Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Win XP keine Icons kein Taskmanager und Leiste sowie keine Maustastenfunktion (https://www.trojaner-board.de/130089-win-xp-keine-icons-kein-taskmanager-leiste-keine-maustastenfunktion.html)

lionos 25.01.2013 20:48
Win XP keine Icons kein Taskmanager und Leiste sowie keine Maustastenfunktion
 
Hallo an alle als Hilfesuchender in Sachen Viren Trojaner etc.
wie im Titel bereits erwähnt habe bei meinem PC seit kurzem das Problem das
alle Icons verschwunden sind es ist nur der blanke Desktop zu sehen der Mauszeiger ist vorhanden jedoch sind die beiden Maustasten ohne Funktion der Taskmanager läßt sich auch nicht aufrufen, im abgesicherten Modus läuft er einwandfrei allerdings kann ich trotz Aktivierung keinen Wiederherstellungspunkt anwählen. Meine Frage daher könnte es sich um einen Schädling handeln? Im Anhang das log von Hijack.
greets lionos
PHP-Code:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:19:37, on 25.01.2013
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Dokumente und Einstellungen\Gerhard\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - (no file)
O2 - BHO: DVDVideoSoftTB - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll
O3 - Toolbar: &TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~1\TerraTec\TERRAT~1\THCDES~1.DLL
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe
O4 - HKLM\..\Run: [SRFirstRun] rundll32 srclient.dll,CreateFirstRunRp
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [mcui_exe] "C:\Programme\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [mcpltui_exe] "C:\Programme\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Programme\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [McAfee McItInfo] C:\DOKUME~1\Gerhard\LOKALE~1\Temp\mcitinfo_1358792733.exe /itinsfin:C:\DOKUME~1\Gerhard\LOKALE~1\Temp\mcininfo_1358792733.ini 
O4 - HKCU\..\Run: [AnyDVD] C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DVDVideoSoftIEHelpers\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1232650270234
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1272195241796
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~1\mcafee\msc\mcsniepl.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Programme\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Programme\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Programme\Gemeinsame Dateien\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Personal Firewall (McMPFSvc) - McAfee, Inc. - C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - (no file)
O23 - Service: McAfee Anti-Malware Core (mfecore) - McAfee, Inc. - C:\Programme\Gemeinsame Dateien\McAfee\AMCore\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Programme\Gemeinsame Dateien\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\WINDOWS\system32\mfevtps.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Programme\TomTom HOME 2\TomTomHOMEService.exe 

cosinus 26.01.2013 22:05
Hallo und :hallo:

Lesestoff:
Bitte keine Hijackthis-Logfiles posten!!!

Zitat:
Zitat von Larusso (Beitrag 614538)
Uns ist klar, dass HijackThis wahrscheinlich eines der bekanntesten Analysetools ist.
Jedoch scannt es nur noch sehr oberflächlich und gibt uns für eine genaue Analyse eures Systems zu wenig Informationen.

Darum, bitte keine HijackThis Logfiles posten, sondern folgendes lesen und abarbeiten.

http://www.trojaner-board.de/69886-a...-beachten.html

Nur mit diesen Informationen können wir euch helfen.

Danke :daumenhoc



Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner?
Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs posten!

Zitat:
Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

lionos 27.01.2013 14:42
Hallo Danke für die Erklärung des Posten in Code -Tags und Sorry das mit Hijack habe ich zu spät gelesen!
Ich bin lt. Anleitung vorgegangen 1.Defogger 2.OTL und 3.GMER hier die logs:

Code:
OTL logfile created on: 26.01.2013 14:07:32 - Run 3
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Dokumente und Einstellungen\Gerhard\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,47 Gb Available Physical Memory | 73,55% Memory free
3,85 Gb Paging File | 3,55 Gb Available in Paging File | 92,31% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 298,08 Gb Total Space | 229,61 Gb Free Space | 77,03% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 191,77 Gb Free Space | 41,17% Space Free | Partition Type: NTFS
Drive F: | 29,44 Gb Total Space | 7,46 Gb Free Space | 25,34% Space Free | Partition Type: NTFS
 
Computer Name: GERFRUEH-9EFD7D | User Name: Gerhard | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.01.25 19:03:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\OTL.exe
PRC - [2012.10.07 03:13:42 | 000,184,288 | ---- | M] (McAfee, Inc.) -- C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe
PRC - [2008.09.05 23:30:04 | 000,952,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\WgaTray.exe
PRC - [2004.08.04 13:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2009.02.27 16:41:26 | 000,311,296 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU
MOD - [2004.11.02 21:16:40 | 000,121,856 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
 
 
========== Services (SafeList) ==========
 
SRV - File not found [Auto | Stopped] --  -- (McShield)
SRV - [2013.01.19 12:16:15 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.01.12 03:27:33 | 000,170,912 | ---- | M] (Oracle Corporation) [Disabled | Stopped] -- C:\Programme\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013.01.10 20:06:31 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.11.09 06:53:22 | 000,167,344 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\WINDOWS\system32\mfevtps.exe -- (mfevtp)
SRV - [2012.11.09 06:50:10 | 000,168,880 | ---- | M] () [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV - [2012.10.07 03:13:42 | 000,184,288 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe -- (McProxy)
SRV - [2012.10.07 03:13:42 | 000,184,288 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe -- (mcpltsvc)
SRV - [2012.10.07 03:13:42 | 000,184,288 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV - [2012.10.07 03:13:42 | 000,184,288 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe -- (HomeNetSvc)
SRV - [2012.10.06 07:28:42 | 000,632,344 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\McAfee\AMCore\mcshield.exe -- (mfecore)
SRV - [2012.09.12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012.08.31 12:20:06 | 000,167,784 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Mcafee\McSvcHost\McSvHost.exe -- (McAfee SiteAdvisor Service)
SRV - [2012.08.11 16:43:06 | 000,055,184 | ---- | M] (Apple Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2012.01.23 05:43:08 | 000,092,592 | ---- | M] (TomTom) [Auto | Stopped] -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2011.09.15 12:06:04 | 000,088,576 | ---- | M] () [Auto | Stopped] -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011.05.24 10:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011.04.26 13:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2010.05.04 21:22:20 | 000,072,704 | ---- | M] (Adobe Systems) [Disabled | Stopped] -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
SRV - [2010.01.09 20:37:50 | 004,640,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010.01.09 20:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005.09.20 17:22:02 | 000,159,744 | ---- | M] (Acronis) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOKUME~1\Gerhard\LOKALE~1\Temp\kwrorkow.sys -- (kwrorkow)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012.11.09 06:56:16 | 000,060,480 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\cfwids.sys -- (cfwids)
DRV - [2012.11.09 06:53:02 | 000,091,168 | ---- | M] (McAfee, Inc.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\mfetdi2k.sys -- (mfetdi2k)
DRV - [2012.11.09 06:51:12 | 000,565,352 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\drivers\mfehidk.sys -- (mfehidk)
DRV - [2012.11.09 06:50:30 | 000,084,432 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfendisk.sys -- (mfendiskmp)
DRV - [2012.11.09 06:50:30 | 000,084,432 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfendisk.sys -- (mfendisk)
DRV - [2012.11.09 06:50:20 | 000,362,640 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfefirek.sys -- (mfefirek)
DRV - [2012.11.09 06:50:00 | 000,065,488 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfebopk.sys -- (mfebopk)
DRV - [2012.11.09 06:49:40 | 000,234,824 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfeavfk.sys -- (mfeavfk)
DRV - [2012.11.09 06:49:10 | 000,132,912 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfeapfk.sys -- (mfeapfk)
DRV - [2012.11.02 01:46:50 | 000,252,200 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfencbdc.sys -- (mfencbdc)
DRV - [2012.11.02 01:46:50 | 000,081,456 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfencrk.sys -- (mfencrk)
DRV - [2012.08.26 13:56:17 | 000,121,248 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2012.05.28 10:28:04 | 000,147,472 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HipShieldK.sys -- (HipShieldK)
DRV - [2010.11.30 17:06:04 | 006,261,352 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2010.11.26 05:17:40 | 005,555,712 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010.11.06 13:11:12 | 000,035,008 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\libusb0.sys -- (libusb0)
DRV - [2010.10.28 15:58:44 | 000,272,232 | ---- | M] (Realtek Semiconductor Corporation                          ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2010.06.22 18:01:50 | 000,021,248 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\htcnprot.sys -- (htcnprot)
DRV - [2009.11.18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009.11.18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009.06.17 17:56:24 | 000,079,248 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2009.06.17 17:55:26 | 000,063,248 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2009.06.17 17:55:18 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2009.06.10 00:49:32 | 000,024,576 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ANDROIDUSB.sys -- (HTCAND32)
DRV - [2009.01.27 20:16:05 | 000,217,664 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\timntr.sys -- (timounter)
DRV - [2009.01.27 20:16:05 | 000,030,080 | ---- | M] (Acronis) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2009.01.27 20:16:00 | 000,096,032 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\snapman.sys -- (snapman)
DRV - [2009.01.22 19:36:57 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2008.07.02 20:38:14 | 000,089,600 | R--- | M] (ATI Research Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2007.12.10 17:55:00 | 000,247,296 | R--- | M] (DTV-DVB Provide) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MtsBda.sys -- (MTSBDA)
DRV - [2007.10.28 16:35:14 | 000,583,128 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\ACEDRV10.sys -- (acedrv10)
DRV - [2007.10.26 14:53:46 | 000,250,560 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\acehlp10.sys -- (acehlp10)
DRV - [2006.09.04 15:45:00 | 000,016,896 | R--- | M] (DTV-DVB) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MtsHid.sys -- (MtsHID)
DRV - [2004.08.04 13:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2001.08.18 04:33:10 | 000,320,384 | ---- | M] (Matrox Graphics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\G200m.sys -- (G200)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {0F4625B1-78AB-4C7A-B216-79D7660E9CEB}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=101067&mntrId=78d03c29000000000000001fd02e3b2d
IE - HKCU\..\SearchScopes\{0F4625B1-78AB-4C7A-B216-79D7660E9CEB}: "URL" = hxxp://www.google.de/search?q={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKCU\..\SearchScopes\{CF5ABA85-BF18-40B4-A726-75515C7FE6A1}: "URL" = hxxp://search.yahoo.com/search?fr=mcafee&p={SearchTerms}
IE - HKCU\..\SearchScopes\{DDB48027-FFEE-4DCC-98A6-0696B842BE49}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^AT&apn_uid=708B7C89-449C-4C71-90B9-7E02B4FAFC1A&apn_sauid=9B4C96F6-0ED3-4650-AE1B-B7E26673B6AF
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.at/"
FF - prefs.js..extensions.enabledAddons: %7BCAFEEFAC-0016-0000-0031-ABCDEFFEDCBA%7D:6.0.31
FF - prefs.js..extensions.enabledAddons: %7B4ED1F68A-5463-4931-9384-8FFF5ED91D92%7D:3.5.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.1
FF - prefs.js..extensions.enabledItems: {031cedaa-726d-b0a8-7ba6-b3c437c89f13}:4.6.6.3
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..keyword.URL: "hxxp://search.sweetim.com/search.asp?src=2&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Programme\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Programme\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Musicnotes.com/Musicnotes Viewer,version=1.18.3: C:\Programme\Musicnotes\npmusicn.dll (Musicnotes, Inc.)
FF - HKLM\Software\MozillaPlugins\@Sibelius.com/Scorch Plugin,version=6.1.5.22: C:\Programme\Musicnotes\npsibelius.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Programme\Gemeinsame Dateien\McAfee\SystemCore [2013.01.19 21:48:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Programme\McAfee\SiteAdvisor [2013.01.19 21:49:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2013.01.19 12:16:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2013.01.19 12:16:11 | 000,000,000 | ---D | M]
 
[2009.05.30 18:14:36 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Extensions
[2009.02.01 14:21:48 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Extensions\home2@tomtom.com
[2009.05.30 18:14:36 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Extensions\mozswing@mozswing.org
[2013.01.18 14:00:54 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\extensions
[2013.01.18 14:00:54 | 000,000,000 | ---D | M] (DVDVideoSoftTB) -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2012.10.07 13:52:25 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\extensions\toolbar@ask.com
[2012.12.15 11:27:38 | 000,036,139 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2012.11.23 14:17:26 | 000,804,627 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.10.07 13:52:25 | 000,002,299 | ---- | M] () -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\searchplugins\askcom.xml
[2011.03.21 15:15:10 | 000,000,931 | ---- | M] () -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\searchplugins\conduit.xml
[2012.12.01 20:14:15 | 000,003,915 | ---- | M] () -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\searchplugins\sweetim.xml
[2013.01.19 21:20:33 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.01.19 12:16:09 | 000,000,000 | ---D | M] (z) -- C:\Programme\Mozilla Firefox\extensions\{031cedaa-726d-b0a8-7ba6-b3c437c89f13}
[2013.01.19 21:20:33 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2013.01.19 21:49:30 | 000,000,000 | ---D | M] (McAfee SiteAdvisor) -- C:\PROGRAMME\MCAFEE\SITEADVISOR
[2013.01.19 12:16:15 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012.06.23 13:39:14 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.01.12 19:06:54 | 000,002,288 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\babylon.xml
[2012.08.30 18:03:53 | 000,002,465 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012.06.23 13:39:14 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.23 13:39:14 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.09.16 10:54:55 | 000,002,024 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\McSiteAdvisor.xml
[2012.06.23 13:39:14 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.23 13:39:14 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = hxxp://www.google.de/search?q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage: hxxp://www.google.com/
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\10.0.648.204\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\10.0.648.204\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\10.0.648.204\gcswf32.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Programme\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java(TM) Platform SE 6 U15 (Enabled) = C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.150.3 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npdeploytk.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Programme\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Reallusion CT4Player for Mozilla (Enabled) = C:\Programme\Mozilla Firefox\plugins\npRLCT4Player.dll
CHR - plugin: ScorchPlugin (Enabled) = C:\Programme\Mozilla Firefox\plugins\NPSibelius.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programme\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
CHR - plugin: Picasa (Enabled) = C:\Programme\Google\Picasa3\npPicasa3.dll
CHR - plugin: Musicnotes (Enabled) = C:\Programme\Musicnotes\npmusicn.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Programme\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: McAfee SiteAdvisor = C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.131.2_0\
 
