Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Nach GEMA-Trojaner Sicherheitscenter ausgeschaltet (https://www.trojaner-board.de/111616-gema-trojaner-sicherheitscenter-ausgeschaltet.html)

Valur 15.03.2012 20:41
Nach GEMA-Trojaner Sicherheitscenter ausgeschaltet
 
Hallo.

Wie viele andere wurde mein Rechner durch den GEMA-Trojaner blockiert. Ich habe unter einem anderen Benutzer Avira Antivir und Malewarebytes laufen lassen, seitdem ist zumindest der Rechner wieder freigegeben. Leider ist seitdem ist das Sicherheitscenter ausgeschaltet und lässt sich nicht mehr einschalten.
Hat das mit besagtem Trojaner zu tun oder ist das ein anderes Problem? Empfiehlt es sich, wegen des Trojaners noch irgendetwas zu unternehmen?

Chris4You 15.03.2012 21:56
Hi,

schauen wir mal nach...
OTL
Lade Dir OTL von Oldtimer herunter (http://filepony.de/download-otl/) und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista/Win7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt (OTL.TXT und EXTRAS.TXT)
  • Poste die Logfiles hier in den Thread

Wenn sich das Sicherheitscenter nicht starten lässt, steht wahrscheinlich der Dienst auf "disabled"...
Öffne eine Commandline-Shell mit Adminrechten. Am einfachsten Du erstellst eine entsprechende Verknüpfung auf dem Desktop. Ziel der Verknüpfung ist "C:\Windows\System32\cmd.exe". Ausführen als Administrator ankreuzen nicht vergessen...
Code:
sc config wscsvc start=auto
net start wscsvc
Fix für OTL:
Code:
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = dword:0x01
chris

Valur 15.03.2012 23:19
Vielen Dank soweit. :-)

Allerdings muss ich gestehen, dass meine bescheidenen Kenntnisse für Deine Hilfe bzgl. des Sicherheitscenters ausreicht. Kannst Du das bitte nochmal für ganz Dumme erklären?


Die Ergebnisse des OTL-Scans:

OTL EXTRAS Logfile:
Code:
OTL Extras logfile created on: 15.03.2012 22:11:51 - Run 1
OTL by OldTimer - Version 3.2.37.0    Folder = C:\Users\Tom\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,06 Gb Available Physical Memory | 53,17% Memory free
4,25 Gb Paging File | 3,00 Gb Available in Paging File | 70,60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 22,23 Gb Free Space | 14,92% Space Free | Partition Type: NTFS
Drive D: | 3,58 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: Tom-PC | User Name: Tom | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{031B6625-C8C9-4DEE-B13A-C269C6723C1C}" = rport=139 | protocol=6 | dir=out | app=system |
"{0B970AF4-D159-4FE2-99F1-0DFCE5E38757}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{394C064E-AD8E-4149-9F7E-A393771F5244}" = rport=137 | protocol=17 | dir=out | app=system |
"{511D4918-9115-411E-83EF-952ADB771456}" = lport=137 | protocol=17 | dir=in | app=system |
"{5CF0D361-369A-437B-917D-69D01E52FC80}" = lport=445 | protocol=6 | dir=in | app=system |
"{8839684C-BA9D-40BB-B987-CB104489D1BB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{A24F96FF-4C9B-45F4-83BF-F583285FF625}" = lport=139 | protocol=6 | dir=in | app=system |
"{C1BB608B-4FA3-4D43-8119-6250003F6B35}" = rport=445 | protocol=6 | dir=out | app=system |
"{C9D43E7E-96E7-49BA-9BD4-0A2064C0E25F}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{D9F9500B-21F6-4D7D-91AD-14B81B6BFB11}" = rport=138 | protocol=17 | dir=out | app=system |
"{E1438442-EE73-42E4-95FA-7FFAEF7B140C}" = lport=138 | protocol=17 | dir=in | app=system |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{006CDDCE-40C4-4925-9BA5-5ECFB4B3026B}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{0538AFE2-9F74-4051-BB77-E1CBEC7E4FB8}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{054B38CC-0AFF-447A-B4A3-A7064B9EFCBB}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{0A072B7B-6410-46DF-97FD-71FDC78E9913}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"{1266951D-8B78-46B6-A92B-E87CDCEAFA5F}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{427EB015-531B-4E10-8C8A-13E47D88718C}" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe |
"{431B6C47-47BE-4558-AEC9-6E86CFCF6055}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{45B2A3D1-1319-449C-B6E5-FBE0A0964420}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{53E38BB5-70B3-48D0-8742-7A113171F981}" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe |
"{6009EC66-9170-45F9-95E2-4082077262D6}" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe |
"{61806247-6C47-4BA9-9748-DDDD0EF2B236}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{65D702B2-A81A-4E3C-BCE5-668C21E6466B}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{6AB4E9B2-622B-4866-8096-0DF1D55A36E5}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{77DF5294-0B9B-4193-B317-34B844FA4228}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{7F90473A-7B3E-4401-9B42-CA8EDA388682}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{B66B9728-E693-4568-99D3-0CCE77207E6A}" = protocol=6 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{C02B50F7-E168-43CB-BCF9-C0C70DA7CA49}" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe |
"{CB541582-D55A-4500-A6D3-5BC20CE5B5E0}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{DC49C47E-4257-4757-BD55-663600FE4C01}" = protocol=6 | dir=in | app=c:\program files\icq7.2\icq.exe |
"{DE7F9591-B216-48F6-BC56-E7A874836BE7}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{EFCD83E6-3CF0-4050-8893-367AEF284511}" = protocol=17 | dir=in | app=c:\program files\icq7.2\aolload.exe |
"{F065C019-ADD3-4E19-9202-D5D05E3F9799}" = protocol=17 | dir=in | app=c:\program files\icq7.2\icq.exe |
"TCP Query User{079AA45C-9D5B-4C49-893B-F0061D07426B}C:\program files\icq6\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6\icq.exe |
"TCP Query User{4AD05ED2-4D70-4FD4-8334-D23DCE781B17}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"TCP Query User{5147B31F-9B98-4999-8097-C81000D3E2AC}C:\users\Tom\appdata\roaming\xzndgxh1vzxvuqqal3spwqv3yvswyjan2\svcnost.exe" = protocol=6 | dir=in | app=c:\users\Tom\appdata\roaming\xzndgxh1vzxvuqqal3spwqv3yvswyjan2\svcnost.exe |
"TCP Query User{963BA0A3-9868-4053-AF84-FD4CB1A5CCEB}C:\users\Tom\appdata\roaming\xubm3fqek3k1mezbvuowqgdbpndycdhw2\svcnost.exe" = protocol=6 | dir=in | app=c:\users\Tom\appdata\roaming\xubm3fqek3k1mezbvuowqgdbpndycdhw2\svcnost.exe |
"TCP Query User{BD047E31-867F-4B7B-B9BA-892387E5D3D8}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"TCP Query User{C5BCB6E5-F162-4987-9796-89155D1B746B}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{C6D53B3A-17B3-4580-914C-0D03C737CDE0}C:\program files\real\realplayer\recordingmanager.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\recordingmanager.exe |
"TCP Query User{D7DAF1A7-1EE1-4850-82C8-DBF8CBAB239B}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{DDCF0AFC-2611-4C2A-8332-D899335B66D0}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe |
"TCP Query User{EA7E5807-4EF2-469C-8852-6A55B181CEF0}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe |
"UDP Query User{070C7E40-134C-4407-A59E-0F4429A9BA03}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{1513C049-20FC-4EB6-8A19-5100954887C7}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe |
"UDP Query User{1ADFFE54-9FAA-4A53-9CCB-DDDD3089C873}C:\users\Tom\appdata\roaming\xubm3fqek3k1mezbvuowqgdbpndycdhw2\svcnost.exe" = protocol=17 | dir=in | app=c:\users\Tom\appdata\roaming\xubm3fqek3k1mezbvuowqgdbpndycdhw2\svcnost.exe |
"UDP Query User{90172D37-5FDC-4172-B0DE-2631EC317672}C:\users\Tom\appdata\roaming\xzndgxh1vzxvuqqal3spwqv3yvswyjan2\svcnost.exe" = protocol=17 | dir=in | app=c:\users\Tom\appdata\roaming\xzndgxh1vzxvuqqal3spwqv3yvswyjan2\svcnost.exe |
"UDP Query User{92FB4968-DBB0-4B54-B31E-E00FB9C385E4}C:\program files\real\realplayer\recordingmanager.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\recordingmanager.exe |
"UDP Query User{A5D20B33-ABF6-4091-8081-B19AF5114187}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{AAD15B44-C046-4F1D-9740-0CA87416CC5F}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe |
"UDP Query User{AF36B079-B817-45AF-A317-4F340DC53ED1}C:\program files\icq6\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6\icq.exe |
"UDP Query User{CECD1D6B-58AE-4414-81F4-0350F730BE50}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
"UDP Query User{D6516A5B-B136-456B-97FD-DDD4E0CEE27D}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{02DFF6B1-1654-411C-8D7B-FD6052EF016F}" = Apple Software Update
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{68249B75-B714-11D7-88E8-0050DA21757E}" = Java 2 Runtime Environment Standard Edition 1.3.1_15
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{80A97464-A741-44B0-8AD6-0C16B1FEF7F6}" = Norton Security Scan
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROHYBRIDR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_PROHYBRIDR_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_PROHYBRIDR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A95000000001}" = Adobe Reader 9.5.0 - Deutsch
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{C20CE592-B0F8-4D20-BF31-0151CA6331A6}" = Samsung Media Studio
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}" = getPlus(R) for Adobe
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"Avira AntiVir Desktop" = Avira Free Antivirus
"CCleaner" = CCleaner (remove only)
"Google Updater" = Google Updater
"Handball Manager 2009 " = Handball Manager 2009
"Lame MP3 Codec (for the ACM)" = Lame ACM MP3 Codec
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.1.1000
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 10.0.2 (x86 de)" = Mozilla Firefox 10.0.2 (x86 de)
"NVIDIA Drivers" = NVIDIA Drivers
"phonostarRadioPlayer_is1" = phonostar-Player Version 2.01.4
"PROHYBRIDR" = 2007 Microsoft Office system
"ProtectDisc Driver 10" = ProtectDisc Helper Driver 10
"ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
"RealPlayer 12.0" = RealPlayer
"S2TNG" = Die Siedler II - Die nächste Generation
"Softonic_Deutsch Toolbar" = Softonic_Deutsch Toolbar
"Soulseek2" = SoulSeek 157 NS 13c
"VLC media player" = VideoLAN VLC media player 0.8.6i
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinRAR archiver" = WinRAR 4.10 (32-Bit)
"XviD_is1" = XviD MPEG-4 Video Codec
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Move Media Player" = Move Media Player
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 09.11.2011 13:51:33 | Computer Name = Tom-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: 320  Anfangszeit: 01cc9dac0ee1f1b0  Zeitpunkt
 der Beendigung: 403
 
