Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Msn verschickt Spam! (https://www.trojaner-board.de/98578-msn-verschickt-spam.html)

glamp95 01.05.2011 22:13
Msn verschickt Spam!
 
Ich weiss das das hier schon diskutiert wurde, aber ich habe nichts gefunden, dass auf meinen Fall zutrifft. Es ist so:
Ich habe vor ein paar Tagen von einem Freund eine E-Mail bekommen, diese hat einen Link enthalten, ich Dummkopf habe aus Neugier drauf geklickt. Ich kam dann auf eine Seite bei der man Viagra und andere Medikamente bestellen kann. Ich bin dann sofort wieder weg von dieser Seite.
Jetzt ein paar Tage später, finde ich in meinem Posteingang Nachrichten, die sagen, dass eine E-Mail an etwa zehn meiner Kontakte nicht versendet werden konnte. Die E-Mail enthätl auch den Link, der auf die Seite mit den Medikamenten führt.
Dann ein paar Stunden später erhalte ich eine E-Mail von mir selbst, da ich mich selbst auch als Kontakt habe, in der dieser Li9nk auch wieder drin ist.
Nun anschliessend habe i9ch mich im Internet etwas erkundigt und mein Passwort geändert.
Hier im Forum steht, dass es sein kann, dass man sich beim Besuch der Seite einen Virus oder Trojaner heruntergeladen hat, daher habe ich einen Vollständigen Systemscann mit Norton gemacht, der hat nichts gefunden.
Und jetzt ist noch etwas seltsam. Ich habe diesen Link, der mich auf die Seite mit den Medikamenten gebracht hat, nicht mit dem Computer geöffnet, sondern mit dem Ipod Touch.
Daher kann es ja fast kein Virus sein, aber was ist es dann?
Und was kann ich dagegen tun?

Ich hoffe Ihr könnt mir helfen.
glamp

kira 02.05.2011 09:25
Hallo und Herzlich Willkommen! :)

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:
Zitat:
  • "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
    - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
    - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
  • Charakteristische Merkmale/Profilinformationen:
    - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] ersetzen
  • Die Systemprüfung und Bereinigung:
    - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
  • Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
  • Innerhalb der Betreuungszeit:
    - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
  • Die Reihenfolge:
    - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
  • GECRACKTE SOFTWARE werden hier nicht geduldet!!!!
  • Ansonsten unsere Forumsregeln:
    - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
  • Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen:)
Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen
Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen!

1.
Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org
  • Installieren und per Doppelklick starten.
  • Deutsch einstellen und gleich mal die Datenbanken zu aktualisieren - online updaten
  • "Komplett Scan durchführen" wählen (überall Haken setzen)
  • wenn der Scanvorgang beendet ist, klicke auf "Zeige Resultate"
  • Alle Funde - falls MBAM meldet in C:\System Volume Information - den Haken bitte entfernen - markieren und auf "Löschen" - "Ausgewähltes entfernen") klicken.
  • Poste das Ergebnis hier in den Thread - den Bericht findest Du unter "Scan-Berichte"
eine bebilderte Anleitung findest Du hier: Anleitung

2.
Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in Code-Tags hier in den Thread.

3.
→ Lade Dir HJTscanlist.zip herunter
→ entpacke die Datei auf deinem Desktop
→ Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren
→ per Doppelklick starten
→ Wähle dein Betriebsystem aus - bei Win7 wähle Vista
→ Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen
→ Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren
→ Bitte kopiere den Inhalt hier in Deinen Thread.
** Falls es klappt auf einmal nicht, kannst den Text in mehrere Teile teilen und so posten

4.
Ich würde gerne noch all deine installierten Programme sehen:
Lade dir das Tool Ccleaner herunter
→ Download
installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen
dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..."
wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein

Zitat:
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B hjtsanlist o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]
** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw
gruß
Coverflow

glamp95 02.05.2011 12:09
Sie gehen davon aus, dass ich einen Virus oder so was habe richtig?
Nun aber wieso erkennt dann Norton nichts und wie kann ich diesen Virus bekommen haben, ich habe ja wie schon gesagt die Website nur von meinem Ipod Touch besucht.

Wäre es nicht einfacher anstatt alle diese Sachen zu tun sich einfach eine neu E-Mail Adresse anzuschaffen und dann halt überall wo man registriert ist die E-Mail Adresse zuändern?

kira 02.05.2011 16:00
Sie gehen davon aus, dass ich einen Virus oder so was habe richtig?
Laut deinen Angaben ist nicht ausgeschlossen

Nun aber wieso erkennt dann Norton nichts
Jede Software funktioniert etwas anders und jedes Programm findet etwas anderes! Kannst Du mal mal im Netz schauen, findest unzählige Programme, aber keins ist davon 100%ig perfekt
geht auch nicht, weil die Aktivität der PC-Viren-Erzeuger steigen pro Minute. Das heißt, ein Schutzprogramm usw nur nach bestimmten Merkmalen und die in der Datenbank gesammelten Daten können nach Viren suchen, erkennen und diese zu entfernen

Wäre es nicht einfacher anstatt alle diese Sachen zu tun sich einfach eine neu E-Mail Adresse anzuschaffen und dann halt überall wo man registriert ist die E-Mail Adresse zuändern?
das kann ja wohl nicht dauernd die Lösung sein, muss herausgefunden werden, wo die Ursache der Problematik liegt!

glamp95 02.05.2011 20:01
Okay hier zuerst das von MBAM:
:
Code:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 6492

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

02.05.2011 20:46:12
mbam-log-2011-05-02 (20-46-12).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|)
Durchsuchte Objekte: 288130
Laufzeit: 1 Stunde(n), 53 Minute(n), 15 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM\COMPONENTS\WIDGITOOLBARFF.DLL (Adware.WidgiToolbar) -> Value: WIDGITOOLBARFF.DLL -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\program files\common files\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
Es hat zwei infiszierte Dateien gefunden. Diese habe ich dann entfernt, nun stehen diese Dateien bei Quarantäne, muss ich dort jetzt noch löschen drücken?

glamp95 02.05.2011 20:03
Nun das vom 2 Schritt:

:
Code:
OTL Extras logfile created on: 02.05.2011 20:53:52 - Run 1
OTL by OldTimer - Version 3.2.22.3    Folder = C:\Users\Timo\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 60.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 109.03 Gb Free Space | 37.61% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: TIMO-MOBIL | User Name: Timo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{401FF33D-6A49-4D27-BBDC-288AEC1B47AD}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{904A90D9-9334-44C7-84F4-19FBE45F3126}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{FFDFCD60-B8C4-466B-82DE-C37E26F0E777}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0997A8ED-77C6-4B94-9A5F-76027ADAF832}" = protocol=6 | dir=in | app=c:\program files\spamihilator\cdcc.exe |
"{232838F7-EB3D-4154-8350-2D52133D83EE}" = protocol=17 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{41EAD167-C645-4291-988C-5E5FB5D96D14}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4E86B8B3-90AF-41B2-803E-08F68EF5DD05}" = protocol=6 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{7BB77A5D-DD19-48C1-94DE-84CEAA164402}" = protocol=6 | dir=in | app=c:\program files\spamihilator\spamihilator.exe |
"{870998A7-077C-44F9-B329-07BB00BFE55B}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{8C5B5EDE-EC52-4FB0-88B2-53ABF6E23750}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{94752534-85DD-439D-9702-CE8A9F95CE99}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{98439142-B30E-4303-A3BE-5078232DB6AE}" = protocol=6 | dir=in | app=c:\program files\spamihilator\dccproc.exe |
"{9F2751DE-ECD1-407C-9DDB-0E12AA96A150}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{A68D62C1-2C51-4B3F-9232-9632E3CD4AEC}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B2133616-A3F7-49B3-9DCD-EC1840293301}" = protocol=17 | dir=in | app=c:\program files\spamihilator\spamihilator.exe |
"{CE35DEE9-D716-47B8-A16D-D010D06BD81E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{DB9F1547-3694-4EF1-914C-0F870F1F6091}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{E08C5138-0E63-4839-BD60-26E3321AB30E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E625A7E7-FFE7-46F7-AB6F-33F118F5F629}" = protocol=17 | dir=in | app=c:\program files\spamihilator\cdcc.exe |
"{F1E851DF-11D8-42F5-947E-6CFDF69F6CDC}" = protocol=17 | dir=in | app=c:\program files\spamihilator\dccproc.exe |
"TCP Query User{BF006466-157E-4246-A8A3-1E8C88211742}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{18A8ACC5-B149-4E3C-A053-817CC2E96366}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{077A7810-A937-4465-AD08-ACED9807995F}" = ANNO 1602 Königs-Edition
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Central Data
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B9B76C9-4967-59FC-C994-191AEA152F04}" = ATI Catalyst Install Manager
"{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1C2B3CEA-482E-4453-B3E2-C9731337828A}" = Microsoft SQL Server 2008 Native Client
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Central Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{202F2838-156B-FC76-013F-9241B9673F39}" = CCC Help Thai
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 24
"{2B4E24A0-A06F-488D-87D8-16738E5E1104}" = Windows Live Family Safety
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{325ED81A-EC15-7CE8-729B-0392A1DD3854}" = CCC Help Czech
"{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIO Guide
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver
"{353FE16B-30FE-469A-BF55-B978F4218003}" = iTunes
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCA23DD-CEDA-CC7F-C74C-4D1EDAE919AA}" = Catalyst Control Center Graphics Full New
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{42DD2173-B7CA-8AB3-8AC2-40DFE2CA6FBC}" = CCC Help German
"{430DD2C5-65FD-9781-F9F2-693CAF05CD10}" = Catalyst Control Center InstallProxy
"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{49B8916D-1DEA-F18A-731F-BF0FE209C63B}" = CCC Help Chinese Standard
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser
"{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"{4EEAF8D8-CB79-06CA-A566-EAC1726DAABB}" = CCC Help Finnish
"{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Easy Media Creator 10 LJ
"{540DB82A-EE11-BBC1-8BD8-BB7D937A53A4}" = CCC Help Hungarian
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5882396B-9FB3-37AC-1AE1-5EA344BD7705}" = Catalyst Control Center Graphics Previews Vista
"{5BA149D9-D5FA-5AB3-400B-9F1BF424B7CE}" = CCC Help Chinese Traditional
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5C5EE8F2-0B38-4C13-AE4E-A87A237FE718}" =
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F5867F0-2D23-4338-A206-01A76C823924}" = VAIO Energie Verwaltung
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{642F96CC-1D3B-20DE-8673-44EE15B3DC2F}" = CCC Help Portuguese
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = Click to Disc
"{6D26ACF9-4919-0744-C509-28EAF53112D4}" = CCC Help Dutch
"{6E9CFEF5-0245-411F-8587-CF83DF9D4B05}" = Microsoft SQL Server 2008 Database Engine Services
"{71256374-2053-CF0F-BD54-20082980B95C}" = Catalyst Control Center Graphics Full Existing
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{72EEB695-388B-4835-8EA6-0C04545B06B9}" = Intel(R) PROSet/Wireless WiFi-Software
"{737D8F4D-24D4-D626-DEC0-9E39A6166890}" = CCC Help Danish
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Central Audio
"{74B705C2-173A-FFD1-98BC-AD5FB647AB38}" = CCC Help Polish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{784BDC03-2D22-BCAE-5CAC-84AFA799FBDE}" = CCC Help Turkish
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7C404084-C5A6-42FF-B731-0BAC79A6E134}" = VAIO Original Funktion Einstellungen
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{8572CE7D-46B0-70B3-96CD-534F07B35F5D}" = CCC Help Italian
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87544F2E-CCA5-01BC-AEBC-D8C1D759EE61}" = CCC Help English
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ED5D0B7-A193-413F-815A-530BE36B38F7}" = Spamihilator 0.9.9.53 (32-Bit)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90A40407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{90B38901-52C8-85A7-D6C8-9A5592C9FCAA}" = CCC Help Greek
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95229EF6-F4A1-413A-BA50-668311FAFE19}" = VAIO Original Function Settings
"{9648D00F-0589-619B-6114-BF2A0620168B}" = CCC Help Korean
"{96D0B6C6-5A72-4B47-8583-A87E55F5FE81}" =
"{9805E4EE-9B66-CABD-AF6B-4B84F2A8EF46}" = Skins
"{9973498D-EA29-4A68-BE0B-C88D6E03E928}" = ArcSoft WebCam Companion 2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AA2D735-3375-42D4-9A61-3FFEF82599D6}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup
"{9AC34FA1-BCDE-1D09-5DB7-EB6A064FDEA9}" = CCC Help Spanish
"{9B973FC0-E71F-6F89-10D6-1BFD063D1707}" = CCC Help Swedish
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9EAC0E21-510E-4259-A9C6-F5D5B8969036}" = Catalyst Control Center - Branding
"{A0B139A7-E8D5-49E8-A7BF-12421E652208}" = pdfforge Toolbar v4.3
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A3979A05-6834-D0A7-75CD-71B5A9E5F4C0}" = Catalyst Control Center Localization All
"{A6F21795-E629-35B2-9487-00A8363B28AA}" = Catalyst Control Center Graphics Light
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Central Copy
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B8E9F8A1-9F4D-43D5-ABD6-1DF067FAA469}" = Microsoft SQL Server 2008 Database Engine Services
"{C0AD2831-3398-A078-CBEB-39A6B381BB56}" = CCC Help Japanese
"{C18A02EC-966B-E7A7-9AC9-082F770ABF9B}" = CCC Help Russian
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{C9C390CC-F9B9-EFE8-27DF-6EB7FF8F8760}" = CCC Help Norwegian
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CD431A7B-88D8-0823-E66F-CCFAEA6DA7B4}" = ccc-core-static
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF0F8D1B-5FB9-468D-BD88-E6239906D2B7}" = Click to Disc
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D47E6B9C-F5A5-23B7-AB6A-3806AD4C9529}" = ccc-utility
"{D6DA6836-77C2-5338-10E3-D7A6CD65681D}" = Catalyst Control Center Core Implementation
"{DA8F979E-43B9-3EEC-721C-F297D9509992}" = Catalyst Control Center Graphics Previews Common
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Central Core
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}" = Microsoft SQL Server Native Client
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" =
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FE0782BC-7AB0-CF6A-6E38-D3040462C7EC}" = CCC Help French
"{FE51662F-D8F6-43B5-99D9-D4894AF00F83}" = Roxio Easy Media Creator Home
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"BFG-Big Fish Games Spiel-Suite" = Big Fish Games Spiel-Suite
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DivX Setup.divx.com" = DivX-Setup
"dt icon module" =
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free FLV Converter_is1" = Free FLV Converter V 6.96.0
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324
"Freemake Video Converter_is1" = Freemake Video Converter Version 2.0.1
"gtfirstboot Setting Request" =
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"InstallShield_{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MFU Module" =
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"NAV" = Norton AntiVirus
"ProInst" = Intel PROSet Wireless
"Samsung CLX-216x Series" = Samsung CLX-216x Series
"Samsung Universal Print Driver" = Samsung Universal Print Driver
"sp6" = Logitech SetPoint 6.20
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"VAIO Help and Support" =
"VLC media player" = VLC media player 1.1.7
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Worms for Pocket PC" = Worms for Pocket PC
"xp-AntiSpy" = xp-AntiSpy 3.97-9
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Zattoo4" = Zattoo4 4.0.5
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 24.04.2011 06:02:37 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description =
 
Error - 24.04.2011 06:39:36 | Computer Name = Timo-Mobil | Source = EventSystem | ID = 4621
Description =
 
Error - 24.04.2011 09:31:29 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description =
 
