Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Trojan.Mesdeh und Exploit.Java.CVE-2008.....Aol Konto gehackt und im sytem32Ordner Dateien mit asiatischen Schriftzeichen...Merkwürdig (https://www.trojaner-board.de/122634-trojan-mesdeh-exploit-java-cve-2008-aol-konto-gehackt-sytem32ordner-dateien-asiatischen-schriftzeichen-merkwuerdig.html)

Jan80 22.08.2012 21:14
Trojan.Mesdeh und Exploit.Java.CVE-2008.....Aol Konto gehackt und im sytem32Ordner Dateien mit asiatischen Schriftzeichen...Merkwürdig
 
Liebes Trojaner-Board-Team,

Vor zwei Tagen habe ich mitbekommen, das ich micht nicht mehr in meinen seit 10 Jahren aol-email service bestehenden account einloggen konnte. Bereits vorher habe ich komische Mails erkannt, die alle an die Personen meines Adressbuches und sogar an mir selbst verschickt worden sind(mit meinem Absender). Jetzt gerade suche ich mit Emisoft nach Schädlingen und ist bereits fündig geworden....meine G-Data Internet-Security-Lösung hat allerdings kein Problem festgestellt....bis auf eine verdächtige Datei ...die unbekannt aber verdächtig sei.

Emsisoft hat nun aber folgende Schädlinge gefunden:wie oben genannt.:kloppen:....Alle beiden o.g Schädline wurden im Java-Ordner gefunden.

Bitte schaut mal nach was da los ist...Ich Danke Euch jetzt schon sehr....alles nicht selbstverständlich!!!:daumenhoc

Einen OTL-Scan wird geich folgen, wenn nicht wieder die acedrv09.sys probleme macht(BlueScreen)(hab sie gelöscht nach Recherche natürlich)

LG Jan

Naja ,ich vergass zuerwähnen, das im system32Ordner Dateien mit Asiatischen Schriftzeichen stehen.....u.a sind da auch Log1 und Log 2 Dateien zusehen.

markusg 22.08.2012 21:18
hi.
1. was hat gdata angezeigt, wir können nur mit genauen meldungen arbeiten.
2. das selbe gilt für emsisoft, also log posten bitte

Jan80 22.08.2012 21:26
OTL EXTRAS Logfile:
Code:
OTL Extras logfile created on: 22.08.2012 21:53:13 - Run 1
OTL by OldTimer - Version 3.2.58.1    Folder = C:\Users\JanHH\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 4,86 Gb Available Physical Memory | 60,71% Memory free
16,05 Gb Paging File | 12,13 Gb Available in Paging File | 75,58% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 476,52 Gb Total Space | 342,54 Gb Free Space | 71,88% Space Free | Partition Type: NTFS
Drive D: | 357,34 Gb Total Space | 315,94 Gb Free Space | 88,42% Space Free | Partition Type: NTFS
Drive E: | 7,00 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive G: | 139,73 Gb Total Space | 84,86 Gb Free Space | 60,73% Space Free | Partition Type: NTFS
Drive H: | 71,48 Gb Total Space | 10,32 Gb Free Space | 14,43% Space Free | Partition Type: NTFS
Drive I: | 931,51 Gb Total Space | 656,88 Gb Free Space | 70,52% Space Free | Partition Type: NTFS
Drive J: | 53,60 Gb Total Space | 13,08 Gb Free Space | 24,39% Space Free | Partition Type: NTFS
 
Computer Name: JANHH-PC | User Name: JanHH | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /k "cd %L" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /k "cd %L" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01  [binary data]
"VistaSp2" = 8C 6F 50 5D 70 55 CA 01  [binary data]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Disabled:Spybot-S&D 2 Scanner Service
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Disabled:Spybot-S&D 2 Scanner Service
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{12EBDD19-1B79-43A1-A062-B5959505A681}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{130E9060-8614-48A5-8D99-B9EE794C587A}" = lport=3390 | protocol=6 | dir=in | app=system |
"{2D3DF3C1-21CA-4DFA-961C-954BE068F643}" = lport=138 | protocol=17 | dir=in | app=system |
"{2DB1866C-B66E-4EF0-83D4-09C9E7B73ED2}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2F7347F6-1A48-43F6-85C0-089977D57BD5}" = lport=10244 | protocol=6 | dir=in | app=system |
"{3B173004-8AC1-4DF2-AEAC-1E2252F98944}" = lport=10244 | protocol=6 | dir=in | app=system |
"{3E2113E4-FEA5-4BE2-AE8B-BCFE9B761F98}" = rport=10244 | protocol=6 | dir=out | app=system |
"{414A6D56-30CB-42D0-82EB-EBE95CE0214B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{4B257B33-A657-4931-8F25-40D1E7137D47}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{5802E6B3-A745-4D8E-A1F3-EAFD3B3E7FA8}" = rport=139 | protocol=6 | dir=out | app=system |
"{5A3C1BAF-85D1-42E0-B242-CB0D4D57BF5C}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5F7A68AF-15B5-4C4D-9980-236B03678078}" = lport=445 | protocol=6 | dir=in | app=system |
"{714C2354-FDAD-4864-B4F0-1BF92357DE35}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7491BCEC-557D-4004-A58F-44F7C0EF8772}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7B63A91A-E104-4DDC-82C5-4085801FC6E0}" = lport=137 | protocol=17 | dir=in | app=system |
"{7E53BC62-0B38-48E4-B993-31D7EF9E9D94}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{965ACEC6-40D3-4FEC-A09E-9612E6BE9F17}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9721F963-DE09-4E3E-B1EE-03309D1E7B9D}" = lport=139 | protocol=6 | dir=in | app=system |
"{9C95AC8C-C455-42D2-B1A2-2DF35A77E85B}" = lport=3390 | protocol=6 | dir=in | app=system |
"{A62BFEBA-6253-44FB-AC53-2F35CEAD2E62}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{B54F2F11-354E-4EFA-84B8-8007E4A19DB8}" = rport=137 | protocol=17 | dir=out | app=system |
"{B9E426C1-CD58-468F-88B4-E15DE5A1B17C}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{BD5B7BA2-22B6-4358-BF8E-A9E837ECDF3C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C2FD9CF2-3F22-4CD1-982C-EF50FE1D5169}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{C6558F57-753D-4AA7-8B1D-7DA3AFE34807}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{C948C080-093B-436C-87C5-29F021AC6D11}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CD6F2901-2641-4B65-98FA-B3CE5D17F12E}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{CF3840D8-9D98-456F-94CD-F9B077591552}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D280CEF8-76DC-47DB-A8B5-3FE450F46DB5}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{D6B11371-A9F5-4E6F-9E7E-95B27F72BF63}" = rport=138 | protocol=17 | dir=out | app=system |
"{DC3728E1-B84E-472D-A5D2-2B309D9FFD03}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{DED69DF6-1825-4633-9B87-75EDF577805C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E539F971-840E-4284-B354-268F3D4286C3}" = rport=10244 | protocol=6 | dir=out | app=system |
"{E672891C-4F60-4B19-B737-DD6A3F57131A}" = rport=445 | protocol=6 | dir=out | app=system |
"{F1B8ED16-724A-4520-A603-2E486179A9B7}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{F217CE87-40FE-471B-BA36-03726DC0C90E}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{F63AB682-310F-4A91-B516-ED4E6343B28B}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{FA67D29E-2F3A-400B-8241-D1726878F34F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{FB766D5D-7064-4CFB-AFD6-65024A437304}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{FF506BD3-F007-4D1C-B2B8-8366833FC500}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03773DF0-345D-40A1-AF37-AC89CFE3E7FF}" = protocol=6 | dir=in | app=c:\program files (x86)\giraffic\veoh_girafficwatchdog.exe |
"{0449334D-306F-4339-9361-6B43D7602105}" = dir=in | app=c:\users\janhh\appdata\local\facebook\video\skype\facebookvideocalling.exe |
"{0B0C7A39-8E15-4F78-9023-ABD6BEDF50AC}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{0D4D52D1-B48F-4856-AC48-3ADD900989E8}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{126E56E6-5B16-414A-82F7-90F8ADDCE4B8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{13C71788-BFCA-41A3-A3EE-AB3A89D75FD3}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{13E7E00F-D26D-49D3-8C8E-3B8964487916}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{2115ABBF-FEF8-42CD-89B1-EAFE8D7EF5FF}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{2825E6CE-2489-487E-ACEC-135B32573152}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{2BCC1D58-2386-49A0-B24A-4F42D0C9F2CD}" = dir=in | app=c:\program files (x86)\acer arcade live\acer homemedia\acer homemedia.exe |
"{2DA60AC9-C5BC-4A75-94F2-8F1877176468}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{41BAF0E6-AC0C-4055-9459-B0940A41B9B9}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{53E3CFC7-82E7-4A25-85C2-ACC3884410EF}" = dir=in | app=c:\program files (x86)\acer arcade live\acer arcade live main page\acer arcade live.exe |
"{56401646-4588-4172-99D2-1419EE6C6D25}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{5F56F2A2-A75E-4D43-96CE-4DD9EF275FE2}" = protocol=6 | dir=in | app=c:\program files (x86)\veoh networks\veohwebplayer\veohwebplayer.exe |
"{61F6071D-E82F-408D-885C-B495F46C4DDE}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{62AAED09-49EE-460C-9AD1-18AD9BD88B2D}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{679ABACB-61B7-47A9-AC1F-672B7E41EA72}" = protocol=17 | dir=in | app=c:\program files (x86)\giraffic\veoh_giraffic.exe |
"{6F6F7D39-3613-40CD-8293-AD2B1C897F09}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{76A8C4C2-BFAA-4727-BEB7-A3994E614451}" = protocol=17 | dir=in | app=c:\program files (x86)\veoh networks\veohwebplayer\veohwebplayer.exe |
"{77A8437D-4697-4C16-8066-9D9F4E00EEAB}" = protocol=6 | dir=in | app=c:\users\janhh\appdata\local\akamai\netsession_win.exe |
"{7CA4CC24-5A09-4342-897C-95EB1868153A}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{87296A24-7EA6-4B5D-A748-5AE363B1CD2D}" = dir=in | app=c:\program files (x86)\acer arcade live\acer homemedia trial creator\acer homemedia trial creator.exe |
"{9B43E819-C26E-4C96-96D8-561C43792D1B}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\microworld\agent\mwagent.exe |
"{A14F0837-5A2E-4948-8043-689DD27D4B5B}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{A218AB84-EF0C-4B64-B481-34F52A1B1DF2}" = dir=in | app=c:\program files (x86)\acer arcade live\acer homemedia connect\kernel\dms\clmsserver.exe |
"{A2CFC459-D444-4902-AC6B-8484D0D24742}" = dir=in | app=c:\program files (x86)\acer arcade live\acer homemedia connect\acer homemedia connect.exe |
"{AB231EF4-8247-48CA-83AD-BBA57174AE25}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{B55CD5F7-EB0C-4226-94F1-E9B7E976981B}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{B5A18009-F3CD-4D4F-B1AB-97106BBC1EA6}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{BB53DC3A-32D8-48D2-AF6B-D83F715FB0E5}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{C18B7647-E03B-4771-9C33-8AB3948209FB}" = protocol=17 | dir=in | app=c:\program files (x86)\giraffic\veoh_girafficwatchdog.exe |
"{C1D145D4-0849-4328-8B2B-6D28C7612C12}" = protocol=17 | dir=in | app=c:\users\janhh\appdata\local\akamai\netsession_win.exe |
"{D6314723-6A9F-4614-B5C9-90895CF23DF0}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{EF3D6DAF-328F-4EE9-884C-CD13E3A9F055}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{F591A997-611C-41BA-94A1-2BDFE033AD24}" = protocol=6 | dir=in | app=c:\program files (x86)\giraffic\veoh_giraffic.exe |
"{F5C68C89-991E-422B-9170-E7EF7D073C13}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{F6BA5FB2-458C-4449-AEDC-A00CD34DF8BC}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{F8838641-59BC-4072-A0DC-3E59F325AAB7}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\microworld\agent\mwagent.exe |
"{FB173C56-C63F-40F3-82BE-D8928556ACCE}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"TCP Query User{5BADA6B7-23CE-4B04-ACF1-468C4B890CE5}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{C3813CA2-4B56-40C9-AA7A-B53DF375B284}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1C55470A-7C9E-4C63-B466-6AFFC69E94E9}" = Windows Live Family Safety
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}" = Apple Mobile Device Support
"{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}" = MobileMe Control Panel
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}" = iTunes
"{8B485965-8EFE-464A-842F-CF8F18C3DFD7}" = iCloud
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.8.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{BC39713D-B14D-4BB0-9663-BC9F7B8AB1F2}" = O&O Defrag Professional
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{D16193A3-921A-4134-B381-597C8F4B8EBD}" = PaperPort Image Printer
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"NVIDIA Drivers" = NVIDIA Drivers
"WinRAR archiver" = WinRAR 4.00 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
""Dresden - Nürnberg" - 2. ProTrain Perfect Addon 1.0" = "Dresden - Nürnberg" - 2. ProTrain Perfect Addon 1.0
""Nürnberg - München" - ProTrain Perfect Addon 1.0" = "Nürnberg - München" - ProTrain Perfect Addon 1.0
""S-Bahn Leipzig" - 1. ProTrain Perfect Addon 1.0" = "S-Bahn Leipzig" - 1. ProTrain Perfect Addon 1.0
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{090B5A39-32DD-431D-A978-3163C950AF6E}" = PROMT Professional 9.0 German Giant Trial
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{132888AE-EF67-41C5-BCA2-7D5D2488AB63}" = Acer HomeMedia Connect
"{13D85C14-2B85-419F-AC41-C7F21E68B25D}" = Acer eSettings Management
"{143C7D3A-02DD-4163-9880-11B202B7E3E6}" = Creative Sound Blaster MB
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1F95C156-BE36-4D73-B22F-BDE3538B09A8}" = FS Recorder 2.01  for FSX
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20372FAA-3AF4-4B3D-9B1D-564CDEA5957C}" = PMDG744X_GE_LH
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 33
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{29258311-EA49-11DE-967C-005056C00008}" = Paragon Festplatten Manager™ 2012 Kompakt
"{2B11BA9C-7F97-4C16-970F-1491FD77969B}_is1" = shopping-preise.de - AddOn für Firefox
"{2ED4869A-6D7B-4a8f-8261-B842DA4852FA}_is1" = MP3 Recorder for YouTube 1.0 Professional-E
"{2EF095CE-24AF-4AAA-BB82-85F988EC51C0}" = 1und1 Internet Explorer Add-On
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMB36X Raid Configurer
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}" = OpenOffice.org 3.4
"{5CC23DEB-D22A-4345-9CFF-F8C602BCE792}" = Acer eLock Management
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5ED9E38C-9A96-49D8-89B3-92E278003FCF}" = PTP
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}" = Bing Bar Platform
"{65CB4C08-C47B-4A7E-A6A4-50C06ADA5FC6}" = Adobe AIR
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F1B6239-FEA0-450A-A950-B05276CE177C}" = Acer Empowering Technology
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}" = Brother MFL-Pro Suite
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A5633652-3795-4829-BB0B-644F0279E279}" = Acer eDataSecurity Management
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}" = PixiePack Codec Pack
"{A8D93648-9F7F-407D-915C-62044644C3DA}" = MSI to redistribute MS VS2005 CRT libraries
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = Acer HomeMedia
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}" = AAVUpdateManager
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B580C409-E16F-44FF-904D-3AE94E113BE0}" = Acer HomeMedia Trial Creator
"{B6C89654-A6A2-477C-873B-724EC1C56407}" = ScanSoft PaperPort 11
"{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1" = SUPER © v2011.build.48 (April 23, 2011) Version v2011.build.48
"{BC30E5E7-047D-4232-A7E8-F2CB7CC7B2E0}_is1" = Emsisoft Anti-Malware
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{C8BCC14C-2807-4C2D-A659-843427BF82E2}" = TopSecret Biometrics Components
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC452A50-5C87-4A1F-B295-445C3C69BF7D}" = NVIDIA MediaShield
"{CD41B576-4787-4D5C-95EE-24A4ABD89CD3}" = System Requirements Lab for Intel
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe  1.4.142.1
"{CE6217F3-6072-40E2-9157-A4695C334F8E}" = G Data TotalProtection 2013
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}" = getPlus(R) for Adobe
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D2E9A975-0591-4FEF-9302-DB7561EFB58A}" = Application Suite
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E7CC4B85-DC2F-463F-8FEB-E7398E25C19A}" = Microsoft Flight Simulator X Service Pack 2
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EDCEE320-0FB3-4197-9F86-8C1CCF2278FB}" = PMDG 747-400/400F for FSX
"{EED40EDB-B279-42EB-8D42-7E3D521F6E67}" = MySQL Server 5.5
"{EF7E931D-DC84-471B-8DB6-A83358095474}" = EA Download Manager
"{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}" = Acer Arcade Live Main Page
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1" = MT66 Software Update
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X
"{F85788CB-30F6-4CAC-982A-8425CA1614BE}" = Application Suite
"{F92C415F-7CB7-4B4E-8406-70FBCCB4D43F}" = Application Suite
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"1&1 EasyLogin" = 1&1 EasyLogin
"1und1 Internet Explorer Add-On" = 1und1 Internet Explorer Add-On
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Akamai" = Akamai NetSession Interface Service
"ALchemy SB MB" = Creative ALchemy (SB MB Edition)
"AVMFBox" = AVM FRITZ!Box Dokumentation
"AVMFBoxPrinter" = AVM FRITZ!Box Druckeranschluss
"AVMWLANCLI" = AVM FRITZ!WLAN
"Battlelog Web Plugins" = Battlelog Web Plugins
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup" = DivX-Setup
"Easy Image Modifier" = Easy Image Modifier 4.3
"ESN Sonar-0.70.4" = ESN Sonar
"FBDBServer_2_1_is1" = Firebird 2.1.1.17910 (Win32)
"Flatcast_is1" = Flatcast Viewer Plugin 5.3.0.650
"Fraps" = Fraps
"FUSSBALL MANAGER 12" = FUSSBALL MANAGER 12
"Giraffic" = Veoh Giraffic Video Accelerator
"Google Chrome" = Google Chrome
"Google Updater" = Google Updater
"InstallShield_{149464D9-B06F-4505-9968-FD1206F67AD3}" = Call of Duty(R) - World at War(TM) 1.3 Patch
"InstallShield_{20962D9D-D7B9-4AEE-B72B-5C9A45A1B402}" = Call of Duty(R) - World at War(TM) 1.6 Patch
"InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch
"InstallShield_{3521F7CF-9343-4C1F-AE5E-0D2A57A18D2B}" = Call of Duty(R) - World at War(TM) 1.5 Patch
"InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch
"InstallShield_{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch
"InstallShield_{E237FA24-CFB3-431F-B356-DF8FB116DE4B}" = Call of Duty(R) - World at War(TM) 1.7 Patch
"InstallShield_{EF7E931D-DC84-471B-8DB6-A83358095474}" = EA Download Manager
"InstallShield_{F535B2CF-C9BB-4162-B03A-02D6971F32CC}" = Microsoft Flight Simulator X
"InterActual Player" = InterActual Player
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.1.0 (Full)
"LHTTSFRF" = L&H TTS3000 Français
"LHTTSGED" = L&H TTS3000 Deutsch
"LHTTSRUR" = L&H TTS3000 Russian
"LHTTSSPE" = L&H TTS3000 Español
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft Visual Studio 2005 Tools for Office Runtime" = Visual Studio 2005 Tools for Office Second Edition Runtime
"Mozilla Firefox 14.0.1 (x86 de)" = Mozilla Firefox 14.0.1 (x86 de)
"Mozilla Thunderbird 13.0.1 (x86 de)" = Mozilla Thunderbird 13.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Pimero 2012 R1_is1" = Pimero 2012 R1
"ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
"Rettungswagen Simulator 2012" = Rettungswagen Simulator 2012
"Secunia PSI" = Secunia PSI (3.0.0.3001)
"Security Task Manager" = Security Task Manager 1.8d
"SP1_F535B2CF-C9BB-4162-B03A-02D6971F32CC" = Microsoft Flight Simulator X Service Pack 1
"SystemRequirementsLab" = System Requirements Lab
"tv_enua" = Lernout & Hauspie TruVoice American English TTS Engine
"UltimateTraffic15" = Ultimate Traffic for FSX
"UndeletePlus™_is1" = UndeletePlus™ 3.0.0.602
"VLC media player" = VLC media player 2.0.3
"web2date" = DATA BECKER web to date 5
"WinLiveSuite" = Windows Live Essentials
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 22.08.2012 12:43:27 | Computer Name = JanHH-PC | Source = ESENT | ID = 489
Description = Windows (3144) Windows: Versuch, Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log"
 für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert
 " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 
Error - 22.08.2012 12:43:27 | Computer Name = JanHH-PC | Source = ESENT | ID = 455
Description = Windows (3144) Windows: Fehler -1032 (0xfffffbf8) beim Öffnen von
Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.
 