Error - 09.11.2011 18:21:37 | Computer Name = Tom-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: 448  Anfangszeit: 01cc9f2cf5ff2597  Zeitpunkt
 der Beendigung: 652
 
Error - 09.11.2011 18:22:33 | Computer Name = Tom-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: cb0  Anfangszeit: 01cc9f2cf6d2fff7  Zeitpunkt
 der Beendigung: 1207
 
Error - 09.11.2011 18:22:39 | Computer Name = Tom-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: ae0  Anfangszeit: 01cc9f2cf68df817  Zeitpunkt
 der Beendigung: 566
 
Error - 11.11.2011 10:49:18 | Computer Name = Tom-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: fc8  Anfangszeit: 01cc9f2cf3caffb7  Zeitpunkt
 der Beendigung: 1332
 
Error - 13.11.2011 03:23:50 | Computer Name = Tom-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: 3040  Anfangszeit: 01cca18c5883fc80  Zeitpunkt
 der Beendigung: 1041
 
Error - 13.11.2011 05:42:42 | Computer Name = Tom-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: 2820  Anfangszeit: 01cca18c58746c20  Zeitpunkt
 der Beendigung: 2947
 
Error - 13.11.2011 13:37:38 | Computer Name = Tom-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen.  Prozess-ID: 4ec0  Anfangszeit: 01cca1e813523120  Zeitpunkt
 der Beendigung: 1207
 
Error - 13.11.2011 16:24:12 | Computer Name = Tom-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung HandballManager2009.exe, Version 1.3.0.0, Zeitstempel
 0x48ec019a, fehlerhaftes Modul HandballManager2009.exe, Version 1.3.0.0, Zeitstempel
 0x48ec019a, Ausnahmecode 0xc0000005, Fehleroffset 0x00331496,  Prozess-ID 0x2bbc,
 Anwendungsstartzeit 01cca22d0665e1b0.
 
Error - 14.11.2011 19:25:19 | Computer Name = Tom-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung iexplore.exe, Version 9.0.8112.16421, Zeitstempel
 0x4d76255d, fehlerhaftes Modul kernel32.dll, Version 6.0.6002.18449, Zeitstempel
 0x4da47967, Ausnahmecode 0xc0000005, Fehleroffset 0x0003fc56,  Prozess-ID 0x1a08,
 Anwendungsstartzeit 01cca247716a6e80.
 
[ System Events ]
Error - 08.03.2012 07:23:43 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7003
Description =
 
Error - 08.03.2012 07:23:43 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7003
Description =
 
Error - 08.03.2012 07:23:43 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7003
Description =
 
Error - 08.03.2012 15:01:35 | Computer Name = Tom-PC | Source = LsaSrv | ID = 6033
Description = Eine anonyme Sitzung mit hergestellter Verbindung von 88.25.202.105
 hat versucht, einen LSA-Richtlinienhandle auf diesem Computer zu öffnen. Der Versuch
 wurde mit STATUS_ACCESS_DENIED zurückgewiesen, um die Verbreitung von sicherheitssensitiven
 Informationen nan einen anonymen Anrufer zu verhindern.  Der Anwendungsfehler, der
 diesen Versuch verursacht hat, sollte behoben werden. Wenden Sie sich an den Hersteller
 der Anwendung. Als temporären Workaround kann diese Sicherheitserkennung durch
Setzen des DWORD Werts HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\TurnOffAnonymousBlock
 auf 1 aufgehoben werden.  Diese Meldung wird höchstens einmal pro Tag protokolliert.
 
Error - 12.03.2012 08:21:20 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7011
Description =
 
Error - 13.03.2012 10:19:51 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7011
Description =
 
Error - 15.03.2012 09:18:49 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7023
Description =
 
Error - 15.03.2012 09:18:49 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7003
Description =
 
Error - 15.03.2012 09:18:49 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7003
Description =
 
Error - 15.03.2012 09:18:49 | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7003
Description =
 
 
< End of report >

OTL Logfile:
Code:
OTL logfile created on: 15.03.2012 22:43:09 - Run 1
OTL by OldTimer - Version 3.2.37.0    Folder = C:\Users\Tom\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,10 Gb Available Physical Memory | 54,97% Memory free
4,25 Gb Paging File | 3,04 Gb Available in Paging File | 71,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 22,23 Gb Free Space | 14,92% Space Free | Partition Type: NTFS
Drive D: | 3,58 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: Tom-PC | User Name: Tom | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Tom\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\phonostar\ps_timer.exe (phonostar)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32.dll ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (odserv) -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (getPlus(R) Helper) getPlus(R) -- C:\Programme\NOS\bin\getPlus_HelperSvc.exe (NOS Microsystems Ltd.)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (GMSIPCI) -- D:\INSTALL\GMSIPCI.SYS File not found
DRV - (catchme) -- C:\Users\Tom\AppData\Local\Temp\catchme.sys File not found
DRV - (blbdrive) -- C:\Windows\system32\drivers\blbdrive.sys File not found
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (acedrv11) -- C:\Windows\System32\drivers\acedrv11.sys (Protect Software GmbH)
DRV - (acehlp10) -- C:\Windows\System32\drivers\acehlp10.sys (Protect Software GmbH)
DRV - (acedrv10) -- C:\Windows\System32\drivers\ACEDRV10.sys (Protect Software GmbH)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation                                            )
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\URLSearchHook: {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1351351
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\..\URLSearchHook: {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_de
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1351351
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.7
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.669: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Users\Tom\AppData\Roaming\Move Networks\plugins\071802000001\npqmp071802000001.dll (Move Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.11.04 01:44:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.03.07 14:19:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.03.06 19:45:09 | 000,000,000 | ---D | M]
 
