Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   AV Security Suite Auswertung (https://www.trojaner-board.de/88056-av-security-suite-auswertung.html)

Zocker 12.07.2010 14:11
AV Security Suite Auswertung
 
OTL Extras Auswertung:

OTL Logfile:
Code:
OTL Extras logfile created on: 12.07.2010 14:45:31 - Run 1
OTL by OldTimer - Version 3.2.9.0    Folder = C:\Users\Zocker\Downloads
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 698,54 Gb Total Space | 402,25 Gb Free Space | 57,59% Space Free | Partition Type: NTFS
Drive D: | 6,83 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: HELLMACHINE
Current User Name: Zocker
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes]
"C:\Nexon\Combat Arms EU\CombatArms.exe" = C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe -- (Nexon)
"C:\Nexon\Combat Arms EU\Engine.exe" = C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe?? -- (Nexon)
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes]
"C:\Nexon\Combat Arms EU\CombatArms.exe" = C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe -- (Nexon)
"C:\Nexon\Combat Arms EU\Engine.exe" = C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe?? -- (Nexon)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{2D5D9603-22CF-4B99-83F6-0CD20330F62E}" = FRITZ!DSL64
"{328CC232-CFDC-468B-A214-2E21300E4CB5}" = Apple Mobile Device Support
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{4B55F339-396E-29A9-B6D0-24B6D251C90A}" = AMD Drag and Drop Transcoding
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4FBB2E98-1A3B-396A-A662-73E17009C076}" = ATI Catalyst Install Manager
"{53529DAD-F7C9-476E-87CC-1547C4E3E821}" = iTunes
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}" = Bonjour
"{D0CE053E-0E5E-4C12-9BAE-D0F36021E911}" = POV-Ray for Windows v3.62
"{D285FC5F-3021-32E9-9C59-24CA325BDC5C}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"{ED066E02-C49A-D5D9-7ACD-1014EB7571D1}" = ccc-utility64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.54
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"PerformanceTest 7_is1" = PerformanceTest v7.0 (64-bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{19C64880-BBCA-11D4-9EEE-0004ACDDDB3B}" = CyberLink InstantBurn
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 17
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}" = CyberLink BD Advisor 2.0
"{2E1A71D5-7897-4F3F-B0E3-B412C86A646D}" = Need for Speed™ ProStreet
"{310BC5E2-31AF-49BB-904D-E71EB93645DC}" = AI Suite
"{322F75E0-71A3-4125-8EB3-761834EDC166}" = Eragon
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMicron JMB36X Driver
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3C850287-4CD5-4FAD-BE39-A4AF7851A7C6}" = GRID Demo
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{434D0820-3AA6-493A-80B9-301000028501}" = DiRT2
"{50BC3F90-EE42-E2CA-20FE-BC5556473F79}" = Application Profiles
"{52D1D62C-FEAB-4580-849E-1DB624BADBBD}" = DiRT2
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6A782F9A-57EB-48C8-91CD-D017A376F372}" = Split/Second Demo
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7353BAE6-5E49-46C4-A9B5-8A269A313789}" = Crysis WARHEAD(R)
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{7F3AD00A-1819-4B15-BB7D-08B3586336D7}" = 3DMark06
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{87323561-58BA-4D5B-BADA-A791B69D1705}" = Catalyst Control Center - Branding
"{8769100B-B645-51A7-5D0F-77AE578A3EBA}" = EA Download Manager UI
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{8A74DEFD-A224-49CC-AB80-4E88BC730125}" = LogMeIn Hamachi
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8B681A3B-C924-23F9-AAD0-9FB1715C763A}" = Catalyst Control Center InstallProxy
"{8F0190AB-D147-4FE3-A30B-F5FF35610695}" = Slickr
"{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable
"{92AF2F5A-4407-4A03-A80A-5A2582264746}" = Crysis(R) SP Demo
"{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM)
"{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"{96ED9087-7A6A-22A9-135F-901AF77474AC}" = ccc-core-static
"{974C4B12-4D02-4879-85E0-61C95CC63E9E}" = Fallout 3
"{99E862CC-6F69-4D39-99AA-DBF71BF3B585}" = OpenOffice.org 3.1
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A2770F50-89C7-433E-8E19-7148B21172EB}" = RESIDENT EVIL 5 Benchmark Version
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A31951C5-DCD8-4DFE-A525-CFC701F54792}" = TurboV
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A64240FF-9C31-4858-AE9D-65483C5DE63A}" = Living Hell Light
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.2
"{AE04B8FC-4CD9-4A94-BE8F-C2434470FB11}" = DiRT2 Demo
