Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows Security Center: Achtung! Computer gesperrt (https://www.trojaner-board.de/108950-windows-security-center-achtung-computer-gesperrt.html)

Suppenloeffe 02.02.2012 22:45
Windows Security Center: Achtung! Computer gesperrt
 
Hallo,

ich habe mir soeben ein Trojaner/Virus eingefangen. Während des Surfens poppte ein Fenster auf mit obigen Titel. Per Ukash soll ich 100€ via Ukash überweisen, da ich meine Windows Lizenz nicht gültig sei.

Ich wäre euch dankbar, wenn Ihr mir in diese Misere helfen könntet.

Hier die beiden Logfiles
OTL Extras logfile
Code:
OTL Extras logfile created on: 02.02.2012 22:30:09 - Run 1
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\***\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,91 Gb Total Physical Memory | 6,70 Gb Available Physical Memory | 84,72% Memory free
15,82 Gb Paging File | 14,64 Gb Available in Paging File | 92,51% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 52,91 Gb Free Space | 44,41% Space Free | Partition Type: NTFS
Drive D: | 976,56 Gb Total Space | 698,14 Gb Free Space | 71,49% Space Free | Partition Type: NTFS
Drive E: | 886,45 Gb Total Space | 620,45 Gb Free Space | 69,99% Space Free | Partition Type: NTFS
Drive Q: | 3,74 Gb Total Space | 3,60 Gb Free Space | 96,40% Space Free | Partition Type: FAT32
 
