Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Gain.Gator und Probleme mit Firefox (fvd.kallout.com) (https://www.trojaner-board.de/99854-gain-gator-probleme-firefox-fvd-kallout-com.html)

So0ofer 02.06.2011 00:04
Gain.Gator und Probleme mit Firefox (fvd.kallout.com)
 
Habe seit neustem Probleme mit Firefox und wollte mich außerdem mal rundumchecken lassen da mir Spybot auch diverse Sachen anzeigt . ( Gain.Gator )
Beim starten von Firefox kommt jedesmal folgende Meldung : Zertifikat fvd.kallout.com ungültig ........
?!

hier die logfile :
HiJackthis Logfile:
Code:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 01:04:00, on 31.05.2011
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16766)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\MPK\mpk.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\**\Downloads\HiJackThis204.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) -  - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: VMLoadBHO - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Users\**\AppData\Roaming\VMLoad\addin\VMLoad.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: HyperCam Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O8 - Extra context menu item: Free YouTube Download - C:\Users\**\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\**\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10004 bytes
--- --- ---

M-K-D-B 02.06.2011 09:10
:hallo:

Mein Name ist M-K-D-B und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:
  • Eine Bereinigung ist mitunter mit viel Arbeit für dich verbunden.
  • Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Führe nur Scans durch, zu denen du von mir oder einem anderen Helfer aufgefordert wirst.
  • Bitte kein Crossposting (posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software außer du wirst dazu aufgefordert.
  • Bitte arbeite solange mit mir mit, bis ich dir sage, dass wir hier fertig sind.
  • Solltest du mir nicht innerhalb von 5 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
  • Für Benutzer von Windows Vista und Windows 7 gilt: Alle Programme mit Rechtsklick "Als Administrator ausführen" starten.



Bitte lies dir folgende Themen sorgfältig durch:
Erstelle anschließend die gewünschten Logfiles von OTL. Ohne die entsprechenden Logfiles kann und wird dir hier niemand helfen.

Vielen Dank für dein Verständnis. :)

So0ofer 02.06.2011 14:47
Als erstes :
Vielen dank für die Hilfe ! :)
Nur als nebeninfo : Ich arbeite mit Windows 7

Hier die gewünschten logfiles :OTL Logfile:
Code:
OTL logfile created on: 31.05.2011 15:28:37 - Run 1
OTL by OldTimer - Version 3.2.23.0    Folder = C:\Users\***\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,03 Gb Available Physical Memory | 51,26% Memory free
7,93 Gb Paging File | 5,80 Gb Available in Paging File | 73,10% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 102,27 Gb Free Space | 22,67% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,78% Space Free | Partition Type: NTFS
Drive F: | 2,10 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name:***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Windows\SysWOW64\MPK\MPK.exe ()
PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe (Safer Networking Limited)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV:64bit: - (SbieSvc) -- C:\Program Files\Sandboxie\SbieSvc.exe (tzuk)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (TeamViewer5) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
SRV - (TuneUp.Defrag) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (McComponentHostService) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files (x86)\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys ()
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (vmm) -- C:\Windows\SysNative\Treiber\VMM.sys (Microsoft Corporation)
DRV:64bit: - (NPF) -- C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (k57nd60a) Broadcom NetLink (TM) -- C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.)
DRV:64bit: - (VPCNetS2) -- C:\Windows\SysNative\drivers\VMNetSrv.sys (Microsoft Corporation)
DRV:64bit: - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV - (SbieDrv) -- C:\Programme\Sandboxie\SbieDrv.sys (tzuk)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (ASPI32) -- C:\Windows\SysWow64\drivers\ASPI32.SYS (Adaptec)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://start.icq.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://my.daemon-search.com/startpage|hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.0
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1
FF - prefs.js..extensions.enabledItems: {464F169E-ACE1-4C5F-A778-A433A3DABBAE}:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.7.0190
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
 
[2009.10.29 17:48:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2011.05.30 21:54:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions
[2010.02.07 20:21:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{2e17e2b2-b8d4-4a67-8d7b-fafa6cc9d1d0}
[2010.02.19 03:12:10 | 000,000,000 | ---D | M] (HyperCam Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.07.30 16:58:29 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.05.30 02:20:22 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.05.30 02:20:26 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.05.30 02:20:25 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.05.30 02:20:21 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\DTToolbar@toolbarnet.com
[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\staged-xpis
[2010.03.17 22:00:51 | 000,002,004 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\3dlam-suche.xml
[2011.03.13 23:17:09 | 000,002,059 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\daemon-search.xml
[2011.05.18 16:55:12 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-1.xml
[2010.11.04 18:34:39 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-10.xml
[2010.11.05 12:57:05 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-11.xml
[2010.11.17 02:24:24 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-12.xml
[2011.01.31 23:58:24 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-13.xml
[2011.05.02 00:03:04 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-14.xml
[2011.05.04 14:53:43 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-15.xml
[2010.02.18 01:44:44 | 000,000,961 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-2.xml
[2010.03.12 22:39:56 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-3.xml
[2010.03.13 20:02:56 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-4.xml
[2010.06.26 10:40:43 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-5.xml
[2010.07.05 16:14:38 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-6.xml
[2010.08.16 12:34:54 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-7.xml
[2010.09.11 13:58:59 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-8.xml
[2010.09.16 23:30:28 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-9.xml
[2010.06.21 16:35:24 | 000,001,042 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin.xml
[2011.03.13 23:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.07.11 16:19:58 | 000,000,000 | ---D | M] (VMLoad) -- C:\Program Files (x86)\mozilla firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE}
[2009.11.07 03:11:02 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.21 21:37:27 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2009.03.24 11:10:44 | 000,114,688 | ---- | M] (Zylom) -- C:\Program Files (x86)\mozilla firefox\plugins\npzylomgamesplayer.dll
[2011.03.31 17:03:03 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.03.31 17:03:03 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.03.31 17:03:03 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.03.31 17:03:03 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.03.31 17:03:03 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (VMLoadHBO Class) - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Users\***\AppData\Roaming\VMLoad\addin\VMLoad.dll (TODO: <Company name>)
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll ()
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (HyperCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (HyperCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll ()
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - Unable to obtain root file information for disk D:\
O32 - AutoRun File - [2007.06.28 18:48:59 | 000,000,000 | R--D | M] - F:\AutoRun -- [ UDF ]
O32 - AutoRun File - [2005.11.01 05:09:50 | 000,729,088 | R--- | M] (Electronic Arts Inc.) - F:\AutoRun.exe -- [ UDF ]
O32 - AutoRun File - [2005.11.01 05:43:36 | 000,000,160 | R--- | M] () - F:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2005.10.14 10:02:16 | 000,585,728 | R--- | M] (Electronic Arts Inc.) - F:\AutoRunGUI.dll -- [ UDF ]
O33 - MountPoints2\{22261174-1d57-11df-a8f7-0026b9054271}\Shell - "" = AutoRun
O33 - MountPoints2\{22261174-1d57-11df-a8f7-0026b9054271}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{4a86de2f-c497-11de-9097-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4a86de2f-c497-11de-9097-806e6f6e6963}\Shell\AutoRun\command - "" = E:\0data\cbs.exe
O33 - MountPoints2\{ea3be140-4dbf-11e0-ad00-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{ea3be140-4dbf-11e0-ad00-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2005.11.01 05:09:50 | 000,729,088 | R--- | M] (Electronic Arts Inc.)
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.05.31 15:27:25 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2011.05.25 15:13:51 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.05.25 15:13:48 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2011.05.25 15:13:48 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2011.05.25 10:02:30 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\World1
[2011.05.12 22:10:56 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\Novoline
[2011.05.12 19:46:17 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\LMFAO - Party Rock
[2011.05.12 11:38:38 | 005,509,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.05.12 11:38:36 | 003,957,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.05.12 11:38:36 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.05.06 19:32:15 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\Favorite - Christoph Alex (2CD-Limited Edt.)
[2009.07.14 00:16:42 | 000,836,608 | ---- | C] (Microsoft Corporation) -- C:\Users\***\AppData\Roaming\kernel33.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.05.31 15:27:29 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2011.05.31 15:22:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.31 00:35:05 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.05.31 00:35:05 | 000,655,842 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.05.31 00:35:05 | 000,616,682 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.05.31 00:35:05 | 000,130,722 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.05.31 00:35:05 | 000,107,062 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.05.31 00:34:49 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.31 00:34:49 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.31 00:29:21 | 3193,585,664 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.25 10:04:51 | 001,171,315 | ---- | M] () -- C:\Users\***\Deskto\MCWorld1_2011-05-25_10-04-39_Backup.mcworld
========== Files Created - No Company Name ==========
 
[2010.12.21 21:39:39 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.16 02:18:47 | 000,037,888 | ---- | C] () -- C:\Windows\SysWow64\AVIwrap.dll
[2010.11.16 02:18:43 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.11.16 02:18:37 | 000,105,472 | ---- | C] () -- C:\Windows\SysWow64\OggDS.dll
[2010.11.16 02:18:37 | 000,092,672 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2010.11.16 02:18:37 | 000,090,624 | ---- | C] () -- C:\Windows\SysWow64\vorbisenc.dll
[2010.11.16 02:18:37 | 000,021,504 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll
[2010.11.16 02:18:31 | 000,132,096 | ---- | C] () -- C:\Windows\SysWow64\libavcodec.dll
[2010.11.16 02:18:31 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll
[2010.11.16 02:18:31 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2010.11.16 02:18:30 | 000,077,664 | ---- | C] () -- C:\Windows\SysWow64\IR21_R.DLL
[2010.11.16 02:18:30 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\Iyvu9_32.dll
[2010.11.16 02:18:27 | 000,180,736 | ---- | C] () -- C:\Windows\SysWow64\vfcodec.dll
[2010.11.16 02:18:25 | 000,202,240 | ---- | C] () -- C:\Windows\SysWow64\XviD.dll
[2010.11.16 02:18:24 | 000,039,936 | ---- | C] () -- C:\Windows\SysWow64\mp4fil32.dll
[2010.09.29 23:14:14 | 008,676,883 | ---- | C] () -- C:\Windows\SysWow64\mp3Media2.dll
[2010.02.22 16:44:41 | 000,029,620 | ---- | C] () -- C:\Windows\Output.exe
[2010.02.21 14:00:26 | 000,001,458 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2009.11.15 00:37:11 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2009.11.14 22:47:07 | 000,007,609 | ---- | C] () -- C:\Users\***\AppData\Local\Resmon.ResmonCfg
[2009.10.29 15:32:09 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009.10.20 19:19:30 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2005.04.08 03:16:43 | 000,175,853 | -H-- | C] () -- C:\Users\***\AppData\Roaming\logs.dat