Error - 22.08.2012 12:43:27 | Computer Name = JanHH-PC | Source = Windows Search Service | ID = 9000
Description =
 
Error - 22.08.2012 12:43:27 | Computer Name = JanHH-PC | Source = Windows Search Service | ID = 1006
Description =
 
Error - 22.08.2012 12:52:16 | Computer Name = JanHH-PC | Source = ESENT | ID = 489
Description = Windows (4144) Windows: Versuch, Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log"
 für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert
 " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 
Error - 22.08.2012 12:52:16 | Computer Name = JanHH-PC | Source = ESENT | ID = 455
Description = Windows (4144) Windows: Fehler -1032 (0xfffffbf8) beim Öffnen von
Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.
 
Error - 22.08.2012 12:52:26 | Computer Name = JanHH-PC | Source = ESENT | ID = 489
Description = Windows (4144) Windows: Versuch, Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log"
 für den Lesezugriff zu öffnen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert
 " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 
Error - 22.08.2012 12:52:26 | Computer Name = JanHH-PC | Source = ESENT | ID = 455
Description = Windows (4144) Windows: Fehler -1032 (0xfffffbf8) beim Öffnen von
Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log.
 
Error - 22.08.2012 12:52:26 | Computer Name = JanHH-PC | Source = Windows Search Service | ID = 9000
Description =
 
Error - 22.08.2012 12:52:26 | Computer Name = JanHH-PC | Source = Windows Search Service | ID = 1006
Description =
 
[ Media Center Events ]
Error - 24.07.2009 13:15:59 | Computer Name = JanHH-PC | Source = Mcx2Dvcs | ID = 405
Description =
 
Error - 24.07.2009 13:17:37 | Computer Name = JanHH-PC | Source = Mcx2Dvcs | ID = 405
Description =
 
Error - 24.07.2009 13:38:44 | Computer Name = JanHH-PC | Source = Mcx2Dvcs | ID = 405
Description =
 
Error - 24.07.2009 13:39:37 | Computer Name = JanHH-PC | Source = Mcx2Dvcs | ID = 405
Description =
 
Error - 29.05.2011 12:48:38 | Computer Name = JanHH-PC | Source = ehReplay | ID = 700
Description =
 
Error - 29.05.2011 13:03:36 | Computer Name = JanHH-PC | Source = McrMgr | ID = 109
Description =
 
[ System Events ]
Error - 22.08.2012 15:59:47 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "ACER" aus.
 
Error - 22.08.2012 15:59:49 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "ACER" aus.
 
Error - 22.08.2012 15:59:49 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "ACER" aus.
 
Error - 22.08.2012 15:59:49 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "ACER" aus.
 
Error - 22.08.2012 16:05:15 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "C:" aus.
 
Error - 22.08.2012 16:05:15 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "ACER" aus.
 
Error - 22.08.2012 16:05:15 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "C:" aus.
 
Error - 22.08.2012 16:05:15 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "ACER" aus.
 
Error - 22.08.2012 16:05:15 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "ACER" aus.
 
Error - 22.08.2012 16:05:15 | Computer Name = JanHH-PC | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "C:" aus.
 
