2384        w800mdfl        (3af69f28c17e1e03bb894f00d905add8) C:\WINDOWS\system32\DRIVERS\w800mdfl.sys
20:43:33.0453 2384        w800mdfl ( UnsignedFile.Multi.Generic ) - warning
20:43:33.0453 2384        w800mdfl - detected UnsignedFile.Multi.Generic (1)
20:43:33.0500 2384        w800mdm        (0d12afd1e1c95226b4268c1777625d05) C:\WINDOWS\system32\DRIVERS\w800mdm.sys
20:43:33.0546 2384        w800mdm ( UnsignedFile.Multi.Generic ) - warning
20:43:33.0546 2384        w800mdm - detected UnsignedFile.Multi.Generic (1)
20:43:33.0625 2384        w800mgmt        (36ad2eb4a6376d08555864eb4cfd2508) C:\WINDOWS\system32\DRIVERS\w800mgmt.sys
20:43:33.0671 2384        w800mgmt ( UnsignedFile.Multi.Generic ) - warning
20:43:33.0671 2384        w800mgmt - detected UnsignedFile.Multi.Generic (1)
20:43:33.0734 2384        w800obex        (7905915006febbf0f137af36a3fd6429) C:\WINDOWS\system32\DRIVERS\w800obex.sys
20:43:33.0781 2384        w800obex ( UnsignedFile.Multi.Generic ) - warning
20:43:33.0781 2384        w800obex - detected UnsignedFile.Multi.Generic (1)
20:43:33.0843 2384        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
20:43:34.0171 2384        Wanarp - ok
20:43:34.0187 2384        WDICA - ok
20:43:34.0250 2384        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
20:43:34.0375 2384        wdmaud - ok
20:43:34.0468 2384        winachsf        (59d043485a6eda2ed2685c81489ae5bd) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
20:43:34.0562 2384        winachsf - ok
20:43:34.0718 2384        WS2IFSL        (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
20:43:34.0890 2384        WS2IFSL - ok
20:43:34.0937 2384        WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
20:43:35.0156 2384        WSTCODEC - ok
20:43:35.0218 2384        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
20:43:35.0265 2384        WudfPf - ok
20:43:35.0296 2384        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
20:43:35.0359 2384        WudfRd - ok
20:43:35.0437 2384        MBR (0x1B8)    (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk0\DR0
20:43:35.0671 2384        \Device\Harddisk0\DR0 - ok
20:43:35.0687 2384        Boot (0x1200)  (53f87d5263a6c05dec95efb1cf1b378c) \Device\Harddisk0\DR0\Partition0
20:43:35.0687 2384        \Device\Harddisk0\DR0\Partition0 - ok
20:43:35.0718 2384        Boot (0x1200)  (a288ab1b33c8aac4e22d651b693a8950) \Device\Harddisk0\DR0\Partition1
20:43:35.0718 2384        \Device\Harddisk0\DR0\Partition1 - ok
20:43:35.0734 2384        ============================================================
20:43:35.0734 2384        Scan finished
20:43:35.0734 2384        ============================================================
20:43:35.0875 2888        Detected object count: 27
20:43:35.0875 2888        Actual detected object count: 27
20:44:58.0593 2888        ACEDRV05 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0593 2888        ACEDRV05 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0625 2888        ACEDRV07 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0625 2888        ACEDRV07 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0625 2888        atksgt ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0625 2888        atksgt ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0656 2888        FsUsbExDisk ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0656 2888        FsUsbExDisk ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0656 2888        K320bus ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0656 2888        K320bus ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0656 2888        K320mdfl ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0656 2888        K320mdfl ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0656 2888        K320mdm ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0656 2888        K320mdm ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0687 2888        K320mgmt ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0687 2888        K320mgmt ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0687 2888        K320obex ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0687 2888        K320obex ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0687 2888        lirsgt ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0687 2888        lirsgt ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0718 2888        MHNDRV ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0718 2888        MHNDRV ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0718 2888        PCANDIS5 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0718 2888        PCANDIS5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0750 2888        prodrv04 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0750 2888        prodrv04 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0750 2888        prodrv06 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0750 2888        prodrv06 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0750 2888        prohlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0750 2888        prohlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0781 2888        prosync1 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0781 2888        prosync1 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0781 2888        sfdrv01 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0781 2888        sfdrv01 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0781 2888        sfhlp01 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0781 2888        sfhlp01 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0812 2888        sfhlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0812 2888        sfhlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0812 2888        sfsync02 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0812 2888        sfsync02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0843 2888        SSHDRV51 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0843 2888        SSHDRV51 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0843 2888        SSHDRV85 ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0843 2888        SSHDRV85 ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0843 2888        w800bus ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0843 2888        w800bus ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0843 2888        w800mdfl ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0843 2888        w800mdfl ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0843 2888        w800mdm ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0843 2888        w800mdm ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0843 2888        w800mgmt ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0843 2888        w800mgmt ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:44:58.0859 2888        w800obex ( UnsignedFile.Multi.Generic ) - skipped by user
20:44:58.0859 2888        w800obex ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:47:35.0000 1228        Deinitialize success

cosinus 19.12.2011 20:56
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Duncanizer 19.12.2011 22:28
Es öffnet sich leider nicht automatische eine combofix.txt. Und unter C:\ComboFix.txt. auc keine Datei zu finden.
Beim Start von Combofix kam die Meldung das der Realtimescanner ! "Antivir P.E." noch im Hintergrund läuft! Dabei habe ich alles aus gemacht (Schirm zu)

Weiderherstellungskonsole abfragen kamen! Scan wurde durchgeführt. Laptop fuhr automatisch runter.

cosinus 19.12.2011 23:09
Starte Windows neu, lösch die alte combofix.exe, lade CF neu runter und probier es bitte nochmal.

Duncanizer 20.12.2011 21:40
Windows neu gestartet...alte combofix.exe gelöscht. neue runtergeladen.
selbe ergebnis wie gestern! :headbang:
Wird alles wie im Leitfaden angeben durchgeführt...bis zu der stelle wo er die Log-Datei erstellen soll.....da startet der rechner automatisch neu! erstellt kein Log-file
.


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:39 Uhr.
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131