Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 12.02.2012, 11:23   #1
thomax
 
schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten - Standard

schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten



so das thema ist ja leider oft vertreten und scheinbar nur individuelle lösbar. ich poste gleich mal den otl scan und die extras und hoffe dass mir jemand weiterhelfen kann. wie gesagt der bildschirm ist schwarz und man soll 50 euro für eine kapersky version zahlen um die durch porongrafisch verseuchten seiten infiziösen pc-schäden wieder aufzuhben.
hoffe auf baldige hilfe und vielen dank für den großen einsatz den ich auf dieser seite hier sehe.
thomax

Alt 12.02.2012, 11:24   #2
thomax
 
schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten - Standard

schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten



Drive J: | 1.62 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: MAXPOWER-40BD0A | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/02/12 11:42:20 | 000,584,192 | ---- | M] (OldTimer Tools) -- H:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
PRC - [2010/07/16 13:01:55 | 000,220,160 | ---- | M] (Microsoft Corporation) -- H:\Programme\Windows NT\Zubehör\wordpad.exe
PRC - [2008/04/14 13:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2010/03/15 10:28:22 | 000,141,824 | ---- | M] () -- H:\Programme\WinRAR\RarExt.dll
MOD - [2009/05/01 00:31:06 | 000,466,944 | ---- | M] () -- H:\WINDOWS\system32\nvshell.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (CLTNetCnService)
SRV - [2011/07/09 14:09:09 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Stopped] -- H:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/05/09 09:26:00 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Stopped] -- H:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009/05/05 10:53:04 | 000,253,440 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Stopped] -- H:\WINDOWS\ATKKBService.exe -- (ATKKeyboardService)
SRV - [2008/11/06 06:34:46 | 000,266,424 | ---- | M] (Phantombility, Inc) [Auto | Stopped] -- H:\Programme\Phantombility\Phantom CD\pcdservice.exe -- (pcdservice)
SRV - [2008/04/14 13:00:00 | 000,005,632 | ---- | M] (Oak Technology Inc.) [Auto | Stopped] -- H:\WINDOWS\system32\s3savagemx.dll -- (lxbt_device)
SRV - [2006/03/09 15:30:34 | 000,630,905 | ---- | M] (Diskeeper® Corporation) [Auto | Stopped] -- H:\Programme\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper)
SRV - [2005/11/14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- H:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)


========== Driver Services (SafeList) ==========

DRV - [2012/02/08 20:01:03 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\npf.sys -- (NPF) WinPcap Packet Driver (NPF)
DRV - [2011/07/19 19:34:05 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011/07/09 14:09:10 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- H:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/07/09 14:09:10 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- H:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/05/28 11:32:06 | 000,279,712 | ---- | M] () [Kernel | Auto | Stopped] -- H:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2010/05/28 11:32:05 | 000,025,888 | ---- | M] () [Kernel | Auto | Stopped] -- H:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010/03/29 13:15:26 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- H:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010/02/09 11:28:40 | 000,129,824 | ---- | M] (TC Electronic) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\TCNear.sys -- (TCNear)
DRV - [2010/02/09 11:28:40 | 000,030,752 | ---- | M] (TC Electronic) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\TCNearMidi.sys -- (TCNearMidi)
DRV - [2010/02/09 11:28:40 | 000,028,192 | ---- | M] (TC Electronic) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\TCNearAudio.sys -- (TCNearAudio)
DRV - [2010/01/07 08:21:00 | 000,594,048 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\RTL8192su.sys -- (RTL8192su)
DRV - [2009/05/11 11:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- H:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/05/11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- H:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/17 18:22:54 | 000,010,752 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\Video3D32.sys -- (Video3D)
DRV - [2009/02/17 18:22:52 | 000,011,136 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System | Stopped] -- H:\WINDOWS\system32\drivers\atkkbnt.sys -- (asuskbnt)
DRV - [2008/11/06 06:13:33 | 000,044,696 | ---- | M] (Phantombility, Inc) [Kernel | Boot | Running] -- H:\WINDOWS\system32\DRIVERS\phmcd.sys -- (phmcd)
DRV - [2008/04/14 13:00:00 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- H:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/04/14 13:00:00 | 000,075,264 | ---- | M] () [Kernel | System | Stopped] -- H:\WINDOWS\system32\drivers\ipsec.sys -- (IPSec)
DRV - [2008/04/14 13:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- H:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2008/04/14 13:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- H:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2008/01/16 02:12:39 | 000,098,944 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008/01/16 02:10:51 | 004,609,024 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/06/14 13:44:30 | 000,012,288 | R--- | M] (ASUSTeK Computer Inc.) [Kernel | System | Stopped] -- H:\WINDOWS\system32\drivers\EIO_XP.sys -- (EIO_XP)
DRV - [2004/03/29 03:06:24 | 000,090,464 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\MarvinBus.sys -- (MarvinBus)
DRV - [2002/11/25 05:46:16 | 000,016,896 | ---- | M] (Syncrosoft GmbH) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\synasUSB.sys -- (SynasUSB)
DRV - [2001/04/13 18:16:38 | 000,187,992 | ---- | M] (Roland) [Kernel | Auto | Stopped] -- H:\Programme\Roland\Virtual Sound Canvas DXi\RVIEg01.sys -- (RVIEG01)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.daemon-search.com/startpage
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========



FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: H:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: H:\Programme\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: H:\Programme\DivX\DivX Content Uploader\npUpload.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: H:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: H:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: H:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: H:\Programme\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: H:\Programme\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: H:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: H:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: H:\Programme\Mozilla Firefox\components [2012/02/12 11:36:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: H:\Programme\Mozilla Firefox\plugins [2012/01/10 22:19:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0\extensions\\Components: H:\Programme\Mozilla Thunderbird\components [2011/09/23 04:12:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0\extensions\\Plugins: H:\Programme\Mozilla Thunderbird\plugins [2012/01/10 22:19:55 | 000,000,000 | ---D | M]

