| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: system tool entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.02.2011, 12:49
| #1 |
 |  system tool entfernen hallo hab ein problem mit meinem pc!! da is alles blau mit lauter kleinen ziffern(1er und 0er) hab das mit der otl schon probiert, aber ich komm mit f8 nicht zum erforderlichen programm!wie kann ich noch das sogenannte systemtool löschen, und verhindern, daß es wiederkommt! AVG ist installiert!!  |
|
21.02.2011, 12:54
| #2 |
| /// Malware-holic   | system tool entfernen versuch mal eine der anderen f-tasten um in den abgesicherten modus zu kommen, bzw ins auswahl menü.
__________________
__________________ |
|
21.02.2011, 13:10
| #3 |
| | system tool entfernen bin jetzt im abgesicherten modus und hab die otl probiert aber da tut sich nichts!!
__________________ |
|
21.02.2011, 13:11
| #4 |
| /// Malware-holic | system tool entfernen bist du im abgesichertem modus mit netzwerk oder ohne. falls du im abgesicherten modus mit netzwerk bist, starte erneut neu und wähle dann nur abgesicherten modus, ohne netzwerk ist dieser und da könnte es funktionieren.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
21.02.2011, 13:16
| #5 | |
| | system tool entfernenZitat:
|
|
21.02.2011, 13:17
| #6 |
| /// Malware-holic | system tool entfernen na da ich kein helsseher bin benötige ich die berichte. also abspeichern und hier rein kopieren, bzw als datei(n) anhängen.
__________________ --> system tool entfernen |
|
21.02.2011, 13:26
| #7 | |
| | system tool entfernenZitat:
|
|
21.02.2011, 13:27
| #8 |
| /// Malware-holic | system tool entfernen stick an sauberen pc anschließen. erstes log öffnen. rechtsklick, alles markieren. rechtsklick, kopieren. klicke jetzt auf antworten. aktiviere das eingabefeld. rechtsklick einfügen. absenden. genauso verfahren mit text2
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
21.02.2011, 13:33
| #9 |
| | system tool entfernen OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 21.02.2011 13:04:08 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = F:\
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
4,00 Gb Total Physical Memory | 4,00 Gb Available Physical Memory | 88,00% Memory free
8,00 Gb Paging File | 8,00 Gb Available in Paging File | 94,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452,22 Gb Total Space | 369,75 Gb Free Space | 81,76% Space Free | Partition Type: NTFS
Drive D: | 13,24 Gb Total Space | 2,20 Gb Free Space | 16,62% Space Free | Partition Type: NTFS
Drive F: | 7,46 Gb Total Space | 7,46 Gb Free Space | 99,99% Space Free | Partition Type: FAT32
Computer Name: USER-PC | User Name: User | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~4\Office12\ONENOTE.EXE "%L" File not found
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~4\Office12\ONENOTE.EXE "%L"
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java(TM) 6 Update 14 (64-bit)
"{6C47240C-016E-03B5-D13E-AECAED09F2E3}" = ATI Catalyst Install Manager
"{7FD7F421-39B2-4CAC-BC41-7D83DDBAB329}" = HP 3D DriveGuard
"{88E60521-1E4E-4785-B9F1-1798A4BD0C30}" = HP MediaSmart SmartMenu
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{ADEB3402-CFBD-00E2-0EE6-F6A3F1AFACF0}" = ccc-utility64
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"FFE7D41DF3C645075BB149E21988B63996C34187" = ENE CIR Receiver Driver
"SynTPDeinstKey" = Synaptics Pointing Device Driver
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"{08DB3902-2CE0-474D-BCE3-0177766CE9F1}" = HP Support Assistant
"{09CC0D0E-061D-3C7B-3881-D2EB53A8AAFC}" = CCC Help Polish
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ 4.0
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron Flash Media Controller Driver
"{26606D8F-3133-DBE2-8AF5-AB28F300860A}" = CCC Help Chinese Standard
"{266D0EEA-E5A6-4A08-A0EE-5391D4EA44A7}" = Catalyst Control Center - Branding
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 24
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = HP MediaSmart Movie Themes
"{33C17B75-EA9C-0687-9CED-03D92637B042}" = CCC Help Hungarian
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons
"{37855057-DD23-4A5D-9A3E-96AB9797075C}_is1" = Power-Musicbox 6
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3FBDB7B8-7472-E895-2E5D-99D190B2D1B6}" = Catalyst Control Center InstallProxy
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = PowerRecover
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update
"{5271C0D4-24E4-4C3D-A782-C012033FD3CF}" = AMD USB Filter Driver
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{546937C5-0529-333E-0D5E-FE3C53108806}" = CCC Help Japanese
"{54CC7901-804D-4155-B353-21F0CC9112AB}" = HP Wireless Assistant
"{55C70B62-5EF1-D527-7CAB-E50D8B3B4990}" = Catalyst Control Center Graphics Full New
"{577ED77E-25D9-1A76-4EF0-773B9C173758}" = CCC Help Portuguese
"{5A166C0B-9557-4364-A057-F946D674E6AC}" = Windows Live Mail
"{5B295588-59C1-4386-9F85-BB4BEDCB0D22}" = HP Customer Experience Enhancements
"{5DB4EA68-A509-D408-585C-C9D045FADF72}" = Catalyst Control Center Graphics Previews Vista
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart Live TV
"{6D335F78-1F4F-7826-56DD-4F350EA6EADD}" = CCC Help Greek
"{6EF04EAE-0354-9919-E757-F1203E6F422B}" = CCC Help Italian
"{7028B245-30A2-BD8C-31B9-6008216FBDC2}" = CCC Help French
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{779D3256-84D0-936F-18F9-A154DC85B4B4}" = Catalyst Control Center Localization All
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX
"{7F4DA5B8-6884-47F2-AEBA-D9111E420C63}" = CCC Help Danish
"{7F9A8D27-A1B9-164F-FCB1-0B64C88629CF}" = CCC Help Norwegian
"{803263F7-8CAC-DC6D-3288-8128865A7472}" = CCC Help German
"{81821BF8-DA20-4F8C-AA87-F70A274828D4}" = Windows Live Writer