O1 HOSTS File: ([2004.08.04 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - No CLSID value found.
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (&TerraTec Home Cinema) - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Programme\TerraTec\TerraTec Home Cinema\THCDeskBand.dll (TerraTec Electronic GmbH)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (&TerraTec Home Cinema) - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Programme\TerraTec\TerraTec Home Cinema\THCDeskBand.dll (TerraTec Electronic GmbH)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.)
O4 - HKLM..\Run: [ATICustomerCare] C:\Programme\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [mcpltui_exe] C:\Programme\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [mcui_exe] C:\Programme\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe (Acronis)
O4 - HKCU..\Run: [AnyDVD] C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe (SlySoft, Inc.)
O4 - HKCU..\Run: [McAfee McItInfo] C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Temp\mcitinfo_1358792733.exe (McAfee, Inc.)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Neuer Wert #1 = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Download with &Media Finder - Reg Error: Value error. File not found
O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1232650270234 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1272195241796 (MUWebControl Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Programme\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: D:\Fotos\Icons\Desktop Hintergrund.bmp
O24 - Desktop BackupWallPaper: D:\Fotos\Icons\Desktop Hintergrund.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS\System32\relog_ap.dll (Acronis)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.01.22 19:27:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011.12.21 05:23:52 | 046,524,572 | ---- | M] () - F:\autorun.upg -- [ NTFS ]
O33 - MountPoints2\{f8d42c81-ea2f-11dd-90dc-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{f8d42c81-ea2f-11dd-90dc-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{f8d42c81-ea2f-11dd-90dc-806d6172696f}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.01.25 20:19:14 | 000,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\HiJackThis.exe
[2013.01.25 19:53:02 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Gerhard\Recent
[2013.01.25 19:44:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Malwarebytes
[2013.01.25 19:44:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2013.01.25 19:44:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2013.01.25 19:44:41 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2013.01.25 19:44:41 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2013.01.25 19:44:17 | 010,156,344 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\mbam-setup-1.70.0.1100.exe
[2013.01.20 19:20:40 | 028,181,408 | ---- | C] (TuneUp Software) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\TuneUpUtilities2013_de-DE.exe
[2013.01.20 10:58:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\McAfee
[2013.01.19 21:49:29 | 000,147,472 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\HipShieldK.sys
[2013.01.19 21:29:38 | 000,167,344 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\mfevtps.exe
[2013.01.19 21:24:29 | 005,090,696 | ---- | C] (McAfee, Inc.) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\McAfeeSetup.exe
[2013.01.19 19:41:45 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013.01.19 19:41:45 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013.01.19 19:41:45 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013.01.19 19:41:24 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2013.01.19 13:51:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Winferno
[2013.01.19 12:28:23 | 000,237,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2013.01.19 12:26:47 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Security Client
[2013.01.19 12:16:08 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[2013.01.18 16:49:00 | 000,014,664 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\stinger.sys
[2013.01.18 16:48:15 | 000,000,000 | ---D | C] -- C:\Programme\stinger
[2013.01.18 16:39:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
[2013.01.15 19:22:44 | 000,084,432 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfendisk.sys
[2013.01.12 18:51:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Gerhard\Eigene Dateien\Neuer Ordner
[2013.01.10 20:06:24 | 016,369,160 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2013.01.07 18:28:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[19 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.01.26 13:44:49 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Gerhard\defogger_reenable
[2013.01.25 21:02:46 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Gerhard\Desktop\Defogger.exe
[2013.01.25 20:21:57 | 000,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\HiJackThis.exe
[2013.01.25 20:00:06 | 000,001,230 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.01.25 19:59:16 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.01.25 19:44:45 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013.01.25 19:11:30 | 010,156,344 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\mbam-setup-1.70.0.1100.exe
[2013.01.25 19:03:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\OTL.exe
[2013.01.20 20:12:31 | 000,001,092 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013.01.20 20:06:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.01.20 19:57:23 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013.01.20 19:31:59 | 000,000,386 | -H-- | M] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2013.01.20 19:21:00 | 028,181,408 | ---- | M] (TuneUp Software) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\TuneUpUtilities2013_de-DE.exe
[2013.01.19 21:32:09 | 000,001,912 | ---- | M] () -- C:\WINDOWS\epplauncher.mif
[2013.01.19 21:24:31 | 005,090,696 | ---- | M] (McAfee, Inc.) -- C:\Dokumente und Einstellungen\Gerhard\Desktop\McAfeeSetup.exe
[2013.01.19 13:51:14 | 000,000,370 | ---- | M] () -- C:\WINDOWS\tasks\rpc.job
[2013.01.18 17:04:51 | 000,014,664 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\stinger.sys
[2013.01.18 14:12:46 | 000,002,467 | ---- | M] () -- C:\Dokumente und Einstellungen\Gerhard\Desktop\CorelDRAW 12.lnk
[2013.01.14 20:23:50 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013.01.14 19:20:36 | 000,000,125 | -HS- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
[2013.01.12 13:26:10 | 000,230,912 | ---- | M] () -- C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.01.12 03:30:20 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013.01.12 03:26:16 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013.01.12 03:24:49 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013.01.10 20:06:27 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.01.10 20:06:27 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.01.10 20:06:24 | 016,369,160 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2013.01.07 08:02:04 | 000,365,568 | ---- | M] () -- C:\Dokumente und Einstellungen\Gerhard\Desktop\gmer.exe
[2013.01.03 10:52:52 | 000,374,247 | ---- | M] () -- C:\WINDOWS\setupapi.old
[2013.01.01 15:37:03 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[19 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.01.26 13:44:49 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\defogger_reenable
[2013.01.25 21:10:49 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\Desktop\Defogger.exe
[2013.01.25 21:06:03 | 000,365,568 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\Desktop\gmer.exe
[2013.01.25 19:44:45 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013.01.19 13:51:14 | 000,000,370 | ---- | C] () -- C:\WINDOWS\tasks\rpc.job
[2013.01.19 12:37:16 | 000,000,386 | -H-- | C] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2013.01.19 12:27:21 | 000,001,912 | ---- | C] () -- C:\WINDOWS\epplauncher.mif
[2013.01.15 19:29:12 | 000,002,641 | ---- | C] () -- C:\WINDOWS\System32\drivers\mfencrk.inf
[2013.01.15 19:29:11 | 000,002,946 | ---- | C] () -- C:\WINDOWS\System32\drivers\mfencbdc.inf
[2012.09.23 10:10:05 | 000,000,023 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\kodakpcd.ini
[2012.05.13 21:41:45 | 000,513,902 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-1390067357-1035525444-682003330-1003-0.dat
[2012.05.13 21:41:39 | 000,513,902 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2012.05.10 21:11:21 | 000,082,460 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\clip_image002.jpg
[2012.03.04 15:56:30 | 000,000,041 | ---- | C] () -- C:\WINDOWS\System32\SYNSOPOS.exe.cfg
[2012.03.04 15:56:29 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\SYNSOPOS.exe
[2012.02.16 19:34:51 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.01.03 19:59:11 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\sqlite36_engine.dll
[2011.11.13 15:28:40 | 000,000,248 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\Goya.ini
[2011.11.13 15:28:14 | 000,000,046 | ---- | C] () -- C:\WINDOWS\Goya.INI
[2011.07.18 19:32:28 | 000,001,099 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\ShiftN.ini
[2011.03.02 06:57:44 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2011.03.02 06:57:40 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011.03.02 06:57:40 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011.03.02 06:57:40 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011.03.02 06:57:40 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2010.01.05 20:33:26 | 000,000,760 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\setup_ldm.iss
[2009.12.03 12:49:29 | 000,061,224 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\GoToAssistDownloadHelper.exe
[2009.02.07 14:06:13 | 001,513,587 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\mdbu.bin
[2009.01.27 19:27:06 | 000,000,125 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
[2009.01.26 22:24:22 | 000,230,912 | ---- | C] () -- C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== ZeroAccess Check ==========
 
[2009.01.22 19:43:02 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2004.08.04 13:00:00 | 001,483,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2004.08.04 13:00:00 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2004.08.04 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2012.12.25 15:44:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2009.02.01 12:52:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
[2012.10.07 13:41:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ask
[2012.01.12 19:06:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2012.05.24 18:56:12 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2012.05.24 18:56:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJWSpt
[2011.05.01 11:05:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CMUV
[2012.09.16 10:47:58 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2010.11.28 20:03:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DVBViewer GE
[2009.01.28 21:54:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Elaborate Bytes
[2012.03.04 16:01:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eLicenser
[2009.07.19 20:47:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fotobuch.de AG
[2009.07.18 13:23:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HappyFoto
[2012.09.21 11:50:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2009.10.03 10:24:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Metacafe
[2010.01.30 20:01:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Musicnotes
[2012.05.13 19:11:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2013.01.19 20:09:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
[2009.01.28 19:02:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft
[2013.01.07 18:28:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM
[2012.03.04 15:58:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Syncrosoft
[2011.02.02 23:19:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2011.06.23 22:19:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TerraTec
[2009.02.01 14:21:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TomTom
[2012.09.30 15:07:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2013.01.19 13:51:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Winferno
[2010.02.20 12:14:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WinZipSE
[2012.09.16 10:47:58 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2010.07.10 11:50:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009.09.27 18:24:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009.06.11 14:46:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2012.09.30 15:07:06 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012.01.12 19:06:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Babylon
[2011.12.02 15:43:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\calibre
[2009.09.10 13:24:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Canon
[2009.02.22 19:06:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\CD-LabelPrint
[2009.11.07 20:11:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\CoffeeCup Software
[2012.12.06 18:44:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DarkWave Studio
[2011.08.08 17:06:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\de.magix-fotos.fotobuch.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
[2012.01.12 21:29:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DesktopIconForAmazon
[2011.02.24 21:58:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DiskAid
[2012.10.06 15:14:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DVDVideoSoft
[2012.09.30 15:22:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\DVDVideoSoftIEHelpers
[2009.12.29 19:46:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\EPSON
[2011.01.26 19:11:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\FileZilla
[2009.07.19 20:47:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\fotobuch.de AG
[2011.10.26 14:16:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\GrabPro
[2009.03.05 20:22:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Haenlein-Software
[2011.10.31 19:29:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\HartlauerFotoService3
[2012.01.20 09:25:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\HTC
[2011.02.25 13:40:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2010.01.24 19:43:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Leadertech
[2012.09.22 14:46:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\MAGIX
[2012.01.12 19:08:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Media Finder
[2012.09.21 22:23:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\MotionStudios
[2012.09.30 15:06:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\OpenCandy
[2012.01.03 21:08:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\OpenOffice.org
[2010.05.04 18:41:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Opera
[2011.10.26 14:46:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Orbit
[2011.02.26 15:17:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Outlook
[2010.08.30 14:38:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\PanoramaStudio
[2013.01.07 18:29:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\PriceGong
[2011.10.26 14:16:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\ProgSense
[2012.05.13 19:13:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Samsung
[2012.07.08 11:16:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Smart Panel
[2011.02.24 22:09:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Software4u
[2011.06.23 22:18:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\TerraTec
[2009.02.01 14:21:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\TomTom
[2012.09.30 15:07:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\TuneUp Software
[2009.01.22 20:27:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Windows Desktop Search
[2009.01.26 16:21:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Windows Search
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 72 bytes -> C:\WINDOWS:1EE0B4C75C493001
@Alternate Data Stream - 192 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A5B56640
@Alternate Data Stream - 156 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:06A7F9ED
@Alternate Data Stream - 153 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:D1B5B4F1

< End of report >
Code:
GMER 2.0.18444 - hxxp://www.gmer.net
Rootkit scan 2013-01-27 14:10:22
Windows 5.1.2600 Service Pack 2 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-8 SAMSUNG_HD322HJ rev.1AC01113 298,09GB
Running: gmer.exe; Driver: C:\DOKUME~1\Gerhard\LOKALE~1\Temp\kwrorkow.sys


---- Kernel code sections - GMER 2.0 ----

.reloc  C:\WINDOWS\system32\drivers\acehlp10.sys                                                                                                          section is executable [0xBA4DBB80, 0x380E2, 0xE0000060]

---- Registry - GMER 2.0 ----

Reg    HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7547F477-3F24-FB05-4589-6C4F6A9999DB}                                 
Reg    HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{92C1845F-9629-E837-45B3-5CE2552BF71B}                                 
Reg    HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{92C1845F-9629-E837-45B3-5CE2552BF71B}@pahkcmcamhdadjfkagekbgbhjjogehob  0x61 0x62 0x6D 0x6F ...

---- EOF - GMER 2.0 ----

cosinus 28.01.2013 10:38
Die Frage war aber aber auch, ob ein Virenscanner jemals Funde zu verzeichnen hatte und wenn ja, solltest du dazu die Logs posten.

OTL und GMER sind Spezialtools und keine Virenscanner!

lionos 29.01.2013 18:03
Hallo das kommt jetzt noch dazu das sich der Echtzeitscan von Mcaffee nicht mehr aktivieren läßt bzw. es steht das er abgelaufen sei obwohl in der Kontoinfo die korrekte noch verbleibende Laufzeit angegeben wird ich habe auch nach log Dateien gesucht aber keine gefunden.
greets rodeni

cosinus 29.01.2013 21:00
Zitat:
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Warum bitte eine Professional Edition für Windows? Wer braucht das als Heimanwender?
Ist das rein zufällig ein Büro-/Firmen-PC? Oder ein Uni-Rechner?