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support
"{B2D4D657-DAA4-4C68-B01E-11736C1D8C0D}" = Unigine Heaven Benchmark v1.0
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B83F7FA5-3191-4E39-A1F2-8A9038BD0B04}" = Turbo Key
"{BBF0A67B-5DBA-452F-9D2E-6F168BC226E5}" = Need for Speed™ SHIFT Demo
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{C40C3C3D-97CF-44B5-836C-766E374464B3}" = 3DMark Vantage
"{C580908C-B3BA-4C19-BD60-16F02F272201}" = BattleForge™
"{C6E6B1D1-EC88-7270-3819-AA924908CFDA}" = Catalyst Control Center Graphics Previews Vista
"{C7027BD9-C90F-79C7-8CFF-8F32E2806631}" = CCC Help English
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock
"{E6FC9938-1B6E-41F6-98BD-ECD70C371DBE}" = VibrateGameDeviceDriver
"{EA0B63C1-E579-43DD-A5F7-0DA5E9092554}" = CryEngine(R)2 Sandbox(TM)2
"{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2
"{F7338FA3-DAB5-49B2-900D-0AFB5760C166}" = PC Probe II
"{F7B0939E-58DF-11DF-B3A6-005056806466}" = Google Earth
"{F8365857-3233-E29E-65C6-6C0AB4F99622}" = Catalyst Control Center Graphics Previews Common
"{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE
"{FBE5AA96-22F0-4C4A-8E92-4BE3498D4CCB}" = Media Go
"{FEFAF112-4DA8-479C-89E2-7DE25091711A}" = Call of Juarez - Bound in Blood
"Acoustica MP3 To Wave Converter PLUS" = Acoustica MP3 To Wave Converter PLUS
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AVMWLANCLI" = AVM FRITZ!WLAN
"CCleaner" = CCleaner
"Clash of the Titans" = Clash of the Titans Screen Saver
"com.ea.Vault.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Download Manager UI
"Combat Arms EU" = Combat Arms EU
"Crysis WARHEAD(R)" = Crysis WARHEAD(R)
"Debut" = Debut Video Capture Software
"Digg Arc" = Digg Arc Screen Saver
"Digg Bigspy" = Digg Bigspy Screen Saver
"Direct MP3 Joiner_is1" = Direct MP3 Joiner version 3.0.1.5
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"EA Download Manager" = EA Download Manager
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"ExpressBurn" = Express Burn
"Fireflies" = Fireflies Screensaver (remove only)
"Fraps" = Fraps
"Free Audio Converter_is1" = Free Audio Converter version 1.2
"Free FLV Converter_is1" = Free FLV Converter V 6.7.8
"Free HD Converter_is1" = Free HD Converter V 1.6
"Free Video Converter_is1" = Free Video Converter V 2.8
"Grand Theft Auto IV Screenshot" = Grand Theft Auto IV Screenshot Screen Saver
"Guild Wars" = GUILD WARS
"ICQToolbar" = ICQ Toolbar
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"InstallShield_{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM)
"InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"InstallShield_{FEFAF112-4DA8-479C-89E2-7DE25091711A}" = Call of Juarez - Bound in Blood
"LimeWire" = LimeWire 5.5.7
"Living Hell Light" = Living Hell Light
"LogMeIn Hamachi" = LogMeIn Hamachi
"Loopy" = Loopy Screen Saver
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Manhunt 2" = Manhunt 2
"Mercedes Benz SLR McLaren Screensaver" = Mercedes Benz SLR McLaren Screensaver
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"mp3-2-wav" = mp3-2-wav converter 1.14
"OpenAL" = OpenAL
"oZone3D.Net FurMark_is1" = oZone3D.Net FurMark v1.7.0
"PolarClock3" = PolarClock3 Screen Saver
"Porsche 911 GT3 Screensaver" = Porsche 911 GT3 Screensaver
"potc fdk" = potc fdk Screen Saver
"PunkBusterSvc" = PunkBuster Services
"rFactor" = rFactor (remove only)
"SpeedFan" = SpeedFan (remove only)
"SPIDER-MAN HERO" = SPIDER-MAN HERO Screen Saver
"SPIDER-MAN INTRO" = SPIDER-MAN INTRO Screen Saver
"Steam App 400" = Portal
"Steam App 41300" = Altitude
"SUPER ©" = SUPER © Version 2010.bld.37 (Jan 2, 2010)
"The Simpsons Movie - Sleeping Homer" = The Simpsons Movie - Sleeping Homer Screen Saver
"TuneUp Utilities" = TuneUp Utilities
"Uninstall_is1" = Uninstall 1.0.0.1
"VideoPad" = VideoPad Video Editor
"VLC media player" = VLC media player 1.0.3
"WebTemp_is1" = WebTemp 3.30 (kostenlose Version)
"WinGimp-2.0_is1" = GIMP 2.6.8
"WinRAR archiver" = WinRAR
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 24.05.2010 14:54:46 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 24.05.2010 14:55:37 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "c:\program files
 (x86)\magictune premium\MagicTuneCore.dll.Manifest". Fehler in  Manifest- oder Richtliniendatei
 "" in Zeile .  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt
 mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.
Komponente
 1: C:\Windows\WinSxS\manifests\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_88dce9872fb18caf.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5.manifest.
 
