Hallo Boardmembers,

Seit ca. 3 Tagen hat sich meine Internet Startseite von Google auf wXX.searchnu.com/406 umgestellt. Ich habe schon mehrmals erfolglos versucht im Browser wieder auf Google umzustellen. In verschiedenen englisch sprachigen Foren habe ich herausgefunden, dass es sich offensichtlich um einen Trojaner handelt, der durch die Searchqu Toolbar verursacht wird. Meine Frau meint, sie hätte kürzlich unbeabsichtigt einen Download auf einer Website gestartet. Danach hat sie die Anwendung aber mit CCleaner wieder deinstalliert. Sie kann nicht mehr mit Sicherheit sagen um welche Anwendung und welche WEbseite es sich handelte.

Ich danke Euch schon Vorab für jegliche Unterstützung.

Hier die Logfiles von DDS und GMER:



.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_30
Run by Marina at 17:38:52 on 2012-03-18
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.55.1046.18.3066.1844 [GMT 1:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\rundll32.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG2012\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\AVG\AVG2012\avgnsx.exe
C:\Program Files\AVG\AVG2012\avgemcx.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\lg_swupdate\GiljabiStart.exe
C:\Program Files\LG Software\LG OSD\HotKey.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\LG Software\LG Magnifier\Maglev.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conime.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.searchnu.com/406
uDefault_Page_URL = hxxp://www.lge.com
mDefault_Page_URL = hxxp://www.lge.com
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: H - No File
mURLSearchHooks: H - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - c:\program files\divx\divx plus web player\npdivx32.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: DivX HiQ: {593ddec6-7468-4cdd-90e1-42dadaa222e9} - c:\program files\divx\divx plus web player\npdivx32.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [MobileDocuments] c:\program files\common files\apple\internet services\ubd.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [LG Intelligent Update] "c:\program files\lg_swupdate\giljabistart.exe" Gilautouc
mRun: [KeybdUtility] c:\program files\lg software\lg osd\HotKey.exe
mRun: [SynTPStart] c:\program files\synaptics\syntp\SynTPStart.exe
mRun: [LGSR_Menu] "c:\program files\lg software\lg smart recovery\muitransfer\muistartmenu.exe" "c:\program files\lg software\lg smart recovery" updatewithcreateonce software\cyberlink\PowerRecover
mRun: [LG Magnifier] %ProgramFiles%\LG Software\LG Magnifier\MagnifyingGlass.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [IaNvSrv] c:\program files\intel\intel matrix storage manager\orom\ianvsrv\IaNvSrv.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [BatteryMiser 5] c:\program files\lg software\batterymiser\BatteryMiser5.exe
mRun: [UCam_Menu] "c:\program files\cyberlink\youcam\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\youcam" updatewithcreateonce "software\cyberlink\youcam\1.0"
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot
mRun: [BrMfcWnd] c:\program files\brother\brmfcmon\BrMfcWnd.exe /AUTORUN
mRun: [IndexSearch] "c:\program files\scansoft\paperport\IndexSearch.exe"
mRun: [PPort11reminder] "c:\program files\scansoft\paperport\ereg\ereg.exe" -r "c:\programdata\scansoft\paperport\11\config\ereg\Ereg.ini"
mRun: [ControlCenter3] c:\program files\brother\controlcenter3\brctrcen.exe /autorun
mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe"
mRun: [MobileConnect] %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xportar para o Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
LSP: bmnet.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{054F3BEF-DCDE-48C5-A63F-4098EC0B9CBB} : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{D79A7E95-6A18-4529-9663-C3B1F528166E} : DhcpNameServer = 192.168.1.1
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs:
SEH: BatteryMiser PSAP Class: {26f5978f-6493-4ee3-b114-c0c3accf9d4d} - c:\windows\system32\bmpsap.dll
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\marina\appdata\roaming\mozilla\firefox\profiles\zm0rp9h2.default\
FF - prefs.js: browser.search.selectedEngine - Search Results
FF - prefs.js: browser.startup.homepage - hxxp://www.searchnu.com/406
FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q=
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - component: c:\program files\mozilla firefox\extensions\{ab2ce124-6272-4b12-94a9-7303c7397bd1}\components\SkypeFfComponent.dll
FF - component: c:\users\marina\appdata\roaming\mozilla\firefox\profiles\zm0rp9h2.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e886c}\components\GbMzhBb.dll
FF - component: c:\users\marina\appdata\roaming\mozilla\firefox\profiles\zm0rp9h2.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8874}\components\GbMzhAbn.dll
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\marina\appdata\roaming\mozilla\firefox\profiles\zm0rp9h2.default\extensions\{87f8774f-b485-47e2-a755-a40a8a5e8874}\plugins\npgbfnc_abn.dll
FF - plugin: c:\users\marina\appdata\roaming\mozilla\firefox\profiles\zm0rp9h2.default\extensions\2020player@2020technologies.com\plugins\NP2020Player.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2011-7-11 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-9-13 32592]
R0 iaNvStor;Intel(R) Turbo Memory Controller;c:\windows\system32\drivers\iaNvStor.sys [2009-3-28 228376]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-10-7 230608]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-8-8 40016]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-7-11 295248]
R1 CLBStor;InstantBurn Storage Helper Driver;c:\windows\system32\drivers\CLBStor.sys [2009-5-31 10368]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\AVGIDSAgent.exe [2011-10-12 4433248]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2011-8-2 192776]
R2 FontCache;Serviço de Cache de Fontes do Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2009-6-11 1153368]
R2 VMCService;Vodafone Mobile Connect Service;c:\program files\vodafone\vodafone mobile connect\bin\VMCService.exe [2009-9-11 9216]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2011-7-11 134736]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2011-7-11 24272]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2011-10-4 16720]
R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\drivers\e1y6032.sys [2008-9-2 224384]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\NETw5v32.sys [2008-11-11 3662848]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-7 135664]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2009-12-31 14216]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2009-12-31 8456]
S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [2011-2-19 112128]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2010-9-30 36608]
S3 gupdatem;Serviço do Google Update (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-7 135664]
S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\drivers\ewusbfake.sys [2011-2-19 102912]
S3 OXSDIDRV_x32;Oxford Semi eSATA Filter (x32);c:\windows\system32\drivers\OXSDIDRV_x32.sys [2009-9-28 52656]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S3 wsvd;wsvd;c:\windows\system32\drivers\wsvd.sys [2008-5-26 81704]
.
=============== Created Last 30 ================
.
2012-03-18 12:58:31 -------- d-----w- c:\programdata\boost_interprocess
2012-03-16 14:22:44 -------- dc----w- c:\program files\iTunes
2012-03-14 17:56:09 -------- d-----w- c:\users\marina\appdata\local\Ilivid Player
2012-03-14 17:55:37 -------- dc----w- c:\program files\iLivid
2012-03-14 17:54:48 -------- d-----w- c:\users\marina\appdata\local\PackageAware
2012-03-14 12:26:40 2044416 ----a-w- c:\windows\system32\win32k.sys
2012-03-14 12:26:39 683008 ----a-w- c:\windows\system32\d2d1.dll
2012-03-14 12:26:39 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2012-03-14 12:26:39 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2012-03-14 12:26:39 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2012-03-14 12:26:39 1068544 ----a-w- c:\windows\system32\DWrite.dll
2012-03-14 12:26:37 2409784 ----a-w- c:\program files\windows mail\OESpamFilter.dat
2012-03-14 12:26:22 613376 ----a-w- c:\windows\system32\rdpencom.dll
2012-03-14 12:26:21 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-03-06 15:20:13 -------- dc----w- c:\program files\iPod
2012-03-06 15:20:12 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2012-03-06 15:18:04 -------- dc----w- c:\program files\Bonjour
2012-02-26 11:19:25 -------- d-----w- c:\users\marina\appdata\roaming\EurekaLog
2012-02-18 18:20:08 -------- d-----w- c:\users\marina\.thumbnails
2012-02-18 18:18:43 -------- d-----w- c:\users\marina\.gimp-2.6
2012-02-18 18:17:36 -------- dc----w- c:\program files\GIMP-2.0
.
==================== Find3M ====================
.
2012-02-17 22:03:38 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
============= FINISH: 17:40:26,65 ===============



DDS ATTACH:

.
DDS (Ver_2011-08-26.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume3
Install Date: 28/03/2009 13:53:25
System Uptime: 18/03/2012 17:34:40 (0 hours ago)
.
Motherboard: LG Electronics | | Montevina
Processor: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz | U2E1 | 2401/266mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 148 GiB total, 79,788 GiB free.
D: is FIXED (NTFS) - 139 GiB total, 88,746 GiB free.
G: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Adaptador do Microsoft 6to4
Device ID: ROOT\*6TO4MP\0012
Manufacturer: Microsoft
Name: Adaptador do Microsoft 6to4 #6
PNP Device ID: ROOT\*6TO4MP\0012
Service: tunnel
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
AC3Filter (remove only)
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader 9.5.0 - Português
Apple Application Support
Apple Mobile Device Support
Apple Software Update
µTorrent
Atualização do produto Microsoft Office Excel 2007 Help (KB963678)
Atualização do produto Microsoft Office Powerpoint 2007 Help (KB963669)
Atualização do produto Microsoft Office Word 2007 Help (KB963665)
Audacity 1.2.6
AVG 2012
BatteryMiser 5
Bonjour
Brother MFL-Pro Suite MFC-490CW
CCleaner
CDBurnerXP
CyberLink YouCam
D3DX10
Dropbox
e-Wörterbücher
EASEUS Partition Master 4.1.1 Home Edition
Exact Audio Copy 0.99pb5
EzManual
FreeRIP v3.5
GIMP 2.6.12
Google Earth
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
iCloud
ImgBurn
Instalação do DivX
Intel(R) Network Connections 13.0.42.0
Intel® Matrix Storage Manager e Intel® Turbo Memory
Intel® Turbo Memory
Iomega Encryption
IrfanView (remove only)
IRPF2010 - Declaração de Ajuste Anual e Final de Espólio
IRPF2011 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País
iTunes
Java Auto Updater
Java(TM) 6 Update 30
Lern-o-Mat
LG Fan Mode Tile for Windows Mobility Center
LG Intelligent Update
LG Magnifier
LG OSD
LG Smart Indicator
LG Smart Recovery
LG TouchPad Tile for Windows Mobility Center
MagicDisc 2.7.106
MediaMonkey 4.0
Microsoft .NET Framework 3.5 Language Pack SP1 - ptb
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile PTB Language Pack
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (Portuguese (Brazil)) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007
Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (Portuguese (Brazil)) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (Portuguese (Brazil)) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (Portuguese (Brazil)) 2007
Microsoft Office Word MUI (Portuguese (Brazil)) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
MobileMe Control Panel
Mozilla Firefox 10.0.2 (x86 pt-BR)
MSVCRT
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
neroxml
NVIDIA Drivers
OGA Notifier 2.0.0048.0
Pacote de Idiomas do Microsoft .NET Framework 3.5 SP1 - PTB
Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil)
PaperPort Image Printer
PDFCreator
phase-6 2.1.2.1b
QuickTime
Realtek High Definition Audio Driver
Receitanet Java 2010.02a
RemoteComms External Disk Access
Revo Uninstaller 1.83
SAMSUNG Mobile Composite Device Software
SAMSUNG Mobile Modem Driver Set
Samsung Mobile phone USB driver Software
SAMSUNG Mobile USB Modem 1.0 Software
SAMSUNG Mobile USB Modem Software
Samsung New PC Studio USB Driver Installer
ScanSoft PaperPort 11
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil) (KB2478663)
Security Update for Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil) (KB2518870)
Segoe UI
Shutterfly Express Uploader
Skype Click to Call
Skype™ 5.5
SpeechRedist
Spybot - Search & Destroy
Subtitle Workshop 2.51
Synaptics Pointing Device Driver
Uninstall 1.0.0.1
Unreal Tournament 2004
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2007 suites (KB2596651) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596789) 32-Bit Edition
Update for Microsoft Office Excel 2007 (KB2596596) 32-Bit Edition
VC80CRTRedist - 8.0.50727.4053
VLC media player 1.0.5
Vodafone Mobile Connect Lite
WBFS Manager 3.0
Windows Live Communications Platform
Windows Live Essentials
Windows Live Galeria de Fotos
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
WinRAR
.
==== End Of File ===========================



GMER

GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-03-18 19:05:49
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 FUJITSU_ rev.0000
Running: dizld5nq.exe; Driver: C:\Users\Marina\AppData\Local\Temp\agdiakog.sys


---- System - GMER 1.0.15 ----

SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwOpenProcess [0xA3926F3C]
SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateProcess [0xA3926FE4]
SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateThread [0xA3927080]
SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory [0xA392711C]

INT 0x01 \??\C:\Users\Marina\AppData\Local\Temp\mbr.sys A495FC42

---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!KeSetEvent + 3F1 832EDB74 4 Bytes [3C, 6F, 92, A3]
.text ntkrnlpa.exe!KeSetEvent + 621 832EDDA4 8 Bytes [E4, 6F, 92, A3, 80, 70, 92, ...] {IN AL, 0x6f; XCHG EDX, EAX; MOV [0xa3927080], EAX}
.text ntkrnlpa.exe!KeSetEvent + 681 832EDE04 4 Bytes [1C, 71, 92, A3]
.text C:\Windows\system32\DRIVERS\nvlddmkm.sys section is writeable [0x8F607320, 0x3F5147, 0xE8000020]
? C:\Users\Marina\AppData\Local\Temp\mbr.sys O sistema não pode encontrar o arquivo especificado. !