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1158214
 
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1158214
 
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 9337502
 
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 9337502
 
Error - 25.04.2011 07:47:36 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description =
 
[ System Events ]
Error - 11.02.2011 12:16:55 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 11.02.2011 12:16:55 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 11.02.2011 18:41:04 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 11.02.2011 18:41:04 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 04:54:56 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 04:54:56 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 05:14:38 | Computer Name = Timo-Mobil | Source = DCOM | ID = 10005
Description =
 
Error - 12.02.2011 05:14:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7009
Description =
 
Error - 12.02.2011 05:14:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 11:37:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
 
< End of report >

glamp95 02.05.2011 20:04
Die zweite Datei von Schritt Nummer 2:
:
Code:
OTL logfile created on: 02.05.2011 20:53:52 - Run 1
OTL by OldTimer - Version 3.2.22.3    Folder = C:\Users\Timo\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 60.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 109.03 Gb Free Space | 37.61% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: TIMO-MOBIL | User Name: Timo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Timo\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
PRC - C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
PRC - C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
PRC - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Sony Corporation)
PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
PRC - C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
PRC - C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe ()
PRC - c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Timo\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (BBSvc) -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (Application Updater) -- C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (NAV) -- C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccSvcHst.exe (Symantec Corporation)
SRV - (LBTServ) -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (Samsung UPD Service) -- C:\Windows\System32\SUPDSvc.exe (Samsung Electronics CO., LTD.)
SRV - (VUAgent) -- C:\Program Files\Sony\VAIO Update 5\VUAgent.exe (Sony Corporation)
SRV - (EvtEng) Intel(R) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV - (RegSrvc) Intel(R) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV - (PACSPTISVR) -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe (Sony Corporation)
SRV - (RtkAudioService) -- C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
SRV - (VAIO Power Management) -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (IviRegMgr) -- c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (BHDrvx86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20110419.001\BHDrvx86.sys (Symantec Corporation)
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110502.002\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110502.002\NAVENG.SYS (Symantec Corporation)
DRV - (IDSVix86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20110429.002\IDSvix86.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SYMTDIv) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SYMTDIV.SYS (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SymEvent) -- C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SRTSP) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\system32\drivers\NAV\1205000.07D\SRTSPX.SYS (Symantec Corporation)
DRV - (SymEFA) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymIRON) -- C:\Windows\system32\drivers\NAV\1205000.07D\Ironx86.SYS (Symantec Corporation)
DRV - (SymDS) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMDS.SYS (Symantec Corporation)
DRV - (LUsbFilt) -- C:\Windows\System32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouFilt) -- C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (s1039bus) Sony Ericsson Device 1039 driver (WDM) -- C:\Windows\System32\drivers\s1039bus.sys (MCCI Corporation)
DRV - (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS) -- C:\Windows\System32\drivers\s1039nd5.sys (MCCI Corporation)
DRV - (s1039mdm) -- C:\Windows\System32\drivers\s1039mdm.sys (MCCI Corporation)
DRV - (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM) -- C:\Windows\System32\drivers\s1039unic.sys (MCCI Corporation)
DRV - (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s1039mgmt.sys (MCCI Corporation)
DRV - (s1039obex) -- C:\Windows\System32\drivers\s1039obex.sys (MCCI Corporation)
DRV - (s1039mdfl) -- C:\Windows\System32\drivers\s1039mdfl.sys (MCCI Corporation)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (RsFx0103) -- C:\Windows\System32\drivers\RsFx0103.sys (Microsoft Corporation)
DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (DMICall) -- C:\Windows\System32\drivers\DMICall.sys (Sony Corporation)
DRV - (risdptsk) -- C:\Windows\System32\drivers\risdptsk.sys (REDC)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (SFEP) -- C:\Windows\System32\drivers\SFEP.sys (Sony Corporation)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (regi) -- C:\Windows\System32\drivers\regi.sys (InterVideo)
DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.SYS (Samsung Electronics)
DRV - (DgiVecp) -- C:\Windows\System32\drivers\DGIVECP.SYS (Samsung Electronics Co., Ltd.)
DRV - (pfc) -- C:\Windows\System32\drivers\pfc.sys (Padus, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://eu.ask.com?o=15780&l=dis
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.ch/"
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.1
FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.4.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPlgn\ [2011.01.14 18:35:42 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.04.30 13:18:27 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.04.30 13:18:27 | 000,000,000 | ---D | M]
 
[2010.11.25 20:45:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Extensions
[2011.05.01 22:58:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions
[2010.12.21 22:28:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.03.08 22:57:00 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.03.28 17:39:36 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.02.10 18:47:22 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.02.02 23:20:09 | 000,000,000 | ---D | M] (20-20 3D Viewer) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\2020Player@2020Technologies.com
[2010.09.28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\searchplugins\askcom.xml
[2011.04.10 18:46:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.12.21 18:11:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.03.15 22:40:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011.03.10 18:53:15 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM
[2011.01.14 18:35:42 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPLGN
[2011.02.02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.10.27 07:44:13 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.10.27 07:44:13 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.10.27 07:44:13 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.10.27 07:44:13 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.10.27 07:44:13 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: ::1            localhost
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [Maple_S2P] C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Timo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Timo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll -  File not found
O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\Timo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Timo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) - F:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,000,766 | R--- | M] () - F:\Autorun.ico -- [ CDFS ]
O32 - AutoRun File - [2001.09.06 01:04:00 | 000,000,283 | R--- | M] () - F:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell\AutoRun\command - "" = G:\Startme.exe
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Acrobat\command - "" = F:\.\ar500deu.exe -- [2001.09.06 01:04:00 | 009,124,984 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN)
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\DirectX\command - "" = F:\.\DirectX\dxsetup.exe -- [2001.10.16 12:24:46 | 000,140,288 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Setup\command - "" = F:\.\Setup.exe -- [2002.12.02 15:33:00 | 000,107,512 | R--- | M] ()
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\Shell\AutoRun\command - "" = G:\wd_windows_tools\WDEULA.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.05.02 20:52:25 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Timo\Desktop\OTL.exe
[2011.05.02 16:58:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\Malwarebytes
[2011.05.02 16:58:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Malwarebytes' Anti-Malware
[2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.05.02 16:58:10 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.05.02 16:58:10 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.05.02 12:29:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{227CABBB-BF91-469F-8E02-D4D868EB4188}
[2011.05.01 15:19:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{1C9253E1-D764-429F-85F4-AA2052B834DF}
[2011.04.29 15:30:57 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{9802831A-8BF0-472C-921A-BC05E73CEEE3}
[2011.04.28 18:13:08 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{C651C691-93ED-4E9E-94B4-02731314E127}
[2011.04.27 20:00:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Free FLV Converter
[2011.04.27 20:00:17 | 000,000,000 | ---D | C] -- C:\Program Files\Free FLV Converter
[2011.04.27 17:22:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2011.04.27 17:22:26 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2011.04.27 17:22:22 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011.04.27 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{442D6840-DFC6-4D21-BDAC-44DEF9361D1B}
[2011.04.26 18:45:23 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{62042D88-21B2-49D2-9B41-BCCA7ED72F19}
[2011.04.25 17:23:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\iTunes
[2011.04.25 17:22:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011.04.25 17:22:44 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011.04.25 17:19:59 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011.04.25 17:19:30 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.04.25 13:48:05 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{23A5F032-A21F-4F28-85D9-A4FE4C85642A}
[2011.04.24 12:03:27 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{AFD43F2C-5F4F-495F-898D-F66F7301E02B}
[2011.04.23 22:03:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{6CE53D7B-F97B-408C-B5FC-386964457F1B}
[2011.04.23 00:20:31 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{1AE88077-B54F-49FA-B952-20C02E148367}
[2011.04.22 12:20:07 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{EA904536-19B8-4BA0-A089-F1BB29F222EB}
[2011.04.21 16:51:26 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{E8790765-5B89-44CD-AB59-0A1C66CE799C}
[2011.04.20 19:33:05 | 000,124,016 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdm.sys
[2011.04.20 19:33:05 | 000,123,504 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039unic.sys
[2011.04.20 19:33:05 | 000,117,872 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mgmt.sys
[2011.04.20 19:33:05 | 000,113,904 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039obex.sys
[2011.04.20 19:33:05 | 000,098,672 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039bus.sys
[2011.04.20 19:33:05 | 000,025,456 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039nd5.sys
[2011.04.20 19:33:05 | 000,014,960 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdfl.sys
[2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cmnt.sys
[2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cm.sys
[2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039whnt.sys
[2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039wh.sys
[2011.04.20 19:33:05 | 000,010,992 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cr.sys
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Sony Ericsson
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson
[2011.04.20 13:21:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{A93F3534-7BB5-402A-8155-74318E533724}
[2011.04.19 18:10:18 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{845A209A-BC21-4777-9122-6FD7E4A91BAF}
[2011.04.19 17:34:37 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011.04.19 17:34:37 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011.04.19 17:34:37 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011.04.19 17:34:37 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.19 17:34:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.19 17:34:36 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.19 17:34:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011.04.19 17:34:36 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011.04.19 17:34:35 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011.04.19 17:34:35 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011.04.19 17:34:35 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.19 17:34:35 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011.04.19 17:34:35 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.04.19 17:34:35 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011.04.19 17:34:35 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.19 17:34:35 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.19 17:34:35 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.19 17:34:34 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.19 17:34:34 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.19 17:34:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011.04.19 17:34:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011.04.19 17:34:34 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.19 17:34:33 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.19 17:34:33 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.19 17:34:33 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011.04.19 17:34:32 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.19 17:34:32 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011.04.19 17:34:32 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011.04.19 17:34:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.19 17:34:32 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011.04.19 17:34:32 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011.04.19 17:34:31 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.04.19 17:34:31 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.19 17:34:31 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011.04.19 17:34:31 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.19 17:34:31 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011.04.19 17:34:31 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.19 17:34:31 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011.04.19 17:34:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.16 00:30:31 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2011.04.15 17:50:29 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011.04.15 17:50:29 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011.04.15 17:50:13 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011.04.15 17:50:13 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011.04.15 17:50:03 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.04.15 17:49:59 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011.04.11 10:37:58 | 000,000,000 | ---D | C] -- C:\divx
[2011.04.10 18:37:46 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2011.04.10 18:37:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2011.04.10 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\Real
[2011.04.10 18:36:03 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft
[2011.04.10 17:59:57 | 000,000,000 | ---D | C] -- C:\OutputFolder
[2011.04.07 17:15:22 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\DonationCoder
[2011.04.07 17:15:21 | 000,000,000 | ---D | C] -- C:\Users\Timo\Documents\DonationCoder
[2011.04.06 16:20:16 | 000,197,920 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011.04.06 16:20:16 | 000,107,808 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011.04.06 16:20:16 | 000,091,424 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011.04.06 16:20:16 | 000,075,040 | ---- | C] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.05.02 20:56:14 | 000,002,097 | ---- | M] () -- C:\Users\Timo\Desktop\hjtscanlist.zip
[2011.05.02 20:52:27 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Timo\Desktop\OTL.exe
[2011.05.02 20:48:19 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.02 20:48:19 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.02 20:48:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.02 20:48:10 | 3186,659,328 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.02 16:58:13 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.01 23:31:53 | 000,056,832 | ---- | M] () -- C:\Users\Timo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.05.01 22:59:09 | 000,000,764 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.04.26 22:37:39 | 000,002,593 | ---- | M] () -- C:\Users\Timo\Desktop\Microsoft Office Excel 2007.lnk
[2011.04.25 19:43:51 | 000,002,591 | ---- | M] () -- C:\Users\Timo\Desktop\Microsoft Office Word 2007.lnk
[2011.04.25 17:23:50 | 000,001,624 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.04.20 19:37:59 | 000,745,254 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.04.20 19:37:58 | 000,794,826 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.04.20 19:37:58 | 000,193,608 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.04.20 19:37:58 | 000,161,784 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.04.19 17:34:53 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2011.04.19 17:34:53 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2011.04.19 17:34:37 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011.04.19 17:34:37 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011.04.19 17:34:37 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011.04.19 17:34:37 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.19 17:34:36 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.19 17:34:36 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.19 17:34:36 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011.04.19 17:34:36 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011.04.19 17:34:35 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011.04.19 17:34:35 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011.04.19 17:34:35 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.19 17:34:35 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011.04.19 17:34:35 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.04.19 17:34:35 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011.04.19 17:34:35 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.19 17:34:35 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.19 17:34:35 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011.04.19 17:34:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.19 17:34:34 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.19 17:34:34 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.19 17:34:34 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011.04.19 17:34:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011.04.19 17:34:34 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.19 17:34:33 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.19 17:34:33 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.19 17:34:33 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011.04.19 17:34:32 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.19 17:34:32 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011.04.19 17:34:32 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011.04.19 17:34:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.19 17:34:32 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011.04.19 17:34:32 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011.04.19 17:34:31 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.04.19 17:34:31 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.19 17:34:31 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011.04.19 17:34:31 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.19 17:34:31 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011.04.19 17:34:31 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.19 17:34:31 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011.04.19 17:34:31 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.16 13:51:33 | 000,403,848 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.04.13 17:24:10 | 000,000,447 | ---- | M] () -- C:\Users\Timo\Desktop\Schule - Verknüpfung.lnk
[2011.04.11 10:30:46 | 000,002,032 | ---- | M] () -- C:\Users\Timo\AppData\Local\d3d9caps.dat
[2011.04.09 18:13:09 | 000,005,146 | ---- | M] () -- C:\Users\Timo\.recently-used.xbel
[2011.04.07 21:38:48 | 000,000,011 | R--- | M] () -- C:\Windows\amunres.lsl
[2011.04.07 17:15:22 | 000,000,058 | ---- | M] () -- C:\Users\Timo\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.04.06 16:20:16 | 000,197,920 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011.04.06 16:20:16 | 000,107,808 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011.04.06 16:20:16 | 000,091,424 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011.04.06 16:20:16 | 000,075,040 | ---- | M] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
 