Und warum bitte wurden die Updates so sträflich vernchlässigt?! :balla:
WinXP SP2 und IE6 ist ein Stand, auf dem XP vor fast zehn Jahren mal aktuell war :nono:

lionos 29.01.2013 21:14
Ist nicht vernachlässigt da ist bereits eine Reparaturinstallation gelaufen! (ohne erfolg)

cosinus 29.01.2013 21:36
Was ist mit meiner anderen Frage?

lionos 29.01.2013 21:45
Das ist mein Privat PC das war ein Komplettsystem das ich beim Händler vor Ort so gekauft habe!?

cosinus 29.01.2013 22:00
Ich bin immer sehr hellhörif wenn ich Professional Editionen in den Logs sehe :rolleyes:


Bevor wir uns an die Arbeit machen, möchte ich dich bitten, folgende Punkte vollständig und aufmerksam zu lesen.
  • Lies dir meine Anleitungen, die ich im Laufe dieses Strangs hier posten werde, aufmerksam durch. Frag umgehend nach, wenn dir irgendetwas unklar sein sollte, bevor du anfängst meine Anleitungen umzusetzen.

  • Solltest du bei einem Schritt Probleme haben, stoppe dort und beschreib mir das Problem so gut du kannst. Manchmal erfordert ein Schritt den vorhergehenden.

  • Bitte nur Scans durchführen zu denen du von einem Helfer aufgefordert wurdest! Installiere / Deinstalliere keine Software ohne Aufforderung!

  • Poste die Logfiles direkt in deinen Thread (bitte in CODE-Tags) und nicht als Anhang, ausser du wurdest dazu aufgefordert. Logs in Anhängen erschweren mir das Auswerten!

  • Beachte bitte auch => Löschen von Logfiles und andere Anfragen

Note:
Sollte ich drei Tage nichts von mir hören lassen, so melde dich bitte in diesem Strang => Erinnerung an meinem Thread.
Nervige "Wann geht es weiter" Nachrichten enden mit Schließung deines Themas. Auch ich habe ein Leben abseits des Trojaner-Boards.


Malwarebytes Anti-Rootkit http://img.trojaner-board.de/malware...otkit/logo.png

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Entpacke das Archiv auf deinem Desktop.
  • Im neu erstellten Ordner starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

lionos 29.01.2013 22:52
Kein Fund lt. Abschlußmeldung!

Code:
Malwarebytes Anti-Rootkit BETA 1.01.0.1017
www.malwarebytes.org

Database version: v2013.01.18.09

Windows XP Service Pack 2 x86 NTFS (Safe Mode)
Internet Explorer 6.0.2900.2180
Gerhard :: GERFRUEH-9EFD7D [administrator]

29.01.2013 22:40:19
mbar-log-2013-01-29 (22-40-19).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 29879
Time elapsed: 26 minute(s), 12 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

cosinus 30.01.2013 11:09
1. aswMBR

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehlalarm!
  • Starte die aswMBR.exe Vista und Win7 User aswMBR per Rechtsklick "als Administrator ausführen"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.


2. TDSS-Killer

Download TDSS-Killer auf Desktop siehe => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtg4nzy0ywy5/settings_2012-09-04.png

lionos 30.01.2013 13:13
Hallo hier die Ergebnisse:

Code:
aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2013-01-30 12:53:26
-----------------------------
12:53:26.484    OS Version: Windows 5.1.2600 Service Pack 2
12:53:26.484    Number of processors: 2 586 0x170A
12:53:26.484    ComputerName: GERFRUEH-9EFD7D  UserName: Gerhard
12:53:32.296    Initialize success
12:53:57.687    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-8
12:53:57.687    Disk 0 Vendor: SAMSUNG_HD322HJ 1AC01113 Size: 305244MB BusType: 3
12:53:57.703    Disk 1  \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP3T0L0-1f
12:53:57.703    Disk 1 Vendor: SAMSUNG_HD502IJ 1AA01113 Size: 476940MB BusType: 3
12:53:57.718    Disk 0 MBR read successfully
12:53:57.734    Disk 0 MBR scan
12:53:57.734    Disk 0 Windows XP default MBR code
12:53:57.750    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS      305234 MB offset 63
12:53:57.765    Disk 0 scanning sectors +625121280
12:53:57.859    Disk 0 scanning C:\WINDOWS\system32\drivers
12:54:16.359    Service scanning
12:54:46.890    Modules scanning
12:54:55.000    Disk 0 trace - called modules:
12:54:55.015    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys
12:54:55.031    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a787ab8]
12:54:55.093    3 CLASSPNP.SYS[f765805b] -> nt!IofCallDriver -> \Device\0000007a[0x8a70f108]
12:54:55.171    5 ACPI.sys[f75ad620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-8[0x8a705d98]
12:54:55.234    Scan finished successfully
12:55:24.640    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Gerhard\Desktop\MBR.dat"
12:55:24.640    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Gerhard\Desktop\aswMBR.txt"
Code:
12:55:42.0062 1580  TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
12:55:42.0062 1580  ============================================================
12:55:42.0062 1580  Current date / time: 2013/01/30 12:55:42.0062
12:55:42.0062 1580  SystemInfo:
12:55:42.0062 1580 
12:55:42.0062 1580  OS Version: 5.1.2600 ServicePack: 2.0
12:55:42.0062 1580  Product type: Workstation
12:55:42.0062 1580  ComputerName: GERFRUEH-9EFD7D
12:55:42.0062 1580  UserName: Gerhard
12:55:42.0062 1580  Windows directory: C:\WINDOWS
12:55:42.0062 1580  System windows directory: C:\WINDOWS
12:55:42.0062 1580  Processor architecture: Intel x86
12:55:42.0062 1580  Number of processors: 2
12:55:42.0062 1580  Page size: 0x1000
12:55:42.0062 1580  Boot type: Safe boot
12:55:42.0062 1580  ============================================================
12:55:43.0421 1580  Drive \Device\Harddisk0\DR0 - Size: 0x4A85C4DE00 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
12:55:43.0421 1580  Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
12:55:43.0421 1580  Drive \Device\Harddisk2\DR4 - Size: 0x75C000000 (29.44 Gb), SectorSize: 0x200, Cylinders: 0xF02, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
12:55:43.0421 1580  ============================================================
12:55:43.0421 1580  \Device\Harddisk0\DR0:
12:55:43.0421 1580  MBR partitions:
12:55:43.0421 1580  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x254297C1
12:55:43.0421 1580  \Device\Harddisk1\DR1:
12:55:43.0421 1580  MBR partitions:
12:55:43.0421 1580  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C02
12:55:43.0421 1580  \Device\Harddisk2\DR4:
12:55:43.0421 1580  MBR partitions:
12:55:43.0421 1580  ============================================================
12:55:43.0453 1580  C: <-> \Device\Harddisk0\DR0\Partition1
12:55:43.0484 1580  D: <-> \Device\Harddisk1\DR1\Partition1
12:55:43.0500 1580  ============================================================
12:55:43.0500 1580  Initialize success
12:55:43.0500 1580  ============================================================
12:55:55.0984 1596  ============================================================
12:55:55.0984 1596  Scan started
12:55:55.0984 1596  Mode: Manual; SigCheck; TDLFS;
12:55:55.0984 1596  ============================================================
12:55:56.0750 1596  ================ Scan system memory ========================
12:55:56.0750 1596  System memory - ok
12:55:56.0750 1596  ================ Scan services =============================
12:55:57.0046 1596  Abiosdsk - ok
12:55:57.0046 1596  abp480n5 - ok
12:55:57.0234 1596  [ 0059FF74927A27395C5E190F9AA392DF ] acedrv10        C:\WINDOWS\system32\drivers\acedrv10.sys
12:55:57.0546 1596  acedrv10 - ok
12:55:57.0625 1596  [ 6625A32AD17A3FA6C7F405AEAC945AA7 ] acehlp10        C:\WINDOWS\system32\drivers\acehlp10.sys
12:55:57.0640 1596  acehlp10 - ok
12:55:57.0750 1596  [ 94B4741D2CF9ED38140B831293D1601A ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
12:55:57.0843 1596  ACPI - ok
12:55:57.0875 1596  [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
12:55:57.0937 1596  ACPIEC - ok
12:55:58.0031 1596  [ 3A43C4CA0A1C451EF72CAACFF3323ACA ] AcrSch2Svc      C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
12:55:58.0093 1596  AcrSch2Svc ( UnsignedFile.Multi.Generic ) - warning
12:55:58.0093 1596  AcrSch2Svc - detected UnsignedFile.Multi.Generic (1)
12:55:58.0140 1596  [ 8B46D5A1D3EF08232C04D0EAFB871FB2 ] Adobe LM Service C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
12:55:58.0187 1596  Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
12:55:58.0187 1596  Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
12:55:58.0328 1596  [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
12:55:58.0406 1596  AdobeFlashPlayerUpdateSvc - ok
12:55:58.0406 1596  adpu160m - ok
12:55:58.0515 1596  [ 841F385C6CFAF66B58FBD898722BB4F0 ] aec            C:\WINDOWS\system32\drivers\aec.sys
12:55:58.0609 1596  aec - ok
12:55:58.0671 1596  [ 5AC495F4CB807B2B98AD2AD591E6D92E ] AFD            C:\WINDOWS\System32\drivers\afd.sys
12:55:58.0734 1596  AFD - ok
12:55:58.0734 1596  Aha154x - ok
12:55:58.0750 1596  aic78u2 - ok
12:55:58.0765 1596  aic78xx - ok
12:55:58.0796 1596  [ 1AAB6C5F8376357CB9B16C38C42C4076 ] Alerter        C:\WINDOWS\system32\alrsvc.dll
12:55:58.0875 1596  Alerter - ok
12:55:58.0906 1596  [ 6596DD260FFDE1BDC994C1DF236307BB ] ALG            C:\WINDOWS\System32\alg.exe
12:55:58.0953 1596  ALG - ok
12:55:58.0953 1596  AliIde - ok
12:55:59.0437 1596  [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt        C:\WINDOWS\system32\drivers\Ambfilt.sys
12:56:00.0250 1596  Ambfilt - ok
12:56:00.0265 1596  amsint - ok
12:56:00.0328 1596  [ 8D3A55F7B7BE6B374479E5195F477226 ] AnyDVD          C:\WINDOWS\system32\Drivers\AnyDVD.sys
12:56:00.0343 1596  AnyDVD - ok
12:56:00.0437 1596  [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:56:00.0468 1596  Apple Mobile Device - ok
12:56:00.0562 1596  [ BECD5328E7869807D6557BE4FE60C72F ] AppMgmt        C:\WINDOWS\System32\appmgmts.dll
12:56:00.0640 1596  AppMgmt - ok
12:56:00.0703 1596  [ F0D692B0BFFB46E30EB3CEA168BBC49F ] Arp1394        C:\WINDOWS\system32\DRIVERS\arp1394.sys
12:56:00.0750 1596  Arp1394 - ok
12:56:00.0750 1596  asc - ok
12:56:00.0765 1596  asc3350p - ok
12:56:00.0781 1596  asc3550 - ok
12:56:00.0953 1596  [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
12:56:00.0984 1596  aspnet_state - ok
12:56:01.0000 1596  [ 02000ABF34AF4C218C35D257024807D6 ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
12:56:01.0062 1596  AsyncMac - ok
12:56:01.0125 1596  [ CDFE4411A69C224BD1D11B2DA92DAC51 ] atapi          C:\WINDOWS\system32\DRIVERS\atapi.sys
12:56:01.0187 1596  atapi - ok
12:56:01.0187 1596  Atdisk - ok
12:56:01.0375 1596  [ 4ADE3F07DE5F5376E6030E16B945A5EF ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
12:56:01.0906 1596  Ati HotKey Poller - ok
12:56:03.0328 1596  [ 3FFF73A29663EDA8EC7169A7CFDE29F4 ] ati2mtag        C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
12:56:06.0046 1596  ati2mtag - ok
12:56:06.0109 1596  [ 591A9EABB5EF5168E435C2F18B05DD76 ] AtiHdmiService  C:\WINDOWS\system32\drivers\AtiHdmi.sys
12:56:06.0140 1596  AtiHdmiService - ok
12:56:06.0171 1596  [ EC88DA854AB7D7752EC8BE11A741BB7F ] Atmarpc        C:\WINDOWS\system32\DRIVERS\atmarpc.sys
12:56:06.0234 1596  Atmarpc - ok
12:56:06.0281 1596  [ E98B8250398F6637B335A76BA8DFB602 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
12:56:06.0343 1596  AudioSrv - ok
12:56:06.0375 1596  [ D9F724AA26C010A217C97606B160ED68 ] audstub        C:\WINDOWS\system32\DRIVERS\audstub.sys
12:56:06.0421 1596  audstub - ok
12:56:06.0437 1596  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
12:56:06.0500 1596  Beep - ok
12:56:06.0656 1596  [ 3A5E54A9AB96EF2D273B58136FB58EFE ] BITS            C:\WINDOWS\system32\qmgr.dll
12:56:06.0953 1596  BITS - ok
12:56:07.0109 1596  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Programme\Bonjour\mDNSResponder.exe
12:56:07.0281 1596  Bonjour Service - ok
12:56:07.0359 1596  [ D8653DCD80CF2EBB333FC4FCC43A7DEF ] Browser        C:\WINDOWS\System32\browser.dll
12:56:07.0453 1596  Browser - ok
12:56:07.0484 1596  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k        C:\WINDOWS\system32\drivers\cbidf2k.sys
12:56:07.0546 1596  cbidf2k - ok
12:56:07.0578 1596  [ 6163ED60B684BAB19D3352AB22FC48B2 ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
12:56:07.0640 1596  CCDECODE - ok
12:56:07.0640 1596  cd20xrnt - ok
12:56:07.0687 1596  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio        C:\WINDOWS\system32\drivers\Cdaudio.sys
12:56:07.0734 1596  Cdaudio - ok
12:56:07.0781 1596  [ CD7D5152DF32B47F4E36F710B35AAE02 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
12:56:07.0843 1596  Cdfs - ok
12:56:07.0875 1596  [ AF9C19B3100FE010496B1A27181FBF72 ] Cdrom          C:\WINDOWS\system32\DRIVERS\cdrom.sys
12:56:07.0921 1596  Cdrom - ok
12:56:07.0968 1596  [ 67B20DA4727F54AEA29FDDAD810C898D ] cfwids          C:\WINDOWS\system32\drivers\cfwids.sys
12:56:07.0984 1596  cfwids - ok
12:56:07.0984 1596  Changer - ok
12:56:08.0031 1596  [ 234D52C63C67A8CF4AF9BECCE43BFB4A ] CiSvc          C:\WINDOWS\system32\cisvc.exe
12:56:08.0093 1596  CiSvc - ok
12:56:08.0125 1596  [ 0461868578D29DC18FB1C79933C5158A ] ClipSrv        C:\WINDOWS\system32\clipsrv.exe
12:56:08.0171 1596  ClipSrv - ok
12:56:08.0281 1596  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:56:08.0453 1596  clr_optimization_v2.0.50727_32 - ok
12:56:08.0515 1596  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:56:08.0687 1596  clr_optimization_v4.0.30319_32 - ok
12:56:08.0687 1596  CmdIde - ok
12:56:08.0703 1596  COMSysApp - ok
12:56:08.0734 1596  Cpqarray - ok
12:56:08.0796 1596  [ 1A5F9DB98DF7955B4C7CBDBF2C638238 ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
12:56:08.0859 1596  CryptSvc - ok
12:56:08.0875 1596  dac2w2k - ok
12:56:08.0875 1596  dac960nt - ok
12:56:09.0031 1596  [ 9F28FF58D6D67B123272869D89D14004 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
12:56:09.0234 1596  DcomLaunch - ok
12:56:09.0296 1596  [ 69F986B2688BA95A0D9362B0E233D5FF ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
12:56:09.0375 1596  Dhcp - ok
12:56:09.0437 1596  [ 00CA44E4534865F8A3B64F7C0984BFF0 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
12:56:09.0484 1596  Disk - ok
12:56:09.0500 1596  dmadmin - ok
12:56:09.0781 1596  [ 5789B83BA87FC84C3568CF86CACEF8CE ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
12:56:10.0156 1596  dmboot - ok
12:56:10.0218 1596  [ 084EB0A50A4F7B4705C8A57F234E5291 ] dmio            C:\WINDOWS\system32\DRIVERS\dmio.sys
12:56:10.0296 1596  dmio - ok
12:56:10.0328 1596  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
12:56:10.0375 1596  dmload - ok
12:56:10.0406 1596  [ FA2D9D1A9F6B5A88D01E1685CE2378BA ] dmserver        C:\WINDOWS\System32\dmserver.dll
12:56:10.0468 1596  dmserver - ok
12:56:10.0515 1596  [ A6F881284AC1150E37D9AE47FF601267 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
12:56:10.0578 1596  DMusic - ok
12:56:10.0609 1596  [ D1F5B71BBAEEE07B78980DBD878C0BC7 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
12:56:10.0671 1596  Dnscache - ok
12:56:10.0734 1596  [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc        C:\WINDOWS\System32\dot3svc.dll
12:56:10.0781 1596  Dot3svc ( UnsignedFile.Multi.Generic ) - warning
12:56:10.0781 1596  Dot3svc - detected UnsignedFile.Multi.Generic (1)
12:56:10.0781 1596  dpti2o - ok
12:56:10.0796 1596  [ 1ED4DBBAE9F5D558DBBA4CC450E3EB2E ] drmkaud        C:\WINDOWS\system32\drivers\drmkaud.sys
12:56:10.0859 1596  drmkaud - ok
12:56:10.0890 1596  [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost        C:\WINDOWS\System32\eapsvc.dll
12:56:10.0906 1596  EapHost ( UnsignedFile.Multi.Generic ) - warning
12:56:10.0906 1596  EapHost - detected UnsignedFile.Multi.Generic (1)
12:56:10.0953 1596  [ D71233D7CCC2E64F8715A20428D5A33B ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
12:56:10.0968 1596  ElbyCDIO - ok
12:56:11.0000 1596  [ 877A4512CC9074D6954776AF47021766 ] ERSvc          C:\WINDOWS\System32\ersvc.dll
12:56:11.0062 1596  ERSvc - ok
12:56:11.0109 1596  [ EDB6B81761BD60F32F740BBC40AFB676 ] Eventlog        C:\WINDOWS\system32\services.exe
12:56:11.0187 1596  Eventlog - ok
12:56:11.0265 1596  [ 4E1A8645EE77CB9454FFE53C59620A25 ] EventSystem    C:\WINDOWS\system32\es.dll
12:56:11.0375 1596  EventSystem - ok
12:56:11.0421 1596  Fabs - ok
12:56:11.0531 1596  [ 3117F595E9615E04F05A54FC15A03B20 ] Fastfat        C:\WINDOWS\system32\drivers\Fastfat.sys
12:56:11.0609 1596  Fastfat - ok
12:56:11.0671 1596  [ BAC5F7F0C2B8C1B9832594851E0F9914 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
12:56:11.0765 1596  FastUserSwitchingCompatibility - ok
12:56:11.0796 1596  [ CED2E8396A8838E59D8FD529C680E02C ] Fdc            C:\WINDOWS\system32\DRIVERS\fdc.sys
12:56:11.0843 1596  Fdc - ok
12:56:11.0890 1596  [ 9E9AF89F9B14AA6249065C309CE73BD8 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
12:56:11.0937 1596  Fips - ok
12:56:12.0625 1596  [ 5BD96D8C5411ACE71A7EAACAF0EF2903 ] FirebirdServerMAGIXInstance C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe
12:56:14.0109 1596  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - warning
12:56:14.0109 1596  FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic (1)
12:56:14.0140 1596  [ 0DD1DE43115B93F4D85E889D7A86F548 ] Flpydisk        C:\WINDOWS\system32\DRIVERS\flpydisk.sys
12:56:14.0203 1596  Flpydisk - ok
12:56:14.0281 1596  [ 157754F0DF355A9E0A6F54721914F9C6 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
12:56:14.0359 1596  FltMgr - ok
12:56:14.0437 1596  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
12:56:14.0453 1596  FontCache3.0.0.0 - ok
12:56:14.0468 1596  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
12:56:14.0531 1596  Fs_Rec - ok
12:56:14.0578 1596  [ 8F1955CE42E1484714B542F341647778 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
12:56:14.0656 1596  Ftdisk - ok
12:56:14.0765 1596  [ DF91846BC81AB3B1FDFD3CDA06F5ABF2 ] G200            C:\WINDOWS\system32\DRIVERS\G200m.sys
12:56:14.0875 1596  G200 - ok
12:56:14.0906 1596  [ 5C230948DD6652228F88CA7AE6CB276C ] gdrv            C:\WINDOWS\gdrv.sys
12:56:14.0937 1596  gdrv - ok
12:56:14.0968 1596  [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM    C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
12:56:14.0968 1596  GEARAspiWDM - ok
12:56:15.0015 1596  [ C0F1D4A21DE5A415DF8170616703DEBF ] Gpc            C:\WINDOWS\system32\DRIVERS\msgpc.sys
12:56:15.0078 1596  Gpc - ok
12:56:15.0156 1596  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate        C:\Programme\Google\Update\GoogleUpdate.exe
12:56:15.0187 1596  gupdate - ok
12:56:15.0234 1596  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem        C:\Programme\Google\Update\GoogleUpdate.exe
12:56:15.0234 1596  gupdatem - ok
12:56:15.0296 1596  [ C1B577B2169900F4CF7190C39F085794 ] gusvc          C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
12:56:15.0343 1596  gusvc - ok
12:56:15.0421 1596  [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
12:56:15.0453 1596  HDAudBus ( UnsignedFile.Multi.Generic ) - warning
12:56:15.0453 1596  HDAudBus - detected UnsignedFile.Multi.Generic (1)
12:56:15.0562 1596  [ BA85BCF1A2BCF927C3600574173403E0 ] helpsvc        C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
12:56:15.0640 1596  helpsvc - ok
12:56:15.0671 1596  [ B647CA198B9C73056ABFB0A9D8F4916D ] HidServ        C:\WINDOWS\System32\hidserv.dll
12:56:15.0734 1596  HidServ - ok
12:56:15.0765 1596  [ 1DE6783B918F540149AA69943BDFEBA8 ] HidUsb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
12:56:15.0828 1596  HidUsb - ok
12:56:15.0906 1596  [ 8F72C4916A288485812745DC5AF873FC ] HipShieldK      C:\WINDOWS\system32\drivers\HipShieldK.sys
12:56:15.0937 1596  HipShieldK - ok
12:56:15.0984 1596  [ ED29F14101523A6E0E808107405D452C ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
12:56:16.0000 1596  hkmsvc ( UnsignedFile.Multi.Generic ) - warning
12:56:16.0000 1596  hkmsvc - detected UnsignedFile.Multi.Generic (1)
12:56:16.0156 1596  [ 31FB9D7453C424D14A6C3927483E5E60 ] HomeNetSvc      C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe
12:56:16.0203 1596  HomeNetSvc - ok
12:56:16.0218 1596  hpn - ok
12:56:16.0250 1596  [ CBD09ED9CF6822177EE85AEA4D8816A2 ] HTCAND32        C:\WINDOWS\system32\Drivers\ANDROIDUSB.sys
12:56:16.0453 1596  HTCAND32 - ok
12:56:16.0484 1596  [ 04E3B3554076B8192A668EFE88A682A1 ] htcnprot        C:\WINDOWS\system32\DRIVERS\htcnprot.sys
12:56:16.0531 1596  htcnprot - ok
12:56:16.0671 1596  [ C19B522A9AE0BBC3293397F3055E80A1 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
12:56:16.0781 1596  HTTP - ok
12:56:16.0812 1596  [ 9EC7E866BBDBF3ECC0E67F4E0A838EB2 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
12:56:16.0906 1596  HTTPFilter - ok
12:56:16.0906 1596  i2omgmt - ok
12:56:16.0921 1596  i2omp - ok
12:56:16.0984 1596  [ 7C575018D0413440D75432A78B88C899 ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
12:56:17.0046 1596  i8042prt - ok
12:56:17.0328 1596  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc          C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:56:17.0796 1596  idsvc - ok
12:56:17.0812 1596  [ F8AA320C6A0409C0380E5D8A99D76EC6 ] Imapi          C:\WINDOWS\system32\DRIVERS\imapi.sys
12:56:17.0875 1596  Imapi - ok
12:56:17.0937 1596  [ 57D7267A9ED91ECAF4336B08C9628FCA ] ImapiService    C:\WINDOWS\system32\imapi.exe
12:56:18.0031 1596  ImapiService - ok
12:56:18.0046 1596  ini910u - ok
12:56:19.0687 1596  [ 4517FD80B6D734D99AC4B1578443D1D9 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
12:56:22.0750 1596  IntcAzAudAddService - ok
12:56:22.0765 1596  IntelIde - ok
12:56:22.0796 1596  [ C1C2CC1DA79C5EE10457EF0A3B8568C7 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
12:56:22.0843 1596  intelppm - ok
12:56:22.0890 1596  [ 4448006B6BC60E6C027932CFC38D6855 ] Ip6Fw          C:\WINDOWS\system32\drivers\ip6fw.sys
12:56:22.0937 1596  Ip6Fw - ok
12:56:22.0984 1596  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
12:56:23.0031 1596  IpFilterDriver - ok
12:56:23.0046 1596  [ E1EC7F5DA720B640CD8FB8424F1B14BB ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
12:56:23.0109 1596  IpInIp - ok
12:56:23.0187 1596  [ B5A8E215AC29D24D60B4D1250EF05ACE ] IpNat          C:\WINDOWS\system32\DRIVERS\ipnat.sys
12:56:23.0250 1596  IpNat - ok
12:56:23.0421 1596  [ E8A39D41474BE42FD8830CED32932D6C ] iPod Service    C:\Programme\iPod\bin\iPodService.exe
12:56:23.0656 1596  iPod Service - ok
12:56:23.0718 1596  [ 64537AA5C003A6AFEEE1DF819062D0D1 ] IPSec          C:\WINDOWS\system32\DRIVERS\ipsec.sys
12:56:23.0765 1596  IPSec - ok
12:56:23.0812 1596  [ 50708DAA1B1CBB7D6AC1CF8F56A24410 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
12:56:23.0843 1596  IRENUM - ok
12:56:23.0890 1596  [ CE9B7AFDF0A3D7DD8D1487262316B959 ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
12:56:23.0937 1596  isapnp - ok
12:56:24.0093 1596  [ 7FBFEEE245821925129C9F86470BF33C ] JavaQuickStarterService C:\Programme\Java\jre7\bin\jqs.exe
12:56:24.0140 1596  JavaQuickStarterService - ok
12:56:24.0171 1596  [ B128FC0A5CD83F669D5DE4B58F77C7D6 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
12:56:24.0234 1596  Kbdclass - ok
12:56:24.0250 1596  [ 7EC877AA899323B92874FE62C7DDCDE7 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
12:56:24.0312 1596  kbdhid - ok
12:56:24.0375 1596  [ D93CAD07C5683DB066B0B2D2D3790EAD ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
12:56:24.0468 1596  kmixer - ok
12:56:24.0546 1596  [ EB7FFE87FD367EA8FCA0506F74A87FBB ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
12:56:24.0609 1596  KSecDD - ok
12:56:24.0656 1596  [ 0C6E346CDE730CF1356DD69AD6E9BC42 ] L8042Kbd        C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys
12:56:24.0656 1596  L8042Kbd - ok
12:56:24.0687 1596  [ 8A5993705ADD14352C9A279FA8338334 ] L8042mou        C:\WINDOWS\system32\DRIVERS\L8042mou.Sys
12:56:24.0703 1596  L8042mou - ok
12:56:24.0765 1596  [ F8170AA51CD202BC062B8A0983F361B7 ] lanmanserver    C:\WINDOWS\System32\srvsvc.dll
12:56:24.0843 1596  lanmanserver - ok
12:56:24.0890 1596  [ 36D74668F5448D55887FA3958488DC06 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
12:56:25.0015 1596  lanmanworkstation - ok
12:56:25.0031 1596  lbrtfdc - ok
12:56:25.0078 1596  [ 86F4C6BB7E50E178DF08E747EC5C18C3 ] libusb0        C:\WINDOWS\system32\DRIVERS\libusb0.sys
12:56:25.0078 1596  libusb0 - ok
12:56:25.0125 1596  [ 4C25FADD7FE1D5BD779B20D3D0EB8D7C ] LmHosts        C:\WINDOWS\System32\lmhsvc.dll
12:56:25.0187 1596  LmHosts - ok
12:56:25.0218 1596  [ 9837E55673818ECD8FEBB47F7F77521A ] LMouKE          C:\WINDOWS\system32\DRIVERS\LMouKE.Sys
12:56:25.0234 1596  LMouKE - ok
12:56:25.0265 1596  [ 4A5FFDF0FE830C448830BD4B02B02B4B ] mbamchameleon  C:\WINDOWS\system32\drivers\mbamchameleon.sys
12:56:25.0281 1596  mbamchameleon - ok
12:56:25.0375 1596  [ ECAB006AC6136F1307E140B633CDB8C2 ] McAfee SiteAdvisor Service C:\Programme\Gemeinsame Dateien\Mcafee\McSvcHost\McSvHost.exe
12:56:25.0437 1596  McAfee SiteAdvisor Service - ok
12:56:25.0500 1596  [ 31FB9D7453C424D14A6C3927483E5E60 ] McMPFSvc        C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe
12:56:25.0515 1596  McMPFSvc - ok
12:56:25.0562 1596  [ 31FB9D7453C424D14A6C3927483E5E60 ] mcpltsvc        C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe
12:56:25.0562 1596  mcpltsvc - ok
12:56:25.0625 1596  [ 31FB9D7453C424D14A6C3927483E5E60 ] McProxy        C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe
12:56:25.0625 1596  McProxy - ok
12:56:25.0656 1596  [ E5215AB942C5AC5F7EB0E54871D7A27C ] Messenger      C:\WINDOWS\System32\msgsvc.dll
12:56:25.0718 1596  Messenger - ok
12:56:25.0781 1596  [ BA3004F4C0A0CD19DB9C2C0AB3A84EFE ] mfeapfk        C:\WINDOWS\system32\drivers\mfeapfk.sys
12:56:25.0796 1596  mfeapfk - ok
12:56:25.0890 1596  [ 39C20B7D9AC19BFE616CA09DD3A240AF ] mfeavfk        C:\WINDOWS\system32\drivers\mfeavfk.sys
12:56:25.0937 1596  mfeavfk - ok
12:56:26.0000 1596  [ E3470DECDA0A4015A0CA00ED645F2EBE ] mfebopk        C:\WINDOWS\system32\drivers\mfebopk.sys
12:56:26.0015 1596  mfebopk - ok
12:56:26.0203 1596  [ A687B3EEED3E8B305AC247DEC61EE362 ] mfecore        C:\Programme\Gemeinsame Dateien\McAfee\AMCore\mcshield.exe
12:56:26.0531 1596  mfecore - ok
12:56:26.0609 1596  [ 4E13EA496E202BCB4FCC342D96FAF83A ] mfefire        C:\Programme\Gemeinsame Dateien\McAfee\SystemCore\\mfefire.exe
12:56:26.0656 1596  mfefire - ok
12:56:26.0750 1596  [ C8AC8147E02ED8795E1FD946165BACCF ] mfefirek        C:\WINDOWS\system32\drivers\mfefirek.sys
12:56:26.0906 1596  mfefirek - ok
12:56:27.0062 1596  [ 7AAF92954D8D2801B17A1163C60ABFE9 ] mfehidk        C:\WINDOWS\system32\drivers\mfehidk.sys
12:56:27.0265 1596  mfehidk - ok
12:56:27.0343 1596  [ 7401E85D5D4B5B0F6A3098EBEE0639AA ] mfencbdc        C:\WINDOWS\system32\DRIVERS\mfencbdc.sys
12:56:27.0406 1596  mfencbdc - ok
12:56:27.0437 1596  [ 439B06E366643B32D549B939780742BE ] mfencrk        C:\WINDOWS\system32\DRIVERS\mfencrk.sys
12:56:27.0453 1596  mfencrk - ok
12:56:27.0500 1596  [ 3474B9391903C0AB2E9987CB4DE943D8 ] mfendisk        C:\WINDOWS\system32\DRIVERS\mfendisk.sys
12:56:27.0515 1596  mfendisk - ok
12:56:27.0546 1596  [ 3474B9391903C0AB2E9987CB4DE943D8 ] mfendiskmp      C:\WINDOWS\system32\DRIVERS\mfendisk.sys
12:56:27.0546 1596  mfendiskmp - ok
12:56:27.0609 1596  [ FCFAB391E3736769FE5865F3ACB3DCCB ] mfetdi2k        C:\WINDOWS\system32\drivers\mfetdi2k.sys
12:56:27.0609 1596  mfetdi2k - ok
12:56:27.0671 1596  [ 82B7415D5A8FB24D3F6736400F5E1600 ] mfevtp          C:\WINDOWS\system32\mfevtps.exe
12:56:27.0718 1596  mfevtp - ok
12:56:27.0750 1596  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd          C:\WINDOWS\system32\drivers\mnmdd.sys
12:56:27.0812 1596  mnmdd - ok
12:56:27.0859 1596  [ BB2470D20405B272EA47CA5E18F1C58E ] mnmsrvc        C:\WINDOWS\system32\mnmsrvc.exe
12:56:27.0921 1596  mnmsrvc - ok
12:56:27.0968 1596  [ 91A3DA4B12F6F1D760463A7F7857F748 ] Modem          C:\WINDOWS\system32\drivers\Modem.sys
12:56:28.0046 1596  Modem - ok
12:56:28.0390 1596  [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt        C:\WINDOWS\system32\drivers\Monfilt.sys
12:56:29.0062 1596  Monfilt - ok
12:56:29.0093 1596  [ 71E15CA47FD947552054AFB28536268F ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
12:56:29.0156 1596  Mouclass - ok
12:56:29.0171 1596  [ 66A6F73C74E1791464160A7065CE711A ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
12:56:29.0234 1596  mouhid - ok
12:56:29.0281 1596  [ 65653F3B4477F3C63E68A9659F85EE2E ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
12:56:29.0343 1596  MountMgr - ok
12:56:29.0406 1596  [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
12:56:29.0468 1596  MozillaMaintenance - ok
12:56:29.0546 1596  [ 55A9A7E6BB297BF0F5B144029DCB79CC ] MPE            C:\WINDOWS\system32\DRIVERS\MPE.sys
12:56:29.0593 1596  MPE - ok
12:56:29.0671 1596  [ EE728AF83850DDAD9A3FCAC0AAB3AD97 ] MpFilter        C:\WINDOWS\system32\DRIVERS\MpFilter.sys
12:56:29.0718 1596  MpFilter - ok
12:56:29.0718 1596  mraid35x - ok
12:56:29.0796 1596  [ 46EDCC8F2DB2F322C24F48785CB46366 ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
12:56:29.0890 1596  MRxDAV - ok
12:56:30.0031 1596  [ 1FD607FC67F7F7C633C3DA65BFC53D18 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
12:56:30.0250 1596  MRxSmb - ok
12:56:30.0281 1596  [ D059F9C7752EF461476E83180DAA5C62 ] MSDTC          C:\WINDOWS\system32\msdtc.exe
12:56:30.0328 1596  MSDTC - ok
12:56:30.0359 1596  [ 561B3A4333CA2DBDBA28B5B956822519 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