Computer Name: SUPPENLOEFFELPC | User Name: Suppenloeffel | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"9000:TCP" = 9000:TCP:*:Enabled:Logitech Media Server 9000 tcp (UI)
"9001:TCP" = 9001:TCP:*:Enabled:Logitech Media Server 9001 tcp (UI)
"9002:TCP" = 9002:TCP:*:Enabled:Logitech Media Server 9002 tcp (UI)
"9003:TCP" = 9003:TCP:*:Enabled:Logitech Media Server 9003 tcp (UI)
"9004:TCP" = 9004:TCP:*:Enabled:Logitech Media Server 9004 tcp (UI)
"9005:TCP" = 9005:TCP:*:Enabled:Logitech Media Server 9005 tcp (UI)
"9006:TCP" = 9006:TCP:*:Enabled:Logitech Media Server 9006 tcp (UI)
"9007:TCP" = 9007:TCP:*:Enabled:Logitech Media Server 9007 tcp (UI)
"9008:TCP" = 9008:TCP:*:Enabled:Logitech Media Server 9008 tcp (UI)
"9009:TCP" = 9009:TCP:*:Enabled:Logitech Media Server 9009 tcp (UI)
"9010:TCP" = 9010:TCP:*:Enabled:Logitech Media Server 9010 tcp (UI)
"9100:TCP" = 9100:TCP:*:Enabled:Logitech Media Server 9100 tcp (UI)
"8000:TCP" = 8000:TCP:*:Enabled:Logitech Media Server 8000 tcp (UI)
"10000:TCP" = 10000:TCP:*:Enabled:Logitech Media Server 10000 tcp (UI)
"9090:TCP" = 9090:TCP:*:Enabled:Logitech Media Server 9090 tcp (UI)
"3483:UDP" = 3483:UDP:*:Enabled:Logitech Media Server 3483 udp
"3483:TCP" = 3483:TCP:*:Enabled:Logitech Media Server 3483 tcp
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"9000:TCP" = 9000:TCP:*:Enabled:Logitech Media Server 9000 tcp (UI)
"9001:TCP" = 9001:TCP:*:Enabled:Logitech Media Server 9001 tcp (UI)
"9002:TCP" = 9002:TCP:*:Enabled:Logitech Media Server 9002 tcp (UI)
"9003:TCP" = 9003:TCP:*:Enabled:Logitech Media Server 9003 tcp (UI)
"9004:TCP" = 9004:TCP:*:Enabled:Logitech Media Server 9004 tcp (UI)
"9005:TCP" = 9005:TCP:*:Enabled:Logitech Media Server 9005 tcp (UI)
"9006:TCP" = 9006:TCP:*:Enabled:Logitech Media Server 9006 tcp (UI)
"9007:TCP" = 9007:TCP:*:Enabled:Logitech Media Server 9007 tcp (UI)
"9008:TCP" = 9008:TCP:*:Enabled:Logitech Media Server 9008 tcp (UI)
"9009:TCP" = 9009:TCP:*:Enabled:Logitech Media Server 9009 tcp (UI)
"9010:TCP" = 9010:TCP:*:Enabled:Logitech Media Server 9010 tcp (UI)
"9100:TCP" = 9100:TCP:*:Enabled:Logitech Media Server 9100 tcp (UI)
"8000:TCP" = 8000:TCP:*:Enabled:Logitech Media Server 8000 tcp (UI)
"10000:TCP" = 10000:TCP:*:Enabled:Logitech Media Server 10000 tcp (UI)
"9090:TCP" = 9090:TCP:*:Enabled:Logitech Media Server 9090 tcp (UI)
"3483:UDP" = 3483:UDP:*:Enabled:Logitech Media Server 3483 udp
"3483:TCP" = 3483:TCP:*:Enabled:Logitech Media Server 3483 tcp
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series" = Canon MP560 series MP Drivers
"{138A4072-9E64-46BD-B5F9-DB2BB395391F}" = LWS VideoEffects
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64
"{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{8219EDCB-CE5A-4348-B056-AAC0FE4E99D0}" = Microsoft IntelliType Pro 8.2
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64
"{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4
"{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A2862596-B7C3-4D7F-A227-40FEDDF1332B}" = WEB.DE Toolbar MSVC100 CRT x64
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 280.19
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.2.23.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}" = Microsoft Xbox 360 Accessories 1.2
"{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit)
"{D4F66BBA-D79E-4F11-9B06-70C3D75A2958}" = Adobe Photoshop Lightroom 3.6 64-bit
"{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft IntelliType Pro 8.2" = Microsoft IntelliType Pro 8.2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0513EE35-E0FB-4166-B663-BD1AE3A803DE}" = Anno 1404
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin
"{23BE4DF2-293D-4077-82F4-1FD8C269277C}" = TuneUp Utilities Language Pack (en-US)
"{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}" = TuneUp Utilities 2011
"{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 27
"{2A30052B-831C-41D3-8044-3C0388066350}" = Seagate Manager Installer
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0017-0407-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (German) 2010
"{90140000-0017-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{0F513B77-0D84-4615-87F7-B814D1FC64F5}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.OMUI.de-de_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.OMUI.de-de_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.OMUI.de-de_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUSR_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0407-1000-0000000FF1CE}_Office14.OMUI.de-de_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0100-0407-0000-0000000FF1CE}" = Microsoft Office O MUI (German) 2010
"{90140000-0100-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{90D3D490-F6C4-4F4A-971B-93D0A66F2E2E}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0101-0407-0000-0000000FF1CE}" = Microsoft Office X MUI (German) 2010
"{90140000-0101-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{4733E76A-5F12-4513-9CA8-DB2540A74EDA}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin
"{A07B2C21-863B-47AB-AE7E-20BB00BD7D33}" = ANNO 1404 - Venedig
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Deutsch
"{AC76BA86-7AD7-2447-0000-A00000000003}" = Chinese Simplified Fonts Support For Adobe Reader X
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{CC4BBCBA-89F6-47C3-9B0F-5CE5BB1C316C}" = WEB.DE Toolbar MSVC100 CRT x86
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
"{EED027B7-0DB6-404B-8F45-6DFEE34A0441}" = LWS Video Mask Maker
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"1&1 Mail & Media GmbH 1und1Softwareaktualisierung" = WEB.DE Softwareaktualisierung
"1&1 Mail & Media GmbH Toolbar IE8" = WEB.DE Toolbar für Internet Explorer
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe_697a06b96d8bcbe2d77b88e7d5448d0" = Adobe Creative Suite 4 Master Collection
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Canon MP560 series Benutzerregistrierung" = Canon MP560 series Benutzerregistrierung
"Canon_IJ_Network_Scan_UTILITY" = Canon IJ Network Scan Utility
"Canon_IJ_Network_UTILITY" = Canon IJ Network Tool
"CANONIJPLM100" = Canon Inkjet Printer/Scanner/Fax Extended Survey Program
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"DAEMON Tools Lite" = DAEMON Tools Lite
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"GTK 2.0" = GTK+ Runtime 2.14.7 rev a (nur entfernen)
"InstallShield_{2A30052B-831C-41D3-8044-3C0388066350}" = Seagate Manager Installer
"InstallShield_{48B0F38D-1913-44F3-99AA-D4C55A2B038E}" = Drive Manager
"InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"Logitech Media Server_is1" = Logitech Media Server 7.7.1
"Logitech Vid" = Logitech Vid HD
"MediaMonkey_is1" = MediaMonkey 3.2
"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)
"Mozilla Thunderbird 9.0.1 (x86 de)" = Mozilla Thunderbird 9.0.1 (x86 de)
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"Office14.OMUI.de-de" = Microsoft Office Language Pack 2010 - German/Deutsch
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Pidgin" = Pidgin
"PunkBusterSvc" = PunkBuster Services
"SABnzbd" = SABnzbd 0.6.9
"ShiftN_is1" = ShiftN 3.6
"SpeedFan" = SpeedFan (remove only)
"Steam App 107100" = Bastion
"Steam App 12210" = Grand Theft Auto IV
"Steam App 17460" = Mass Effect
"Steam App 18500" = Defense Grid: The Awakening
"Steam App 240" = Counter-Strike: Source
"Steam App 24960" = Battlefield: Bad Company 2
"Steam App 26900" = Crayon Physics Deluxe
"Steam App 3590" = Plants vs. Zombies: Game of the Year
"Steam App 38900" = Rhythm Zone
"Steam App 40800" = Super Meat Boy
"Steam App 43110" = Metro 2033
"Steam App 440" = Team Fortress 2
"Steam App 48000" = LIMBO
"Steam App 58400" = Turba
"Steam App 620" = Portal 2
"Steam App 62000" = Flight Control HD
"Steam App 62100" = Chime
"TuneUp Utilities 2011" = TuneUp Utilities 2011
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.11
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 26.11.2011 11:05:47 | Computer Name = Suppenloeffelpc | Source = Application Hang | ID = 1002
Description = Programm GTAIV.exe, Version 1.0.7.0 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: a0c    Startzeit:
01ccac4ca06d80b1    Endzeit: 251    Anwendungspfad: d:\games\steam\steamapps\common\grand
 theft auto iv\GTAIV\GTAIV.exe    Berichts-ID: 
 
Error - 03.12.2011 16:40:18 | Computer Name = Suppenloeffelpc | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: GTAIV.exe, Version: 1.0.7.0, Zeitstempel:
 0x4bd9efbe  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17514, Zeitstempel:
 0x4ce7ba58  Ausnahmecode: 0xc0000374  Fehleroffset: 0x000ce653  ID des fehlerhaften Prozesses:
 0xf8c  Startzeit der fehlerhaften Anwendung: 0x01ccb1fbb9192ea1  Pfad der fehlerhaften
 Anwendung: d:\games\steam\steamapps\common\grand theft auto iv\GTAIV\GTAIV.exe  Pfad
 des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll  Berichtskennung: 02bb7bff-1def-11e1-9f1c-002522bcc7d3
 
Error - 07.12.2011 19:01:48 | Computer Name = Suppenloeffelpc | Source = Application | ID = 0
Description =
 
Error - 07.12.2011 19:01:48 | Computer Name = Suppenloeffelpc | Source = Application | ID = 0
Description =
 
Error - 07.12.2011 19:01:49 | Computer Name = Suppenloeffelpc | Source = Application | ID = 0
Description =
 
Error - 07.12.2011 19:01:49 | Computer Name = Suppenloeffelpc | Source = Application | ID = 0
Description =
 