< End of report >
--- --- ---


OTL Logfile:
Code:
OTL Extras logfile created on: 31.05.2011 15:28:37 - Run 1
OTL by OldTimer - Version 3.2.23.0    Folder = C:\Users\***\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,03 Gb Available Physical Memory | 51,26% Memory free
7,93 Gb Paging File | 5,80 Gb Available in Paging File | 73,10% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 102,27 Gb Free Space | 22,67% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,78% Space Free | Partition Type: NTFS
Drive F: | 2,10 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{5324EDAC-DED3-3A65-6881-84B4B8A8A7F9}" = ATI Catalyst Install Manager
"{5D492FFA-C816-57FD-10F6-4742329EED76}" = ccc-utility64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{8A7CAA24-7B23-410B-A7C3-F994B0944160}" = Microsoft Virtual PC 2007
"{8F473675-D702-45F9-8EBC-342B40C17BF5}" = Apple Mobile Device Support
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{B24A47E5-F196-461E-A7A4-AADB72CB19DD}" = iTunes
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"HyperCam 2 (64 bit)" = HyperCam 2 (64 bit)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Sandboxie" = Sandboxie 3.44 (64-bit)
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}" = Uniblue RegistryBooster
"{0C7BCCCA-F9F3-82A6-FE6A-1160F7E14745}" = CCC Help Italian
"{0D707A04-9C3B-D735-1169-2C36A02EC1FD}" = Catalyst Control Center Core Implementation
"{0E0AA7EF-A847-3C08-ABF9-EDA7936DAFC5}" = Catalyst Control Center Graphics Full New
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{228B5714-9E6F-B9AE-6B6D-E8FF31C2A6D0}" = CCC Help German
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{25D90A06-E086-614F-203C-9ADB3A83709C}" = CCC Help French
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{2CDC3BD6-CA3D-F3FE-9700-FCBDB7CFA4C0}" = ccc-core-static
"{2DC94AFD-A6E2-4AB4-9132-4A3F8E07B386}" = Apple Application Support
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3A6631D2-7523-5046-ACF3-EC6FAD28FBA5}" = CCC Help Portuguese
"{40DE7141-333D-8D31-97FF-5C0ED5F3B552}" = CCC Help Polish
"{42929F0F-CE14-47AF-9FC7-FF297A603021}" = Dell Resource CD
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E7101FC-D19E-717B-F5F1-05DFAE4DC7CE}" = CCC Help Dutch
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{668B9FC5-9FA8-5C47-4AB5-E59D6D6E2123}" = CCC Help Greek
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6A154072-2009-7396-1B4F-1BBBEADD4895}" = CCC Help Swedish
"{6E0D5213-BD75-A091-4162-C6311745C23B}" = Catalyst Control Center Graphics Previews Common
"{72736F5F-520D-472A-88CC-7B02872FD34E}" = ATI Catalyst Registration
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{84194016-CDFE-FD7D-017E-6FDDDEBF9888}" = CCC Help Danish
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{87BB78C4-F36D-4D93-A7C7-F80F18219848}" = AMD DnD V1.0.19
"{942FB97A-B829-0371-5C91-74DAEAFF6900}" = CCC Help Turkish
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted
"{A9841591-47F4-7E49-0F1E-7E2ED014E248}" = CCC Help English
"{AB82ED30-1B6F-8B9A-2835-E4141A88BB6F}" = CCC Help Norwegian
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3 - Deutsch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B3D12C7E-6E25-D407-074D-931D66023EAE}" = CCC Help Czech
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B8ED984C-54AF-5705-EF5C-2739262F113F}" = CCC Help Japanese
"{C121C592-D8AB-8F29-309B-EA85483D6C51}" = CCC Help Chinese Standard
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CF929EEB-CE39-4F06-B1BF-F51FC617A2B2}" = Catalyst Control Center - Branding
"{D028B96F-8C9F-63DA-83EB-0F00D87700DA}" = CCC Help Finnish
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D311066E-6530-CEA2-7BCF-A665416AF11C}" = CCC Help Thai
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D765F1CE-5AE5-4C47-B134-AE58AC474740}" = OpenOffice.org 3.1
"{D8E0E80A-E5CA-9F64-2E46-CE694830507B}" = Catalyst Control Center Localization All
"{DC24D41C-022A-29DC-E4D4-F9C871F76DD4}" = CCC Help Russian
"{DCFF9230-22DC-40ED-BBCC-0F260B85734C}" = Tsunami-Filter-Pack
"{E0631725-6F53-0BFB-5C02-CA8DEF14C7B2}" = Catalyst Control Center Graphics Full Existing
"{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock
"{E5470B21-CA46-8BDD-247F-8717536DCFEB}" = CCC Help Chinese Traditional
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{EB47C52F-CE56-1066-5FB4-0B7663410A7C}" = Catalyst Control Center HydraVision Full
"{EFC47A05-3212-F334-EDA5-C5D2907419FE}" = CCC Help Hungarian
"{F09DA254-8879-1E7F-C14D-FFE8626F804B}" = Catalyst Control Center Graphics Previews Vista
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F3856E7C-AD71-48E1-9A95-6D7E7FCB164A}" = Midnight Club II
"{F404F36C-8FEF-5EA8-6D92-8B64F186D2C0}" = CCC Help Korean
"{FBFBDF43-D184-2AC4-A566-3DDF155979D3}" = CCC Help Spanish
"{FE8F944C-5209-8EEB-604D-0BAB9B2A4540}" = Catalyst Control Center Graphics Light
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Advanced Video FX Engine" = Advanced Video FX Engine
"AGEIA PhysX v2.3.3" = AGEIA PhysX v2.3.3
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Cain & Abel v4.9.35" = Cain & Abel v4.9.35
"Cheat Engine 5.5_is1" = Cheat Engine 5.5
"DAEMON Tools Lite" = DAEMON Tools Lite
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Dell Webcam Manager" = Dell Webcam Manager
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"DVDTS_is1" = DVDTS
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free Studio_is1" = Free Studio version 5.0.8
"Free YouTube Download_is1" = Free YouTube Download 2.3
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.34.305
"Freez FLV to MP3 Converter v1.5_is1" = Freez FLV to MP3 Converter
"GamersFirst LIVE!" = GamersFirst LIVE!
"Guild Wars" = GUILD WARS
"HyperCam Toolbar" = HyperCam Toolbar
"ICQToolbar" = ICQ Toolbar
"ManyCam" = ManyCam 2.4 (remove only)
"McAfee Security Scan" = McAfee Security Scan Plus
"Messenger Plus! Live" = Messenger Plus! Live
"mIRC" = mIRC
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"No-IP.com DUC" = No-IP.com DUC (remove only)
"Paraworld Multiplayer Demo_is1" = Paraworld MP Demo
"Security Task Manager" = Security Task Manager 1.8c
"Steam App 220" = Half-Life 2
"Steam App 240" = Counter-Strike: Source
"Steam App 340" = Half-Life 2: Lost Coast
"Steam App 9890" = Champions Online: Bloodmoon Free Weekend
"Super Mario 3 : Mario Forever" = Super Mario 3 : Mario Forever
"Super Mario Power Coins" = Super Mario Power Coins
"TeamViewer 5" = TeamViewer 5
"TuneUp Utilities" = TuneUp Utilities
"Uniblue RegistryBooster" = Uniblue RegistryBooster
"Uninstall_is1" = Uninstall 1.0.0.1
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"VLC media player" = VLC media player 1.0.2
"VMLoad" = VMLoad
"Wecker 2.2" = Wecker 2.2 2.2
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.1
"Wireshark" = Wireshark 1.2.6
"Zylom Games Player Plugin" = Zylom Games Player Plugin
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"5f48e2ab41c5d005" = RapidShare Manager
"BitTorrent DNA" = DNA
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 30.05.2011 14:10:11 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2090
 
Error - 30.05.2011 14:56:12 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 30.05.2011 14:56:12 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1388
 
Error - 30.05.2011 14:56:12 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1388
 
Error - 30.05.2011 14:56:13 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 30.05.2011 14:56:13 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2433
 
Error - 30.05.2011 14:56:13 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2433
 
Error - 30.05.2011 18:20:03 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 30.05.2011 18:20:03 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6599
 
Error - 30.05.2011 18:20:03 | Computer Name = ***-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6599
 
[ System Events ]
Error - 19.11.2010 23:49:00 | Computer Name = ***-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 19.11.2010 23:49:23 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  ASPI32
 
Error - 19.11.2010 23:12:45 | Computer Name = ***-PC | Source = DCOM | ID = 10010
Description =
 
Error - 20.11.2010 10:04:51 | Computer Name = ***-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 20.11.2010 13:45:58 | Computer Name = ***-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:24:01 | Computer Name = ***-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:26:55 | Computer Name = ***-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?25.?11.?2010 um 15:26:01 unerwartet heruntergefahren.
 
Error - 25.11.2010 10:26:45 | Computer Name = ***-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASPI32.SYS
 nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version
 des Treibers zu erhalten.
 
Error - 25.11.2010 10:26:54 | Computer Name = ***-PC | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
 
Error - 25.11.2010 10:26:54 | Computer Name = ***-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
 
< End of report >
--- --- ---

M-K-D-B 02.06.2011 15:30
Hallo So0ofer,




Du hast u.a. einen Keylogger auf dem Rechner. Kein Online-Banking, Einkäufe, etc. bis wir mit der Bereinigung fertig sind.
Nicht erschrecken. Es sieht nach mehr aus, als es in Wirklichkeit ist. :)

Los gehts:




Schritt # 1: Störende Programme
  • Mit laufendem TeaTimer von Spybot Search&Destroy lässt sich keine Reinigung durchführen, da er alle gelöschten Einträge wiederherstellt.
  • Der Teatimer muss also während der Reinigungsarbeiten abgestellt werden (lasse den Teatimer so lange ausgeschaltet, bis wir mit der Reinigung fertig sind):
  • Starte Spybot S&D => stelle im Menü "Modus" den "Erweiterten Modus" ein => klicke dann links unten auf "Werkzeuge" => klicke auf "Resident" => das Häkchen entfernen bei Resident "TeaTimer" (Schutz aller Systemeinstellungen) => Spybot Search&Destroy schließen => Rechner neu starten. Bebilderte Anleitung.




Schritt # 2: Fragen beantworten
Bitte beantworte mir folgende Fragen:
  • Warum hast du das Service Pack 1 für Windows 7 und den Internet Explorer 9 noch nicht installiert?
    Ursache dafür sind häufig Tuning Programme wie du sie verwendest (siehe Schritt # 3).




Schritt # 3: Registry Cleaner
Ich sehe, dass Du sogenannte Registry Cleaner am System hast.
In deinem Fall RegistryBooster und TuneUp Utilities.

Wir empfehlen auf keinen Fall jegliche Art von Registry Cleaner.

Der Grund ist ganz einfach:

Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr booted.
  • Wie soll der Cleaner zu 100% wissen ob der Eintrag benötigt wird oder nicht ?
  • Es ist vollkommen egal ob ein paar verwaiste Registry Einträge am System sind oder nicht.
  • Auch die dauernd angepriesene Beschleunigung des Systems ist nur bedingt wahr. Du würdest es nicht merken.
Ein sogenanntes False Positive von einem Cleaner kann auch dein System unbootbar machen.
Zerstörst Du die Registry, zerstörst Du Windows.

Ich empfehle Dir hiermit die oben genannte Software zu deinstallieren und in Zukunft auf solche Art von Software zu verzichten.





Schritt # 4: Peer to Peer oder Filesharing Programme
Ich sehe, dass Du sogenannte Peer to Peer oder Filesharing Programme verwendest.

In deinem Fall BitTorrent DNA.

Diese Programme erlauben es Dir, Daten mit anderen Usern auszutauschen.

Leider ist auch p2p oder Filesharing nicht ausgenommen, infizierte Dateien zu verteilen und ist auch ein Grund warum sich Malware so schnell verbreitet.
Es ist also möglich, dass Du Dir eine Infizierte Datei herunter ladest. Du kannst niemals wissen, woher diese stammen. Daher sollte diese Art Software mit äußerster Vorsicht benutzt werden.

Ein ebenfalls wichtiger Punkt ist, dass das verbreiten von Media und Entertainment Dateien in den meisten Ländern der Welt gegen Copyright Rechte verstößt.
Natürlich gibt es auch einen legalen Weg zur Nutzung dieses Service. Zum Beispiel zum Downloaden von Linux oder Open Office.
Denoch würde ich Dich ersuchen, diese Art von Software nicht weiterhin zu verwenden.
Bitte gehe zu

Start --> Systemsteuerung --> Software

und deinstalliere die oben genannte Software.

Bitte sag bescheid wenn Du eines der gelisteten Programme nicht finden kannst.





Schritt # 5: Deinstallation von Programmen
  • Folge folgendem Pfad: Start -> Systemsteuerung -> Programme deinstallieren
  • Suche in der Liste Software mit dem folgenden Namen
    • DAEMON Tools Toolbar
    • HyperCam Toolbar
    und deinstalliere das Programm.
  • Solltest du am Ende der Deinstallation zu einem Neustart aufgefordert werden, so führe diesen durch.