[2011/06/18 18:44:46 | 000,000,000 | ---D | M] (No name found) -- H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Extensions
[2010/10/11 18:28:49 | 000,000,000 | ---D | M] (No name found) -- H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/11/10 07:55:19 | 000,000,000 | ---D | M] (No name found) -- H:\Programme\Mozilla Firefox\extensions
[2011/10/22 09:31:26 | 000,000,000 | ---D | M] (Skype Click to Call) -- H:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/02/12 11:36:29 | 000,134,104 | ---- | M] (Mozilla Foundation) -- H:\Programme\mozilla firefox\components\browsercomps.dll
[2011/05/04 03:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- H:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2011/09/03 01:19:44 | 000,001,392 | ---- | M] () -- H:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011/09/03 01:13:56 | 000,002,252 | ---- | M] () -- H:\Programme\mozilla firefox\searchplugins\bing.xml
[2011/09/03 01:19:44 | 000,001,153 | ---- | M] () -- H:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2011/09/03 01:19:44 | 000,006,805 | ---- | M] () -- H:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2011/09/03 01:19:44 | 000,001,178 | ---- | M] () -- H:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2011/09/03 01:19:44 | 000,001,105 | ---- | M] () -- H:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

Hosts file not found
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - H:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [Adobe ARM] H:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] H:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ASUSGamerOSD] H:\Program Files\ASUS\GamerOSD\GamerOSD.exe File not found
O4 - HKLM..\Run: [avgnt] H:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DiskeeperSystray] H:\Programme\Diskeeper Corporation\Diskeeper\DkIcon.exe (Diskeeper® Corporation)
O4 - HKLM..\Run: [MozillaAgent] H:\WINDOWS\Temp\_ex-68.exe (0R0gtk)
O4 - HKLM..\Run: [NvCplDaemon] H:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] H:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] H:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] H:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [{8550D79F-7B28-E29C-9D4F-7515B7F2289A}] H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Erx\evihfek.exe ()
O4 - HKCU..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe (ASUSTeK Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] H:\Programme\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [ffdwnd] H:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Mozilla\Firefox\firefox.exe (Tomasz Pawlak)
O4 - Startup: H:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart\Dropbox.lnk = H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: H:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart\OpenOffice.org 3.2.lnk = H:\Programme\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: H:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart\PMB Medien-Prüfung.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - H:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - %SystemRoot%\System32\nwprovau.dll File not found
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1265141222390 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B13165AC-7828-4FF2-97E6-EA7329A6F3D2}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - H:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -H:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (H:\WINDOWS\system32\userinit.exe) -H:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\opretuq: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: H:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: H:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O30 - LSA: Authentication Packages - (nwprovau) -H:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/02/02 16:13:04 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offlinebrowsingpaket
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection H:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer-Hilfe
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Sicherheitsupdate für Windows XP (KB923789)
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection H:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsererweiterungen
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Zugang zu MSN Site
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - H:\WINDOWS\system32\Rundll32.exe H:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9309DD7E-EBFE-3C95-8B47-30D3A012F606} - .NET Framework
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML-Datenbindung
ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} -
ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer-Hauptschriftarten
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML-Hilfe
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - H:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: lxbt_device - H:\WINDOWS\system32\s3savagemx.dll (Oak Technology Inc.)
NetSvcs: WmdmPmSp - File not found