"{82EF29B1-9B60-4142-A155-0599216DD053}" = LightScribe System Software
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8CC47AA0-5774-61FC-6A59-7E1C936DB753}" = ccc-core-static
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91E04CA7-0B13-4F8C-AA4D-2A573AC96D19}" = Windows Live Essentials
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A28867B-109A-5BBF-85C0-FC1BAA98CA1C}" = CCC Help Russian
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A8BCC9E4-9036-3029-F2BC-AA73A62DA73D}" = CCC Help Turkish
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.1 MUI
"{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"{B51605BF-6326-4553-AE96-6D7F1813D5F5}" = HP User Guides 0154
"{B53E61D7-7C80-40DF-82D2-CF5390D6D20A}" = HP Advisor
"{B5C746E6-D961-445C-3768-5B6FAF6A1A31}" = CCC Help Spanish
"{C0769946-2CF1-9E8D-009B-5C413B3F01D1}" = CCC Help Czech
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{C4F7EEE5-3D99-8552-7483-B2F412838B2A}" = Catalyst Control Center Graphics Previews Common
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update
"{D4C41D27-A2D5-94C6-1D08-3D470A12EAF0}" = CCC Help Swedish
"{D9D6A848-1BFD-592B-5F9D-0BA8692FDF0B}" = CCC Help Finnish
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DCD91C2F-3A86-B328-59A0-5EED6190D983}" = Catalyst Control Center Graphics Full Existing
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}" = HP MediaSmart Internet TV
"{E5F5CAA5-84ED-DE41-40D0-8926FE7E5F4D}" = Catalyst Control Center Graphics Light
"{E6CE345D-BF83-1242-9E4D-3D60A5036D87}" = CCC Help English
"{EC155897-712F-5637-A5DA-6C7CE7CB5521}" = CCC Help Korean
"{F0580F64-44A1-C607-9364-887912B74F4D}" = CCC Help Thai
"{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL
"{F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}" = HP Setup
"{F3F9A4E5-CD9F-4657-CF99-5CE3F7729909}" = Catalyst Control Center Core Implementation
"{F5B1D41A-05B9-98E2-C350-E69D4A444CB4}" = CCC Help Chinese Traditional
"{FBB55C5E-2548-4511-A6F5-8CBCDE16484C}" = A1 Dashboard
"{FCF0F615-6E70-B949-028F-88D32C55C2BC}" = CCC Help Dutch
"8461-7759-5462-8226" = Vuze
"A1 Dashboard" = A1 Dashboard
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"AOL Toolbar" = AOL Toolbar 5.0
"AVG9Uninstall" = AVG Free 9.0
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"AVS4YOU Video Converter 7_is1" = AVS Video Converter 7
"conduitEngine" = Conduit Engine
"EasyBits Magic Desktop" = Magic Desktop
"ENTERPRISE" = Microsoft Office Enterprise 2007
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = HP MediaSmart Movie Themes
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart Live TV
"InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}" = HP MediaSmart Internet TV
"Raptr" = Raptr
"Ravensburger tiptoi" = Ravensburger tiptoi
"Vuze_Remote Toolbar" = Vuze Remote Toolbar
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 24.01.2011 08:16:40 | Computer Name = User-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 29.01.2011 04:18:01 | Computer Name = User-PC | Source = System Restore | ID = 8193
Description =
Error - 29.01.2011 04:18:03 | Computer Name = User-PC | Source = VSS | ID = 12289
Description =
Error - 29.01.2011 09:44:28 | Computer Name = User-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 30.01.2011 14:11:11 | Computer Name = User-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 01.02.2011 05:43:02 | Computer Name = User-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WinRAR.exe, Version: 3.30.5.0, Zeitstempel:
0x00000000 Name des fehlerhaften Moduls: UnAceV2.Dll, Version: 2.1.1.0, Zeitstempel:
0x3c86a950 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000cca0 ID des fehlerhaften Prozesses:
0x1040 Startzeit der fehlerhaften Anwendung: 0x01cbc1f467ce9ec7 Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\WinRAR\WinRAR.exe Pfad des fehlerhaften Moduls:
C:\Program Files (x86)\WinRAR\Formats\UnAceV2.Dll Berichtskennung: a9104769-2de7-11e0-aeed-00269ec89415
Error - 01.02.2011 05:43:10 | Computer Name = User-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WinRAR.exe, Version: 3.30.5.0, Zeitstempel:
0x00000000 Name des fehlerhaften Moduls: UnAceV2.Dll, Version: 2.1.1.0, Zeitstempel:
0x3c86a950 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000cca0 ID des fehlerhaften Prozesses:
0x1040 Startzeit der fehlerhaften Anwendung: 0x01cbc1f467ce9ec7 Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\WinRAR\WinRAR.exe Pfad des fehlerhaften Moduls:
C:\Program Files (x86)\WinRAR\Formats\UnAceV2.Dll Berichtskennung: ad57bd66-2de7-11e0-aeed-00269ec89415
Error - 03.02.2011 04:05:44 | Computer Name = User-PC | Source = System Restore | ID = 8193
Description =
Error - 03.02.2011 04:05:45 | Computer Name = User-PC | Source = VSS | ID = 12289
Description =
Error - 03.02.2011 05:04:01 | Computer Name = User-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.16700,
Zeitstempel: 0x4cd23213 Name des fehlerhaften Moduls: mshtml.dll, Version: 8.0.7600.16700,
Zeitstempel: 0x4cd24781 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000c597b ID des fehlerhaften
Prozesses: 0x5f4 Startzeit der fehlerhaften Anwendung: 0x01cbc3795306899e Pfad der
fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\iexplore.exe Pfad
des fehlerhaften Moduls: C:\Windows\SysWOW64\mshtml.dll Berichtskennung: 8a9327a9-2f74-11e0-aeed-00269ec89415
[ System Events ]
Error - 05.02.2011 04:52:52 | Computer Name = User-PC | Source = ACPI | ID = 327693
Description = : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen
Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware
hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie
den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen
Situationen zur Folge haben, dass der Computer fehlerhaft läuft.