========== Files Created - No Company Name ==========
 
[2011.05.02 20:56:29 | 000,030,259 | ---- | C] () -- C:\Users\Timo\Desktop\hjtscanlist.bat
[2011.05.02 20:56:08 | 000,002,097 | ---- | C] () -- C:\Users\Timo\Desktop\hjtscanlist.zip
[2011.05.02 16:58:13 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.04.25 17:23:50 | 000,001,624 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.04.19 17:34:35 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011.04.13 17:24:10 | 000,000,447 | ---- | C] () -- C:\Users\Timo\Desktop\Schule - Verknüpfung.lnk
[2011.04.09 18:13:09 | 000,005,146 | ---- | C] () -- C:\Users\Timo\.recently-used.xbel
[2011.04.07 21:38:48 | 000,000,011 | R--- | C] () -- C:\Windows\amunres.lsl
[2011.04.07 17:15:22 | 000,000,058 | ---- | C] () -- C:\Users\Timo\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.01.10 23:04:20 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2011.01.10 17:30:47 | 000,010,231 | ---- | C] () -- C:\Users\Timo\AppData\Roaming\SmarThruOptions.xml
[2011.01.10 17:30:35 | 000,036,864 | ---- | C] () -- C:\Windows\System32\SvcMan.exe
[2011.01.10 17:30:03 | 000,172,032 | ---- | C] () -- C:\Windows\System32\SecSNMP.dll
[2011.01.10 17:29:46 | 000,000,124 | ---- | C] () -- C:\Windows\Readiris.ini
[2011.01.10 17:29:42 | 000,023,040 | ---- | C] () -- C:\Windows\System32\irisco32.dll
[2011.01.10 17:27:03 | 000,458,752 | ---- | C] () -- C:\Windows\ssndii.exe
[2011.01.10 17:22:57 | 000,086,016 | R--- | C] () -- C:\Windows\WiaInst.exe
[2011.01.10 17:21:48 | 000,217,088 | R--- | C] () -- C:\Windows\System32\ssminidriver.dll
[2011.01.10 17:21:48 | 000,027,136 | R--- | C] () -- C:\Windows\System32\ssimgfilter.dll
[2011.01.10 17:21:48 | 000,011,264 | R--- | C] () -- C:\Windows\System32\sssegfilter.dll
[2011.01.10 17:21:48 | 000,010,752 | R--- | C] () -- C:\Windows\System32\sserrhandler.dll
[2011.01.10 17:20:21 | 000,022,723 | ---- | C] () -- C:\Windows\System32\cx21sl3.dll
[2010.11.29 23:06:13 | 000,000,079 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010.11.29 22:06:15 | 000,017,408 | ---- | C] () -- C:\Users\Timo\AppData\Local\WebpageIcons.db
[2010.11.29 20:10:47 | 000,056,832 | ---- | C] () -- C:\Users\Timo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.29 18:25:12 | 000,026,624 | ---- | C] () -- C:\Windows\System32\spd__l.dll
[2010.11.29 18:25:11 | 000,283,136 | ---- | C] () -- C:\Windows\System32\DscPnt.dll
[2010.11.29 18:25:11 | 000,259,888 | ---- | C] () -- C:\Windows\SUPDRun.exe
[2010.11.29 18:25:11 | 000,151,552 | ---- | C] () -- C:\Windows\System32\spd__ci.exe
[2010.11.29 13:59:13 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2010.11.25 20:56:16 | 000,524,288 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010.11.25 20:56:16 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010.11.25 16:02:30 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010.11.25 16:02:00 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010.11.25 16:02:00 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010.11.25 14:09:21 | 000,002,032 | ---- | C] () -- C:\Users\Timo\AppData\Local\d3d9caps.dat
[2010.11.25 08:24:42 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI
[2009.08.03 16:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009.08.03 16:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2009.05.14 23:22:08 | 000,011,264 | ---- | C] () -- C:\Windows\System32\atimuixx.dll
[2008.10.29 18:13:34 | 000,180,720 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2008.07.10 21:07:09 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1511.dll
[2008.07.10 21:07:08 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2008.07.10 21:07:08 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2008.07.10 21:07:08 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe
[2008.07.10 21:04:31 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2008.07.10 11:22:18 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2008.01.21 09:15:58 | 000,794,826 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.01.21 09:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.01.21 09:15:58 | 000,193,608 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.01.21 09:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 14:47:37 | 000,403,848 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 12:33:01 | 000,745,254 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 12:33:01 | 000,161,784 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2002.09.18 00:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 728 bytes -> C:\Users\Timo\Documents\Französisch.eml:OECustomProperty

< End of report >

glamp95 02.05.2011 20:05
Msn verschickt Spam!
 
Nun noch das von Schritt Nummer 3:
:
Code:
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
                        º                                    º
                                    hjtscanlist v2.0             
                        º                                    º
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
 
Microsoft Windows [Version 6.0.6002]
 
 
C:
 
  02.05.2011 20:48    C:\System Volume Information --------- 24576 
      C:\hiberfil.sys ---------   
      C:\pagefile.sys ---------   
  02.05.2011 16:58    C:\ProgramData --------- 12288 
  02.05.2011 16:58    C:\Program Files --------- 32768 
  01.05.2011 22:59    C:\Windows --------- 24576 
  26.04.2011 18:43    C:\Config.Msi --------- 0 
  11.04.2011 10:38    C:\divx --------- 0 
  10.04.2011 17:59    C:\OutputFolder --------- 0 
  25.01.2011 19:15    C:\Error.log --------- 638 
  15.01.2011 01:06    C:\Dev-Cpp --------- 4096 
  12.01.2011 15:28    C:\Downloads --------- 0 
  31.12.2010 03:05    C:\IO.SYS --------- 0 
  31.12.2010 03:05    C:\MSDOS.SYS --------- 0 
  26.11.2010 11:58    C:\Update --------- 0 
  26.11.2010 10:07    C:\cc_20101126_090719.reg --------- 73708 
  25.11.2010 16:33    C:\MSOCache --------- 0 
  25.11.2010 16:28    C:\Boot --------- 4096 
  25.11.2010 14:11    C:\$Recycle.Bin --------- 4096 
  25.11.2010 14:09    C:\Users --------- 4096 
  25.11.2010 14:05    C:\Programme --------- 0 
  25.11.2010 14:05    C:\Dokumente und Einstellungen --------- 0 
  25.11.2010 08:24    C:\Documentation --------- 0 
  25.11.2010 08:01    C:\Installer_Setup.log --------- 187 
  25.11.2010 07:41    C:\Intel --------- 0 
  11.04.2009 00:36    C:\bootmgr --------- 333257 
  10.07.2008 20:58    C:\BOOTSECT.BAK --------- 8192 
  21.01.2008 04:32    C:\PerfLogs --------- 0 
  02.11.2006 15:02    C:\Documents and Settings --------- 0 
  18.09.2006 23:43    C:\config.sys --------- 10 
  18.09.2006 23:43    C:\autoexec.bat --------- 24 
----------------------------------------
 
 
C:\Windows
 
  02.05.2011 20:51    C:\Windows\WindowsUpdate.log --------- 1454512 
  02.05.2011 20:48    C:\Windows\bootstat.dat --------- 67584 
  07.04.2011 21:38    C:\Windows\amunres.lsl --------- 11 
  10.01.2011 23:27    C:\Windows\win.ini --------- 475 
  10.01.2011 17:29    C:\Windows\Readiris.ini --------- 124 
  25.11.2010 08:24    C:\Windows\VAIOUpdt.INI --------- 0 
  25.11.2010 07:49    C:\Windows\csup.txt --------- 12 
  10.11.2010 03:28    C:\Windows\WLXPGSS.SCR --------- 301936 
  09.08.2010 04:03    C:\Windows\SUPDRun.exe --------- 259888 
  11.04.2009 00:27    C:\Windows\explorer.exe --------- 2926592 
  29.12.2008 15:35    C:\Windows\atiogl.xml --------- 15485 
  10.07.2008 14:45    C:\Windows\ocsetup_install_OEMHelpCustomization.etl --------- 29425664 
  10.07.2008 14:45    C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.perf --------- 196608 
  10.07.2008 14:45    C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.dpx --------- 65536 
  10.07.2008 11:39    C:\Windows\DIFxAPI.dll --------- 319456 
  10.07.2008 11:39    C:\Windows\HideWin.exe --------- 315392 
  10.07.2008 11:22    C:\Windows\ativpsrm.bin --------- 0 
  03.07.2008 08:06    C:\Windows\SkyTel.exe --------- 1826816 
  03.07.2008 08:06    C:\Windows\RtlUpd.exe --------- 1196032 
  03.07.2008 08:06    C:\Windows\RTKAUDIOSERVICE.EXE --------- 104992 
  03.07.2008 08:06    C:\Windows\RtHDVCpl.exe --------- 6295552 
  03.07.2008 08:05    C:\Windows\USetup.iss --------- 553 
  03.07.2008 08:05    C:\Windows\RtlExUpd.dll --------- 520192 
  28.06.2008 02:33    C:\Windows\snymsico.dll --------- 626688 
  21.01.2008 04:43    C:\Windows\WindowsShell.Manifest --------- 749 
  21.01.2008 04:24    C:\Windows\regedit.exe --------- 134656 
  21.01.2008 04:24    C:\Windows\bfsvc.exe --------- 58880 
  21.01.2008 04:24    C:\Windows\fveupdate.exe --------- 13312 
  21.01.2008 04:24    C:\Windows\HelpPane.exe --------- 498176 
  21.01.2008 04:23    C:\Windows\notepad.exe --------- 151040 
  15.03.2007 12:07    C:\Windows\ssndii.exe --------- 458752 
  26.02.2007 03:44    C:\Windows\WiaInst.exe --------- 86016 
  17.01.2007 11:23    C:\Windows\Dr. Printer Icon.ico --------- 11502 
  02.11.2006 14:35    C:\Windows\WMSysPr9.prx --------- 316640 
  02.11.2006 14:34    C:\Windows\twunk_16.exe --------- 49680 
  02.11.2006 14:34    C:\Windows\twain_32.dll --------- 50688 
  02.11.2006 14:34    C:\Windows\twunk_32.exe --------- 31232 
  02.11.2006 14:34    C:\Windows\twain.dll --------- 94784 
  02.11.2006 11:45    C:\Windows\winhlp32.exe --------- 9216 
  02.11.2006 11:45    C:\Windows\hh.exe --------- 14848 
  02.11.2006 09:46    C:\Windows\mib.bin --------- 43131 
  19.09.2006 13:41    C:\Windows\HomePremium.xml --------- 8328 
  18.09.2006 23:46    C:\Windows\system.ini --------- 219 
  18.09.2006 23:43    C:\Windows\_default.pif --------- 707 
  18.09.2006 23:43    C:\Windows\winhelp.exe --------- 256192 
  18.09.2006 23:30    C:\Windows\msdfmap.ini --------- 1405 
  18.09.2002 00:45    C:\Windows\lsb_un20.exe --------- 119808 
  17.12.1999 11:13    C:\Windows\unvise32.exe --------- 86016 
----------------------------------------
 
 
C:\Windows\System
 
 02.11.2006 14:34      C:\Windows\System\mciseq.drv --------- 25264
 02.11.2006 14:34      C:\Windows\System\mciwave.drv --------- 28160
 02.11.2006 14:34      C:\Windows\System\avifile.dll --------- 109456
 02.11.2006 14:34      C:\Windows\System\avicap.dll --------- 69584
 02.11.2006 14:34      C:\Windows\System\mciavi.drv --------- 73376
 02.11.2006 14:34      C:\Windows\System\msvideo.dll --------- 126912
 02.11.2006 09:10      C:\Windows\System\OLESVR.DLL --------- 24064
 02.11.2006 09:10      C:\Windows\System\WFWNET.DRV --------- 12704
 02.11.2006 09:10      C:\Windows\System\COMMDLG.DLL --------- 32816
 02.11.2006 09:10      C:\Windows\System\TIMER.DRV --------- 4048
 02.11.2006 09:10      C:\Windows\System\MMSYSTEM.DLL --------- 68992
 02.11.2006 09:10      C:\Windows\System\mmtask.tsk --------- 1152
 02.11.2006 09:10      C:\Windows\System\mouse.drv --------- 2032
 02.11.2006 09:10      C:\Windows\System\vga.drv --------- 2176
 02.11.2006 09:10      C:\Windows\System\sound.drv --------- 1744
 02.11.2006 09:10      C:\Windows\System\keyboard.drv --------- 2000
 02.11.2006 09:10      C:\Windows\System\SHELL.DLL --------- 5120
 02.11.2006 09:10      C:\Windows\System\system.drv --------- 3360
 18.09.2006 23:43      C:\Windows\System\ver.dll --------- 9008
 18.09.2006 23:43      C:\Windows\System\olecli.dll --------- 82944
 18.09.2006 23:43      C:\Windows\System\lzexpand.dll --------- 9936
 18.09.2006 23:35      C:\Windows\System\stdole.tlb --------- 5532
----------------------------------------
 