CREATERESTOREPOINT
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2012/02/12 11:43:41 | 000,584,192 | ---- | C] (OldTimer Tools) -- H:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
[2012/02/12 00:42:39 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Real
[2012/02/08 20:48:08 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Sun
[2012/02/08 20:01:08 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Macromedia
[2012/02/08 20:01:03 | 000,281,104 | ---- | C] (CACE Technologies, Inc.) -- H:\WINDOWS\System32\wpcap.dll
[2012/02/08 20:01:03 | 000,100,880 | ---- | C] (CACE Technologies, Inc.) -- H:\WINDOWS\System32\Packet.dll
[2012/02/08 20:01:03 | 000,050,704 | ---- | C] (CACE Technologies, Inc.) -- H:\WINDOWS\System32\drivers\npf.sys
[2012/02/08 20:00:57 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Adobe
[2012/02/08 19:48:54 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Xeuzed
[2012/02/08 19:48:54 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Erx
[2012/02/03 21:49:49 | 000,000,000 | ---D | C] -- H:\Programme\uTorrent
[2012/02/03 21:49:11 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\uTorrent
[2012/01/24 12:49:38 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\Administrator\Desktop\Erzieherbewerbung
[6 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[3 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/02/12 11:42:20 | 000,584,192 | ---- | M] (OldTimer Tools) -- H:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
[2012/02/12 11:16:58 | 000,449,398 | ---- | M] () -- H:\WINDOWS\System32\perfh007.dat
[2012/02/12 11:16:58 | 000,433,284 | ---- | M] () -- H:\WINDOWS\System32\perfh009.dat
[2012/02/12 11:16:58 | 000,081,032 | ---- | M] () -- H:\WINDOWS\System32\perfc007.dat
[2012/02/12 11:16:58 | 000,068,240 | ---- | M] () -- H:\WINDOWS\System32\perfc009.dat
[2012/02/12 11:12:51 | 000,002,048 | --S- | M] () -- H:\WINDOWS\bootstat.dat
[2012/02/12 11:07:41 | 000,000,664 | ---- | M] () -- H:\WINDOWS\System32\d3d9caps.dat
[2012/02/12 10:52:46 | 000,229,488 | ---- | M] () -- H:\WINDOWS\System32\NvApps.xml
[2012/02/12 10:20:36 | 000,000,000 | -HS- | M] () -- H:\WINDOWS\System32\dds_trash_log.cmd
[2012/02/09 20:27:26 | 000,001,919 | ---- | M] () -- H:\WINDOWS\System32\AUTOEXEC.NT
[2012/02/08 20:58:42 | 000,204,800 | ---- | M] () -- H:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/02/08 20:01:03 | 000,281,104 | ---- | M] (CACE Technologies, Inc.) -- H:\WINDOWS\System32\wpcap.dll
[2012/02/08 20:01:03 | 000,100,880 | ---- | M] (CACE Technologies, Inc.) -- H:\WINDOWS\System32\Packet.dll
[2012/02/08 20:01:03 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) -- H:\WINDOWS\System32\drivers\npf.sys
[2012/02/07 15:52:49 | 000,054,156 | -H-- | M] () -- H:\WINDOWS\QTFont.qfn
[2012/02/03 21:49:50 | 000,000,610 | ---- | M] () -- H:\Dokumente und Einstellungen\All Users\Desktop\µTorrent.lnk
[2012/02/03 00:17:27 | 000,001,050 | ---- | M] () -- H:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart\Dropbox.lnk
[2012/02/03 00:17:26 | 000,001,050 | ---- | M] () -- H:\Dokumente und Einstellungen\Administrator\Desktop\Dropbox.lnk
[2012/01/31 11:26:23 | 000,013,646 | ---- | M] () -- H:\WINDOWS\System32\wpa.dbl
[2012/01/17 14:14:36 | 003,043,385 | ---- | M] () -- H:\Dokumente und Einstellungen\Administrator\Desktop\wegweiser_2009_bf.pdf
[6 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[3 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/02/08 20:48:08 | 000,000,664 | ---- | C] () -- H:\WINDOWS\System32\d3d9caps.dat
[2012/02/08 19:50:14 | 000,000,000 | -HS- | C] () -- H:\WINDOWS\System32\dds_trash_log.cmd
[2012/02/03 21:49:50 | 000,000,610 | ---- | C] () -- H:\Dokumente und Einstellungen\All Users\Desktop\µTorrent.lnk
[2012/01/17 14:14:36 | 003,043,385 | ---- | C] () -- H:\Dokumente und Einstellungen\Administrator\Desktop\wegweiser_2009_bf.pdf
[2011/06/18 17:29:42 | 000,004,212 | -H-- | C] () -- H:\WINDOWS\System32\zllictbl.dat
[2011/01/17 18:33:52 | 000,000,023 | ---- | C] () -- H:\WINDOWS\BlendSettings.ini
[2011/01/17 18:11:54 | 000,000,032 | ---- | C] () -- H:\WINDOWS\CD_Start.INI
[2011/01/13 02:24:32 | 000,000,025 | ---- | C] () -- H:\WINDOWS\popcinfot.dat
[2010/12/13 15:05:39 | 000,000,001 | ---- | C] () -- H:\WINDOWS\System32\SI.bin
[2010/11/17 17:29:15 | 000,027,648 | ---- | C] () -- H:\WINDOWS\System32\AVSredirect.dll
[2010/10/05 00:02:55 | 000,094,208 | ---- | C] () -- H:\WINDOWS\System32\zmbv.dll
[2010/07/24 11:16:26 | 000,000,056 | -H-- | C] () -- H:\WINDOWS\System32\ezsidmv.dat
[2010/06/13 23:05:46 | 000,000,017 | ---- | C] () -- H:\WINDOWS\MovingPicture.ini
[2010/06/13 13:33:02 | 000,237,568 | ---- | C] () -- H:\WINDOWS\System32\lame_enc.dll
[2010/06/13 13:33:02 | 000,110,080 | ---- | C] () -- H:\WINDOWS\System32\advd.dll
[2010/06/13 13:33:02 | 000,023,040 | ---- | C] () -- H:\WINDOWS\System32\auth.dll
[2010/06/11 12:19:24 | 000,000,063 | ---- | C] () -- H:\WINDOWS\PixieTool.INI
[2010/05/28 11:32:06 | 000,279,712 | ---- | C] () -- H:\WINDOWS\System32\drivers\atksgt.sys
[2010/05/28 11:32:05 | 000,025,888 | ---- | C] () -- H:\WINDOWS\System32\drivers\lirsgt.sys
[2010/03/31 16:17:41 | 000,000,074 | ---- | C] () -- H:\WINDOWS\BBW_INFO.INI
[2010/03/25 14:00:25 | 000,000,038 | ---- | C] () -- H:\WINDOWS\avisplitter.ini
[2010/03/25 14:00:23 | 002,378,752 | ---- | C] () -- H:\WINDOWS\System32\x264vfw.dll
[2010/03/25 14:00:21 | 000,085,504 | ---- | C] () -- H:\WINDOWS\System32\ff_vfw.dll