[2008.09.08 02:18:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\André\AppData\Roaming\mozilla\Extensions
[2012.01.31 15:16:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\André\AppData\Roaming\mozilla\Firefox\Profiles\afbrytqr.default\extensions
[2011.03.04 17:36:13 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\André\AppData\Roaming\mozilla\Firefox\Profiles\afbrytqr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.03.15 14:32:35 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-1.xml
[2008.10.15 17:50:39 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-10.xml
[2009.03.30 00:17:12 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-100.xml
[2009.03.30 18:42:00 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-101.xml
[2009.03.31 19:21:55 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-102.xml
[2009.04.01 17:54:37 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-103.xml
[2009.04.02 17:47:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-104.xml
[2009.04.03 15:41:07 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-105.xml
[2009.04.03 20:36:06 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-106.xml
[2009.04.04 18:38:30 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-107.xml
[2009.04.05 13:42:55 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-108.xml
[2009.04.06 18:00:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-109.xml
[2008.10.15 17:51:42 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-11.xml
[2009.04.07 00:51:59 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-110.xml
[2009.04.07 01:00:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-111.xml
[2009.04.07 01:07:53 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-112.xml
[2009.04.07 01:12:21 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-113.xml
[2009.04.07 19:52:55 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-114.xml
[2009.04.07 19:58:55 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-115.xml
[2009.04.07 20:05:27 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-116.xml
[2009.04.07 20:12:47 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-117.xml
[2009.04.07 20:20:03 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-118.xml
[2009.04.07 20:45:36 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-119.xml
[2008.10.16 20:58:37 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-12.xml
[2009.04.07 20:53:15 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-120.xml
[2009.04.07 21:00:19 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-121.xml
[2009.04.07 21:04:21 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-122.xml
[2009.04.07 21:07:40 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-123.xml
[2009.04.08 17:39:40 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-124.xml
[2009.04.08 17:43:01 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-125.xml
[2009.04.08 17:51:32 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-126.xml
[2009.04.08 18:22:42 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-127.xml
[2009.04.08 18:33:55 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-128.xml
[2009.04.08 18:39:43 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-129.xml
[2008.10.16 20:59:36 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-13.xml
[2009.04.09 17:44:06 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-130.xml
[2009.04.09 20:11:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-131.xml
[2009.04.10 11:39:00 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-132.xml
[2009.04.10 12:26:15 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-133.xml
[2009.04.10 14:46:40 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-134.xml
[2009.04.10 15:44:21 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-135.xml
[2009.04.10 15:53:08 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-136.xml
[2009.04.11 14:01:19 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-137.xml
[2009.04.11 21:37:09 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-138.xml
[2009.04.12 11:29:35 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-139.xml
[2008.10.17 22:39:56 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-14.xml
[2009.04.12 21:08:07 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-140.xml
[2009.04.12 21:53:30 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-141.xml
[2009.04.13 00:43:11 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-142.xml
[2009.04.13 11:07:50 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-143.xml
[2009.04.13 11:38:37 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-144.xml
[2009.04.13 12:12:14 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-145.xml
[2009.04.13 12:59:06 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-146.xml
[2009.04.13 14:01:06 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-147.xml
[2009.04.13 14:23:25 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-148.xml
[2009.04.13 14:58:01 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-149.xml
[2008.10.17 22:41:20 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-15.xml
[2009.04.13 15:32:41 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-150.xml
[2009.04.13 15:40:21 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-151.xml
[2009.04.13 16:00:01 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-152.xml
[2009.04.13 18:47:56 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-153.xml
[2009.04.13 21:34:00 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-154.xml
[2009.04.13 22:35:41 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-155.xml
[2009.04.14 00:23:19 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-156.xml
[2009.04.14 17:54:24 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-157.xml
[2009.04.15 19:28:48 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-158.xml
[2009.04.16 17:56:44 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-159.xml
[2008.10.18 23:32:29 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-16.xml
[2009.04.16 21:53:03 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-160.xml
[2009.04.17 14:11:08 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-161.xml
[2009.04.18 10:39:17 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-162.xml
[2009.04.19 11:46:48 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-163.xml
[2009.04.19 12:07:45 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-164.xml
[2009.04.20 18:25:49 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-165.xml
[2009.04.21 21:51:49 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-166.xml
[2009.04.22 17:40:01 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-167.xml
[2009.04.23 19:53:08 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-168.xml
[2009.04.24 14:15:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-169.xml
[2008.10.20 18:37:44 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-17.xml
[2009.04.24 15:49:20 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-170.xml
[2009.04.24 17:26:44 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-171.xml
[2009.04.24 17:42:50 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-172.xml
[2009.04.24 18:04:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-173.xml
[2009.04.24 18:11:30 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-174.xml
[2009.04.25 12:09:18 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-175.xml
[2009.04.25 12:28:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-176.xml
[2009.04.25 12:36:00 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-177.xml
[2009.04.25 12:46:32 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-178.xml
[2009.04.25 13:00:27 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-179.xml
[2008.10.20 18:42:18 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-18.xml
[2009.04.25 19:22:41 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-180.xml
[2009.04.25 19:28:26 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-181.xml
[2009.04.25 19:50:26 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-182.xml
[2009.04.25 21:46:15 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-183.xml
[2009.04.25 21:52:40 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-184.xml
[2009.04.25 21:58:03 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-185.xml