[ TuneUp Events ]
Error - 06.06.2010 06:11:05 | Computer Name = JanHH-PC | Source = TuneUp Program Statistics | ID = 131840
Description =
 
Error - 03.10.2010 02:54:49 | Computer Name = JanHH-PC | Source = TuneUp Program Statistics | ID = 131840
Description =
 
Error - 05.10.2010 08:22:59 | Computer Name = JanHH-PC | Source = TuneUp Program Statistics | ID = 131840
Description =
 
Error - 05.10.2010 09:09:05 | Computer Name = JanHH-PC | Source = TuneUp Program Statistics | ID = 131840
Description =
 
Error - 05.11.2010 09:42:07 | Computer Name = JanHH-PC | Source = TuneUp Program Statistics | ID = 131840
Description =
 
Error - 05.11.2010 09:42:07 | Computer Name = JanHH-PC | Source = TuneUp Program Statistics | ID = 131840
Description =
 
Error - 05.11.2010 09:42:07 | Computer Name = JanHH-PC | Source = TuneUp Program Statistics | ID = 131840
Description =
 
Error - 19.11.2010 18:36:31 | Computer Name = JanHH-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =
 
Error - 19.11.2010 18:46:37 | Computer Name = JanHH-PC | Source = TuneUp.UtilitiesSvc | ID = 300
Description =
 
Error - 24.01.2011 11:42:27 | Computer Name = JanHH-PC | Source = TuneUp Program Statistics | ID = 131840
Description =
 
 
< End of report >
--- --- ---

markusg 22.08.2012 21:28
müssen nicht in codes gepostet werden :-)

Jan80 22.08.2012 21:39
OTL Logfile:
Code:
OTL logfile created on: 22.08.2012 21:53:13 - Run 1
OTL by OldTimer - Version 3.2.58.1    Folder = C:\Users\JanHH\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 4,86 Gb Available Physical Memory | 60,71% Memory free
16,05 Gb Paging File | 12,13 Gb Available in Paging File | 75,58% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 476,52 Gb Total Space | 342,54 Gb Free Space | 71,88% Space Free | Partition Type: NTFS
Drive D: | 357,34 Gb Total Space | 315,94 Gb Free Space | 88,42% Space Free | Partition Type: NTFS
Drive E: | 7,00 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive G: | 139,73 Gb Total Space | 84,86 Gb Free Space | 60,73% Space Free | Partition Type: NTFS
Drive H: | 71,48 Gb Total Space | 10,32 Gb Free Space | 14,43% Space Free | Partition Type: NTFS
Drive I: | 931,51 Gb Total Space | 656,88 Gb Free Space | 70,52% Space Free | Partition Type: NTFS
Drive J: | 53,60 Gb Total Space | 13,08 Gb Free Space | 24,39% Space Free | Partition Type: NTFS
 
Computer Name: JANHH-PC | User Name: JanHH | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\JanHH\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (Emsisoft GmbH)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Secunia)
PRC - C:\Program Files (x86)\Secunia\PSI\sua.exe (Secunia)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Giraffic\Veoh_GirafficWatchdog.exe (Giraffic)
PRC - C:\Program Files (x86)\Giraffic\Veoh_Giraffic.exe (Giraffic)
PRC - C:\Program Files (x86)\G Data\TotalProtection\AVKBackup\AVKBackupService.exe (G Data Software AG)
PRC - C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe (G Data Software AG)
PRC - C:\Program Files (x86)\G Data\TotalProtection\TSNxG\TSNxGService.exe (G Data Software)
PRC - C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe (G Data Software AG)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe (G Data Software AG)
PRC - C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe (G Data Software AG)
PRC - C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKService.exe (G Data Software AG)
PRC - C:\Windows\SysWOW64\ieconfig_1und1_svc.exe ()
PRC - C:\PROGRA~2\COMMON~1\MICROW~1\Agent\MWASER.EXE (MicroWorld Technologies Inc.)
PRC - C:\PROGRA~2\COMMON~1\MICROW~1\Agent\MWAgent.exe (MicroWorld Technologies Inc.)
PRC - C:\Program Files (x86)\AAVUpdateManager\aavus.exe ()
PRC - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
PRC - C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe (Firebird Project)
PRC - C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe (Firebird Project)
PRC - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
PRC - C:\Program Files (x86)\avmwlanstick\WLanGUI.exe (AVM Berlin)
PRC - C:\Program Files (x86)\avmwlanstick\WlanNetService.exe (AVM Berlin)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (a2AntiMalware) -- C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (Emsisoft GmbH)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Secunia PSI Agent) -- C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Secunia)
SRV - (Secunia Update Agent) -- C:\Program Files (x86)\Secunia\PSI\sua.exe (Secunia)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (Akamai) -- c:\program files (x86)\common files\akamai/netsession_win_4f7fccd.dll ()
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (Giraffic) -- C:\Program Files (x86)\Giraffic\Veoh_GirafficWatchdog.exe (Giraffic)
SRV - (OODefragAgent) -- C:\Programme\OO Software\Defrag\oodag.exe (O&O Software GmbH)
SRV - (GDBackupSvc) -- C:\Program Files (x86)\G Data\TotalProtection\AVKBackup\AVKBackupService.exe (G Data Software AG)
SRV - (GDFwSvc) -- C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe (G Data Software AG)
SRV - (AVKWCtl) -- C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKWCtlX64.exe (G Data Software AG)
SRV - (AVKProxy) -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe (G Data Software AG)
SRV - (TSNxGService) -- C:\Program Files (x86)\G Data\TotalProtection\TSNxG\TSNxGService.exe (G Data Software)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (GDTunerSvc) -- C:\Program Files (x86)\G Data\TotalProtection\AVKTuner\AVKTunerService.exe (G Data Software AG)
SRV - (GDScan) -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe (G Data Software AG)
SRV - (AVKService) -- C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKService.exe (G Data Software AG)
SRV - (serviceIEConfig) -- C:\Windows\SysWOW64\ieconfig_1und1_svc.exe ()
SRV - (!SASCORE) -- C:\Programme\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com)
SRV - (wlcrasvc) -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV - (wlidsvc) -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
SRV - (nosGetPlusHelper) -- C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll (NOS Microsystems Ltd.)
SRV - (getPlusHelper) -- C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (MWAgent) -- C:\PROGRA~2\COMMON~1\MICROW~1\Agent\MWASER.EXE (MicroWorld Technologies Inc.)
SRV - (Sound Blaster MB Licensing Service) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\SBMBLicensing.exe (Creative Labs)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (AAV UpdateService) -- C:\Program Files (x86)\AAVUpdateManager\aavus.exe ()
SRV - (ETService) -- C:\Programme\Acer\Empowering Technology\Service\ETService.exe ()
SRV - (eDataSecurity Service) -- C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
SRV - (FirebirdGuardianDefaultInstance) -- C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe (Firebird Project)
SRV - (FirebirdServerDefaultInstance) -- C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe (Firebird Project)
SRV - (eLockService) -- C:\Programme\Acer\Empowering Technology\eLock\Service\eLockServ.exe (Acer Inc.)
SRV - (Acer HomeMedia Connect Service) -- C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (AVM WLAN Connection Service) -- C:\Program Files (x86)\avmwlanstick\WlanNetService.exe (AVM Berlin)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (GRD) -- C:\Windows\SysNative\drivers\GRD.sys (G Data Software)
DRV:64bit: - (gdwfpcd) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys (G Data Software AG)
DRV:64bit: - (TS4NT) -- C:\Windows\SysNative\Drivers\TS4nt.sys (G Data Software)
DRV:64bit: - (GDMnIcpt) -- C:\Windows\SysNative\drivers\MiniIcpt.sys (G Data Software AG)
DRV:64bit: - (HookCentre) -- C:\Windows\SysNative\drivers\HookCentre.sys (G Data Software AG)
DRV:64bit: - (GDBehave) -- C:\Windows\SysNative\drivers\GDBehave.sys (G Data Software AG)
DRV:64bit: - (GDPkIcpt) -- C:\Windows\SysNative\drivers\PktIcpt.sys (G Data Software AG)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (UimBus) -- C:\Windows\SysNative\DRIVERS\uimx64.sys (Windows (R) 2000 DDK provider)
DRV:64bit: - (Uim_IM) -- C:\Windows\SysNative\Drivers\Uim_IMx64.sys (Paragon)
DRV:64bit: - (Uim_VIM) -- C:\Windows\SysNative\Drivers\uim_vimx64.sys (Paragon)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\DRIVERS\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (PSI) -- C:\Windows\SysNative\DRIVERS\psi_mf.sys (Secunia)
DRV:64bit: - (sptd) -- C:\Windows\SysNative\Drivers\sptd.sys ()
DRV:64bit: - (tbhsd) -- C:\Windows\SysNative\drivers\tbhsd.sys (RapidSolution Software AG)
DRV:64bit: - (WpdUsb) -- C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (bdfsfltr) -- C:\Windows\SysNative\DRIVERS\bdfsfltr.sys (BitDefender S.R.L. Bucharest, ROMANIA)
DRV:64bit: - (usb_rndisx) -- C:\Windows\SysNative\DRIVERS\usb8023x.sys (Microsoft Corporation)
DRV:64bit: - (acedrv11) -- C:\Windows\SysNative\drivers\acedrv11.sys (Protect Software GmbH)
DRV:64bit: - (ITEIO.SYS) -- C:\Windows\SysNative\drivers\ITEIO.sys (Windows (R) Codename Longhorn DDK provider)
DRV:64bit: - (psdvdisk) -- C:\Windows\SysNative\DRIVERS\PSDVdisk.sys (Egis Incorporated)
DRV:64bit: - (PSDNServ) -- C:\Windows\SysNative\DRIVERS\PSDNServ.sys (Egis Incorporated)
DRV:64bit: - (PSDFilter) -- C:\Windows\SysNative\DRIVERS\psdfilter.sys (Egis Incorporated)
DRV:64bit: - (eLock2BurnerLockDriver) -- C:\Windows\SysNative\DRIVERS\eLock2BurnerLockDriver.sys (Acer, Inc.)
DRV:64bit: - (eLock2FSCTLDriver) -- C:\Windows\SysNative\DRIVERS\eLock2FSCTLDriver.sys (Acer, Inc.)
DRV:64bit: - (yukonx64) -- C:\Windows\SysNative\DRIVERS\yk60x64.sys (Marvell)
DRV:64bit: - (JRAID) -- C:\Windows\SysNative\DRIVERS\jraid.sys (JMicron Technology Corp.)
DRV:64bit: - (FWLANUSB) -- C:\Windows\SysNative\DRIVERS\fwlanusb.sys (AVM GmbH)
DRV:64bit: - (avmeject) -- C:\Windows\SysNative\drivers\avmeject.sys (AVM Berlin)
DRV - (a2acc) -- C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys (Emsisoft GmbH)
DRV - (a2injectiondriver) -- C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys (Emsisoft GmbH)
DRV - (SASDIFSV) -- C:\Programme\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) -- C:\Programme\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (A2DDA) -- C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys (Emsi Software GmbH)
DRV - (a2util) -- C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys (Emsi Software GmbH)
DRV - (int15) -- C:\Windows\SysWOW64\drivers\int15_64.sys (Acer, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Yahoo! Deutschland
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box
 
 
 
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = Acer.com Worldwide - Select your local country or region [binary data]
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = Google [binary data]
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 1&1 - Telefon-Internet-Flatrates und mobiles Internet
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Hotmail, Skype Download und Messenger sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = CF 39 89 33 63 29 CA 01  [binary data]
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes,DefaultScope = {B5E30CD3-157A-49E0-BE57-F34A7E004B2A}
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{060952C3-98EA-4F1B-9E39-24D79B4AC89C}: "URL" = hxxp://go.1und1.de/suchbox/amazon?tag=1und1icon-21&field-keywords={searchTerms}
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{105E99FF-8B9A-4492-B155-06194B9056D2}: "URL" = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = hxxp://int.ask.com/web?siteid=10000870&qsrc=999&l=dis&q={searchTerms}
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}: "URL" = hxxp://www.crawler.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=60429
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{48C09A48-9E2A-4C32-A3D5-AE2A61374F1A}: "URL" = hxxp://go.web.de/suchbox/ebay?query={searchTerms}
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{54C35A9C-0D75-44CF-BAE2-1DD556C72B57}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=3735378B-7EB1-4AEC-92A2-9A7CC8357EA8&apn_sauid=EF1301E7-72E6-441C-A2F4-926B714A3E4D
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://go.web.de/suchbox/google?q={searchTerms}
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = hxxp://www.daemon-search.com/search/web?q={searchTerms}
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\SearchScopes\{B5E30CD3-157A-49E0-BE57-F34A7E004B2A}: "URL" = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms}
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box;*.local;127.0.0.1:9421;<local>
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Google"
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/firefox?client=firefox-a&rls=org.mozilla:de:official"
FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.2
FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.2
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.747
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_271.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0:  File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\JanHH\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@www.flatcast.com/FlatViewer 5.2: C:\Users\JanHH\AppData\Roaming\Mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.01.30 20:02:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.07.17 18:40:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.08.16 14:05:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012.07.17 14:04:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mail@shopping-preise.de: C:\Users\JanHH\AppData\Roaming\Mozilla\Firefox\Profiles\cqoho1f5.default\extensions\mail@shopping-preise.de [2012.03.06 08:38:10 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.07.17 18:40:10 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.08.16 14:05:08 | 000,000,000 | ---D | M]
 