Error - 05.02.2011 04:54:01 | Computer Name = User-PC | Source = DCOM | ID = 10010
Description =
Error - 05.02.2011 04:55:28 | Computer Name = User-PC | Source = DCOM | ID = 10000
Description =
Error - 05.02.2011 04:56:26 | Computer Name = User-PC | Source = DCOM | ID = 10010
Description =
Error - 05.02.2011 09:29:10 | Computer Name = User-PC | Source = DCOM | ID = 10010
Description =
Error - 11.02.2011 08:03:06 | Computer Name = User-PC | Source = DCOM | ID = 10010
Description =
Error - 11.02.2011 15:50:13 | Computer Name = User-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.
Error - 11.02.2011 15:50:14 | Computer Name = User-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.
Error - 11.02.2011 15:50:14 | Computer Name = User-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.
Error - 11.02.2011 15:50:15 | Computer Name = User-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.
< End of report >
|
|
21.02.2011, 13:35
| #10 |
| | system tool entfernen OTL Logfile: Code:
ATTFilter OTL logfile created on: 21.02.2011 13:04:08 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = F:\ 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 4,00 Gb Available Physical Memory | 88,00% Memory free 8,00 Gb Paging File | 8,00 Gb Available in Paging File | 94,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 452,22 Gb Total Space | 369,75 Gb Free Space | 81,76% Space Free | Partition Type: NTFS Drive D: | 13,24 Gb Total Space | 2,20 Gb Free Space | 16,62% Space Free | Partition Type: NTFS Drive F: | 7,46 Gb Total Space | 7,46 Gb Free Space | 99,99% Space Free | Partition Type: FAT32 Computer Name: USER-PC | User Name: User | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - F:\OTL.exe (OldTimer Tools) ========== Modules (SafeList) ========== MOD - F:\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (STacSV) -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe (IDT, Inc.) SRV:64bit: - (hpsrv) -- C:\Windows\SysNative\hpservice.exe (Hewlett-Packard) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (AESTFilters) -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe (Andrea Electronics Corporation) SRV - (avg9wd) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.) SRV - (HPDrvMntSvc.exe) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (GameConsoleService) -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.) SRV - (ezSharedSvc) -- C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS) ========== Driver Services (SafeList) ========== DRV:64bit: - (AvgTdiA) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.) DRV:64bit: - (AvgMfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.) DRV:64bit: - (AvgLdx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.) DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.) DRV:64bit: - (hwdatacard) -- C:\Windows\SysNative\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.) DRV:64bit: - (hwusbdev) -- C:\Windows\SysNative\drivers\ewusbdev.sys (Huawei Technologies Co., Ltd.) DRV:64bit: - (STHDA) -- C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.) DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation) DRV:64bit: - (hpdskflt) -- C:\Windows\SysNative\drivers\hpdskflt.sys (Hewlett-Packard) DRV:64bit: - (Accelerometer) -- C:\Windows\SysNative\drivers\Accelerometer.sys (Hewlett-Packard) DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (enecir) -- C:\Windows\SysNative\drivers\enecir.sys (ENE TECHNOLOGY INC.) DRV:64bit: - (SrvHsfV92) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.) DRV:64bit: - (SrvHsfWinac) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.) DRV:64bit: - (SrvHsfHDA) -- C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.) DRV:64bit: - (AgereSoftModem) -- C:\Windows\SysNative\drivers\agrsm64.sys (LSI Corp) DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys (Marvell) DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Research Inc.) DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (AtiPcie) AMD PCI Express (3GIO) -- C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.) DRV:64bit: - (HpqKbFiltr) -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.) DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb IE - HKLM\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://news.google.at/nwshp?hl=de&tab=wn IE - HKCU\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (AOL Toolbar BHO) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files (x86)\google\googletoolbar1.dll (Google Inc.) O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC) O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe () O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS) O4 - HKLM..\Run: [HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKCU..\Run: [Raptr] File not found O4 - HKCU..\RunOnce: [nEmFaCg01812] C:\ProgramData\nEmFaCg01812\nEmFaCg01812.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2 O8:64bit: - Extra context menu item: &AOL Toolbar-Suche - C:\ProgramData\AOL\ieToolbar\resources\de-DE\local\search.html () O8:64bit: - Extra context menu item: &Google Search - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.) O8:64bit: - Extra context menu item: Backward &Links - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.) O8:64bit: - Extra context menu item: Cac&hed Snapshot of Page - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.) O8:64bit: - Extra context menu item: Si&milar Pages - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.) O8 - Extra context menu item: &AOL Toolbar-Suche - C:\ProgramData\AOL\ieToolbar\resources\de-DE\local\search.html () O8 - Extra context menu item: &Google Search - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.) O8 - Extra context menu item: Backward &Links - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.) O8 - Extra context menu item: Cac&hed Snapshot of Page - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.) O8 - Extra context menu item: Si&milar Pages - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.) O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.) O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{368ce258-2ad8-11e0-a771-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{368ce258-2ad8-11e0-a771-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{368ce28a-2ad8-11e0-a771-00269ec89415}\Shell - "" = AutoRun O33 - MountPoints2\{368ce28a-2ad8-11e0-a771-00269ec89415}\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.02.20 23:42:21 | 000,000,000 | ---D | C] -- C:\ProgramData\nEmFaCg01812 [2011.02.19 09:39:05 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\Vuze Downloads [2011.02.19 09:31:33 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Raptr [2011.02.19 09:31:21 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Raptr [2011.02.19 09:31:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raptr [2011.02.19 09:29:49 