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Tempo de Execução da Estrutura de Driver em Modo Kernel/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (Tempo de Execução da Estrutura de Driver em Modo Kernel/Microsoft Corporation)
AttachedDevice \Driver\tdx \Device\Tcp tcpipBM.SYS (Bytemobile Kernel Network Provider/Bytemobile, Inc.)
AttachedDevice \Driver\tdx \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Gerenciador de Filtro do Filesystem Microsoft/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\000df05833e2
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001eb21690c9
Reg HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\000df05833e2 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\001eb21690c9 (not active ControlSet)

---- EOF - GMER 1.0.15 ----

Hallo und Herzlich Willkommen!

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:

• "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
  - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
  - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
• Charakteristische Merkmale/Profilinformationen:
  - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] oder Sternchen (*) ersetzen
• Die Systemprüfung und Bereinigung:
  - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
• Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
• Innerhalb der Betreuungszeit:
  - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
• Die Reihenfolge:
  - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
• GECRACKTE SOFTWARE werden hier nicht geduldet!!!!
• Ansonsten unsere Forumsregeln:
  - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
• Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen

► Erster Teil des 3-teiligen Verfahren, werden wir dein System auf Viren untersuchen, bzw nach einem anderen Verursacher suchen:
Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen
Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen!

1.
Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org

• Installieren und per Doppelklick starten.
• Deutsch einstellen und gleich mal die Datenbanken zu aktualisieren - online updaten
• "Komplett Scan durchführen" wählen (überall Haken setzen)
• wenn der Scanvorgang beendet ist, klicke auf "Zeige Resultate"
• Alle Funde - falls MBAM meldet in C:\System Volume Information - den Haken bitte entfernen - markieren und auf "Löschen" - "Ausgewähltes entfernen") klicken.
• Poste das Ergebnis hier in den Thread - den Bericht findest Du unter "Scan-Berichte"

eine bebilderte Anleitung findest Du hier: Anleitung

2.
Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

• Doppelklick auf die OTL.exe
• Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
• Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
• Unter Extra Registry, wähle bitte Use SafeList
• Klicke nun auf Run Scan links oben
• Wenn der Scan beendet wurde werden 2 Logfiles erstellt - OTL.txt und Extras.txt
• Poste die Logfiles in Code-Tags hier in den Thread.

3.
Um festzustellen, ob veraltete oder schädliche Software unter Programme installiert sind, ich würde gerne noch all deine installierten Programme sehen:

• Download den CCleaner - Installer herunter
  
• Software-Lizenzvereinbarung lesen, falls irgendeine Toolbar angeboten wird, bitte abwählen!-> starten -> Falls nötig, auf "Deutsch" einstellen.
• starten-> klick auf `Extras` (um auf deinem System installierte Software zu anzeigen)-> dann auf `Als Textdatei speichern...`
• ein Textdatei wird automatisch erstellt, poste auch dieses Logfile (also die Liste alle installierten Programme...eine Textdatei)

Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B OTL-Logfile o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]

** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw

gruß
kira

Hallo kira,

erstmal vielen Dank, dass du dich um mein Problem annimmst!

Ich habe die Logfiles so wir du´s angefordert hast erstellt, nur bei OTL kamen immer wieder Fehlermeldungen, die ich durchgedrück habe, bis das Logfile erstellt wurde. Der Fehler lautete (ich muss das so sinngemäs aus dem portugiesischen übersetzen, da der Rechner aus Brasilien stammt): Kein Datenträger eingelegt. Lege einen Datenträger in das Laufwerk\Device\Harddisk2\DR17


*

 Malwarebytes Anti-Malware  (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.03.19.04

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Marina :: MARINA-PAP-POP [Administrator]

Schutz: Aktiviert

19/03/2012 19:26:36
mbam-log-2012-03-19 (19-26-36).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 323327
Laufzeit: 1 Stunde(n), 17 Minute(n), 56 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

*

OTL Text

*OTL Logfile:

OTL logfile created on: 20/03/2012 21:42:59 - Run 1
OTL by OldTimer - Version 3.2.39.1     Folder = C:\Users\Marina\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy
 
2,99 Gb Total Physical Memory | 1,29 Gb Available Physical Memory | 43,23% Memory free
6,18 Gb Paging File | 4,44 Gb Available in Paging File | 71,81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,00 Gb Total Space | 79,69 Gb Free Space | 53,85% Space Free | Partition Type: NTFS
Drive D: | 138,59 Gb Total Space | 88,75 Gb Free Space | 64,04% Space Free | Partition Type: NTFS
 
Computer Name: MARINA-PAP-POP | User Name: Marina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Marina\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\AVG\AVG2012\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgemcx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files\LG Software\LG OSD\HotKey.exe (LG Electronics)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe (LG Electronics Inc.)
PRC - C:\Program Files\lg_swupdate\GiljabiStart.exe (BIT LEADER)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe (LG Electronics Inc.)
PRC - C:\Program Files\LG Software\LG Magnifier\Maglev.exe (LG Electronics Inc.)
PRC - C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6310a2050033b0b567428ca55bda4a1b\Microsoft.VisualBasic.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\8b5f54e3b382fc1720c76557ef8c8bc3\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\5c3bfd69e0c268baff0d169e11a6a784\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\7fd6c62196829d1e2dce5a253145d51a\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d9f0f1dc8cbdb81f1ba122d77a6ab710\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65450889f3742aada2a6c0cf8e6173e3\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\137696d0416b65dbc1561152971488b4\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c50133cb67d7c013fa31e1ffb942060b\System.ni.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Xml.resources\2.0.0.0_pt-BR_b77a5c561934e089\System.Xml.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\Program Files\LG Software\BatteryMiser\MovieFilter.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (SBSDWSCService) -- C:\Program Files\Spybot File not found
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AVGIDSAgent) -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (VMCService) -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone)
SRV - (IAANTMON) Intel(R) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (StarOpen) --  File not found
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (lgsnd_filter) -- system32\drivers\lgsnd_filter.sys File not found
DRV - (lgodd_filter) -- system32\drivers\lgodd_filter.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (ew_hwusbdev) -- system32\DRIVERS\ew_hwusbdev.sys File not found
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (Avgldx86) -- C:\Windows\System32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) -- C:\Windows\System32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgrkx86) -- C:\Windows\System32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) -- C:\Windows\System32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgtdix) -- C:\Windows\System32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSFilter) -- C:\Windows\System32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSEH) -- C:\Windows\System32\drivers\AVGIDSEH.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSDriver) -- C:\Windows\System32\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (sptd) -- C:\Windows\System32\drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (OXSDIDRV_x32) Oxford Semi eSATA Filter (x32) -- C:\Windows\System32\drivers\OXSDIDRV_x32.sys ()
DRV - (EuGdiDrv) -- C:\Windows\System32\EuGdiDrv.sys ()
DRV - (epmntdrv) -- C:\Windows\System32\epmntdrv.sys ()
DRV - (ewusbnet) -- C:\Windows\System32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (hwusbfake) -- C:\Windows\System32\drivers\ewusbfake.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (mcdbus) -- C:\Windows\System32\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (FsUsbExDisk) -- C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (iaNvStor) Intel(R) -- C:\Windows\System32\drivers\iaNvStor.sys (Intel Corporation)
DRV - (BMLoad) -- C:\Windows\System32\drivers\BMLoad.sys (Bytemobile, Inc.)
DRV - (tcpipBM) -- C:\Windows\System32\drivers\tcpipBM.sys (Bytemobile, Inc.)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (wsvd) -- C:\Windows\System32\drivers\wsvd.sys (CyberLink)
DRV - (e1yexpress) Intel(R) -- C:\Windows\System32\drivers\e1y6032.sys (Intel Corporation)
DRV - (sscdmdm) -- C:\Windows\System32\drivers\sscdmdm.sys (MCCI Corporation)
DRV - (sscdmdfl) -- C:\Windows\System32\drivers\sscdmdfl.sys (MCCI Corporation)
DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) -- C:\Windows\System32\drivers\sscdbus.sys (MCCI Corporation)
DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (CLBStor) -- C:\Windows\System32\drivers\CLBStor.sys (Cyberlink Co.,Ltd.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.lge.com
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=406&sr=0&q={searchTerms}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.lge.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.searchnu.com/406
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADBF_pt-BR
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={049A2F36-8CA6-447F-A274-9CA1A0A558EB}&mid=a3e48fd0faee27743c204962ae019881-abf13f95fa3c16818523081d271f7fdd087ee822&lang=en&ds=AVG&pr=fr&d=&v=&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=101&systemid=406&sr=0&q={searchTerms}
IE - HKCU\..\SearchScopes\{CFEB595E-C20A-4095-AEDF-AA1D21EC9164}: "URL" = hxxp://search.avg.com/route/?d=4c4562e5&v=6.10.6.4&i=23&tp=chrome&q={searchTerms}&lng={language}&iy=&ychte=us
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Search Results"
FF - prefs.js..browser.search.order.1: "Search Results"
FF - prefs.js..browser.search.selectedEngine: "Search Results"
FF - prefs.js..browser.startup.homepage: "hxxp://www.searchnu.com/406"
FF - prefs.js..extensions.enabledItems: {87F8774F-B485-47E2-A755-A40A8A5E8874}:1.0.14.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {87F8774F-B485-47E2-A755-A40A8A5E886C}:1.0.18.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011/05/16 08:17:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011/05/16 08:17:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/02/01 09:37:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com: C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon\ [2011/11/22 17:09:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/17 23:03:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/14 15:48:06 | 000,000,000 | ---D | M]
 
[2012/03/15 18:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marina\AppData\Roaming\mozilla\Extensions
[2012/03/15 18:15:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions
[2010/04/28 14:52:31 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/07/23 09:03:45 | 000,000,000 | ---D | M] (Modulo de Seguranca - Banco do Brasil SA) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E886C}(280)
[2012/02/26 11:16:20 | 000,000,000 | ---D | M] (Modulo de Protecao) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E8874}
[2011/07/11 22:10:28 | 000,000,000 | ---D | M] (Modulo de Protecao) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E8874}(61)
[2010/11/13 14:33:25 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012/01/07 13:45:36 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/09/01 17:45:36 | 000,000,000 | ---D | M] (20-20 3D Viewer) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\2020Player@2020Technologies.com
[2011/10/15 17:43:09 | 000,003,739 | ---- | M] () -- C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\zm0rp9h2.default\searchplugins\avg-secure-search.xml
[2012/03/14 18:55:06 | 000,002,519 | ---- | M] () -- C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\zm0rp9h2.default\searchplugins\Search_Results.xml
[2012/03/15 18:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/10/30 22:12:22 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/02/01 09:37:11 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG2012\FIREFOX4
[2012/02/17 23:03:24 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/11/10 05:54:13 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/02/16 09:50:49 | 000,001,027 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\buscape.xml
[2012/02/16 09:50:49 | 000,001,212 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mercadolivre.xml
[2012/03/14 18:55:06 | 000,002,519 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2012/02/16 09:50:49 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
[2012/02/16 09:50:49 | 000,001,168 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-br.xml
[2012/02/16 09:50:49 | 000,000,952 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-br.xml
 