 
C:\Windows\System32
 
 02.05.2011 20:48    C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 --------- 3616 
 02.05.2011 20:48    C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 --------- 3616 
 02.05.2011 20:47    C:\Windows\system32\drivers --------- 65536 
 27.04.2011 17:20    C:\Windows\system32\catroot --------- 4096 
 27.04.2011 17:20    C:\Windows\system32\catroot2 --------- 4096 
 20.04.2011 19:37    C:\Windows\system32\perfh009.dat --------- 745254 
 20.04.2011 19:37    C:\Windows\system32\perfc009.dat --------- 161784 
 20.04.2011 19:37    C:\Windows\system32\perfh007.dat --------- 794826 
 20.04.2011 19:37    C:\Windows\system32\perfc007.dat --------- 193608 
 20.04.2011 19:37    C:\Windows\system32\PerfStringBackup.INI --------- 1894354 
 19.04.2011 18:05    C:\Windows\system32\de-DE --------- 327680 
 19.04.2011 18:05    C:\Windows\system32\migration --------- 4096 
 19.04.2011 18:05    C:\Windows\system32\wbem --------- 65536 
 19.04.2011 18:05    C:\Windows\system32\en-US --------- 12288 
 19.04.2011 17:34    C:\Windows\system32\icrav03.rat --------- 8798 
 19.04.2011 17:34    C:\Windows\system32\ticrf.rat --------- 1988 
 19.04.2011 17:34    C:\Windows\system32\msls31.dll --------- 161792 
 19.04.2011 17:34    C:\Windows\system32\wininet.dll --------- 1126912 
 19.04.2011 17:34    C:\Windows\system32\jsproxy.dll --------- 65024 
 19.04.2011 17:34    C:\Windows\system32\iertutil.dll --------- 1785344 
 19.04.2011 17:34    C:\Windows\system32\msrating.dll --------- 162304 
 19.04.2011 17:34    C:\Windows\system32\urlmon.dll --------- 1102336 
 19.04.2011 17:34    C:\Windows\system32\RegisterIEPKEYs.exe --------- 74752 
 19.04.2011 17:34    C:\Windows\system32\SetIEInstalledDate.exe --------- 76800 
 19.04.2011 17:34    C:\Windows\system32\mshtmler.dll --------- 48640 
 19.04.2011 17:34    C:\Windows\system32\iesysprep.dll --------- 86528 
 19.04.2011 17:34    C:\Windows\system32\ieui.dll --------- 176640 
 19.04.2011 17:34    C:\Windows\system32\ieframe.dll --------- 9702400 
 19.04.2011 17:34    C:\Windows\system32\tdc.ocx --------- 63488 
 19.04.2011 17:34    C:\Windows\system32\html.iec --------- 367104 
 19.04.2011 17:34    C:\Windows\system32\dxtrans.dll --------- 223232 
 19.04.2011 17:34    C:\Windows\system32\dxtmsft.dll --------- 353792 
 19.04.2011 17:34    C:\Windows\system32\ieapfltr.dat --------- 3695416 
 19.04.2011 17:34    C:\Windows\system32\ieapfltr.dll --------- 434176 
 19.04.2011 17:34    C:\Windows\system32\icardie.dll --------- 66048 
 19.04.2011 17:34    C:\Windows\system32\ie4uinit.exe --------- 74240 
 19.04.2011 17:34    C:\Windows\system32\iernonce.dll --------- 31744 
 19.04.2011 17:34    C:\Windows\system32\ieuinit.inf --------- 72822 
 19.04.2011 17:34    C:\Windows\system32\iesetup.dll --------- 74752 
 19.04.2011 17:34    C:\Windows\system32\url.dll --------- 231936 
 19.04.2011 17:34    C:\Windows\system32\iedkcs32.dll --------- 353584 
 19.04.2011 17:34    C:\Windows\system32\inetcpl.cpl --------- 1427456 
 19.04.2011 17:34    C:\Windows\system32\webcheck.dll --------- 203776 
 19.04.2011 17:34    C:\Windows\system32\licmgr10.dll --------- 23552 
 19.04.2011 17:34    C:\Windows\system32\inseng.dll --------- 78848 
 19.04.2011 17:34    C:\Windows\system32\mshtmled.dll --------- 72704 
 19.04.2011 17:34    C:\Windows\system32\wextract.exe --------- 152064 
 19.04.2011 17:34    C:\Windows\system32\iexpress.exe --------- 150528 
 19.04.2011 17:34    C:\Windows\system32\msfeeds.dll --------- 580608 
 19.04.2011 17:34    C:\Windows\system32\vbscript.dll --------- 420864 
 19.04.2011 17:34    C:\Windows\system32\mshtml.dll --------- 12268544 
 19.04.2011 17:34    C:\Windows\system32\mshtml.tlb --------- 2382848 
 19.04.2011 17:34    C:\Windows\system32\ieUnatt.exe --------- 142848 
 19.04.2011 17:34    C:\Windows\system32\occache.dll --------- 123392 
 19.04.2011 17:34    C:\Windows\system32\pngfilt.dll --------- 54272 
 19.04.2011 17:34    C:\Windows\system32\mshta.exe --------- 11776 
 19.04.2011 17:34    C:\Windows\system32\admparse.dll --------- 101888 
 19.04.2011 17:34    C:\Windows\system32\ieaksie.dll --------- 227840 
 19.04.2011 17:34    C:\Windows\system32\ieakui.dll --------- 163840 
 19.04.2011 17:34    C:\Windows\system32\jscript9.dll --------- 1797632 
 19.04.2011 17:34    C:\Windows\system32\jscript.dll --------- 716800 
 19.04.2011 17:34    C:\Windows\system32\imgutil.dll --------- 35840 
 19.04.2011 17:34    C:\Windows\system32\advpack.dll --------- 114176 
 19.04.2011 17:34    C:\Windows\system32\iepeers.dll --------- 118784 
 19.04.2011 17:34    C:\Windows\system32\msfeedsbs.dll --------- 41472 
 19.04.2011 17:34    C:\Windows\system32\msfeedssync.exe --------- 10752 
 19.04.2011 17:34    C:\Windows\system32\IEAdvpack.dll --------- 110592 
 19.04.2011 17:34    C:\Windows\system32\ieakeng.dll --------- 130560 
 18.04.2011 15:46    C:\Windows\system32\mrt.exe --------- 42181064 
 16.04.2011 13:51    C:\Windows\system32\FNTCACHE.DAT --------- 403848 
 11.04.2011 10:29    C:\Windows\system32\Tasks --------- 4096 
 06.04.2011 16:20    C:\Windows\system32\dnssd.dll --------- 91424 
 06.04.2011 16:20    C:\Windows\system32\dnssdX.dll --------- 197920 
 06.04.2011 16:20    C:\Windows\system32\jdns_sd.dll --------- 75040 
 06.04.2011 16:20    C:\Windows\system32\dns-sd.exe --------- 107808 
 15.03.2011 22:39    C:\Windows\system32\jupdate-1.6.0_24-b07.log --------- 3305 
 14.03.2011 15:57    C:\Windows\system32\TubeFinder.exe --------- 307200 
 13.03.2011 14:00    C:\Windows\system32\config --------- 12288 
 13.03.2011 14:00    C:\Windows\system32\Msdtc --------- 4096 
 13.03.2011 14:00    C:\Windows\system32\spool --------- 4096 
 12.03.2011 23:55    C:\Windows\system32\XpsPrint.dll --------- 876032 
 10.03.2011 19:03    C:\Windows\system32\mfc42u.dll --------- 1162240 
 10.03.2011 19:03    C:\Windows\system32\mfc42.dll --------- 1136640 
 03.03.2011 17:42    C:\Windows\system32\inetcomm.dll --------- 739328 
 03.03.2011 17:40    C:\Windows\system32\Apphlpdm.dll --------- 28672 
 03.03.2011 15:35    C:\Windows\system32\GameUXLegacyGDFs.dll --------- 4240384 
 03.03.2011 15:25    C:\Windows\system32\win32k.sys --------- 2041856 
 02.03.2011 17:44    C:\Windows\system32\dnsrslvr.dll --------- 86528 
 02.03.2011 17:44    C:\Windows\system32\dnsapi.dll --------- 168448 
 22.02.2011 16:13    C:\Windows\system32\XpsGdiConverter.dll --------- 288768 
 22.02.2011 15:33    C:\Windows\system32\DWrite.dll --------- 1068544 
 22.02.2011 15:33    C:\Windows\system32\FntCache.dll --------- 797696 
 18.02.2011 17:36    C:\Windows\system32\usbaaplrc.dll --------- 4184352 
 16.02.2011 18:16    C:\Windows\system32\atmlib.dll --------- 34304 
 16.02.2011 16:02    C:\Windows\system32\atmfd.dll --------- 292864 
 02.02.2011 22:40    C:\Windows\system32\javaws.exe --------- 157472 
 02.02.2011 22:40    C:\Windows\system32\javaw.exe --------- 145184 
 02.02.2011 22:40    C:\Windows\system32\java.exe --------- 145184 
 02.02.2011 22:40    C:\Windows\system32\deployJava1.dll --------- 472808 
 02.02.2011 18:11    C:\Windows\system32\MpSigStub.exe --------- 222080 
----------------------------------------
 
 
C:\Windows\Prefetch
 
----------------------------------------
 
 
C:\Windows\Tasks
 
 02.05.2011 20:48    C:\Windows\Tasks\SA.DAT --------- 6 
 02.05.2011 20:47    C:\Windows\Tasks\SCHEDLGU.TXT --------- 32554 
----------------------------------------
 
 
C:\Windows\Temp
 
----------------------------------------
 
 
C:\Users\Timo\AppData\Local\Temp
 
 02.05.2011 20:53    C:\Users\Timo\AppData\Local\Temp\jusched.log --------- 401 
 02.05.2011 20:49    C:\Users\Timo\AppData\Local\Temp\LuUpdater.log --------- 0 
 02.05.2011 20:49    C:\Users\Timo\AppData\Local\Temp\div9A0.tmp --------- 0 
 02.05.2011 20:48    C:\Users\Timo\AppData\Local\Temp\AdobeARM.log --------- 815 
 02.05.2011 20:48    C:\Users\Timo\AppData\Local\Temp\WPDNSE --------- 0 
 02.05.2011 20:48    C:\Users\Timo\AppData\Local\Temp\Adobe --------- 0 
 02.05.2011 20:48    C:\Users\Timo\AppData\Local\Temp\Timo.bmp --------- 31832 
 02.05.2011 15:11    C:\Users\Timo\AppData\Local\Temp\History --------- 0 
 02.05.2011 15:11    C:\Users\Timo\AppData\Local\Temp\Cookies --------- 0 
 02.05.2011 15:11    C:\Users\Timo\AppData\Local\Temp\Temporary Internet Files --------- 0 
 01.05.2011 22:59    C:\Users\Timo\AppData\Local\Temp\Low --------- 0 
----------------------------------------
 
 
C:\Program Files
 
 02.05.2011 16:58    C:\Program Files\Malwarebytes' Anti-Malware --------- 4096 
 01.05.2011 22:59    C:\Program Files\CCleaner --------- 0 
 30.04.2011 13:18    C:\Program Files\Mozilla Firefox --------- 24576 
 27.04.2011 20:00    C:\Program Files\Free FLV Converter --------- 8192 
 25.04.2011 17:23    C:\Program Files\iTunes --------- 8192 
 25.04.2011 17:22    C:\Program Files\iPod --------- 0 
 25.04.2011 17:20    C:\Program Files\Bonjour --------- 4096 
 21.04.2011 21:57    C:\Program Files\Microsoft Silverlight --------- 4096 
 20.04.2011 19:32    C:\Program Files\InstallShield Installation Information --------- 20480 
 20.04.2011 19:32    C:\Program Files\Sony Ericsson --------- 0 
 19.04.2011 18:05    C:\Program Files\Internet Explorer --------- 4096 
 16.04.2011 13:48    C:\Program Files\Windows Mail --------- 4096 
 11.04.2011 10:32    C:\Program Files\DivX --------- 4096 
 11.04.2011 10:29    C:\Program Files\Real --------- 0 
 11.04.2011 10:29    C:\Program Files\Common Files --------- 8192 
 11.04.2011 10:28    C:\Program Files\eRightSoft --------- 0 
 03.04.2011 16:37    C:\Program Files\Microsoft SQL Server --------- 4096 
 28.03.2011 17:38    C:\Program Files\DVDVideoSoft --------- 0 
 26.03.2011 11:58    C:\Program Files\Microsoft --------- 0 
 20.03.2011 19:47    C:\Program Files\Windows Live --------- 4096 
 15.03.2011 22:39    C:\Program Files\Java --------- 4096 
 10.03.2011 18:53    C:\Program Files\Application Updater --------- 0 
 10.03.2011 18:53    C:\Program Files\pdfforge Toolbar --------- 0 
 01.02.2011 22:58    C:\Program Files\Freemake --------- 0 
 29.01.2011 13:48    C:\Program Files\Tersus Visual Programming Platform --------- 4096 
 26.01.2011 21:30    C:\Program Files\FreeTime --------- 0 
 25.01.2011 19:18    C:\Program Files\QuickMediaConverter --------- 0 
 15.01.2011 00:49    C:\Program Files\Microsoft Visual Studio 9.0 --------- 0 
 15.01.2011 00:42    C:\Program Files\Microsoft Synchronization Services --------- 0 
 15.01.2011 00:42    C:\Program Files\Microsoft SQL Server Compact Edition --------- 0 
 15.01.2011 00:38    C:\Program Files\Microsoft Visual Studio 10.0 --------- 4096 
 15.01.2011 00:36    C:\Program Files\Microsoft Help Viewer --------- 0 
 15.01.2011 00:36    C:\Program Files\Microsoft SDKs --------- 0 
 15.01.2011 00:36    C:\Program Files\MSBuild --------- 0 
 10.01.2011 23:09    C:\Program Files\Riva --------- 0 
 10.01.2011 23:04    C:\Program Files\AviSynth 2.5 --------- 0 
 10.01.2011 17:43    C:\Program Files\VideoLAN --------- 0 
 10.01.2011 17:30    C:\Program Files\SmarThru 4 --------- 28672 
 10.01.2011 17:29    C:\Program Files\Readiris10 --------- 40960 
 10.01.2011 17:20    C:\Program Files\Samsung --------- 0 
 08.01.2011 12:56    C:\Program Files\AVS4YOU --------- 0 
 08.01.2011 12:49    C:\Program Files\ALLCapture 3.0 Testversion --------- 8192 
 08.01.2011 12:43    C:\Program Files\Mainconcept --------- 0 
 08.01.2011 12:42    C:\Program Files\ProgDVB --------- 0 
 07.01.2011 19:43    C:\Program Files\SlySoft --------- 0 
 02.01.2011 17:30    C:\Program Files\ANNO 1602 K”nigs-Edition --------- 4096 
 02.01.2011 17:30    C:\Program Files\directx --------- 0 
 30.12.2010 20:38    C:\Program Files\Adobe --------- 0 
 14.12.2010 22:37    C:\Program Files\QuickTime --------- 4096 
 06.12.2010 18:34    C:\Program Files\Google --------- 4096 
 29.11.2010 22:03    C:\Program Files\Zattoo4 --------- 4096 
 29.11.2010 18:57    C:\Program Files\Apple Software Update --------- 4096 
 29.11.2010 18:51    C:\Program Files\GIMP-2.0 --------- 0 
 29.11.2010 18:34    C:\Program Files\Spamihilator --------- 8192 
 29.11.2010 18:26    C:\Program Files\Samsung Printers --------- 0 
 29.11.2010 13:59    C:\Program Files\PDFCreator --------- 4096 
 26.11.2010 13:22    C:\Program Files\Logitech --------- 0 
 26.11.2010 12:14    C:\Program Files\xp-AntiSpy --------- 4096 
 26.11.2010 11:56    C:\Program Files\Sony --------- 12288 
 26.11.2010 11:13    C:\Program Files\Cisco --------- 0 
 26.11.2010 11:10    C:\Program Files\ATI Technologies --------- 0 
 25.11.2010 23:53    C:\Program Files\Windows Portable Devices --------- 0 
 25.11.2010 20:56    C:\Program Files\Xvid --------- 4096 
 25.11.2010 20:54    C:\Program Files\WinRAR --------- 4096 
 25.11.2010 20:35    C:\Program Files\Windows Media Player --------- 4096 
 25.11.2010 20:35    C:\Program Files\Movie Maker --------- 4096 
 25.11.2010 17:35    C:\Program Files\Microsoft.NET --------- 4096 
 25.11.2010 16:53    C:\Program Files\Microsoft Works --------- 4096 
 25.11.2010 16:41    C:\Program Files\Microsoft Office --------- 4096 
 25.11.2010 16:20    C:\Program Files\Windows Calendar --------- 0 
 25.11.2010 16:20    C:\Program Files\Windows Sidebar --------- 4096 
 25.11.2010 16:20    C:\Program Files\Windows Collaboration --------- 4096 
 25.11.2010 16:20    C:\Program Files\Windows Journal --------- 4096 
 25.11.2010 16:20    C:\Program Files\Windows Photo Gallery --------- 4096 
 25.11.2010 16:20    C:\Program Files\Windows Defender --------- 4096 
 25.11.2010 15:48    C:\Program Files\Symantec --------- 0 
 25.11.2010 15:48    C:\Program Files\Norton AntiVirus --------- 0 
 25.11.2010 15:46    C:\Program Files\NortonInstaller --------- 0 
 25.11.2010 14:05    C:\Program Files\Gemeinsame Dateien --------- 0 
 25.11.2010 14:05    C:\Program Files\Windows NT --------- 4096 
 25.11.2010 08:29    C:\Program Files\Intel --------- 0 
 25.11.2010 08:28    C:\Program Files\InterVideo --------- 0 
 25.11.2010 08:24    C:\Program Files\ArcSoft --------- 0 
 25.11.2010 08:16    C:\Program Files\Skype --------- 0 
 25.11.2010 08:16    C:\Program Files\Roxio --------- 4096 
 25.11.2010 07:59    C:\Program Files\Google BAE --------- 0 
 25.11.2010 07:58    C:\Program Files\ATI --------- 0 
 25.11.2010 07:54    C:\Program Files\Big Fish Games Spiel-Suite --------- 4096 
 25.11.2010 07:53    C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites --------- 8192 
 10.07.2008 11:41    C:\Program Files\Synaptics --------- 0 
 10.07.2008 11:41    C:\Program Files\CONEXANT --------- 0 
 10.07.2008 11:39    C:\Program Files\Realtek --------- 0 
 21.01.2008 04:43    C:\Program Files\desktop.ini --------- 174 
 02.11.2006 15:01    C:\Program Files\Uninstall Information --------- 0 
 02.11.2006 14:37    C:\Program Files\Microsoft Games --------- 4096 
 02.11.2006 14:37    C:\Program Files\Reference Assemblies --------- 0 
----------------------------------------
 
 
C:\ProgramData\..
 