Error - 25.05.2010 05:14:14 | Computer Name = Hellmachine | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: setup.exe_InstallShield, Version:
 12.0.0.58855, Zeitstempel: 0x46d48420  Name des fehlerhaften Moduls: setup.exe, Version:
 12.0.0.58855, Zeitstempel: 0x46d48420  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0001ec42
ID
 des fehlerhaften Prozesses: 0x12d4  Startzeit der fehlerhaften Anwendung: 0x01cafbeaa3bdeff2
Pfad
 der fehlerhaften Anwendung: C:\Users\Zocker\Documents\ICQ\498284366\ReceivedFiles\372109239
 *****\setup.exe  Pfad des fehlerhaften Moduls: C:\Users\Zocker\Documents\ICQ\498284366\ReceivedFiles\372109239
 *****\setup.exe  Berichtskennung: e2abc1bf-67dd-11df-849c-00040ec51eb0
 
Error - 25.05.2010 07:08:52 | Computer Name = Hellmachine | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.16385,
 Zeitstempel: 0x4a5bc69e  Name des fehlerhaften Moduls: Flash10e.ocx, Version: 10.0.45.2,
 Zeitstempel: 0x4b5f8faa  Ausnahmecode: 0xc0000005  Fehleroffset: 0x001582b2  ID des fehlerhaften
 Prozesses: 0xc60  Startzeit der fehlerhaften Anwendung: 0x01cafbe2893c0220  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\iexplore.exe  Pfad
 des fehlerhaften Moduls: C:\Windows\SysWow64\Macromed\Flash\Flash10e.ocx  Berichtskennung:
 e61e78b6-67ed-11df-849c-00040ec51eb0
 
Error - 25.05.2010 07:09:43 | Computer Name = Hellmachine | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 8.0.7600.16385 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: d2c    Startzeit: 01cafbe2886a8908    Endzeit: 0    Anwendungspfad: C:\Program
 Files (x86)\Internet Explorer\iexplore.exe    Berichts-ID: 007c953d-67ee-11df-849c-00040ec51eb0

 
Error - 25.05.2010 07:11:05 | Computer Name = Hellmachine | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Dwm.exe, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bc541  Name des fehlerhaften Moduls: fraps64.dll_unloaded, Version:
 0.0.0.0, Zeitstempel: 0x4af24185  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000000006357e04a
ID
 des fehlerhaften Prozesses: 0xb98  Startzeit der fehlerhaften Anwendung: 0x01cafbe260b6c88c
Pfad
 der fehlerhaften Anwendung: C:\Windows\system32\Dwm.exe  Pfad des fehlerhaften Moduls:
 fraps64.dll  Berichtskennung: 35ba842f-67ee-11df-849c-00040ec51eb0
 
Error - 26.05.2010 06:51:47 | Computer Name = Hellmachine | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.16385,
 Zeitstempel: 0x4a5bc69e  Name des fehlerhaften Moduls: Flash10e.ocx, Version: 10.0.45.2,
 Zeitstempel: 0x4b5f8faa  Ausnahmecode: 0xc0000005  Fehleroffset: 0x001582b2  ID des fehlerhaften
 Prozesses: 0x1040  Startzeit der fehlerhaften Anwendung: 0x01cafcbdabdde138  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\iexplore.exe  Pfad
 des fehlerhaften Moduls: C:\Windows\SysWow64\Macromed\Flash\Flash10e.ocx  Berichtskennung:
 ae08ff5a-68b4-11df-9adc-00040ec51eb0
 
Error - 26.05.2010 07:11:42 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842787
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Sony\Media Go\MediaGo.exe". Fehler in Manifest- oder Richtliniendatei "c:\Program
 Files (x86)\Sony\Media Go\Sony.Mrs.MANIFEST" in Zeile  3.  Die im Manifest gefundene
 Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.  Verweis:
 Sony.Mrs,processorArchitecture="AMD64",type="win32",version="2.2.0.0".  Definition:
 Sony.Mrs,processorArchitecture="x86",type="win32",version="2.2.0.0".  Verwenden Sie
 das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 
Error - 26.05.2010 07:11:44 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 26.05.2010 07:12:51 | Computer Name = Hellmachine | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "c:\program files
 (x86)\magictune premium\MagicTuneCore.dll.Manifest". Fehler in  Manifest- oder Richtliniendatei
 "" in Zeile .  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt
 mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.
Komponente
 1: C:\Windows\WinSxS\manifests\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_88dce9872fb18caf.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5.manifest.
 
[ Media Center Events ]
Error - 27.03.2010 06:08:40 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 11:08:40 - Fehler beim Herstellen der Internetverbindung.  11:08:40
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 27.03.2010 06:08:51 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 11:08:46 - Fehler beim Herstellen der Internetverbindung.  11:08:46
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 06.04.2010 09:41:24 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 15:41:24 - Fehler beim Herstellen der Internetverbindung.  15:41:24
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 06.04.2010 09:41:33 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 15:41:29 - Fehler beim Herstellen der Internetverbindung.  15:41:29
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 06.04.2010 10:41:37 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 16:41:37 - Fehler beim Herstellen der Internetverbindung.  16:41:37
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 06.04.2010 10:41:43 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 16:41:42 - Fehler beim Herstellen der Internetverbindung.  16:41:42
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 09.04.2010 04:23:13 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 10:23:13 - Fehler beim Herstellen der Internetverbindung.  10:23:13
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 09.04.2010 04:23:23 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 10:23:18 - Fehler beim Herstellen der Internetverbindung.  10:23:18
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 09.05.2010 05:23:38 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 11:23:37 - Fehler beim Herstellen der Internetverbindung.  11:23:38
-    Serververbindung konnte nicht hergestellt werden.. 
 