12:56:30.0406 1596  Msfs - ok
12:56:30.0421 1596  MSIServer - ok
12:56:30.0437 1596  [ AE431A8DD3C1D0D0610CDBAC16057AD0 ] MSKSSRV        C:\WINDOWS\system32\drivers\MSKSSRV.sys
12:56:30.0484 1596  MSKSSRV - ok
12:56:30.0546 1596  [ E077FCA2A7E79FB9BF67D3E30B5CE593 ] MsMpSvc        c:\Programme\Microsoft Security Client\MsMpEng.exe
12:56:30.0562 1596  MsMpSvc - ok
12:56:30.0578 1596  [ 13E75FEF9DFEB08EEDED9D0246E1F448 ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
12:56:30.0625 1596  MSPCLOCK - ok
12:56:30.0640 1596  [ 1988A33FF19242576C3D0EF9CE785DA7 ] MSPQM          C:\WINDOWS\system32\drivers\MSPQM.sys
12:56:30.0687 1596  MSPQM - ok
12:56:30.0718 1596  [ 469541F8BFD2B32659D5D463A6714BCE ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
12:56:30.0765 1596  mssmbios - ok
12:56:30.0796 1596  [ BF13612142995096AB084F2DB7F40F77 ] MSTEE          C:\WINDOWS\system32\drivers\MSTEE.sys
12:56:30.0859 1596  MSTEE - ok
12:56:30.0953 1596  [ 18936200FE720845D0099B0F70D51CBB ] MTSBDA          C:\WINDOWS\system32\DRIVERS\MtsBda.sys
12:56:31.0015 1596  MTSBDA ( UnsignedFile.Multi.Generic ) - warning
12:56:31.0015 1596  MTSBDA - detected UnsignedFile.Multi.Generic (1)
12:56:31.0046 1596  [ 846E5E4B8F27DE86D19941E323A5608F ] MtsHID          C:\WINDOWS\system32\DRIVERS\MtsHid.sys
12:56:31.0062 1596  MtsHID ( UnsignedFile.Multi.Generic ) - warning
12:56:31.0062 1596  MtsHID - detected UnsignedFile.Multi.Generic (1)
12:56:31.0125 1596  [ 82035E0F41C2DD05AE41D27FE6CF7DE1 ] Mup            C:\WINDOWS\system32\drivers\Mup.sys
12:56:31.0203 1596  Mup - ok
12:56:31.0234 1596  [ 5C8DC6429C43DC6177C1FA5B76290D1A ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
12:56:31.0296 1596  NABTSFEC - ok
12:56:31.0390 1596  [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent        C:\WINDOWS\System32\qagentrt.dll
12:56:31.0484 1596  napagent ( UnsignedFile.Multi.Generic ) - warning
12:56:31.0484 1596  napagent - detected UnsignedFile.Multi.Generic (1)
12:56:31.0625 1596  [ 558635D3AF1C7546D26067D5D9B6959E ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
12:56:31.0703 1596  NDIS - ok
12:56:31.0734 1596  [ 520CE427A8B298F54112857BCF6BDE15 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
12:56:31.0781 1596  NdisIP - ok
12:56:31.0812 1596  [ 08D43BBDACDF23F34D79E44ED35C1B4C ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
12:56:31.0859 1596  NdisTapi - ok
12:56:31.0890 1596  [ 34D6CD56409DA9A7ED573E1C90A308BF ] Ndisuio        C:\WINDOWS\system32\DRIVERS\ndisuio.sys
12:56:31.0953 1596  Ndisuio - ok
12:56:32.0000 1596  [ 0B90E255A9490166AB368CD55A529893 ] NdisWan        C:\WINDOWS\system32\DRIVERS\ndiswan.sys
12:56:32.0062 1596  NdisWan - ok
12:56:32.0109 1596  [ 59FC3FB44D2669BC144FD87826BB571F ] NDProxy        C:\WINDOWS\system32\drivers\NDProxy.sys
12:56:32.0156 1596  NDProxy - ok
12:56:32.0187 1596  [ 3A2ACA8FC1D7786902CA434998D7CEB4 ] NetBIOS        C:\WINDOWS\system32\DRIVERS\netbios.sys
12:56:32.0234 1596  NetBIOS - ok
12:56:32.0328 1596  [ 0C80E410CD2F47134407EE7DD19CC86B ] NetBT          C:\WINDOWS\system32\DRIVERS\netbt.sys
12:56:32.0390 1596  NetBT - ok
12:56:32.0468 1596  [ F4EFF57254F565F39B6029150414A0D5 ] NetDDE          C:\WINDOWS\system32\netdde.exe
12:56:32.0562 1596  NetDDE - ok
12:56:32.0593 1596  [ F4EFF57254F565F39B6029150414A0D5 ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
12:56:32.0640 1596  NetDDEdsdm - ok
12:56:32.0671 1596  [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] Netlogon        C:\WINDOWS\system32\lsass.exe
12:56:32.0718 1596  Netlogon - ok
12:56:32.0796 1596  [ CDF4DA6B518105343FE9E8AFBBF8FBF4 ] Netman          C:\WINDOWS\System32\netman.dll
12:56:32.0890 1596  Netman - ok
12:56:32.0953 1596  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
12:56:33.0031 1596  NetTcpPortSharing - ok
12:56:33.0062 1596  [ 5C5C53DB4FEF16CF87B9911C7E8C6FBC ] NIC1394        C:\WINDOWS\system32\DRIVERS\nic1394.sys
12:56:33.0125 1596  NIC1394 - ok
12:56:33.0234 1596  [ B36E08F680BAE4DFC5C24D00A2DFC9E7 ] Nla            C:\WINDOWS\System32\mswsock.dll
12:56:33.0343 1596  Nla - ok
12:56:33.0359 1596  [ 4F601BCB8F64EA3AC0994F98FED03F8E ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
12:56:33.0406 1596  Npfs - ok
12:56:33.0671 1596  [ B78BE402C3F63DD55521F73876951CDD ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
12:56:33.0921 1596  Ntfs - ok
12:56:33.0937 1596  [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] NtLmSsp        C:\WINDOWS\system32\lsass.exe
12:56:33.0984 1596  NtLmSsp - ok
12:56:34.0109 1596  [ 428AA946A8D9F32DBB4260C8E6E13377 ] NtmsSvc        C:\WINDOWS\system32\ntmssvc.dll
12:56:34.0343 1596  NtmsSvc - ok
12:56:34.0359 1596  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
12:56:34.0406 1596  Null - ok
12:56:34.0484 1596  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
12:56:34.0546 1596  NwlnkFlt - ok
12:56:34.0562 1596  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
12:56:34.0609 1596  NwlnkFwd - ok
12:56:34.0671 1596  [ 0951DB8E5823EA366B0E408D71E1BA2A ] ohci1394        C:\WINDOWS\system32\DRIVERS\ohci1394.sys
12:56:34.0718 1596  ohci1394 - ok
12:56:34.0812 1596  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose            C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
12:56:34.0859 1596  ose - ok
12:56:36.0078 1596  [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc        C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
12:56:38.0390 1596  osppsvc - ok
12:56:38.0468 1596  [ B2F17A2EDB5450E61973A037F63A595B ] Parport        C:\WINDOWS\system32\DRIVERS\parport.sys
12:56:38.0531 1596  Parport - ok
12:56:38.0546 1596  [ 3334430C29DC338092F79C38EF7B4CD0 ] PartMgr        C:\WINDOWS\system32\drivers\PartMgr.sys
12:56:38.0593 1596  PartMgr - ok
12:56:38.0625 1596  [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
12:56:38.0671 1596  ParVdm - ok
12:56:38.0765 1596  [ 39B9DCD7040654C2E57D7396736C718E ] PassThru Service C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe
12:56:38.0796 1596  PassThru Service ( UnsignedFile.Multi.Generic ) - warning
12:56:38.0796 1596  PassThru Service - detected UnsignedFile.Multi.Generic (1)
12:56:38.0843 1596  [ 6FB463E5B243FBD6F3D3C83F914D94FB ] PCI            C:\WINDOWS\system32\DRIVERS\pci.sys
12:56:38.0906 1596  PCI - ok
12:56:38.0906 1596  PCIDump - ok
12:56:38.0921 1596  [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
12:56:38.0984 1596  PCIIde - ok
12:56:39.0062 1596  [ E2363F4C1DAFF89ABEE5F593E13D8A05 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
12:56:39.0125 1596  Pcmcia - ok
12:56:39.0125 1596  PDCOMP - ok
12:56:39.0140 1596  PDFRAME - ok
12:56:39.0156 1596  PDRELI - ok
12:56:39.0171 1596  PDRFRAME - ok
12:56:39.0171 1596  perc2 - ok
12:56:39.0187 1596  perc2hib - ok
12:56:39.0265 1596  [ EDB6B81761BD60F32F740BBC40AFB676 ] PlugPlay        C:\WINDOWS\system32\services.exe
12:56:39.0328 1596  PlugPlay - ok
12:56:39.0343 1596  [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] PolicyAgent    C:\WINDOWS\system32\lsass.exe
12:56:39.0390 1596  PolicyAgent - ok
12:56:39.0421 1596  [ 1C5CC65AAC0783C344F16353E60B72AC ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
12:56:39.0500 1596  PptpMiniport - ok
12:56:39.0531 1596  [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
12:56:39.0578 1596  ProtectedStorage - ok
12:56:39.0625 1596  [ 48671F327553DCF1D27F6197F622A668 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
12:56:39.0687 1596  PSched - ok
12:56:39.0703 1596  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink        C:\WINDOWS\system32\DRIVERS\ptilink.sys
12:56:39.0765 1596  Ptilink - ok
12:56:39.0796 1596  [ 49452BFCEC22F36A7A9B9C2181BC3042 ] PxHelp20        C:\WINDOWS\system32\Drivers\PxHelp20.sys
12:56:39.0812 1596  PxHelp20 - ok
12:56:39.0828 1596  ql1080 - ok
12:56:39.0828 1596  Ql10wnt - ok
12:56:39.0843 1596  ql12160 - ok
12:56:39.0859 1596  ql1240 - ok
12:56:39.0859 1596  ql1280 - ok
12:56:39.0906 1596  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
12:56:39.0953 1596  RasAcd - ok
12:56:40.0015 1596  [ E3C6E87C1F84584A773D7C3DD205DBFF ] RasAuto        C:\WINDOWS\System32\rasauto.dll
12:56:40.0078 1596  RasAuto - ok
12:56:40.0109 1596  [ 98FAEB4A4DCF812BA1C6FCA4AA3E115C ] Rasl2tp        C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
12:56:40.0156 1596  Rasl2tp - ok
12:56:40.0234 1596  [ A5D2D745A2AEFA327DCA6DA317B5FD70 ] RasMan          C:\WINDOWS\System32\rasmans.dll
12:56:40.0328 1596  RasMan - ok
12:56:40.0359 1596  [ 7306EEED8895454CBED4669BE9F79FAA ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
12:56:40.0406 1596  RasPppoe - ok
12:56:40.0421 1596  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
12:56:40.0468 1596  Raspti - ok
12:56:40.0578 1596  [ 29D66245ADBA878FFF574CD66ABD2884 ] Rdbss          C:\WINDOWS\system32\DRIVERS\rdbss.sys
12:56:40.0656 1596  Rdbss - ok
12:56:40.0671 1596  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
12:56:40.0718 1596  RDPCDD - ok
12:56:40.0796 1596  [ A2CAE2C60BC37E0751EF9DDA7CEAF4AD ] rdpdr          C:\WINDOWS\system32\DRIVERS\rdpdr.sys
12:56:40.0875 1596  rdpdr - ok
12:56:40.0953 1596  [ D4F5643D7714EF499AE9527FDCD50894 ] RDPWD          C:\WINDOWS\system32\drivers\RDPWD.sys
12:56:41.0031 1596  RDPWD - ok
12:56:41.0109 1596  [ AEC159942DF64A9890072D7BB1797762 ] RDSessMgr      C:\WINDOWS\system32\sessmgr.exe
12:56:41.0218 1596  RDSessMgr - ok
12:56:41.0250 1596  [ AA56702E230860565CB8D43680F57F33 ] redbook        C:\WINDOWS\system32\DRIVERS\redbook.sys
12:56:41.0312 1596  redbook - ok
12:56:41.0343 1596  [ EBA80CDF25E02084857957E820004934 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
12:56:41.0406 1596  RemoteAccess - ok
12:56:41.0453 1596  [ AE81CF7D7CFA79CD03E8FB99788A7E09 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
12:56:41.0531 1596  RemoteRegistry - ok
12:56:41.0578 1596  [ DA23F9F3F1B1871120F980A6879581AC ] RpcLocator      C:\WINDOWS\system32\locator.exe
12:56:41.0656 1596  RpcLocator - ok
12:56:41.0781 1596  [ 9F28FF58D6D67B123272869D89D14004 ] RpcSs          C:\WINDOWS\system32\rpcss.dll
12:56:41.0921 1596  RpcSs - ok
12:56:41.0984 1596  [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP            C:\WINDOWS\system32\rsvp.exe
12:56:42.0078 1596  RSVP - ok
12:56:42.0171 1596  [ A492CEE016B50FBA6A127589A525BF96 ] RTLE8023xp      C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
12:56:42.0234 1596  RTLE8023xp - ok
12:56:42.0265 1596  [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] SamSs          C:\WINDOWS\system32\lsass.exe
12:56:42.0312 1596  SamSs - ok
12:56:42.0390 1596  [ B4CF7B42DE6CFA6FDE7D6AF4DAA55F57 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
12:56:42.0468 1596  SCardSvr - ok
12:56:42.0593 1596  [ D5E73842F38E24457C63FEF8CEFFBE19 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
12:56:42.0703 1596  Schedule - ok
12:56:42.0734 1596  [ D26E26EA516450AF9D072635C60387F4 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
12:56:42.0765 1596  Secdrv - ok
12:56:42.0796 1596  [ FED544B43903FB801B106F062110358A ] seclogon        C:\WINDOWS\System32\seclogon.dll
12:56:42.0859 1596  seclogon - ok
12:56:42.0875 1596  [ AB74D986C1DD0D0C95B6AD37EC1E9F4F ] SENS            C:\WINDOWS\system32\sens.dll
12:56:42.0937 1596  SENS - ok
12:56:42.0968 1596  [ A2D868AEEFF612E70E213C451A70CAFB ] serenum        C:\WINDOWS\system32\DRIVERS\serenum.sys
12:56:43.0015 1596  serenum - ok
12:56:43.0062 1596  [ CD5B9995AFCDB466C9EFC048D167E3BE ] Serial          C:\WINDOWS\system32\DRIVERS\serial.sys
12:56:43.0125 1596  Serial - ok
12:56:43.0171 1596  [ 0D13B6DF6E9E101013A7AFB0CE629FE0 ] Sfloppy        C:\WINDOWS\system32\DRIVERS\sfloppy.sys
12:56:43.0218 1596  Sfloppy - ok
12:56:43.0359 1596  [ 9245420422E409A25C1410ACB4244060 ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
12:56:43.0593 1596  SharedAccess - ok
12:56:43.0656 1596  [ BAC5F7F0C2B8C1B9832594851E0F9914 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
12:56:43.0718 1596  ShellHWDetection - ok
12:56:43.0718 1596  Simbad - ok
12:56:43.0750 1596  [ 5CAEED86821FA2C6139E32E9E05CCDC9 ] SLIP            C:\WINDOWS\system32\DRIVERS\SLIP.sys
12:56:43.0812 1596  SLIP - ok
12:56:43.0875 1596  [ C8D4ED84C564A19FD2E7FB688C2C1E24 ] snapman        C:\WINDOWS\system32\DRIVERS\snapman.sys
12:56:43.0906 1596  snapman ( UnsignedFile.Multi.Generic ) - warning
12:56:43.0906 1596  snapman - detected UnsignedFile.Multi.Generic (1)
12:56:43.0906 1596  Sparrow - ok
12:56:43.0937 1596  [ 8E186B8F23295D1E42C573B82B80D548 ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
12:56:44.0000 1596  splitter - ok
12:56:44.0046 1596  [ 54E7113A4BD696E430919BCAF5C65E06 ] Spooler        C:\WINDOWS\system32\spoolsv.exe
12:56:44.0093 1596  Spooler - ok
12:56:44.0156 1596  [ E4200CB2F418D8FC4ACDD7E38C419D6A ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
12:56:44.0187 1596  sr - ok
12:56:44.0265 1596  [ 015F302C4CF961F20C3F98F3A7CA7917 ] srservice      C:\WINDOWS\system32\srsvc.dll
12:56:44.0328 1596  srservice - ok
12:56:44.0453 1596  [ 20B7E396720353E4117D64D9DCB926CA ] Srv            C:\WINDOWS\system32\DRIVERS\srv.sys
12:56:44.0703 1596  Srv - ok
12:56:44.0750 1596  [ 6FA03B462B2FFFE2627171B7FE73EE29 ] SSDPSRV        C:\WINDOWS\System32\ssdpsrv.dll
12:56:44.0796 1596  SSDPSRV - ok
12:56:44.0921 1596  [ 7E751068ADA60FC77638622E86A7CD9E ] stisvc          C:\WINDOWS\system32\wiaservc.dll
12:56:45.0125 1596  stisvc - ok
12:56:45.0140 1596  [ 284C57DF5DC7ABCA656BC2B96A667AFB ] streamip        C:\WINDOWS\system32\DRIVERS\StreamIP.sys
12:56:45.0203 1596  streamip - ok
12:56:45.0218 1596  [ 03C1BAE4766E2450219D20B993D6E046 ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
12:56:45.0265 1596  swenum - ok
12:56:45.0312 1596  [ 94ABC808FC4B6D7D2BBF42B85E25BB4D ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
12:56:45.0375 1596  swmidi - ok
12:56:45.0375 1596  SwPrv - ok
12:56:45.0390 1596  symc810 - ok
12:56:45.0406 1596  symc8xx - ok
12:56:45.0421 1596  sym_hi - ok
12:56:45.0437 1596  sym_u3 - ok
12:56:45.0484 1596  [ 650AD082D46BAC0E64C9C0E0928492FD ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
12:56:45.0546 1596  sysaudio - ok
12:56:45.0609 1596  [ 6D0C43DF9D3A7C5A9B4F94772CBD5DDC ] SysmonLog      C:\WINDOWS\system32\smlogsvc.exe
12:56:45.0687 1596  SysmonLog - ok
12:56:45.0781 1596  [ 4584E2A5FE662AB3E7C32936E1449043 ] TapiSrv        C:\WINDOWS\System32\tapisrv.dll
12:56:45.0906 1596  TapiSrv - ok
12:56:46.0031 1596  [ 9F4B36614A0FC234525BA224957DE55C ] Tcpip          C:\WINDOWS\system32\DRIVERS\tcpip.sys
12:56:46.0218 1596  Tcpip - ok
12:56:46.0250 1596  [ 38D437CF2D98965F239B0ABCD66DCB0F ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
12:56:46.0296 1596  TDPIPE - ok
12:56:46.0328 1596  [ ED0580AF02502D00AD8C4C066B156BE9 ] TDTCP          C:\WINDOWS\system32\drivers\TDTCP.sys
12:56:46.0375 1596  TDTCP - ok
12:56:46.0390 1596  [ A540A99C281D933F3D69D55E48727F47 ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
12:56:46.0453 1596  TermDD - ok
12:56:46.0593 1596  [ 1850BC10DE5DCCCEDE063FC2D0F2CEDA ] TermService    C:\WINDOWS\System32\termsrv.dll
12:56:46.0718 1596  TermService - ok
12:56:46.0796 1596  [ BAC5F7F0C2B8C1B9832594851E0F9914 ] Themes          C:\WINDOWS\System32\shsvcs.dll
12:56:46.0843 1596  Themes - ok
12:56:46.0875 1596  [ B0FE76203C05E85C719DA23FC3FFF4EB ] tifsfilter      C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
12:56:46.0875 1596  tifsfilter ( UnsignedFile.Multi.Generic ) - warning
12:56:46.0875 1596  tifsfilter - detected UnsignedFile.Multi.Generic (1)
12:56:46.0937 1596  [ A549151C0B957E152641F22B3924A083 ] timounter      C:\WINDOWS\system32\DRIVERS\timntr.sys
12:56:47.0000 1596  timounter ( UnsignedFile.Multi.Generic ) - warning
12:56:47.0000 1596  timounter - detected UnsignedFile.Multi.Generic (1)
12:56:47.0046 1596  [ 58708746B8267033E5CF2B29659E7F74 ] TlntSvr        C:\WINDOWS\system32\tlntsvr.exe
12:56:47.0093 1596  TlntSvr - ok
12:56:47.0187 1596  [ 3199A477F0F06EEDE41BD55179F8EB05 ] TomTomHOMEService C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
12:56:47.0218 1596  TomTomHOMEService - ok
12:56:47.0218 1596  TosIde - ok
12:56:47.0281 1596  [ A34E894201D66E380E1FA96FE11B587E ] TrkWks          C:\WINDOWS\system32\trkwks.dll
12:56:47.0359 1596  TrkWks - ok
12:56:47.0390 1596  [ 12F70256F140CD7D52C58C7048FDE657 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
12:56:47.0468 1596  Udfs - ok
12:56:47.0484 1596  ultra - ok
12:56:47.0593 1596  [ AFF2E5045961BBC0A602BB6F95EB1345 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
12:56:47.0687 1596  Update - ok
12:56:47.0765 1596  [ 09D4A2D7C5A8ABEC227D118765FAADDF ] upnphost        C:\WINDOWS\System32\upnphost.dll
12:56:47.0843 1596  upnphost - ok
12:56:47.0859 1596  [ A99F867E76CFDAA28EE305B93F70E84F ] UPS            C:\WINDOWS\System32\ups.exe
12:56:47.0921 1596  UPS - ok
12:56:47.0953 1596  [ 5C2BDC152BBAB34F36473DEAF7713F22 ] USBAAPL        C:\WINDOWS\system32\Drivers\usbaapl.sys
12:56:47.0968 1596  USBAAPL ( UnsignedFile.Multi.Generic ) - warning
12:56:47.0968 1596  USBAAPL - detected UnsignedFile.Multi.Generic (1)
12:56:48.0015 1596  [ 45A0D14B26C35497AD93BCE7E15C9941 ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
12:56:48.0062 1596  usbaudio - ok
12:56:48.0078 1596  [ BFFD9F120CC63BCBAA3D840F3EEF9F79 ] usbccgp        C:\WINDOWS\system32\DRIVERS\usbccgp.sys
12:56:48.0140 1596  usbccgp - ok
12:56:48.0171 1596  [ 15E993BA2F6946B2BFBBFCD30398621E ] usbehci        C:\WINDOWS\system32\DRIVERS\usbehci.sys
12:56:48.0218 1596  usbehci - ok
12:56:48.0250 1596  [ C72F40947F92CEA56A8FB532EDF025F1 ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
12:56:48.0296 1596  usbhub - ok
12:56:48.0328 1596  [ A42369B7CD8886CD7C70F33DA6FCBCF5 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
12:56:48.0375 1596  usbprint - ok
12:56:48.0390 1596  [ A6BC71402F4F7DD5B77FD7F4A8DDBA85 ] usbscan        C:\WINDOWS\system32\DRIVERS\usbscan.sys
12:56:48.0453 1596  usbscan - ok
12:56:48.0484 1596  [ 6CD7B22193718F1D17A47A1CD6D37E75 ] USBSTOR        C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
12:56:48.0531 1596  USBSTOR - ok
12:56:48.0546 1596  [ F8FD1400092E23C8F2F31406EF06167B ] usbuhci        C:\WINDOWS\system32\DRIVERS\usbuhci.sys
12:56:48.0593 1596  usbuhci - ok
12:56:48.0625 1596  [ EE37E5C79D6C788711296075B2BC95F4 ] usb_rndisx      C:\WINDOWS\system32\DRIVERS\usb8023x.sys
12:56:48.0671 1596  usb_rndisx - ok
12:56:48.0703 1596  [ 8A60EDD72B4EA5AEA8202DAF0E427925 ] VgaSave        C:\WINDOWS\System32\drivers\vga.sys
12:56:48.0750 1596  VgaSave - ok
12:56:48.0750 1596  ViaIde - ok
12:56:48.0796 1596  [ D6888520FF56D72A50437E371CA25FC9 ] VolSnap        C:\WINDOWS\system32\drivers\VolSnap.sys
12:56:48.0843 1596  VolSnap - ok
12:56:48.0953 1596  [ 6635ECBF0D8090DC3A452D0D072B5D5B ] VSS            C:\WINDOWS\System32\vssvc.exe
12:56:49.0062 1596  VSS - ok
12:56:49.0156 1596  [ C6D874CD2A5B83CD11CDEBD28A638584 ] W32Time        C:\WINDOWS\system32\w32time.dll
12:56:49.0250 1596  W32Time - ok
12:56:49.0296 1596  [ 984EF0B9788ABF89974CFED4BFBAACBC ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
12:56:49.0359 1596  Wanarp - ok
12:56:49.0515 1596  [ 4769596D7CC0F5FA447D2BABC239672A ] Wdf01000        C:\WINDOWS\system32\Drivers\wdf01000.sys
12:56:49.0734 1596  Wdf01000 - ok
12:56:49.0750 1596  WDICA - ok
12:56:49.0812 1596  [ 2797F33EBF50466020C430EE4F037933 ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
12:56:49.0859 1596  wdmaud - ok
12:56:49.0906 1596  [ 1EB51FEEA9D3208EAE60604F4346C02E ] WebClient      C:\WINDOWS\System32\webclnt.dll
12:56:49.0984 1596  WebClient - ok
12:56:50.0109 1596  [ DA2DADB42916E59C6E4BBA593BCCDA73 ] winmgmt        C:\WINDOWS\system32\wbem\WMIsvc.dll
12:56:50.0187 1596  winmgmt - ok
12:56:50.0250 1596  [ D68CC4EBF7B03FD770D5962295AD814E ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
12:56:50.0312 1596  WmdmPmSN - ok
12:56:50.0546 1596  [ 9CBB06E4438D6A0D52A46E0B44796D37 ] Wmi            C:\WINDOWS\System32\advapi32.dll
12:56:50.0890 1596  Wmi - ok
12:56:50.0968 1596  [ 042A78FCD1ADFB0FBA9865D55C6F5CC1 ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
12:56:51.0062 1596  WmiApSrv - ok
12:56:51.0343 1596  [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc  C:\Programme\Windows Media Player\WMPNetwk.exe
12:56:51.0859 1596  WMPNetworkSvc ( UnsignedFile.Multi.Generic ) - warning
12:56:51.0859 1596  WMPNetworkSvc - detected UnsignedFile.Multi.Generic (1)
12:56:51.0906 1596  [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb          C:\WINDOWS\system32\DRIVERS\wpdusb.sys
12:56:51.0937 1596  WpdUsb ( UnsignedFile.Multi.Generic ) - warning
12:56:51.0937 1596  WpdUsb - detected UnsignedFile.Multi.Generic (1)
12:56:52.0234 1596  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
12:56:52.0609 1596  WPFFontCache_v0400 - ok
12:56:52.0656 1596  [ BD3561AAE748150CF51C2CA876449EA7 ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
12:56:52.0734 1596  wscsvc - ok
12:56:52.0750 1596  WSearch - ok
12:56:52.0796 1596  [ D5842484F05E12121C511AA93F6439EC ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
12:56:52.0843 1596  WSTCODEC - ok
12:56:52.0875 1596  [ 1EDDD5C0ECF3FA6EDFD8A25B2B4E7DF6 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
12:56:52.0921 1596  wuauserv - ok
12:56:52.0953 1596  [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf          C:\WINDOWS\system32\DRIVERS\WudfPf.sys
12:56:53.0000 1596  WudfPf - ok
12:56:53.0046 1596  [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd          C:\WINDOWS\system32\DRIVERS\wudfrd.sys
12:56:53.0062 1596  WudfRd - ok
12:56:53.0093 1596  [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc        C:\WINDOWS\System32\WUDFSvc.dll
12:56:53.0140 1596  WudfSvc - ok
12:56:53.0281 1596  [ AE83ADA96575DACF533C2BCB1FC163DC ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
12:56:53.0484 1596  WZCSVC - ok
12:56:53.0546 1596  [ 8302DE1C64618D72346DD0034DBC5D9B ] xmlprov        C:\WINDOWS\System32\xmlprov.dll
12:56:53.0640 1596  xmlprov - ok
12:56:53.0671 1596  ================ Scan global ===============================
12:56:53.0703 1596  [ 1B91BAC6996731EE8925F58205DCB016 ] C:\WINDOWS\system32\basesrv.dll
12:56:53.0812 1596  [ 6D4006EF6E45030BCA14CBFE8893E9B9 ] C:\WINDOWS\system32\winsrv.dll
12:56:53.0968 1596  [ 6D4006EF6E45030BCA14CBFE8893E9B9 ] C:\WINDOWS\system32\winsrv.dll
12:56:54.0015 1596  [ EDB6B81761BD60F32F740BBC40AFB676 ] C:\WINDOWS\system32\services.exe
12:56:54.0015 1596  [Global] - ok
12:56:54.0015 1596  ================ Scan MBR ==================================
12:56:54.0031 1596  [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
12:56:54.0343 1596  \Device\Harddisk0\DR0 - ok
12:56:54.0343 1596  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
12:56:54.0468 1596  \Device\Harddisk1\DR1 - ok
12:56:54.0468 1596  [ D6A795CF6A07FFBA21E6ACBAE37E21AD ] \Device\Harddisk2\DR4
12:56:54.0703 1596  \Device\Harddisk2\DR4 - ok
12:56:54.0703 1596  ================ Scan VBR ==================================
12:56:54.0718 1596  [ 59CBACFEB229F685BCCFDE5ED8600798 ] \Device\Harddisk0\DR0\Partition1
12:56:54.0718 1596  \Device\Harddisk0\DR0\Partition1 - ok
12:56:54.0734 1596  [ FACA1D6418F0D722BF88298E5024AE73 ] \Device\Harddisk1\DR1\Partition1
12:56:54.0750 1596  \Device\Harddisk1\DR1\Partition1 - ok
12:56:54.0750 1596  ============================================================
12:56:54.0750 1596  Scan finished
12:56:54.0750 1596  ============================================================
12:56:54.0859 1588  Detected object count: 17
12:56:54.0859 1588  Actual detected object count: 17
12:59:05.0718 1588  AcrSch2Svc ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0718 1588  AcrSch2Svc ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0718 1588  Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0718 1588  Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0718 1588  Dot3svc ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0718 1588  Dot3svc ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0718 1588  EapHost ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0718 1588  EapHost ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0734 1588  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0734 1588  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0734 1588  HDAudBus ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0734 1588  HDAudBus ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0734 1588  hkmsvc ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0734 1588  hkmsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0750 1588  MTSBDA ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0750 1588  MTSBDA ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0750 1588  MtsHID ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0750 1588  MtsHID ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0750 1588  napagent ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0750 1588  napagent ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0765 1588  PassThru Service ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0765 1588  PassThru Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0765 1588  snapman ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0765 1588  snapman ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0781 1588  tifsfilter ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0781 1588  tifsfilter ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0781 1588  timounter ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0781 1588  timounter ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0781 1588  USBAAPL ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0781 1588  USBAAPL ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0796 1588  WMPNetworkSvc ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0796 1588  WMPNetworkSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:59:05.0796 1588  WpdUsb ( UnsignedFile.Multi.Generic ) - skipped by user
12:59:05.0796 1588  WpdUsb ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus 30.01.2013 14:20
adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Falls der adwCleaner schon mal in der runtergeladen wurde, bitte die alte adwcleaner.exe löschen und neu runterladen!!
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Suche.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[Rx].txt. (x=fortlaufende Nummer)