O1 HOSTS File: ([2010/09/06 11:44:25 | 000,417,828 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 14419 more lines...
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [BatteryMiser 5] C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe (LG Electronics Inc.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [IaNvSrv] C:\Program Files\Intel\Intel Matrix Storage Manager\OROM\IaNvSrv\IaNvSrv.exe (Intel Corporation)
O4 - HKLM..\Run: [KeybdUtility] C:\Program Files\LG Software\LG OSD\HotKey.exe (LG Electronics)
O4 - HKLM..\Run: [LG Intelligent Update] C:\Program Files\lg_swupdate\giljabistart.exe (BIT LEADER)
O4 - HKLM..\Run: [LG Magnifier] C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe (LG Electronics Inc.)
O4 - HKLM..\Run: [LGSR_Menu] C:\Program Files\LG Software\LG Smart Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [MobileConnect] C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware ] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{054F3BEF-DCDE-48C5-A63F-4098EC0B9CBB}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D79A7E95-6A18-4529-9663-C3B1F528166E}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Marina\Desktop\Marina\Fotos\Fundos de tela\IMG_1885.JPG
O24 - Desktop BackupWallPaper: C:\Users\Marina\Desktop\Marina\Fotos\Fundos de tela\IMG_1885.JPG
O28 - HKLM ShellExecuteHooks: {26F5978F-6493-4ee3-B114-C0C3ACCF9D4D} - C:\Windows\System32\bmpsap.dll ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{01ef0147-f62a-11df-a71a-001e101f859f}\Shell - "" = AutoRun
O33 - MountPoints2\{01ef0147-f62a-11df-a71a-001e101f859f}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{10ddf25f-3e79-11e0-bdbd-001e101f7fb6}\Shell - "" = AutoRun
O33 - MountPoints2\{10ddf25f-3e79-11e0-bdbd-001e101f7fb6}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{149c2856-53bb-11df-b5c6-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{149c2856-53bb-11df-b5c6-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{149c2859-53bb-11df-b5c6-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{149c2859-53bb-11df-b5c6-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{22ca9b64-c728-11de-aef1-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{22ca9b64-c728-11de-aef1-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{28ad8d08-9d34-11de-a63d-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{28ad8d08-9d34-11de-a63d-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{28ad8d2d-9d34-11de-a63d-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{28ad8d2d-9d34-11de-a63d-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{30049679-3c61-11e0-a768-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{30049679-3c61-11e0-a768-001eb21690c9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{3004967a-3c61-11e0-a768-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{3004967a-3c61-11e0-a768-001eb21690c9}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{3e7865ab-e267-11de-a350-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{3e7865ab-e267-11de-a350-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3e7865bb-e267-11de-a350-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{3e7865bb-e267-11de-a350-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{5c71d13d-3546-11e0-bf37-001e101f5396}\Shell - "" = AutoRun
O33 - MountPoints2\{5c71d13d-3546-11e0-bf37-001e101f5396}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{70b1def8-3c64-11e0-9a65-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{70b1def8-3c64-11e0-9a65-001eb21690c9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{a0427ddb-112c-11e0-8c16-001eb21690c9}\Shell\AutoRun\command - "" = J:\PMBP_Win.exe
O33 - MountPoints2\{a707a5f7-65ef-11e0-b0bb-001e101f1f81}\Shell - "" = AutoRun
O33 - MountPoints2\{a707a5f7-65ef-11e0-b0bb-001e101f1f81}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{a8d09ebc-f624-11df-aab6-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{a8d09ebc-f624-11df-aab6-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a8d09ee6-f624-11df-aab6-001e101fb45e}\Shell - "" = AutoRun
O33 - MountPoints2\{a8d09ee6-f624-11df-aab6-001e101fb45e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{cf1d30d0-0132-11e0-806c-001e101f7e04}\Shell - "" = AutoRun
O33 - MountPoints2\{cf1d30d0-0132-11e0-806c-001e101f7e04}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f4cc20cf-5e7f-11df-8db2-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{f4cc20cf-5e7f-11df-8db2-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/03/20 21:41:13 | 000,594,432 | ---- | C] (OldTimer Tools) -- C:\Users\Marina\Desktop\OTL.exe
[2012/03/19 19:24:58 | 000,000,000 | ---D | C] -- C:\Users\Marina\AppData\Roaming\Malwarebytes
[2012/03/19 19:23:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/03/19 19:23:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/03/19 19:23:46 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/03/19 19:23:46 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/03/18 17:24:20 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Marina\Desktop\dds.com
[2012/03/18 13:58:31 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2012/03/16 15:23:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/03/16 15:22:44 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012/03/14 18:56:09 | 000,000,000 | ---D | C] -- C:\Users\Marina\AppData\Local\Ilivid Player
[2012/03/14 18:55:37 | 000,000,000 | ---D | C] -- C:\Program Files\iLivid
[2012/03/14 18:54:48 | 000,000,000 | ---D | C] -- C:\Users\Marina\AppData\Local\PackageAware
[2012/03/14 13:26:40 | 002,044,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012/03/14 13:26:39 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2012/03/14 13:26:39 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2012/03/14 13:26:39 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2012/03/14 13:26:39 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2012/03/14 13:26:39 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2012/03/14 13:26:22 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2012/03/09 14:23:41 | 000,092,672 | ---- | C] (Option^Explicit Software                        vbtechcd@gmail.com) -- C:\Users\Marina\Desktop\KillBox.exe
[2012/03/08 10:36:46 | 000,000,000 | ---D | C] -- C:\Users\Marina\Desktop\Marina
[2012/03/06 16:20:13 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012/03/06 16:20:12 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/03/06 16:19:30 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2012/03/06 16:18:04 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2012/02/26 12:19:25 | 000,000,000 | ---D | C] -- C:\Users\Marina\AppData\Roaming\EurekaLog
 
========== Files - Modified Within 30 Days ==========
 
[2012/03/20 21:41:16 | 000,594,432 | ---- | M] (OldTimer Tools) -- C:\Users\Marina\Desktop\OTL.exe
[2012/03/20 21:39:00 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/03/20 21:21:56 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/03/20 21:20:09 | 092,267,989 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/03/20 21:19:37 | 000,416,282 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/03/20 21:14:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/03/20 21:14:14 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/20 21:14:14 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/19 19:23:48 | 000,000,876 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012/03/18 21:45:17 | 000,643,556 | ---- | M] () -- C:\Windows\System32\prfh0416.dat
[2012/03/18 21:45:17 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/03/18 21:45:17 | 000,125,060 | ---- | M] () -- C:\Windows\System32\prfc0416.dat
[2012/03/18 21:45:17 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/03/18 21:37:48 | 000,192,446 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012/03/18 19:10:24 | 3215,785,984 | -HS- | M] () -- C:\hiberfil.sys
[2012/03/18 19:09:36 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012/03/18 17:33:42 | 000,000,020 | ---- | M] () -- C:\Users\Marina\defogger_reenable
[2012/03/18 17:27:32 | 000,302,592 | ---- | M] () -- C:\Users\Marina\Desktop\dizld5nq.exe
[2012/03/18 17:24:22 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Marina\Desktop\dds.com
[2012/03/18 17:23:34 | 000,050,477 | ---- | M] () -- C:\Users\Marina\Desktop\Defogger.exe
[2012/03/18 09:05:01 | 000,000,680 | ---- | M] () -- C:\Users\Marina\AppData\Local\d3d9caps.dat
[2012/03/16 15:24:06 | 000,001,245 | ---- | M] () -- C:\Windows\System32\mapisvc.inf
[2012/03/16 15:23:24 | 000,001,634 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/03/14 13:38:01 | 000,398,576 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/03/09 14:23:49 | 000,092,672 | ---- | M] (Option^Explicit Software                        vbtechcd@gmail.com) -- C:\Users\Marina\Desktop\KillBox.exe
[2012/03/09 14:21:43 | 000,029,910 | ---- | M] () -- C:\Users\Marina\Documents\cc_20120309_142136.reg
 
========== Files Created - No Company Name ==========
 
[2012/03/19 19:23:48 | 000,000,876 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012/03/18 17:33:28 | 000,000,020 | ---- | C] () -- C:\Users\Marina\defogger_reenable
[2012/03/18 17:27:31 | 000,302,592 | ---- | C] () -- C:\Users\Marina\Desktop\dizld5nq.exe
[2012/03/18 17:23:33 | 000,050,477 | ---- | C] () -- C:\Users\Marina\Desktop\Defogger.exe
[2012/03/16 15:23:24 | 000,001,634 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/03/09 14:21:38 | 000,029,910 | ---- | C] () -- C:\Users\Marina\Documents\cc_20120309_142136.reg
[2012/03/06 16:19:31 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011/08/10 07:19:23 | 000,114,688 | ---- | C] () -- C:\Windows\System32\bmpsap_AVG_RESTORED.dll
[2011/08/10 07:19:23 | 000,114,688 | ---- | C] () -- C:\Windows\System32\bmpsap.dll
[2011/05/12 19:24:28 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2011/05/12 19:24:28 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2011/01/06 18:52:33 | 000,024,880 | ---- | C] () -- C:\Windows\System32\drivers\OXUDIDRV_x32.sys
[2010/12/23 12:43:37 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2010/09/30 08:25:52 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2010/09/30 08:25:52 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010/08/19 21:21:44 | 000,000,000 | ---- | C] () -- C:\Users\Marina\AppData\Local\prvlcl.dat
[2010/06/14 12:28:53 | 000,000,242 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2010/06/14 12:28:53 | 000,000,093 | ---- | C] () -- C:\Windows\brpcfx.ini
[2010/06/14 12:28:33 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2010/06/14 12:28:33 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2010/06/14 12:27:27 | 000,000,050 | ---- | C] () -- C:\Windows\System32\bridf08b.dat
[2010/06/14 12:27:20 | 000,106,496 | ---- | C] () -- C:\Windows\System32\BrMuSNMP.dll
[2010/06/04 14:14:01 | 000,036,864 | ---- | C] () -- C:\Windows\System32\Hooks.dll
[2010/05/02 15:26:37 | 000,000,680 | ---- | C] () -- C:\Users\Marina\AppData\Local\d3d9caps.dat
[2010/04/25 21:31:52 | 000,069,632 | ---- | C] () -- C:\Windows\System32\MSJCE.dll
[2010/04/25 19:14:49 | 000,000,780 | ---- | C] () -- C:\Program Files\IRPF2010 - Declaração de Ajuste Anual e Final de Espólio.lnk

< End of report >
         

--- --- ---
*

OTL Extras
*OTL Logfile:

OTL Extras logfile created on: 20/03/2012 21:42:59 - Run 1
OTL by OldTimer - Version 3.2.39.1     Folder = C:\Users\Marina\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy
 
2,99 Gb Total Physical Memory | 1,29 Gb Available Physical Memory | 43,23% Memory free
6,18 Gb Paging File | 4,44 Gb Available in Paging File | 71,81% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,00 Gb Total Space | 79,69 Gb Free Space | 53,85% Space Free | Partition Type: NTFS
Drive D: | 138,59 Gb Total Space | 88,75 Gb Free Space | 64,04% Space Free | Partition Type: NTFS
 