Error - 18.12.2011 12:08:56 | Computer Name = Suppenloeffelpc | Source = Application Hang | ID = 1002
Description = Programm MediaMonkey.exe, Version 3.2.3.1303 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 11a8    Startzeit: 01ccbd8a4883e289    Endzeit: 7    Anwendungspfad:
C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe    Berichts-ID: 893a34da-2992-11e1-95bd-002522bcc7d3

 
Error - 18.12.2011 12:25:50 | Computer Name = Suppenloeffelpc | Source = Application Hang | ID = 1002
Description = Programm MediaMonkey.exe, Version 3.2.3.1303 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: b00    Startzeit: 01ccbda0bdf1c8d4    Endzeit: 9    Anwendungspfad: C:\Program
 Files (x86)\MediaMonkey\MediaMonkey.exe    Berichts-ID: f184eb2d-2994-11e1-95bd-002522bcc7d3

 
Error - 20.12.2011 18:11:17 | Computer Name = Suppenloeffelpc | Source = Microsoft-Windows-RestartManager | ID = 10006
Description = Die Anwendung oder der Dienst "Logitech Media Server" konnte nicht
 heruntergefahren werden.
 
Error - 07.01.2012 09:29:52 | Computer Name = Suppenloeffelpc | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Steam.exe, Version: 1.0.1065.11,
Zeitstempel: 0x4d9b89de  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17514,
 Zeitstempel: 0x4ce7ba58  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00038da9  ID des fehlerhaften
 Prozesses: 0xa84  Startzeit der fehlerhaften Anwendung: 0x01cccd406241b567  Pfad der
 fehlerhaften Anwendung: D:\Games\Steam\Steam.exe  Pfad des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll
Berichtskennung:
 ad57f86a-3933-11e1-9b0f-002522bcc7d3
 
[ System Events ]
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = DCOM | ID = 10005
Description =
 
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = DCOM | ID = 10005
Description =
 
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = DCOM | ID = 10005
Description =
 
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:  %%1068
 
 
< End of report >
Und der OTL logfile
Code:
OTL logfile created on: 02.02.2012 22:30:09 - Run 1
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\***\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,91 Gb Total Physical Memory | 6,70 Gb Available Physical Memory | 84,72% Memory free
15,82 Gb Paging File | 14,64 Gb Available in Paging File | 92,51% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 52,91 Gb Free Space | 44,41% Space Free | Partition Type: NTFS
Drive D: | 976,56 Gb Total Space | 698,14 Gb Free Space | 71,49% Space Free | Partition Type: NTFS
Drive E: | 886,45 Gb Total Space | 620,45 Gb Free Space | 69,99% Space Free | Partition Type: NTFS
Drive Q: | 3,74 Gb Total Space | 3,60 Gb Free Space | 96,40% Space Free | Partition Type: FAT32
 
Computer Name: SUPPENLOEFFELPC | User Name: *** | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
 
 
========== Modules (No Company Name) ==========
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (UMVPFSrv) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (FreeAgentGoNext Service) -- C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (IJPLMSVC) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE ()
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (atksgt) -- C:\Windows\SysNative\drivers\atksgt.sys ()
DRV:64bit: - (lirsgt) -- C:\Windows\SysNative\drivers\lirsgt.sys ()
DRV:64bit: - (LVUVC64) Logitech HD Webcam C510(UVC) -- C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (CompFilter64) -- C:\Windows\SysNative\drivers\lvbflt64.sys (Logitech Inc.)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (EtronXHCI) -- C:\Windows\SysNative\drivers\EtronXHCI.sys (Etron Technology Inc)
DRV:64bit: - (EtronHub3) -- C:\Windows\SysNative\drivers\EtronHub3.sys (Etron Technology Inc)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (MEIx64) Intel(R) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (xusb21) -- C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (adfs) -- C:\Windows\SysNative\drivers\adfs.sys (Adobe Systems, Inc.)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (speedfan) -- C:\Windows\SysWOW64\speedfan.sys (Almico Software)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.web.de/tb2/ie_startpage
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C9 BC 0F 28 64 BF CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.selectedEngine: "Wikipedia (de)"
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.01.08 17:43:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.09.11 17:38:10 | 000,000,000 | ---D | M]
 
[2011.09.11 17:11:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2012.01.07 10:24:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\pfjw2acy.default\extensions
[2012.01.08 17:43:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
() (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PFJW2ACY.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012.01.08 17:43:17 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.09.03 01:19:44 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.09.03 01:13:56 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.09.03 01:19:44 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.09.03 01:19:44 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.09.03 01:19:44 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.09.03 01:19:44 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.11.01 22:18:55 | 000,001,347 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts:    127.0.0.1 activate.adobe.com
O1 - Hosts:    127.0.0.1 practivate.adobe.com
O1 - Hosts:    127.0.0.1 ereg.adobe.com
O1 - Hosts:    127.0.0.1 activate.wip3.adobe.com
O1 - Hosts:    127.0.0.1 wip3.adobe.com
O1 - Hosts:    127.0.0.1 3dns-3.adobe.com
O1 - Hosts:    127.0.0.1 3dns-2.adobe.com
O1 - Hosts:    127.0.0.1 adobe-dns.adobe.com
O1 - Hosts:    127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts:    127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts:    127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts:    127.0.0.1 activate-sea.adobe.com
O1 - Hosts:    127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts:    127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts:    127.0.0.1 wwis-dubc1-vip60.adobe.com
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (WEB.DE Toolbar BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (WEB.DE Toolbar BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3:64bit: - HKLM\..\Toolbar: (WEB.DE Toolbar) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (WEB.DE Toolbar) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (WEB.DE Toolbar) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3 - HKCU\..\Toolbar\WebBrowser: (WEB.DE Toolbar) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files (x86)\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [UMonit] C:\Windows\SysWOW64\UMonit.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files (x86)\Logitech\Vid HD\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found
O4 - HKCU..\Run: [Steam] D:\Games\Steam\steam.exe (Valve Corporation)
O4 - HKCU..\Run: [vasja] C:\Users\***\AppData\Local\Temp\0.9628378498923743.exe (Orb Networks)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1A475DA5-3EFB-47BD-97A4-0F7EBD23ED6F}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3e54508d-dc97-11e0-8959-002522bcc7d3}\Shell - "" = AutoRun
O33 - MountPoints2\{3e54508d-dc97-11e0-8959-002522bcc7d3}\Shell\AutoRun\command - "" = M:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.02.02 22:28:04 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.01.25 23:19:05 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2012.01.25 23:19:05 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2012.01.25 23:19:05 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2012.01.25 23:19:05 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2012.01.25 23:19:05 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2012.01.25 23:19:05 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2012.01.11 21:26:30 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2012.01.11 21:26:30 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2012.01.11 21:26:30 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2012.01.11 21:26:30 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2012.01.11 21:26:29 | 001,731,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2012.01.11 21:26:29 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2012.01.11 21:26:29 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2012.01.07 23:50:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft XNA
 