lionos 30.01.2013 14:32
Hier das Ergebnis:

Code:
# AdwCleaner v2.109 - Datei am 30/01/2013 um 14:28:31 erstellt
# Aktualisiert am 26/01/2013 von Xplode
# Betriebssystem : Microsoft Windows XP Service Pack 2 (32 bits)
# Benutzer : Gerhard - GERFRUEH-9EFD7D
# Bootmodus : Abgesicherter Modus
# Ausgeführt unter : C:\Dokumente und Einstellungen\Gerhard\Desktop\adwcleaner.exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\searchplugins\Askcom.xml
Datei Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\searchplugins\Conduit.xml
Datei Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\searchplugins\SweetIm.xml
Datei Gefunden : C:\END
Datei Gefunden : C:\Programme\Mozilla Firefox\searchplugins\babylon.xml
Datei Gefunden : C:\user.js
Datei Gefunden : C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
Ordner Gefunden : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ask
Ordner Gefunden : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
Ordner Gefunden : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Babylon
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Media Finder
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\Conduit
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\ConduitEngine
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\CT2269050
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\extensions\toolbar@ask.com
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\Smartbar
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\OpenCandy
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\PriceGong
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\AskToolbar
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\Babylon
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\Conduit
Ordner Gefunden : C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\DVDVideoSoftTB
Ordner Gefunden : C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\DVDVideoSoftTB
Ordner Gefunden : C:\Programme\Ask.com
Ordner Gefunden : C:\Programme\Conduit
Ordner Gefunden : C:\Programme\DVDVideoSoftTB
Ordner Gefunden : C:\Programme\SweetIM
Ordner Gefunden : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Ordner Gefunden : C:\WINDOWS\Installer\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}