[2010/02/24 14:35:35 | 000,002,892 | ---- | C] () -- H:\WINDOWS\System32\audcon.sys
[2010/02/19 14:02:49 | 000,204,800 | ---- | C] () -- H:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/02/09 11:28:54 | 000,012,800 | ---- | C] () -- H:\WINDOWS\TCMsgSvr2.dll
[2010/02/09 11:28:54 | 000,012,800 | ---- | C] () -- H:\WINDOWS\System32\TCMsgSvr2.dll
[2010/02/08 16:10:35 | 000,165,376 | ---- | C] () -- H:\WINDOWS\System32\unrar.dll
[2010/02/02 20:43:02 | 000,000,000 | ---- | C] () -- H:\WINDOWS\nsreg.dat
[2010/02/02 16:50:26 | 000,049,152 | R--- | C] () -- H:\WINDOWS\System32\ChCfg.exe
[2010/02/02 16:36:12 | 000,881,664 | ---- | C] () -- H:\WINDOWS\System32\xvidcore.dll
[2010/02/02 16:36:12 | 000,205,824 | ---- | C] () -- H:\WINDOWS\System32\xvidvfw.dll
[2010/02/02 16:36:12 | 000,196,653 | ---- | C] () -- H:\WINDOWS\System32\drivers\aVivid.bin
[2010/02/02 16:36:12 | 000,196,608 | ---- | C] () -- H:\WINDOWS\System32\drivers\nVivid.bin
[2010/02/02 16:36:12 | 000,196,608 | ---- | C] () -- H:\WINDOWS\System32\drivers\nStandard.bin
[2010/02/02 16:36:12 | 000,196,608 | ---- | C] () -- H:\WINDOWS\System32\drivers\nAsmedia.bin
[2010/02/02 16:36:12 | 000,196,608 | ---- | C] () -- H:\WINDOWS\System32\drivers\nAdvanced.bin
[2010/02/02 16:36:12 | 000,196,608 | ---- | C] () -- H:\WINDOWS\System32\drivers\aAdvanced.bin
[2010/02/02 16:36:12 | 000,196,582 | ---- | C] () -- H:\WINDOWS\System32\drivers\aStandard.bin
[2010/02/02 16:36:12 | 000,196,582 | ---- | C] () -- H:\WINDOWS\System32\drivers\aAsmedia.bin
[2010/02/02 16:36:12 | 000,053,248 | ---- | C] () -- H:\WINDOWS\System32\asrussian.dll
[2010/02/02 16:36:12 | 000,053,248 | ---- | C] () -- H:\WINDOWS\System32\askorean.dll
[2010/02/02 16:36:12 | 000,053,248 | ---- | C] () -- H:\WINDOWS\System32\asjapan.dll
[2010/02/02 16:36:12 | 000,053,248 | ---- | C] () -- H:\WINDOWS\System32\asgerman.dll
[2010/02/02 16:36:12 | 000,053,248 | ---- | C] () -- H:\WINDOWS\System32\asfrench.dll
[2010/02/02 16:36:12 | 000,053,248 | ---- | C] () -- H:\WINDOWS\System32\aseng.dll
[2010/02/02 16:36:12 | 000,053,248 | ---- | C] () -- H:\WINDOWS\System32\aschs.dll
[2010/02/02 16:36:12 | 000,000,018 | ---- | C] () -- H:\WINDOWS\System32\atkid.ini
[2010/02/02 16:36:11 | 000,053,248 | ---- | C] () -- H:\WINDOWS\System32\ASCHT.dll
[2010/02/02 16:14:35 | 000,002,048 | --S- | C] () -- H:\WINDOWS\bootstat.dat
[2010/02/02 16:10:24 | 000,021,740 | ---- | C] () -- H:\WINDOWS\System32\emptyregdb.dat
[2010/02/02 15:54:20 | 000,004,161 | ---- | C] () -- H:\WINDOWS\ODBCINST.INI
[2010/02/02 15:53:16 | 000,124,520 | ---- | C] () -- H:\WINDOWS\System32\FNTCACHE.DAT
[2009/05/01 00:31:10 | 001,657,376 | ---- | C] () -- H:\WINDOWS\System32\nwiz.exe
[2009/05/01 00:31:08 | 000,449,056 | ---- | C] () -- H:\WINDOWS\System32\nvappbar.exe
[2009/05/01 00:31:08 | 000,436,768 | ---- | C] () -- H:\WINDOWS\System32\keystone.exe
[2009/05/01 00:31:06 | 001,724,416 | ---- | C] () -- H:\WINDOWS\System32\nvwdmcpl.dll
[2009/05/01 00:31:06 | 001,507,328 | ---- | C] () -- H:\WINDOWS\System32\nview.dll
[2009/05/01 00:31:06 | 001,101,824 | ---- | C] () -- H:\WINDOWS\System32\nvwimg.dll
[2009/05/01 00:31:06 | 000,466,944 | ---- | C] () -- H:\WINDOWS\System32\nvshell.dll
[2009/04/30 15:02:00 | 001,579,630 | ---- | C] () -- H:\WINDOWS\System32\nvdata.bin
[2008/10/07 09:13:30 | 000,197,912 | ---- | C] () -- H:\WINDOWS\System32\physxcudart_20.dll
[2008/10/07 09:13:22 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 000,058,648 | ---- | C] () -- H:\WINDOWS\System32\AgCPanelFrench.dll
[2008/04/14 13:00:00 | 000,673,088 | ---- | C] () -- H:\WINDOWS\System32\mlang.dat
[2008/04/14 13:00:00 | 000,449,398 | ---- | C] () -- H:\WINDOWS\System32\perfh007.dat
[2008/04/14 13:00:00 | 000,433,284 | ---- | C] () -- H:\WINDOWS\System32\perfh009.dat
[2008/04/14 13:00:00 | 000,272,128 | ---- | C] () -- H:\WINDOWS\System32\perfi009.dat
[2008/04/14 13:00:00 | 000,269,480 | ---- | C] () -- H:\WINDOWS\System32\perfi007.dat
[2008/04/14 13:00:00 | 000,218,003 | ---- | C] () -- H:\WINDOWS\System32\dssec.dat
[2008/04/14 13:00:00 | 000,081,032 | ---- | C] () -- H:\WINDOWS\System32\perfc007.dat
[2008/04/14 13:00:00 | 000,075,264 | ---- | C] () -- H:\WINDOWS\System32\drivers\ipsec.sys
[2008/04/14 13:00:00 | 000,068,240 | ---- | C] () -- H:\WINDOWS\System32\perfc009.dat
[2008/04/14 13:00:00 | 000,046,258 | ---- | C] () -- H:\WINDOWS\System32\mib.bin
[2008/04/14 13:00:00 | 000,034,478 | ---- | C] () -- H:\WINDOWS\System32\perfd007.dat
[2008/04/14 13:00:00 | 000,028,626 | ---- | C] () -- H:\WINDOWS\System32\perfd009.dat
[2008/04/14 13:00:00 | 000,004,569 | ---- | C] () -- H:\WINDOWS\System32\secupd.dat
[2008/04/14 13:00:00 | 000,001,804 | ---- | C] () -- H:\WINDOWS\System32\Dcache.bin
[2008/04/14 13:00:00 | 000,000,741 | ---- | C] () -- H:\WINDOWS\System32\noise.dat
[2007/03/20 17:16:12 | 000,061,440 | ---- | C] () -- H:\WINDOWS\System32\ASDR.exe
[2004/11/30 09:19:45 | 000,000,618 | ---- | C] () -- H:\WINDOWS\System32\oeminfo.ini
[2004/10/11 11:19:00 | 000,092,672 | ---- | C] () -- H:\WINDOWS\System32\ASUSASV2.DLL
[2004/03/18 07:44:29 | 001,663,068 | ---- | C] () -- H:\WINDOWS\System32\libmmd.dll
[2004/03/17 08:33:22 | 013,107,200 | ---- | C] () -- H:\WINDOWS\System32\oembios.bin
[2004/03/17 08:32:28 | 000,004,530 | ---- | C] () -- H:\WINDOWS\System32\oembios.dat
[2003/12/15 18:12:48 | 000,128,000 | ---- | C] () -- H:\WINDOWS\System32\3DViewer.dll