Schritt # 6: Stoppen von Treibern mit Defogger
Downloade Dir bitte defogger von jpshortstuff auf Deinem Desktop.
  • Starte das Tool mit Doppelklick.
    Vista und Windows 7 User: Bitte mit Rechtsklick "als Administrator starten".
  • Klicke nun auf den Disable Button um die Treiber gewisser Emulatoren zu deaktivieren.
  • Wenn der Scan beendet wurde ( Finished ), klicke auf OK.
  • Defogger fordert nun zum Neustart auf. Bestätige dies mit OK.
  • DeFogger erstellt nun ein Logfile auf dem Desktop (defogger_disable).
Poste bitte den Inhalt der Logfile in Deiner nächsten Antwort.
Wenn wir die Bereinigung beendet haben, starte bitte defogger erneut und klicke den Re-enable Button.





Schritt # 7: aswMBR.exe ausführen
Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
  • Klicke auf Scan
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.





Schritt # 8: Benutzerdefinierter Scan mit OTL
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%PROGRAMFILES%\*.
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
explorer.exe
regedit.exe
winlogon.exe
wininit.exe
userinit.exe
/md5stop
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
CREATERESTOREPOINT
  • Schließe bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread




Schritt # 9: Deine Rückmeldung
Zur weiteren Analyse benötige ich zusammen mit deiner nächsten Antwort
  • die Beantwortung der gestellten Fragen,
  • eventuell aufgetretene Probleme bei den Deinstallationen,
  • das Logfile von aswMBR und
  • das neue Logfile von OTL (OTL.txt).

So0ofer 02.06.2011 16:20
Den Internet Explorer 9 habe ich nicht installiert , da ich im moment nur Firefox verwende und demnach auf die Installation der neuen Version verzichtet .

Probleme gab es keine und der Keylogger den du meinst ist vermutlich der absichtilich installierte REFOG Keylogger , zur Beruhigung .

Das rauseditieren meines Namens war mir nach gefühlten 10000 Einträgen zu doof .

BitTorrent wurde nie bewusst installiert und wird auch nicht in der Programmliste aufgeführt ! :/


Hier die aswMBR.txt :

aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software
Run date: 2011-05-31 16:52:05
-----------------------------
16:52:05.814 OS Version: Windows x64 6.1.7600
16:52:05.814 Number of processors: 2 586 0x170A
16:52:05.814 ComputerName: ***-PC UserName: ***
16:52:10.026 Initialize success
16:52:14.191 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
16:52:14.191 Disk 0 Vendor: ST9500420ASG 0003SDM1 Size: 476940MB BusType: 11
16:52:16.250 Disk 0 MBR read successfully
16:52:16.266 Disk 0 MBR scan
16:52:16.266 Disk 0 Windows 7 default MBR code
16:52:16.266 Service scanning
16:52:19.729 Disk 0 trace - called modules:
16:52:19.745 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
16:52:19.745 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004c4a060]
16:52:19.745 3 CLASSPNP.SYS[fffff880018a743f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80046f81f0]
16:52:19.745 Scan finished successfully
16:52:32.131 Disk 0 MBR has been saved successfully to "C:\Users\***\Desktop\MBR.dat"
16:52:32.131 The log file has been saved successfully to "C:\Users\***\Desktop\aswMBR.txt"


Hier die neue OTl logfile :OTL Logfile:
Code:
OTL logfile created on: 31.05.2011 16:54:03 - Run 2
OTL by OldTimer - Version 3.2.23.0    Folder = C:\Users\***\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,82 Gb Available Physical Memory | 71,22% Memory free
7,93 Gb Paging File | 6,69 Gb Available in Paging File | 84,41% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 100,92 Gb Free Space | 22,37% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,78% Space Free | Partition Type: NTFS
 
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (SbieSvc) -- C:\Program Files\Sandboxie\SbieSvc.exe (tzuk)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (TeamViewer5) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (McComponentHostService) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files (x86)\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (vmm) -- C:\Windows\SysNative\Treiber\VMM.sys (Microsoft Corporation)
DRV:64bit: - (NPF) -- C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (k57nd60a) Broadcom NetLink (TM) -- C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.)
DRV:64bit: - (VPCNetS2) -- C:\Windows\SysNative\drivers\VMNetSrv.sys (Microsoft Corporation)
DRV:64bit: - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV - (SbieDrv) -- C:\Programme\Sandboxie\SbieDrv.sys (tzuk)
DRV - (ASPI32) -- C:\Windows\SysWow64\drivers\ASPI32.SYS (Adaptec)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://start.icq.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://my.daemon-search.com/startpage|hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1
FF - prefs.js..extensions.enabledItems: {464F169E-ACE1-4C5F-A778-A433A3DABBAE}:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
 
[2009.10.29 17:48:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2011.05.31 16:48:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions
[2010.02.07 20:21:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{2e17e2b2-b8d4-4a67-8d7b-fafa6cc9d1d0}
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.07.30 16:58:29 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.05.30 02:20:22 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.05.30 02:20:26 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.05.30 02:20:25 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\staged-xpis
[2010.03.17 22:00:51 | 000,002,004 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\3dlam-suche.xml
[2011.03.13 23:17:09 | 000,002,059 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\daemon-search.xml
[2011.05.18 16:55:12 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-1.xml
[2010.11.04 18:34:39 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-10.xml
[2010.11.05 12:57:05 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-11.xml
[2010.11.17 02:24:24 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-12.xml
[2011.01.31 23:58:24 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-13.xml
[2011.05.02 00:03:04 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-14.xml
[2011.05.04 14:53:43 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-15.xml
[2010.02.18 01:44:44 | 000,000,961 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-2.xml
[2010.03.12 22:39:56 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-3.xml
[2010.03.13 20:02:56 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-4.xml
[2010.06.26 10:40:43 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-5.xml
[2010.07.05 16:14:38 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-6.xml
[2010.08.16 12:34:54 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-7.xml
[2010.09.11 13:58:59 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-8.xml
[2010.09.16 23:30:28 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-9.xml
[2010.06.21 16:35:24 | 000,001,042 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin.xml
[2011.03.13 23:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.07.11 16:19:58 | 000,000,000 | ---D | M] (VMLoad) -- C:\Program Files (x86)\mozilla firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE}
[2009.11.07 03:11:02 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.21 21:37:27 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2009.03.24 11:10:44 | 000,114,688 | ---- | M] (Zylom) -- C:\Program Files (x86)\mozilla firefox\plugins\npzylomgamesplayer.dll
[2011.03.31 17:03:03 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.03.31 17:03:03 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.03.31 17:03:03 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.03.31 17:03:03 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.03.31 17:03:03 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (VMLoadHBO Class) - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Users\***\AppData\Roaming\VMLoad\addin\VMLoad.dll (TODO: <Company name>)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\ÜÜÜ\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - Unable to obtain root file information for disk D:\
O33 - MountPoints2\{22261174-1d57-11df-a8f7-0026b9054271}\Shell - "" = AutoRun
O33 - MountPoints2\{22261174-1d57-11df-a8f7-0026b9054271}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{4a86de2f-c497-11de-9097-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4a86de2f-c497-11de-9097-806e6f6e6963}\Shell\AutoRun\command - "" = E:\0data\cbs.exe
O33 - MountPoints2\{ea3be140-4dbf-11e0-ad00-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{ea3be140-4dbf-11e0-ad00-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
 
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamersFirst LIVE!.lnk -  - File not found
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk - C:\PROGRA~2\MCAFEE~1\202B13~1.181\SSSCHE~1.EXE - (McAfee, Inc.)
MsConfig:64bit - StartUpFolder: C:^Users^***^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^No-IP DUC.lnk - C:\PROGRA~2\No-IP\DUC20.exe - (Vitalwerks LLC)
MsConfig:64bit - StartUpFolder: C:^Users^***^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^VMLoad.lnk - C:\Users\***\AppData\Roaming\VMLoad\VMLoad.exe - ()
MsConfig:64bit - StartUpReg: AGEIA PhysX SysTray - hkey= - key= - C:\Program Files (x86)\AGEIA Technologies\TrayIcon.exe ()
MsConfig:64bit - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
MsConfig:64bit - StartUpReg: dellsupportcenter - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: DivXUpdate - hkey= - key= - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
MsConfig:64bit - StartUpReg: ICQ - hkey= - key= - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
MsConfig:64bit - StartUpReg: msnmsgr - hkey= - key= - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: Skype - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: Steam - hkey= - key= - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.05.31 15:27:25 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2009.07.14 00:16:42 | 000,836,608 | ---- | C] (Microsoft Corporation) -- C:\Users\***\AppData\Roaming\kernel33.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.05.31 16:55:48 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.31 16:55:48 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.31 16:55:06 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.05.31 16:55:06 | 000,655,842 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.05.31 16:55:06 | 000,616,682 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.05.31 16:55:06 | 000,130,722 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.05.31 16:55:06 | 000,107,062 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.05.31 16:52:32 | 000,000,512 | ---- | M] () -- C:\Users\***\Desktop\MBR.dat
[2011.05.31 16:50:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.31 16:50:10 | 3193,585,664 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.31 16:49:21 | 000,000,188 | ---- | M] () -- C:\Users\***\defogger_reenable
[2011.05.31 15:27:29 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe

========== Files Created - No Company Name ==========
 
[2011.05.31 16:52:32 | 000,000,512 | ---- | C] () -- C:\Users\Tim\Desktop\MBR.dat
[2011.05.31 16:49:20 | 000,000,188 | ---- | C] () -- C:\Users\Tim\defogger_reenable
[2010.12.21 21:39:39 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.16 02:18:47 | 000,037,888 | ---- | C] () -- C:\Windows\SysWow64\AVIwrap.dll
[2010.11.16 02:18:43 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.11.16 02:18:37 | 000,105,472 | ---- | C] () -- C:\Windows\SysWow64\OggDS.dll
[2010.11.16 02:18:37 | 000,092,672 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2010.11.16 02:18:37 | 000,090,624 | ---- | C] () -- C:\Windows\SysWow64\vorbisenc.dll
[2010.11.16 02:18:37 | 000,021,504 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll
[2010.11.16 02:18:31 | 000,132,096 | ---- | C] () -- C:\Windows\SysWow64\libavcodec.dll
[2010.11.16 02:18:31 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll
[2010.11.16 02:18:31 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2010.11.16 02:18:30 | 000,077,664 | ---- | C] () -- C:\Windows\SysWow64\IR21_R.DLL
[2010.11.16 02:18:30 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\Iyvu9_32.dll
[2010.11.16 02:18:27 | 000,180,736 | ---- | C] () -- C:\Windows\SysWow64\vfcodec.dll
[2010.11.16 02:18:25 | 000,202,240 | ---- | C] () -- C:\Windows\SysWow64\XviD.dll
[2010.11.16 02:18:24 | 000,039,936 | ---- | C] () -- C:\Windows\SysWow64\mp4fil32.dll
[2010.09.29 23:14:14 | 008,676,883 | ---- | C] () -- C:\Windows\SysWow64\mp3Media2.dll
[2010.02.22 16:44:41 | 000,029,620 | ---- | C] () -- C:\Windows\Output.exe
[2010.02.21 14:00:26 | 000,001,458 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2009.11.15 00:37:11 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2009.11.14 22:47:07 | 000,007,609 | ---- | C] () -- C:\Users\Tim\AppData\Local\Resmon.ResmonCfg
[2009.10.29 15:32:09 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009.10.20 19:19:30 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2005.04.08 03:16:43 | 000,175,853 | -H-- | C] () -- C:\Users\Tim\AppData\Roaming\logs.dat
 