[2009.04.09 12:55:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JanHH\AppData\Roaming\mozilla\Extensions
[2012.08.14 11:01:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\JanHH\AppData\Roaming\mozilla\Firefox\Profiles\cqoho1f5.default\extensions
[2012.08.14 11:01:11 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\JanHH\AppData\Roaming\mozilla\Firefox\Profiles\cqoho1f5.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2010.05.09 11:08:13 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\JanHH\AppData\Roaming\mozilla\Firefox\Profiles\cqoho1f5.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.06.13 18:31:21 | 000,000,000 | ---D | M] (Default Manager) -- C:\Users\JanHH\AppData\Roaming\mozilla\Firefox\Profiles\cqoho1f5.default\extensions\DefaultManager@Microsoft
[2012.03.06 08:38:10 | 000,000,000 | ---D | M] (Shopping-preise.de) -- C:\Users\JanHH\AppData\Roaming\mozilla\Firefox\Profiles\cqoho1f5.default\extensions\mail@shopping-preise.de
[2011.03.25 02:10:48 | 000,000,000 | ---D | M] (Personas) -- C:\Users\JanHH\AppData\Roaming\mozilla\Firefox\Profiles\cqoho1f5.default\extensions\personas@christopher.beard
[2012.07.07 14:22:16 | 000,002,299 | ---- | M] () -- C:\Users\JanHH\AppData\Roaming\Mozilla\Firefox\Profiles\cqoho1f5.default\searchplugins\askcom.xml
[2009.09.16 20:54:26 | 000,002,399 | ---- | M] () -- C:\Users\JanHH\AppData\Roaming\Mozilla\Firefox\Profiles\cqoho1f5.default\searchplugins\daemon-search.xml
[2012.08.20 20:13:44 | 000,001,648 | ---- | M] () -- C:\Users\JanHH\AppData\Roaming\Mozilla\Firefox\Profiles\cqoho1f5.default\searchplugins\ddlspot.xml
[2012.08.16 14:05:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.11.20 21:55:30 | 000,000,000 | ---D | M] (Recorder Toolbar) -- C:\Program Files (x86)\mozilla firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2}
[2012.07.31 15:28:37 | 000,000,000 | ---D | M] (G Data BankGuard) -- C:\Program Files (x86)\mozilla firefox\extensions\{906305f7-aafc-45e9-8bbd-941950a84dad}
[2012.08.16 14:05:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012.07.31 04:49:51 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Program Files (x86)\mozilla firefox\extensions\KavAntiBanner@Kaspersky.ru
[2012.06.17 14:10:31 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Program Files (x86)\mozilla firefox\extensions\KavAntiBanner@kaspersky.ru_bak2
[2012.07.31 04:49:47 | 000,000,000 | ---D | M] (Modul zur Link-Untersuchung) -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru
[2012.06.17 14:10:28 | 000,000,000 | ---D | M] (Modul zur Link-Untersuchung) -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru_bak2
[2012.01.30 20:02:51 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 &lt;video&gt;) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
[2012.07.17 18:40:10 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2009.09.21 12:00:44 | 001,447,328 | ---- | M] (1 mal 1 Software GmbH) -- C:\Program Files (x86)\mozilla firefox\plugins\NpFv522.dll
[2010.08.25 12:19:48 | 001,459,712 | ---- | M] (1 mal 1 Software GmbH) -- C:\Program Files (x86)\mozilla firefox\plugins\NpFv530.dll
[2008.02.22 17:24:06 | 000,095,832 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll
[2012.06.22 22:29:41 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.06.22 22:29:41 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2009.08.25 09:32:38 | 000,001,340 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\crawlersrch.xml
[2012.06.22 22:29:41 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.22 22:29:41 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.22 22:29:41 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.22 22:29:41 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - homepage: Google
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: Google
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.250.6 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U25 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.57\pdf.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: Flatcast Viewer Plugin 5.2.2.454 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NpFv522.dll
CHR - plugin: Flatcast Viewer Plugin 5.3.0.650 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NpFv530.dll
CHR - plugin: Protect Disc License Acquisition Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPPDLicenseHelper.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: VLC Multimedia Plug-in (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\JanHH\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
 
O1 HOSTS File: ([2006.09.18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: ::1            localhost
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.5612.1312\swg64.dll (Google Inc.)
O2 - BHO: (Recorder Toolbar) - {120A8821-2BEE-4C29-BCDA-62C577781992} - C:\Program Files (x86)\MedienTeam66\MP3 Recorder for YouTube\IEPlugin.dll (MedienTeam66)
O2 - BHO: (Promt IE Helper) - {1F13CE11-4FAC-49A9-8155-D4F3F0F91A33} - I:\translator\PRMTIE\prmtie.dll (PROMT Ltd.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (G Data BankGuard) - {BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} - C:\Program Files (x86)\Common Files\G DATA\AVKProxy\BanksafeBHO.dll (G Data Software AG)
O2 - BHO: (Download Accelerator Toolbar) - {C544BB19-7F79-414F-B9EF-136C5E7B60B1} - C:\ProgramData\tradio\tradio.dll ()
O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll (Microsoft Corporation)
O2 - BHO: (1&&1 Internet AG Browser Configuration by mquadr.at) - {D48FF4B4-E68F-47D1-8E25-81A0F0EEB341} - C:\Windows\SysWOW64\ieconfig_1und1.dll (mquadr.at software engineering und consulting GmbH)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (Recorder Toolbar) - {120A8821-2BEE-4C29-BCDA-62C577781992} - C:\Program Files (x86)\MedienTeam66\MP3 Recorder for YouTube\IEPlugin.dll (MedienTeam66)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Download Accelerator Toolbar) - {C544BB19-7F79-414F-B9EF-136C5E7B60B1} - C:\ProgramData\tradio\tradio.dll ()
O3 - HKLM\..\Toolbar: (PROMT-Übersetzer) - {C7DDDD27-F303-42A5-B979-51559F7DC0F0} - I:\translator\PRMTIE\prmtie.dll (PROMT Ltd.)
O3:64bit: - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x64\eDStoolbar.dll (Egis Incorporated.)
O3 - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\Toolbar\WebBrowser: (Download Accelerator Toolbar) - {C544BB19-7F79-414F-B9EF-136C5E7B60B1} - C:\ProgramData\tradio\tradio.dll ()
O3 - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..\Toolbar\WebBrowser: (PROMT-Übersetzer) - {C7DDDD27-F303-42A5-B979-51559F7DC0F0} - I:\translator\PRMTIE\prmtie.dll (PROMT Ltd.)
O4:64bit: - HKLM..\Run: [AutoLockProcess] C:\Programme\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe (Acer Inc.)
O4:64bit: - HKLM..\Run: [NVRaidService] C:\Programme\NVIDIA Corporation\Raid\nvraidservice.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [OODefragTray] C:\Programme\OO Software\Defrag\oodtray.exe (O&O Software GmbH)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVMWlanClient] C:\Program Files (x86)\avmwlanstick\wlangui.exe (AVM Berlin)
O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe (G Data Software AG)
O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe (G Data Software AG)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [PCMMediaSharing] C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe ()
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [WarReg_PopUp] C:\Program Files (x86)\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Incorporated)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 24903
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 157
O7 - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O8:64bit: - Extra context menu item: Ganze Seite übersetzen - I:\translator\PRMTIE\page.HTM ()
O8:64bit: - Extra context menu item: Markierung ubersetzen - I:\translator\PRMTIE\translat.HTM ()
O8:64bit: - Extra context menu item: Suchanfrage ubersetzen - I:\translator\PRMTIE\search.HTM ()
O8:64bit: - Extra context menu item: Thema automatisch bestimmen - I:\translator\PRMTIE\aot.htm ()
O8:64bit: - Extra context menu item: Übersetzungsoptionen anpassen - I:\translator\PRMTIE\options.HTM ()
O8 - Extra context menu item: Ganze Seite übersetzen - I:\translator\PRMTIE\page.HTM ()
O8 - Extra context menu item: Markierung ubersetzen - I:\translator\PRMTIE\translat.HTM ()
O8 - Extra context menu item: Suchanfrage ubersetzen - I:\translator\PRMTIE\search.HTM ()
O8 - Extra context menu item: Thema automatisch bestimmen - I:\translator\PRMTIE\aot.htm ()
O8 - Extra context menu item: Übersetzungsoptionen anpassen - I:\translator\PRMTIE\options.HTM ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..Trusted Domains: fritz.box ([]* in Lokales Intranet)
O15 - HKU\S-1-5-21-336591191-1653457672-3302024944-1000\..Trusted Ranges: Range1 ([*] in Lokales Intranet)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Java Plug-in 1.7.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.7.0_05)
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab (SysInfo Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9FA6C7DC-EB1A-4AF2-A635-D6CBFEC4C570}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (c:\program files (x86)\g data\totalprotection\avkkid\avkcks.exe) - c:\program files (x86)\g data\totalprotection\avkkid\avkcks.exe ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\JanHH\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\JanHH\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.06.07 20:46:14 | 000,000,000 | ---D | M] - I:\Automatisch zu iTunes hinzufügen -- [ NTFS ]
O33 - MountPoints2\{30254538-13c6-11df-95d1-001a4f9e1249}\Shell - "" = AutoRun
O33 - MountPoints2\{30254538-13c6-11df-95d1-001a4f9e1249}\Shell\AutoRun\command - "" = O:\LaunchU3.exe -a
O33 - MountPoints2\{6ae8caac-2409-11de-a590-001d92f1bd21}\Shell - "" = AutoRun
O33 - MountPoints2\{6ae8caac-2409-11de-a590-001d92f1bd21}\Shell\AutoRun\command - "" = P:\pushinst.exe
O33 - MountPoints2\{ab6710ae-ffb9-11de-b241-001a4f9e1249}\Shell - "" = AutoRun
O33 - MountPoints2\{ab6710ae-ffb9-11de-b241-001a4f9e1249}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a
O34 - HKLM BootExecute: (OODBS)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.08.22 16:53:58 | 000,000,000 | ---D | C] -- C:\ProgramData\SecTaskMan
[2012.08.22 16:53:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager
[2012.08.22 16:53:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Security Task Manager
[2012.08.22 10:30:50 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\JanHH\Desktop\OTL.exe
[2012.08.21 17:45:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.08.21 17:45:49 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.08.21 17:45:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.08.16 13:09:59 | 000,000,000 | ---D | C] -- C:\Users\JanHH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MySQL
[2012.08.16 13:09:53 | 000,000,000 | ---D | C] -- C:\ProgramData\MySQL
[2012.08.16 13:09:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MySQL
[2012.08.16 12:43:24 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.08.16 12:43:24 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.08.16 12:43:23 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.08.16 12:43:23 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.08.16 12:43:22 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.08.16 12:43:21 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.08.16 12:43:21 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.08.16 12:43:21 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.08.16 12:43:21 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.08.16 12:43:21 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.08.16 12:43:20 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.08.16 12:43:19 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.08.16 12:43:19 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.08.16 11:54:05 | 000,788,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2012.08.16 11:54:05 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localspl.dll
[2012.08.16 11:54:00 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2012.08.15 22:03:09 | 000,000,000 | ---D | C] -- C:\Users\JanHH\AppData\Local\Secunia PSI
[2012.08.15 22:02:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Secunia
[2012.08.15 21:58:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pimero 2012
[2012.08.15 21:57:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pimero 2012
[2012.08.15 21:48:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2012.08.03 10:44:22 | 000,000,000 | ---D | C] -- C:\Windows\logo1_.exe
[2012.08.02 17:47:42 | 000,034,048 | ---- | C] (MicroWorld Technologies Inc.) -- C:\Windows\SysWow64\eEmpty.exe
[2012.08.02 17:22:08 | 000,108,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWINSCK.OCX
[2012.08.02 17:21:58 | 000,000,000 | ---D | C] -- C:\My Shared Folder
[2012.08.02 17:21:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite
[2012.08.02 16:46:49 | 000,000,000 | ---D | C] -- C:\Users\JanHH\AppData\Local\eMule
[2012.08.02 02:19:31 | 000,000,000 | ---D | C] -- C:\Users\JanHH\AppData\Roaming\Download Manager
[2012.07.31 23:43:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software
[2012.07.31 23:43:32 | 000,000,000 | ---D | C] -- C:\Program Files\OO Software
[2012.07.31 23:17:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
[2012.07.31 15:29:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data TotalProtection 2013
[2012.07.31 15:29:14 | 000,098,760 | ---- | C] (G Data Software) -- C:\Windows\SysNative\drivers\TS4nt.sys
[2012.07.31 15:28:25 | 000,122,744 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\MiniIcpt.sys
[2012.07.31 15:28:25 | 000,064,376 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\HookCentre.sys
[2012.07.31 15:28:24 | 000,054,136 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\GDBehave.sys
[2012.07.31 15:28:20 | 000,065,912 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys
[2012.07.31 15:27:59 | 000,000,000 | ---D | C] -- C:\ProgramData\G DATA Software
[2012.07.31 04:35:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\G DATA Software
[2012.07.31 01:28:52 | 000,000,000 | ---D | C] -- C:\ProgramData\formatpart
[2012.07.30 09:47:35 | 000,000,000 | ---D | C] -- C:\Users\JanHH\AppData\Roaming\SUPERAntiSpyware.com
[2012.07.30 09:47:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2012.07.30 09:47:29 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2012.07.26 11:29:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PC Tools
[2012.07.26 00:39:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2012.07.25 20:39:42 | 000,000,000 | ---D | C] -- C:\Users\JanHH\AppData\Local\{FF0F26D0-3F98-4FFC-9C5E-BDF480C084F3}
[2012.07.25 20:33:26 | 000,000,000 | ---D | C] -- C:\Users\JanHH\AppData\Roaming\NVIDIA
[2012.07.25 18:48:45 | 000,000,000 | ---D | C] -- C:\ProgramData\clonehdd
[2012.07.25 18:48:36 | 000,000,000 | ---D | C] -- C:\archive_db
[2012.07.25 18:48:18 | 000,000,000 | ---D | C] -- C:\ProgramData\copypart
[2012.07.25 18:47:38 | 000,000,000 | ---D | C] -- C:\ProgramData\launcher
[2012.07.25 18:43:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Festplatten Manager™ 2012 Kompakt
[2012.07.25 18:42:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Paragon_Software
[2012.07.25 18:37:21 | 000,000,000 | ---D | C] -- C:\ProgramData\explauncher
[2012.07.25 18:27:31 | 000,000,000 | -HSD | C] -- C:\#GDATA.Trash.Store#
 