========== Custom Scans ==========


< %SYSTEMDRIVE%\*. >
[2010/11/29 18:21:55 | 000,000,000 | ---D | M] -- H:\bandinabox
[2010/05/26 10:58:26 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen
[2010/02/02 16:45:26 | 000,000,000 | ---D | M] -- H:\Intel
[2012/02/03 21:49:49 | 000,000,000 | ---D | M] -- H:\Programme
[2010/05/26 11:30:08 | 000,000,000 | -HSD | M] -- H:\RECYCLER
[2010/02/02 16:20:08 | 000,000,000 | -HSD | M] -- H:\System Volume Information
[2010/02/02 17:06:35 | 000,000,000 | ---D | M] -- H:\TempEI4
[2012/02/12 11:12:45 | 000,000,000 | ---D | M] -- H:\WINDOWS

< %PROGRAMFILES%\*.exe >

Invalid Environment Variable: LOCALAPPDATA

< %systemroot%\*. /mp /s >


< MD5 for: AGP440.SYS >
[2008/04/14 13:00:00 | 020,108,202 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys

< MD5 for: ATAPI.SYS >
[2008/04/14 13:00:00 | 020,108,202 | ---- | M] () .cab file -- H:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008/04/14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- H:\WINDOWS\system32\dllcache\atapi.sys
[2008/04/14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- H:\WINDOWS\system32\drivers\atapi.sys
[2008/04/14 13:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- H:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys
[2008/04/14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- H:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys

< MD5 for: EVENTLOG.DLL >
[2008/04/14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- H:\WINDOWS\system32\dllcache\eventlog.dll
[2008/04/14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- H:\WINDOWS\system32\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008/04/14 13:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- H:\WINDOWS\explorer.exe
[2008/04/14 13:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- H:\WINDOWS\system32\dllcache\explorer.exe

< MD5 for: NETLOGON.DLL >
[2008/04/14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- H:\WINDOWS\system32\dllcache\netlogon.dll
[2008/04/14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- H:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2008/04/14 13:00:00 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- H:\WINDOWS\system32\dllcache\scecli.dll
[2008/04/14 13:00:00 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- H:\WINDOWS\system32\scecli.dll

< MD5 for: USER32.DLL >
[2008/04/14 13:00:00 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- H:\WINDOWS\system32\dllcache\user32.dll
[2008/04/14 13:00:00 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- H:\WINDOWS\system32\user32.dll

< MD5 for: USERINIT.EXE >
[2008/04/14 13:00:00 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- H:\WINDOWS\system32\dllcache\userinit.exe
[2008/04/14 13:00:00 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- H:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2008/04/14 13:00:00 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- H:\WINDOWS\system32\dllcache\winlogon.exe
[2008/04/14 13:00:00 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- H:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2IFSL.SYS >
[2008/04/14 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- H:\WINDOWS\system32\dllcache\ws2ifsl.sys
[2008/04/14 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- H:\WINDOWS\system32\drivers\ws2ifsl.sys

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2010/02/02 16:52:23 | 000,094,208 | ---- | M] () -- H:\WINDOWS\System32\config\default.sav
[2010/02/02 16:52:23 | 001,089,536 | ---- | M] () -- H:\WINDOWS\System32\config\software.sav
[2010/02/02 16:52:23 | 000,475,136 | ---- | M] () -- H:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[6 H:\WINDOWS\system32\*.tmp files -> H:\WINDOWS\system32\*.tmp -> ]

< %USERPROFILE%\*.* >
[2012/02/12 11:09:53 | 005,767,168 | -H-- | M] () -- H:\Dokumente und Einstellungen\Administrator\NTUSER.DAT
[2012/02/12 11:56:41 | 000,438,272 | -H-- | M] () -- H:\Dokumente und Einstellungen\Administrator\ntuser.dat.LOG
[2012/02/12 11:09:53 | 000,000,190 | -HS- | M] () -- H:\Dokumente und Einstellungen\Administrator\ntuser.ini