Timo   
Public   
Default   
desktop.ini   
Default User   
All Users   
----------------------------------------
 
 
C:\Windows\system32\drivers\etc\hosts
 
127.0.0.1      localhost
::1            localhost
 
----------------------------------------
 
 
 
Abbildname                    PID Sitzungsname      Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                  0            24 K
System                          4 Services                  0        15'364 K
smss.exe                      504 Services                  0          772 K
csrss.exe                      636 Services                  0        6'196 K
wininit.exe                    700 Services                  0        4'084 K
csrss.exe                      712 Console                    1        10'376 K
services.exe                  744 Services                  0        6'968 K
lsass.exe                      760 Services                  0        2'316 K
lsm.exe                        768 Services                  0        3'992 K
winlogon.exe                  836 Console                    1        5'784 K
svchost.exe                    960 Services                  0        5'820 K
svchost.exe                  1020 Services                  0        6'808 K
svchost.exe                  1056 Services                  0        38'192 K
Ati2evxx.exe                  1156 Services                  0        4'244 K
svchost.exe                  1208 Services                  0        13'444 K
svchost.exe                  1248 Services                  0        74'036 K
svchost.exe                  1268 Services                  0        28'920 K
audiodg.exe                  1336 Services                  0        17'176 K
svchost.exe                  1360 Services                  0        4'772 K
SLsvc.exe                    1376 Services                  0        11'592 K
svchost.exe                  1400 Services                  0        10'684 K
RTKAUDIOSERVICE.EXE          1496 Services                  0        3'136 K
dwm.exe                      1684 Console                    1        45'656 K
explorer.exe                  1716 Console                    1        48'316 K
Ati2evxx.exe                  1816 Console                    1        6'296 K
svchost.exe                  1900 Services                  0        14'916 K
wlanext.exe                  2008 Services                  0        14'804 K
spoolsv.exe                    316 Services                  0        10'560 K
svchost.exe                    440 Services                  0        15'688 K
taskeng.exe                    592 Console                    1        10'680 K
AppleMobileDeviceService.    1620 Services                  0        6'912 K
ApplicationUpdater.exe        1424 Services                  0        3'504 K
mDNSResponder.exe            1896 Services                  0        4'976 K
EvtEng.exe                    1120 Services                  0        15'912 K
iviRegMgr.exe                2080 Services                  0        3'312 K
sqlservr.exe                  2116 Services                  0        1'952 K
sqlservr.exe                  2204 Services                  0        43'360 K
ccsvchst.exe                  2272 Services                  0        10'424 K
svchost.exe                  2356 Services                  0        5'240 K
RegSrvc.exe                  2376 Services                  0        4'392 K
SeaPort.EXE                  2400 Services                  0        8'316 K
sqlbrowser.exe                2448 Services                  0        3'588 K
sqlwriter.exe                2492 Services                  0        7'076 K
svchost.exe                  2572 Services                  0        6'900 K
SPMService.exe                2608 Services                  0        28'544 K
WLIDSVC.EXE                  2696 Services                  0        8'936 K
SearchIndexer.exe            2732 Services                  0        18'376 K
XAudio.exe                    2868 Services                  0        2'480 K
WLIDSVCM.EXE                  2916 Services                  0        2'812 K
WUDFHost.exe                  3088 Services                  0        5'040 K
ccsvchst.exe                  3224 Console                    1        10'332 K
WmiPrvSE.exe                  3332 Services                  0        6'132 K
SPMgr.exe                    3632 Console                    1        4'900 K
taskeng.exe                  3680 Console                    1        4'908 K
VAIOUpdt.exe                  3780 Console                    1        7'308 K
MSASCui.exe                  1236 Console                    1        17'828 K
SynTPEnh.exe                  2220 Console                    1        6'612 K
ISBMgr.exe                    2344 Console                    1        5'956 K
taskeng.exe                  3608 Services                  0        5'508 K
dllhost.exe                  3016 Services                  0        3'968 K
MOM.exe                      4124 Console                    1        11'088 K
SetPoint.exe                  4220 Console                    1        13'228 K
Scan2pc.exe                  4336 Console                    1        8'700 K
SSMMgr.exe                    4352 Console                    1        4'812 K
SearchSettings.exe            4384 Console                    1        8'656 K
jusched.exe                  4608 Console                    1        3'720 K
mobsync.exe                  4624 Console                    1        6'876 K
DivXUpdate.exe                4652 Console                    1        14'360 K
iTunesHelper.exe              4696 Console                    1        11'924 K
ONENOTEM.EXE                  4980 Console                    1          700 K
spamihilator.exe              4988 Console                    1        4'844 K
KHALMNPR.exe                  5016 Console                    1        9'716 K
iPodService.exe              5584 Services                  0        5'236 K
CCC.exe                      5792 Console                    1        24'964 K
svchost.exe                  1672 Services                  0        6'180 K
firefox.exe                  1048 Console                    1        78'924 K
plugin-container.exe          3524 Console                    1        19'432 K
OTL.exe                      5528 Console                    1        29'020 K
SearchProtocolHost.exe        4720 Services                  0        8'704 K
cmd.exe                      4900 Console                    1        3'032 K
conime.exe                    3244 Console                    1        3'376 K
notepad.exe                  5944 Console                    1        4'624 K
notepad.exe                  3876 Console                    1        7'428 K
dllhost.exe                  5188 Console                    1        4'176 K
tasklist.exe                  5716 Console                    1        4'736 K
WmiPrvSE.exe                  3592 Services                  0        5'800 K
SearchFilterHost.exe          2480 Services                  0        4'452 K
 
 
***** Ende des Scans 02.05.2011 um 20:58:10.57 ***
Und noch Nummer 4:
:
Code:
Activation Assistant for the 2007 Microsoft Office suites    Microsoft Corporation    24.11.2010    13.1MB   
Adobe Flash Player 10 Plugin    Adobe Systems Incorporated    25.04.2011        10.2.159.1
Adobe Flash Player ActiveX    Adobe Systems Incorporated    24.11.2010        9.0.124.0
Adobe Reader X (10.0.1) - Deutsch    Adobe Systems Incorporated    11.02.2011    114.8MB    10.0.1
ANNO 1602 Königs-Edition        01.01.2011    100.3MB    1.00
Apple Application Support    Apple Inc.    24.04.2011    50.5MB    1.5.1
Apple Mobile Device Support    Apple Inc.    07.03.2011    21.3MB    3.4.0.25
Apple Software Update    Apple Inc.    28.11.2010    2.21MB    2.1.2.120
ArcSoft WebCam Companion 2    ArcSoft    24.11.2010    22.5MB   
ATI Catalyst Install Manager    ATI Technologies, Inc.    25.11.2010    13.7MB    3.0.710.0
Big Fish Games Spiel-Suite        24.11.2010    160.5MB   
Bing Bar    Microsoft Corporation    25.03.2011    18.8MB    7.0.609.0
Bonjour    Apple Inc.    24.04.2011    1.09MB    2.0.5.0
Browser Address Error Redirector        24.11.2010       
CCleaner    Piriform    30.04.2011    2.90MB    3.06
Click to Disc    Sony Corporation    25.11.2010    67.9MB    1.2.73.04270
Click to Disc Editor    Sony Corporation    25.11.2010    185.4MB    2.0.03.04150
Dev-C++ 5 beta 9 release (4.9.9.2)        14.01.2011       
DivX-Setup    DivX, LLC    10.04.2011    2.24MB    2.4.1.4
Free Audio CD Burner version 1.4.7    DVDVideoSoft Limited.    27.03.2011    3.04MB   
Free FLV Converter V 6.96.0    Koyote Soft    26.04.2011    11.5MB    6.96.0.0
Free YouTube to MP3 Converter version 3.9.35.324    DVDVideoSoft Limited.    27.03.2011    3.71MB   
Freemake Video Converter Version 2.0.1    Ellora Assets Corporation    31.01.2011    39.6MB    2.0.1
GIMP 2.6.11    The GIMP Team    28.11.2010    109.0MB    2.6.11
Google Chrome    Google Inc.    05.12.2010    156.2MB    8.0.552.215
Google Earth    Google    24.11.2010    31.9MB    4.2.198.2451
HDAUDIO SoftV92 Data Fax Modem with SmartCP        09.07.2008    1.01MB   
Intel(R) PROSet/Wireless WiFi-Software    Intel(R) Corporation    25.11.2010    79.0MB    12.04.3000
iTunes    Apple Inc.    24.04.2011    141.8MB    10.2.2.12
Java(TM) 6 Update 24    Oracle    20.12.2010    95.0MB    6.0.240
Java(TM) 6 Update 6    Sun Microsystems, Inc.    09.07.2008    171.1MB    1.6.0.60
Logitech SetPoint 6.20    Logitech    25.11.2010        6.20.64
Malwarebytes' Anti-Malware    Malwarebytes Corporation    01.05.2011    4.73MB   
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU    Microsoft Corporation    24.11.2010    36.7MB   
Microsoft .NET Framework 3.5 SP1    Microsoft Corporation    24.11.2010    36.7MB   
Microsoft .NET Framework 4 Client Profile    Microsoft Corporation    24.11.2010    120.2MB    4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack    Microsoft Corporation    24.11.2010    24.5MB    4.0.30319
Microsoft .NET Framework 4 Extended    Microsoft Corporation    14.01.2011    45.9MB    4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack    Microsoft Corporation    14.01.2011    11.6MB    4.0.30319
Microsoft .NET Framework 4 Multi-Targeting Pack    Microsoft Corporation    13.01.2011    83.2MB    4.0.30319
Microsoft Help Viewer 1.0    Microsoft Corporation    14.01.2011    6.04MB    1.0.30319
Microsoft Help Viewer 1.0 Language Pack - DEU    Microsoft Corporation    14.01.2011    6.04MB    1.0.30319
Microsoft Office 2003 Web Components    Microsoft Corporation    25.11.2010    21.7MB    11.0.8003.0
Microsoft Office Home and Student 2007    Microsoft Corporation    24.11.2010    307MB    12.0.6425.1000
Microsoft Silverlight    Microsoft Corporation    20.04.2011    20.1MB    4.0.60310.0
Microsoft SQL Server 2005    Microsoft Corporation    24.11.2010    42.5MB   
Microsoft SQL Server 2005 Compact Edition [ENU]    Microsoft Corporation    28.11.2010    1.73MB    3.1.0000
Microsoft SQL Server 2008    Microsoft Corporation    14.01.2011    563MB   
Microsoft SQL Server 2008 Browser    Microsoft Corporation    13.01.2011    7.99MB    10.1.2531.0
Microsoft SQL Server 2008 Native Client    Microsoft Corporation    13.01.2011    3.23MB    10.1.2531.0
Microsoft SQL Server Compact 3.5 SP2 DEU    Microsoft Corporation    13.01.2011    3.66MB    3.5.8080.0
Microsoft SQL Server Native Client    Microsoft Corporation    02.04.2011    2.63MB    9.00.5000.00
Microsoft SQL Server VSS Writer    Microsoft Corporation    13.01.2011    1.79MB    10.1.2531.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053    Microsoft Corporation    25.11.2010    0.24MB    8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable - KB2467175    Microsoft Corporation    18.04.2011    0.30MB    8.0.51011
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148    Microsoft Corporation    25.11.2010    0.19MB    9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570    Microsoft Corporation    18.04.2011    0.58MB    9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17    Microsoft Corporation    25.11.2010    0.57MB    9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974    Microsoft Corporation    13.01.2011    0.58MB    9.0.30729.4974
Microsoft Visual C++ 2010 Express - DEU    Microsoft Corporation    14.01.2011    387MB    10.0.30319
Mozilla Firefox (3.6.17)    Mozilla    29.04.2011    29.3MB    3.6.17 (de)
MSXML 4.0 SP2 (KB954430)    Microsoft Corporation    24.11.2010    35.00KB    4.20.9870.0
MSXML 4.0 SP2 (KB973688)    Microsoft Corporation    24.11.2010    1.33MB    4.20.9876.0
Music Transfer    Sony Corporation    24.11.2010    40.6MB    1.2.00.17290
Norton AntiVirus    Symantec Corporation    24.11.2010    69.3MB    18.5.0.125
OpenMG Secure Module 5.4.00    Sony Corporation    25.11.2010        5.4.00.04020
PDFCreator    Frank Heindörfer, Philip Chinery    28.11.2010    24.9MB    1.1.0
pdfforge Toolbar v4.3    Spigot, Inc.    09.03.2011    2.44MB    4.3
QuickTime    Apple Inc.    13.12.2010    72.9MB    7.69.80.9
Readiris Pro 10        09.01.2011    99.8MB   
Realtek High Definition Audio Driver    Realtek Semiconductor Corp.    09.07.2008    22.0MB    6.0.1.5653
Roxio Easy Media Creator 10 LJ    Roxio    24.11.2010    5.22MB    10.1
Samsung CLX-216x Series    Samsung Electronics CO.,LTD    09.01.2011    238MB   
Samsung Universal Print Driver    Samsung Electronics Co., Ltd.    28.11.2010    2.39MB    2.02.05.00:24
Setting Utility Series    Sony Corporation    09.07.2008    10.3MB    4.1.00.07030
Skype™ 3.8    Skype Technologies S.A.    24.11.2010    27.9MB    3.8.115
SmarThru 4        09.01.2011    12.9MB   
Spamihilator 0.9.9.53 (32-Bit)    Michel Krämer    28.11.2010    5.41MB    0.9.9.53
Synaptics Pointing Device Driver    Synaptics    09.07.2008    12.9MB    9.1.13.0
Uninstall 1.0.0.1        27.03.2011    31.1MB   
Unity Web Player    Unity Technologies ApS    17.12.2010    0.20MB   
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)    Microsoft Corporation    02.04.2011    23.2MB    9.00.5000.00
Unterstützungsdateien für Microsoft SQL Server 2008-Setup    Microsoft Corporation    13.01.2011    29.8MB    10.1.2731.0
VAIO Control Center    Sony Corporation    09.07.2008    4.63MB    3.1.00.07040
VAIO Data Restore Tool    Sony Corporation    24.11.2010    6.49MB    1.0.04.01170
VAIO Energie Verwaltung    Sony Corporation    09.07.2008    6.33MB    3.1.00.06190
VAIO Guide    Sony Corporation    24.11.2010    10.3MB    2.4.00.06190
VAIO Launcher    Sony Corporation    24.11.2010    7.45MB    2.1.00.06130
VAIO Original Funktion Einstellungen    Sony Corporation    25.11.2010    1.76MB    2.0.2.02240
VAIO Update    Sony Corporation    25.11.2010    17.3MB    5.1.1.04090
VLC media player 1.1.7    VideoLAN    05.02.2011    77.4MB    1.1.7
Windows Live Essentials    Microsoft Corporation    20.03.2011        15.4.3508.1109
Windows Live Mesh ActiveX control for remote connections    Microsoft Corporation    28.11.2010    5.57MB    15.4.5722.2
WinDVD for VAIO    InterVideo Inc.    24.11.2010    96.5MB    8.0-B9.513
WinRAR        24.11.2010    3.77MB   
Worms for Pocket PC        25.12.2010       
xp-AntiSpy 3.97-9    Christian Taubenheim    25.11.2010    0.65MB   
Xvid 1.2.2 final uninstall    Xvid team (Koepi)    24.11.2010    0.75MB    1.2
Zattoo4 4.0.5    Zattoo Inc.    28.11.2010    39.9MB    4.0.5
Ich hoffe du kannst mit dem etwas anfangen.

kira 02.05.2011 22:31
1.
Die alte Java-Versionen verbleiben auf dem PC...aus Sicherheitsgründen müssen entfernt werden,auch in Zukunft darauf achten!
Falls nach einen neuen Systemstart noch existieren, die alten Einträge bitte deinstallieren
Code:
Java(TM) 6 Update 6
2.
deinstalliere:
unter `Systemsteuerung -->Software -->Ändern/Entfernen...`
Code:
pdfforge Toolbar <- Adware -Toolbar
Bestandteile der Standardinstallation vieler Freeware-Programme und teilweise sogar von kostenpflichtigen Programmen. Daher:
Immer die benutzerdefinierte Installation wählen, nicht die Standardinstallation, weil dann oft Sachen mitinstalliert werden, die man nicht braucht oder nicht möchte.
Bei Installation bitte die Lizenzbestimmungen immer lesen, und nicht sofort überall den Haken setzen bzw gesetzten Haken belassen, weil damit stimmt man nämlich zu, dass andere "Fremdprogramm", oder sogar Adware (Werbe-Pop-ups) durch Partnerprogrammen, Sponsoren etc - mitinstalliert wird, weil sich Freeware damit finanziert.
in diese Kategorie gehören noch einige, wie z.B: -> Unerwünschte Toolbars deinstallieren

3.
Zitat:
**Vor dem Löschen temporärer Dateien sollte man unbedingt alle Anwendungen beenden!
**lösche nur den Inhalt der Ordner, nicht die Ordner selbst!
**Der Temp Ordner,ist für temporäre Dateien,also der Inhalt kann man ohne weiteres löschen.- Dateien, die noch in Benutzung sind,nicht löschbar.
alle Anwendungen schließen → Ordner für temporäre Dateien bitte leeren
lösche nur den Inhalt der Ordner, nicht die Ordner selbst! - Dateien, die noch in Benutzung sind,nicht löschbar.
gib in der Suchleiste unter dem Windows Start Button folgendes ein:
Code:
%temp%
Inhalt markieren und löschen:
- anschließend den Papierkorb leeren

4.
reinige dein System mit Ccleaner:
  • "Cleaner"→ "Analysieren"→ Klick auf den Button "Start CCleaner"
  • "Registry""Fehler suchen"→ "Fehler beheben"→ "Alle beheben"
  • Starte dein System neu auf

5.
erneut einen Scan mit OTL:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in Code-Tags hier in den Thread.

glamp95 03.05.2011 12:39
Msn verschickt Spam!
 