***** [Registrierungsdatenbank] *****

Schlüssel Gefunden : HKCU\Software\APN
Schlüssel Gefunden : HKCU\Software\AppDataLow\HavingFunOnline
Schlüssel Gefunden : HKCU\Software\Ask.com
Schlüssel Gefunden : HKCU\Software\AskToolbar
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\DVDVideoSoftTB
Schlüssel Gefunden : HKCU\Software\MediaFinder
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gefunden : HKCU\Software\PriceGong
Schlüssel Gefunden : HKCU\Software\SmartBar
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Toolbar
Schlüssel Gefunden : HKLM\Software\APN
Schlüssel Gefunden : HKLM\Software\AskToolbar
Schlüssel Gefunden : HKLM\Software\Babylon
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Conduit.Engine
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Schlüssel Gefunden : HKLM\Software\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Schlüssel Gefunden : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gefunden : HKLM\Software\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Schlüssel Gefunden : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\MF
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\Software\DVDVideoSoftTB
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99401241-1D12-4F60-A99E-815A8336D637}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB94258E-9713-421F-9252-8C95457DF5A7}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DVDVideoSoftTB Toolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
Schlüssel Gefunden : HKU\S-1-5-21-1390067357-1035525444-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKU\S-1-5-21-1390067357-1035525444-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EEE6C35D-6118-11DC-9C72-001320C79847}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]

***** [Internet Browser] *****

-\\ Internet Explorer v6.0.2900.2180

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?babsrc=NT_ss&affID=101067&mntrId=78d03c29000000000000001fd02e3b2d