[2009.04.25 22:05:07 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-186.xml
[2009.04.25 22:23:22 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-187.xml
[2009.04.25 22:32:58 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-188.xml
[2009.04.26 17:19:43 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-189.xml
[2008.10.25 11:54:35 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-19.xml
[2009.04.26 18:39:46 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-190.xml
[2009.04.26 19:30:15 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-191.xml
[2009.04.26 23:35:18 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-192.xml
[2009.04.27 18:35:33 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-193.xml
[2009.04.27 22:50:12 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-194.xml
[2009.04.28 22:28:58 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-195.xml
[2009.04.29 17:48:12 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-196.xml
[2009.04.29 19:33:35 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-197.xml
[2009.04.29 20:51:21 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-198.xml
[2009.04.30 01:35:48 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-199.xml
[2008.10.06 17:41:15 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-2.xml
[2008.10.29 23:00:16 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-20.xml
[2009.04.30 01:55:03 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-200.xml
[2009.04.30 01:58:33 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-201.xml
[2009.04.30 02:08:06 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-202.xml
[2009.04.30 02:11:49 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-203.xml
[2009.04.30 02:18:47 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-204.xml
[2009.04.30 02:23:07 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-205.xml
[2009.05.01 11:12:09 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-206.xml
[2009.05.01 11:19:57 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-207.xml
[2009.05.01 11:28:26 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-208.xml
[2009.05.01 11:33:52 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-209.xml
[2008.11.01 20:54:26 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-21.xml
[2009.05.01 23:47:51 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-210.xml
[2009.05.01 23:50:36 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-211.xml
[2009.05.01 23:56:45 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-212.xml
[2009.05.02 20:39:54 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-213.xml
[2009.05.02 20:50:35 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-214.xml
[2009.05.02 21:00:10 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-215.xml
[2009.05.03 20:05:33 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-216.xml
[2009.05.05 00:20:49 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-217.xml
[2009.05.05 21:39:31 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-218.xml
[2009.05.05 22:24:15 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-219.xml
[2008.11.10 19:13:54 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-22.xml
[2009.05.05 22:29:56 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-220.xml
[2009.05.05 22:37:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-221.xml
[2009.05.06 22:47:33 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-222.xml
[2009.05.06 22:50:47 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-223.xml
[2009.05.06 23:01:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-224.xml
[2009.05.06 23:07:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-225.xml
[2009.05.07 00:06:12 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-226.xml
[2009.05.07 20:12:41 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-227.xml
[2009.05.08 18:44:58 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-228.xml
[2009.05.08 18:59:14 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-229.xml
[2008.11.15 23:38:38 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-23.xml
[2009.05.08 19:08:36 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-230.xml
[2009.05.08 19:22:31 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-231.xml
[2009.05.08 20:40:15 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-232.xml
[2009.05.10 19:18:18 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-233.xml
[2009.05.10 19:37:59 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-234.xml
[2009.05.10 21:02:33 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-235.xml
[2009.05.10 21:10:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-236.xml
[2009.05.10 21:28:21 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-237.xml
[2009.05.10 21:36:18 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-238.xml
[2009.05.11 18:31:08 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-239.xml
[2008.11.27 21:16:31 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-24.xml
[2009.05.11 23:33:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-240.xml
[2009.05.12 22:12:10 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-241.xml
[2009.05.13 18:13:19 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-242.xml
[2009.05.14 17:40:51 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-243.xml
[2009.05.15 18:40:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-244.xml
[2009.05.16 21:40:27 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-245.xml
[2009.05.17 11:16:56 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-246.xml
[2009.05.17 16:49:32 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-247.xml
[2009.05.17 21:09:30 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-248.xml
[2009.05.17 21:13:04 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-249.xml
[2008.11.27 22:37:38 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-25.xml
[2009.05.18 19:49:41 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-250.xml
[2009.05.19 20:57:36 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-251.xml
[2009.05.19 23:03:59 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-252.xml
[2009.05.20 18:05:00 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-253.xml
[2009.05.20 20:47:59 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-254.xml
[2009.05.20 20:50:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-255.xml
[2009.05.21 13:39:32 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-256.xml
[2009.06.12 01:53:29 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-257.xml
[2009.06.12 02:36:42 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-258.xml
[2009.06.13 04:30:20 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-259.xml
[2008.11.27 22:38:41 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-26.xml
[2009.06.13 04:32:56 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-260.xml
[2009.06.13 04:36:17 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-261.xml
[2009.06.13 04:40:07 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-262.xml
[2009.06.14 02:38:53 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-263.xml
[2009.06.14 02:47:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-264.xml
[2009.06.14 23:00:18 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-265.xml
[2009.06.14 23:05:13 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-266.xml
[2009.06.15 23:37:08 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-267.xml
[2009.06.15 23:43:48 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-268.xml
[2009.06.15 23:51:46 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-269.xml
[2008.12.13 14:58:24 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-27.xml
[2009.06.16 22:14:35 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-270.xml
[2009.06.17 22:25:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-271.xml
[2009.06.19 00:50:43 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-272.xml
[2009.06.21 23:16:30 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-273.xml
[2009.06.22 22:29:49 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-274.xml
[2009.06.23 23:28:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-275.xml
[2009.06.24 22:48:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-276.xml