Computer Name: MARINA-PAP-POP | User Name: Marina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{050F7D48-35C2-4443-A0FA-1E55950FF859}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner | 
"{1341A036-2AF5-4AFF-B194-D4EF3FE4732E}" = rport=138 | protocol=17 | dir=out | app=system | 
"{351695D1-E644-41E0-95C0-B423753F9EEF}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{3F30F431-2455-44E9-9D43-3A5B5317A8EF}" = rport=137 | protocol=17 | dir=out | app=system | 
"{4110AB5B-0F07-43D0-BBE6-3000EA94E777}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{411DCE4A-FA83-49A8-86FC-836591365DFA}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=c:\windows\system32\spoolsv.exe | 
"{418EC3AC-10FC-47B7-A9E5-4F25CE8A9A7C}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{43C8798D-BB0A-4D6E-B823-2D589813E0D8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{5A6D4CB9-04FA-4A9A-920E-DCAC8E3CB30F}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{617107CE-D765-4C2B-A7CF-91142D6782BC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{6DC67FD1-06D5-4958-A708-82DB6E6C2695}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=compartilhamento de arquivo e impressora (serviço de spooler - rpc-epmap) | 
"{70020CB4-E162-46FA-ABA9-5FAFED987310}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{70293B5E-899A-4AC9-9902-68610A22BAE4}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{7AF1D852-8CF4-4609-B97D-1B899CCA994F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{88BC2338-2328-434A-B148-1795C53DE7A6}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{89EAE5E3-7BDF-464E-9934-40D737A8F536}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{A8807CA1-CB9B-4640-8A53-0B5C070D6A78}" = lport=137 | protocol=17 | dir=in | app=system | 
"{B09EE022-1A88-4F38-8481-56FDCCF23C25}" = rport=445 | protocol=6 | dir=out | app=system | 
"{B575CA23-088A-4130-AAE7-ED1902A1E4D0}" = lport=139 | protocol=6 | dir=in | app=system | 
"{C79E7F1D-EC44-4738-96DD-170B605FF8E3}" = lport=138 | protocol=17 | dir=in | app=system | 
"{E30317C5-521A-4BB7-BC68-B9E22A0162DC}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{F1A7696C-C1E5-4BEC-A4B4-E998C760E480}" = rport=139 | protocol=6 | dir=out | app=system | 
"{F930135D-7739-4843-BF42-809C15367253}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{FE7DBD41-AE0E-478E-82C8-A450CF58446D}" = lport=445 | protocol=6 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{082AEAB0-8C12-48B6-AD60-A6F4C259336E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{0AF9C05B-DE4C-4EB1-897A-0118C15CE74E}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{1C825ED8-A17A-4751-8FB0-EC1C19C08AA7}" = protocol=6 | dir=out | app=system | 
"{1EDB83ED-D8D7-40AA-B264-4B830256E4DE}" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"{21A40854-5EBF-455D-B806-7118B4F0DE25}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{2600276F-656B-4C7D-A952-326F889AC8E7}" = protocol=6 | dir=in | app=c:\program files\brother\brmfl08b\faxrx.exe | 
"{28FD9BAE-2F60-4014-BA36-95497BE43D05}" = protocol=17 | dir=in | app=c:\users\marina\appdata\roaming\dropbox\bin\dropbox.exe | 
"{29845018-EF09-4613-BA63-CB244089D940}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"{2CD55D58-4774-49CB-B3A3-5DB3F880E5FD}" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"{2EA96987-40A8-4089-A014-4C42571E4EA1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{3F930C95-073A-4B2B-A96F-B1F7896B2374}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{4B82CEE1-86CE-4289-8FBE-9399C989E07F}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{4C2D91FE-9905-418F-9405-7113FFF9D52F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{549FE7F3-DE2E-4B4D-86AD-C725203256A2}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{55B33DFF-CEAB-4033-8885-EFDA1EE7A95B}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe | 
"{58627D89-14C0-442E-8424-AE13D49B618F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5D97428A-E8BA-4EB7-829F-C83784A5ABBA}" = protocol=1 | dir=in | name=compartilhamento de arquivo e impressora (solicitação de eco - icmpv4-in) | 
"{5E7C4654-1910-465C-9A21-1515DBB89AE4}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | 
"{63A5FE19-B359-436C-8FEA-2D4D84D75EB1}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{64D4813B-E41E-4835-A507-F7A85360BFD7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{689ADEAA-9A6B-41B3-971E-E9E8F2B6F6BB}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{68BA6D52-6B00-4137-99AC-0639212053AD}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{7C089E99-5A34-482B-9491-0A5E4F174BEA}" = protocol=1 | dir=out | name=compartilhamento de arquivo e impressora (solicitação de eco - icmpv4-out) | 
"{7DC3DAFD-CCC3-4B25-98B8-DA635340C5E4}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe | 
"{91FBE44F-C16D-4DA9-AC50-08FFC464081A}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{94383A1E-C8FC-4524-9506-F398AE531292}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe | 
"{9BCDA36E-97EE-4CCB-916A-24FE77306B6A}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe | 
"{A3A3E900-DD6E-4165-A814-9649A1266718}" = protocol=17 | dir=in | app=c:\program files\brother\brmfl08b\faxrx.exe | 
"{ACB5F728-8995-49E3-83FA-2D2AFF3AD645}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe | 
"{B3503CDE-D7A7-4B7D-B82D-20E155A2D634}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{B405EC92-5B75-41AD-BECC-26CD250B41BC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{B6D72A0A-BA0E-4EAC-BEB2-FDC8899BBFB9}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B84B0237-0AC0-4780-91FD-9970C5D087DD}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{B8C6F3E5-BFF7-4EBF-8B29-E6732CCECDBE}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{BE7DD7C4-DFA8-48C3-A295-1B3FE657C5DC}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe | 
"{C28C7C4A-EE9B-4073-95BF-5668112BF15E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C7E32A22-96D1-483D-B61E-484010BF2B0A}" = protocol=58 | dir=in | name=compartilhamento de arquivo e impressora (solicitação de eco - icmpv6-in) | 
"{CA359B24-BD38-47DF-ABDF-C997EB67012A}" = protocol=58 | dir=out | name=compartilhamento de arquivo e impressora (solicitação de eco - icmpv6-out) | 
"{CFC1F526-DC7C-4FF0-9EF0-48F35259D5F7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{D6372ECB-71DF-420E-8EA3-95187017E7A2}" = protocol=6 | dir=in | app=c:\users\marina\appdata\roaming\dropbox\bin\dropbox.exe | 
"{DBBDC36B-A96E-430E-8CBF-951812F9BC05}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"{DD0166FE-FB2D-4D86-B478-A9C72E64C18A}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{EE938EAF-0E08-49D3-8E1F-7E0D925FDC00}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe | 
"{F59F4B0D-B4E6-4A09-81FD-4CECB929B131}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe | 
"TCP Query User{3E39638C-BC8C-4E07-9BCD-12BDEB124A82}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
"TCP Query User{44CD284A-B72B-4AE7-BB76-AEAAAE19B30F}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"TCP Query User{7D1FB336-125E-40EA-B129-C64B4ECEECE7}C:\ut2004\system\ut2004.exe" = protocol=6 | dir=in | app=c:\ut2004\system\ut2004.exe | 
"TCP Query User{C63C5B2F-5D28-4828-BC5A-3036D918B4BF}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"TCP Query User{CE43A9F6-AD68-4DF7-A766-7B59AE470C93}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"TCP Query User{F89F21FB-FFDC-4E68-A8AC-C6288BE4165E}C:\users\marina\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\marina\appdata\roaming\dropbox\bin\dropbox.exe | 
"TCP Query User{FE06CB1F-64C7-4445-AEDB-D757FE57B196}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"UDP Query User{00BAEB75-6FD8-4CBA-BDD8-EFFB23596E5B}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"UDP Query User{184F6019-F367-4DDE-903C-E679D8B7911C}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
"UDP Query User{1B5B1F83-2949-447A-8937-30EC3F7AE32F}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"UDP Query User{1F7BCD57-E8CE-4468-93BF-1708DE6669B5}C:\ut2004\system\ut2004.exe" = protocol=17 | dir=in | app=c:\ut2004\system\ut2004.exe | 
"UDP Query User{4BAB145A-F579-4294-88E6-0AEF67B76FCC}C:\users\marina\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\marina\appdata\roaming\dropbox\bin\dropbox.exe | 
"UDP Query User{68AFB50A-DACE-4F04-ADC0-5515064BE421}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"UDP Query User{7F674415-F198-4BF9-B887-563921978913}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{04FCD5DE-1662-4F99-BDA9-C57212113EF2}" = RemoteComms External Disk Access
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1438B41C-658C-35B7-9253-780F2E0A0B8E}" = Microsoft .NET Framework 3.5 Language Pack SP1 - ptb
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20A15757-4AE4-3C82-9711-863C84AFE6AA}" = Microsoft .NET Framework 4 Client Profile PTB Language Pack
"{2223FC2F-B862-4F83-BC9E-DDF2DADF2859}" = Intel(R) Network Connections 13.0.42.0
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 30
"{2BC2781A-F7F6-452E-95EB-018A522F1B2C}" = PaperPort Image Printer
"{31423F74-36B2-4d24-B10D-CD00BFB7C118}" = Intel® Turbo Memory
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = LG Smart Recovery
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4737AD9F-13AA-4E4C-B86F-B631D557F6A7}" = e-Wörterbücher
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4EFC72DA-2314-4E5D-AC8E-1C954CDB8BBF}" = AVG 2012
"{501451DE-5808-4599-B544-8BD0915B6B24}_is1" = FreeRIP v3.5
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5CADEAC5-0A9C-4680-B850-6A9085ADD23B}" = Windows Live UX Platform Language Pack
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{710BF966-43C8-4216-A8EC-BC4E169FF7C1}" = MobileMe Control Panel
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{79A64F98-1796-4FA2-B5FF-C90F83D8BACD}" = Vodafone Mobile Connect Lite
"{7A8FF745-BBC5-482B-88E4-18D3178249A9}" = ScanSoft PaperPort 11
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{81717D01-32F6-449C-85E1-41AFD678E545}" = LG Intelligent Update
"{8795CBED-55E2-4693-9F14-84EC446935BE}" = SpeechRedist
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B92D97D-DB3D-4926-A8F7-718FE7C5EE18}" = iTunes
"{8CFCEE46-4F58-4C2F-87C5-E4A686B38265}" = LG OSD
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0016-0416-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Portuguese (Brazil)) 2007
"{90120000-0016-0416-0000-0000000FF1CE}_HOMESTUDENTR_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0416-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007
"{90120000-0018-0416-0000-0000000FF1CE}_HOMESTUDENTR_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0416-0000-0000000FF1CE}" = Microsoft Office Word MUI (Portuguese (Brazil)) 2007
"{90120000-001B-0416-0000-0000000FF1CE}_HOMESTUDENTR_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007
"{90120000-001F-0416-0000-0000000FF1CE}_HOMESTUDENTR_{8A524694-0CA4-476A-9301-B1E9D70FC952}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0416-0000-0000000FF1CE}" = Microsoft Office Proofing (Portuguese (Brazil)) 2007
"{90120000-006E-0416-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Portuguese (Brazil)) 2007
"{90120000-006E-0416-0000-0000000FF1CE}_HOMESTUDENTR_{51530CD1-8244-4E0F-B536-BCCC05325C7F}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0416-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007
"{90120000-00A1-0416-0000-0000000FF1CE}_HOMESTUDENTR_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager e Intel® Turbo Memory
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9672CAD2-F310-42D6-9147-E4A4B6ED8395}" = LG Magnifier
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E2EE2F7-33BD-4D30-9E5D-8469A9F32009}" = Windows Live Sync
"{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1046-7B44-A95000000001}" = Adobe Reader 9.5.0 - Português
"{AC816492-1A38-47FA-975E-D5BDAD8ADCAB}" = Lern-o-Mat
"{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{C8192B14-5B56-2E27-6652-8AA650091D6E}" = Shutterfly Express Uploader
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D54A52A8-DF24-4CE8-850B-074CA47DFA74}" = Windows Live Messenger
"{D9461574-5FC0-4641-BBDC-D1038B196F55}" = Brother MFL-Pro Suite MFC-490CW
"{DA7DF8E2-4B8F-4286-97FE-DE3FFFE9B728}" = iCloud
"{DABD50F7-0001-0002-0003-ABCDEFABCDEF}" = LG Smart Indicator
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E55C8F84-160B-41FA-9D41-6210801C0C24}" = BatteryMiser 5
"{E7E84E23-C5C0-4B15-B13A-C63149E59C98}" = AVG 2012
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}" = Apple Mobile Device Support
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos
"{F803D042-5A46-42E8-86CA-C8A0A5C63518}" = Iomega Encryption
"AC3Filter" = AC3Filter (remove only)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Audacity_is1" = Audacity 1.2.6
"AVG" = AVG 2012
"CCleaner" = CCleaner
"com.Shutterfly.ExpressUploader" = Shutterfly Express Uploader
"DivX Setup.divx.com" = Instalação do DivX
"EASEUS Partition Master Home Edition_is1" = EASEUS Partition Master 4.1.1 Home Edition
"Exact Audio Copy" = Exact Audio Copy 0.99pb5
"EzManual" = EzManual
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"ImgBurn" = ImgBurn
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = LG Smart Recovery
"InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer
"IrfanView" = IrfanView (remove only)
"IRPF2010 - Declaração de Ajuste Anual e Final de Espólio" = IRPF2010 - Declaração de Ajuste Anual e Final de Espólio
"IRPF2011" = IRPF2011 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País
"LGFanModeTile" = LG Fan Mode Tile for Windows Mobility Center
"LGTouchPadTile" = LG TouchPad Tile for Windows Mobility Center
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.1.1000
"MediaMonkey_is1" = MediaMonkey 4.0
"Microsoft .NET Framework 3.5 Language Pack SP1 - ptb" = Pacote de Idiomas do Microsoft .NET Framework 3.5 SP1 - PTB
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PTB Language Pack" = Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil)
"Mozilla Firefox 10.0.2 (x86 pt-BR)" = Mozilla Firefox 10.0.2 (x86 pt-BR)
"NVIDIA Drivers" = NVIDIA Drivers
"phase-6" = phase-6 2.1.2.1b
"PROSetDX" = Intel(R) Network Connections 13.0.42.0
"Receitanet Java 2010.02a" = Receitanet Java 2010.02a
"Revo Uninstaller" = Revo Uninstaller 1.83
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SubtitleWorkshop" = Subtitle Workshop 2.51
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"UT2004" = Unreal Tournament 2004
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.0.5
"WBFS Manager 3.0" = WBFS Manager 3.0
"WinGimp-2.0_is1" = GIMP 2.6.12
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 01/10/2011 03:20:32 | Computer Name = Marina-Pap-Pop | Source = ESENT | ID = 467
Description = Windows (2648) Windows: Banco de dados C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb:
 o índice indexRecovery da tabela SystemIndex_Gthr está corrompido (0).
 
Error - 01/10/2011 03:20:32 | Computer Name = Marina-Pap-Pop | Source = ESENT | ID = 467
Description = Windows (2648) Windows: Banco de dados C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb:
 o índice indexRecovery da tabela SystemIndex_Gthr está corrompido (0).
 
Error - 01/10/2011 03:20:32 | Computer Name = Marina-Pap-Pop | Source = ESENT | ID = 467
Description = Windows (2648) Windows: Banco de dados C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb:
 o índice indexRecovery da tabela SystemIndex_Gthr está corrompido (0).
 
Error - 01/10/2011 03:22:15 | Computer Name = Marina-Pap-Pop | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 02/10/2011 13:41:42 | Computer Name = Marina-Pap-Pop | Source = WinMgmt | ID = 10
Description = 
 
Error - 02/10/2011 13:41:43 | Computer Name = Marina-Pap-Pop | Source = VMCService | ID = 0
Description = conflictManagerTypeValue
 
Error - 02/10/2011 13:43:27 | Computer Name = Marina-Pap-Pop | Source = ESENT | ID = 467
Description = Windows (2496) Windows: Banco de dados C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb:
 o índice indexRecovery da tabela SystemIndex_Gthr está corrompido (0).
 
Error - 02/10/2011 13:43:27 | Computer Name = Marina-Pap-Pop | Source = ESENT | ID = 467
Description = Windows (2496) Windows: Banco de dados C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb:
 o índice indexRecovery da tabela SystemIndex_Gthr está corrompido (0).
 