========== Files - Modified Within 30 Days ==========
 
[2012.02.02 22:29:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.02 22:27:56 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.02.02 22:05:25 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.02.02 22:05:25 | 000,696,620 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.02.02 22:05:25 | 000,651,938 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.02.02 22:05:25 | 000,147,916 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.02.02 22:05:25 | 000,120,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.02.02 20:00:13 | 000,013,408 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.02 20:00:13 | 000,013,408 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.16 20:54:10 | 077,866,941 | ---- | M] () -- C:\Users\***\Desktop\blckwhite.xps
[2012.01.14 18:10:22 | 000,007,608 | ---- | M] () -- C:\Users\***\AppData\Local\Resmon.ResmonCfg
[2012.01.11 23:43:14 | 001,589,442 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
 
========== Files Created - No Company Name ==========
 
[2012.01.16 20:53:34 | 077,866,941 | ---- | C] () -- C:\Users\***\Desktop\blckwhite.xps
[2012.01.14 18:10:22 | 000,007,608 | ---- | C] () -- C:\Users\***\AppData\Local\Resmon.ResmonCfg
[2011.12.17 23:30:26 | 000,001,158 | ---- | C] () -- C:\Users\***\AppData\Roaming\ShiftN.ini
[2011.11.07 22:12:37 | 001,589,442 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.09.11 19:39:13 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2011.09.11 18:52:11 | 000,280,736 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.09.11 18:52:10 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.09.11 17:22:54 | 000,001,372 | R--- | C] () -- C:\Windows\SysWow64\IconCfg0.ini
[2011.09.11 17:22:53 | 000,200,704 | R--- | C] () -- C:\Windows\SysWow64\UMonit.exe
[2011.09.11 17:22:53 | 000,167,936 | R--- | C] () -- C:\Windows\SysWow64\ustor.dll
[2011.09.11 16:58:01 | 001,603,026 | -H-- | C] () -- C:\Users\***\AppData\Local\IconCache2.db
[2011.09.11 16:57:20 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011.09.11 16:57:19 | 013,356,032 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011.09.11 16:57:19 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.09.11 16:57:19 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.09.11 16:57:19 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011.08.19 10:26:20 | 010,898,456 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2011.08.19 10:26:20 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2011.08.19 10:26:20 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2011.08.03 02:31:54 | 000,311,912 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

< End of report >
Achja weiss nicht ob es relevant ist, aber ich habe das Netzwerkkabel abgezogen.

Vielen Dank für Eure Unterstützung im Voraus.

MfG
Suppe

markusg 03.02.2012 11:02
hi
bitte starte deinen pc diesmal in den abgesicherten modus mit netzwerk, da solltest du internet haben und arbeiten können, ohne fehlermeldung
ersetze außerdem im script *** durch deinen nutzernamen

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.



Code:
:OTL
O4 - HKCU..\Run: [vasja] C:\Users\***\AppData\Local\Temp\0.9628378498923743.exe (Orb Networks)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
 :Files
C:\Users\***\AppData\Local\Temp\0.9628378498923743.exe
:Commands
[purity]
[EMPTYFLASH]
[emptytemp]
[Reboot]


• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + E Taste.
  • Öffne dein Systemlaufwerk ( meistens C: )
  • Suche nun
    folgenden Ordner: _OTL und öffne diesen.
  • Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner

  • Dies wird eine Movedfiles.zip Datei in _OTL erstellen
  • Lade diese bitte in unseren Uploadchannel
    hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )
Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus :)

Suppenloeffe 03.02.2012 14:22
Hey,

Da ich noch auf der Arbeit bin, werde ich mich heute später erst zuwenden können.

Vielen dank für die Unterstützung.
:dankeschoen:

Suppenloeffe 03.02.2012 18:25
Hi markusg,
so habe dein Skript über OTL durchlaufen lassen.
Bin gerade im normalen Modus und es scheint alles soweit in Ordnung zu sein :party:.

Ich habe wie angegeben die Movedfiles hochgeladen.

Muss ich noch weitere Schritte durchführen?

markusg 03.02.2012 18:26
ich danke erst mal für den upload
Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.
  • Besuche folgende Seite für Downloadlinks und Anweisungen für dieses
    Tool

    Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Hinweis:
    Gehe sicher das all deine Anti Virus und Anti Malware Programme abgeschalten sind, damit diese Combofix nicht bei der Arbeit stören.
  • Poste bitte die C:\Combofix.txt in deiner nächsten Antwort.

Suppenloeffe 03.02.2012 21:17
Hi,

so habe combofix ausgeführt und habe nun das Problem, dass alle Programme wie Firefox nicht ohne weiteres ausführen konnte.

Es folgt immer die Fehlermeldung:

Pfad/Anwendung.exe

Es wurde versucht, einen Registrierungsschlüssel einem unzulässigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

ICh habe durch ausprobieren herausgefunden, dass ich Anwendungen nur durchführen kann, wenn ich es als Administrator ausführe.