========== LOP Check ==========
 
[2011.04.29 23:55:42 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\.minecraft
[2009.10.30 17:42:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Blitware
[2011.03.13 23:50:08 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DAEMON Tools Lite
[2009.11.07 00:52:12 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DNA
[2011.03.26 21:51:09 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft
[2011.03.24 11:02:27 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.11.17 01:23:15 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\ICQ
[2010.07.11 16:11:38 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Iggels
[2010.12.16 19:29:28 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\install
[2010.02.19 21:41:22 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\ManyCam
[2009.11.24 12:03:14 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\OpenOffice.org
[2009.10.29 16:59:23 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\SpieleEntwicklungsKombinat
[2010.10.22 19:11:00 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TeamViewer
[2010.01.05 02:27:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TuneUp Software
[2010.12.16 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Uniblue
[2010.07.30 13:54:02 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\VMLoad
[2010.02.05 10:28:27 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Wireshark
[2011.04.14 14:07:39 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.01.20 18:26:41 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2009.09.15 09:17:49 | 000,000,000 | ---D | M] -- C:\1033
[2009.10.30 19:39:02 | 000,000,000 | ---D | M] -- C:\ATI
[2009.10.29 15:27:35 | 000,000,000 | -HSD | M] -- C:\boot
[2011.05.31 01:00:52 | 000,000,000 | ---D | M] -- C:\Casino
[2010.02.18 01:16:28 | 000,000,000 | ---D | M] -- C:\DELL
[2010.02.21 02:55:47 | 000,000,000 | ---D | M] -- C:\directory
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2009.09.25 19:06:21 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2009.09.15 11:24:42 | 000,000,000 | ---D | M] -- C:\Drivers
[2011.03.07 02:21:43 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft
[2009.07.30 04:39:45 | 000,000,000 | ---D | M] -- C:\EFI
[2010.09.29 23:14:15 | 000,000,000 | ---D | M] -- C:\Mp3 Output
[2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2011.03.03 20:21:07 | 000,000,000 | R--D | M] -- C:\Programme
[2011.05.31 16:46:44 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2011.05.31 16:50:08 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2009.09.25 19:06:21 | 000,000,000 | -HSD | M] -- C:\Programme
[2009.10.29 15:45:41 | 000,000,000 | -HSD | M] -- C:\Recovery
[2010.02.21 14:01:06 | 000,000,000 | R--D | M] -- C:\Sandbox
[2009.09.25 19:13:50 | 000,000,000 | -HSD | M] -- C:\System Recovery
[2011.05.31 16:57:08 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2009.10.29 15:48:43 | 000,000,000 | R--D | M] -- C:\Users
[2011.05.01 23:01:32 | 000,000,000 | ---D | M] -- C:\Windows
[2009.10.29 15:14:06 | 000,000,000 | ---D | M] -- C:\Windows.old
 
< %PROGRAMFILES%\*.exe >
 
< %PROGRAMFILES%\*. >
[2010.02.14 02:00:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2010.06.11 18:19:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AGEIA Technologies
[2009.10.29 16:09:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2009.11.07 00:37:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI
[2009.10.30 19:39:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies
[2009.10.29 16:20:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Avira
[2010.11.16 02:18:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Avisynth
[2011.03.03 20:14:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2010.04.20 09:18:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cain
[2011.01.23 01:19:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cheat Engine
[2010.12.21 21:37:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2010.02.18 01:35:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Creative Live! Cam
[2011.03.13 23:17:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Lite
[2011.05.31 16:47:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010.02.18 01:51:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell
[2010.11.17 01:04:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DivX
[2009.11.07 00:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNA
[2010.02.28 01:00:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDTS
[2010.01.08 18:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDVideoSoft
[2011.03.13 23:54:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EA GAMES
[2010.01.03 20:11:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ElcomSoft
[2009.11.06 23:04:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GamersFirst
[2010.08.15 11:58:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GUILD WARS
[2011.05.31 16:50:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HyperCam Toolbar
[2010.11.18 01:09:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ICQ6Toolbar
[2010.11.17 01:23:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ICQ7.2
[2011.04.05 22:57:50 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2011.04.13 18:18:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2011.03.03 20:22:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
[2010.02.17 13:22:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2010.02.19 21:41:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ManyCam 2.4
[2010.08.08 23:35:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\McAfee Security Scan
[2010.05.29 14:21:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Messenger Plus! Live
[2009.10.30 15:52:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2010.02.26 19:02:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Virtual PC
[2010.06.26 10:11:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2010.03.05 22:02:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mIRC
[2011.05.02 00:02:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2009.07.14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2010.02.07 15:15:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\No-IP
[2009.11.24 12:01:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenOffice.org 3
[2009.10.29 16:57:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Paraworld MP Demo
[2011.03.03 20:17:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime
[2009.07.14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2009.11.08 18:25:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Rockstar Games
[2010.12.16 16:45:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Security Task Manager
[2010.12.21 21:37:27 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2010.09.29 23:14:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Smallvideosoft
[2010.02.21 00:19:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\softendo.com
[2010.10.22 19:03:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2011.04.27 00:56:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Steam
[2010.02.18 18:25:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TeamViewer
[2010.11.16 02:18:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Tsunami-Filter-Pack
[2009.07.14 05:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2009.10.29 16:08:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
[2010.12.11 21:49:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VirtualDJ
[2010.11.16 02:18:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VirtualDub
[2010.07.11 16:19:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VMLoad
[2010.02.05 00:40:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Wecker 2.2
[2009.07.14 18:58:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2009.10.30 15:52:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2009.10.30 15:51:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live SkyDrive
[2010.12.17 11:55:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2010.10.16 12:55:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2009.07.14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2009.07.14 18:58:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2009.07.14 06:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2009.07.14 18:58:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
[2010.04.20 09:18:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinPcap
[2009.11.04 01:02:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Zylom Games
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SysWOW64\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2009.04.30 11:48:37 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2009.04.30 11:48:36 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows.old\Windows\SysWOW64\explorer.exe
[2009.04.30 11:48:36 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19\explorer.exe
[2009.04.30 11:48:37 | 003,087,360 | ---- | M] (Microsoft Corporation) MD5=50514057C28A74BAC2BD04B7B990D615 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer.exe
[2009.04.30 11:48:36 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512\explorer.exe
[2009.08.03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009.04.30 11:48:36 | 003,086,848 | ---- | M] (Microsoft Corporation) MD5=72B9990E45C25AA3C75C4FB50A9D6CE0 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009.10.31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.04.30 11:48:36 | 003,080,704 | ---- | M] (Microsoft Corporation) MD5=BBD8E74F23D7605CB0CDB57A1B25D826 -- C:\Windows.old\Windows\explorer.exe
[2009.04.30 11:48:36 | 003,080,704 | ---- | M] (Microsoft Corporation) MD5=BBD8E74F23D7605CB0CDB57A1B25D826 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.04.30 11:48:35 | 003,081,216 | ---- | M] (Microsoft Corporation) MD5=E404A65EF890140410E9F3D405841C95 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer.exe
[2009.04.30 11:48:36 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c\explorer.exe
[2009.08.03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
[2008.01.21 03:48:44 | 003,080,704 | ---- | M] (Microsoft Corporation) MD5=F6D765FB6B457542D954682F50C26E4F -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer.exe
[2008.01.21 03:49:23 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0\explorer.exe
 
< MD5 for: REGEDIT.EXE  >
[2009.07.14 02:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=2E2C937846A0B8789E5E91739284D17A -- C:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e\regedit.exe
[2008.01.21 03:50:29 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows.old\Windows\SysWOW64\regedit.exe
[2008.01.21 03:50:29 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_5aa1fb3ac896d9c8\regedit.exe
[2008.01.21 03:49:53 | 000,161,792 | ---- | M] (Microsoft Corporation) MD5=5DFBCE56E689D90AE9E2FB278F80058E -- C:\Windows.old\Windows\regedit.exe
[2008.01.21 03:49:53 | 000,161,792 | ---- | M] (Microsoft Corporation) MD5=5DFBCE56E689D90AE9E2FB278F80058E -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_504d50e8943617cd\regedit.exe
[2009.07.14 02:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\regedit.exe
[2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\SysWOW64\regedit.exe
[2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\winsxs\wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5a78515e29ea6f39\regedit.exe
 
< MD5 for: USERINIT.EXE  >
[2008.01.21 03:50:36 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows.old\Windows\SysWOW64\userinit.exe
[2008.01.21 03:50:36 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2008.01.21 03:49:46 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=A0AB2BB9A92293D9CE66E252719AB5FE -- C:\Windows.old\Windows\System32\userinit.exe
[2008.01.21 03:49:46 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=A0AB2BB9A92293D9CE66E252719AB5FE -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_384755998a0d6941\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2008.01.21 03:48:04 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows.old\Windows\SysWOW64\wininit.exe
[2008.01.21 03:48:04 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe
[2008.01.21 03:50:23 | 000,123,904 | ---- | M] (Microsoft Corporation) MD5=117EA87DF785CA1B9D821F6F213DCE07 -- C:\Windows.old\Windows\System32\wininit.exe
[2008.01.21 03:50:23 | 000,123,904 | ---- | M] (Microsoft Corporation) MD5=117EA87DF785CA1B9D821F6F213DCE07 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8\wininit.exe
[2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2008.01.21 03:49:47 | 000,406,016 | ---- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A -- C:\Windows.old\Windows\System32\winlogon.exe
[2008.01.21 03:49:47 | 000,406,016 | ---- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_cbe19c9a8d4eed2b\winlogon.exe
[2009.10.28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2008.01.21 03:50:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows.old\Windows\SysWOW64\winlogon.exe
[2008.01.21 03:50:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >
--- --- ---

M-K-D-B 02.06.2011 19:17
Hallo So0ofer,



Bitte beantworte mir folgende Fragen:

Zitat:
Zitat von So0ofer (Beitrag 667122)
BitTorrent wurde nie bewusst installiert und wird auch nicht in der Programmliste aufgeführt ! :/
Ist auch kein Eintrag mit dem Namen DNA zu finden?

Zitat:
Zitat von So0ofer (Beitrag 667122)
Probleme gab es keine und der Keylogger den du meinst ist vermutlich der absichtilich installierte REFOG Keylogger , zur Beruhigung .
Warum setzt du auf einem privaten Rechner einen Keylogger ein? Bitte erkläre mir das, am besten so ausführlich wie möglich.

So0ofer 02.06.2011 22:10
Achja , unter DNA war's zu finden . Ist jetzt deinstalliert .

Den Keylogger habe ich eingesetzt da ich eine Zeitlang nicht der Alleinnutzer des Rechners war und mir nach mehrmaligen Toolbar Installationen die Sache zu doof war . Der Keylogger ist aber nicht mehr in Benutzung .

M-K-D-B 03.06.2011 13:09
Hallo So0ofer,



Zitat:
Zitat von So0ofer (Beitrag 667199)
Achja , unter DNA war's zu finden . Ist jetzt deinstalliert .
Gut. :)


Zitat:
Zitat von So0ofer (Beitrag 667199)
Den Keylogger habe ich eingesetzt da ich eine Zeitlang nicht der Alleinnutzer des Rechners war und mir nach mehrmaligen Toolbar Installationen die Sache zu doof war . Der Keylogger ist aber nicht mehr in Benutzung .
Ich möchte dich darauf hinweisen, dass der Keylogger von den folgenden Programmen automatisch entfernt wird.





Schritt # 1: Add-ons in Firefox entfernen
  • Starte Firefox
  • Klicke auf Extras -> Add-ons
  • Entferne die folgenden Add-ons (sofern sie vorhanden sind):
    • Zynga Community Toolbar
    • DVDVideoSoftTB Community Toolbar
    • Fast Video Download (with SearchMenu)
    • Conduit Engine
  • Zum Abschluss musst du Firefox schließen und neu starten, damit die Entfernung abgeschlossen werden kann.
  • Kontrolliere, ob die genannten Erweiterungen auch entfernt wurden.
  • Schließe Firefox wieder.




Schritt # 2: Fix mit OTL
Code:
:OTL
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()
[2011.03.26 21:51:09 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft
[2010.01.05 02:27:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TuneUp Software
[2010.12.16 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Uniblue
[2011.03.07 02:21:43 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft
[2011.05.31 16:47:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010.01.08 18:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDVideoSoft
[2011.05.31 16:50:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HyperCam Toolbar
[2009.11.07 00:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNA
[2009.11.07 00:52:12 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DNA

:files
C:\Windows\SysWOW64\MPK

:commands
[Purity]
[Emptytemp]
  • Schließe bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<time_date>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread




Schritt # 3: Kontrollscan mit Malwarebytes' Anti-Malware (MBAM)
Downloade Dir bitte Malwarebytes' Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere Quick-Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.




