Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden"

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 01.08.2012, 19:52   #1
melomana
 
Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden" - Standard

Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden"



Hallo,

vor ca. einer Stunde wurde plötzlich der Bildschirm meines Laptops weiß und es erschien die Meldung "Website kann nicht angezeigt werden". Der Ton des Video-clips, den ich mir gerade angeschaut hatte war jedoch weiterhin zu hören. Nach Systemneustart war kurz der normale Desktop mit Taskleiste zu sehen (also alles normal, leider jedoch nicht lange genug um irgendetwas machen zu können), doch dann erschien wieder die Meldung "Website kann nicht angezeigt werden", obwohl mein Browser nicht geöffnet war.

Ich habe leider kein anderes Administratorkonto und wenn ich ein Programm von einem anderen Benutzer aus als Administrator ausführen möchte, funktioniert das scheinbar nicht richtig (ich hab bestimmt irgendwelche blöden Einstellungen gemacht beim Jugendschutz oder so). Deshalb haben die Checkliste- Schritte glaube ich nicht geklappt.

Hier trotzdem mal der Inhalt der Dateien:

defogger_disable:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:12 on 01/08/2012 (Privat)

Checking for autostart values...
HKCU\~\Run values retrieved.
Unable to open HKLM\~\Run key (5)
HKLM\~\Run values retrieved.

Checking for services/drivers...
Unable to read sptd.sys
Error opening service: SPTD (5)


-=E.O.F=-

______________________________________________________________

OTL.txt:OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 01.08.2012 20:17:14 - Run 1
OTL by OldTimer - Version 3.2.55.0     Folder = C:\Users\Privat\Downloads
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,36 Gb Total Physical Memory | 1,27 Gb Available Physical Memory | 53,70% Memory free
4,71 Gb Paging File | 3,42 Gb Available in Paging File | 72,55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 195,21 Gb Total Space | 96,95 Gb Free Space | 49,66% Space Free | Partition Type: NTFS
 
Computer Name: SCHENKTOP | User Name: Privat | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.08.01 20:17:00 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\Privat\Downloads\OTL.exe
PRC - [2012.07.23 10:30:46 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2012.03.26 17:08:12 | 000,931,200 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Security Client\msseces.exe
PRC - [2011.08.16 09:02:10 | 001,571,432 | ---- | M] (Realtek Semiconductor) -- C:\Programme\Realtek\Audio\HDA\RtHDVBg.exe
PRC - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.06.01 11:32:06 | 000,506,712 | ---- | M] (Dolby Laboratories Inc.) -- C:\Dolby PCEE4\pcee4.exe
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010.11.12 15:24:10 | 001,602,344 | ---- | M] (ELAN Microelectronics Corp.) -- C:\Programme\Elantech\ETDCtrlHelper.exe
PRC - [2010.11.12 15:24:08 | 001,812,264 | ---- | M] (ELAN Microelectronics Corp.) -- C:\Programme\Elantech\ETDCtrl.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.07.23 10:30:40 | 002,003,424 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2012.07.05 09:33:54 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll
MOD - [2012.07.05 09:33:42 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012.07.05 09:33:35 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012.07.05 09:33:29 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll
MOD - [2012.05.11 13:08:36 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll
MOD - [2012.05.11 13:03:02 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012.05.11 13:02:58 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c764ad83cd3287fc59a3dc02e08ad1ea\System.Xml.ni.dll
MOD - [2012.05.11 13:02:56 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.05.11 13:02:55 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.05.11 13:02:47 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012.02.20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012.02.20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011.08.31 20:13:52 | 000,094,208 | ---- | M] () -- C:\Windows\System32\IccLibDll.dll
MOD - [2011.07.29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.11.13 02:02:21 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2012.07.23 10:30:45 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Unknown] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.04.04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Unknown] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.03.26 17:03:40 | 000,214,952 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- c:\Programme\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012.03.26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- c:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2011.03.16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Unknown] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2009.07.14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\drivers\massfilter_hs.sys -- (massfilter_hs)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\drivers\massfilter.sys -- (massfilter)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\bScsiSDx.sys -- (bScsiSDx)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\bScsiMSx.sys -- (bScsiMSx)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\b57xdmp.sys -- (b57xdmp)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\b57xdbd.sys -- (b57xdbd)
DRV - [2012.08.01 19:30:51 | 000,029,904 | ---- | M] (Microsoft Corporation) [Kernel | System | Unknown] -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{95F66CBC-2891-46B7-B407-2547D4B6EC4A}\MpKsl584ee54c.sys -- (MpKsl584ee54c)
DRV - [2012.03.20 20:44:12 | 000,074,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2012.01.21 23:40:53 | 000,722,416 | ---- | M] () [Kernel | Boot | Unknown] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2011.09.08 04:09:00 | 010,328,896 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011.09.08 04:09:00 | 000,024,896 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Unknown] -- C:\Windows\System32\drivers\nvpciflt.sys -- (nvpciflt)
DRV - [2011.07.20 00:30:18 | 002,193,920 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2011.05.09 14:42:06 | 000,361,000 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x)
DRV - [2010.11.20 14:30:17 | 000,296,064 | ---- | M] (Microsoft Corporation) [Kernel | System | Unknown] -- C:\Windows\System32\drivers\vpcvmm.sys -- (vpcvmm)
DRV - [2010.11.20 14:30:17 | 000,172,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\vpchbus.sys -- (vpcbus)
DRV - [2010.11.20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Unknown] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Unknown] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 12:50:38 | 000,078,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\vpcusb.sys -- (vpcusb)
DRV - [2010.11.20 12:50:37 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | System | Unknown] -- C:\Windows\System32\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009.07.14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Unknown] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.02.22 23:38:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.07.23 10:30:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.04.26 18:36:54 | 000,000,000 | ---D | M]
 