-\\ Mozilla Firefox v18.0.1 (de)

Datei : C:\Dokumente und Einstellungen\Gerhard\Anwendungsdaten\Mozilla\Firefox\Profiles\low7kq6d.default\prefs.js

Gefunden : user_pref("CT2269050..clientLogIsEnabled", true);
Gefunden : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Gefunden : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Gefunden : user_pref("CT2269050.1000082.isPlayDisplay", "true");
Gefunden : user_pref("CT2269050.1000082.state", "{\"state\":\"stopped\",\"text\":\"Hotmix 108\",\"description\"[...]
Gefunden : user_pref("CT2269050.1000234.TWC_TMP_city", "SANKT POLTEN");
Gefunden : user_pref("CT2269050.1000234.TWC_TMP_country", "AT");
Gefunden : user_pref("CT2269050.1000234.TWC_locId", "AUXX0303");
Gefunden : user_pref("CT2269050.1000234.TWC_location", "Sankt Polten, Austria");
Gefunden : user_pref("CT2269050.1000234.TWC_region", "OT");
Gefunden : user_pref("CT2269050.1000234.TWC_temp_dis", "c");
Gefunden : user_pref("CT2269050.1000234.TWC_wind_dis", "kmh");
Gefunden : user_pref("CT2269050.1000234.weatherData", "{\"icon\":\"30.png\",\"temperature\":\"17°C\",\"temperat[...]
Gefunden : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Gefunden : user_pref("CT2269050.CT2269050", "CT2269050");
Gefunden : user_pref("CT2269050.CurrentServerDate", "27-3-2011");
Gefunden : user_pref("CT2269050.DialogsAlignMode", "LTR");
Gefunden : user_pref("CT2269050.DialogsGetterLastCheckTime", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("CT2269050.DownloadReferralCookieData", "");
Gefunden : user_pref("CT2269050.EMailNotifierPollDate", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("CT2269050.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gefunden : user_pref("CT2269050.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Gefunden : user_pref("CT2269050.FirstServerDate", "27-3-2011");
Gefunden : user_pref("CT2269050.FirstTime", true);
Gefunden : user_pref("CT2269050.FirstTimeFF3", true);
Gefunden : user_pref("CT2269050.FixPageNotFoundErrors", true);
Gefunden : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Gefunden : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Gefunden : user_pref("CT2269050.HasUserGlobalKeys", true);
Gefunden : user_pref("CT2269050.Initialize", true);
Gefunden : user_pref("CT2269050.InitializeCommonPrefs", true);
Gefunden : user_pref("CT2269050.InstallationAndCookieDataSentCount", 1);
Gefunden : user_pref("CT2269050.InstalledDate", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("CT2269050.InvalidateCache", false);
Gefunden : user_pref("CT2269050.IsGrouping", false);
Gefunden : user_pref("CT2269050.IsMulticommunity", false);
Gefunden : user_pref("CT2269050.IsOpenThankYouPage", true);
Gefunden : user_pref("CT2269050.IsOpenUninstallPage", true);
Gefunden : user_pref("CT2269050.LanguagePackLastCheckTime", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Gefunden : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Gefunden : user_pref("CT2269050.LastLogin_3.3.3.2", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("CT2269050.LatestVersion", "3.2.5.2");
Gefunden : user_pref("CT2269050.Locale", "en");
Gefunden : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Gefunden : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Gefunden : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Gefunden : user_pref("CT2269050.RadioIsPodcast", false);
Gefunden : user_pref("CT2269050.RadioLastCheckTime", "Sun Mar 27 2011 13:31:39 GMT+0200");
Gefunden : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Gefunden : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Gefunden : user_pref("CT2269050.RadioMediaID", "12473383");
Gefunden : user_pref("CT2269050.RadioMediaType", "Media Player");
Gefunden : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Gefunden : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Gefunden : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Gefunden : user_pref("CT2269050.SavedHomepage", "hxxp://www.google.at/");
Gefunden : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Gefunden : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
Gefunden : user_pref("CT2269050.SearchInNewTabEnabled", true);
Gefunden : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Gefunden : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Gefunden : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Gefunden : user_pref("CT2269050.ServiceMapLastCheckTime", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("CT2269050.SettingsLastCheckTime", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("CT2269050.SettingsLastUpdate", "1300785496");
Gefunden : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Gefunden : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1246790578");
Gefunden : user_pref("CT2269050.UserID", "UN82542349505496867");
Gefunden : user_pref("CT2269050.ValidationData_Toolbar", 2);
Gefunden : user_pref("CT2269050.WeatherNetwork", "");
Gefunden : user_pref("CT2269050.WeatherPollDate", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("CT2269050.WeatherUnit", "C");
Gefunden : user_pref("CT2269050.addressBarTakeOverEnabledInHidden", "true");
Gefunden : user_pref("CT2269050.alertChannelId", "666138");
Gefunden : user_pref("CT2269050.approveUntrustedApps", true);
Gefunden : user_pref("CT2269050.autoDisableScopes", -1);
Gefunden : user_pref("CT2269050.cb_experience_000", "34");
Gefunden : user_pref("CT2269050.cb_firstuse0100", "1");
Gefunden : user_pref("CT2269050.cbcountry_001", "AT");
Gefunden : user_pref("CT2269050.cbfirsttime", "Sun Sep 16 2012 11:54:20 GMT+0200");
Gefunden : user_pref("CT2269050.defaultSearch", "false");
Gefunden : user_pref("CT2269050.embeddedsData", "[{\"appId\":\"128834881989343895\",\"apiPermissions\":{\"cross[...]
Gefunden : user_pref("CT2269050.enableAlerts", "false");
Gefunden : user_pref("CT2269050.enableSearchFromAddressBar", "true");
Gefunden : user_pref("CT2269050.firstTimeDialogOpened", true);
Gefunden : user_pref("CT2269050.fixPageNotFoundError", "true");
Gefunden : user_pref("CT2269050.fixPageNotFoundErrorInHidden", "true");
Gefunden : user_pref("CT2269050.fixUrls", true);
Gefunden : user_pref("CT2269050.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Gefunden : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("CT2269050.hxxp___www_socialgrowthtechnologies_com_couponbuddy_v001.APP_WIN_FEATURES", "op[...]
Gefunden : user_pref("CT2269050.installId", "ConduitNSISIntegration");
Gefunden : user_pref("CT2269050.installType", "ConduitNSISIntegration");
Gefunden : user_pref("CT2269050.isAppTrackingManagerOn", true);
Gefunden : user_pref("CT2269050.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gefunden : user_pref("CT2269050.isNewTabEnabled", true);
Gefunden : user_pref("CT2269050.isPerformedSmartBarTransition", "true");
Gefunden : user_pref("CT2269050.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Gefunden : user_pref("CT2269050.myStuffEnabled", true);
Gefunden : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Gefunden : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Gefunden : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Gefunden : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Gefunden : user_pref("CT2269050.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Gefunden : user_pref("CT2269050.openThankYouPage", "false");
Gefunden : user_pref("CT2269050.openUninstallPage", "true");
Gefunden : user_pref("CT2269050.search.searchAppId", "128834881989343895");
Gefunden : user_pref("CT2269050.search.searchCount", "0");
Gefunden : user_pref("CT2269050.searchInNewTabEnabledInHidden", "true");
Gefunden : user_pref("CT2269050.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gefunden : user_pref("CT2269050.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Gefunden : user_pref("CT2269050.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Gefunden : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Gefunden : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Gefunden : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Gefunden : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Gefunden : user_pref("CT2269050.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Gefunden : user_pref("CT2269050.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1347789258123");
Gefunden : user_pref("CT2269050.serviceLayer_services_appsMetadata_lastUpdate", "1347789258340");
Gefunden : user_pref("CT2269050.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1347789258219");
Gefunden : user_pref("CT2269050.serviceLayer_services_login_10.10.28.11_lastUpdate", "1348584401433");
Gefunden : user_pref("CT2269050.serviceLayer_services_optimizer_lastUpdate", "1347789258615");
Gefunden : user_pref("CT2269050.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1347789258179");
Gefunden : user_pref("CT2269050.serviceLayer_services_searchAPI_lastUpdate", "1347789258054");
Gefunden : user_pref("CT2269050.serviceLayer_services_serviceMap_lastUpdate", "1348588436304");
Gefunden : user_pref("CT2269050.serviceLayer_services_toolbarContextMenu_lastUpdate", "1347789258280");
Gefunden : user_pref("CT2269050.serviceLayer_services_toolbarSettings_lastUpdate", "1348584400968");
Gefunden : user_pref("CT2269050.serviceLayer_services_translation_lastUpdate", "1348588436371");
Gefunden : user_pref("CT2269050.settingsINI", true);
Gefunden : user_pref("CT2269050.shouldFirstTimeDialog", "false");
Gefunden : user_pref("CT2269050.smartbar.CTID", "CT2269050");
Gefunden : user_pref("CT2269050.smartbar.Uninstall", "0");
Gefunden : user_pref("CT2269050.smartbar.isHidden", true);
Gefunden : user_pref("CT2269050.smartbar.toolbarName", "DVDVideoSoftTB ");
Gefunden : user_pref("CT2269050.startPage", "false");
Gefunden : user_pref("CT2269050.testingCtid", "");
Gefunden : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("CT2269050.toolbarBornServerTime", "27-3-2011");
Gefunden : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("CT2269050.toolbarCurrentServerTime", "25-9-2012");
Gefunden : user_pref("CT2269050.toolbarDisabled", "true");
Gefunden : user_pref("CT2269050.url_history0001", "hxxp://www.google.at/search?q=einfache+innennaht+bei+true+re[...]
Gefunden : user_pref("CT2269050.usagesFlag", 2);
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/AT", "\"0\"")[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/AT", "\"0\"")[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
Gefunden : user_pref("CommunityToolbar.EngineHiddenByUser", true);
Gefunden : user_pref("CommunityToolbar.EngineOwner", "CT2269050");
Gefunden : user_pref("CommunityToolbar.EngineOwnerGuid", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}");
Gefunden : user_pref("CommunityToolbar.EngineOwnerToolbarId", "dvdvideosofttb");
Gefunden : user_pref("CommunityToolbar.IsEngineShown", false);
Gefunden : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Gefunden : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2269050");
Gefunden : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}");
Gefunden : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "dvdvideosofttb");
Gefunden : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=mcafee[...]
Gefunden : user_pref("CommunityToolbar.ToolbarsList", "CT2269050,ConduitEngine");
Gefunden : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");
Gefunden : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Mar 27 2011 13:31:34 GMT+02[...]
Gefunden : user_pref("CommunityToolbar.alert.alertEnabled", true);
Gefunden : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Gefunden : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Apr 03 2011 16:46:11 GMT+0200");
Gefunden : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Gefunden : user_pref("CommunityToolbar.alert.locale", "en");
Gefunden : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Gefunden : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Mon Apr 04 2011 08:40:08 GMT+0200");
Gefunden : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1291048634");
Gefunden : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Gefunden : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Gefunden : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Gefunden : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Gefunden : user_pref("CommunityToolbar.alert.userId", "6d07cf85-1dfb-4614-a2f7-c3bdff503f41");
Gefunden : user_pref("CommunityToolbar.globalUserId", "4c787324-e46d-4bbd-afe2-87d184b00c8f");
Gefunden : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Gefunden : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Gefunden : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050");
Gefunden : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("ConduitEngine.FirstServerDate", "03/27/2011 14");
Gefunden : user_pref("ConduitEngine.FirstTime", true);
Gefunden : user_pref("ConduitEngine.FirstTimeFF3", true);
Gefunden : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Gefunden : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Gefunden : user_pref("ConduitEngine.Initialize", true);
Gefunden : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Gefunden : user_pref("ConduitEngine.InstalledDate", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("ConduitEngine.IsMulticommunity", false);
Gefunden : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Gefunden : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Gefunden : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Gefunden : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Gefunden : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Mar 27 2011 13:31:33 GMT+0200");
Gefunden : user_pref("ConduitEngine.UserID", "UN44971090005129775");
Gefunden : user_pref("ConduitEngine.engineLocale", "de");
Gefunden : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sun Mar 27 2011 13:31:34 GMT+0200");
Gefunden : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Mar 27 2011 13:31:35 GMT+0200");
Gefunden : user_pref("ConduitEngine.initDone", true);
Gefunden : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Gefunden : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=mcafee&p=");
Gefunden : user_pref("Smartbar.keywordURLSelectedCTID", "CT2269050");
Gefunden : user_pref("browser.search.defaultengine", "Ask.com");
Gefunden : user_pref("browser.search.defaultenginename", "Ask.com");
Gefunden : user_pref("browser.search.defaultthis.engineName", "DVDVideoSoftTB Customized Web Search");
Gefunden : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&Sea[...]
Gefunden : user_pref("browser.search.order.1", "Ask.com");
Gefunden : user_pref("browser.search.selectedEngine", "Ask.com");
Gefunden : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Gefunden : user_pref("extensions.BabylonToolbar_i.babExt", "");
Gefunden : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=101067");
Gefunden : user_pref("extensions.BabylonToolbar_i.hardId", "78d03c29000000000000001fd02e3b2d");
Gefunden : user_pref("extensions.BabylonToolbar_i.id", "78d03c29000000000000001fd02e3b2d");
Gefunden : user_pref("extensions.BabylonToolbar_i.instlDay", "15351");
Gefunden : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Gefunden : user_pref("extensions.BabylonToolbar_i.newTab", false);
Gefunden : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Gefunden : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Gefunden : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Gefunden : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Gefunden : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Gefunden : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Gefunden : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1719:07:04");
Gefunden : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Gefunden : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.yahoo.com/search?fr=mcafee&p=")[...]
Gefunden : user_pref("keyword.URL", "hxxp://search.sweetim.com/search.asp?src=2&q=");

-\\ Google Chrome v [Version kann nicht ermittelt werden]

Datei : C:\Dokumente und Einstellungen\Gerhard\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [41495 octets] - [30/01/2013 14:28:31]

########## EOF - C:\AdwCleaner[R1].txt - [41556 octets] ##########


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:27 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19