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Azureus [2011.02.19 09:29:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vuze [2011.02.19 09:29:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ConduitEngine [2011.02.19 09:29:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vuze_Remote [2011.02.19 09:29:21 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Conduit [2011.02.18 18:38:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit [2011.02.18 18:38:50 | 000,000,000 | ---D | C] -- C:\extensions [2011.02.18 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\BitTorrent [2011.02.17 18:23:33 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2011.02.17 18:23:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2011.02.17 18:22:36 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011.02.17 18:22:36 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011.02.17 18:22:36 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011.02.17 16:30:41 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\RavensburgerTipToi [2011.02.17 16:29:12 | 000,000,000 | ---D | C] -- C:\ProgramData\RavensburgerTipToi [2011.02.17 16:27:44 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager [2011.02.17 16:27:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ravensburger tiptoi [2011.02.11 20:46:56 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\AVS4YOU [2011.02.11 20:46:37 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU [2011.02.11 20:46:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU [2011.02.11 20:45:57 | 010,833,920 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\libmfxsw32.dll [2011.02.11 20:45:56 | 010,915,840 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\libmfxhw32.dll [2011.02.11 20:45:49 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\GdiPlus.dll [2011.02.11 20:45:49 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2011.02.11 20:45:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVSMedia [2011.02.11 20:45:49 | 000,000,000 | ---D | C] -- C:\ProgramData\AVS4YOU [2011.02.11 20:45:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVS4YOU [2011.02.11 12:04:02 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\WinRAR [2011.02.11 12:03:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2011.02.11 12:03:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2011.02.11 11:21:05 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCTL.OCX [2011.02.11 11:21:05 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomct2.ocx [2011.02.11 11:21:05 | 000,609,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comctl32.ocx [2011.02.11 11:21:05 | 000,224,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TabCtl32.ocx [2011.02.11 11:21:05 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMM32.OCX [2011.02.11 11:21:05 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCDE.DLL [2011.02.11 11:21:05 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Comdlg32.ocx [2011.02.11 11:21:05 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6DE.DLL [2011.02.11 11:21:05 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CMCTLDE.DLL [2011.02.11 11:21:05 | 000,109,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswinsck.ocx [2011.02.11 11:21:05 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCC2DE.DLL [2011.02.11 11:21:05 | 000,040,960 | ---- | C] (<none>) -- C:\Windows\SysWow64\SSubTmr6.dll [2011.02.11 11:21:05 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CMDLGDE.DLL [2011.02.11 11:21:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TABCTDE.DLL [2011.02.11 11:21:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WINSKDE.DLL [2011.02.11 11:21:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMDE.DLL [2011.02.11 11:21:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Power-Musicbox 6 [2011.02.11 11:21:02 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Power-Musicbox 6 [2011.02.11 11:21:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Power-Musicbox 6 [2011.02.09 21:21:22 | 000,000,000 | ---D | C] -- C:\ProgramData\{23D58E70-3B83-4B83-A227-68770F84F5EC} [2011.02.09 20:52:36 | 000,013,048 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgrssta.dll [2011.02.09 20:45:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\avg [2011.02.09 20:39:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Free 9.0 [2011.02.09 20:39:50 | 000,317,520 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys [2011.02.09 20:39:47 | 000,269,904 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys [2011.02.09 20:39:42 | 000,035,536 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys [2011.02.09 20:39:42 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\Avg [2011.02.09 20:39:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG [2011.02.09 20:39:25 | 000,000,000 | ---D | C] -- C:\ProgramData\avg9 [2011.02.09 20:32:16 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2011.02.09 20:32:15 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2011.02.09 20:32:15 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2011.02.09 20:32:15 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2011.02.09 20:32:15 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2011.02.09 20:32:15 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2011.02.09 20:32:15 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2011.02.09 20:32:15 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2011.02.09 20:32:14 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2011.02.09 20:32:14 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2011.02.09 20:32:14 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2011.02.09 20:32:14 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2011.02.09 20:32:13 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2011.02.09 20:32:13 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2011.02.09 20:31:58 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2011.02.09 20:31:58 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2011.02.09 20:31:58 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2011.02.09 20:31:57 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2011.02.09 20:31:56 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2011.02.09 20:31:56 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2011.02.09 20:31:56 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2011.02.09 20:31:54 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2011.02.09 20:31:54 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2011.02.09 20:31:54 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2011.02.09 20:31:54 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2011.02.04 23:39:32 | 000,000,000 | ---D | C] -- C:\ProgramData\fKlIpNh01804 [2011.02.04 12:39:08 | 000,000,000 | R-SD | C] -- C:\Users\User\Documents\My Stationery [2011.02.04 