Ich kann den %temp% Ordner nicht finden, wenn ich nach ihm suche findet es Ihn nicht.
Wie kann ich Ihn sonst noch finden?

Aber kann ich den nicht auch mit dem CCleaner leeren?

Ach ja und noch eine Frage die beiden Dateien, die bei MBAM unter Quarantäne stehen, kann ich die endgültig löschen?

kira 03.05.2011 21:14
Start-> Alle Programme-> Zubehör-> Ausführen-> dort %temp% reinschreiben...

mit CCleaner geht ja auch:
CCleaner als Admin starten => gehe auf den Button links oben "Cleaner", setze Häkchen unter Reiter "Windows" (alle außer "Eingabefeld Verlauf" und bei "Erweitert" nur ein Häkchen bei "Alte Prefetchdaten" und "Benutzerdefinierte Dateien und Ordner").
Einstellungen => Benutzerdefiniert => Zu bereinigende Dateien und Ordner => Ordner hinzufügen =>
Anstelle von <DeinBenutzername> trägst Du den Namen ein, mit dem Du bei Vista eingeloggt bist.

C:\Users\<DeinBenutzername>\AppData\Local\Temp\*.*
C:\Users\Default\AppData\Local\Temp\*.*
C:\Windows\Temp\*.*

glamp95 03.05.2011 21:58
Ich habe bereits diese Ordner.
C:\Users\xxxx\AppData\Local\Temp\*.*
C:\Windows\Temp\*.*
Wie kann ich diesen (C:\Users\Default\AppData\Local\Temp\*.*) erstellen, brauche ich den überhaupt?

Wie bereits gefragt, kann ich die beiden Datein die bei MBAM unter Quarantäne stehen endgültig löschen?

kira 03.05.2011 22:48
brauche ich den überhaupt?
nein, muss nicht

Wie bereits gefragt, kann ich die beiden Datein die bei MBAM unter Quarantäne stehen endgültig löschen?
ja natürlich

glamp95 03.05.2011 23:05
Also hier dir Ergebnisse von OTL:
:
Code:
OTL logfile created on: 03.05.2011 23:53:28 - Run 2
OTL by OldTimer - Version 3.2.22.3    Folder = C:\Users\xxx
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: xxxxxxx| Language: DES | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 53.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 106.34 Gb Free Space | 36.68% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: xxxxxx | User Name: xxxx| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Timo\Documents\sonstiges\Sonstiges\Sicherheit\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
PRC - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Sony Corporation)
PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation)
PRC - C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
PRC - C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
PRC - C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe ()
PRC - c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\x\Documents\sonstiges\Sonstiges\Sicherheit\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (BBSvc) -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (NAV) -- C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccSvcHst.exe (Symantec Corporation)
SRV - (LBTServ) -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (Samsung UPD Service) -- C:\Windows\System32\SUPDSvc.exe (Samsung Electronics CO., LTD.)
SRV - (VUAgent) -- C:\Program Files\Sony\VAIO Update 5\VUAgent.exe (Sony Corporation)
SRV - (EvtEng) Intel(R) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV - (RegSrvc) Intel(R) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV - (PACSPTISVR) -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe (Sony Corporation)
SRV - (RtkAudioService) -- C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor)
SRV - (VAIO Power Management) -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (IviRegMgr) -- c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (BHDrvx86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20110430.001\BHDrvx86.sys (Symantec Corporation)
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110503.003\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110503.003\NAVENG.SYS (Symantec Corporation)
DRV - (IDSVix86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20110429.002\IDSvix86.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SYMTDIv) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SYMTDIV.SYS (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SymEvent) -- C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SRTSP) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\system32\drivers\NAV\1205000.07D\SRTSPX.SYS (Symantec Corporation)
DRV - (SymEFA) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymIRON) -- C:\Windows\system32\drivers\NAV\1205000.07D\Ironx86.SYS (Symantec Corporation)
DRV - (SymDS) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMDS.SYS (Symantec Corporation)
DRV - (LUsbFilt) -- C:\Windows\System32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouFilt) -- C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (s1039bus) Sony Ericsson Device 1039 driver (WDM) -- C:\Windows\System32\drivers\s1039bus.sys (MCCI Corporation)
DRV - (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS) -- C:\Windows\System32\drivers\s1039nd5.sys (MCCI Corporation)
DRV - (s1039mdm) -- C:\Windows\System32\drivers\s1039mdm.sys (MCCI Corporation)
DRV - (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM) -- C:\Windows\System32\drivers\s1039unic.sys (MCCI Corporation)
DRV - (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s1039mgmt.sys (MCCI Corporation)
DRV - (s1039obex) -- C:\Windows\System32\drivers\s1039obex.sys (MCCI Corporation)
DRV - (s1039mdfl) -- C:\Windows\System32\drivers\s1039mdfl.sys (MCCI Corporation)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (RsFx0103) -- C:\Windows\System32\drivers\RsFx0103.sys (Microsoft Corporation)
DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (DMICall) -- C:\Windows\System32\drivers\DMICall.sys (Sony Corporation)
DRV - (risdptsk) -- C:\Windows\System32\drivers\risdptsk.sys (REDC)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (SFEP) -- C:\Windows\System32\drivers\SFEP.sys (Sony Corporation)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (regi) -- C:\Windows\System32\drivers\regi.sys (InterVideo)
DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.SYS (Samsung Electronics)
DRV - (DgiVecp) -- C:\Windows\System32\drivers\DGIVECP.SYS (Samsung Electronics Co., Ltd.)
DRV - (pfc) -- C:\Windows\System32\drivers\pfc.sys (Padus, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://eu.ask.com?o=15780&l=dis
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.ch/"
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.1
FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.4.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPlgn\ [2011.01.14 18:35:42 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.04.30 13:18:27 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.04.30 13:18:27 | 000,000,000 | ---D | M]
 
[2010.11.25 20:45:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Extensions
[2011.05.03 13:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\x\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions
[2010.12.21 22:28:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\xxxx\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.02.10 18:47:22 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\xxxx\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.02.02 23:20:09 | 000,000,000 | ---D | M] (20-20 3D Viewer) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\2020Player@2020Technologies.com
[2010.09.28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\searchplugins\askcom.xml
[2011.05.03 13:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.12.21 18:11:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.03.15 22:40:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011.01.14 18:35:42 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPLGN
[2011.02.02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.10.27 07:44:13 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.10.27 07:44:13 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.10.27 07:44:13 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.10.27 07:44:13 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.10.27 07:44:13 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: ::1            localhost
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [Maple_S2P] C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - Startup: C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Timo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll -  File not found
O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\x\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\x\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) - F:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,000,766 | R--- | M] () - F:\Autorun.ico -- [ CDFS ]
O32 - AutoRun File - [2001.09.06 01:04:00 | 000,000,283 | R--- | M] () - F:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell\AutoRun\command - "" = G:\Startme.exe
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Acrobat\command - "" = F:\.\ar500deu.exe -- [2001.09.06 01:04:00 | 009,124,984 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN)
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\DirectX\command - "" = F:\.\DirectX\dxsetup.exe -- [2001.10.16 12:24:46 | 000,140,288 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Setup\command - "" = F:\.\Setup.exe -- [2002.12.02 15:33:00 | 000,107,512 | R--- | M] ()
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\Shell\AutoRun\command - "" = G:\wd_windows_tools\WDEULA.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.05.03 13:18:50 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{B8DE6097-E19B-4757-8F9E-BA1FCD00B02E}
[2011.05.02 16:58:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\Malwarebytes
[2011.05.02 16:58:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Malwarebytes' Anti-Malware
[2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.05.02 16:58:10 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.05.02 16:58:10 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.05.02 12:29:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{227CABBB-BF91-469F-8E02-D4D868EB4188}
[2011.05.01 15:19:45 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{1C9253E1-D764-429F-85F4-AA2052B834DF}
[2011.04.29 15:30:57 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{9802831A-8BF0-472C-921A-BC05E73CEEE3}
[2011.04.28 18:13:08 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{C651C691-93ED-4E9E-94B4-02731314E127}
[2011.04.27 20:00:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Free FLV Converter
[2011.04.27 20:00:17 | 000,000,000 | ---D | C] -- C:\Program Files\Free FLV Converter
[2011.04.27 17:22:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2011.04.27 17:22:26 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2011.04.27 17:22:22 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011.04.27 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{442D6840-DFC6-4D21-BDAC-44DEF9361D1B}
[2011.04.26 18:45:23 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{62042D88-21B2-49D2-9B41-BCCA7ED72F19}
[2011.04.25 17:23:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\iTunes
[2011.04.25 17:22:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011.04.25 17:22:44 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011.04.25 17:19:59 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011.04.25 13:48:05 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{23A5F032-A21F-4F28-85D9-A4FE4C85642A}
[2011.04.24 12:03:27 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{AFD43F2C-5F4F-495F-898D-F66F7301E02B}
[2011.04.23 22:03:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{6CE53D7B-F97B-408C-B5FC-386964457F1B}
[2011.04.23 00:20:31 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{1AE88077-B54F-49FA-B952-20C02E148367}
[2011.04.22 12:20:07 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Local\{EA904536-19B8-4BA0-A089-F1BB29F222EB}
[2011.04.21 16:51:26 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Local\{E8790765-5B89-44CD-AB59-0A1C66CE799C}
[2011.04.20 19:33:05 | 000,124,016 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdm.sys
[2011.04.20 19:33:05 | 000,123,504 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039unic.sys
[2011.04.20 19:33:05 | 000,117,872 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mgmt.sys
[2011.04.20 19:33:05 | 000,113,904 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039obex.sys
[2011.04.20 19:33:05 | 000,098,672 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039bus.sys
[2011.04.20 19:33:05 | 000,025,456 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039nd5.sys
[2011.04.20 19:33:05 | 000,014,960 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdfl.sys
[2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cmnt.sys
[2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cm.sys
[2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039whnt.sys
[2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039wh.sys
[2011.04.20 19:33:05 | 000,010,992 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cr.sys
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Sony Ericsson
[2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson
[2011.04.20 13:21:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{A93F3534-7BB5-402A-8155-74318E533724}
[2011.04.19 18:10:18 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{845A209A-BC21-4777-9122-6FD7E4A91BAF}
[2011.04.19 17:34:37 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011.04.19 17:34:37 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011.04.19 17:34:37 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011.04.19 17:34:37 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.19 17:34:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.19 17:34:36 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.19 17:34:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011.04.19 17:34:36 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011.04.19 17:34:35 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011.04.19 17:34:35 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011.04.19 17:34:35 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.19 17:34:35 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011.04.19 17:34:35 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.04.19 17:34:35 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011.04.19 17:34:35 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.19 17:34:35 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.19 17:34:35 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.19 17:34:34 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.19 17:34:34 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.19 17:34:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011.04.19 17:34:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011.04.19 17:34:34 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.19 17:34:33 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.19 17:34:33 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.19 17:34:33 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011.04.19 17:34:32 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.19 17:34:32 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011.04.19 17:34:32 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011.04.19 17:34:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.19 17:34:32 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011.04.19 17:34:32 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011.04.19 17:34:31 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.04.19 17:34:31 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.19 17:34:31 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011.04.19 17:34:31 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.19 17:34:31 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011.04.19 17:34:31 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.19 17:34:31 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011.04.19 17:34:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.16 00:30:31 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2011.04.15 17:50:29 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011.04.15 17:50:29 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011.04.15 17:50:13 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011.04.15 17:50:13 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011.04.15 17:50:03 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.04.15 17:49:59 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011.04.11 10:37:58 | 000,000,000 | ---D | C] -- C:\divx
[2011.04.10 18:37:46 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2011.04.10 18:37:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2011.04.10 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Roaming\Real
[2011.04.10 18:36:03 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft
[2011.04.10 17:59:57 | 000,000,000 | ---D | C] -- C:\OutputFolder
[2011.04.07 17:15:22 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Roaming\DonationCoder
[2011.04.07 17:15:21 | 000,000,000 | ---D | C] -- C:\Users\xxxx\Documents\DonationCoder
[2011.04.06 16:20:16 | 000,197,920 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011.04.06 16:20:16 | 000,107,808 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011.04.06 16:20:16 | 000,091,424 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011.04.06 16:20:16 | 000,075,040 | ---- | C] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.05.03 23:17:32 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.03 23:17:32 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.03 21:17:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.03 21:17:31 | 3186,659,328 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.01 23:31:53 | 000,056,832 | ---- | M] () -- C:\Users\xxxx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.05.01 22:59:09 | 000,000,764 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011.04.26 22:37:39 | 000,002,593 | ---- | M] () -- C:\Users\xxxx\Desktop\Microsoft Office Excel 2007.lnk
[2011.04.25 19:43:51 | 000,002,591 | ---- | M] () -- C:\Users\xxxx\Desktop\Microsoft Office Word 2007.lnk
[2011.04.25 17:23:50 | 000,001,624 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.04.20 19:37:59 | 000,745,254 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.04.20 19:37:58 | 000,794,826 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.04.20 19:37:58 | 000,193,608 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.04.20 19:37:58 | 000,161,784 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.04.19 17:34:53 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2011.04.19 17:34:53 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2011.04.19 17:34:37 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011.04.19 17:34:37 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011.04.19 17:34:37 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011.04.19 17:34:37 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.19 17:34:36 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.19 17:34:36 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.19 17:34:36 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011.04.19 17:34:36 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011.04.19 17:34:35 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011.04.19 17:34:35 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011.04.19 17:34:35 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.19 17:34:35 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011.04.19 17:34:35 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.04.19 17:34:35 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011.04.19 17:34:35 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.19 17:34:35 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.19 17:34:35 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011.04.19 17:34:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.19 17:34:34 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.19 17:34:34 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.19 17:34:34 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011.04.19 17:34:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011.04.19 17:34:34 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.19 17:34:33 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.19 17:34:33 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.19 17:34:33 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011.04.19 17:34:32 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.19 17:34:32 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011.04.19 17:34:32 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011.04.19 17:34:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.19 17:34:32 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011.04.19 17:34:32 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011.04.19 17:34:31 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.04.19 17:34:31 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.19 17:34:31 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011.04.19 17:34:31 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.19 17:34:31 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011.04.19 17:34:31 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.19 17:34:31 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011.04.19 17:34:31 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.16 13:51:33 | 000,403,848 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.04.13 17:24:10 | 000,000,447 | ---- | M] () -- C:\Users\xxxx\Desktop\Schule - Verknüpfung.lnk
[2011.04.11 10:30:46 | 000,002,032 | ---- | M] () -- C:\Users\xxxx\AppData\Local\d3d9caps.dat
[2011.04.09 18:13:09 | 000,005,146 | ---- | M] () -- C:\Users\Timo\.recently-used.xbel
[2011.04.07 21:38:48 | 000,000,011 | R--- | M] () -- C:\Windows\amunres.lsl
[2011.04.07 17:15:22 | 000,000,058 | ---- | M] () -- C:\Users\xxxx\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.04.06 16:20:16 | 000,197,920 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011.04.06 16:20:16 | 000,107,808 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011.04.06 16:20:16 | 000,091,424 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011.04.06 16:20:16 | 000,075,040 | ---- | M] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
 