Schritt # 4: ComboFix ausführen
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.
Lade ComboFix von einem dieser Download-Spiegel herunter:

BleepingComputer - ForoSpyware

* Wichtig !! Speichere ComboFix auf dem Desktop
  • Deaktivere Deine Anti-Virus- und Anti-Spyware-Programme. Normalerweise kannst Du dies über einen Rechtsklick auf das Systemtray-Icon tun. Die Programme könnten sonst eventuell unsere Programme bei deren Arbeit stören.
  • Doppelklicke auf die ComboFix.exe und folge den Anweisungen.
  • ComboFix wird schauen, ob die Microsoft-Windows-Wiederherstellungskonsole installiert ist. Dies ist Teil des Prozesses. Angesichts der Art von Malware Infizierungen, die es heute gibt, wird dringend empfohlen, diese Wiederherstellungskonsole auf dem PC installiert zu haben, bevor jegliche Reinigung von Malware durchgeführt wird.
  • Folge den Anweisungen, um ComboFix das Herunterladen und Installieren der Wiederherstellungskonsole zu ermöglichen und stimme dem Lizenzvertrag (EULA) zu, sobald Du dazu aufgefordert wirst.
**Zur Information: Sollte die Wiederherstellungskonsole schon installiert sein, so wird ComboFix seine Malware-Entfernungsprozedur normal fortfahren.

http://i94.photobucket.com/albums/l8...eWHKonsole.jpg

Sobald die Wiederherstellungskonsole durch ComboFix installiert wurde, solltest Du folgende Nachricht sehen:

http://i94.photobucket.com/albums/l8...nstalliert.jpg

Klicke "Ja", um mit dem Suchlauf nach Malware fortzufahren.

Wenn ComboFix fertig ist, wird es ein Log erstellen. Bitte füge die C:\ComboFix.txt Deiner nächsten Antwort bei.




Schritt # 5: Systemscan mit OTL
  • Starte bitte OTL.exe.
  • Wähle unter Extra Registrierung: Benutze Safe List und klicke auf den Scan Button.
  • Poste die OTL.txt und die Extras.txt hier in deinen Thread.




Schritt # 6: Deine Rückmeldung
Zur weiteren Analyse benötige ich zusammen mit deiner nächsten Antwort
  • das Logfile des OTL-Fix,
  • das Logfile von MBAM,
  • das Logfile von ComboFix und
  • die beiden neuen Logfiles von OTL (OTL.txt und Extras.txt).

So0ofer 03.06.2011 14:54
Hat soweit alles funktioniert , vielen Dank :)
Hier die logfiles :

PS: Habe die logfile von mbam vor dem löschen der Dateien erstellt , aber konnte alles gelöscht werden .

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Datenbank Version: 6762

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

01.06.2011 15:26:24
mbam-log-2011-06-01 (15-26-09).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 156841
Laufzeit: 2 Minute(n), 32 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 4
Infizierte Dateien: 7

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
c:\programdata\MPK (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDA (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDM (Refog.Keylogger) -> No action taken.

Infizierte Dateien:
c:\Users\Tim\AppData\Roaming\kernel33.dll (Trojan.Agent) -> No action taken.
c:\Users\Tim\AppData\Roaming\logs.dat (Bifrose.Trace) -> No action taken.
c:\programdata\MPK\M0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\S0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1\D0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1\S0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDM\cpfm.bin (Refog.Keylogger) -> No action taken.


_______________________________________________

Combofix Logfile:
Code:
ComboFix 11-06-03.02 - Tim 01.06.2011  15:36:49.1.2 - x64
Microsoft Windows 7 Ultimate  6.1.7600.0.1252.49.1031.18.4061.2638 [GMT 1:00]
ausgeführt von:: c:\users\Tim\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
D:\Autorun.inf
.
.
(((((((((((((((((((((((  Dateien erstellt von 2011-05-01 bis 2011-06-01  ))))))))))))))))))))))))))))))
.
.
2011-06-01 14:43 . 2011-06-01 14:43        --------        d-----w-        c:\users\Default\AppData\Local\temp
2011-06-01 14:22 . 2011-06-01 14:22        --------        d-----w-        c:\users\Tim\AppData\Roaming\Malwarebytes
2011-06-01 14:22 . 2011-05-29 08:11        39984        ----a-w-        c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-06-01 14:22 . 2011-06-01 14:22        --------        d-----w-        c:\programdata\Malwarebytes
2011-06-01 14:22 . 2011-06-01 14:22        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2011-06-01 14:22 . 2011-05-29 08:11        25912        ----a-w-        c:\windows\system32\drivers\mbam.sys
2011-06-01 14:17 . 2011-06-01 14:17        --------        d-----w-        C:\_OTL
2011-06-01 12:35 . 2011-05-09 22:00        8718160        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{DC02FF99-5242-49D9-9F46-BD2DD502A98F}\mpengine.dll
2011-05-25 14:13 . 2011-04-22 20:18        27008        ----a-w-        c:\windows\system32\drivers\Diskdump.sys
2011-05-25 14:13 . 2011-04-09 06:58        142336        ----a-w-        c:\windows\system32\poqexec.exe
2011-05-25 14:13 . 2011-04-09 05:56        123904        ----a-w-        c:\windows\SysWow64\poqexec.exe
2011-05-12 10:38 . 2011-04-09 06:45        5509504        ----a-w-        c:\windows\system32\ntoskrnl.exe
2011-05-12 10:38 . 2011-04-09 06:13        3957632        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe
2011-05-12 10:38 . 2011-04-09 06:13        3901824        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-13 22:17 . 2011-03-13 22:17        513080        ----a-w-        c:\windows\system32\drivers\sptd.sys
2011-03-12 12:03 . 2011-04-29 20:03        662528        ----a-w-        c:\windows\system32\XpsPrint.dll
2011-03-12 11:31 . 2011-04-29 20:03        442880        ----a-w-        c:\windows\SysWow64\XpsPrint.dll
2011-03-11 06:23 . 2011-04-29 20:03        187264        ----a-w-        c:\windows\system32\drivers\storport.sys
2011-03-11 06:23 . 2011-04-29 20:03        1657216        ----a-w-        c:\windows\system32\drivers\ntfs.sys
2011-03-11 06:23 . 2011-04-29 20:03        166272        ----a-w-        c:\windows\system32\drivers\nvstor.sys
2011-03-11 06:23 . 2011-04-29 20:03        148352        ----a-w-        c:\windows\system32\drivers\nvraid.sys
2011-03-11 06:23 . 2011-04-29 20:03        410496        ----a-w-        c:\windows\system32\drivers\iaStorV.sys
2011-03-11 06:22 . 2011-04-29 20:03        107904        ----a-w-        c:\windows\system32\drivers\amdsata.sys
2011-03-11 06:22 . 2011-04-29 20:03        27008        ----a-w-        c:\windows\system32\drivers\amdxata.sys
2011-03-11 06:19 . 2011-04-12 17:59        1395712        ----a-w-        c:\windows\system32\mfc42.dll
2011-03-11 06:19 . 2011-04-12 17:59        1359872        ----a-w-        c:\windows\system32\mfc42u.dll
2011-03-11 06:18 . 2011-04-29 20:03        2566144        ----a-w-        c:\windows\system32\esent.dll
2011-03-11 06:15 . 2011-04-29 20:03        96768        ----a-w-        c:\windows\system32\fsutil.exe
2011-03-11 05:40 . 2011-04-12 17:59        1137664        ----a-w-        c:\windows\SysWow64\mfc42.dll
2011-03-11 05:40 . 2011-04-12 17:59        1164288        ----a-w-        c:\windows\SysWow64\mfc42u.dll
2011-03-11 05:39 . 2011-04-29 20:03        1686016        ----a-w-        c:\windows\SysWow64\esent.dll
2011-03-11 05:37 . 2011-04-29 20:03        74240        ----a-w-        c:\windows\SysWow64\fsutil.exe
2011-03-08 06:14 . 2011-04-12 17:57        976896        ----a-w-        c:\windows\system32\inetcomm.dll
2011-03-08 05:38 . 2011-04-12 17:57        740864        ----a-w-        c:\windows\SysWow64\inetcomm.dll
2011-03-04 06:17 . 2011-04-29 20:03        135168        ----a-w-        c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:17 . 2011-04-29 20:03        347648        ----a-w-        c:\windows\apppatch\AppPatch64\AcLayers.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-12-16 281768]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"DELL Webcam Manager"="c:\program files (x86)\Dell\Dell Webcam Manager\DellWMgr.exe" /s
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 PCD5SRVC{048DBD20-445E8C82-05040104};PCD5SRVC{048DBD20-445E8C82-05040104} - PCDR Kernel Mode Service Helper Driver;c:\progra~2\DELLSU~1\HWDiag\bin\PCD5SRVC_x64.pkms [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-05-12 136360]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 TeamViewer5;TeamViewer 5;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-19 2011944]
S3 k57nd60a;Broadcom NetLink (TM)-Gigabit-Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\DRIVERS\ManyCam_x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series - Adaptertreiber für Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = my.daemon-search.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Free YouTube Download - c:\users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to Mp3 Converter - c:\users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://my.daemon-search.com/startpage|hxxp://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - Ext: VMLoad: {464F169E-ACE1-4C5F-A778-A433A3DABBAE} - c:\program files (x86)\Mozilla Firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - c:\program files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: DVDVideoSoft Menu: {ACAA314B-EEBA-48e4-AD47-84E31C44796C} - %profile%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCD5SRVC{048DBD20-445E8C82-05040104}]
"ImagePath"="\??\c:\progra~2\DELLSU~1\HWDiag\bin\PCD5SRVC_x64.pkms"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10a.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10a.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-06-01  15:45:28
ComboFix-quarantined-files.txt  2011-06-01 14:45
.
Vor Suchlauf: 18 Verzeichnis(se), 123.327.410.176 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 123.253.506.048 Bytes frei
.
- - End Of File - - CBD9E22F586459281C2F8D672FD245A1
--- --- ---


___________________________________________OTL Logfile:
Code:
OTL Extras logfile created on: 01.06.2011 15:46:52 - Run 3
OTL by OldTimer - Version 3.2.23.0    Folder = C:\Users\Tim\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,62 Gb Available Physical Memory | 66,02% Memory free
7,93 Gb Paging File | 6,48 Gb Available in Paging File | 81,73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 114,87 Gb Free Space | 25,47% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,79% Space Free | Partition Type: NTFS
 
Computer Name: TIM-PC | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
========== Firewall Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{5324EDAC-DED3-3A65-6881-84B4B8A8A7F9}" = ATI Catalyst Install Manager
"{5D492FFA-C816-57FD-10F6-4742329EED76}" = ccc-utility64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{8A7CAA24-7B23-410B-A7C3-F994B0944160}" = Microsoft Virtual PC 2007
"{8F473675-D702-45F9-8EBC-342B40C17BF5}" = Apple Mobile Device Support
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{B24A47E5-F196-461E-A7A4-AADB72CB19DD}" = iTunes
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"HyperCam 2 (64 bit)" = HyperCam 2 (64 bit)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Sandboxie" = Sandboxie 3.44 (64-bit)
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.0.1200
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"5f48e2ab41c5d005" = RapidShare Manager
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 01.06.2011 08:25:13 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 08:25:13 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 4571
 
Error - 01.06.2011 08:25:13 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 4571
 
Error - 01.06.2011 08:25:14 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 08:25:14 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 5569
 
Error - 01.06.2011 08:25:14 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 5569
 
Error - 01.06.2011 09:01:04 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 09:01:04 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1669
 
Error - 01.06.2011 09:01:04 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1669
 
Error - 01.06.2011 10:32:14 | Computer Name = Tim-PC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Tim\Downloads\SoftonicDownloader_fuer_zsnes.exe".
 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche
 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.
In
 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
 
[ System Events ]
Error - 19.11.2010 23:49:23 | Computer Name = Tim-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  ASPI32
 
Error - 19.11.2010 23:12:45 | Computer Name = Tim-PC | Source = DCOM | ID = 10010
Description =
 
Error - 20.11.2010 10:04:51 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 20.11.2010 13:45:58 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:24:01 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:26:55 | Computer Name = Tim-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?25.?11.?2010 um 15:26:01 unerwartet heruntergefahren.
 