Error - 02/10/2011 13:43:27 | Computer Name = Marina-Pap-Pop | Source = ESENT | ID = 467
Description = Windows (2496) Windows: Banco de dados C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb:
 o índice indexRecovery da tabela SystemIndex_Gthr está corrompido (0).
 
Error - 02/10/2011 13:43:27 | Computer Name = Marina-Pap-Pop | Source = ESENT | ID = 467
Description = Windows (2496) Windows: Banco de dados C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb:
 o índice indexRecovery da tabela SystemIndex_Gthr está corrompido (0).
 
[ System Events ]
Error - 15/03/2012 06:01:48 | Computer Name = Marina-Pap-Pop | Source = ACPI | ID = 327693
Description = : O controlador incorporado (EC) não respondeu dentro do tempo limite
 especificado. Isso pode indicar erro no hardware ou firmware do EC ou que o BIOS
 está acessando o EC incorretamente. Verifique com o fabricante do computador se
 há uma versão do BIOS mais atualizada. Em algumas situações, esse erro pode fazer
 que o computador funcione incorretamente.
 
Error - 15/03/2012 06:23:17 | Computer Name = Marina-Pap-Pop | Source = ACPI | ID = 327693
Description = : O controlador incorporado (EC) não respondeu dentro do tempo limite
 especificado. Isso pode indicar erro no hardware ou firmware do EC ou que o BIOS
 está acessando o EC incorretamente. Verifique com o fabricante do computador se
 há uma versão do BIOS mais atualizada. Em algumas situações, esse erro pode fazer
 que o computador funcione incorretamente.
 
Error - 15/03/2012 06:23:25 | Computer Name = Marina-Pap-Pop | Source = ACPI | ID = 327693
Description = : O controlador incorporado (EC) não respondeu dentro do tempo limite
 especificado. Isso pode indicar erro no hardware ou firmware do EC ou que o BIOS
 está acessando o EC incorretamente. Verifique com o fabricante do computador se
 há uma versão do BIOS mais atualizada. Em algumas situações, esse erro pode fazer
 que o computador funcione incorretamente.
 
Error - 15/03/2012 08:44:12 | Computer Name = Marina-Pap-Pop | Source = ACPI | ID = 327693
Description = : O controlador incorporado (EC) não respondeu dentro do tempo limite
 especificado. Isso pode indicar erro no hardware ou firmware do EC ou que o BIOS
 está acessando o EC incorretamente. Verifique com o fabricante do computador se
 há uma versão do BIOS mais atualizada. Em algumas situações, esse erro pode fazer
 que o computador funcione incorretamente.
 
Error - 15/03/2012 08:45:52 | Computer Name = Marina-Pap-Pop | Source = ACPI | ID = 327693
Description = : O controlador incorporado (EC) não respondeu dentro do tempo limite
 especificado. Isso pode indicar erro no hardware ou firmware do EC ou que o BIOS
 está acessando o EC incorretamente. Verifique com o fabricante do computador se
 há uma versão do BIOS mais atualizada. Em algumas situações, esse erro pode fazer
 que o computador funcione incorretamente.
 
Error - 15/03/2012 08:46:03 | Computer Name = Marina-Pap-Pop | Source = ACPI | ID = 327693
Description = : O controlador incorporado (EC) não respondeu dentro do tempo limite
 especificado. Isso pode indicar erro no hardware ou firmware do EC ou que o BIOS
 está acessando o EC incorretamente. Verifique com o fabricante do computador se
 há uma versão do BIOS mais atualizada. Em algumas situações, esse erro pode fazer
 que o computador funcione incorretamente.
 
Error - 16/03/2012 10:20:45 | Computer Name = Marina-Pap-Pop | Source = Service Control Manager | ID = 7031
Description = 
 
Error - 18/03/2012 08:53:27 | Computer Name = Marina-Pap-Pop | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 18/03/2012 12:35:28 | Computer Name = Marina-Pap-Pop | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 18/03/2012 14:10:45 | Computer Name = Marina-Pap-Pop | Source = Service Control Manager | ID = 7000
Description = 
 
 
< End of report >
         

--- --- ---
*

CCleaner
*

AC3Filter (remove only)		05/05/2011	4,04MB	
Adobe AIR	Adobe Systems Inc.	22/11/2011	29,4MB	2.5.1.17730
Adobe Flash Player 10 ActiveX	Adobe Systems Incorporated	28/05/2009		10.0.22.87
Adobe Flash Player 11 Plugin	Adobe Systems Incorporated	16/02/2012		11.1.102.62
Adobe Reader 9.5.0 - Português	Adobe Systems Incorporated	13/01/2012	111,8MB	9.5.0
Apple Application Support	Apple Inc.	15/03/2012	61,0MB	2.1.7
Apple Mobile Device Support	Apple Inc.	15/03/2012	24,4MB	5.1.1.4
Apple Software Update	Apple Inc.	05/03/2012	2,38MB	2.1.3.127
Audacity 1.2.6		22/03/2011	8,43MB	
AVG 2012	AVG Technologies	31/01/2012	105,0MB	2012.0.1913
BatteryMiser 5		27/03/2009	0,84MB	
Bonjour	Apple Inc.	05/03/2012	0,73MB	3.0.0.10
Brother MFL-Pro Suite MFC-490CW	Brother Industries, Ltd.	11/05/2011	19,0MB	1.1.5.0
CCleaner	Piriform	19/03/2012	3,55MB	3.16
CDBurnerXP	CDBurnerXP	25/03/2011	12,1MB	4.3.8.2523
CyberLink YouCam	CyberLink Corp.	27/03/2009	39,5MB	1.0.2609
Dropbox	Dropbox, Inc.	31/05/2011	24,0MB	1.1.35
e-Wörterbücher		03/06/2010	1,75MB	
EASEUS Partition Master 4.1.1 Home Edition	EASEUS	30/12/2009	33,1MB	
Exact Audio Copy 0.99pb5	Andre Wiethoff	06/02/2010	8,64MB	0.99pb5
EzManual		21/02/2011	32,9MB	
FreeRIP v3.5	MGShareware	21/12/2010	5,66MB	3.5
GIMP 2.6.12	The GIMP Team	17/02/2012	68,3MB	2.6.12
Google Earth	Google	18/11/2011	92,8MB	6.1.0.5001
iCloud	Apple Inc.	15/03/2012	24,3MB	1.1.0.40
ImgBurn	LIGHTNING UK!	27/12/2009	2,13MB	2.5.0.0
Instalação do DivX	DivX, LLC	15/05/2011	2,00MB	2.5.0.8
Intel(R) Network Connections 13.0.42.0	Intel	10/11/2008	61,1MB	13.0.42.0
Intel® Matrix Storage Manager e Intel® Turbo Memory	Intel Corporation	27/03/2009	54,2MB	
Intel® Turbo Memory	Intel Corporation	27/03/2009	54,2MB	
Iomega Encryption	Iomega an EMC Company	05/01/2011	6,75MB	1.00.0003
IrfanView (remove only)		22/01/2010	1,85MB	
IRPF2010 - Declaração de Ajuste Anual e Final de Espólio		24/04/2010	13,7MB	
IRPF2011 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País	Receita Federal do Brasil	25/04/2011	21,7MB	1.0
iTunes	Apple Inc.	15/03/2012	157,4MB	10.6.0.40
Java(TM) 6 Update 30	Sun Microsystems, Inc.	24/04/2010	94,5MB	6.0.300
Lern-o-Mat		16/02/2012	2,17MB	
LG Fan Mode Tile for Windows Mobility Center	LG Electronics Inc.	27/03/2009	0,19MB	
LG Intelligent Update	LG Electronics Inc.	27/03/2009	1,41MB	4.00.0919.02
LG Magnifier	LG Electronics Inc.	10/11/2008	3,19MB	8.05.1901
LG OSD	LG Electronics Inc.	10/11/2008	7,34MB	8.06.2716
LG Smart Indicator	LG Electronics Inc.	10/11/2008	1,54MB	8.10.3001
LG Smart Recovery	LG Electronics Inc	10/11/2008	382MB	5.5.2227
LG TouchPad Tile for Windows Mobility Center	LG Electronics Inc.	27/03/2009	0,18MB	
MagicDisc 2.7.106		26/08/2011		
Malwarebytes Anti-Malware Version 1.60.1.1000	Malwarebytes Corporation	18/03/2012	7,60MB	1.60.1.1000
MediaMonkey 4.0	Ventis Media Inc.	06/01/2012	48,1MB	4.0
Microsoft .NET Framework 3.5 SP1	Microsoft Corporation	28/05/2009	27,8MB	
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	17/12/2010	120,3MB	4.0.30319
Microsoft Office File Validation Add-In	Microsoft Corporation	13/09/2011	7,95MB	14.0.5130.5003
Microsoft Office Home and Student 2007	Microsoft Corporation	21/02/2012	303MB	12.0.6612.1000
Microsoft Silverlight	Microsoft Corporation	15/02/2012	79,9MB	4.1.10111.0
Microsoft SQL Server 2005 Compact Edition [ENU]	Microsoft Corporation	23/11/2009	1,74MB	3.1.0000
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053	Microsoft Corporation	28/07/2009	0,25MB	8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	16/06/2011	0,29MB	8.0.61001
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	14/10/2011	0,57MB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	14/10/2011	0,58MB	9.0.30729.6161
MobileMe Control Panel	Apple Inc.	13/12/2011	12,2MB	3.1.8.0
Mozilla Firefox 10.0.2 (x86 pt-BR)	Mozilla	16/02/2012	41,7MB	10.0.2
MSXML 4.0 SP2 (KB927978)	Microsoft Corporation	23/11/2009	34,00KB	4.20.9841.0
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	23/11/2009	1,28MB	4.20.9870.0
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	24/11/2009	1,34MB	4.20.9876.0
NVIDIA Drivers		27/03/2009		
Pacote de Idiomas do Microsoft .NET Framework 3.5 SP1 - PTB	Microsoft Corporation	31/05/2009	36,9MB	
Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil)	Microsoft Corporation	17/12/2010	10,4MB	4.0.30319
PaperPort Image Printer	Nuance Communications, Inc.	07/05/2011	0,51MB	1.00.0000
PDFCreator	Frank Heindörfer, Philip Chinery	22/12/2010	25,9MB	1.1.0
phase-6 2.1.2.1b	phase-6	19/02/2011	80,4MB	2.1.2.1b
QuickTime	Apple Inc.	13/12/2011	73,3MB	7.71.80.42
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	10/11/2008	22,2MB	6.0.1.5683
Receitanet Java 2010.02a		24/04/2010	5,43MB	
RemoteComms External Disk Access	PLX Technology	05/01/2011	5,55MB	1.25.0003
Revo Uninstaller 1.83	VS Revo Group	29/05/2009	2,59MB	1.83
SAMSUNG Mobile Composite Device Software		29/09/2010		
SAMSUNG Mobile Modem Driver Set		29/09/2010		
Samsung Mobile phone USB driver Software		29/09/2010		
SAMSUNG Mobile USB Modem 1.0 Software		29/09/2010		
SAMSUNG Mobile USB Modem Software		29/09/2010		
Samsung New PC Studio USB Driver Installer	Samsung Electronics Co., Ltd.	29/09/2010		1.00.0000
ScanSoft PaperPort 11	Nuance Communications, Inc.	11/05/2011	130,4MB	11.1.0000
Shutterfly Express Uploader	Shutterfly, Inc.	17/07/2010	1,84MB	1.0.0.4
Skype Click to Call	Skype Technologies S.A.	29/10/2011	26,1MB	5.6.8442
Skype™ 5.5	Skype Technologies S.A.	29/10/2011	17,0MB	5.5.124
SpeechRedist	Epic Games Inc.	26/08/2011	58,8MB	1.0.0
Spybot - Search & Destroy	Safer Networking Limited	09/06/2009	51,1MB	1.6.2
Subtitle Workshop 2.51		31/05/2009	2,18MB	
Synaptics Pointing Device Driver	Synaptics	10/11/2008	13,6MB	10.0.19.0
Uninstall 1.0.0.1		12/11/2010	9,96MB	
Unreal Tournament 2004		26/08/2011	5.523MB	
VLC media player 1.0.5	VideoLAN Team	07/02/2010	76,1MB	1.0.5
Vodafone Mobile Connect Lite	Vodafone	21/11/2011	25,7MB	9.4.3.17550
WBFS Manager 3.0	AlexDP	27/12/2009	3,48MB	3.0
Windows Live Essentials	Microsoft Corporation	02/11/2010		15.4.3502.0922
Windows Live Sync	Microsoft Corporation	23/11/2009	2,79MB	14.0.8089.726
WinRAR		10/08/2009	3,73MB	
µTorrent		07/03/2011	0,38MB	2.2.0
         

*

Viele Grüsse

Malícia

machst Du Onlinbanking?