[2012.01.24 00:22:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Privat\AppData\Roaming\mozilla\Extensions
[2012.04.26 11:12:34 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011.12.09 01:42:52 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.07.23 10:30:47 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.04.09 18:22:44 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.07.23 10:30:38 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.07.23 10:30:38 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.07.23 10:30:38 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.07.23 10:30:38 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.07.23 10:30:38 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.07.23 10:30:38 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Dolby Advanced Audio v2] C:\Dolby PCEE4\pcee4.exe (Dolby Laboratories Inc.)
O4 - HKLM..\Run: [ETDCtrl] C:\Programme\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [zigjreijjahmgom] C:\ProgramData\zigjreij.exe ()
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil32_11_2_202_235_Plugin.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Programme\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Programme\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{100019A4-0EA2-45A8-A38B-5F2EEFFCCF7F}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7B916A38-3789-4CF4-AC54-6F3175ECA587}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.08.01 19:59:52 | 000,000,000 | ---D | C] -- C:\Users\Privat\AppData\Roaming\Skype
[2012.08.01 19:59:02 | 000,000,000 | ---D | C] -- C:\Users\Privat\AppData\Roaming\ICQ
[2012.08.01 17:39:17 | 000,000,000 | ---D | C] -- C:\ProgramData\uvarzrqrjzalnkl
[2012.07.21 12:39:54 | 000,000,000 | ---D | C] -- C:\Program Files\hpmonitor
[2012.07.21 12:38:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
[2012.07.21 12:38:27 | 000,000,000 | ---D | C] -- C:\Program Files\MyPhoneExplorer
[2012.07.20 22:59:07 | 000,000,000 | ---D | C] -- C:\Program Files\Avanquest update
[2012.07.20 22:59:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest
[2012.07.20 22:58:03 | 000,000,000 | ---D | C] -- C:\ProgramData\BVRP Software
[2012.07.20 22:56:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson
 