12:09:30 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Adobe [2011.02.03 11:32:45 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Philipp Winterberg [2011.02.03 11:32:40 | 000,000,000 | ---D | C] -- C:\Users\User\Free RAR Extract Frog [2011.02.03 09:19:00 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\HP Support Assistant [2011.02.01 10:25:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR [2011.01.30 09:03:26 | 000,000,000 | ---D | C] -- C:\Canna [2011.01.30 08:38:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2011.01.30 08:37:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX [2011.01.30 08:37:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DivX [2011.01.30 08:30:00 | 000,237,168 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe [2011.01.30 08:29:11 | 000,000,000 | ---D | C] -- C:\Programme\Alwil Software [2011.01.30 08:29:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software [2011.01.29 17:40:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2011.01.29 17:39:46 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2011.01.29 09:43:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2011.01.29 09:43:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat [2011.01.29 09:33:51 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\Webcam [2011.01.29 09:30:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0 [2011.01.29 09:27:48 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2011.01.29 09:27:48 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2011.01.29 09:27:48 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2011.01.29 09:27:48 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2011.01.29 09:27:48 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2011.01.29 09:27:48 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2011.01.29 09:27:48 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2011.01.29 09:27:48 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2011.01.29 09:27:25 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe [2011.01.29 09:24:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2011.01.29 09:24:02 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Skype [2011.01.29 09:23:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2011.01.29 09:23:53 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2011.01.29 09:23:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2011.01.28 13:42:42 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\CyberLink [2011.01.28 13:42:41 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\PowerCinema [2011.01.28 13:42:41 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\CyberLink [2011.01.28 13:40:09 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2011.01.28 13:40:09 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2011.01.28 13:40:08 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2011.01.28 13:40:06 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll [2011.01.28 13:40:06 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll [2011.01.28 13:40:06 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll [2011.01.28 13:40:06 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll [2011.01.28 13:40:06 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe [2011.01.28 13:40:06 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll [2011.01.28 13:40:06 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe [2011.01.28 13:40:06 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe [2011.01.28 13:40:05 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll [2011.01.28 13:40:04 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2011.01.28 13:40:04 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2011.01.28 13:40:02 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll [2011.01.28 13:40:02 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll [2011.01.28 13:39:16 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2011.01.28 13:39:13 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2011.01.28 13:39:13 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2011.01.28 13:39:13 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2011.01.28 13:39:11 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll [2011.01.28 13:39:11 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll [2011.01.28 13:39:00 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll [2011.01.28 13:39:00 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll [2011.01.28 13:38:58 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll [2011.01.28 13:38:57 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2011.01.28 13:38:46 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2011.01.28 13:38:46 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2011.01.28 13:38:44 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2011.01.28 13:38:44 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2011.01.28 13:38:43 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll [2011.01.28 13:38:43 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll [2011.01.28 13:38:33 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2011.01.28 13:38:21 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll [2011.01.28 13:38:21 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll [2011.01.28 13:38:20 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll [2011.01.28 13:38:19 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2011.01.28 13:38:18 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2011.01.28 13:38:17 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2011.01.28 13:38:16 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2011.01.28 13:38:15 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2011.01.28 13:38:14 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll [2011.01.28 13:38:14 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll [2011.01.28 13:38:12 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll [2011.01.28 13:29:58 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Macromedia [2011.01.28 13:29:36 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2011.01.28 13:29:36 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll [2011.01.28 13:29:28 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2011.01.28 13:29:28 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2011.01.28 13:25:27 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Adobe [2011.01.28 13:25:20 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\AOL [2011.01.28 13:17:36 | 000,000,000 | ---D | C] -- C:\ProgramData\mquadr.at [2011.01.28 13:17:28 | 000,216,576 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbnet.sys [2011.01.28 13:17:28 | 000,117,248 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2011.01.28 13:17:28 | 000,114,560 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbdev.sys [2011.01.28 13:17:28 | 000,029,696 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2011.01.28 13:17:21 | 000,000,000 | -H-D | C] -- C:\ProgramData\{092C512F-9ECA-47B0-BF89-F0FF91DB1676} [2011.01.28 13:17:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\A1 Dashboard [2011.01.28 13:17:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A1 [2011.01.28 13:16:59 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\PackageAware [2011.01.24 19:34:03 | 000,000,000 | ---D | C] -- C:\Windows\ehome [2011.01.24 19:32:28 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2011.01.24 12:45:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio [2011.01.24 12:45:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2011.01.24 12:44:33 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2011.01.24 12:44:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2011.01.24 12:41:44 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office [2011.01.24 12:41:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8 [2011.01.24 12:41:05 | 000,000,000 | ---D | C] -- C:\Windows\SHELLNEW [2011.01.24 12:40:55 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Microsoft Help [2011.01.24 12:40:00 | 000,000,000 | RH-D | C] -- C:\MSOCache [2011.01.24 11:49:19 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\HpUpdate [2011.01.24 11:41:39 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Hewlett-Packard [2011.01.24 11:41:36 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\ATI [2011.01.24 11:41:36 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\ATI [2011.01.24 11:41:20 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2011.01.24 11:41:20 | 000,000,000 | R--D | C] -- C:\Users\User\Searches [2011.01.24 11:41:20 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2011.01.24 11:41:12 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Identities [2011.01.24 11:41:10 | 000,000,000 | R--D | C] -- C:\Users\User\Contacts [2011.01.24 11:41:09 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\VirtualStore [2011.01.24 11:40:57 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\hpqlog [2011.01.24 11:40:50 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Hewlett-Packard_Company [2011.01.24 11:39:55 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\HP TCS [2011.01.24 11:38:24 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Hewlett-Packard [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Vorlagen [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\AppData\Local\Verlauf [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\AppData\Local\Temporary Internet Files [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Startmenü [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\SendTo [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Recent [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Netzwerkumgebung [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Lokale Einstellungen [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Documents\Eigene Videos [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Documents\Eigene Musik [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Eigene Dateien [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Documents\Eigene Bilder [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Druckumgebung [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Cookies [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\AppData\Local\Anwendungsdaten [2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Anwendungsdaten [2011.01.24 11:36:54 | 000,000,000 | --SD | C] -- C:\Users\User\AppData\Roaming\Microsoft [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Videos [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Saved Games [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Pictures [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Music [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Links [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Favorites [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Downloads [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Documents [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Desktop [2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2011.01.24 11:36:54 | 000,000,000 | -H-D | C] -- C:\Users\User\AppData [2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Temp [2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recovery Manager [2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Microsoft [2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Media Center Programs [2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Programme [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2011.01.24 11:25:13 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2011.01.24 11:06:25 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services [2011.01.24 10:52:31 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling [2011.01.24 10:52:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LightScribe [2011.01.24 10:48:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Recovery [2011.01.24 10:48:12 | 000,000,000 | ---D | C] -- C:\Windows\Hewlett-Packard [2011.01.24 10:47:24 | 000,436,224 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AESTEC64.dll [2011.01.24 10:47:23 | 000,160,768 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AESTAC64.dll [2011.01.24 10:47:23 | 000,068,608 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AESTAR64.dll [2011.01.24 10:47:22 | 012,158,464 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\idtcpl64.cpl [2011.01.24 10:47:22 | 003,593,216 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stlang64.dll [2011.01.24 10:47:22 | 000,564,224 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\idt64mp1.exe [2011.01.24 10:47:22 | 000,450,048 | ---- | C] (IDT, Inc.) -- C:\Windows\sttray64.exe [2011.01.24 10:47:22 | 000,090,624 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AESTCo64.dll [2011.01.24 10:47:20 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SRSLabs [2011.01.24 10:46:45 | 000,487,936 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\drivers\stwrt64.sys [2011.01.24 10:46:45 | 000,209,920 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\staco64.dll [2011.01.24 10:46:44 | 001,431,552 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapo64.dll [2011.01.24 10:46:44 | 000,604,672 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapi64.dll [2011.01.24 10:46:44 | 000,431,616 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stcplx64.dll [2011.01.24 10:46:34 | 000,000,000 | ---D | C] -- C:\Programme\IDT [2011.01.24 10:46:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros [2011.01.24 10:46:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros [2011.01.24 10:45:59 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2011.01.24 