Aber hier die logfile:
Code:
ComboFix 12-02-03.02 - Suppenloeffel 03.02.2012  19:18:35.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.8102.6128 [GMT 1:00]
ausgeführt von:: c:\users\Suppenloeffel\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\4461f48e31bde5c56b31b973b773de09\List.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\93e7e3d6030f426844228042348210cf\Service.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\bd5179a413bc0c4b82eedc22c6cab101\re.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\e56c61f7248672819579325af3387035\POSIX.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\eb138ef0e4282611dbf485a302784646\LibYAML.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\f233f63b6654362865c7577442edb9e3\Win32.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\perl514.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\0665c25e931c1ac0151b062449e91028\XSAccessor.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\17d0b152e63e6bfe81b4b19588538896\mro.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\19febd96672ffdb7ea244cef36aaa062\Zlib.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\2b1fc61b36a6711ea149b18bf3b41500\Parser.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\38a10ee333cf1a9afec3f0acdf1bbebc\Scan.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\3a8764e0d7c5d453e01d9ad08cf7fb58\IO.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\3b7106dd14676048b10bbb09a990f74c\XS.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\4461f48e31bde5c56b31b973b773de09\List.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\44727051c604ef6b79894b64d4c63832\Expat.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\4f2c03383aab0133b8dc0a3fa2dd92fa\Storable.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\7f177c338672436e01c4f0bdbcf94491\EV.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\7f2598c08178217a0e2c754f3d568f28\Byte.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\8fedeb86a4a984edfc1fb255d4ea965c\XS.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\961b0d62fa52b1dd29c795a822fbf1cf\DBI.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\aff7ee779ea184f884ed432c30a58f5d\Scale.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\b6bd87c968599725b8ab2e5c25d3046a\API.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\b979ace6da01e63d651cce9ee2474fdc\Name.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\bc147d83c7c868eeee67082dcf55430c\File.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\bd5179a413bc0c4b82eedc22c6cab101\re.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c199d3c1960e7aeeecb599487952bed2\HiRes.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c19d5e3dc664d9f4ce700001e2621cee\MD5.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c344fd5536724b2af2e6453833b60203\SHA1.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c668a322917d32a5ea22894518aa9897\Base64.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\cf5fe81e2f5dcbfecfd0495e1648c991\Unicode.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\d0bf009923f29116535c26d228271d6d\Scan.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\d1c77e404b5c4b954fa537ed63c8fb7b\File.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\dacfd0ab9b5fd029ed8d29e4482b0775\XS.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icudt46.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icuin46.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icuuc46.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\SQLite.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e56c61f7248672819579325af3387035\POSIX.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\eb138ef0e4282611dbf485a302784646\LibYAML.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\f233f63b6654362865c7577442edb9e3\Win32.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\fa9e3c814aa32db2ad5f17bdfbc22746\attributes.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\perl514.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\4461f48e31bde5c56b31b973b773de09\List.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\93e7e3d6030f426844228042348210cf\Service.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\bd5179a413bc0c4b82eedc22c6cab101\re.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\e56c61f7248672819579325af3387035\POSIX.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\eb138ef0e4282611dbf485a302784646\LibYAML.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\f233f63b6654362865c7577442edb9e3\Win32.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\perl514.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\0665c25e931c1ac0151b062449e91028\XSAccessor.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\17d0b152e63e6bfe81b4b19588538896\mro.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\19febd96672ffdb7ea244cef36aaa062\Zlib.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\2b1fc61b36a6711ea149b18bf3b41500\Parser.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\38a10ee333cf1a9afec3f0acdf1bbebc\Scan.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\3a8764e0d7c5d453e01d9ad08cf7fb58\IO.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\3b7106dd14676048b10bbb09a990f74c\XS.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\4461f48e31bde5c56b31b973b773de09\List.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\44727051c604ef6b79894b64d4c63832\Expat.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\4f2c03383aab0133b8dc0a3fa2dd92fa\Storable.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\7f177c338672436e01c4f0bdbcf94491\EV.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\7f2598c08178217a0e2c754f3d568f28\Byte.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\8fedeb86a4a984edfc1fb255d4ea965c\XS.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\961b0d62fa52b1dd29c795a822fbf1cf\DBI.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\aff7ee779ea184f884ed432c30a58f5d\Scale.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\b6bd87c968599725b8ab2e5c25d3046a\API.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\b979ace6da01e63d651cce9ee2474fdc\Name.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\bc147d83c7c868eeee67082dcf55430c\File.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\bd5179a413bc0c4b82eedc22c6cab101\re.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c199d3c1960e7aeeecb599487952bed2\HiRes.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c19d5e3dc664d9f4ce700001e2621cee\MD5.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c344fd5536724b2af2e6453833b60203\SHA1.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c668a322917d32a5ea22894518aa9897\Base64.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\cf5fe81e2f5dcbfecfd0495e1648c991\Unicode.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\d0bf009923f29116535c26d228271d6d\Scan.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\d1c77e404b5c4b954fa537ed63c8fb7b\File.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\dacfd0ab9b5fd029ed8d29e4482b0775\XS.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icudt46.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icuin46.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icuuc46.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\SQLite.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e56c61f7248672819579325af3387035\POSIX.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\eb138ef0e4282611dbf485a302784646\LibYAML.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\f233f63b6654362865c7577442edb9e3\Win32.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\fa9e3c814aa32db2ad5f17bdfbc22746\attributes.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\perl514.dll