========== Files - Modified Within 30 Days ==========
 
[2012.08.22 22:00:01 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.08.22 21:25:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.08.22 20:42:00 | 000,000,314 | ---- | M] () -- C:\Windows\tasks\MT66 Software Update.job
[2012.08.22 20:24:49 | 000,002,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.08.22 20:24:49 | 000,002,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.08.22 19:55:03 | 000,001,138 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-336591191-1653457672-3302024944-1000UA.job
[2012.08.22 18:25:31 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.08.22 18:24:37 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.08.22 18:24:16 | 000,313,896 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor
[2012.08.22 11:22:00 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2012.08.22 10:30:50 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\JanHH\Desktop\OTL.exe
[2012.08.21 17:45:51 | 000,001,006 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.08.21 14:08:49 | 000,770,883 | ---- | M] () -- C:\Windows\SysWow64\sig.bin
[2012.08.21 14:08:49 | 000,043,211 | ---- | M] () -- C:\Windows\SysWow64\nmp.map
[2012.08.19 04:55:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-336591191-1653457672-3302024944-1000Core.job
[2012.08.16 13:59:26 | 000,005,982 | ---- | M] () -- C:\Users\JanHH\Documents\cc_20120816_135913.reg
[2012.08.16 12:47:27 | 000,319,104 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.08.16 12:41:43 | 001,612,154 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.08.16 12:41:43 | 000,681,958 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.08.16 12:41:43 | 000,640,966 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.08.16 12:41:43 | 000,149,316 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.08.16 12:41:43 | 000,122,746 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.08.16 12:40:25 | 001,568,056 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.08.15 22:02:59 | 000,000,981 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
[2012.08.15 21:58:03 | 000,000,897 | ---- | M] () -- C:\Users\JanHH\Desktop\Pimero.lnk
[2012.08.15 20:25:38 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.08.15 20:25:38 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012.08.10 22:13:55 | 000,113,664 | ---- | M] () -- C:\Users\JanHH\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.08.03 11:33:59 | 000,770,803 | ---- | M] () -- C:\Users\JanHH\Documents\pinfect.zip
[2012.08.03 10:38:17 | 000,000,056 | ---- | M] () -- C:\Windows\Lic.xxx
[2012.08.03 10:35:27 | 000,001,478 | ---- | M] () -- C:\Users\JanHH\Documents\bewerbungManuela.rtf
[2012.08.02 22:17:05 | 000,011,883 | ---- | M] () -- C:\Users\JanHH\Documents\lebenslauf-Manuela.rtf
[2012.08.02 18:09:52 | 008,040,723 | ---- | M] () -- C:\Windows\REGBK00.ZIP
[2012.08.02 18:09:37 | 308,458,292 | ---- | M] () -- C:\Windows\hklmSW.reg
[2012.08.02 17:47:41 | 000,034,048 | ---- | M] (MicroWorld Technologies Inc.) -- C:\Windows\SysWow64\eEmpty.exe
[2012.08.02 02:22:00 | 142,102,192 | ---- | M] () -- C:\Users\JanHH\Documents\mwav.exe
[2012.08.01 11:12:00 | 000,004,522 | ---- | M] () -- C:\Users\JanHH\Documents\cc_20120801_111148.reg
[2012.07.31 23:43:33 | 000,001,916 | ---- | M] () -- C:\Users\Public\Desktop\O&O Defrag.lnk
[2012.07.31 23:17:27 | 000,000,982 | ---- | M] () -- C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
[2012.07.31 19:20:46 | 000,106,648 | ---- | M] (G Data Software) -- C:\Windows\SysNative\drivers\GRD.sys
[2012.07.31 15:47:50 | 000,065,912 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys
[2012.07.31 15:29:14 | 000,098,760 | ---- | M] (G Data Software) -- C:\Windows\SysNative\drivers\TS4nt.sys
[2012.07.31 15:28:25 | 000,122,744 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\MiniIcpt.sys
[2012.07.31 15:28:25 | 000,064,376 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\HookCentre.sys
[2012.07.31 15:28:24 | 000,054,136 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\GDBehave.sys
[2012.07.31 15:28:11 | 000,002,080 | ---- | M] () -- C:\Users\Public\Desktop\G Data TotalProtection.lnk
[2012.07.31 14:58:13 | 000,000,732 | ---- | M] () -- C:\Users\JanHH\AppData\Local\d3d9caps64.dat
[2012.07.30 09:47:33 | 000,001,671 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
[2012.07.27 09:59:28 | 000,000,284 | ---- | M] () -- C:\Windows\tasks\RMAutoUpdate.job
[2012.07.26 00:39:11 | 000,000,941 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012.07.25 23:21:26 | 000,002,013 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2012.07.25 23:21:26 | 000,001,458 | ---- | M] () -- C:\Users\JanHH\Desktop\DivX Movies.lnk
[2012.07.25 18:43:15 | 000,002,409 | ---- | M] () -- C:\Users\Public\Desktop\Paragon Festplatten Manager™ 2012 Kompakt.lnk
[2012.07.25 18:33:56 | 000,000,898 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.07.25 18:27:32 | 000,524,288 | -HS- | M] () -- C:\Windows\SysWow64\5-18{23104d01-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms
[2012.07.25 18:27:32 | 000,524,288 | -HS- | M] () -- C:\Windows\SysWow64\5-18{23104d01-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms
[2012.07.25 18:27:32 | 000,262,144 | ---- | M] () -- C:\Windows\SysWow64\5-18
[2012.07.25 18:27:32 | 000,065,536 | -HS- | M] () -- C:\Windows\SysWow64\5-18{23104d01-d622-11e1-9ac9-001a4f9e1249}.TM.blf
 
========== Files Created - No Company Name ==========
 
[2012.08.21 17:45:51 | 000,001,006 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.08.16 13:59:19 | 000,005,982 | ---- | C] () -- C:\Users\JanHH\Documents\cc_20120816_135913.reg
[2012.08.15 22:02:59 | 000,000,981 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
[2012.08.15 22:02:59 | 000,000,944 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
[2012.08.15 21:58:03 | 000,000,897 | ---- | C] () -- C:\Users\JanHH\Desktop\Pimero.lnk
[2012.08.03 10:32:09 | 000,001,478 | ---- | C] () -- C:\Users\JanHH\Documents\bewerbungManuela.rtf
[2012.08.02 21:33:59 | 000,770,803 | ---- | C] () -- C:\Users\JanHH\Documents\pinfect.zip
[2012.08.02 18:08:34 | 308,458,292 | ---- | C] () -- C:\Windows\hklmSW.reg
[2012.08.02 18:07:43 | 008,040,723 | ---- | C] () -- C:\Windows\REGBK00.ZIP
[2012.08.02 17:47:58 | 000,000,056 | ---- | C] () -- C:\Windows\Lic.xxx
[2012.08.02 02:19:41 | 142,102,192 | ---- | C] () -- C:\Users\JanHH\Documents\mwav.exe
[2012.08.01 11:11:55 | 000,004,522 | ---- | C] () -- C:\Users\JanHH\Documents\cc_20120801_111148.reg
[2012.07.31 23:43:33 | 000,001,916 | ---- | C] () -- C:\Users\Public\Desktop\O&O Defrag.lnk
[2012.07.31 23:17:27 | 000,000,982 | ---- | C] () -- C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
[2012.07.31 15:28:11 | 000,002,080 | ---- | C] () -- C:\Users\Public\Desktop\G Data TotalProtection.lnk
[2012.07.31 14:58:13 | 000,000,732 | ---- | C] () -- C:\Users\JanHH\AppData\Local\d3d9caps64.dat
[2012.07.30 09:47:33 | 000,001,671 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
[2012.07.29 11:50:58 | 000,011,883 | ---- | C] () -- C:\Users\JanHH\Documents\lebenslauf-Manuela.rtf
[2012.07.26 11:29:36 | 000,000,284 | ---- | C] () -- C:\Windows\tasks\RMAutoUpdate.job
[2012.07.26 00:39:11 | 000,000,941 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012.07.25 18:43:15 | 000,002,409 | ---- | C] () -- C:\Users\Public\Desktop\Paragon Festplatten Manager™ 2012 Kompakt.lnk
[2012.07.25 18:27:31 | 000,524,288 | -HS- | C] () -- C:\Windows\SysWow64\5-18{23104d01-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms
[2012.07.25 18:27:31 | 000,524,288 | -HS- | C] () -- C:\Windows\SysWow64\5-18{23104d01-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms
[2012.07.25 18:27:31 | 000,262,144 | ---- | C] () -- C:\Windows\SysWow64\5-18
[2012.07.25 18:27:31 | 000,065,536 | -HS- | C] () -- C:\Windows\SysWow64\5-18{23104d01-d622-11e1-9ac9-001a4f9e1249}.TM.blf
[2012.07.14 11:30:56 | 000,770,883 | ---- | C] () -- C:\Windows\SysWow64\sig.bin
[2012.06.17 14:11:42 | 000,017,408 | ---- | C] () -- C:\Users\JanHH\AppData\Local\WebpageIcons.db
[2012.05.15 02:21:50 | 000,423,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2012.03.06 08:38:08 | 000,338,432 | ---- | C] () -- C:\Windows\SysWow64\sqlite36_engine.dll
[2012.02.14 21:57:31 | 000,000,000 | ---- | C] () -- C:\Windows\iplayer.INI
[2011.10.17 04:25:23 | 001,053,848 | ---- | C] () -- C:\Windows\SysWow64\ieconfig_1und1_svc.exe
[2011.06.07 04:14:30 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2011.06.07 04:14:30 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011.06.07 04:14:29 | 000,631,808 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011.06.07 04:14:29 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011.05.22 12:00:08 | 000,027,648 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll
[2011.01.29 14:35:54 | 000,695,578 | ---- | C] () -- C:\Windows\unins000.exe
[2011.01.29 14:35:54 | 000,001,272 | ---- | C] () -- C:\Windows\unins000.dat
[2010.07.26 11:55:08 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.05.06 20:03:43 | 000,015,957 | ---- | C] () -- C:\Users\JanHH\AppData\Roaming\UserTile.png
[2009.10.04 21:20:42 | 000,032,879 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.09.15 23:37:48 | 000,000,125 | -HS- | C] () -- C:\ProgramData\.zreglib
[2009.04.21 13:27:14 | 000,000,285 | ---- | C] () -- C:\Users\JanHH\AppData\Roaming\burnaware.ini
[2009.04.13 11:12:49 | 000,000,680 | ---- | C] () -- C:\Users\JanHH\AppData\Local\d3d9caps.dat
[2009.04.12 20:58:09 | 000,113,664 | ---- | C] () -- C:\Users\JanHH\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== LOP Check ==========
 