========== Files Created - No Company Name ==========
 
[2011.04.25 17:23:50 | 000,001,624 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011.04.19 17:34:35 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011.04.13 17:24:10 | 000,000,447 | ---- | C] () -- C:\Users\xxxx\Desktop\Schule - Verknüpfung.lnk
[2011.04.09 18:13:09 | 000,005,146 | ---- | C] () -- C:\Users\Timo\.recently-used.xbel
[2011.04.07 21:38:48 | 000,000,011 | R--- | C] () -- C:\Windows\amunres.lsl
[2011.04.07 17:15:22 | 000,000,058 | ---- | C] () -- C:\Users\xxxx\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.01.10 23:04:20 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2011.01.10 17:30:47 | 000,010,231 | ---- | C] () -- C:\Users\xxxx\AppData\Roaming\SmarThruOptions.xml
[2011.01.10 17:30:35 | 000,036,864 | ---- | C] () -- C:\Windows\System32\SvcMan.exe
[2011.01.10 17:30:03 | 000,172,032 | ---- | C] () -- C:\Windows\System32\SecSNMP.dll
[2011.01.10 17:29:46 | 000,000,124 | ---- | C] () -- C:\Windows\Readiris.ini
[2011.01.10 17:29:42 | 000,023,040 | ---- | C] () -- C:\Windows\System32\irisco32.dll
[2011.01.10 17:27:03 | 000,458,752 | ---- | C] () -- C:\Windows\ssndii.exe
[2011.01.10 17:22:57 | 000,086,016 | R--- | C] () -- C:\Windows\WiaInst.exe
[2011.01.10 17:21:48 | 000,217,088 | R--- | C] () -- C:\Windows\System32\ssminidriver.dll
[2011.01.10 17:21:48 | 000,027,136 | R--- | C] () -- C:\Windows\System32\ssimgfilter.dll
[2011.01.10 17:21:48 | 000,011,264 | R--- | C] () -- C:\Windows\System32\sssegfilter.dll
[2011.01.10 17:21:48 | 000,010,752 | R--- | C] () -- C:\Windows\System32\sserrhandler.dll
[2011.01.10 17:20:21 | 000,022,723 | ---- | C] () -- C:\Windows\System32\cx21sl3.dll
[2010.11.29 23:06:13 | 000,000,079 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010.11.29 22:06:15 | 000,017,408 | ---- | C] () -- C:\Users\xxxx\AppData\Local\WebpageIcons.db
[2010.11.29 20:10:47 | 000,056,832 | ---- | C] () -- C:\Users\xxxx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.29 18:25:12 | 000,026,624 | ---- | C] () -- C:\Windows\System32\spd__l.dll
[2010.11.29 18:25:11 | 000,283,136 | ---- | C] () -- C:\Windows\System32\DscPnt.dll
[2010.11.29 18:25:11 | 000,259,888 | ---- | C] () -- C:\Windows\SUPDRun.exe
[2010.11.29 18:25:11 | 000,151,552 | ---- | C] () -- C:\Windows\System32\spd__ci.exe
[2010.11.29 13:59:13 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2010.11.25 20:56:16 | 000,524,288 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010.11.25 20:56:16 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010.11.25 16:02:30 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010.11.25 16:02:00 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010.11.25 16:02:00 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010.11.25 14:09:21 | 000,002,032 | ---- | C] () -- C:\Users\xxxx\AppData\Local\d3d9caps.dat
[2010.11.25 08:24:42 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI
[2009.08.03 16:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009.08.03 16:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2009.05.14 23:22:08 | 000,011,264 | ---- | C] () -- C:\Windows\System32\atimuixx.dll
[2008.10.29 18:13:34 | 000,180,720 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2008.07.10 21:07:09 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1511.dll
[2008.07.10 21:07:08 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2008.07.10 21:07:08 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2008.07.10 21:07:08 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe
[2008.07.10 21:04:31 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2008.07.10 11:22:18 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2008.01.21 09:15:58 | 000,794,826 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.01.21 09:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.01.21 09:15:58 | 000,193,608 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.01.21 09:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 14:47:37 | 000,403,848 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 12:33:01 | 000,745,254 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 12:33:01 | 000,161,784 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2002.09.18 00:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 728 bytes -> C:\Users\xxxx\Documents\Französisch.eml:OECustomProperty

< End of report >

glamp95 03.05.2011 23:09
Hier noch das zweite Ergebniss:
:OTL EXTRAS Logfile:
Code:
OTL Extras logfile created on: 03.05.2011 23:53:28 - Run 2
OTL by OldTimer - Version 3.2.22.3    Folder = C:\Users\x\Documents\sonstiges\Sonstiges\Sicherheit
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: xxxx| Language: xxx| Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 53.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 106.34 Gb Free Space | 36.68% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: x-MOBIL | User Name: x| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{401FF33D-6A49-4D27-BBDC-288AEC1B47AD}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{904A90D9-9334-44C7-84F4-19FBE45F3126}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{FFDFCD60-B8C4-466B-82DE-C37E26F0E777}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0997A8ED-77C6-4B94-9A5F-76027ADAF832}" = protocol=6 | dir=in | app=c:\program files\spamihilator\cdcc.exe |
"{232838F7-EB3D-4154-8350-2D52133D83EE}" = protocol=17 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{41EAD167-C645-4291-988C-5E5FB5D96D14}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4E86B8B3-90AF-41B2-803E-08F68EF5DD05}" = protocol=6 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{7BB77A5D-DD19-48C1-94DE-84CEAA164402}" = protocol=6 | dir=in | app=c:\program files\spamihilator\spamihilator.exe |
"{870998A7-077C-44F9-B329-07BB00BFE55B}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{8C5B5EDE-EC52-4FB0-88B2-53ABF6E23750}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{94752534-85DD-439D-9702-CE8A9F95CE99}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{98439142-B30E-4303-A3BE-5078232DB6AE}" = protocol=6 | dir=in | app=c:\program files\spamihilator\dccproc.exe |
"{9F2751DE-ECD1-407C-9DDB-0E12AA96A150}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{A68D62C1-2C51-4B3F-9232-9632E3CD4AEC}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B2133616-A3F7-49B3-9DCD-EC1840293301}" = protocol=17 | dir=in | app=c:\program files\spamihilator\spamihilator.exe |
"{CE35DEE9-D716-47B8-A16D-D010D06BD81E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{DB9F1547-3694-4EF1-914C-0F870F1F6091}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{E08C5138-0E63-4839-BD60-26E3321AB30E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E625A7E7-FFE7-46F7-AB6F-33F118F5F629}" = protocol=17 | dir=in | app=c:\program files\spamihilator\cdcc.exe |
"{F1E851DF-11D8-42F5-947E-6CFDF69F6CDC}" = protocol=17 | dir=in | app=c:\program files\spamihilator\dccproc.exe |
"TCP Query User{BF006466-157E-4246-A8A3-1E8C88211742}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{18A8ACC5-B149-4E3C-A053-817CC2E96366}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{077A7810-A937-4465-AD08-ACED9807995F}" = ANNO 1602 Königs-Edition
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Central Data
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B9B76C9-4967-59FC-C994-191AEA152F04}" = ATI Catalyst Install Manager
"{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1C2B3CEA-482E-4453-B3E2-C9731337828A}" = Microsoft SQL Server 2008 Native Client
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Central Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{202F2838-156B-FC76-013F-9241B9673F39}" = CCC Help Thai
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 24
"{2B4E24A0-A06F-488D-87D8-16738E5E1104}" = Windows Live Family Safety
"{325ED81A-EC15-7CE8-729B-0392A1DD3854}" = CCC Help Czech
"{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIO Guide
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver
"{353FE16B-30FE-469A-BF55-B978F4218003}" = iTunes
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCA23DD-CEDA-CC7F-C74C-4D1EDAE919AA}" = Catalyst Control Center Graphics Full New
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{42DD2173-B7CA-8AB3-8AC2-40DFE2CA6FBC}" = CCC Help German
"{430DD2C5-65FD-9781-F9F2-693CAF05CD10}" = Catalyst Control Center InstallProxy
"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{49B8916D-1DEA-F18A-731F-BF0FE209C63B}" = CCC Help Chinese Standard
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser
"{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"{4EEAF8D8-CB79-06CA-A566-EAC1726DAABB}" = CCC Help Finnish
"{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Easy Media Creator 10 LJ
"{540DB82A-EE11-BBC1-8BD8-BB7D937A53A4}" = CCC Help Hungarian
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5882396B-9FB3-37AC-1AE1-5EA344BD7705}" = Catalyst Control Center Graphics Previews Vista
"{5BA149D9-D5FA-5AB3-400B-9F1BF424B7CE}" = CCC Help Chinese Traditional
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5C5EE8F2-0B38-4C13-AE4E-A87A237FE718}" =
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F5867F0-2D23-4338-A206-01A76C823924}" = VAIO Energie Verwaltung
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{642F96CC-1D3B-20DE-8673-44EE15B3DC2F}" = CCC Help Portuguese
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = Click to Disc
"{6D26ACF9-4919-0744-C509-28EAF53112D4}" = CCC Help Dutch
"{6E9CFEF5-0245-411F-8587-CF83DF9D4B05}" = Microsoft SQL Server 2008 Database Engine Services
"{71256374-2053-CF0F-BD54-20082980B95C}" = Catalyst Control Center Graphics Full Existing
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{72EEB695-388B-4835-8EA6-0C04545B06B9}" = Intel(R) PROSet/Wireless WiFi-Software
"{737D8F4D-24D4-D626-DEC0-9E39A6166890}" = CCC Help Danish
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Central Audio
"{74B705C2-173A-FFD1-98BC-AD5FB647AB38}" = CCC Help Polish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{784BDC03-2D22-BCAE-5CAC-84AFA799FBDE}" = CCC Help Turkish
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7C404084-C5A6-42FF-B731-0BAC79A6E134}" = VAIO Original Funktion Einstellungen
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{8572CE7D-46B0-70B3-96CD-534F07B35F5D}" = CCC Help Italian
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87544F2E-CCA5-01BC-AEBC-D8C1D759EE61}" = CCC Help English
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ED5D0B7-A193-413F-815A-530BE36B38F7}" = Spamihilator 0.9.9.53 (32-Bit)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90A40407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{90B38901-52C8-85A7-D6C8-9A5592C9FCAA}" = CCC Help Greek
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95229EF6-F4A1-413A-BA50-668311FAFE19}" = VAIO Original Function Settings
"{9648D00F-0589-619B-6114-BF2A0620168B}" = CCC Help Korean
"{96D0B6C6-5A72-4B47-8583-A87E55F5FE81}" =
"{9805E4EE-9B66-CABD-AF6B-4B84F2A8EF46}" = Skins
"{9973498D-EA29-4A68-BE0B-C88D6E03E928}" = ArcSoft WebCam Companion 2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AA2D735-3375-42D4-9A61-3FFEF82599D6}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup
"{9AC34FA1-BCDE-1D09-5DB7-EB6A064FDEA9}" = CCC Help Spanish
"{9B973FC0-E71F-6F89-10D6-1BFD063D1707}" = CCC Help Swedish
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9EAC0E21-510E-4259-A9C6-F5D5B8969036}" = Catalyst Control Center - Branding
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A3979A05-6834-D0A7-75CD-71B5A9E5F4C0}" = Catalyst Control Center Localization All
"{A6F21795-E629-35B2-9487-00A8363B28AA}" = Catalyst Control Center Graphics Light
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Central Copy
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B8E9F8A1-9F4D-43D5-ABD6-1DF067FAA469}" = Microsoft SQL Server 2008 Database Engine Services
"{C0AD2831-3398-A078-CBEB-39A6B381BB56}" = CCC Help Japanese
"{C18A02EC-966B-E7A7-9AC9-082F770ABF9B}" = CCC Help Russian
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{C9C390CC-F9B9-EFE8-27DF-6EB7FF8F8760}" = CCC Help Norwegian
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CD431A7B-88D8-0823-E66F-CCFAEA6DA7B4}" = ccc-core-static
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF0F8D1B-5FB9-468D-BD88-E6239906D2B7}" = Click to Disc
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D47E6B9C-F5A5-23B7-AB6A-3806AD4C9529}" = ccc-utility
"{D6DA6836-77C2-5338-10E3-D7A6CD65681D}" = Catalyst Control Center Core Implementation
"{DA8F979E-43B9-3EEC-721C-F297D9509992}" = Catalyst Control Center Graphics Previews Common
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Central Core
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}" = Microsoft SQL Server Native Client
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" =
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FE0782BC-7AB0-CF6A-6E38-D3040462C7EC}" = CCC Help French
"{FE51662F-D8F6-43B5-99D9-D4894AF00F83}" = Roxio Easy Media Creator Home
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"BFG-Big Fish Games Spiel-Suite" = Big Fish Games Spiel-Suite
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DivX Setup.divx.com" = DivX-Setup
"dt icon module" =
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free FLV Converter_is1" = Free FLV Converter V 6.96.0
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324
"Freemake Video Converter_is1" = Freemake Video Converter Version 2.0.1
"gtfirstboot Setting Request" =
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"InstallShield_{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MFU Module" =
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"NAV" = Norton AntiVirus
"ProInst" = Intel PROSet Wireless
"Samsung CLX-216x Series" = Samsung CLX-216x Series
"Samsung Universal Print Driver" = Samsung Universal Print Driver
"sp6" = Logitech SetPoint 6.20
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"VAIO Help and Support" =
"VLC media player" = VLC media player 1.1.7
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Worms for Pocket PC" = Worms for Pocket PC
"xp-AntiSpy" = xp-AntiSpy 3.97-9
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Zattoo4" = Zattoo4 4.0.5
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 26.04.2011 12:44:27 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description =
 
Error - 26.04.2011 13:07:56 | Computer Name = x-Mobil | Source = EventSystem | ID = x
Description =
 
Error - 26.04.2011 16:12:40 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description =
 
Error - 26.04.2011 17:16:02 | Computer Name = x-Mobil | Source = EventSystem | ID = 4621
Description =
 
Error - 27.04.2011 11:13:22 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description =
 
Error - 27.04.2011 14:07:05 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
 fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
 0xc0000005, Fehleroffset 0x7265766e,  Prozess-ID 0x150, Anwendungsstartzeit 01cc0505a59fd47e.
 
Error - 27.04.2011 14:08:09 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
 fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
 0xc0000005, Fehleroffset 0x7265766e,  Prozess-ID 0x1754, Anwendungsstartzeit 01cc0505a2c479ee.
 