Error - 25.11.2010 10:26:45 | Computer Name = Tim-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASPI32.SYS
 nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version
 des Treibers zu erhalten.
 
Error - 25.11.2010 10:26:54 | Computer Name = Tim-PC | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
 
Error - 25.11.2010 10:26:54 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:27:47 | Computer Name = Tim-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  ASPI32
 
 
< End of report >
--- --- ---

____________________________________________OTL Logfile:
Code:
OTL logfile created on: 01.06.2011 15:46:52 - Run 3
OTL by OldTimer - Version 3.2.23.0    Folder = C:\Users\Tim\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,62 Gb Available Physical Memory | 66,02% Memory free
7,93 Gb Paging File | 6,48 Gb Available in Paging File | 81,73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 114,87 Gb Free Space | 25,47% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,79% Space Free | Partition Type: NTFS
 
Computer Name: TIM-PC | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Tim\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Tim\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (SbieSvc) -- C:\Program Files\Sandboxie\SbieSvc.exe (tzuk)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (TeamViewer5) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (McComponentHostService) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files (x86)\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (vmm) -- C:\Windows\SysNative\Treiber\VMM.sys (Microsoft Corporation)
DRV:64bit: - (NPF) -- C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (k57nd60a) Broadcom NetLink (TM) -- C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.)
DRV:64bit: - (VPCNetS2) -- C:\Windows\SysNative\drivers\VMNetSrv.sys (Microsoft Corporation)
DRV:64bit: - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV - (SbieDrv) -- C:\Programme\Sandboxie\SbieDrv.sys (tzuk)
DRV - (ASPI32) -- C:\Windows\SysWow64\drivers\ASPI32.SYS (Adaptec)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://my.daemon-search.com/startpage|hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3
FF - prefs.js..extensions.enabledItems: {464F169E-ACE1-4C5F-A778-A433A3DABBAE}:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
 
[2009.10.29 17:48:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Extensions
[2011.06.01 15:15:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions
[2010.02.07 20:21:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{2e17e2b2-b8d4-4a67-8d7b-fafa6cc9d1d0}
[2010.07.30 16:58:29 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.05.30 02:20:22 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.05.30 02:20:26 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.05.30 02:20:25 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\staged-xpis
[2010.03.17 22:00:51 | 000,002,004 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\3dlam-suche.xml
[2011.03.13 23:17:09 | 000,002,059 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\daemon-search.xml
[2011.05.18 16:55:12 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-1.xml
[2010.11.04 18:34:39 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-10.xml
[2010.11.05 12:57:05 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-11.xml
[2010.11.17 02:24:24 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-12.xml
[2011.01.31 23:58:24 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-13.xml
[2011.05.02 00:03:04 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-14.xml
[2011.05.04 14:53:43 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-15.xml
[2010.02.18 01:44:44 | 000,000,961 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-2.xml
[2010.03.12 22:39:56 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-3.xml
[2010.03.13 20:02:56 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-4.xml
[2010.06.26 10:40:43 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-5.xml
[2010.07.05 16:14:38 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-6.xml
[2010.08.16 12:34:54 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-7.xml
[2010.09.11 13:58:59 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-8.xml
[2010.09.16 23:30:28 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-9.xml
[2010.06.21 16:35:24 | 000,001,042 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin.xml
[2011.03.13 23:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.07.11 16:19:58 | 000,000,000 | ---D | M] (VMLoad) -- C:\Program Files (x86)\mozilla firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE}
[2009.11.07 03:11:02 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.21 21:37:27 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2009.03.24 11:10:44 | 000,114,688 | ---- | M] (Zylom) -- C:\Program Files (x86)\mozilla firefox\plugins\npzylomgamesplayer.dll
[2011.03.31 17:03:03 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.03.31 17:03:03 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.03.31 17:03:03 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.03.31 17:03:03 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.03.31 17:03:03 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.06.01 15:43:27 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (VMLoadHBO Class) - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Users\Tim\AppData\Roaming\VMLoad\addin\VMLoad.dll (TODO: <Company name>)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.06.01 15:33:35 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011.06.01 15:33:35 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011.06.01 15:33:35 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011.06.01 15:33:28 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.06.01 15:33:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.06.01 15:31:51 | 004,112,250 | R--- | C] (Swearware) -- C:\Users\Tim\Desktop\ComboFix.exe
[2011.06.01 15:22:36 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\Malwarebytes
[2011.06.01 15:22:30 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.06.01 15:22:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.06.01 15:22:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.06.01 15:22:25 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.06.01 15:22:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.06.01 15:17:48 | 000,000,000 | ---D | C] -- C:\_OTL
[2011.05.31 15:27:25 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\Tim\Desktop\OTL.exe
[2011.05.25 15:13:51 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.05.25 15:13:48 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2011.05.25 15:13:48 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2011.05.12 11:38:38 | 005,509,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.05.12 11:38:36 | 003,957,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.05.12 11:38:36 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
 
========== Files - Modified Within 30 Days ==========
 
[2011.06.01 15:43:27 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2011.06.01 15:32:54 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.06.01 15:32:54 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.06.01 15:32:39 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.06.01 15:32:39 | 000,655,842 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.06.01 15:32:39 | 000,616,682 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.06.01 15:32:39 | 000,130,722 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.06.01 15:32:39 | 000,107,062 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.06.01 15:32:07 | 004,112,250 | R--- | M] (Swearware) -- C:\Users\Tim\Desktop\ComboFix.exe
[2011.06.01 15:27:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.06.01 15:27:28 | 3193,585,664 | -HS- | M] () -- C:\hiberfil.sys
[2011.06.01 15:22:30 | 000,001,115 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.31 16:52:32 | 000,000,512 | ---- | M] () -- C:\Users\Tim\Desktop\MBR.dat
[2011.05.31 16:49:21 | 000,000,188 | ---- | M] () -- C:\Users\Tim\defogger_reenable
[2011.05.31 15:27:29 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Tim\Desktop\OTL.exe

 
========== Files Created - No Company Name ==========
 
[2011.06.01 15:33:35 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.06.01 15:33:35 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011.06.01 15:33:35 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.06.01 15:33:35 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.06.01 15:33:35 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.06.01 15:22:30 | 000,001,115 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.31 16:52:32 | 000,000,512 | ---- | C] () -- C:\Users\Tim\Desktop\MBR.dat
[2011.05.31 16:49:20 | 000,000,188 | ---- | C] () -- C:\Users\Tim\defogger_reenable
[2010.12.21 21:39:39 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.16 02:18:47 | 000,037,888 | ---- | C] () -- C:\Windows\SysWow64\AVIwrap.dll
[2010.11.16 02:18:43 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.11.16 02:18:37 | 000,105,472 | ---- | C] () -- C:\Windows\SysWow64\OggDS.dll
[2010.11.16 02:18:37 | 000,092,672 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2010.11.16 02:18:37 | 000,090,624 | ---- | C] () -- C:\Windows\SysWow64\vorbisenc.dll
[2010.11.16 02:18:37 | 000,021,504 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll
[2010.11.16 02:18:31 | 000,132,096 | ---- | C] () -- C:\Windows\SysWow64\libavcodec.dll
[2010.11.16 02:18:31 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll
[2010.11.16 02:18:31 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2010.11.16 02:18:30 | 000,077,664 | ---- | C] () -- C:\Windows\SysWow64\IR21_R.DLL
[2010.11.16 02:18:30 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\Iyvu9_32.dll
[2010.11.16 02:18:27 | 000,180,736 | ---- | C] () -- C:\Windows\SysWow64\vfcodec.dll
[2010.11.16 02:18:25 | 000,202,240 | ---- | C] () -- C:\Windows\SysWow64\XviD.dll
[2010.11.16 02:18:24 | 000,039,936 | ---- | C] () -- C:\Windows\SysWow64\mp4fil32.dll
[2010.09.29 23:14:14 | 008,676,883 | ---- | C] () -- C:\Windows\SysWow64\mp3Media2.dll
[2010.02.22 16:44:41 | 000,029,620 | ---- | C] () -- C:\Windows\Output.exe
[2010.02.21 14:00:26 | 000,001,458 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2009.11.15 00:37:11 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2009.11.14 22:47:07 | 000,007,609 | ---- | C] () -- C:\Users\Tim\AppData\Local\Resmon.ResmonCfg
[2009.10.29 15:32:09 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009.10.20 19:19:30 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll

< End of report >
--- --- ---


__________________________

All processes killed
Error: Unable to interpret <HKCU\..\URLSearchHook: - Reg Error: Key error. File not found> in the current context!
Error: Unable to interpret <IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local> in the current context!
Error: Unable to interpret <FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1> in the current context!
Error: Unable to interpret <FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2> in the current context!
Error: Unable to interpret <FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2> in the current context!
Error: Unable to interpret <[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}> in the current context!
Error: Unable to interpret <[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}> in the current context!
Error: Unable to interpret <[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}> in the current context!
Error: Unable to interpret <[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com> in the current context!
Error: Unable to interpret <O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found> in the current context!
Error: Unable to interpret <O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found> in the current context!
Error: Unable to interpret <O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()> in the current context!
Error: Unable to interpret <[2011.03.26 21:51:09 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft> in the current context!
Error: Unable to interpret <[2010.01.05 02:27:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TuneUp Software> in the current context!
Error: Unable to interpret <[2010.12.16 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Uniblue> in the current context!
Error: Unable to interpret <[2011.03.07 02:21:43 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft> in the current context!
Error: Unable to interpret <[2011.05.31 16:47:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Toolbar> in the current context!
Error: Unable to interpret <[2010.01.08 18:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDVideoSoft> in the current context!
Error: Unable to interpret <[2011.05.31 16:50:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HyperCam Toolbar> in the current context!
Error: Unable to interpret <[2009.11.07 00:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNA> in the current context!
Error: Unable to interpret <[2009.11.07 00:52:12 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DNA> in the current context!
========== FILES ==========
C:\Windows\SysWOW64\MPK\Lang folder moved successfully.
C:\Windows\SysWOW64\MPK\Images folder moved successfully.
C:\Windows\SysWOW64\MPK\Help\Spanish folder moved successfully.
C:\Windows\SysWOW64\MPK\Help\German folder moved successfully.
C:\Windows\SysWOW64\MPK\Help\English folder moved successfully.
C:\Windows\SysWOW64\MPK\Help folder moved successfully.
C:\Windows\SysWOW64\MPK folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Tim
->Temp folder emptied: 268139293 bytes
->Temporary Internet Files folder emptied: 399552065 bytes
->Java cache emptied: 1222877 bytes
->FireFox cache emptied: 63519815 bytes
->Flash cache emptied: 301668 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 22459 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 171483 bytes
RecycleBin emptied: 14276668195 bytes

Total Files Cleaned = 14.314,00 mb


OTL by OldTimer - Version 3.2.23.0 log created on 06012011_151748

Files\Folders moved on Reboot...
C:\Users\Tim\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

M-K-D-B 03.06.2011 15:58
Hallo So0ofer,


Zitat:
Zitat von So0ofer (Beitrag 667376)
Hat soweit alles funktioniert , vielen Dank :)
Ich muss dich leider enttäuschen, funktioniert hat kaum etwas. :balla:


Zitat:
Zitat von So0ofer (Beitrag 667376)
PS: Habe die logfile von mbam vor dem löschen der Dateien erstellt...
Die Reihenfolge hat ihren Sinn und sollte deshalb auch eingehalten werden. :)


Zitat:
Zitat von So0ofer (Beitrag 667376)
Infizierte Verzeichnisse:
c:\programdata\MPK (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDA (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDM (Refog.Keylogger) -> No action taken.