[2009.09.29 10:39:59 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\.bsnes
[2009.12.04 12:11:52 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Ashampoo
[2010.12.02 19:56:11 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Atari
[2010.01.24 15:39:42 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Avanquest
[2009.10.24 12:56:16 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\ConfigWizard
[2011.11.26 13:01:49 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\DAEMON Tools Lite
[2011.10.15 19:35:16 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Easy Image Modifier
[2011.01.29 14:35:54 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Flatcast
[2009.04.20 21:32:47 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\FlyingWSimulation
[2009.06.30 19:44:20 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\OpenOffice.org
[2010.09.25 20:07:35 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Oxsar
[2010.12.01 02:22:16 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\PimeroUninstallCloser
[2009.10.24 12:33:39 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\PimeroUpdater
[2011.09.20 20:27:24 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\PROMT
[2009.12.04 16:11:07 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\ProtectDisc
[2010.03.29 09:00:25 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\QuickScan
[2011.09.19 19:34:51 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Registry Mechanic
[2011.12.22 23:51:52 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\ScanSoft
[2009.10.25 14:06:30 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\ServerAdmin
[2009.10.24 12:33:39 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\soft-evolution
[2011.01.24 17:49:41 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\SoftGrid Client
[2009.11.03 10:00:05 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\temp
[2012.07.17 14:05:01 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Thunderbird
[2010.12.01 02:25:28 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Tobit
[2010.10.13 13:41:33 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\TP
[2010.11.20 00:36:03 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\TuneUp Software
[2012.07.17 17:57:26 | 000,000,000 | ---D | M] -- C:\Users\JanHH\AppData\Roaming\Z-Software
[2012.08.19 04:55:00 | 000,001,116 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-336591191-1653457672-3302024944-1000Core.job
[2012.08.22 19:55:03 | 000,001,138 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-336591191-1653457672-3302024944-1000UA.job
[2012.08.22 20:42:00 | 000,000,314 | ---- | M] () -- C:\Windows\Tasks\MT66 Software Update.job
[2012.07.27 09:59:28 | 000,000,284 | ---- | M] () -- C:\Windows\Tasks\RMAutoUpdate.job
[2012.07.05 21:16:50 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\RMSchedule.job
[2012.08.22 00:55:16 | 000,032,532 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011.04.24 01:47:07 | 000,000,438 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{245B2A50-A45B-414C-8908-274834FF8D90}.job
 
========== Purity Check ==========
 
 
 
========== Files - Unicode (All) ==========
[2012.07.25 18:27:16 | 000,524,288 | -HS- | M] ()(C:\Windows\SysWow64\???n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms) -- C:\Windows\SysWow64\ܒ탼n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms
[2012.07.25 18:27:16 | 000,524,288 | -HS- | M] ()(C:\Windows\SysWow64\???n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms) -- C:\Windows\SysWow64\ܒ탼n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms
[2012.07.25 18:27:16 | 000,065,536 | -HS- | M] ()(C:\Windows\SysWow64\???n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TM.blf) -- C:\Windows\SysWow64\ܒ탼n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TM.blf
[2012.07.25 18:21:11 | 000,524,288 | -HS- | C] ()(C:\Windows\SysWow64\???n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms) -- C:\Windows\SysWow64\ܒ탼n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms
[2012.07.25 18:21:11 | 000,524,288 | -HS- | C] ()(C:\Windows\SysWow64\???n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms) -- C:\Windows\SysWow64\ܒ탼n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms
[2012.07.25 18:21:11 | 000,262,144 | ---- | M] ()(C:\Windows\SysWow64\???n) -- C:\Windows\SysWow64\ܒ탼n
[2012.07.25 18:21:11 | 000,262,144 | ---- | C] ()(C:\Windows\SysWow64\???n) -- C:\Windows\SysWow64\ܒ탼n
[2012.07.25 18:21:11 | 000,065,536 | -HS- | C] ()(C:\Windows\SysWow64\???n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TM.blf) -- C:\Windows\SysWow64\ܒ탼n{23104cf7-d622-11e1-9ac9-001a4f9e1249}.TM.blf
[2012.07.25 18:21:11 | 000,005,120 | -H-- | M] ()(C:\Windows\SysWow64\???n.LOG1) -- C:\Windows\SysWow64\ܒ탼n.LOG1
[2012.07.25 18:21:11 | 000,005,120 | -H-- | C] ()(C:\Windows\SysWow64\???n.LOG1) -- C:\Windows\SysWow64\ܒ탼n.LOG1
[2012.07.25 18:21:11 | 000,000,000 | -H-- | M] ()(C:\Windows\SysWow64\???n.LOG2) -- C:\Windows\SysWow64\ܒ탼n.LOG2
[2012.07.25 18:21:11 | 000,000,000 | -H-- | C] ()(C:\Windows\SysWow64\???n.LOG2) -- C:\Windows\SysWow64\ܒ탼n.LOG2
[2012.07.14 11:31:50 | 000,524,288 | -HS- | M] ()(C:\Windows\SysWow64\???j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms) -- C:\Windows\SysWow64\و䬜j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms
[2012.07.14 11:31:50 | 000,524,288 | -HS- | M] ()(C:\Windows\SysWow64\???j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms) -- C:\Windows\SysWow64\و䬜j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms
[2012.07.14 11:31:50 | 000,065,536 | -HS- | M] ()(C:\Windows\SysWow64\???j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TM.blf) -- C:\Windows\SysWow64\و䬜j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TM.blf
[2012.07.14 11:31:23 | 000,524,288 | -HS- | C] ()(C:\Windows\SysWow64\???j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms) -- C:\Windows\SysWow64\و䬜j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TMContainer00000000000000000002.regtrans-ms
[2012.07.14 11:31:23 | 000,524,288 | -HS- | C] ()(C:\Windows\SysWow64\???j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms) -- C:\Windows\SysWow64\و䬜j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TMContainer00000000000000000001.regtrans-ms
[2012.07.14 11:31:23 | 000,262,144 | ---- | M] ()(C:\Windows\SysWow64\???j) -- C:\Windows\SysWow64\و䬜j
[2012.07.14 11:31:23 | 000,262,144 | ---- | C] ()(C:\Windows\SysWow64\???j) -- C:\Windows\SysWow64\و䬜j
[2012.07.14 11:31:23 | 000,065,536 | -HS- | C] ()(C:\Windows\SysWow64\???j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TM.blf) -- C:\Windows\SysWow64\و䬜j{9fd73772-cd95-11e1-bc02-001a4f9e1249}.TM.blf
[2012.07.14 11:31:23 | 000,005,120 | -H-- | M] ()(C:\Windows\SysWow64\???j.LOG1) -- C:\Windows\SysWow64\و䬜j.LOG1
[2012.07.14 11:31:23 | 000,005,120 | -H-- | C] ()(C:\Windows\SysWow64\???j.LOG1) -- C:\Windows\SysWow64\و䬜j.LOG1
[2012.07.14 11:31:23 | 000,000,000 | -H-- | M] ()(C:\Windows\SysWow64\???j.LOG2) -- C:\Windows\SysWow64\و䬜j.LOG2
[2012.07.14 11:31:23 | 000,000,000 | -H-- | C] ()(C:\Windows\SysWow64\???j.LOG2) -- C:\Windows\SysWow64\و䬜j.LOG2
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 48 bytes -> C:\Windows:2A00C8B6D08DE71A
@Alternate Data Stream - 186 bytes -> C:\ProgramData\TEMP:D287FACF
@Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:D1B5B4F1
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:430C6D84
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:7E95B6FD

< End of report >
--- --- ---

markusg 22.08.2012 21:43
wo sind die restlichen logs um die ich dich gebeten hab?

Jan80 22.08.2012 21:54
Emsisoft Anti-Malware v. 6.6.0.4
(C) 2003-2012 Emsisoft - Emsisoft Anti-Malware - Best antivirus and firewall to protect from viruses, bots, spyware, keyloggers, trojans, scareware and rootkits

ID Object
0 H:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\66389bb9-2a2c1ff7 Exploit.Java.CVE-2008-5353!E2
1 H:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\189d60f-450e027e Exploit.Java.CVE-2008-5353!E2
2 Value: hkey_current_user\software\k-sig --> usealternatemethod Trace.Registry.kazaa lite resurrection!E1

markusg 22.08.2012 21:56
kenn ich schon, wo sind die logs der anderen scans die du gemacht hast.
steht doch alles oben was ich sehen will

Jan80 22.08.2012 22:04
Den Log von GData finde ich leider nicht...sehe zwar alles in der Quarantäne....aber selbst kopieren geht nicht:headbang:


Und hier das von GData

*** Prozess ***

Prozess: 8608
Dateiname: flatviewersetup530.tmp
Pfad: c:\users\janhh\appdata\local\temp\is-sd2o1.tmp\flatviewersetup530.tmp

Herausgeber: Unbekannter Herausgeber

Gestartet von: flatviewersetup530.exe
Herausgeber: 1 mal 1 Software GmbH - Flatcast


*** Aktionen ***

Ein Packer wurde auf die Programmdatei angewandt. Möglicherweise um schädliche Inhalte zu verbergen.
Das Programm versucht zu erreichen, dass ein Programm beim Systemstart automatisch gestartet wird.
Das Programm stellt eine Verbindung über ein Netzwerk her.
Das Programm hat Dateien im Systemordner gespeichert.
Das Programm hat eine ausführbare Datei angelegt oder manipuliert.
Das Programm hat eine ausführbare Datei im Windows-Ordner angelegt oder manipuliert.


*** Quarantäne ***

Folgende Dateien wurden in Quarantäne verschoben:
C:\Users\JanHH\AppData\Local\Temp\IssProc.x64
C:\Users\JanHH\AppData\Local\Temp\is-SD2O1.tmp\FlatViewerSetup530.tmp
C:\Users\JanHH\AppData\Local\Temp\is-TF4OB.tmp\IssProc.dll
C:\Users\JanHH\AppData\Local\Temp\is-TF4OB.tmp\IssProcLanguage.ini
C:\Users\JanHH\AppData\Local\Temp\is-TF4OB.tmp\_isetup\_RegDLL.tmp
C:\Users\JanHH\AppData\Local\Temp\is-TF4OB.tmp\_isetup\_setup64.tmp
C:\Users\JanHH\AppData\Local\Temp\is-TF4OB.tmp\_isetup\_shfoldr.dll
C:\Windows\is-6CQ32.exe
C:\Windows\is-6CQ32.lst
C:\Windows\is-6CQ32.msg
C:\Windows\is-6OQLU.tmp
C:\Windows\unins001.dat
C:\Windows\unins001.exe

Folgende Registry Einträge wurden gelöscht:

\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce || InnoSetupRegFile.0000000001

YGLhxnJpCScneS8mJid5Dygnl+9ycnJy+Q0pJ+gvJ+cpJ2cMKicpJykmBiwnJycnJgYtJ9dycignCy4nfXKCLieacCp04kInJ3TScCsnLicnJw3HcnJiYnJygCwnLCcnJwu5YuHGgtaQLScH6XJyuW JicnK5oCYnKCcoJgaKcqJiYnKioCwni2JicrII2nKS92JicpL3sCknKiYmJwqscnKmYmJycqbAKyeKYmJyogjscuJywnKCwC8nKicqJgZtcvJywnKS0CgnqmJicqIKvXLiYmJy4nC4cnItJ4dysnCq cnJycmJicLri0VljtrLSYVtjtnLi0VljtqJw2nKSLCYmJ8lw6nJye2JicnJ7cPpygmJicoJwe3KiKicnJ5pwi3KCcoJiYnCrcqIAAA
Version der Regeln: 3.1.4