< %USERPROFILE%\Local Settings\Temp\*.exe >

< %USERPROFILE%\Local Settings\Temp\*.dll >

< %USERPROFILE%\Application Data\*.exe >

< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Kmode: %SystemRoot%\system32\win32k.sys [2011/11/23 15:40:13 | 001,859,712 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[H:\WINDOWS\$NtUninstallKB49139$] -> Error: Cannot create file handle -> Unknown point type

========== Alternate Data Streams ==========

@Alternate Data Stream - 110 bytes -> H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:2C595FF3

< End of report >
__________________


Geändert von thomax (12.02.2012 um 11:26 Uhr) Grund: otl

Alt 12.02.2012, 11:27   #3
thomax
 
schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten - Standard

schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten



OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 12/02/2012 11:57:58 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = H:\Dokumente und Einstellungen\Administrator\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000809 | Country: Großbritannien | Language: ENG | Date Format: dd/MM/yyyy
 
3.00 Gb Total Physical Memory | 2.74 Gb Available Physical Memory | 91.33% Memory free
4.84 Gb Paging File | 4.78 Gb Available in Paging File | 98.61% Paging File free
Paging file location(s): H:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Programme
Drive C: | 100.00 Mb Total Space | 63.99 Mb Free Space | 63.99% Space Free | Partition Type: NTFS
Drive D: | 1.87 Gb Total Space | 1.87 Gb Free Space | 100.00% Space Free | Partition Type: FAT
Drive H: | 195.21 Gb Total Space | 37.21 Gb Free Space | 19.06% Space Free | Partition Type: NTFS
Drive I: | 400.86 Gb Total Space | 259.66 Gb Free Space | 64.78% Space Free | Partition Type: NTFS
Drive J: | 1.62 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
 