[2009.06.25 22:51:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-277.xml
[2009.06.26 22:50:04 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-278.xml
[2009.06.28 02:30:17 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-279.xml
[2008.12.14 03:36:09 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-28.xml
[2009.07.01 20:15:17 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-280.xml
[2009.07.02 23:28:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-281.xml
[2009.07.07 19:12:31 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-282.xml
[2009.09.01 15:30:06 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-283.xml
[2009.09.05 14:00:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-284.xml
[2009.10.17 14:24:02 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-285.xml
[2009.10.17 14:59:51 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-286.xml
[2010.01.04 22:52:52 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-287.xml
[2008.12.14 14:54:39 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-29.xml
[2008.10.06 20:15:52 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-3.xml
[2008.12.14 14:55:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-30.xml
[2008.12.17 00:23:56 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-31.xml
[2008.12.17 00:42:31 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-32.xml
[2008.12.25 20:20:27 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-33.xml
[2008.12.28 16:13:56 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-34.xml
[2009.01.02 23:21:41 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-35.xml
[2009.01.02 23:22:49 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-36.xml
[2009.01.02 23:26:16 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-37.xml
[2009.01.05 22:25:06 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-38.xml
[2009.02.01 02:41:51 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-39.xml
[2008.10.06 22:31:57 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-4.xml
[2009.02.01 15:59:49 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-40.xml
[2009.02.12 21:10:01 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-41.xml
[2009.02.12 21:11:39 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-42.xml
[2009.02.12 21:12:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-43.xml
[2009.02.12 22:48:26 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-44.xml
[2009.02.12 22:50:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-45.xml
[2009.02.12 22:52:16 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-46.xml
[2009.02.12 22:53:38 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-47.xml
[2009.02.12 22:58:46 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-48.xml
[2009.02.12 23:00:07 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-49.xml
[2008.10.07 21:53:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-5.xml
[2009.02.12 23:00:37 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-50.xml
[2009.02.13 02:12:51 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-51.xml
[2009.02.13 20:30:59 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-52.xml
[2009.02.13 20:33:27 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-53.xml
[2009.02.13 23:09:05 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-54.xml
[2009.02.13 23:11:09 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-55.xml
[2009.02.14 20:16:17 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-56.xml
[2009.02.14 20:20:40 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-57.xml
[2009.02.16 19:48:40 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-58.xml
[2009.02.16 19:50:07 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-59.xml
[2008.10.08 17:37:06 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-6.xml
[2009.02.18 18:51:22 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-60.xml
[2009.02.18 18:52:45 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-61.xml
[2009.02.19 19:10:11 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-62.xml
[2009.02.19 19:11:34 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-63.xml
[2009.02.20 14:54:14 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-64.xml
[2009.02.20 15:01:55 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-65.xml
[2009.02.21 00:57:50 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-66.xml
[2009.02.21 00:59:57 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-67.xml
[2009.02.21 01:58:39 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-68.xml
[2009.02.21 01:59:28 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-69.xml
[2008.10.14 21:11:46 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-7.xml
[2009.02.22 16:05:50 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-70.xml
[2009.02.22 16:09:32 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-71.xml
[2009.02.22 16:54:02 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-72.xml
[2009.02.22 16:56:11 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-73.xml
[2009.02.23 18:57:11 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-74.xml
[2009.02.24 21:50:59 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-75.xml
[2009.02.25 18:55:00 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-76.xml
[2009.02.25 18:56:45 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-77.xml
[2009.02.25 20:23:15 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-78.xml
[2009.02.25 20:24:02 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-79.xml
[2008.10.14 22:48:37 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-8.xml
[2009.02.26 20:55:02 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-80.xml
[2009.02.26 20:58:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-81.xml
[2009.02.27 14:35:08 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-82.xml
[2009.02.28 11:53:04 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-83.xml
[2009.03.01 01:00:16 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-84.xml
[2009.03.07 11:51:18 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-85.xml
[2009.03.07 11:53:44 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-86.xml
[2009.03.08 12:30:41 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-87.xml
[2009.03.08 15:33:51 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-88.xml
[2009.03.09 13:41:57 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-89.xml
[2008.10.14 23:16:51 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-9.xml
[2009.03.10 13:39:54 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-90.xml
[2009.03.10 22:51:33 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-91.xml
[2009.03.11 12:30:26 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-92.xml
[2009.03.11 23:08:26 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-93.xml
[2009.03.11 23:46:29 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-94.xml
[2009.03.12 21:10:20 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-95.xml
[2009.03.14 01:47:23 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-96.xml
[2009.03.14 13:39:17 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-97.xml
[2009.03.16 00:46:17 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-98.xml
[2009.03.29 11:22:08 | 000,000,950 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin-99.xml
[2009.03.25 11:49:20 | 000,000,944 | ---- | M] () -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\afbrytqr.default\searchplugins\icqplugin.xml
[2012.01.31 16:16:43 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2009.07.01 20:24:39 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2012.03.07 14:19:31 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.03.20 00:55:07 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.03.07 14:19:28 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.03.07 14:19:28 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.03.07 14:19:28 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.03.07 14:19:28 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.03.07 14:19:28 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.03.07 14:19:28 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google ()
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&output=chrome&hl={language}&q={searchTerms}
 