Error - 09.05.2010 05:23:46 | Computer Name = Hellmachine | Source = MCUpdate | ID = 0
Description = 11:23:43 - Fehler beim Herstellen der Internetverbindung.  11:23:43
-    Serververbindung konnte nicht hergestellt werden.. 
 
[ System Events ]
Error - 12.07.2010 08:14:05 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:14:05 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:14:06 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:14:06 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:14:56 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:14:56 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:14:56 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:15:01 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:15:05 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
Error - 12.07.2010 08:15:06 | Computer Name = Hellmachine | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMPNetworkSvc" wurde aufgrund folgenden Fehlers nicht
gestartet:  %%2
 
 
< End of report >
--- --- ---


OTL Auswertung:

OTL Logfile:
Code:
OTL logfile created on: 12.07.2010 14:45:31 - Run 1
OTL by OldTimer - Version 3.2.9.0    Folder = C:\Users\Zocker\Downloads
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 698,54 Gb Total Space | 402,25 Gb Free Space | 57,59% Space Free | Partition Type: NTFS
Drive D: | 6,83 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: HELLMACHINE
Current User Name: Zocker
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Zocker\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10h_ActiveX.exe (Adobe Systems, Inc.)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\WebTemp\WebTemp.exe (Coolhardware.de)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files (x86)\SpeedFan\speedfan.exe (Almico Software (www.almico.com))
PRC - C:\Fraps\fraps.exe (Beepa P/L)
PRC - C:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe ()
PRC - C:\Programme\ASUS\TurboV\TurboV.exe ()
PRC - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe ()
PRC - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (AVM Berlin)
PRC - C:\Program Files (x86)\avmwlanstick\WlanNetService.exe (AVM Berlin)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Zocker\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Fraps\fraps32.dll (Beepa P/L)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (WMPNetworkSvc) -- C:\Program Files\Windows Media Player\wmpnetwk.exe File not found
SRV:64bit: - (PnkBstrA) -- C:\Windows\SysNative\PnkBstrA.exe File not found
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV:64bit: - (IGDCTRL) -- C:\Program Files\FRITZ!DSL\IGDCTRL.EXE (AVM Berlin)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Hamachi2Svc) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (TuneUp.Defrag) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (clr_optimization_v4.0.30319_64) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
SRV - (AsSysCtrlService) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe ()
SRV - (AVM WLAN Connection Service) -- C:\Program Files (x86)\avmwlanstick\WlanNetService.exe (AVM Berlin)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (DynCal) -- C:\Windows\SysNative\drivers\Dyncal.sys File not found
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (cpuz133) -- C:\Windows\SysNative\drivers\cpuz133_x64.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (JRAID) -- C:\Windows\SysNative\drivers\jraid.sys (JMicron Technology Corp.)
DRV:64bit: - (MTsensor) -- C:\Windows\SysNative\drivers\ASACPI.sys ()
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (RMCAST) -- C:\Windows\SysNative\drivers\rmcast.sys (Microsoft Corporation)
DRV:64bit: - (VIAHdAudAddService) -- C:\Windows\SysNative\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (FWLANUSB) -- C:\Windows\SysNative\drivers\fwlanusb.sys (AVM GmbH)
DRV:64bit: - (MagicTune) -- C:\Windows\SysNative\drivers\MTiCtwl.sys (Samsung Electronics, Inc. )
DRV:64bit: - (ENTECH64) -- C:\Windows\SysNative\drivers\Entech64.sys (EnTech Taiwan)
DRV:64bit: - (regi) -- C:\Windows\SysNative\drivers\regi.sys (InterVideo)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (ENTECH64) -- C:\Windows\SysWOW64\drivers\Entech64.sys (EnTech Taiwan)
DRV - (speedfan) -- C:\Windows\SysWOW64\speedfan.sys (Windows (R) Server 2003 DDK provider)
DRV - (CLBUDF) -- C:\Windows\CLBUDF.tbl ()
DRV - (DynCal) -- C:\Windows\SysWOW64\drivers\DynCal.sys (Windows (R) 2000 DDK provider)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://giga.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 13 D9 89 C9 47 7F CA 01  [binary data]
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.2
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.05.02 11:39:03 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.05.28 12:26:53 | 000,000,000 | ---D | M]
 