Computer Name: MAXPOWER-40BD0A | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- H:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "H:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "H:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"H:\Programme\concept design\onlineTV 5\onlineTV.exe" = H:\Programme\concept design\onlineTV 5\onlineTV.exe:*:Enabled:onlineTV
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"H:\Programme\Java\jre6\bin\javaw.exe" = H:\Programme\Java\jre6\bin\javaw.exe:*:Disabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"H:\Programme\Skype\Plugin Manager\skypePM.exe" = H:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"H:\Programme\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe" = H:\Programme\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe:*:Disabled:Media Player Classic - Home Cinema -- (MPC-HC Team)
"H:\Programme\VideoLAN\VLC\vlc.exe" = H:\Programme\VideoLAN\VLC\vlc.exe:*:Disabled:VLC media player -- ()
"H:\Programme\Cyanide\Blood Bowl Legendary Edition\BB_LE.exe" = H:\Programme\Cyanide\Blood Bowl Legendary Edition\BB_LE.exe:*:Disabled:Blood Bowl Legendary Edition
"H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Dropbox\bin\Dropbox.exe" = H:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox -- (Dropbox, Inc.)
"H:\Programme\concept design\onlineTV 5\onlineTV.exe" = H:\Programme\concept design\onlineTV 5\onlineTV.exe:*:Disabled:onlineTV
"H:\Programme\The Witcher 2\bin\witcher2.exe" = H:\Programme\The Witcher 2\bin\witcher2.exe:*:Disabled:The Witcher 2: Assasins of Kings
"H:\Programme\uTorrent\uTorrent.exe" = H:\Programme\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"H:\WINDOWS\explorer.exe" = H:\WINDOWS\explorer.exe:*:Disabled:Windows Explorer -- (Microsoft Corporation)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
"{1545207E-C6F3-31D7-9918-BDBB65075FBF}" = Microsoft .NET Framework 3.5 Language Pack - deu
"{1902A37F-C3F4-4984-AD67-81309B3B2E64}" = Diskeeper Home Edition
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1BA7B068-4719-42A3-B553-D4ED97434F92}" = ASUS Utilities
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2217B0B4-35CB-48C6-B640-864DF2F30F99}" = OpenOffice.org 3.2
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 26
"{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}" = ASUS Gamer OSD
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{371B17C3-9624-4583-A497-DF980313D851}" = Native Instruments Absynth 5
"{394BE3D9-7F57-4638-A8D1-1D88671913B7}" = Microsoft AppLocale
"{43E7798A-248E-4A3D-9969-FEA63543A462}" = Native Instruments Kontakt 4
"{490BF87E-1F75-4453-BF55-9F540543A3CA}" = Steinberg Drum Loop Expansion 01
"{491DF203-7B61-4F0E-BDCB-A1218C4DAFE9}" = Native Instruments Massive
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}" = Steinberg Cubase 5
"{4D454CF8-12FD-464D-B57B-B46FE27B78BB}" = Steinberg LoopMash Content
"{532B917B-8235-4FA5-BE36-643A8BB053A5}" = Steinberg REVerence Content 01
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6BED4DFE-C527-463E-B93A-6F6848B74DD0}" = Native Instruments Battery 3
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{745877DC-8FFE-4E4C-ABBC-589B887A47D1}" = Virtual Sound Canvas DXi
"{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
"{7B63B2922B174135AFC0E1377DD81EC2}" = 
"{809D7E6D-915D-4EAD-821F-E13D93F37161}" = ASUS Smart Doctor
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8524BBAC-E3A7-42F5-9B9A-5AE50A10C500}" = Belkin USB Wireless Adaptor
"{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}" = Steinberg HALionOne Studio Drum Set
"{874732AE-6BB3-4BE1-8F6F-A1DCEA32B836}" = TC Audio Interface Software
"{9309DD7E-EBFE-3C95-8B47-30D3A012F606}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU
"{A1071AEB-B0EF-3F5F-BC84-83A270EBE496}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.2) - Deutsch
"{AC997F93-0757-4ED4-A701-F40C2D654D09}" = Steinberg HALionOne GM Drum Set
"{AFD89880-C544-4777-B645-FBF6D3391B11}" = Belkin F7D1101 Basic Wireless USB Adapter
"{B2552FA6-86E3-410D-84AD-265C2242D410}" = Native Instruments FM8
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B83FC356-B7C0-441F-8A4D-D71E088E7974}" = NVIDIA PhysX
"{BD86F1AC-B594-46E4-85DC-1258AC9E2232}" = Steinberg Groove Agent ONE Content
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C7FAFC98-5ECC-40FC-B440-A5D5FE3A6A6E}" = Native Instruments Guitar Rig 4
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}" = Steinberg HALionOne Studio Set
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{D799CC16-F3B5-468D-AC67-6F77AAA98173}" = Native Instruments Komplete 6
"{D82CDA0D-C182-42C8-8FF2-5649C98D6003}" = Steinberg HALionOne Pro Set
"{DABF43D9-1104-4764-927B-5BED1274A3B0}" = Runtime
"{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb" = Microsoft Windows Application Compatibility Database
"{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}" = Steinberg HALionOne Expression Set
"{E70E7159-93B1-470D-9FBD-D8E9EF34B538}" = Steinberg HALionOne
"{E9EA5F38-6299-45A1-9D23-F21729A19357}" = Native Instruments Reaktor 5
"{F057965A-D974-4C64-ADB1-4381CD4B8956}" = Steinberg HALionOne GM Set
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}" = Steinberg HALionOne Additional Content Set 01
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"7-Zip" = 7-Zip 4.65
"Ableton Live_is1" = Ableton Live v7.0.1
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BB_is1" = RealTracks
"DAEMON Tools Lite" = DAEMON Tools Lite
"EarMaster School 5_is1" = EarMaster School 5
"Free RAR Extract Frog" = Free RAR Extract Frog
"InstallShield_{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
"InstallShield_{809D7E6D-915D-4EAD-821F-E13D93F37161}" = ASUS Smart Doctor
"InstallShield_{8524BBAC-E3A7-42F5-9B9A-5AE50A10C500}" = Belkin USB Wireless Adaptor
"InstallShield_{AFD89880-C544-4777-B645-FBF6D3391B11}" = Belkin F7D1101 Basic Wireless USB Adapter
"Kings Bounty Armored Princess_is1" = King's Bounty: Crossworlds
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 5.8.3
"Microsoft .NET Framework 3.5 Language Pack - deu" = Microsoft .NET Framework 3.5 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 10.0.1 (x86 de)" = Mozilla Firefox 10.0.1 (x86 de)
"Mozilla Thunderbird 10.0 (x86 de)" = Mozilla Thunderbird 10.0 (x86 de)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Native Instruments Absynth 5" = Native Instruments Absynth 5
"Native Instruments Battery 3" = Native Instruments Battery 3
"Native Instruments FM8" = Native Instruments FM8
"Native Instruments Guitar Rig 4" = Native Instruments Guitar Rig 4
"Native Instruments Komplete 6" = Native Instruments Komplete 6
"Native Instruments Kontakt 4" = Native Instruments Kontakt 4
"Native Instruments Massive" = Native Instruments Massive
"Native Instruments Reaktor 5" = Native Instruments Reaktor 5
"NVIDIA Drivers" = NVIDIA Drivers
"PG Music DirectX Plugins_is1" = PG Music DirectX Plugins 1.3.4.1
"Phantom CD" = Phantom CD
"QuickTime" = QuickTime
"RealAlt_is1" = Real Alternative 2.0.2
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.0.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Game Organizer" = EasyBits GO
"UnityWebPlayer" = Unity Web Player
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 11/02/2012 19:52:30 | Computer Name = MAXPOWER-40BD0A | Source = crypt32 | ID = 131077
Description = Der automatische Aktualisierungsabruf des Drittanbieterstammzertifikats
 von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212.crt>
 ist fehlgeschlagen mit dem Fehler: Die Serververbindung wurde aufgrund eines Fehlers
 beendet.  .
 
Error - 11/02/2012 19:52:30 | Computer Name = MAXPOWER-40BD0A | Source = crypt32 | ID = 131077
Description = Der automatische Aktualisierungsabruf des Drittanbieterstammzertifikats
 von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212.crt>
 ist fehlgeschlagen mit dem Fehler: Diese Netzwerkverbindung ist nicht vorhanden.
.
 
Error - 12/02/2012 05:07:25 | Computer Name = MAXPOWER-40BD0A | Source = Diskeeper | ID = 6
Description = Diskeeper-Control Center - FEHLER  No valid endpoint could be found.
 
Error - 12/02/2012 05:07:25 | Computer Name = MAXPOWER-40BD0A | Source = Diskeeper | ID = 6
Description = Diskeeper-Control Center - FEHLER  Diskeeper konnte das RPC-Protokoll
 nicht initialisieren.
 
Error - 12/02/2012 05:11:44 | Computer Name = MAXPOWER-40BD0A | Source = Diskeeper | ID = 6
Description = Diskeeper-Control Center - FEHLER  No valid endpoint could be found.
 
Error - 12/02/2012 05:11:44 | Computer Name = MAXPOWER-40BD0A | Source = Diskeeper | ID = 6
Description = Diskeeper-Control Center - FEHLER  Diskeeper konnte das RPC-Protokoll
 nicht initialisieren.
 