1.
Deinstalliere:

-> Malwarebytes Anti-Malware - benötigen wir nicht mehr

->

Spybot

- würde ich nicht mehr empfehlen, da erfüllt nicht die neue Schutzanforderungen und Lösungen Schutz vor Malware bzw gegenüber ganz neuen Herausforderungen arbeitet nicht zufriedenstellend
meiner Meinung nach bietet nicht mehr ausreichenden Schutz gegen "moderne Malwarearten"...
nur mehr unnötige Belastung für das System

2.
Windows Defender:
Neben 1 AV-Scanner und 1 Firewall garnix erst nötig und nicht Empfehlenswert aktiv laufen lassen, weil dadurch können sich in die Quere kommen. Bitte dich ihn so zu deaktivieren: -> Aktivieren und Deaktivieren von Windows Defender
► Nach einem Neustart (falls noch existirt) unter "Start-> ausführen-> "msconfig" (reinschreiben ohne ""-> OK -> Systemstart kontrolliere, ob mitläuft?! - ggf Häckhen rausnehmen
► Unter Dienste:
Start -> Ausführen -> "Services.msc" -> (reinschreiben ohne ""-> OK" - "Eigenschaften"-> "Stop" -> Starttyp "Deaktiviert" auswählen

3.
Windows im abgesicherten Modus starten:
♦ PC neu starten
♦ Drücke gleich mehrmals die F8-Taste. Am besten mehrmals und schnell nacheinander drücken.
♦ Wähle in der Liste, die nun erscheint, den abgesicherten Modus aus.

4.

Achtung wichtig!:
Falls Du selber im Logfile Änderungen vorgenommen hast, musst Du durch die Originalbezeichnung ersetzen und so in Script einfügen! sonst funktioniert nicht!
(Benutzerordner, dein Name oder sonstige Änderungen durch X, Stern oder andere Namen ersetzt)

Fixen mit OTL

• Starte die OTL.exe.
• Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
• Kopiere folgendes Skript:

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.lge.com
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=101&systemid=406&sr=0&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.lge.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchnu.com/406
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADBF_pt-BR
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={049A2F36-8CA6-447F-A274-9CA1A0A558EB}&mid=a3e48fd0faee27743c204962ae019881-abf13f95fa3c16818523081d271f7fdd087ee822&lang=en&ds=AVG&pr=fr&d=&v=&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=101&systemid=406&sr=0&q={searchTerms}
IE - HKCU\..\SearchScopes\{CFEB595E-C20A-4095-AEDF-AA1D21EC9164}: "URL" = http://search.avg.com/route/?d=4c4562e5&v=6.10.6.4&i=23&tp=chrome&q={searchTerms}&lng={language}&iy=&ychte=us
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..browser.search.defaultenginename: "Search Results"
FF - prefs.js..browser.search.order.1: "Search Results"
FF - prefs.js..browser.search.selectedEngine: "Search Results"
FF - prefs.js..browser.startup.homepage: "hxxp://www.searchnu.com/406"
FF - prefs.js..keyword.URL: "hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q="
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
[2012/03/14 18:55:06 | 000,002,519 | ---- | M] () -- C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\zm0rp9h2.default\searchplugins\Search_Results.xml
[2012/02/16 09:50:49 | 000,001,027 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\buscape.xml
[2012/02/16 09:50:49 | 000,001,212 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mercadolivre.xml
[2012/03/14 18:55:06 | 000,002,519 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2012/02/16 09:50:49 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
[2012/02/16 09:50:49 | 000,001,168 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-br.xml
[2012/02/16 09:50:49 | 000,000,952 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-br.xml
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{01ef0147-f62a-11df-a71a-001e101f859f}\Shell - "" = AutoRun
O33 - MountPoints2\{01ef0147-f62a-11df-a71a-001e101f859f}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{10ddf25f-3e79-11e0-bdbd-001e101f7fb6}\Shell - "" = AutoRun
O33 - MountPoints2\{10ddf25f-3e79-11e0-bdbd-001e101f7fb6}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{149c2856-53bb-11df-b5c6-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{149c2856-53bb-11df-b5c6-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{149c2859-53bb-11df-b5c6-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{149c2859-53bb-11df-b5c6-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{22ca9b64-c728-11de-aef1-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{22ca9b64-c728-11de-aef1-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{28ad8d08-9d34-11de-a63d-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{28ad8d08-9d34-11de-a63d-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{28ad8d2d-9d34-11de-a63d-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{28ad8d2d-9d34-11de-a63d-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{30049679-3c61-11e0-a768-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{30049679-3c61-11e0-a768-001eb21690c9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{3004967a-3c61-11e0-a768-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{3004967a-3c61-11e0-a768-001eb21690c9}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{3e7865ab-e267-11de-a350-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{3e7865ab-e267-11de-a350-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3e7865bb-e267-11de-a350-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{3e7865bb-e267-11de-a350-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{5c71d13d-3546-11e0-bf37-001e101f5396}\Shell - "" = AutoRun
O33 - MountPoints2\{5c71d13d-3546-11e0-bf37-001e101f5396}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{70b1def8-3c64-11e0-9a65-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{70b1def8-3c64-11e0-9a65-001eb21690c9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{a0427ddb-112c-11e0-8c16-001eb21690c9}\Shell\AutoRun\command - "" = J:\PMBP_Win.exe
O33 - MountPoints2\{a707a5f7-65ef-11e0-b0bb-001e101f1f81}\Shell - "" = AutoRun
O33 - MountPoints2\{a707a5f7-65ef-11e0-b0bb-001e101f1f81}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{a8d09ebc-f624-11df-aab6-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{a8d09ebc-f624-11df-aab6-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a8d09ee6-f624-11df-aab6-001e101fb45e}\Shell - "" = AutoRun
O33 - MountPoints2\{a8d09ee6-f624-11df-aab6-001e101fb45e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{cf1d30d0-0132-11e0-806c-001e101f7e04}\Shell - "" = AutoRun
O33 - MountPoints2\{cf1d30d0-0132-11e0-806c-001e101f7e04}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f4cc20cf-5e7f-11df-8db2-001eb21690c9}\Shell - "" = AutoRun
O33 - MountPoints2\{f4cc20cf-5e7f-11df-8db2-001eb21690c9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
[2012/03/14 18:56:09 | 000,000,000 | ---D | C] -- C:\Users\Marina\AppData\Local\Ilivid Player
[2012/03/14 18:55:37 | 000,000,000 | ---D | C] -- C:\Program Files\iLivid
[2012/03/20 21:39:00 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/03/20 21:21:56 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

:Files
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
         

• und füge es hier ein:
• Schließe alle Programme.
• Klicke auf den Fix Button.
• Klick auf .
• OTL verlangt einen Neustart. Bitte zulassen.
• Nach dem Neustart findest Du ein Textdokument.
  Kopiere den Inhalt hier in Deinen Thread.

Im normalen Modus weiter:

5.
erneut einen Scan mit OTL:

• Doppelklick auf die OTL.exe
• Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
• Oben findest Du ein Kästchen mit Ausgabe.
  Wähle bitte Standard-Ausgabe
• Unter Extra-Registrierung wähle bitte Benutze SafeList.
• Mache Häckchen bei LOP- und Purity-Prüfung.
• Klicke nun auf Scan links oben.
• Wenn der Scan beendet wurde werden zwei Logfiles erstellt.
  Du findest die Logfiles auf Deinem Desktop => OTL.txt und Extras.txt
• Poste die Logfiles in Code-Tags hier in den Thread.

Hallo Kira,

Ja ich mache Onlinebanking.

Spybot habe ich gelöscht.

Hier die Logfiles:

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFEB595E-C20A-4095-AEDF-AA1D21EC9164}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFEB595E-C20A-4095-AEDF-AA1D21EC9164}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Prefs.js: "Search Results" removed from browser.search.defaultenginename
Prefs.js: "Search Results" removed from browser.search.order.1
Prefs.js: "Search Results" removed from browser.search.selectedEngine
Prefs.js: "hxxp://www.searchnu.com/406" removed from browser.startup.homepage
Prefs.js: "hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q=" removed from keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
File C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll not found.
C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\zm0rp9h2.default\searchplugins\Search_Results.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\buscape.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\mercadolivre.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\Search_Results.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\twitter.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-br.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\yahoo-br.xml moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{01ef0147-f62a-11df-a71a-001e101f859f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01ef0147-f62a-11df-a71a-001e101f859f}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{01ef0147-f62a-11df-a71a-001e101f859f}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01ef0147-f62a-11df-a71a-001e101f859f}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10ddf25f-3e79-11e0-bdbd-001e101f7fb6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{10ddf25f-3e79-11e0-bdbd-001e101f7fb6}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10ddf25f-3e79-11e0-bdbd-001e101f7fb6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{10ddf25f-3e79-11e0-bdbd-001e101f7fb6}\ not found.
File E:\setup_vmc_lite.exe /checkApplicationPresence not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{149c2856-53bb-11df-b5c6-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{149c2856-53bb-11df-b5c6-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{149c2856-53bb-11df-b5c6-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{149c2856-53bb-11df-b5c6-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{149c2859-53bb-11df-b5c6-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{149c2859-53bb-11df-b5c6-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{149c2859-53bb-11df-b5c6-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{149c2859-53bb-11df-b5c6-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{22ca9b64-c728-11de-aef1-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22ca9b64-c728-11de-aef1-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{22ca9b64-c728-11de-aef1-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22ca9b64-c728-11de-aef1-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{28ad8d08-9d34-11de-a63d-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{28ad8d08-9d34-11de-a63d-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{28ad8d08-9d34-11de-a63d-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{28ad8d08-9d34-11de-a63d-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{28ad8d2d-9d34-11de-a63d-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{28ad8d2d-9d34-11de-a63d-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{28ad8d2d-9d34-11de-a63d-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{28ad8d2d-9d34-11de-a63d-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{30049679-3c61-11e0-a768-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30049679-3c61-11e0-a768-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{30049679-3c61-11e0-a768-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30049679-3c61-11e0-a768-001eb21690c9}\ not found.
File E:\setup_vmc_lite.exe /checkApplicationPresence not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3004967a-3c61-11e0-a768-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3004967a-3c61-11e0-a768-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3004967a-3c61-11e0-a768-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3004967a-3c61-11e0-a768-001eb21690c9}\ not found.
File F:\setup_vmc_lite.exe /checkApplicationPresence not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e7865ab-e267-11de-a350-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3e7865ab-e267-11de-a350-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e7865ab-e267-11de-a350-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3e7865ab-e267-11de-a350-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e7865bb-e267-11de-a350-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3e7865bb-e267-11de-a350-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3e7865bb-e267-11de-a350-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3e7865bb-e267-11de-a350-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c71d13d-3546-11e0-bf37-001e101f5396}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5c71d13d-3546-11e0-bf37-001e101f5396}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5c71d13d-3546-11e0-bf37-001e101f5396}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5c71d13d-3546-11e0-bf37-001e101f5396}\ not found.
File E:\setup_vmc_lite.exe /checkApplicationPresence not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{70b1def8-3c64-11e0-9a65-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70b1def8-3c64-11e0-9a65-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{70b1def8-3c64-11e0-9a65-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70b1def8-3c64-11e0-9a65-001eb21690c9}\ not found.
File E:\setup_vmc_lite.exe /checkApplicationPresence not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a0427ddb-112c-11e0-8c16-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a0427ddb-112c-11e0-8c16-001eb21690c9}\ not found.
File J:\PMBP_Win.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a707a5f7-65ef-11e0-b0bb-001e101f1f81}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a707a5f7-65ef-11e0-b0bb-001e101f1f81}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a707a5f7-65ef-11e0-b0bb-001e101f1f81}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a707a5f7-65ef-11e0-b0bb-001e101f1f81}\ not found.
File E:\setup_vmc_lite.exe /checkApplicationPresence not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a8d09ebc-f624-11df-aab6-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a8d09ebc-f624-11df-aab6-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a8d09ebc-f624-11df-aab6-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a8d09ebc-f624-11df-aab6-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a8d09ee6-f624-11df-aab6-001e101fb45e}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a8d09ee6-f624-11df-aab6-001e101fb45e}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a8d09ee6-f624-11df-aab6-001e101fb45e}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a8d09ee6-f624-11df-aab6-001e101fb45e}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cf1d30d0-0132-11e0-806c-001e101f7e04}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cf1d30d0-0132-11e0-806c-001e101f7e04}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cf1d30d0-0132-11e0-806c-001e101f7e04}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cf1d30d0-0132-11e0-806c-001e101f7e04}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f4cc20cf-5e7f-11df-8db2-001eb21690c9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f4cc20cf-5e7f-11df-8db2-001eb21690c9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f4cc20cf-5e7f-11df-8db2-001eb21690c9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f4cc20cf-5e7f-11df-8db2-001eb21690c9}\ not found.
File E:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ not found.
File E:\setup_vmc_lite.exe /checkApplicationPresence not found.
C:\Users\Marina\AppData\Local\Ilivid Player folder moved successfully.
C:\Program Files\iLivid\imageformats folder moved successfully.
C:\Program Files\iLivid folder moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Configura‡Æo de IP do Windows
NÆo foi poss¡vel liberar o Cache do DNS Resolver: A fun‡Æo falhou durante a execu‡Æo.
C:\Users\Marina\Desktop\cmd.bat deleted successfully.
C:\Users\Marina\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56502 bytes
 
User: Default User
 
User: Marina
->Temp folder emptied: 38230035 bytes
->Temporary Internet Files folder emptied: 110508429 bytes
->Java cache emptied: 1273464 bytes
->FireFox cache emptied: 141793173 bytes
->Flash cache emptied: 57878 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5818 bytes
RecycleBin emptied: 13130440 bytes
 
Total Files Cleaned = 291,00 mb
 
 
OTL by OldTimer - Version 3.2.39.1 log created on 03212012_223252

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...
         