O1 HOSTS File: ([2011.05.29 18:21:32 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Softonic Deutsch Toolbar) - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Softonic Deutsch Toolbar) - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Softonic Deutsch Toolbar) - {8DBB6D8E-E4A6-4E3B-9753-AF78B226441C} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Google Updater] C:\Program Files\Google\Google Updater\GoogleUpdater.exe (Google)
O4 - HKLM..\Run: [MAAgent] C:\Programme\MarkAny\ContentSafer\MaAgent.exe ((주)마크애니)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SMSTray] C:\Programme\Samsung\Samsung Media Studio 5\SMSTray.exe (SAMSUNG ELECTRONICS)
O4 - HKLM..\Run: [TkBellExe] c:\program files\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [PhonostarTimer] C:\Programme\phonostar\ps_timer.exe (phonostar)
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103470 -"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; .NET4.0C)" -"hxxp://www.coolespiele.com/game.php?url=hxxp://richmedia.coolespiele.com/games/Bowling_Game.dcr&breite=640&hoehe=480" File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - %SystemRoot%\System32\winrnr.dll File not found
O15 - HKCU\..Trusted Domains: x7.to ([]https in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A0530C01-4878-4B12-8E7F-DB482E20A5D8}: NameServer = 195.50.140.116 195.50.140.180
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKCU Winlogon: UserInit - (C:\WINDOWS\System32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img31.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img31.jpg
O28 - HKLM ShellExecuteHooks: {88485281-8b4b-4f8d-9ede-82e29a064277} - C:\Programme\MarkAny\ContentSafer\MACSMANAGER.dll (MarkAny Cooperation.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008.10.09 12:34:27 | 000,000,031 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2008.10.09 12:34:37 | 002,011,136 | R--- | M] () - D:\Autostart.exe -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O35 - HKCU\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.03.15 21:59:11 | 000,594,432 | ---- | C] (OldTimer Tools) -- C:\Users\Tom\Desktop\OTL.exe
[2012.03.14 19:19:33 | 002,044,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012.03.14 19:19:30 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2012.03.14 19:19:17 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2012.03.14 19:19:17 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2012.03.14 19:19:17 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2012.03.14 19:19:16 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2012.03.14 19:19:16 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2012.03.05 02:45:29 | 000,000,000 | ---D | C] -- C:\Users\Tom\AppData\Roaming\gema
[2012.03.05 02:45:29 | 000,000,000 | ---D | C] -- C:\ProgramData\gema
[2012.02.16 03:15:09 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.02.16 03:15:06 | 001,798,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.02.16 03:15:05 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.02.16 03:15:05 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.02.16 03:15:04 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.02.16 03:14:57 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.03.15 22:18:12 | 000,004,032 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.03.15 22:18:12 | 000,004,032 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.03.15 22:13:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.03.15 21:59:13 | 000,594,432 | ---- | M] (OldTimer Tools) -- C:\Users\Tom\Desktop\OTL.exe
[2012.03.15 18:13:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.03.15 14:17:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.03.15 14:16:45 | 2146,783,232 | -HS- | M] () -- C:\hiberfil.sys
[2012.03.15 03:37:51 | 000,371,472 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.03.14 13:55:48 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2012.03.07 20:33:03 | 000,004,096 | ---- | M] () -- C:\Users\Public\Documents\00000D39.LCS
[2012.03.06 19:45:09 | 000,001,887 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2012.03.06 18:47:17 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.02.29 03:04:18 | 000,628,504 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.02.29 03:04:18 | 000,595,798 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.02.29 03:04:18 | 000,126,054 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.02.29 03:04:18 | 000,103,872 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.02.23 09:18:36 | 000,237,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2012.02.18 18:33:16 | 000,135,168 | ---- | M] () -- C:\Users\Tom\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.02.15 22:12:52 | 000,137,416 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.03.06 19:45:09 | 000,001,887 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2012.03.06 19:45:09 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2012.03.06 18:14:12 | 2146,783,232 | -HS- | C] () -- C:\hiberfil.sys
[2011.05.29 18:06:05 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.05.29 18:06:05 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011.05.29 18:06:05 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.05.29 18:06:05 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.05.29 18:06:05 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.05.29 17:34:33 | 000,002,534 | -HS- | C] () -- C:\Users\Tom\AppData\Local\485xqn8y4s7df518ifctg2323
[2011.05.29 17:34:33 | 000,002,534 | -HS- | C] () -- C:\ProgramData\485xqn8y4s7df518ifctg2323
[2011.05.25 17:48:49 | 000,008,418 | -HS- | C] () -- C:\Users\Tom\AppData\Local\ag7u1x14qml062ua10fo35
[2011.05.25 17:48:49 | 000,008,418 | -HS- | C] () -- C:\ProgramData\ag7u1x14qml062ua10fo35
[2010.06.25 18:29:00 | 000,001,356 | ---- | C] () -- C:\Users\Tom\AppData\Local\d3d9caps.dat
[2010.03.27 22:08:58 | 000,036,972 | ---- | C] () -- C:\Windows\System32\ActPanel.dll
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 16 bytes -> C:\Users\Tom\Downloads:Shareaza.GUID