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-01-03 bis 2012-02-03  ))))))))))))))))))))))))))))))
.
.
2012-02-03 17:26 . 2012-01-06 05:15        8602168        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{7DB0DA25-A65D-4292-901C-1D85E22E48FD}\mpengine.dll
2012-02-03 17:18 . 2012-02-03 17:22        --------        d-----w-        C:\_OTL
2012-01-11 20:26 . 2011-10-26 05:25        1572864        ----a-w-        c:\windows\system32\quartz.dll
2012-01-11 20:26 . 2011-10-26 05:25        366592        ----a-w-        c:\windows\system32\qdvd.dll
2012-01-11 20:26 . 2011-10-26 04:32        514560        ----a-w-        c:\windows\SysWow64\qdvd.dll
2012-01-11 20:26 . 2011-10-26 04:32        1328128        ----a-w-        c:\windows\SysWow64\quartz.dll
2012-01-11 20:26 . 2011-11-19 14:58        77312        ----a-w-        c:\windows\system32\packager.dll
2012-01-11 20:26 . 2011-11-19 14:01        67072        ----a-w-        c:\windows\SysWow64\packager.dll
2012-01-11 20:26 . 2011-11-17 06:41        1731920        ----a-w-        c:\windows\system32\ntdll.dll
2012-01-11 20:26 . 2011-11-17 05:38        1292080        ----a-w-        c:\windows\SysWow64\ntdll.dll
2012-01-08 16:43 . 2012-01-08 16:43        626688        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcr80.dll
2012-01-08 16:43 . 2012-01-08 16:43        548864        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcp80.dll
2012-01-08 16:43 . 2012-01-08 16:43        479232        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcm80.dll
2012-01-08 16:43 . 2012-01-08 16:43        43992        ----a-w-        c:\program files (x86)\Mozilla Firefox\mozutils.dll
2012-01-07 22:50 . 2012-01-07 22:50        --------        d-----w-        c:\program files (x86)\Microsoft XNA
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-26 23:52 . 2011-09-11 16:20        279656        ------w-        c:\windows\system32\MpSigStub.exe
2011-11-24 04:52 . 2011-12-17 13:59        3145216        ----a-w-        c:\windows\system32\win32k.sys
2011-11-18 09:46 . 2011-09-11 16:23        414368        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-18 09:46 . 2011-11-18 09:46        279616        ----a-w-        c:\windows\system32\drivers\dtsoftbus01.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{BF42D4A8-016E-4fcd-B1EB-837659FD77C6}]
2011-12-12 16:13        1603688        ----a-w-        c:\program files (x86)\WEB.DE Toolbar\IE\uitb.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{C424171E-592A-415a-9EB1-DFD6D95D3530}"= "c:\program files (x86)\WEB.DE Toolbar\IE\uitb.dll" [2011-12-12 1603688]
.
[HKEY_CLASSES_ROOT\clsid\{c424171e-592a-415a-9eb1-dfd6d95d3530}]
[HKEY_CLASSES_ROOT\uitb.Toolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{99F77431-0658-476F-99CE-A05F35CDC7BA}]
[HKEY_CLASSES_ROOT\uitb.Toolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="d:\games\Steam\steam.exe" [2011-09-11 1242448]
"Logitech Vid"="c:\program files (x86)\Logitech\Vid HD\Vid.exe" [2010-10-29 5915480]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-11-10 3514176]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UMonit"="c:\windows\system32\UMonit.exe" [2009-02-11 200704]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"IJNetworkScanUtility"="c:\program files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-05-19 136544]
"MaxMenuMgr"="c:\program files (x86)\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-09-25 185640]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-08-12 205336]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech Media Server-Taskleisten-Tool.lnk - c:\program files (x86)\Squeezebox\SqueezeTray.exe [2011-12-7 3051619]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages        REG_MULTI_SZ          kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-09-11 1038088]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-21 136360]
S2 FreeAgentGoNext Service;Seagate Service;c:\program files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-09-25 189736]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-09-01 2027840]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-08-19 450848]
S3 CompFilter64;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbflt64.sys [x]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech HD Webcam C510(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-07-08 11856]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BF42D4A8-016E-4fcd-B1EB-837659FD77C6}]
2011-12-12 16:13        1997928        ----a-w-        c:\program files\WEB.DE Toolbar\IE\uitb.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{C424171E-592A-415a-9EB1-DFD6D95D3530}"= "c:\program files\WEB.DE Toolbar\IE\uitb.dll" [2011-12-12 1997928]
.
[HKEY_CLASSES_ROOT\CLSID\{C424171E-592A-415a-9EB1-DFD6D95D3530}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-30 11660904]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-12 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-12 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-12 416024]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1873256]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 2185032]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-04 767312]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-10-01 825184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://go.web.de/tb2/ie_startpage
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files (x86)\WEB.DE Toolbar\IE\uitb.dll
FF - ProfilePath - c:\users\Suppenloeffel\AppData\Roaming\Mozilla\Firefox\Profiles\pfjw2acy.default\
FF - prefs.js: browser.search.selectedEngine - Wikipedia (de)
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_bc2.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1003314698-1868941570-2493159992-1000\Software\SecuROM\License information*]
"datasecu"=hex:49,87,83,cb,44,74,0d,e8,3e,39,2e,61,8b,71,4d,53,c8,aa,62,3e,31,
  ca,98,11,87,dc,a7,e6,fb,cb,9c,a4,07,78,f1,d1,e9,02,6a,eb,3e,f0,1e,8c,9c,0b,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-02-03  19:23:07 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-02-03 18:23
.
Vor Suchlauf: 11 Verzeichnis(se), 57.960.968.192 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 57.379.946.496 Bytes frei
.
- - End Of File - - 5F95025D944F299F45FF1FDBF2B19C5B