Error - 12/02/2012 05:23:42 | Computer Name = MAXPOWER-40BD0A | Source = Diskeeper | ID = 6
Description = Diskeeper-Control Center - FEHLER  No valid endpoint could be found.
 
Error - 12/02/2012 05:23:42 | Computer Name = MAXPOWER-40BD0A | Source = Diskeeper | ID = 6
Description = Diskeeper-Control Center - FEHLER  Diskeeper konnte das RPC-Protokoll
 nicht initialisieren.
 
Error - 12/02/2012 05:52:48 | Computer Name = MAXPOWER-40BD0A | Source = Diskeeper | ID = 6
Description = Diskeeper-Control Center - FEHLER  No valid endpoint could be found.
 
Error - 12/02/2012 05:52:48 | Computer Name = MAXPOWER-40BD0A | Source = Diskeeper | ID = 6
Description = Diskeeper-Control Center - FEHLER  Diskeeper konnte das RPC-Protokoll
 nicht initialisieren.
 
[ System Events ]
Error - 12/02/2012 06:14:18 | Computer Name = MAXPOWER-40BD0A | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   AFD  asuskbnt  avgio  avipbb  EIO_XP  Fips  intelppm  IPSec  MRxSmb  NetBIOS  NetBT  PCLEPCI  RasAcd  Rdbss
sptd
ssmdrv
Tcpip
 
Error - 12/02/2012 06:36:32 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "netman"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
 
Error - 12/02/2012 06:43:26 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {A1F4E726-8CF1-11D1-BF92-0060081ED811}
 
Error - 12/02/2012 06:43:34 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "netman"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
 
Error - 12/02/2012 06:43:34 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "netman"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
 
Error - 12/02/2012 06:52:10 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {A1F4E726-8CF1-11D1-BF92-0060081ED811}
 
Error - 12/02/2012 06:52:17 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "netman"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
 
Error - 12/02/2012 06:52:26 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {A1F4E726-8CF1-11D1-BF92-0060081ED811}
 
Error - 12/02/2012 06:52:30 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "netman"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
 
Error - 12/02/2012 06:55:41 | Computer Name = MAXPOWER-40BD0A | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {A1F4E726-8CF1-11D1-BF92-0060081ED811}
 
 
< End of report >
         
--- --- ---
__________________

Antwort

Themen zu schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten
50 euro, bildschirm, einsatz, euro, extras, fenster, große, hoffe, individuelle, infiziert, kapersky, otl scan, pornografische inhalte, poste, scan, schei, schwarz, schwarzer bildschirm, schwarzes, seite, seiten, thema, trojaner 50 €, verseuchte, version, weiterhelfen, zahlen



Ähnliche Themen: schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten


  1. Windows 8 - schwarzes Fenster öffnet sich immer wieder kurz sobald ich im Internet bin
    Log-Analyse und Auswertung - 18.09.2015 (5)
  2. Nach Firefox update 33.0 (x86de) ist nur noch ein schwarzes Fenster da!
    Plagegeister aller Art und deren Bekämpfung - 21.10.2014 (3)
  3. Nach Firefox update 33.0 (x86de) ist nur noch ein schwarzes Fenster da!
    Mülltonne - 16.10.2014 (1)
  4. Kurze Popups - schwarzes DOS-Fenster
    Log-Analyse und Auswertung - 01.06.2014 (4)
  5. Schwarzes Fenster öffnet sich für sec...
    Alles rund um Windows - 27.12.2013 (4)
  6. win7 verdacht Virus Pc stark verlangsamt 2 fehlgeschlagene login Versuche , schwarzes Fenster im Hintergrund
    Log-Analyse und Auswertung - 26.10.2013 (19)
  7. Schwarzes Fenster system 32 beim start von windows 7
    Plagegeister aller Art und deren Bekämpfung - 27.02.2013 (20)
  8. Malware Problem, viel Werbung, Schwarzes Fenster und extrem langsamer Rechner
    Plagegeister aller Art und deren Bekämpfung - 26.02.2013 (9)
  9. Windows blockiert 50 Euro Fenster
    Log-Analyse und Auswertung - 27.02.2012 (4)
  10. Schwarzes Fenster: Aus Sicherheitsgründen wurde Ihr System blockiert
    Plagegeister aller Art und deren Bekämpfung - 25.02.2012 (16)
  11. Schwarzes Fenster: Aus Sicherheitsgründen wurde Ihr System blockiert
    Log-Analyse und Auswertung - 21.02.2012 (41)
  12. Windows durch das besuchen spezieller Seiten gesperrt - 50 Euro zahlen
    Log-Analyse und Auswertung - 24.01.2012 (11)
  13. Ein schwarzes fenster tritt auf,, es wäre nicht mehr sicher, bitte bezahlen
    Antiviren-, Firewall- und andere Schutzprogramme - 21.01.2012 (2)
  14. Windows durch das besuchen spezieller Seiten gesperrt - 50 Euro zahlen
    Log-Analyse und Auswertung - 20.01.2012 (9)
  15. Schwarzes Fenster vor dem Boot.
    Mülltonne - 23.10.2008 (0)
  16. IE zeigt Seiten nicht an, schwarzes Quadrat statt Mauszeiger...
    Log-Analyse und Auswertung - 17.02.2007 (1)
  17. Virusproblem - Google-Suche verweisst immer auf pornografische Seiten
    Log-Analyse und Auswertung - 10.07.2005 (3)

Zum Thema schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten - so das thema ist ja leider oft vertreten und scheinbar nur individuelle lösbar. ich poste gleich mal den otl scan und die extras und hoffe dass mir jemand weiterhelfen kann. - schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten...
Archiv
Du betrachtest: schwarzes fenster 50 euro kapersky infiziert durch pornografische seiten auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.