*

*OTL Logfile:

OTL logfile created on: 21/03/2012 22:42:45 - Run 2
OTL by OldTimer - Version 3.2.39.1     Folder = C:\Users\Marina\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy
 
2,99 Gb Total Physical Memory | 1,72 Gb Available Physical Memory | 57,31% Memory free
6,18 Gb Paging File | 4,88 Gb Available in Paging File | 78,84% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,00 Gb Total Space | 80,01 Gb Free Space | 54,06% Space Free | Partition Type: NTFS
Drive D: | 138,59 Gb Total Space | 88,75 Gb Free Space | 64,04% Space Free | Partition Type: NTFS
 
Computer Name: MARINA-PAP-POP | User Name: Marina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012/03/20 21:41:16 | 000,594,432 | ---- | M] (OldTimer Tools) -- C:\Users\Marina\Desktop\OTL.exe
PRC - [2012/02/23 12:30:40 | 000,059,240 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
PRC - [2012/01/24 17:24:26 | 002,416,480 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2011/11/28 01:19:04 | 001,229,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2011/10/12 06:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
PRC - [2011/10/10 06:23:34 | 000,973,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe
PRC - [2011/09/08 19:53:26 | 000,743,264 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2011/08/15 05:21:40 | 000,337,760 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2011/08/02 05:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2009/09/11 12:33:54 | 000,009,216 | ---- | M] (Vodafone) -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/10/11 21:10:56 | 003,026,944 | ---- | M] (LG Electronics) -- C:\Program Files\LG Software\LG OSD\HotKey.exe
PRC - [2008/09/12 18:01:28 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/09/12 18:01:24 | 000,182,808 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008/09/04 21:05:16 | 000,697,648 | ---- | M] (LG Electronics Inc.) -- C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe
PRC - [2008/08/28 20:46:54 | 000,296,240 | ---- | M] (BIT LEADER) -- C:\Program Files\lg_swupdate\GiljabiStart.exe
PRC - [2008/08/12 19:21:12 | 006,265,376 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008/05/19 20:25:56 | 000,144,688 | ---- | M] (LG Electronics Inc.) -- C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe
PRC - [2008/05/19 20:24:54 | 000,263,472 | ---- | M] (LG Electronics Inc.) -- C:\Program Files\LG Software\LG Magnifier\Maglev.exe
PRC - [2008/01/31 16:29:06 | 000,196,608 | R--- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe
PRC - [2007/10/09 07:23:32 | 000,102,400 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPStart.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012/02/16 10:47:51 | 001,711,616 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6310a2050033b0b567428ca55bda4a1b\Microsoft.VisualBasic.ni.dll
MOD - [2012/02/16 10:47:22 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\8b5f54e3b382fc1720c76557ef8c8bc3\System.Management.ni.dll
MOD - [2012/02/16 10:45:23 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\5c3bfd69e0c268baff0d169e11a6a784\System.Runtime.Remoting.ni.dll
MOD - [2012/02/16 10:13:46 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\7fd6c62196829d1e2dce5a253145d51a\System.Configuration.ni.dll
MOD - [2012/02/16 10:05:48 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d9f0f1dc8cbdb81f1ba122d77a6ab710\System.Xml.ni.dll
MOD - [2012/02/16 10:05:17 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65450889f3742aada2a6c0cf8e6173e3\System.Windows.Forms.ni.dll
MOD - [2012/02/16 10:05:05 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\137696d0416b65dbc1561152971488b4\System.Drawing.ni.dll
MOD - [2012/02/16 10:03:00 | 007,953,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c50133cb67d7c013fa31e1ffb942060b\System.ni.dll
MOD - [2011/11/01 23:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/11/01 23:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/10/13 17:50:20 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll
MOD - [2009/03/31 19:04:25 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pt-BR_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009/03/31 19:04:25 | 000,159,744 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Xml.resources\2.0.0.0_pt-BR_b77a5c561934e089\System.Xml.resources.dll
MOD - [2009/03/31 19:04:25 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_pt-BR_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
MOD - [2009/03/30 05:42:13 | 000,372,736 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
MOD - [2008/09/17 00:18:06 | 000,132,608 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2008/04/25 15:46:10 | 000,024,576 | ---- | M] () -- C:\Program Files\LG Software\BatteryMiser\MovieFilter.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2011/10/12 06:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2011/08/02 05:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2009/09/11 12:33:54 | 000,009,216 | ---- | M] (Vodafone) [Auto | Running] -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe -- (VMCService)
SRV - [2008/09/12 18:01:28 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2008/01/21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [File_System | On_Demand | Stopped] --  -- (StarOpen)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\lgsnd_filter.sys -- (lgsnd_filter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\lgodd_filter.sys -- (lgodd_filter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2011/10/07 06:23:48 | 000,230,608 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2011/10/04 06:21:16 | 000,016,720 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2011/09/13 05:30:10 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/08/08 05:08:58 | 000,040,016 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/07/11 00:14:38 | 000,295,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2011/07/11 00:14:02 | 000,024,272 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2011/07/11 00:14:00 | 000,023,120 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AVGIDSEH.sys -- (AVGIDSEH)
DRV - [2011/07/11 00:13:58 | 000,134,736 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2011/03/26 22:36:05 | 000,436,792 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2009/09/28 09:55:38 | 000,052,656 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\OXSDIDRV_x32.sys -- (OXSDIDRV_x32) Oxford Semi eSATA Filter (x32)
DRV - [2009/09/16 19:55:00 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2009/08/26 15:45:10 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv)
DRV - [2009/06/29 17:59:02 | 000,112,128 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2009/06/29 17:59:02 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbfake.sys -- (hwusbfake)
DRV - [2009/04/09 13:38:26 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009/02/24 17:42:14 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2009/01/08 08:42:54 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2008/10/15 04:58:04 | 000,228,376 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iaNvStor.sys -- (iaNvStor) Intel(R)
DRV - [2008/10/09 13:50:08 | 000,022,528 | ---- | M] (Bytemobile, Inc.) [Kernel | Boot | Unknown] -- C:\Windows\System32\drivers\BMLoad.sys -- (BMLoad)
DRV - [2008/10/09 13:50:04 | 000,018,816 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\tcpipBM.sys -- (tcpipBM)
DRV - [2008/09/04 01:54:00 | 007,583,552 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008/06/25 22:30:50 | 003,662,848 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Intel(R)
DRV - [2008/05/26 14:54:28 | 000,081,704 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wsvd.sys -- (wsvd)
DRV - [2008/03/27 03:39:58 | 000,224,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1y6032.sys -- (e1yexpress) Intel(R)
DRV - [2008/02/22 14:33:02 | 000,114,304 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2008/02/22 14:33:02 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2008/02/22 14:33:00 | 000,087,936 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2007/05/23 19:33:58 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr)
DRV - [2007/02/15 18:35:52 | 000,010,368 | ---- | M] (Cyberlink Co.,Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\CLBStor.sys -- (CLBStor)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
IE - HKLM\..\SearchScopes,DefaultScope = 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: "hxxp://www.searchnu.com/406"
FF - prefs.js..extensions.enabledItems: {87F8774F-B485-47E2-A755-A40A8A5E8874}:1.0.14.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {87F8774F-B485-47E2-A755-A40A8A5E886C}:1.0.18.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "hxxp://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011/05/16 08:17:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011/05/16 08:17:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/02/01 09:37:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com: C:\Program Files\Vodafone\Vodafone Mobile Connect\Optimization Client\addon\ [2011/11/22 17:09:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/17 23:03:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/14 15:48:06 | 000,000,000 | ---D | M]
 
[2012/03/15 18:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marina\AppData\Roaming\mozilla\Extensions
[2012/03/15 18:15:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions
[2010/04/28 14:52:31 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/07/23 09:03:45 | 000,000,000 | ---D | M] (Modulo de Seguranca - Banco do Brasil SA) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E886C}(280)
[2012/02/26 11:16:20 | 000,000,000 | ---D | M] (Modulo de Protecao) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E8874}
[2011/07/11 22:10:28 | 000,000,000 | ---D | M] (Modulo de Protecao) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E8874}(61)
[2010/11/13 14:33:25 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012/01/07 13:45:36 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/09/01 17:45:36 | 000,000,000 | ---D | M] (20-20 3D Viewer) -- C:\Users\Marina\AppData\Roaming\mozilla\Firefox\Profiles\zm0rp9h2.default\extensions\2020Player@2020Technologies.com
[2011/10/15 17:43:09 | 000,003,739 | ---- | M] () -- C:\Users\Marina\AppData\Roaming\Mozilla\Firefox\Profiles\zm0rp9h2.default\searchplugins\avg-secure-search.xml
[2012/03/15 18:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/10/30 22:12:22 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/02/01 09:37:11 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG2012\FIREFOX4
[2012/02/17 23:03:24 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/11/10 05:54:13 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
 
O1 HOSTS File: ([2010/09/06 11:44:25 | 000,417,828 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 14419 more lines...
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [BatteryMiser 5] C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe (LG Electronics Inc.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [IaNvSrv] C:\Program Files\Intel\Intel Matrix Storage Manager\OROM\IaNvSrv\IaNvSrv.exe (Intel Corporation)
O4 - HKLM..\Run: [KeybdUtility] C:\Program Files\LG Software\LG OSD\HotKey.exe (LG Electronics)
O4 - HKLM..\Run: [LG Intelligent Update] C:\Program Files\lg_swupdate\giljabistart.exe (BIT LEADER)
O4 - HKLM..\Run: [LG Magnifier] C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe (LG Electronics Inc.)
O4 - HKLM..\Run: [LGSR_Menu] C:\Program Files\LG Software\LG Smart Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [MobileConnect] C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{054F3BEF-DCDE-48C5-A63F-4098EC0B9CBB}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D79A7E95-6A18-4529-9663-C3B1F528166E}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Marina\Desktop\Marina\Fotos\Fundos de tela\IMG_1885.JPG
O24 - Desktop BackupWallPaper: C:\Users\Marina\Desktop\Marina\Fotos\Fundos de tela\IMG_1885.JPG
O28 - HKLM ShellExecuteHooks: {26F5978F-6493-4ee3-B114-C0C3ACCF9D4D} - C:\Windows\System32\bmpsap.dll ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/03/21 22:32:52 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/03/20 21:41:13 | 000,594,432 | ---- | C] (OldTimer Tools) -- C:\Users\Marina\Desktop\OTL.exe
[2012/03/19 19:24:58 | 000,000,000 | ---D | C] -- C:\Users\Marina\AppData\Roaming\Malwarebytes
[2012/03/19 19:23:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/03/18 17:24:20 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Marina\Desktop\dds.com
[2012/03/18 13:58:31 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2012/03/16 15:23:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/03/16 15:22:44 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012/03/14 18:54:48 | 000,000,000 | ---D | C] -- C:\Users\Marina\AppData\Local\PackageAware
[2012/03/14 13:26:40 | 002,044,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012/03/14 13:26:39 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2012/03/14 13:26:39 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2012/03/14 13:26:39 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2012/03/14 13:26:39 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2012/03/14 13:26:39 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2012/03/14 13:26:22 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2012/03/09 14:23:41 | 000,092,672 | ---- | C] (Option^Explicit Software                        vbtechcd@gmail.com) -- C:\Users\Marina\Desktop\KillBox.exe
[2012/03/08 10:36:46 | 000,000,000 | ---D | C] -- C:\Users\Marina\Desktop\Marina
[2012/03/06 16:20:13 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012/03/06 16:20:12 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/03/06 16:19:30 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2012/03/06 16:18:04 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2012/02/26 12:19:25 | 000,000,000 | ---D | C] -- C:\Users\Marina\AppData\Roaming\EurekaLog
 
========== Files - Modified Within 30 Days ==========
 
[2012/03/21 22:35:06 | 000,192,446 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012/03/21 22:35:06 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/21 22:35:06 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/21 22:35:03 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/03/21 22:35:00 | 3215,785,984 | -HS- | M] () -- C:\hiberfil.sys
[2012/03/21 22:26:37 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012/03/21 22:26:07 | 000,643,556 | ---- | M] () -- C:\Windows\System32\prfh0416.dat
[2012/03/21 22:26:07 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/03/21 22:26:07 | 000,125,060 | ---- | M] () -- C:\Windows\System32\prfc0416.dat
[2012/03/21 22:26:07 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/03/21 18:32:16 | 092,351,246 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/03/20 21:53:50 | 000,000,774 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/03/20 21:41:16 | 000,594,432 | ---- | M] (OldTimer Tools) -- C:\Users\Marina\Desktop\OTL.exe
[2012/03/20 21:19:37 | 000,416,282 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/03/18 17:33:42 | 000,000,020 | ---- | M] () -- C:\Users\Marina\defogger_reenable
[2012/03/18 17:27:32 | 000,302,592 | ---- | M] () -- C:\Users\Marina\Desktop\dizld5nq.exe
[2012/03/18 17:24:22 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Marina\Desktop\dds.com
[2012/03/18 17:23:34 | 000,050,477 | ---- | M] () -- C:\Users\Marina\Desktop\Defogger.exe
[2012/03/18 09:05:01 | 000,000,680 | ---- | M] () -- C:\Users\Marina\AppData\Local\d3d9caps.dat
[2012/03/16 15:24:06 | 000,001,245 | ---- | M] () -- C:\Windows\System32\mapisvc.inf
[2012/03/16 15:23:24 | 000,001,634 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/03/14 13:38:01 | 000,398,576 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/03/09 14:23:49 | 000,092,672 | ---- | M] (Option^Explicit Software                        vbtechcd@gmail.com) -- C:\Users\Marina\Desktop\KillBox.exe
[2012/03/09 14:21:43 | 000,029,910 | ---- | M] () -- C:\Users\Marina\Documents\cc_20120309_142136.reg
 