"C:\Users\JanHH\AppData\Local\Temp\is-SD2O1.tmp\FlatViewerSetup530.tmp" /SL5="$8036E,623877,54272,C:\Users\JanHH\Downloads\FlatViewerSetup530.exe" /SPAWNWND=$802FE /NOTIFYWND=$90400
"C:\Users\JanHH\Downloads\FlatViewerSetup530.exe" /SPAWNWND=$802FE /NOTIFYWND=$90400

markusg 22.08.2012 22:09
wo ist das emsisoft log.
gdata speichert auch logs, über ereignisse und funde, bitte klicke dich mal durchs programm

Jan80 22.08.2012 22:20
Emsisoft Anti-Malware - Version 6.6
quarantine log

Datum Ursprung Vorgang Verhalten/Infektion
22.08.2012 21:46:14 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
22.08.2012 21:46:14 H:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\66389bb9-2a2c1ff7 Datei nicht gefunden Trojan.Java.Mesdeh!E2
22.08.2012 21:46:14 H:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\189d60f-450e027e In Quarantäne gestellt Exploit.Java.CVE-2008-5353!E2
22.08.2012 21:46:13 H:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\66389bb9-2a2c1ff7 In Quarantäne gestellt Exploit.Java.CVE-2008-5353!E2
22.08.2012 18:32:56 Value: hkey_current_user\software\kazaa\transfer --> concurrentuploads Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:56 Value: hkey_current_user\software\kazaa\channels\websearch --> channelfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:56 Value: hkey_current_user\software\kazaa\channels\websearch --> channelfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:56 Value: hkey_current_user\software\kazaa\channels\p2p --> iconserver Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:56 Value: hkey_current_user\software\kazaa\channels\p2p --> channeltype Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:56 Value: hkey_current_user\software\kazaa\resultsfilter --> firewall_filter Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:56 Value: hkey_current_user\software\kazaa\transfer --> uploadbandwidth Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:55 Value: hkey_current_user\software\kazaa\resultsfilter --> custom_filter_phrases Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:55 Value: hkey_current_user\software\kazaa\channels\p2p --> visible Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:55 Value: hkey_current_user\software\kazaa\channels\websearch --> iconfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:55 Value: hkey_current_user\software\kazaa\transfer --> uploadbandwidth Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:55 Value: hkey_current_user\software\kazaa\socks --> enabled Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:55 Value: hkey_current_user\software\kazaa\resultsfilter --> adult_filter_level Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:55 Value: hkey_current_user\software\kazaa\channels\p2p --> position Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\kazaa\channels\websearch --> iconpath Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\kazaa\channels\websearch --> displayname Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\kazaa\advanced --> scanfolder Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\kazaa\channels\p2p --> notadded Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\kazaa\transfer --> concurrentuploads Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\kazaa\channels\p2p --> targeturl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:54 Value: hkey_current_user\software\kazaa\channels\websearch --> uninstalled Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:53 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:53 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:53 Value: hkey_current_user\software\kazaa\channels\websearch --> displayname Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:53 Value: hkey_current_user\software\kazaa\channels\p2p --> ssmurl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:53 Value: hkey_current_user\software\kazaa\userdetails --> username Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:53 C:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\8f594ec-6e7d99c7 Gelöscht Exploit.Java.Blacole!E2
22.08.2012 18:32:53 Value: hkey_current_user\software\kazaa\transfer --> nouploadlimitwhenidle Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:53 Value: hkey_current_user\software\kazaa\transfer --> nouploadlimitwhenidle Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:52 Value: hkey_current_user\software\kazaa\channels\p2p --> visible Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:52 Value: hkey_classes_root\sig2dat --> url protocol Gelöscht Trace.Registry.trustyfiles!E1
22.08.2012 18:32:52 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:52 Value: hkey_current_user\software\kazaa\advanced --> scanfolder Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:52 Value: hkey_current_user\software\kazaa\channels\websearch --> channeltype Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:52 Value: hkey_current_user\software\kazaa\channels\p2p --> iconpath Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:52 Value: hkey_current_user\software\kazaa\k-lite --> installsig Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:51 Value: hkey_current_user\software\kazaa\channels\p2p --> iconserver Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:51 Value: hkey_current_user\software\kazaa\channels\p2p --> channelfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:51 Value: hkey_current_user\software\kazaa\resultsfilter --> bogus_filter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:51 Value: hkey_current_user\software\kazaa\channels\websearch --> iconserver Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:51 Value: hkey_current_user\software\kazaa\channels\p2p --> position Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:51 Value: hkey_current_user\software\kazaa\resultsfilter --> custom_filter_phrases Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:51 Value: hkey_current_user\software\kazaa\channels\websearch --> iconfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:51 Value: hkey_current_user\software\kazaa\localcontent --> disablesharing Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:50 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:50 Value: hkey_current_user\software\kazaa\userdetails --> autoconnected Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:50 Value: hkey_current_user\software\kazaa\userdetails --> autoconnected Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:50 Value: hkey_current_user\software\kazaa\channels\websearch --> iconserver Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:50 Value: hkey_current_user\software\kazaa\localcontent --> downloaddir Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:50 Value: hkey_current_user\software\kazaa\skins --> skinsdir Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:50 Value: hkey_current_user\software\kazaa\userdetails --> countrycode Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:49 Value: hkey_current_user\software\kazaa\channels\p2p --> notadded Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:49 Value: hkey_current_user\software\kazaa\k-lite --> installsig Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:49 Value: hkey_current_user\software\kazaa\dontshow --> closetosystray Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:49 Value: hkey_current_user\software\kazaa\channels\websearch --> iconpath Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:49 Value: hkey_current_user\software\kazaa\advanced --> supernode Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:49 Value: hkey_current_user\software\kazaa\channels\p2p --> source Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:49 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:48 Value: hkey_current_user\software\kazaa\channels\p2p --> iconpath Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:48 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:48 Value: hkey_current_user\software\kazaa\transfer --> uploadbandwidth Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:48 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:48 c:\windows\rundll16.exe Gelöscht Trace.File.browseraid.rundll16!E1
22.08.2012 18:32:48 Value: hkey_current_user\software\kazaa\resultsfilter --> firewall_filter Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:48 Value: hkey_current_user\software\kazaa\channels\p2p --> displayname Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:47 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:47 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:47 Value: hkey_current_user\software\kazaa\localcontent --> downloaddir Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:47 Value: hkey_current_user\software\kazaa\channels\p2p --> source Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:47 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:47 Value: hkey_current_user\software\kazaa\resultsfilter --> custom_filter_phrases Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:47 Value: hkey_current_user\software\kazaa\channels\websearch --> uninstalled Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:46 Value: hkey_current_user\software\kazaa\channels\websearch --> ssmurl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:46 Value: hkey_current_user\software\kazaa\resultsfilter --> adult_filter_level Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:46 Key: hkey_current_user\software\kazaa Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:46 Value: hkey_current_user\software\kazaa\channels\p2p --> channeltype Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:46 Value: hkey_current_user\software\kazaa\channels\websearch --> targeturl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:46 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:46 Value: hkey_current_user\software\kazaa\channels\p2p --> mandatory Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:46 Value: hkey_current_user\software\kazaa\localcontent --> downloaddir Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:45 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:45 Value: hkey_current_user\software\kazaa\advanced --> supernode Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:45 Value: hkey_current_user\software\kazaa\advanced --> supernode Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:45 Value: hkey_current_user\software\kazaa\channels\websearch --> mandatory Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:45 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:45 Key: hkey_current_user\software\kazaa Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:45 Value: hkey_current_user\software\kazaa\channels\p2p --> targeturl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:44 Value: hkey_current_user\software\kazaa\k-lite --> installsig Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:44 Value: hkey_current_user\software\kazaa\channels\p2p --> mandatory Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:44 Value: hkey_current_user\software\kazaa\socks --> enabled Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:44 Value: hkey_current_user\software\kazaa\localcontent --> disablelistfiles Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:44 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:44 Value: hkey_current_user\software\kazaa\resultsfilter --> bogus_filter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:44 Value: hkey_current_user\software\kazaa\localcontent --> disablesharing Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:43 Value: hkey_current_user\software\kazaa\channels\websearch --> visible Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:43 Value: hkey_current_user\software\kazaa\transfer --> concurrentuploads Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:43 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:43 Value: hkey_current_user\software\kazaa\advanced --> scanfolder Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:43 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:43 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:43 Value: hkey_current_user\software\kazaa\localcontent --> downloaddir Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:42 Value: hkey_current_user\software\kazaa\channels\p2p --> channelfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:42 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:42 Value: hkey_current_user\software\kazaa\channels\p2p --> iconfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:42 Value: hkey_current_user\software\kazaa\channels\websearch --> targeturl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:42 Value: hkey_current_user\software\kazaa\channels\p2p --> visible Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:42 Value: hkey_current_user\software\kazaa\channels\websearch --> iconfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:42 Value: hkey_current_user\software\kazaa\resultsfilter --> bogus_filter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:42 Value: hkey_current_user\software\kazaa\channels\websearch --> channeltype Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:41 Value: hkey_current_user\software\kazaa\transfer --> concurrentuploads Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:41 Value: hkey_current_user\software\kazaa\socks --> enabled Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:41 Value: hkey_current_user\software\kazaa\channels\websearch --> source Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:41 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:41 Value: hkey_current_user\software\kazaa\channels\websearch --> displayname Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:41 Value: hkey_current_user\software\kazaa\socks --> enabled Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:41 Value: hkey_current_user\software\kazaa\transfer --> uploadbandwidth Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:40 Value: hkey_current_user\software\kazaa\channels\p2p --> source Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:40 Value: hkey_current_user\software\kazaa\skins --> skinsdir Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:40 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:40 Value: hkey_current_user\software\kazaa\channels\websearch --> visible Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:40 Value: hkey_current_user\software\kazaa\channels\p2p --> channelfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:40 Value: hkey_current_user\software\kazaa\channels\p2p --> notadded Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:40 Value: hkey_current_user\software\kazaa\channels\websearch --> position Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:40 Value: hkey_current_user\software\kazaa\localcontent --> disablesharing Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:39 Value: hkey_current_user\software\kazaa\userdetails --> countrycode Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:39 Value: hkey_current_user\software\kazaa\channels\p2p --> channeltype Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:39 Value: hkey_current_user\software\kazaa\channels\p2p --> displayname Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:39 Value: hkey_local_machine\software\classes\sig2dat --> url protocol Gelöscht Trace.Registry.trustyfiles!E1
22.08.2012 18:32:39 Value: hkey_current_user\software\kazaa\channels\p2p --> iconpath Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:39 Value: hkey_current_user\software\kazaa\channels\p2p --> uninstalled Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:39 Value: hkey_current_user\software\kazaa\localcontent --> disablelistfiles Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:38 Value: hkey_current_user\software\kazaa\channels\websearch --> position Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:38 Value: hkey_current_user\software\kazaa\channels\p2p --> targeturl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:38 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:38 Value: hkey_current_user\software\kazaa\channels\websearch --> iconpath Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:38 C:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\4935ed4a-2ba030b0 Gelöscht Exploit.Java.Blacole!E2
22.08.2012 18:32:38 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:38 Value: hkey_current_user\software\kazaa\channels\p2p --> displayname Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:37 Value: hkey_current_user\software\k-sig --> usealternatemethod Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:37 Value: hkey_current_user\software\kazaa\resultsfilter --> custom_filter_phrases Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:37 Value: hkey_current_user\software\kazaa\channels\p2p --> ssmurl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:37 Value: hkey_current_user\software\kazaa\channels\p2p --> iconfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:37 Value: hkey_current_user\software\kazaa\channels\p2p --> iconfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:37 Value: hkey_current_user\software\kazaa\channels\websearch --> notadded Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:37 Value: hkey_current_user\software\kazaa\channels\p2p --> position Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:36 Value: hkey_current_user\software\kazaa\resultsfilter --> bogus_filter Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:36 Value: hkey_current_user\software\kazaa\dontshow --> closetosystray Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:36 Value: hkey_current_user\software\kazaa\advanced --> supernode Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:36 Value: hkey_current_user\software\kazaa\channels\p2p --> uninstalled Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:36 Value: hkey_current_user\software\kazaa\channels\p2p --> uninstalled Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:36 Value: hkey_current_user\software\kazaa\channels\websearch --> channelfile Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:36 Value: hkey_current_user\software\kazaa\channels\p2p --> ssmurl Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:36 Value: hkey_current_user\software\kazaa\userdetails --> username Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:35 Value: hkey_current_user\software\kazaa\channels\websearch --> notadded Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:35 Value: hkey_current_user\software\kazaa\k-lite --> installsig Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:35 Value: hkey_current_user\software\kazaa\channels\p2p --> iconserver Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:35 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:35 Value: hkey_current_user\software\kazaa\localcontent --> disablesharing Gelöscht Trace.Registry.kazaa lite resurrection!E1
22.08.2012 18:32:35 Value: hkey_current_user\software\kazaa\channels\websearch --> source Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:35 Value: hkey_current_user\software\kazaa\channels\websearch --> channeltype Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:34 Value: hkey_current_user\software\kazaa\channels\websearch --> mandatory Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:34 c:\windows\rundl132.exe Gelöscht Trace.File.viking!E1
22.08.2012 18:32:34 Value: hkey_current_user\software\kazaa\channels\p2p --> mandatory Gelöscht Trace.Registry.kazaa!E1
22.08.2012 18:32:34 Value: hkey_current_user\software\kazaa\channels\websearch --> ssmurl Gelöscht Trace.Registry.kazaa!E1
21.08.2012 20:59:25 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
21.08.2012 20:59:25 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
20.08.2012 20:14:38 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
20.08.2012 20:14:38 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
20.08.2012 20:14:37 C:\Users\JanHH\Downloads\cr-ggrg7\keygen.exe In Quarantäne gestellt Riskware.Keygen.EPrompt!E2
20.08.2012 19:24:50 C:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\4935ed4a-2ba030b0 Datei nicht gefunden Exploit.Java.Blacole!E2
20.08.2012 19:24:50 C:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\4935ed4a-2ba030b0 In Quarantäne gestellt Exploit.Java.Blacole!E2
18.08.2012 03:07:41 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
18.08.2012 03:07:41 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
18.08.2012 02:47:42 C:\Users\JanHH\Downloads\cr-ggrg7.zip -> keygen.exe Infektion gelöscht not-a-virus.Keygen.EPrompt!E2
18.08.2012 02:23:20 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
18.08.2012 02:23:20 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
16.08.2012 11:40:03 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
16.08.2012 11:40:03 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
15.08.2012 08:11:28 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
15.08.2012 08:11:28 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> ssmurl In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> mandatory In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\websearch --> channeltype In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> source In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\k-lite --> installsig In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> notadded In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:18 Value: hkey_current_user\software\kazaa\userdetails --> username In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> ssmurl In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\websearch --> channelfile In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> uninstalled In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\advanced --> supernode In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\channels\p2p --> iconfile In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> iconpath In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\localcontent --> disablelistfiles In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\channels\p2p --> displayname In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> position In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> visible In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:18 Value: hkey_current_user\software\kazaa\skins --> skinsdir In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\socks --> enabled In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\websearch --> iconfile In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\channels\p2p --> channelfile In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\localcontent --> downloaddir In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\transfer --> concurrentuploads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> mandatory In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> targeturl In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> targeturl In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:18 Key: hkey_current_user\software\kazaa In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\resultsfilter --> adult_filter_level In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\resultsfilter --> custom_filter_phrases In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> source In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\channels\p2p --> iconpath In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\dontshow --> closetosystray In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:18 Value: hkey_current_user\software\kazaa\userdetails --> countrycode In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:18 Value: hkey_current_user\software\kazaa\userdetails --> autoconnected In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\localcontent --> disablesharing In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> position In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> iconserver In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\resultsfilter --> bogus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\advanced --> scanfolder In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> visible In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:18 Value: hkey_current_user\software\kazaa\transfer --> nouploadlimitwhenidle In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> uninstalled In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> notadded In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\websearch --> displayname In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\transfer --> uploadbandwidth In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:18 Value: hkey_current_user\software\kazaa\resultsfilter --> firewall_filter In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\channels\p2p --> channeltype In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> iconserver In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:18 Value: hkey_current_user\software\kazaa\resultsfilter --> firewall_filter In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:17 Value: hkey_current_user\software\kazaa\channels\websearch --> iconpath In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:16 Value: hkey_current_user\software\kazaa\channels\p2p --> iconserver In Quarantäne gestellt Trace.Registry.kazaa!E1
06.08.2012 12:14:15 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
06.08.2012 12:14:14 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:23:07 C:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\8f594ec-6e7d99c7 Datei nicht gefunden Exploit.Java.Blacole!E2
04.08.2012 23:23:06 C:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\8f594ec-6e7d99c7 In Quarantäne gestellt Exploit.Java.Blacole!E2
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> iconserver In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> uninstalled In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> iconfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> ssmurl In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> channelfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> source In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\transfer --> uploadbandwidth In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\resultsfilter --> bogus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> visible In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\advanced --> scanfolder In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\localcontent --> disablesharing In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\socks --> enabled In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\k-lite --> installsig In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> mandatory In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> channeltype In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\localcontent --> downloaddir In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> displayname In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\advanced --> supernode In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> notadded In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\websearch --> iconfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\resultsfilter --> custom_filter_phrases In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> iconpath In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\websearch --> channeltype In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\websearch --> displayname In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> targeturl In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\websearch --> iconpath In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> position In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\websearch --> channelfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\transfer --> concurrentuploads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 23:11:21 Value: hkey_current_user\software\kazaa\channels\p2p --> channelfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 23:11:20 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> mandatory In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\localcontent --> disablesharing In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\dontshow --> closetosystray In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> position In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> notadded In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> displayname In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> targeturl In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> position In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> uninstalled In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> iconpath In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> channeltype In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\userdetails --> countrycode In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> notadded In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\socks --> enabled In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\websearch --> displayname In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> source In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> channeltype In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> targeturl In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> iconfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> visible In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\resultsfilter --> bogus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\localcontent --> disablelistfiles In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Key: hkey_current_user\software\kazaa In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> mandatory In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\advanced --> supernode In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\localcontent --> downloaddir In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> ssmurl In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> uninstalled In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\resultsfilter --> firewall_filter In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\transfer --> uploadbandwidth In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> source In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> iconpath In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\k-lite --> installsig In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\skins --> skinsdir In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> iconserver In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:21 Value: hkey_current_user\software\kazaa\userdetails --> autoconnected In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> channelfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> iconserver In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\transfer --> nouploadlimitwhenidle In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\userdetails --> username In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\p2p --> ssmurl In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\transfer --> concurrentuploads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\advanced --> scanfolder In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\resultsfilter --> adult_filter_level In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> iconfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\p2p --> visible In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\resultsfilter --> custom_filter_phrases In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\channels\websearch --> channelfile In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:21 c:\windows\rundl132.exe In Quarantäne gestellt Trace.File.viking!E1
04.08.2012 22:31:21 c:\windows\rundll16.exe In Quarantäne gestellt Trace.File.browseraid.rundll16!E1
04.08.2012 22:31:21 Value: hkey_current_user\software\kazaa\userdetails --> autoconnected In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:20 Value: hkey_current_user\software\kazaa\channels\websearch --> channeltype In Quarantäne gestellt Trace.Registry.kazaa!E1
04.08.2012 22:31:19 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 22:31:18 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:58 Value: hkey_current_user\software\kazaa\resultsfilter --> bogus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:58 Value: hkey_current_user\software\kazaa\resultsfilter --> custom_filter_phrases In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_local_machine\software\classes\sig2dat --> url protocol In Quarantäne gestellt Trace.Registry.trustyfiles!E1
04.08.2012 09:52:58 Value: hkey_current_user\software\kazaa\localcontent --> disablesharing In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_current_user\software\kazaa\transfer --> concurrentuploads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:58 Value: hkey_current_user\software\kazaa\advanced --> supernode In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_current_user\software\kazaa\transfer --> concurrentdownloads In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_current_user\software\kazaa\resultsfilter --> virus_filter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:58 Value: hkey_current_user\software\kazaa\localcontent --> downloaddir In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_current_user\software\k-sig --> usealternatemethod In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:58 Value: hkey_current_user\software\kazaa\k-lite --> installsig In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:58 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_classes_root\sig2dat --> url protocol In Quarantäne gestellt Trace.Registry.trustyfiles!E1
04.08.2012 09:52:59 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_current_user\software\kazaa\socks --> enabled In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_current_user\software\kazaa\transfer --> uploadbandwidth In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:59 Value: hkey_current_user\software\kazaa\resultsfilter --> showdisableadultfilter In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 09:52:58 Value: hkey_current_user\software\kazaa\advanced --> maxsearchresult In Quarantäne gestellt Trace.Registry.kazaa lite resurrection!E1
04.08.2012 00:10:56 C:\Users\JanHH\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UUZ5NS63\956585[1].htm Gelöscht AdWare.JS.Pornpop!E2
03.08.2012 23:55:07 C:\Users\JanHH\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UUZ5NS63\956585[1].htm Datei gesperrt, Entfernung bei Reboot AdWare.JS.Pornpop!E2
01.08.2012 21:17:30 C:\Users\JanHH\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRC5MGCK\categories[1].htm Gelöscht AdWare.JS.Pornpop!E2
01.08.2012 21:17:27 C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe Gelöscht Behavior.Spyware
01.08.2012 21:17:24 C:\Users\JanHH\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YY2OECQK\gaymoviesarch_com[1].htm Gelöscht AdWare.JS.Pornpop!E2
01.08.2012 21:17:22 c:\windows\system32\regsvr.exe Gelöscht Trace.File.elitespy!E1
01.08.2012 21:17:20 c:\windows\rundl132.exe Gelöscht Trace.File.viking!E1
01.08.2012 21:17:17 C:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\66389bb9-2a2c1ff7 Gelöscht Exploit.Java.CVE-2008-5353!E2
01.08.2012 21:17:10 C:\Users\JanHH\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\189d60f-450e027e Gelöscht Exploit.Java.CVE-2008-5353!E2
01.08.2012 21:04:48 C:\Users\JanHH\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MRC5MGCK\categories[1].htm Datei gesperrt, Entfernung bei Reboot AdWare.JS.Pornpop!E2
01.08.2012 20:42:44 C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe Datei nicht gefunden Behavior.TrojanDownloader
01.08.2012 20:42:39 C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe In Quarantäne gestellt Behavior.Spyware
01.08.2012 20:17:07 C:\Users\JanHH\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YY2OECQK\gaymoviesarch_com[1].htm Datei gesperrt, Entfernung bei Reboot AdWare.JS.Pornpop!E2