[2010.03.17 15:11:05 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\mozilla\Extensions
[2010.03.17 15:11:05 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2010.07.12 13:15:20 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\mozilla\Firefox\Profiles\zxjcd9km.default\extensions
[2010.03.23 16:35:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Zocker\AppData\Roaming\mozilla\Firefox\Profiles\zxjcd9km.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010.01.31 13:47:23 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Zocker\AppData\Roaming\mozilla\Firefox\Profiles\zxjcd9km.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.07.11 10:45:46 | 000,000,944 | ---- | M] () -- C:\Users\Zocker\AppData\Roaming\Mozilla\FireFox\Profiles\zxjcd9km.default\searchplugins\icqplugin.xml
[2010.01.27 15:04:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.04.22 19:09:27 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.04.22 19:09:27 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.04.22 19:09:27 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.04.22 19:09:27 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.04.22 19:09:27 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.4.4525.1752\swg64.dll (Google Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) -  - No CLSID value found.
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AVMWlanClient] C:\Program Files (x86)\avmwlanstick\wlangui.exe (AVM Berlin)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [QFan Help] C:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TurboV] C:\Program Files\ASUS\TurboV\TurboV.exe ()
O4 - HKLM..\Run: [WebTemp] C:\Program Files (x86)\WebTemp\WebTemp.exe (Coolhardware.de)
O4 - HKCU..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:64bit: - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.11.23 14:05:40 | 006,321,456 | R--- | M] (Codemasters Software Co.) - D:\Autorun.exe -- [ UDF ]
O32 - AutoRun File - [2009.09.28 15:23:06 | 000,000,068 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\Shell - "" = AutoRun
O33 - MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -- File not found
O33 - MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Autorun.exe -- [2009.11.23 14:05:40 | 006,321,456 | R--- | M] (Codemasters Software Co.)
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.07.12 14:17:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CCleaner
[2010.07.12 13:25:05 | 000,000,000 | ---D | C] -- C:\Users\Zocker\AppData\Roaming\Malwarebytes
[2010.07.12 13:24:56 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.07.12 13:24:56 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.07.12 13:24:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.07.12 13:24:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010.07.11 18:21:39 | 000,000,000 | ---D | C] -- C:\Users\Zocker\AppData\Local\fcgbrohij
[2010.07.08 20:13:40 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll
[2010.07.08 20:13:40 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll
[2010.07.08 20:13:40 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll
[2010.07.08 20:13:40 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll
[2010.07.08 20:13:39 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll
[2010.07.08 20:13:39 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll
[2010.07.08 20:13:39 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll
[2010.07.08 20:13:39 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll
[2010.07.08 20:11:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Disney Interactive Studios
[2010.06.26 16:41:12 | 000,000,000 | -H-D | C] -- C:\ProgramData\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
[2010.06.26 14:06:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2010.06.24 15:38:16 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2010.06.24 15:38:16 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2010.06.24 15:38:16 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2010.06.24 15:38:16 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2010.06.24 15:38:16 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2010.06.24 15:38:16 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2010.06.24 15:38:16 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2010.06.24 15:38:16 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2010.06.24 14:21:52 | 027,628,920 | ---- | C] (EA Digital Illusions CE AB) -- C:\Users\Zocker\Desktop\BFBC2Game.exe
[2010.06.24 13:09:12 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2010.06.24 13:09:02 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2010.06.24 13:09:02 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2010.06.24 13:09:02 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2010.06.24 13:09:02 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2010.06.24 13:09:02 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2010.06.24 13:09:01 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2010.06.24 13:09:01 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2010.06.23 14:03:34 | 000,000,000 | ---D | C] -- C:\Converted Audio Files
[2010.06.23 13:48:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acoustica MP3 To Wave Converter PLUS
[2010.06.23 13:28:15 | 000,000,000 | ---D | C] -- C:\Programme\iTunes
[2010.06.23 13:28:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2010.06.23 13:28:15 | 000,000,000 | ---D | C] -- C:\Programme\iPod
[2010.06.23 13:26:39 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour
[2010.06.23 13:26:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2010.06.20 11:52:14 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2010.06.20 11:52:10 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\ATI Technologies
[2010.06.20 11:52:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2010.06.20 11:51:22 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies
[2010.06.12 20:35:29 | 000,000,000 | ---D | C] -- C:\Users\Zocker\Documents\Games for Windows - LIVE Demos
[2007.04.17 00:44:08 | 000,208,896 | ---- | C] ( ) -- C:\Windows\nspring.dll
[2006.09.04 08:08:01 | 000,131,072 | ---- | C] ( ) -- C:\Windows\SysWow64\Interop.SHDocVw.dll
[2006.09.04 08:08:01 | 000,049,152 | ---- | C] ( ) -- C:\Windows\SysWow64\AxInterop.SHDocVw.dll
[6 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2010.07.12 14:46:58 | 003,932,160 | -HS- | M] () -- C:\Users\Zocker\ntuser.dat
[2010.07.12 14:41:00 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.07.12 14:26:43 | 000,038,772 | ---- | M] () -- C:\Users\Zocker\Documents\cc_20100712_142633.reg
[2010.07.12 14:20:02 | 000,014,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.07.12 14:20:02 | 000,014,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.07.12 14:17:29 | 000,001,007 | ---- | M] () -- C:\Users\Zocker\Desktop\CCleaner.lnk
[2010.07.12 14:13:03 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.07.12 14:12:50 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.07.12 14:12:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.07.12 14:12:43 | 3214,188,544 | -HS- | M] () -- C:\hiberfil.sys
[2010.07.12 13:24:59 | 000,001,009 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.11 18:49:38 | 001,486,084 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.07.11 18:49:38 | 000,648,466 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2010.07.11 18:49:38 | 000,611,134 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.07.11 18:49:38 | 000,128,724 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2010.07.11 18:49:38 | 000,105,314 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.07.11 12:17:46 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2010.07.11 12:17:46 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010.07.08 20:12:42 | 000,002,326 | ---- | M] () -- C:\Users\Public\Desktop\Split Second Demo.lnk
[2010.07.03 13:59:25 | 000,964,641 | ---- | M] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.mp3
[2010.07.03 13:44:15 | 000,983,347 | ---- | M] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.aac
[2010.07.03 13:43:40 | 003,603,815 | ---- | M] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.mp4
[2010.07.03 13:42:00 | 000,001,141 | ---- | M] () -- C:\Users\Zocker\Desktop\Free Video Converter.lnk
[2010.06.26 16:46:30 | 000,001,985 | ---- | M] () -- C:\Users\Zocker\Desktop\Crysis (2) - Verknüpfung.lnk
[2010.06.26 16:37:22 | 000,010,118 | ---- | M] () -- C:\Windows\SysWow64\ealregsnapshot1.reg
[2010.06.25 18:53:42 | 000,003,077 | ---- | M] () -- C:\Users\Zocker\unigine_20100625_1853.html
[2010.06.23 13:55:22 | 000,001,239 | ---- | M] () -- C:\Users\Zocker\Desktop\DVDVideoSoft Free Studio.lnk
[2010.06.23 13:48:05 | 000,001,988 | ---- | M] () -- C:\Users\Public\Desktop\Acoustica MP3 To Wave Converter PLUS.lnk
[2010.06.23 13:28:30 | 000,002,429 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010.06.20 19:26:19 | 000,075,064 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2010.06.19 14:09:44 | 000,001,234 | ---- | M] () -- C:\Users\Public\Desktop\PESEdit.com 2010 Patch.lnk
[6 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010.07.12 14:26:35 | 000,038,772 | ---- | C] () -- C:\Users\Zocker\Documents\cc_20100712_142633.reg
[2010.07.12 14:17:29 | 000,001,007 | ---- | C] () -- C:\Users\Zocker\Desktop\CCleaner.lnk
[2010.07.12 13:24:59 | 000,001,009 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.08 20:12:42 | 000,002,326 | ---- | C] () -- C:\Users\Public\Desktop\Split Second Demo.lnk
[2010.07.03 13:59:23 | 000,964,641 | ---- | C] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.mp3
[2010.07.03 13:44:13 | 000,983,347 | ---- | C] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.aac
[2010.07.03 13:43:33 | 003,603,815 | ---- | C] () -- C:\Users\Zocker\Desktop\kackboonrennen.flv.mp4
[2010.06.25 18:53:42 | 000,003,077 | ---- | C] () -- C:\Users\Zocker\unigine_20100625_1853.html
[2010.06.23 13:55:22 | 000,001,239 | ---- | C] () -- C:\Users\Zocker\Desktop\DVDVideoSoft Free Studio.lnk
[2010.06.23 13:48:05 | 000,001,988 | ---- | C] () -- C:\Users\Public\Desktop\Acoustica MP3 To Wave Converter PLUS.lnk
[2010.06.23 13:28:30 | 000,002,429 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010.04.05 15:18:50 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll
[2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2010.03.27 12:09:12 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2010.03.27 12:09:12 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2010.02.10 13:39:34 | 000,027,648 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll
[2010.01.27 14:46:58 | 000,290,816 | ---- | C] () -- C:\Windows\SysWow64\decdll.dll
[2009.12.16 19:37:47 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys
[2009.12.15 20:48:52 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2009.12.15 20:48:52 | 000,013,368 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2009.12.15 20:35:01 | 000,033,855 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2009.12.15 20:34:42 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2009.12.15 20:34:37 | 000,022,546 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.07.06 04:48:34 | 000,013,368 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys
[2009.06.19 21:06:22 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2009.06.19 21:06:22 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2009.04.02 14:30:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS
[2007.04.17 00:44:08 | 002,441,216 | ---- | C] () -- C:\Windows\Tao.OpenGl.dll
[2007.04.17 00:44:08 | 000,376,832 | ---- | C] () -- C:\Windows\freeglut.dll
[2007.04.17 00:44:08 | 000,069,632 | ---- | C] () -- C:\Windows\Tao.Sdl.dll
[2007.04.17 00:44:08 | 000,057,344 | ---- | C] () -- C:\Windows\Tao.Platform.Windows.dll
[2007.04.17 00:44:08 | 000,036,864 | ---- | C] () -- C:\Windows\Tao.FreeGlut.dll
 