Infizierte Dateien:
c:\Users\Tim\AppData\Roaming\kernel33.dll (Trojan.Agent) -> No action taken.
c:\Users\Tim\AppData\Roaming\logs.dat (Bifrose.Trace) -> No action taken.
c:\programdata\MPK\M0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\S0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1\D0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1\S0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDM\cpfm.bin (Refog.Keylogger) -> No action taken.
Hast du die Funde auch entfernen lassen? Sieht nicht so aus. Die Anleitung war eindeutig: Scannen lassen, dann entfernen, dann wird Logfile erstellt und dieses dann posten.


Dann gabs noch eine Fehlermeldung mit OTL:
Code:
Error: Unable to interpret
Grund hierfür ist, dass du die erste Zeile meines Fixes
Zitat:
:OTL
nicht mit kopiert hast. Über jeder Code-Box gibt es hier im Forum drei Buttons. Es ist nicht verboten, diese zu verwenden. :daumenhoc


Auf ein Neues:





Schritt # 1: Fix mit OTL
Code:
:OTL
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()
[2011.03.26 21:51:09 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft
[2010.01.05 02:27:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TuneUp Software
[2010.12.16 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Uniblue
[2011.03.07 02:21:43 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft
[2011.05.31 16:47:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010.01.08 18:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDVideoSoft
[2011.05.31 16:50:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HyperCam Toolbar
[2009.11.07 00:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNA
[2009.11.07 00:52:12 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DNA

:files
c:\programdata\MPK

:commands
[Emptytemp]
  • Schließe bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<time_date>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread




Schritt # 2: Kontrollscan mit Malwarebytes' Anti-Malware (MBAM)
  • Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere Quick-Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.




Schritt # 3: Systemscan mit OTL
  • Starte bitte OTL.exe.
  • Wähle unter Extra Registrierung: Benutze Safe List und klicke auf den Scan Button.
  • Poste die OTL.txt und die Extras.txt hier in deinen Thread.




Schritt # 4: Deine Rückmeldung
Zur weiteren Analyse benötige ich zusammen mit deiner nächsten Antwort
  • das Logfile des OTL-Fix,
  • das Logfile von MBAM und
  • die beiden neuen Logfiles von OTL (OTL.txt und Extras.txt).

So0ofer 03.06.2011 16:26
Alles auf Neu :

Die gefundene Malware wurde von mbam entfernt habe nur die ausversehen die log vor dem entfernen gepostet aber die aktuelle ist jetzt dabei .

All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Prefs.js: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1 removed from extensions.enabledItems
Prefs.js: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2 removed from extensions.enabledItems
Prefs.js: engine@conduit.com:3.3.3.2 removed from extensions.enabledItems
Folder %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\ not found.
Folder %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
Folder %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}\ not found.
Folder %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully.
64bit-Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit:C:\Windows\SysWOW64\MPK\mpk.exe deleted successfully.
File C:\Windows\SysWOW64\MPK\MPK.exe not found.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3DPhotoMaker\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3DPhotoMaker folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\LogonScreens\Cache folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\LogonScreens folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\LogoAnimations\Cache folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\LogoAnimations folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\BootScreens\Cache folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\BootScreens folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\StartUp Manager\Deaktivierte Objekte folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\StartUp Manager folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\Speed Optimizer folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\Program Statistics folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\Dashboard folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\Backups folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue\RegistryBooster\_temp folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue\RegistryBooster\history folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue\RegistryBooster\backup folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue\RegistryBooster folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue folder moved successfully.
C:\DVDVideoSoft folder moved successfully.
C:\Program Files (x86)\DAEMON Tools Toolbar folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube Download folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\zh-CN folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\nl-NL folder moved successfully.

So0ofer 03.06.2011 16:27
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to Mp3 Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to Mp3 Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to iPod Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to iPod Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to iPhone Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to iPhone Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube to DVD Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Download folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Xbox Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPSP Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SonyPhones Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Sony PlayStation Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to SamsungPhones Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to NokiaPhones Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Nintendo Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Mp3 Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to MotorolaPhones Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to LGPhones Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to JPG Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPod Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPhone Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to iPad Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to HTCPhones Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\Players\multi folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\Players\mini folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\Players\maxi folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\Players\classic folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\Players folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Flash Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to DVD Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to DVD Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Cowon Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Blackberry Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to AppleTV Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video to Android Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video Flip and Rotate folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Video Dub folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Screen Video Recorder folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Image Convert and Resize folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Video Burner folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free DVD Decrypter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Disc Burner folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\Players\multi folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\Players\mini folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\Players\maxi folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\Players\classic folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\Players\button folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\Players folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio to Flash Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Dub folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio CD to MP3 Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio CD to MP3 Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free Audio CD Burner folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\Profiles folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3GP Video Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Video Maker folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free 3D Photo Maker folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Audio CD Burner folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft folder moved successfully.
C:\Program Files (x86)\HyperCam Toolbar folder moved successfully.
C:\Program Files (x86)\DNA folder moved successfully.
C:\Users\Tim\AppData\Roaming\DNA folder moved successfully.
========== FILES ==========
File\Folder c:\programdata\MPK not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Tim
->Temp folder emptied: 14239 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 82142390 bytes
->Flash cache emptied: 861 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 280 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 78,00 mb


OTL by OldTimer - Version 3.2.23.0 log created on 06012011_170752

Files\Folders moved on Reboot...
C:\Users\Tim\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...


Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Datenbank Version: 6762

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

01.06.2011 17:16:04
mbam-log-2011-06-01 (17-16-04).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 159726
Laufzeit: 2 Minute(n), 58 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

____________________________

OTL Logfile:
Code:
OTL logfile created on: 01.06.2011 17:18:28 - Run 4
OTL by OldTimer - Version 3.2.23.0    Folder = C:\Users\Tim\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,62 Gb Available Physical Memory | 66,18% Memory free
7,93 Gb Paging File | 6,39 Gb Available in Paging File | 80,58% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 114,85 Gb Free Space | 25,46% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,79% Space Free | Partition Type: NTFS
 
Computer Name: TIM-PC | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Tim\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Tim\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (SbieSvc) -- C:\Program Files\Sandboxie\SbieSvc.exe (tzuk)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (TeamViewer5) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (McComponentHostService) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files (x86)\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (vmm) -- C:\Windows\SysNative\Treiber\VMM.sys (Microsoft Corporation)
DRV:64bit: - (NPF) -- C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (k57nd60a) Broadcom NetLink (TM) -- C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.)
DRV:64bit: - (VPCNetS2) -- C:\Windows\SysNative\drivers\VMNetSrv.sys (Microsoft Corporation)
DRV:64bit: - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV - (SbieDrv) -- C:\Programme\Sandboxie\SbieDrv.sys (tzuk)
DRV - (ASPI32) -- C:\Windows\SysWow64\drivers\ASPI32.SYS (Adaptec)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://my.daemon-search.com/startpage|hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3
FF - prefs.js..extensions.enabledItems: {464F169E-ACE1-4C5F-A778-A433A3DABBAE}:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
 
[2009.10.29 17:48:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Extensions
[2011.06.01 15:15:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions
[2010.02.07 20:21:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{2e17e2b2-b8d4-4a67-8d7b-fafa6cc9d1d0}
[2010.07.30 16:58:29 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.05.30 02:20:22 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.05.30 02:20:26 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.05.30 02:20:25 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\staged-xpis
[2010.03.17 22:00:51 | 000,002,004 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\3dlam-suche.xml
[2011.03.13 23:17:09 | 000,002,059 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\daemon-search.xml
[2011.05.18 16:55:12 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-1.xml
[2010.11.04 18:34:39 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-10.xml
[2010.11.05 12:57:05 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-11.xml
[2010.11.17 02:24:24 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-12.xml
[2011.01.31 23:58:24 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-13.xml
[2011.05.02 00:03:04 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-14.xml
[2011.05.04 14:53:43 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-15.xml
[2010.02.18 01:44:44 | 000,000,961 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-2.xml
[2010.03.12 22:39:56 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-3.xml
[2010.03.13 20:02:56 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-4.xml
[2010.06.26 10:40:43 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-5.xml
[2010.07.05 16:14:38 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-6.xml
[2010.08.16 12:34:54 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-7.xml
[2010.09.11 13:58:59 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-8.xml
[2010.09.16 23:30:28 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-9.xml
[2010.06.21 16:35:24 | 000,001,042 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin.xml
[2011.03.13 23:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.07.11 16:19:58 | 000,000,000 | ---D | M] (VMLoad) -- C:\Program Files (x86)\mozilla firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE}
[2009.11.07 03:11:02 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.21 21:37:27 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2009.03.24 11:10:44 | 000,114,688 | ---- | M] (Zylom) -- C:\Program Files (x86)\mozilla firefox\plugins\npzylomgamesplayer.dll
[2011.03.31 17:03:03 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.03.31 17:03:03 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.03.31 17:03:03 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.03.31 17:03:03 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.03.31 17:03:03 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.06.01 15:43:27 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (VMLoadHBO Class) - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Users\Tim\AppData\Roaming\VMLoad\addin\VMLoad.dll (TODO: <Company name>)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.06.01 17:09:21 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011.06.01 15:33:35 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011.06.01 15:33:35 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011.06.01 15:33:35 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011.06.01 15:33:28 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.06.01 15:33:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.06.01 15:31:51 | 004,112,250 | R--- | C] (Swearware) -- C:\Users\Tim\Desktop\ComboFix.exe
[2011.06.01 15:22:36 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\Malwarebytes
[2011.06.01 15:22:30 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.06.01 15:22:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.06.01 15:22:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.06.01 15:22:25 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.06.01 15:22:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.06.01 15:17:48 | 000,000,000 | ---D | C] -- C:\_OTL
[2011.05.31 15:27:25 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\Tim\Desktop\OTL.exe
[2011.05.25 15:13:51 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.05.25 15:13:48 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2011.05.25 15:13:48 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2011.05.25 10:02:30 | 000,000,000 | ---D | C] -- C:\Users\Tim\Desktop\World1
[2011.05.12 22:10:56 | 000,000,000 | ---D | C] -- C:\Users\Tim\Desktop\Novoline
[2011.05.12 19:46:17 | 000,000,000 | ---D | C] -- C:\Users\Tim\Desktop\LMFAO - Party Rock
[2011.05.12 11:38:38 | 005,509,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.05.12 11:38:36 | 003,957,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.05.12 11:38:36 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.05.06 19:32:15 | 000,000,000 | ---D | C] -- C:\Users\Tim\Desktop\Favorite - Christoph Alex (2CD-Limited Edt.)
 