Error - 27.04.2011 14:08:10 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
 fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
 0xc0000005, Fehleroffset 0x7265766e,  Prozess-ID 0x154c, Anwendungsstartzeit 01cc0505a08f235e.
 
Error - 27.04.2011 14:08:12 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
 fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
 0xc0000005, Fehleroffset 0x7265766e,  Prozess-ID 0x768, Anwendungsstartzeit 01cc0505a46b4c1e.
 
Error - 28.04.2011 12:12:31 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description =
 
[ System Events ]
Error - 11.02.2011 18:41:04 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 04:54:56 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 04:54:56 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 05:14:38 | Computer Name = x-Mobil | Source = DCOM | ID = 10005
Description =
 
Error - 12.02.2011 05:14:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7009
Description =
 
Error - 12.02.2011 05:14:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 11:37:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =

Error - 12.02.2011 11:37:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 14:18:13 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
Error - 12.02.2011 14:18:13 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
 
 
< End of report >
--- --- ---

kira 04.05.2011 11:08
1.
Fixen mit OTL
  • Starte die OTL.exe.
  • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
  • Kopiere folgendes Skript:
Code:
:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com?o=15780&l=dis
[2010.09.28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\searchplugins\askcom.xml
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) - F:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [1999.08.31 05:52:00 | 000,000,766 | R--- | M] () - F:\Autorun.ico -- [ CDFS ]
O32 - AutoRun File - [2001.09.06 01:04:00 | 000,000,283 | R--- | M] () - F:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell\AutoRun\command - "" = G:\Startme.exe
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Acrobat\command - "" = F:\.\ar500deu.exe -- [2001.09.06 01:04:00 | 009,124,984 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN)
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\DirectX\command - "" = F:\.\DirectX\dxsetup.exe -- [2001.10.16 12:24:46 | 000,140,288 | R--- | M] ()
O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Setup\command - "" = F:\.\Setup.exe -- [2002.12.02 15:33:00 | 000,107,512 | R--- | M] ()
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell - "" = AutoRun
O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\Shell\AutoRun\command - "" = G:\wd_windows_tools\WDEULA.exe

:Commands
[purity]
[emptytemp]

2.
  • lade Dir SUPERAntiSpyware FREE Edition herunter.
  • installiere das Programm und update online.
  • starte SUPERAntiSpyware und klicke auf "Ihren Computer durchsuchen"
  • setze ein Häkchen bei "Kompletter Scan" und klicke auf "Weiter"
  • anschließend alle gefundenen Schadprogramme werden aufgelistet, bei alle Funde Häkchen setzen und mit "OK" bestätigen
  • auf "Weiter" klicken dann "OK" und auf "Fertig stellen"
  • um die Ergebnisse anzuzeigen: auf "Präferenzen" dann auf den "Statistiken und Protokolle" klicken
  • drücke auf "Protokoll anzeigen" - anschließend diesen Bericht bitte speichern und hier posten

3.
- "Link:-> ESET Online Scanner
>>Du sollst nicht die Antivirus-Sicherheitssoftware installieren, sondern dein System nur online scannen<<
Auch auf USB-Sticks, selbstgebrannten Datenträgern, externen Festplatten und anderen Datenträgern können Viren transportiert werden. Man muss daher durch regelmäßige Prüfungen auf Schäden, die durch Malware ("Worm.Win32.Autorun") verursacht worden sein können, überwacht werden. Hierfür sind ser gut geegnet und empfohlen, die auf dem Speichermedium gesicherten Daten, mit Hilfe des kostenlosen Online Scanners zu prüfen.
Schließe jetzt alle externe Datenträgeran (USB Sticks etc) Deinen Rechner an, dabei die Hochstell-Taste [Shift-Taste] gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. (So verhindest Du die Ausführung der AUTORUN-Funktion) - Man kann die AUTORUN-Funktion aber auch generell abschalten.► [Sicherheit] Autorun Funktion für mehr Sicherheit auf allen Laufwerken deaktivieren /Avira Support Forum

-> Führe dann einen Komplett-Systemcheck mit Eset/Nod32 durch

- folgendes bitte anhaken > "Remove found threads" und "Scan archives"
- die Scanergebnis als *.txt Dateien speichern)
- meistens "C:\Programme\Eset\EsetOnlineScanner\log.txt"

Vor dem Scan Einstellungen im Internet Explorer:
- "Extras→ Internetoptionen→ Sicherheit":
- alles auf Standardstufe stellen
- Active X erlauben
- um den Scan zu starten: wenn du danach gefragt wirst (den Text in der Informationsleiste ) - ActiveX-Steuerelement installieren lassen

► Wie ist den aktuellen Zustand des Rechners? Auffälligkeiten, Probleme?

glamp95 04.05.2011 11:36
Mein Rechner läuft eigentlich ohne Probleme, daher frage ich mich ist das wirklich alles nötig, denn ich habe das Gefühl, dass es keinen Virus auf meinem Rechner hat.

kira 04.05.2011 11:41
Letztlich ist es deine Entscheidung!

glamp95 04.05.2011 11:42
:
Code:
All processes killed
========== OTL ==========
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
C:\Users\x\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\searchplugins\askcom.xml moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0BF43445-2F28-4351-9252-17FE6E806AA0} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0BF43445-2F28-4351-9252-17FE6E806AA0}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
C:\autoexec.bat moved successfully.
File move failed. F:\Autorun.exe scheduled to be moved on reboot.
File move failed. F:\Autorun.ico scheduled to be moved on reboot.
File move failed. F:\Autorun.inf scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{085f78fb-6b57-11e0-9495-001dba24bb8b}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{085f78fb-6b57-11e0-9495-001dba24bb8b}\ not found.
File G:\Startme.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
File move failed. F:\.\ar500deu.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
File move failed. F:\Autorun.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
File move failed. F:\.\DirectX\dxsetup.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\ not found.
File move failed. F:\.\Setup.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\ not found.
File H:\LaunchU3.exe -a not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\ not found.
File G:\wd_windows_tools\WDEULA.exe not found.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: x
->Temp folder emptied: 183950 bytes
->Temporary Internet Files folder emptied: 422461 bytes
->Java cache emptied: 17951146 bytes
->FireFox cache emptied: 70394170 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 3394 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 85.00 mb
 
 
OTL by OldTimer - Version 3.2.22.3 log created on 05042011_123817

Files\Folders moved on Reboot...
File move failed. F:\Autorun.exe scheduled to be moved on reboot.
File move failed. F:\Autorun.ico scheduled to be moved on reboot.
File move failed. F:\Autorun.inf scheduled to be moved on reboot.
File move failed. F:\.\ar500deu.exe scheduled to be moved on reboot.
File move failed. F:\.\DirectX\dxsetup.exe scheduled to be moved on reboot.
File move failed. F:\.\Setup.exe scheduled to be moved on reboot.

Registry entries deleted on Reboot...

glamp95 04.05.2011 11:43
Muss ich denn noch viel machen oder sind das die letzten Schritte?

kira 04.05.2011 19:21
2. und 3. noch, dann sind wir fertig:-> http://www.trojaner-board.de/98578-msn-verschickt-spam.html#post652623

glamp95 04.05.2011 23:40
Hier das Ergebniss von Schritt Nummer 2:
:
Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 05/05/2011 at 00:36 AM

Application Version : 4.51.1000

Core Rules Database Version : 6990
Trace Rules Database Version: 4802

Scan type      : Complete Scan
Total Scan Time : 00:48:58

Memory items scanned      : 879
Memory threats detected  : 0
Registry items scanned    : 10564
Registry threats detected : 0
File items scanned        : 33140
File threats detected    : 3

Adware.Tracking Cookie
        banner.electronic-arts.de [ C:\Users\x\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\cookies.sqlite ]
        .eaeacom.112.2o7.net [ C:\Users\x\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\cookies.sqlite ]
        .doubleclick.net [ C:\Users\x\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\cookies.sqlite ]

glamp95 05.05.2011 12:29
Hier noch das von Nummer 3:
:
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6427
# api_version=3.0.2
# EOSSerial=474d75048fe7fe45831725d530c7f873
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-05-05 12:46:48
# local_time=2011-05-05 02:46:48 (+0100, Mitteleuropäische Sommerzeit)
# country="xx"
# lang=1031
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=3587 16777214 85 75 6503193 123538662 0 0
# compatibility_mode=5892 16776573 100 100 126235 142082004 0 0
# compatibility_mode=8192 67108863 100 0 137 137 0 0
# scanned=139207
# found=0
# cleaned=0
# scan_time=7132

glamp95 06.05.2011 18:43
Okay was jetzt?
Ist das Problem jetzt gelöst?

kira 09.05.2011 11:08
1.
Programme deinstallieren/entfernen, die wir verwendet haben und nicht brauchst, bis auf:
Code:
CCleaner
für weitere Verwendung empfehlenswert

2.
wenn alles gut verlaufen ist und dein System läuft stabil, mache folgendes:
Erstelle manuell einen Wiederherstellungspunkt: Aktivieren und Deaktivieren der Systemwiederherstellung

3.
Ändere deine Passworte und Zugangsdaten! - von einem sauberen System aus
- Alle Passwörter, die auf dem kompromittierten System verwendet wurden (also z.B. Login-, Mail- oder Website-Passwörter, aber auch die PIN für das Online-Banking) sofort ändern (► am besten von einem anderen, nicht-infizierten Rechner aus! )
Tipps:
Die sichere Passwort-Wahl - (sollte man eigentlich regelmäßigen Abständen ca. alle 3-5 Monate ändern)
auch noch hier unter: Sicheres Kennwort (Password)

Lesestoff Nr.1:
  • Wie erstelle ich ein eingeschränktes Benutzerkonto?
  • Software immer auf dem neuesten Stand halten!:
    ALLE auf dem System installierten Programme und Treiber, sollten regelmäßig upgedatet werden um Sicherheitslücken zu vermeiden und um das reibungslose Arbeitsabläufe zu erreichen!
  • Ein sicherer Browser als IE z.B. *Ein Wechsel des Standardbrowsers zu...von SETI@home* - Firefox - FirefoxWiki/Einstellungen - Erweiterungen für Firefox - Standardbrowser
  • Sichere eMail Clients z.B. Thunderbird-->Erweiterungen für Mozilla Thunderbird
  • Sichere Paswort - Die sichere Passwort-Wahl - (sollte man eigentlich regelmäßigen Abständen ca. alle 3-5 Monate ändern)
    auch noch hier unter: Sicheres Kennwort (Password)
    Die fünf häufigsten Passwort-Fehler[/b[
  • "Never accept software from strangers" - Installiere grundsätzlich immer nur Programme, die Du auch wirklich benötigst und von denen Du überzeugt bist, dass sie seriös sind.
    Du hast die Wahl!, welche zusätzlichen Komponenten noch installiert werden sollen? -> Bei der Installation immer mitlesen, Sponsoren und Partnerprogramme, Toolbars oder eventuell noch andere extra angebotene Programme möglichst abwählen!
  • NICHT irgendwelche Programme aus dem Netz laden, wenn nicht zu 100% fest steht, dass es sich dabei um saubere Software handelt. Nette Versprechen der Hersteller garantieren noch lange keine einwandfreie Funktionsweise, also vorher blättere die Seiten bei GOOGLE, da kannst Du Dir wertvolle Informationen holen!!!
  • Vorsicht bei der Nutzung fremder Computer und anschliessbare Externe Speichermedien wie Festplatte, USB Sticks, Speicherkarten usw![/color] - IT-Betrüger machen keinen Urlaub!/bsi-fuer-buerger.de - auch zeitweise anschließen und scannen lassen (sehe unter `kostenlose Online-Viren-Scanner`)
  • Webseiten ohne Gültiges Impressum nicht besuchen
  • Lizenzkosten sparen? - Vorsicht bei Dateien/Programmen aus nicht vertrauenswürdigen Quellen! - "full Keygen, Crack, Serial, Warez, keygenerators" etc.
    Sind immer verseucht mit diverse Malware/Schadprogramme/Code, es gibt keine seite wo Viren frei ist. (Man sollte nicht absitlich der Teufel holen;)) Eine weitere höchst unsichere Quelle ist das File-Sharing der sog. (Musik-)Tauschbörsen.
    ► Ausserdem machst Du dich damit strafbar!
  • Nur eine Firewall sowie ein Antiviren Programm verwenden, welche sich immer auf dem aktuellsten Stand befinden sollten!
    Das Installieren von `zuviel` Software beeinträchtigt die Systemleistung und Sicherheit, verlangsamt den Start-Vorgang enorm und belastet den Arbeitsspeicher (weil laufen ja die Programme nebeneinander gleichzeitig, die viel Performance fressen, aber wenig Qualität bringen). Im Laufe der Zeit wird der rechner durch zu viel unnötigen Ballast immer langsamer, und unsicherer. Um so mehr Programme installiert sind, um so häufiger treten Probleme auf, die dann unter Umständen nur schwer lösen können. Dazu kommt noch, das einige Programme große Sicherheitsrisiken mit sich bringen;)
  • Virenscanner
  • BSI für Bürger
  • SETI@home - [Sicherheit] Sicherheitskonzept
  • Entwicklung schädlicher Websites/viruslist.com

** Der gesunde Menschenverstand, Windows und Internet-Software sicher konfigurieren ist der beste Weg zur Sicherheit im Webverkehr ist !!
Zitat:
Da der Bestand der Datenbank wird täglich ergänzt und erweitert bzw werden mit der aktuellen Virendefinition die Informationen über den betroffenen Virus aufgenommen, empfehle ich dir mindestens einmal pro Woche (später genügt es sicherlich einmal im Monat) dein System Online Scannen lassen (immer mit einen anderen Scanner), um eine zweite Meinung einzuholen - Die auf dem Speichermedium gesicherten Daten sollten auch mit einbezogen werden!
(benutzen meist ActiveX und/oder Java): Kostenlose Online Scanner -
Lesestoff Nr.2:
► Kann sich auf Dauer eine Menge Datenmüll ansammeln, sich Fehlermeldungen häufen, der PC ist wahrscheinlich nicht mehr so schnell, wie früher:wünsch Dir alles Gute:)

glamp95 09.05.2011 20:17
Zitat:
- Alle Passwörter, die auf dem kompromittierten System verwendet wurden (also z.B. Login-, Mail- oder Website-Passwörter, aber auch die PIN für das Online-Banking) sofort ändern (► am besten von einem anderen, nicht-infizierten Rechner aus! )
Heisst das mein Rechner ist infiziert?

glamp95 09.05.2011 20:26
Und noch eine Frage, ich soll jetzt also einfach mein System regelmässig Onlinescannen?
Und dann ist die Sache eigentlich wieder in Ordnung und ich verschicke keine solchen Mails mehr und es ist kein Virus mehr auf meinem Computer?

kira 10.05.2011 19:00
Zitat:
Zitat von glamp95 (Beitrag 655285)
Und noch eine Frage, ich soll jetzt also einfach mein System regelmässig Onlinescannen?
ja 1x im Monat reicht schon aus, oder bei Bedarf
ansonsten es muss alles im grünen Bereich sein!

glamp95 11.05.2011 11:50
Dann Danke ich Ihnen viel mal :dankeschoen::applaus::dankeschoen: für die Hilfe und hofe, dass ich jetzt keinen Spam mehr versende.
Gruss
glamp95

kira 12.05.2011 09:00
Lass dein System in der nächste Zeit noch unter Beobachtung! Ausserdem zeitweise um dein E-Mail-Programm mehr kümmern, z.B Start-> Ordner-> "alle Ordner Komprimieren" ausführen

gruß
Cf


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:21 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19