Suppenloeffe 03.02.2012 23:45
Ich bins nochmal.

War zu voreilig mit der Behauptung, dass Anwendungen sich nur öffnen lassen, wenn man diese als Administrator öffnet.

Nach einem Neustart ließen sich alle Anwendungen ohne Probleme öffnen.

Scheint, dass alles wieder in Ordnung ist, oder gibts da noch weitere Schritte, die ich noch durchführen muss?

Zunächst einmal ein :party: für heute.

Gute Nacht,
Suppe

markusg 04.02.2012 12:04
hi,
wir machen noch einen scan, dann wird aufgeräumt, sicherheitslücken geschlossen und der pc abgesichert.
malwarebytes:
Downloade Dir bitte Malwarebytes
  • Installiere
    das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche
    nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet
    ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste
    das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Suppenloeffe 05.02.2012 22:00
Hey,

habe nun Anit-Malware durchlaufen lassen.
Es gab vier Befunde, die ich gelöscht habe.

Hier die Logfile:
Code:
Malwarebytes Anti-Malware (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.02.05.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
*** :: SUPPENLOEFFELPC [Administrator]

Schutz: Aktiviert

05.02.2012 18:34:37
mbam-log-2012-02-05 (18-34-37).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 788327
Laufzeit: 1 Stunde(n), 15 Minute(n), 40 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
L:\$RECYCLE.BIN\S-1-5-21-2487867538-530820569-3706899629-1000\$RZLDVHT\CryptLoad_1.1.4 - Rapidshare DL Client\router\FRITZ!Box\nc.exe (PUP.Netcat) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\z============ S O F T W A R E S\Internet&LAN\flashget\fgf140.exe (Adware.Cydoor) -> Erfolgreich gelöscht und in Quarantäne gestellt.
O:\z============ S O F T W A R E S\Internet&LAN\flashget\fgf140.exe (Adware.Cydoor) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
Lg Suppe

markusg 06.02.2012 10:59
meinst du 3 funde? ich sehe keine 4 :-)

lade den CCleaner standard:
CCleaner Download - CCleaner 3.15.1643
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Suppenloeffe 15.02.2012 23:09
Hey,

tja da hat sich wohl ein Fehler eingeschlichen :crazy:

hat bissl gedauert, aber hier die Liste.