========== Files - Modified Within 30 Days ==========
 
[2011.06.01 17:16:19 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.06.01 17:16:19 | 000,655,842 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.06.01 17:16:19 | 000,616,682 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.06.01 17:16:19 | 000,130,722 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.06.01 17:16:19 | 000,107,062 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.06.01 17:15:46 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.06.01 17:15:46 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.06.01 17:11:24 | 000,001,758 | ---- | M] () -- C:\Users\Tim\Desktop\Free YouTube to MP3 Converter.lnk
[2011.06.01 17:10:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.06.01 17:10:13 | 3193,585,664 | -HS- | M] () -- C:\hiberfil.sys
[2011.06.01 15:43:27 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2011.06.01 15:32:07 | 004,112,250 | R--- | M] (Swearware) -- C:\Users\Tim\Desktop\ComboFix.exe
[2011.06.01 15:22:30 | 000,001,115 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.31 16:52:32 | 000,000,512 | ---- | M] () -- C:\Users\Tim\Desktop\MBR.dat
[2011.05.31 16:49:21 | 000,000,188 | ---- | M] () -- C:\Users\Tim\defogger_reenable
[2011.05.31 15:27:29 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Tim\Desktop\OTL.exe
[2011.05.31 01:39:30 | 000,076,505 | ---- | M] () -- C:\Users\Tim\Desktop\ijijijij
[2011.05.31 01:39:18 | 000,076,505 | ---- | M] () -- C:\Users\Tim\Desktop\jjjjj
[2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.05.29 09:11:20 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

 
========== Files Created - No Company Name ==========
 
[2011.06.01 15:33:35 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.06.01 15:33:35 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011.06.01 15:33:35 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.06.01 15:33:35 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.06.01 15:33:35 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.06.01 15:22:30 | 000,001,115 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.31 16:52:32 | 000,000,512 | ---- | C] () -- C:\Users\Tim\Desktop\MBR.dat
[2011.05.31 16:49:20 | 000,000,188 | ---- | C] () -- C:\Users\Tim\defogger_reenable
[2010.12.21 21:39:39 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.16 02:18:47 | 000,037,888 | ---- | C] () -- C:\Windows\SysWow64\AVIwrap.dll
[2010.11.16 02:18:43 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.11.16 02:18:37 | 000,105,472 | ---- | C] () -- C:\Windows\SysWow64\OggDS.dll
[2010.11.16 02:18:37 | 000,092,672 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2010.11.16 02:18:37 | 000,090,624 | ---- | C] () -- C:\Windows\SysWow64\vorbisenc.dll
[2010.11.16 02:18:37 | 000,021,504 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll
[2010.11.16 02:18:31 | 000,132,096 | ---- | C] () -- C:\Windows\SysWow64\libavcodec.dll
[2010.11.16 02:18:31 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll
[2010.11.16 02:18:31 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2010.11.16 02:18:30 | 000,077,664 | ---- | C] () -- C:\Windows\SysWow64\IR21_R.DLL
[2010.11.16 02:18:30 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\Iyvu9_32.dll
[2010.11.16 02:18:27 | 000,180,736 | ---- | C] () -- C:\Windows\SysWow64\vfcodec.dll
[2010.11.16 02:18:25 | 000,202,240 | ---- | C] () -- C:\Windows\SysWow64\XviD.dll
[2010.11.16 02:18:24 | 000,039,936 | ---- | C] () -- C:\Windows\SysWow64\mp4fil32.dll
[2010.09.29 23:14:14 | 008,676,883 | ---- | C] () -- C:\Windows\SysWow64\mp3Media2.dll
[2010.02.22 16:44:41 | 000,029,620 | ---- | C] () -- C:\Windows\Output.exe
[2010.02.21 14:00:26 | 000,001,458 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2009.11.15 00:37:11 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2009.11.14 22:47:07 | 000,007,609 | ---- | C] () -- C:\Users\Tim\AppData\Local\Resmon.ResmonCfg
[2009.10.29 15:32:09 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009.10.20 19:19:30 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll

< End of report >
--- --- ---


____________________________________________
OTL Logfile:
Code:
OTL Extras logfile created on: 01.06.2011 17:18:28 - Run 4
OTL by OldTimer - Version 3.2.23.0    Folder = C:\Users\Tim\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,62 Gb Available Physical Memory | 66,18% Memory free
7,93 Gb Paging File | 6,39 Gb Available in Paging File | 80,58% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 114,85 Gb Free Space | 25,46% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,79% Space Free | Partition Type: NTFS
 
Computer Name: TIM-PC | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
========== Firewall Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{5324EDAC-DED3-3A65-6881-84B4B8A8A7F9}" = ATI Catalyst Install Manager
"{5D492FFA-C816-57FD-10F6-4742329EED76}" = ccc-utility64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{8A7CAA24-7B23-410B-A7C3-F994B0944160}" = Microsoft Virtual PC 2007
"{8F473675-D702-45F9-8EBC-342B40C17BF5}" = Apple Mobile Device Support
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{B24A47E5-F196-461E-A7A4-AADB72CB19DD}" = iTunes
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"HyperCam 2 (64 bit)" = HyperCam 2 (64 bit)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Sandboxie" = Sandboxie 3.44 (64-bit)
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.0.1200
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"5f48e2ab41c5d005" = RapidShare Manager
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 01.06.2011 11:55:24 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3182
 
Error - 01.06.2011 11:56:36 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 11:56:36 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 74786
 
Error - 01.06.2011 11:56:36 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 74786
 
Error - 01.06.2011 11:56:37 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 11:56:37 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 75832
 
Error - 01.06.2011 11:56:37 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 75832
 
Error - 01.06.2011 11:56:38 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 11:56:38 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 76846
 
Error - 01.06.2011 11:56:38 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 76846
 
[ System Events ]
Error - 19.11.2010 23:12:45 | Computer Name = Tim-PC | Source = DCOM | ID = 10010
Description =
 
Error - 20.11.2010 10:04:51 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 20.11.2010 13:45:58 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:24:01 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:26:55 | Computer Name = Tim-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?25.?11.?2010 um 15:26:01 unerwartet heruntergefahren.
 
Error - 25.11.2010 10:26:45 | Computer Name = Tim-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASPI32.SYS
 nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version
 des Treibers zu erhalten.
 
Error - 25.11.2010 10:26:54 | Computer Name = Tim-PC | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
 
Error - 25.11.2010 10:26:54 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:27:47 | Computer Name = Tim-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
  ASPI32
 
Error - 25.11.2010 10:30:15 | Computer Name = Tim-PC | Source = Microsoft-Windows-Time-Service | ID = 34
Description = Der Zeitdienst hat festgestellt, dass die Systemzeit um 86369 Sekunden
 geändert werden muss. Die Systemzeit kann durch den Zeitdienst um maximal 54000
 Sekunden geändert werden. Stellen Sie sicher, dass die Uhrzeit und Zeitzone richtig
 sind und dass die Zeitquelle time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->207.46.232.182:123)
 ordnungsgemäß ausgeführt wird.
 
 
< End of report >
--- --- ---

M-K-D-B 03.06.2011 16:52
Hallo So0ofer,


du hast alles richtig gemacht. :daumenhoc

Nur leider ist mir ein Fehler unterlaufen, für den ich mich schon jetzt mal entschuldigen möchte. :headbang:


Wir haben mit OTL fälschlicherweise diese beiden Ordner verschoben:
Zitat:
C:\Program Files (x86)\DVDVideoSoft
C:\Users\Tim\AppData\Roaming\DVDVideoSoft
Darin befanden sich legale Ordner und Dateien.




So kannst du die verschobenen Ordner wieder an ihren richtigen Platz kopieren:
  • Folge dem Pfad: Start -> Computer -> Laufwerk C:\ -> _OTL -> MovedFiles
  • Wähle den Ordner 06012011_170752 aus
  • Darin befinden sich die beiden Ordner
    Zitat:
    C:\Program Files (x86)\DVDVideoSoft
    C:\Users\Tim\AppData\Roaming\DVDVideoSoft
  • Kopiere jeweils den Ordner und füge ihn wieder ins Verzeichnis
    C:\Program Files (x86)\
    bzw.
    C:\Users\Tim\AppData\Roaming\
    ein.
  • Bitte berichte, ob alles geklappt hat.

So0ofer 03.06.2011 23:32
Jop , hat geklappt .
Das Programm lief aber auch vor der "Rückverschiebung" noch flüßig . War also nicht so tragisch .
Danke nochmals für die nette Hilfe :)

M-K-D-B 04.06.2011 09:47
Hallo So0ofer,


Zitat:
Zitat von So0ofer (Beitrag 667559)
Jop , hat geklappt .
Das Programm lief aber auch vor der "Rückverschiebung" noch flüßig . War also nicht so tragisch .
Freut mich zu hören. :daumenhoc


Zitat:
Zitat von So0ofer (Beitrag 667559)
Danke nochmals für die nette Hilfe :)
Gern geschehen.
Ich würde mich sehr freuen, wenn du dir noch die Zeit nimmst, und die letzten Kontrollscans und wichtige Updates durchführst, bevor wir zum Abschluss (Entfernung der verwendeten Programme und abschließende Tipps) kommen. :)
Du wolltest deinen Computer ja durchchecken lassen. ;)





Schritt # 1: Kontrollscan mit Malwarebytes' Anti-Malware (MBAM)
  • Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere Quick-Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.




Schritt # 2: Java deinstallieren/neu installieren
  • Schließe alle Internet Browser.
  • Folge dem Pfad: Start -> Systemsteuerung -> Programme deinstallieren
  • Deinstalliere bitte Java(TM) 6 Update 18
  • Lade dir anschließend Java(TM) 6 Update 25 von hier auf deinen Desktop.
  • Installiere anschließend die neue Version mit Rechtsklick -> Als Administrator ausführen




Schritt # 3: Wichtige Updates
  • Deinstalliere bitte deine aktuelle Version von Adobe Reader:
    Start --> Systemsteuerung --> Programme deinstallieren --> Adobe Reader
    und lade dir die neue Version von Hier herunter.
  • Entferne den Hacken für den McAfee SecurityScan.
  • Lade dir bitte zudem von hier den Internet Explorer 9 (64 Bit Version) auf deinen Desktop und installiere die neue Version.
    Auch wenn du Firefox verwendest, solltest du immer die neuste Version des Internet Explorer installiert haben. Es kann immer mal vorkommen, dass Firefox nicht funktioniert.




Schritt # 4: ESET Online Scanner
Bitte während der Online-Scans evtl. vorhandene externe Festplatten einschalten! Bitte während der Scans alle Hintergrundwächter (Anti-Virus-Programm, Firewall, Skriptblocking und ähnliches) abstellen und nicht vergessen, alles hinterher wieder einzuschalten.
  • Anmerkung für Vista und Win7 User: Bitte den Browser unbedingt als Administrator starten.
  • Dein Anti-Virus-Programm während des Scans deaktivieren.

    Button http://img695.imageshack.us/img695/1599/eset1l.jpg (<< klick) drücken.
    • Firefox-User:
      Bitte esetsmartinstaller_enu.exe downloaden.Das Firefox-Addon auf dem Desktop speichern und dann installieren.
    • IE-User:
      müssen das Installieren eines ActiveX Elements erlauben.
  • Setze den einen Hacken bei Yes, i accept the Terms of Use.
  • Drücke den http://img707.imageshack.us/img707/687/starteg.jpg Button.
  • Warte bis die Komponenten herunter geladen wurden.
  • Setze einen Haken bei "Scan archives".
  • Gehe sicher das bei Remove Found Threads kein Hacken gesetzt ist.
  • http://img707.imageshack.us/img707/687/starteg.jpg drücken.
  • Die Signaturen werden herunter geladen.Der Scan beginnt automatisch.
Wenn der Scan beendet wurde
  • Klicke Finish.
  • Browser schließen.
Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + R Taste und kopiere folgenden Text in das Ausführen Fenster.
Code:
"%ProgramFiles%\Eset\Eset Online Scanner\log.txt"
Poste nun den Inhalt der log.txt.





Schritt # 5: Durchführung einer Sicherheitskontrolle
Downloade Dir bitte SecurityCheck
  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS- Box.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Wenn der Scan beendet wurde sollte sich ein Textdokument ( checkup.txt ) öffnen.
  • Poste den Inhalt bitte hier.




Schritt # 6: Fragen beantworten
Bitte beantworte mir folgende Fragen:
  • Gibt es noch Probleme mit dem Zertifikat, das du zu Beginn erwähnt hast?
  • Zeigt Spybot immer noch Gain.Gator an? Wenn ja, poste bitte den genauen Pfad und die Datei.
  • Gibt es noch irgendwelche Probleme auf deinem Computer?




Schritt # 7: Deine Rückmeldung
Zur weiteren Analyse benötige ich zusammen mit deiner nächsten Antwort
  • das Logfile von MBAM,
  • das Logfile des ESET Online Scanners,
  • das Logfile von SecurityCheck und
  • die Beantwortung der gestellten Fragen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 01:35 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27