Jan80 24.08.2012 00:34
Hallo nochmal....hatte das LOG in meiner Schicht nochmal selber angeschaut und fragte mich die ganze Zeit, was Kazza und viel schlimmer noch, sogar Pornoseiten auf meinem PC zusuchen hatten:headbang:...naja ich muss da ein wenig ausholen, hatte meine beiden Neffen zusammen für 2 Wochen in den Ferien hier...und mit Ihnen heute Nachmittag mal nen ernstes wörtchen gesprochen. Naja, Kazaa war wohl installiert, weil sie sich was runtergeladen haben (so sagten sie) um sich das zubrennen? Naja und Pornoseiten haben die sich auch angeschaut...habe denen gesagt, das sie die CD auf keinen Fall auf Ihrem PC packen sollen. Ein wenig Angst habe ich Ihnen auch gemacht, habe dem einen gesagt, das mein Bankkonto fast leer geräumt wurde(Gott bewahre) wegen Ihrer spielereien...bin natürlich echt sauer. Aber gut ,war wohl jugendlicher leichtsinn. Hoffe mir wird dennoch geholfen...nich das ich noch nen Backdoor oder Rootkit drauf habe der sich so schön versteckt. Vielen Dank im vorraus.

LG Jan

PS: werde mal den ESET-Online Scanner laufen lassen.

Jan80 27.08.2012 16:01
Mir mag wohl keiner mehr helfen?

markusg 28.08.2012 17:54
sorry, übersehen
und hier:
JanHH\Downloads\cr-ggrg7\keygen.exe
dies ist illegale software, ein keygen um programme illegal freizuschalten, da kann ich dir nur beim formatieren helfen.
der pc muss neu aufgesetzt und dann abgesichert werden
1. Datenrettung:2. Formatieren, Windows neu instalieren:3. PC absichern: http://www.trojaner-board.de/96344-a...-rechners.html
ich werde außerdem noch weitere punkte dazu posten.
4. alle Passwörter ändern!
5. nach PC Absicherung, die gesicherten Daten prüfen und falls sauber: zurückspielen.
6. werde ich dann noch was zum absichern von Onlinebanking mit Chip Card Reader + Star Money sagen.

Jan80 31.08.2012 17:00
Hallo Marcus,

Wie ich schon beschrieben hatte, habe ich mit derartigen Sachen nix am Hut und das meinen Neffen zuverdanken die sich in irgendeiner Tauschbörse ausgetobt haben, während ich arbeiten war...schade, das ich nun dafür bluten soll. Dennoch Danke für die Hilfe.


Alle Zeitangaben in WEZ +1. Es ist jetzt 01:15 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131