10:45:34 | 000,215,040 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys [2011.01.24 10:45:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2011.01.24 10:45:25 | 000,036,408 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\usbfilter.sys [2011.01.24 10:45:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE [2011.01.24 10:45:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD [2011.01.24 10:45:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JMicron [2011.01.24 10:45:01 | 000,000,000 | ---D | C] -- C:\Programme\DIFX [2011.01.24 10:44:45 | 000,000,000 | ---D | C] -- C:\Programme\Synaptics [2011.01.24 10:44:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center [2011.01.24 10:42:38 | 000,000,000 | ---D | C] -- C:\Programme\ATI [2011.01.24 10:42:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2011.01.24 10:37:29 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch ========== Files - Modified Within 30 Days ========== [2011.02.21 13:03:59 | 001,472,002 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.02.21 13:03:59 | 000,643,628 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2011.02.21 13:03:59 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.02.21 13:03:59 | 000,126,188 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2011.02.21 13:03:59 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.02.21 12:59:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.02.21 12:59:05 | 3218,235,392 | -HS- | M] () -- C:\hiberfil.sys [2011.02.21 12:34:42 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.02.21 12:34:42 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.02.20 18:22:35 | 071,428,947 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm [2011.02.19 16:25:54 | 000,488,326 | ---- | M] () -- C:\Users\User\AppData\Local\tmp002.JPG [2011.02.19 16:25:53 | 000,468,294 | ---- | M] () -- C:\Users\User\AppData\Local\tmp002.1 [2011.02.19 16:25:52 | 000,765,595 | ---- | M] () -- C:\Users\User\AppData\Local\tmp002.0 [2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.JPG [2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.3 [2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.2 [2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.1 [2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.0 [2011.02.19 09:31:21 | 000,001,650 | ---- | M] () -- C:\Users\User\Desktop\Raptr.lnk [2011.02.19 09:29:41 | 000,001,852 | ---- | M] () -- C:\Users\Public\Desktop\Vuze.lnk [2011.02.18 18:30:53 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWow64\ezsidmv.dat [2011.02.17 16:30:33 | 000,001,076 | ---- | M] () -- C:\Users\User\Desktop\tiptoi.lnk [2011.02.11 20:46:40 | 000,001,297 | ---- | M] () -- C:\Users\User\Desktop\AVS4YOU Software Navigator.lnk [2011.02.11 20:46:05 | 000,001,241 | ---- | M] () -- C:\Users\User\Desktop\AVS Video Converter.lnk [2011.02.11 11:27:52 | 000,001,107 | ---- | M] () -- C:\Users\Public\Desktop\Power-Musicbox 6.lnk [2011.02.11 11:27:52 | 000,001,077 | ---- | M] () -- C:\Users\Public\Desktop\SetUp-Tool.lnk [2011.02.09 21:08:39 | 000,435,472 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011.02.09 20:52:37 | 000,317,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys [2011.02.09 20:52:36 | 000,035,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys [2011.02.09 20:52:36 | 000,013,048 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgrssta.dll [2011.02.09 20:52:32 | 000,269,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys [2011.02.09 20:45:19 | 000,142,495 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\microavi.avg [2011.02.09 20:39:54 | 000,113,461 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\iavichjw.avm [2011.02.09 20:39:54 | 000,001,858 | ---- | M] () -- C:\Users\Public\Desktop\AVG Free 9.0.lnk [2011.02.09 20:39:42 | 006,061,540 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\avi7.avg [2011.02.09 20:39:42 | 000,492,629 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\miniavi.avg [2011.02.09 20:34:48 | 000,588,472 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWow64\ezsvc7x.dll [2011.02.02 21:40:39 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011.02.02 21:40:38 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011.02.02 21:40:36 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011.02.02 21:40:23 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2011.01.30 08:38:09 | 000,001,867 | ---- | M] () -- C:\Users\Public\Desktop\DivX Movies.lnk [2011.01.30 08:38:09 | 000,001,146 | ---- | M] () -- C:\Users\Public\Desktop\DivX Player.lnk [2011.01.30 08:30:03 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2011.01.29 09:45:55 | 000,001,754 | ---- | M] () -- C:\Users\Public\Desktop\Browserwahl.lnk [2011.01.29 09:23:54 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2011.01.28 13:17:20 | 000,001,016 | ---- | M] () -- C:\Users\Public\Desktop\A1 Dashboard.lnk [2011.01.24 11:50:54 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2011.01.24 11:37:42 | 000,000,000 | RHS- | M] () -- C:\Windows\SysWow64\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF00105RC_E572195-041_4A_I3637_SHP_V33.22_F.10_T091015_WU3-0_L407_M4093_J500_7AMD_8F62_92.20_#110124_N10EC8168;168C002B_(VV869EA#ABD)_XMOBILE_CN10_Z.MRK [2011.01.24 11:37:42 | 000,000,000 | RHS- | M] () -- C:\Windows\SysNative\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF00105RC_E572195-041_4A_I3637_SHP_V33.22_F.10_T091015_WU3-0_L407_M4093_J500_7AMD_8F62_92.20_#110124_N10EC8168;168C002B_(VV869EA#ABD)_XMOBILE_CN10_Z.MRK [2011.01.24 11:36:13 | 000,052,953 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2011.01.24 11:36:13 | 000,052,953 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2011.01.24 10:44:50 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01007.Wdf ========== Files Created - No Company Name ========== [2011.02.19 16:25:53 | 000,488,326 | ---- | C] () -- C:\Users\User\AppData\Local\tmp002.JPG [2011.02.19 14:34:19 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.3 [2011.02.19 14:34:16 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.2 [2011.02.19 14:34:06 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.1 [2011.02.19 14:34:04 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.JPG [2011.02.19 14:34:04 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.0 [2011.02.19 14:33:19 | 000,468,294 | ---- | C] () -- C:\Users\User\AppData\Local\tmp002.1 [2011.02.19 14:33:15 | 000,765,595 | ---- | C] () -- C:\Users\User\AppData\Local\tmp002.0 [2011.02.19 09:31:21 | 000,001,650 | ---- | C] () -- C:\Users\User\Desktop\Raptr.lnk [2011.02.19 09:29:41 | 000,001,852 | ---- | C] () -- C:\Users\Public\Desktop\Vuze.lnk [2011.02.19 09:29:41 | 000,001,852 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk [2011.02.18 18:30:53 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2011.02.17 16:27:47 | 000,001,076 | ---- | C] () -- C:\Users\User\Desktop\tiptoi.lnk [2011.02.11 20:46:40 | 000,001,297 | ---- | C] () -- C:\Users\User\Desktop\AVS4YOU Software Navigator.lnk [2011.02.11 20:46:05 | 000,001,241 | ---- | C] () -- C:\Users\User\Desktop\AVS Video Converter.lnk [2011.02.11 11:21:06 | 000,001,107 | ---- | C] () -- C:\Users\Public\Desktop\Power-Musicbox 6.lnk [2011.02.11 11:21:06 | 000,001,077 | ---- | C] () -- C:\Users\Public\Desktop\SetUp-Tool.lnk [2011.02.09 20:39:54 | 071,428,947 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm [2011.02.09 20:39:54 | 000,142,495 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\microavi.avg [2011.02.09 20:39:54 | 000,113,461 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\iavichjw.avm [2011.02.09 20:39:54 | 000,001,858 | ---- | C] () -- C:\Users\Public\Desktop\AVG Free 9.0.lnk [2011.02.09 20:39:42 | 006,061,540 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\avi7.avg [2011.02.09 20:39:42 | 000,492,629 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\miniavi.avg [2011.01.30 08:38:09 | 000,001,867 | ---- | C] () -- C:\Users\Public\Desktop\DivX Movies.lnk [2011.01.30 08:38:08 | 000,001,146 | ---- | C] () -- C:\Users\Public\Desktop\DivX Player.lnk [2011.01.30 08:30:03 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt [2011.01.29 09:45:55 | 000,001,754 | ---- | C] () -- C:\Users\Public\Desktop\Browserwahl.lnk [2011.01.28 13:17:20 | 000,001,016 | ---- | C] () -- C:\Users\Public\Desktop\A1 Dashboard.lnk [2011.01.24 19:34:49 | 000,048,265 | ---- | C] () -- C:\Windows\HomePremium.xml [2011.01.24 11:50:54 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2011.01.24 11:41:42 | 000,000,000 | ---- | C] () -- C:\Users\User\AppData\Local\QSwitch.txt [2011.01.24 11:41:42 | 000,000,000 | ---- | C] () -- C:\Users\User\AppData\Local\DSwitch.txt [2011.01.24 11:41:42 | 000,000,000 | ---- | C] () -- C:\Users\User\AppData\Local\AtStart.txt [2011.01.24 11:41:39 | 000,000,186 | ---- | C] () -- C:\ProgramData\HPWALog.txt [2011.01.24 11:41:25 | 000,001,409 | ---- | C] () -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk [2011.01.24 11:41:21 | 000,001,443 | ---- | C] () -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2011.01.24 11:39:46 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2011.01.24 11:39:46 | 000,002,202 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk [2011.01.24 11:39:46 | 000,002,196 | ---- | C] () -- C:\Users\Public\Desktop\eBay.lnk [2011.01.24 11:37:42 | 000,000,000 | RHS- | C] () -- C:\Windows\SysWow64\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF00105RC_E572195-041_4A_I3637_SHP_V33.22_F.10_T091015_WU3-0_L407_M4093_J500_7AMD_8F62_92.20_#110124_N10EC8168;168C002B_(VV869EA#ABD)_XMOBILE_CN10_Z.MRK [2011.01.24 11:37:42 | 000,000,000 | RHS- | C] () -- C:\Windows\SysNative\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF00105RC_E572195-041_4A_I3637_SHP_V33.22_F.10_T091015_WU3-0_L407_M4093_J500_7AMD_8F62_92.20_#110124_N10EC8168;168C002B_(VV869EA#ABD)_XMOBILE_CN10_Z.MRK [2011.01.24 11:05:40 | 000,000,105 | ---- | C] () -- C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log [2011.01.24 11:05:31 | 000,000,032 | ---- | C] () -- C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log [2011.01.24 11:05:12 | 000,000,032 | ---- | C] () -- C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log [2011.01.24 11:04:48 | 000,000,032 | ---- | C] () -- C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log [2011.01.24 11:04:23 | 000,000,032 | ---- | C] () -- C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log [2011.01.24 10:47:22 | 000,015,222 | ---- | C] () -- C:\Windows\SysNative\nbspkrs.ico [2011.01.24 10:47:22 | 000,003,774 | ---- | C] () -- C:\Windows\SysNative\bltinmic.ico [2011.01.24 10:47:22 | 000,003,774 | ---- | C] () -- C:\Windows\SysNative\2hps.ico [2011.01.24 10:45:34 | 000,067,584 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll [2011.01.24 10:44:50 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01007.Wdf [2011.01.24 10:38:50 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2011.01.24 10:38:38 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2011.01.24 10:36:36 | 3218,235,392 | -HS- | C] () -- C:\hiberfil.sys [2009.10.01 19:46:48 | 000,000,109 | ---- | C] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log [2009.10.01 19:43:09 | 000,000,110 | ---- | C] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log [2009.10.01 19:41:40 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log [2009.10.01 19:41:01 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log [2009.07.15 16:50:42 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2004.07.12 22:07:21 | 003,375,104 | ---- | C] () -- C:\Windows\SysWow64\qt-mt331.dll ========== LOP Check ========== [2011.02.20 23:49:54 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Azureus [2011.02.18 18:52:27 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\BitTorrent [2011.02.11 12:00:10 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Philipp Winterberg [2011.02.11 11:30:44 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Power-Musicbox 6 [2011.02.21 20:21:42 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Raptr [2011.02.17 16:35:17 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\RavensburgerTipToi [2009.07.14 06:08:49 | 000,009,954 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > |
|
21.02.2011, 13:38
| #11 |
| /// Malware-holic | system tool entfernen • Starte bitte die OTL.exe • Kopiere nun das Folgende in die Textbox. :OTL O4 - HKCU..\RunOnce: [nEmFaCg01812] C:\ProgramData\nEmFaCg01812\nEmFaCg01812.exe () :files C:\ProgramData\nEmFaCg01812 :Commands [purity] [EMPTYFLASH] [emptytemp] [Reboot] • Schliesse bitte nun alle Programme. • Klicke nun bitte auf den Fix Button. • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen. • Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren. pc sollte wieder im normalen modus starten. öffne computer, C: dann _OTL dort rechtsklick auf moved files wähle zu moved files.rar oder zip hinzufügen. lade das archiv in unserem upload channel hoch. http://www.trojaner-board.de/54791-a...ner-board.html
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
21.02.2011, 13:43
| #12 | |
| | system tool entfernenZitat:
soll ich das jetzt am sauberen oder am anderen pc durchführen? |
|
21.02.2011, 13:44
| #13 |
| /// Malware-holic | system tool entfernen na was denkst du denn...? am infizierten natürlich :-)
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
21.02.2011, 13:48
| #14 | |
| | system tool entfernenZitat:
 |
|
21.02.2011, 13:55
| #15 | |
| | system tool entfernenZitat:
|
|
| Themen zu system tool entfernen |
| avg, blau, entferne, entfernen, installier, installiert, kleine, kleinen, lauter, löschen, probiert, problem, programm, system, system tool, system tool entfernen, tool, verhindern |
Linear-Darstellung