========== LOP Check ==========
 
[2010.05.19 13:23:08 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FreeFLVConverter
[2010.01.30 11:52:29 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FreeHDConverter
[2010.07.03 13:42:08 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FreeVideoConverter
[2010.01.30 23:29:27 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FRITZ!
[2010.03.16 21:27:16 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\FrostWire
[2010.01.27 14:32:02 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\GrabPro
[2010.04.28 18:15:32 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\gtk-2.0
[2010.07.11 13:58:47 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\ICQ
[2010.07.05 17:41:37 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\LimeWire
[2010.04.23 14:42:15 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\NCH Swift Sound
[2009.12.16 19:49:48 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\OpenOffice.org
[2010.01.31 14:20:31 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\Orbit
[2010.04.15 13:40:42 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\POV-Ray
[2010.01.23 12:33:04 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\Sony
[2010.01.23 12:24:32 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\Sony Setup
[2010.01.31 13:39:40 | 000,000,000 | ---D | M] -- C:\Users\Zocker\AppData\Roaming\TuneUp Software
[2010.06.03 14:48:15 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
< End of report >
--- --- ---

Malewarebytes Auswertung:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4052

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

12.07.2010 14:10:29
mbam-log-2010-07-12 (14-10-29).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|H:\|)
Durchsuchte Objekte: 420268
Laufzeit: 43 Minute(n), 11 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 2
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Apocalypse (Backdoor.IRCBot) -> No action taken.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\baagngqi (Rogue.AntivirusSuite.Gen) -> No action taken.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Users\Zocker\AppData\Local\fcgbrohij\pdpgvtrtssd.exe (Rogue.AntivirusSuite.Gen) -> No action taken.


Hoffe auf schnelle Antwort!!!

cosinus 12.07.2010 18:24
Zitat:
Datenbank Version: 4052
Du hast Malwarebytes vorher nicht aktualisiert. Bitte updaten und einen Vollscan machen.

Zocker 13.07.2010 13:55
So habs nochmal mit aktueller Version durchlaufen lassn:


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4308

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

13.07.2010 10:21:05
mbam-log-2010-07-13 (10-21-05).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 390541
Laufzeit: 42 Minute(n), 45 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

cosinus 13.07.2010 15:30
Beende alle Programme, starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)


Code:
:OTL
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577
O32 - AutoRun File - [2009.11.23 14:05:40 | 006,321,456 | R--- | M] (Codemasters Software Co.) - D:\Autorun.exe -- [ UDF ]
O32 - AutoRun File - [2009.09.28 15:23:06 | 000,000,068 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\Shell - "" = AutoRun
O33 - MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -- File not found
O33 - MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Autorun.exe -- [2009.11.23 14:05:40 | 006,321,456 | R--- | M] (Codemasters Software Co.)
[2010.07.11 18:21:39 | 000,000,000 | ---D | C] -- C:\Users\Zocker\AppData\Local\fcgbrohij
:Commands
[purity]
[resethosts]
[emptytemp]
Klick dann auf den Button Run Fixes!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Zocker 14.07.2010 12:16
Habe den Log wie oben beschreiben eingesetzt und auf Fix gedrückt:
Hier die Ergebnisse:

All processes killed
========== OTL ==========
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
File move failed. D:\Autorun.exe scheduled to be moved on reboot.
File move failed. D:\autorun.inf scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{482b01d5-fb8d-11de-9197-002618df608b}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{482b01d5-fb8d-11de-9197-002618df608b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{482b01d5-fb8d-11de-9197-002618df608b}\ not found.
File I:\LaunchU3.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c67d59c9-e9a6-11de-aad7-806e6f6e6963}\ not found.
File move failed. D:\Autorun.exe scheduled to be moved on reboot.
C:\Users\Zocker\AppData\Local\fcgbrohij folder moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: Zocker
->Temp folder emptied: 32633042 bytes
->Temporary Internet Files folder emptied: 38288040 bytes
->Java cache emptied: 36508871 bytes
->FireFox cache emptied: 89646942 bytes
->Flash cache emptied: 47396 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 4849040 bytes
%systemroot%\System32 (64bit) .tmp files removed: 67584 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 72258 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67832 bytes
RecycleBin emptied: 214 bytes

Total Files Cleaned = 193,00 mb


OTL by OldTimer - Version 3.2.9.0 log created on 07142010_131057

Files\Folders moved on Reboot...
File move failed. D:\Autorun.exe scheduled to be moved on reboot.
File move failed. D:\autorun.inf scheduled to be moved on reboot.
C:\Users\Zocker\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

cosinus 14.07.2010 13:59
Da Du ein 64-Bit-Windows verwendest, sind wir mit unseren "Standardtools" schon am Ende, denn viele sind mit dem 64-Bit-Win nicht kompatibel.

Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Zocker 16.07.2010 12:52
So auch noch den Log von SuperAntispyware:


SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 07/15/2010 at 03:06 PM

Application Version : 4.40.1002

Core Rules Database Version : 5203
Trace Rules Database Version: 3015

Scan type : Complete Scan
Total Scan Time : 01:21:53

Memory items scanned : 731
Memory threats detected : 0
Registry items scanned : 12692
Registry threats detected : 0
File items scanned : 266391
File threats detected : 9

Adware.Tracking Cookie
C:\Users\Zocker\AppData\Roaming\Microsoft\Windows\Cookies\zocker@atwola[1].txt
C:\Users\Zocker\AppData\Roaming\Microsoft\Windows\Cookies\zocker@sevenoneintermedia.112.2o7[1].txt
C:\Users\Zocker\AppData\Roaming\Microsoft\Windows\Cookies\zocker@ar.atwola[1].txt
C:\Users\Zocker\AppData\Roaming\Microsoft\Windows\Cookies\zocker@doubleclick[1].txt
cdn5.specificclick.net [ C:\Users\Zocker\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\5RW8X54L ]
vitamine.networldmedia.net [ C:\Users\Zocker\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\5RW8X54L ]

Adware.Casino Games (Golden Palace Casino)
C:\PROGRAM FILES\CASINOCLUB\CASINO.EXE

Trojan.Agent/Gen-Krpytik
C:\USERS\ZOCKER\DOWNLOADS\CRYSIS FROZEN ISLAND\RLD-CRWK.EXE
C:\USERS\ZOCKER\DOWNLOADS\RLD-CRWK.EXE

cosinus 16.07.2010 12:56
Zitat:
Trojan.Agent/Gen-Krpytik
C:\USERS\ZOCKER\DOWNLOADS\CRYSIS FROZEN ISLAND\RLD-CRWK.EXE
C:\USERS\ZOCKER\DOWNLOADS\RLD-CRWK.EXE
Was ist das denn hier?

Zocker 16.07.2010 13:07
Zitat:
Zitat von cosinus (Beitrag 542734)
Was ist das denn hier?

Das sind Dateien der Crysis Demo Erweiterung Frozen Island...

cosinus 16.07.2010 13:40
Was für Dateien sollen das genau sein?? Die sehen nicht ganz koscher aus!

Zocker 16.07.2010 19:15
Des sind halt irgenwelche Dateien von Crysis Demo Erweiterung ka was für welche genau... . Ich versteh außerdem ned was das zur Sache soll????

cosinus 17.07.2010 17:33
Weswegen frag ich wohl nach! SASW wird die nicht grundlos als Schädling bemängeln und ich will klären ob das ein Fehlalarm ist oder nicht! Also beschreib bitte genauer was das ist!
Wenn nach dem Dateinamen google, seh ich da eher illegale Seiten als Treffer :balla:

Zocker 17.07.2010 18:04
Ja sry es handelt sich um einen illegalen keygen für crysis warhead... hat aba nix mit der AV Malware zu tun !!!

cosinus 17.07.2010 18:38
Zitat:
Ja sry es handelt sich um einen illegalen keygen für crysis warhead
Sry, aber das hab ich befürchtet. Support ist zu Ende. :nixda:

Die (Be)nutzung von Cracks, Serials und Keygens ist illegal, somit gibt es im Trojaner-Board keinen weiteren Support mehr.

Für Dich geht es hier weiter => Neuaufsetzen des Systems
Bitte auch alle Passwörter abändern (für E-Mail-Konten, StudiVZ, Ebay...einfach alles!) da nicht selten in dieser dubiosen Software auch Keylogger und Backdoorfunktionen stecken.

Danach nie wieder sowas anrühren!

Zocker 18.07.2010 09:43
Zitat:
Zitat von cosinus (Beitrag 543081)
Sry, aber das hab ich befürchtet. Support ist zu Ende. :nixda:

Die (Be)nutzung von Cracks, Serials und Keygens ist illegal, somit gibt es im Trojaner-Board keinen weiteren Support mehr.

Für Dich geht es hier weiter => Neuaufsetzen des Systems
Bitte auch alle Passwörter abändern (für E-Mail-Konten, StudiVZ, Ebay...einfach alles!) da nicht selten in dieser dubiosen Software auch Keylogger und Backdoorfunktionen stecken.

Danach nie wieder sowas anrühren!
Ich bin nicht überzeugt, dass ein Neuuaufsetzen des Systems notwendig ist. Ich habe im Moment keinerlei Probleme mehr... . Außerdem kann ich versichern das die Malware mit dem AV Zeugs nicht!!! von dem Crack bzw. keygen kommt... . Ich komm mir ehrlich gesagt auch ein bisschen vor wie bei der polizei hier, ich wette das eigtl. jeder der ein Problem mit Virus, etc. hat und es in diesem forum postet, diesen Virus von einem Crack bzw von einer illegalen Aktivität bekommen hat... :balla:

PS: Trotzdem danke für den bisherigen support ;)


Alle Zeitangaben in WEZ +1. Es ist jetzt 04:23 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27