Code:
7-Zip 9.20 (x64 edition)        Igor Pavlov        10.09.2011        4,53MB        9.20.00.0        notwendig
Adobe Creative Suite 4 Master Collection        Adobe Systems Incorporated        10.09.2011        1.874MB        4.0        notwendig
Adobe Flash Player 10 ActiveX        Adobe Systems Incorporated        12.09.2011        6,00MB        10.3.183.7        notwendig
Adobe Flash Player 11 Plugin 64-bit        Adobe Systems Incorporated        17.11.2011        6,00MB        11.1.102.55        notwendig
Adobe Photoshop Lightroom 3.6 64-bit        Adobe        18.12.2011        342MB        03.06.2001        notwendig
Adobe Reader X (10.1.1) - Deutsch        Adobe Systems Incorporated        14.09.2011        119,0MB        10.01.2001        notwendig
ANNO 1404        Ubisoft        11.09.2011                1.02.0000        notwendig
ANNO 1404 - Venedig        Ubisoft        11.09.2011                2.0.5008.0        notwendig
Avira AntiVir Personal - Free Antivirus        Avira GmbH        16.10.2011        90,4MB        10.2.0.704        notwendig
Bastion        Supergiant Games        28.12.2011                        notwendig
Battlefield: Bad Company 2        DICE        10.09.2011                        notwendig
Canon Easy-WebPrint EX                09.10.2011                        notwendig
Canon IJ Network Scan Utility                09.10.2011                        notwendig
Canon IJ Network Tool                09.10.2011                        notwendig
Canon Inkjet Printer/Scanner/Fax Extended Survey Program                09.10.2011                        notwendig
Canon MP Navigator EX 3.0                09.10.2011                        notwendig
Canon MP560 series Benutzerregistrierung                09.10.2011                        notwendig
Canon MP560 series MP Drivers                09.10.2011                        notwendig
Canon Utilities My Printer                09.10.2011                        notwendig
Canon Utilities Solution Menu                09.10.2011                        notwendig
CCleaner        Piriform        05.02.2012                Mrz 15        notwendig
CDBurnerXP        CDBurnerXP        10.09.2011        12,0MB        4.3.8.2631        notwendig
Chime        Zoe Mode        10.09.2011                        notwendig
Chinese Simplified Fonts Support For Adobe Reader X        Adobe Systems Incorporated        23.01.2012        86,7MB        10.0.0        notwendig
Counter-Strike: Source        Valve        10.09.2011                        notwendig
Crayon Physics Deluxe        Kloonigames        10.09.2011                        notwendig
DAEMON Tools Lite        DT Soft Ltd        17.11.2011                4.45.1.0236        notwendig
Defense Grid: The Awakening        Hidden Path Entertainment        10.09.2011                        notwendig
Drive Manager        Seagate Technology        23.10.2011        32,1MB        1.00.0012        notwendig
Etron USB3.0 Host Controller        Etron Technology        10.09.2011        5,13MB        0.96        notwendig
Flight Control HD                10.09.2011                        notwendig
Genesys USB Mass Storage Device        Genesys Logic        10.09.2011                2.5.0.0        unbekannt
Grand Theft Auto IV        Rockstar        10.11.2011                        notwendig
GTK+ Runtime 2.14.7 rev a (nur entfernen)                04.11.2011                        unbekannt
Intel(R) Processor Graphics        Intel Corporation        11.09.2011                8.15.10.2361        notwendig
Java(TM) 6 Update 27        Oracle        10.09.2011        95,0MB        6.0.270        notwendig
League of Legends        Riot Games        29.10.2011                1.02.0000        notwendig
LIMBO                22.12.2011                        notwendig
Logitech Media Server 7.7.1        Logitech        16.12.2011        78,1MB        07.07.2001        notwendig
Logitech Vid HD        Logitech Inc..        02.11.2011                7.2 (7240)        notwendig
Logitech Webcam Software        Logitech Inc.        02.11.2011                2.0        notwendig
Malwarebytes Anti-Malware Version 1.60.1.1000        Malwarebytes Corporation        04.02.2012        17,4MB        1.60.1.1000        notwendig
Mass Effect        BioWare        22.12.2011                        notwendig
MediaMonkey 3.2        Ventis Media Inc.        11.09.2011                03. Feb        notwendig
Metro 2033        THQ        18.12.2011                        notwendig
Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        10.09.2011        38,8MB        4.0.30319        notwendig
Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        10.09.2011        2,94MB        4.0.30319        notwendig
Microsoft .NET Framework 4 Extended        Microsoft Corporation        06.11.2011        52,0MB        4.0.30319        notwendig
Microsoft Games for Windows - LIVE Redistributable        Microsoft Corporation        02.11.2011        31,3MB        3.5.92.0        notwendig
Microsoft Games for Windows Marketplace        Microsoft Corporation        04.11.2011        6,04MB        3.5.50.0        notwendig
Microsoft IntelliType Pro 8.2        Microsoft Corporation        10.09.2011                8.20.469.0        notwendig
Microsoft Office Language Pack 2010 - German/Deutsch        Microsoft Corporation        15.09.2011                14.0.6029.1000        notwendig
Microsoft Office Professional Plus 2010        Microsoft Corporation        15.09.2011                14.0.6029.1000        notwendig
Microsoft Silverlight        Microsoft Corporation        16.10.2011        40,5MB        4.0.60831.0        notwendig
Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        13.09.2011        0,29MB        8.0.56336        notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022        Microsoft Corporation        10.09.2011        2,52MB        9.0.21022        notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17        Microsoft Corporation        11.09.2011        0,77MB        9.0.30729        notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161        Microsoft Corporation        14.09.2011        0,77MB        9.0.30729.6161        notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022        Microsoft Corporation        04.11.2011        1,41MB        9.0.21022        notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        10.09.2011        0,23MB        9.0.30729        notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        10.09.2011        0,58MB        9.0.30729.4148        notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        14.09.2011        0,59MB        9.0.30729.6161        notwendig
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319        Microsoft Corporation        06.11.2011        11,0MB        10.0.30319        notwendig
Microsoft Xbox 360 Accessories 1.2        Microsoft        02.12.2011        7,82MB        1.20.146.0        notwendig
Microsoft XNA Framework Redistributable 3.1        Microsoft Corporation        06.01.2012        7,55MB        3.1.10527.0        notwendig
Mozilla Firefox 9.0.1 (x86 de)        Mozilla        07.01.2012        36,4MB        9.0.1        notwendig
Mozilla Thunderbird 9.0.1 (x86 de)        Mozilla        16.01.2012        38,8MB        9.0.1        notwendig
MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        26.10.2011        1,28MB        4.20.9870.0        notwendig
MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        26.10.2011        1,33MB        4.20.9876.0        notwendig
NVIDIA 3D Vision Controller-Treiber 280.19        NVIDIA Corporation        10.09.2011                280.19        notwendig
NVIDIA Grafiktreiber 285.62        NVIDIA Corporation        06.11.2011                285.62        notwendig
NVIDIA HD-Audiotreiber 1.2.23.3        NVIDIA Corporation        10.09.2011                1.2.23.3        notwendig
NVIDIA PhysX-Systemsoftware 9.10.0514        NVIDIA Corporation        10.09.2011                9.10.0514        notwendig
NVIDIA Update 1.5.20        NVIDIA Corporation        06.11.2011                01.05.2020        notwendig
Pidgin                10.09.2011                02.10.2000        notwendig
Plants vs. Zombies: Game of the Year        PopCap        10.09.2011                        notwendig
Portal 2        Valve        18.12.2011                        notwendig
PunkBuster Services        Even Balance, Inc.        10.09.2011                0.988        notwendig
Realtek Ethernet Controller Driver        Realtek        10.09.2011                7.41.216.2011        notwendig
Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        10.09.2011                6.0.1.6257        notwendig
Rhythm Zone                10.09.2011                        notwendig
SABnzbd 0.6.9        The SABnzbd Team        15.09.2011        18,0MB        0.6.9        notwendig
Seagate Manager Installer        Seagate        25.10.2011        47,8MB        2.01.0600        notwendig
ShiftN 3.6        Marcus Hebel        16.12.2011        10,7MB        03. Jun        notwendig
Skype™ 5.5        Skype Technologies S.A.        18.11.2011        17,0MB        5.5.124        notwendig
SpeedFan (remove only)                10.09.2011                        notwendig
Steam        Valve Corporation        10.09.2011        35,5MB        1.0.0.0        notwendig
Super Meat Boy                10.09.2011                        notwendig
Team Fortress 2        Valve        10.09.2011                        notwendig
TeamSpeak 3 Client        TeamSpeak Systems GmbH        10.09.2011                        notwendig
TuneUp Utilities 2011        TuneUp Software        16.09.2011                10.0.4400.20        notwendig
Turba                28.12.2011                        unbekannt
Ubisoft Game Launcher        UBISOFT        10.09.2011                1.0.0.0        notwendig
VLC media player 1.1.11        VideoLAN        10.09.2011                01.01.2011        notwendig
WEB.DE Softwareaktualisierung        1&1 Mail & Media GmbH        06.12.2011                2.0.2.4        notwendig
WEB.DE Toolbar für Internet Explorer        1&1 Mail & Media GmbH        19.12.2011                2.0.3.1        notwendig
Windows Live ID Sign-in Assistant        Microsoft Corporation        02.11.2011        10,0MB        6.500.3165.0        notwendig
µTorrent                23.09.2011                3.0.0        notwendig
Vielen lieben Dank:bussi:

markusg 16.02.2012 11:08
deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok



deinstaliere:
Java
Download der kostenlosen Java-Software
downloade java jre, instalieren.

deinstaliere:


deinstaliere:
TuneUp
auf solchen unsinn sollte man verzichten, bringt wenig und schadet dem system häufig mehr als es nutzt.

öffne otl, bereinigen, neustart.
öffne ccleaner, analysieren, bereinigen, neustart, teste ob alles wie gewohnt läuft

Suppenloeffe 02.03.2012 18:39
Hey,

alles durchgeführt. Grundsätzlich läuft alles wieder wie gewohnt.
Dafür ein dickes Lob für die Mühe.:daumenhoc

Das einzige was mir auffällt, ist dass der Rechner hin und wieder (aber selten) nach dem Hochfahren für eine Weile nicht mehr reagiert oder sich aufhängt.
Kann das an Malwarebyte und Antivir hängen?

Gruss
Suppe

markusg 02.03.2012 18:43
schalte mal den hintergrund wächter von malwarebytes aus, läuft ja eh nur 30 tage.
du kannst mir auch noch mal die autostart liste vom ccleaner posten, dann können wir mal gucken was noch aus geschaltet werden kann


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:23 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131