========== Files Created - No Company Name ==========
 
[2012/03/21 22:35:00 | 3215,785,984 | -HS- | C] () -- C:\hiberfil.sys
[2012/03/18 17:33:28 | 000,000,020 | ---- | C] () -- C:\Users\Marina\defogger_reenable
[2012/03/18 17:27:31 | 000,302,592 | ---- | C] () -- C:\Users\Marina\Desktop\dizld5nq.exe
[2012/03/18 17:23:33 | 000,050,477 | ---- | C] () -- C:\Users\Marina\Desktop\Defogger.exe
[2012/03/16 15:23:24 | 000,001,634 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/03/09 14:21:38 | 000,029,910 | ---- | C] () -- C:\Users\Marina\Documents\cc_20120309_142136.reg
[2012/03/06 16:19:31 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011/08/10 07:19:23 | 000,114,688 | ---- | C] () -- C:\Windows\System32\bmpsap_AVG_RESTORED.dll
[2011/08/10 07:19:23 | 000,114,688 | ---- | C] () -- C:\Windows\System32\bmpsap.dll
[2011/05/12 19:24:28 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2011/05/12 19:24:28 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2011/01/06 18:52:33 | 000,024,880 | ---- | C] () -- C:\Windows\System32\drivers\OXUDIDRV_x32.sys
[2010/12/23 12:43:37 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2010/09/30 08:25:52 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2010/09/30 08:25:52 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010/08/19 21:21:44 | 000,000,000 | ---- | C] () -- C:\Users\Marina\AppData\Local\prvlcl.dat
[2010/06/14 12:28:53 | 000,000,242 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2010/06/14 12:28:53 | 000,000,093 | ---- | C] () -- C:\Windows\brpcfx.ini
[2010/06/14 12:28:33 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2010/06/14 12:28:33 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2010/06/14 12:27:27 | 000,000,050 | ---- | C] () -- C:\Windows\System32\bridf08b.dat
[2010/06/14 12:27:20 | 000,106,496 | ---- | C] () -- C:\Windows\System32\BrMuSNMP.dll
[2010/06/04 14:14:01 | 000,036,864 | ---- | C] () -- C:\Windows\System32\Hooks.dll
[2010/05/02 15:26:37 | 000,000,680 | ---- | C] () -- C:\Users\Marina\AppData\Local\d3d9caps.dat
[2010/04/25 21:31:52 | 000,069,632 | ---- | C] () -- C:\Windows\System32\MSJCE.dll
[2010/04/25 19:14:49 | 000,000,780 | ---- | C] () -- C:\Program Files\IRPF2010 - Declaração de Ajuste Anual e Final de Espólio.lnk
 
========== LOP Check ==========
 
[2011/10/15 17:47:12 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\AVG2012
[2010/06/17 18:34:08 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\AVG9
[2011/03/26 23:39:23 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Boilsoft
[2011/02/19 14:32:11 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Bytemobile
[2010/03/31 00:34:13 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Canneverbe Limited
[2010/07/18 15:37:41 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\com.Shutterfly.ExpressUploader
[2011/12/12 09:35:56 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Dropbox
[2010/11/13 14:41:41 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\DVDVideoSoft
[2010/11/13 14:33:24 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\DVDVideoSoftIEHelpers
[2012/02/26 12:19:25 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\EurekaLog
[2012/02/18 19:47:16 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\gtk-2.0
[2010/03/05 20:31:45 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\ImgBurn
[2010/09/17 17:58:37 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\IrfanView
[2012/02/17 11:09:50 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Lern-o-Mat
[2012/02/26 12:46:07 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\MediaMonkey
[2011/02/20 19:43:06 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Phase6
[2010/09/30 08:25:31 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Samsung
[2010/10/24 10:21:35 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\ScanSoft
[2012/01/07 20:56:55 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\uTorrent
[2011/02/19 14:32:11 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Vodafone
[2011/02/22 10:00:12 | 000,000,000 | ---D | M] -- C:\Users\Marina\AppData\Roaming\Vodafone Mobile Connect
[2012/03/21 22:26:37 | 000,032,514 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         

--- --- ---
*

Viele Grüsse

Malícia

1.
Ich würde Dir vorsichtshalber raten, dein Passwort zu ändern (man sollte alle 3-4 Monate machen)
z.B. Login-, Mail- oder Website-Passwörter
Tipps:
Die sichere Passwort-Wahl - (sollte man eigentlich regelmäßigen Abständen ca. alle 3-5 Monate ändern)
auch noch hier unter: Sicheres Kennwort (Password)

2.
noch immer nicht abgestellt!
Windows Defender:
Neben 1 AV-Scanner und 1 Firewall garnix erst nötig und nicht Empfehlenswert aktiv laufen lassen, weil dadurch können sich in die Quere kommen. Bitte dich ihn so zu deaktivieren: -> Aktivieren und Deaktivieren von Windows Defender
► Nach einem Neustart (falls noch existirt) unter "Start-> ausführen-> "msconfig" (reinschreiben ohne ""-> OK -> Systemstart kontrolliere, ob mitläuft?! - ggf Häckhen rausnehmen
► Unter Dienste:
Start -> Ausführen -> "Services.msc" -> (reinschreiben ohne ""-> OK" - "Eigenschaften"-> "Stop" -> Starttyp "Deaktiviert" auswählen

3.

µTorrent
         

die Nutzung der von Filesharing (Filesharing (deutsch "Dateifreigabe" oder "gemeinsamer Dateizugriff", wörtlich "Dateien teilen") )- Plattformen ...

Internet-Tauschbörsen gehören leider zu den unseriösesten Anbietern, und dort werden sehr viele Schädlinge verbreitet, hierbei sollte deshalb, wenn überhaupt, nur ganz besonders vorsichtig umgegangen werden ! Laut Studien sind bei den Tauschbörsen bei 45% der zum Download angebotenen Dateien, Viren oder Würmer und sonstige Schädlinge enthalten!
Hinzu kommt noch, dass die meisten Downloads von diesen Tauschbörsen eh illegal sind, und damit die Nutzer verleitet werden, „Straftaten“ zu begehen!

Selbst wenn du glaubst, dass Du ein „sicheres“ P2P Programm verwendest, nicht mal das Programm selbst sicher, da Du wirst Daten von "uncertified Quellen" teilen, und diese werden häufig angesteckt...
Ausserdem nicht nur trojanische Pferde oder andere Virentypen eine direkt Verbindung brauchen, sondern der Verwendung von µtorrent & Co, "telefonieren auch nach Hause", wenn auch noch keine Beweise vorliegen (zumindest teilweise nicht) und solchen Clients erlaubt, würde ich nicht empfehlen!
Solange du solche Programme auf dein PC hast, wirst Du Dich laufend mit etwas Problematik konfrontieren müssen!

4.

Achtung wichtig!:
Falls Du selber im Logfile Änderungen vorgenommen hast, musst Du durch die Originalbezeichnung ersetzen und so in Script einfügen! sonst funktioniert nicht!
(Benutzerordner, dein Name oder sonstige Änderungen durch X, Stern oder andere Namen ersetzt)

Fixen mit OTL

• Starte die OTL.exe.
• Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
• Kopiere folgendes Skript:

:OTL
FF - prefs.js..browser.startup.homepage: "http://www.searchnu.com/406"
FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=101&systemid=406&sr=0&q="

:Files
C:\Users\Marina\Desktop\dizld5nq.exe
ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[resethosts]
         

• und füge es hier ein:
• Schließe alle Programme.
• Klicke auf den Fix Button.
• Klick auf .
• OTL verlangt einen Neustart. Bitte zulassen.
• Nach dem Neustart findest Du ein Textdokument.
  Kopiere den Inhalt hier in Deinen Thread.

5.
Adobe Reader aktualisieren :
- Bei Installation aufpassen/mitlesen!: Wenn irgendeine Software, Toolbar etc angeboten wird, bitte abwählen! - (z.B "McAfee Security Scan Plus")
Adobe Reader
Oder: Adobe starten-> gehe auf "Hilfe"-> "Nach Update suchen..."

6.
Deine Javaversion ist nicht aktuell!
Da aufgrund alter Sicherheitslücken ist Java sehr anfällig, deinstalliere zunächst alle vorhandenen Java-Versionen:
→ Systemsteuerung → Software → deinstallieren...
→ Rechner neu aufstarten
→ Downloade nun die Offline-Version von Java "Empfohlen Version 6 Update 31 " von Oracle herunter
Achte darauf, eventuell angebotene Toolbars abwählen (den Haken bei der Toolbar entfernen)!

7.
reinige dein System mit CCleaner:

• "CCleaner"→ "Analysieren"→ Klick auf den Button "Start CCleaner"
• "Registry""Fehler suchen"→ "Fehler beheben"→ "Alle beheben"
• Starte dein System neu auf

8.

• lade Dir SUPERAntiSpyware FREE Edition herunter.
  Achte darauf, eventuell angebotene Toolbar nicht mitzuinstallieren, also während der Installation den Haken bei der Toolbar (falls nötig), entfernen.
• installiere das Programm und update online.
• starte SUPERAntiSpyware und klicke auf "Ihren Computer durchsuchen"
• setze ein Häkchen bei "Kompletter Scan" und klicke auf "Weiter"
• anschließend alle gefundenen Schadprogramme werden aufgelistet, bei alle Funde Häkchen setzen und mit "OK" bestätigen
• auf "Weiter" klicken dann "OK" und auf "Fertig stellen"
• um die Ergebnisse anzuzeigen: auf "Präferenzen" dann auf den "Statistiken und Protokolle" klicken
• drücke auf "Protokoll anzeigen" - anschließend diesen Bericht bitte speichern und hier posten

9.
Auch auf USB-Sticks, selbstgebrannten Datenträgern, externen Festplatten und anderen Datenträgern können Viren transportiert werden. Man muss daher durch regelmäßige Prüfungen auf Schäden, die durch Malware ("Worm.Win32.Autorun") verursacht worden sein können, überwacht werden. Hierfür sind ser gut geegnet und empfohlen, die auf dem Speichermedium gesicherten Daten, mit Hilfe des kostenlosen Online Scanners zu prüfen.
Schließe jetzt alle externe Datenträgeran (USB Sticks etc) Deinen Rechner an, dabei die Hochstell-Taste [Shift-Taste] gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. (So verhindest Du die Ausführung der AUTORUN-Funktion) - Man kann die AUTORUN-Funktion aber auch generell abschalten.►Anleitung

10.
-> Führe dann einen Komplett-Systemcheck mit Eset Online Scanner (NOD32)Kostenlose Online Scanner durch
Achtung!: >>Du sollst nicht die Antivirus-Sicherheitssoftware installieren, sondern dein System nur online scannen<<

11.
MBR mit aswMBR von Avast prüfen

Lade aswMBR.exe von Avast herunter und speichere das Tool auf deinem Desktop (nicht woanders hin).
XP Benutzer: Doppelklick auf die aswMBR.exe, um das Tool zu starten.
Vista und Windows 7 Benutzer: Rechtsklick auf die aswMBR.exe und Als Administrator starten wählen.
Es wird sich ein Eingabe-Fenster mit einigen Angaben öffnen.

Klicke Scan, um den Suchlauf zu starten.

Wenn der Scan beendet ist, was mit Scan finished sucessfull! gemeldet wird, klicke Save log, um das Logfile zu speichern.
Poste mir den Inhalt von aswASW.log vom Desktop hier in den Thread.

12.
erneut einen Scan mit OTL:

• Doppelklick auf die OTL.exe
• Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
• Oben findest Du ein Kästchen mit Ausgabe.
  Wähle bitte Standard-Ausgabe
• Unter Extra-Registrierung wähle bitte Benutze SafeList.
• Mache Häckchen bei LOP- und Purity-Prüfung.
• Klicke nun auf Scan links oben.
• Wenn der Scan beendet wurde werden zwei Logfiles erstellt.
  Du findest die Logfiles auf Deinem Desktop => OTL.txt und Extras.txt
• Poste die Logfiles in Code-Tags hier in den Thread.

► berichte erneut über den Zustand des Computers. Ob noch Probleme auftreten, wenn ja, welche?