< End of report >

Chris4You 15.03.2012 23:32
Hi,

Sorry... here we go:
Fix für OTL:
  • Doppelklick auf die OTL.exe, um das Programm auszuführen.
  • Vista/Win7-User bitte per Rechtsklick und "Ausführen als Administrator" starten.
  • Kopiere den Inhalt der folgenden Codebox komplett in die OTL-Box unter "Custom Scan/Fixes"
Code:

:OTL
[2011.05.29 17:34:33 | 000,002,534 | -HS- | C] () -- C:\Users\Tom\AppData\Local\485xqn8y4s7df518ifctg2323
[2011.05.29 17:34:33 | 000,002,534 | -HS- | C] () -- C:\ProgramData\485xqn8y4s7df518ifctg2323
[2011.05.25 17:48:49 | 000,008,418 | -HS- | C] () -- C:\Users\Tom\AppData\Local\ag7u1x14qml062ua10fo35
[2011.05.25 17:48:49 | 000,008,418 | -HS- | C] () -- C:\ProgramData\ag7u1x14qml062ua10fo35

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = dword:0x01

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = dword:0x00

:Commands
[emptytemp]
[Reboot]
  • Den roten Run Fixes! Button anklicken.
  • Bitte alles aus dem Ergebnisfenster (Results) herauskopieren.
  • Eine Kopie eines OTL-Fix-Logs wird in einer Textdatei in folgendem Ordner gespeichert:
  • %systemroot%\_OTL

Schau dann mal ob sich schon was tut...

Wenn nicht, muß der Dienst gestartet werden (wie beschrieben)...
Machen wir dann morgen, gehe jetzt dann bettline... ;o)

chris

Valur 15.03.2012 23:53
Kein Problem, ich hätte es in meinem Eröffnungsposting vielleicht erwähnen sollen. ;-)

OTL ist bei dem Versuch leider abgestürzt und hat mich mit einem leeren Desktop-Hintergrund zurückgelassen.
Nach einem Neustart öffnete sich folgender Editor:

Zitat:
03152012_234032 - Editor

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...
sowie eine Meldung "Neue Hardware gefunden", was eigentlich nicht sein kann. Ich hatte vor ein paar Tagen die Boxen neu angeschlossen, aber das ist, wie gesagt, schon ein paar Tage her.

Soll ich's morgen nochmal mit OTL versuchen?

Chris4You 16.03.2012 11:58
Hi,

hmmm, das ist seltsam... und kein gutes Zeichen...

Poste bitte das Avira und das Log von MAM, als Du die Teile gelöscht hast...

Probiere OTL noch mal, zusätzlich:

Superantispyware (SASW):
http://www.trojaner-board.de/51871-a...tispyware.html

OSAM
OSAM
Prüft Programme/Treiber die gestartet werden online.
Folge den Anweisungen hier http://www.trojaner-board.de/84180-a...n-manager.html zur Erstellung eines Logs und poste das hier in Deinem Thread.

TDSS-Killer
Download und Anweisung unter: Wie werden Schadprogramme der Familie Rootkit.Win32.TDSS bekämpft?
Entpacke alle Dateien in einem eigenen Verzeichnis (z. B: C:\TDSS)!
Aufruf über den Explorer duch Doppelklick auf die TDSSKiller.exe.
Stelle den Killer wir folgt ein:
http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg
Dann den Scan starten durch (Start Scan).
Wenn der Scan fertig ist bitte "Report" anwählen (eventuelle Funde erstmal mit Skip übergehen). Es öffnet sich ein Fenster, den Text abkopieren und hier posten...

chris

Valur 16.03.2012 19:30
Ich bin momentan nur sporadisch am Rechner, vorab schonmal:

Die Logs von Avira und MAM existieren dusseligerweise leider nicht mehr, sorry. :-(

Beim erneuten Versuch mit OTL endete ich in der Anmeldemaske.
Nach dem Anmelden erschienen zwei Meldungen:
1) "MaSAFER Agent funktioniert nicht mehr".
2) "SMSTray.exe konnte nicht richtig initialisiert werden (0xc0000005)".

Rest folgt.

Chris4You 16.03.2012 19:54
Hi,

da haben wir eigentlich nichts dran gedreht,...

Packe bitte das Verzeichnis C:\_OTL\MovedFiles und lade es bei uns hoch, mein Nick bitte im Text angeben (damit ich es leichter finde), ich hätte da so eine Idee... wie folgt:
Datei hochladen:
http://www.trojaner-board.de/54791-a...ner-board.html
Folge den Anweisungen dort und lade die Datei:
Code:
-> gepacktes Verzeichnis: C:\_OTL\MovedFiles
hoch.

Poste die restlichen Logs...

chris

Valur 07.04.2012 22:10
Hallo, Chris4You.

Sorry, dass es so lange gedauert hat. War einige Zeit außer Gefecht gesetzt.

Ich habe inzwischen das System neu installiert. Hatte keinen Zweck mehr. Ich danke Dir für Deine Hilfe und vor allem Deine Geduld mit mir. ;)

Chris4You 07.04.2012 22:34
Hi,

ok...

Dann mehr Erfolg mit dem neu installierten...

chris


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:40 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19