========== Files - Modified Within 30 Days ==========
 
[2012.08.01 20:13:12 | 000,024,632 | ---- | M] () -- C:\Users\Privat\Desktop\defogger_disable.lnk
[2012.08.01 20:10:50 | 000,000,000 | ---- | M] () -- C:\Users\Privat\defogger_reenable
[2012.08.01 20:05:54 | 000,283,320 | ---- | M] () -- C:\Users\Privat\Desktop\notenschluessel.jpg
[2012.08.01 19:59:50 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2012.08.01 19:28:57 | 000,000,680 | RHS- | M] () -- C:\Users\Privat\ntuser.pol
[2012.08.01 19:28:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.08.01 19:27:45 | 000,014,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.08.01 19:27:45 | 000,014,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.08.01 19:20:27 | 1898,336,256 | -HS- | M] () -- C:\hiberfil.sys
[2012.08.01 17:39:21 | 000,000,051 | ---- | M] () -- C:\ProgramData\bnsmswowbmfqmht
[2012.08.01 17:39:07 | 000,061,440 | ---- | M] () -- C:\ProgramData\zigjreij.exe
[2012.07.21 12:38:34 | 000,002,015 | ---- | M] () -- C:\Users\Public\Desktop\MyPhoneExplorer.lnk
[2012.07.20 22:27:27 | 000,658,140 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.07.20 22:27:27 | 000,618,646 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.07.20 22:27:27 | 000,131,640 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.07.20 22:27:27 | 000,107,926 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.07.18 13:21:43 | 000,385,896 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
 
========== Files Created - No Company Name ==========
 
[2012.08.01 20:13:12 | 000,024,632 | ---- | C] () -- C:\Users\Privat\Desktop\defogger_disable.lnk
[2012.08.01 20:10:50 | 000,000,000 | ---- | C] () -- C:\Users\Privat\defogger_reenable
[2012.08.01 20:05:52 | 000,283,320 | ---- | C] () -- C:\Users\Privat\Desktop\notenschluessel.jpg
[2012.08.01 17:39:20 | 000,061,440 | ---- | C] () -- C:\ProgramData\zigjreij.exe
[2012.08.01 17:39:09 | 000,000,051 | ---- | C] () -- C:\ProgramData\bnsmswowbmfqmht
[2012.07.21 12:38:34 | 000,002,015 | ---- | C] () -- C:\Users\Public\Desktop\MyPhoneExplorer.lnk
[2012.01.10 23:07:32 | 000,000,680 | RHS- | C] () -- C:\Users\Privat\ntuser.pol
[2011.12.03 21:52:39 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011.08.31 20:46:18 | 000,145,804 | ---- | C] () -- C:\Windows\System32\igcompkrng600.bin
[2011.08.31 20:46:14 | 000,216,000 | ---- | C] () -- C:\Windows\System32\igfcg600m.bin
[2011.08.31 20:46:10 | 000,963,116 | ---- | C] () -- C:\Windows\System32\igkrng600.bin
[2011.08.31 20:46:00 | 000,056,832 | ---- | C] () -- C:\Windows\System32\igdde32.dll
[2011.08.31 20:26:20 | 013,903,872 | ---- | C] () -- C:\Windows\System32\ig4icd32.dll
[2011.08.31 20:15:48 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2011.08.31 20:14:12 | 000,000,151 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2011.08.31 20:13:52 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2011.02.12 13:29:25 | 000,247,560 | R--- | C] () -- C:\Windows\System32\drivers\RTConvEQ.dat
[2011.02.12 13:29:25 | 000,039,672 | R--- | C] () -- C:\Windows\System32\drivers\RtPCEE3.DAT
[2011.02.12 13:29:25 | 000,003,206 | R--- | C] () -- C:\Windows\System32\drivers\RtPCEE4.DAT
[2011.02.12 13:29:25 | 000,001,448 | R--- | C] () -- C:\Windows\System32\drivers\RtHdatEx.dat
[2011.02.12 13:29:25 | 000,000,520 | R--- | C] () -- C:\Windows\System32\drivers\RTEQEX3.dat
[2011.02.12 13:29:25 | 000,000,520 | R--- | C] () -- C:\Windows\System32\drivers\RTEQEX2.dat
[2011.02.12 13:29:25 | 000,000,520 | R--- | C] () -- C:\Windows\System32\drivers\RTEQEX1.dat
[2011.02.12 13:29:25 | 000,000,520 | R--- | C] () -- C:\Windows\System32\drivers\RTEQEX0.dat
[2011.02.12 13:29:25 | 000,000,176 | R--- | C] () -- C:\Windows\System32\drivers\RTHDAEQ1.dat
[2011.02.12 13:29:25 | 000,000,016 | R--- | C] () -- C:\Windows\System32\drivers\rtkhdaud.dat
 
========== LOP Check ==========
 
[2012.08.01 20:16:13 | 000,000,000 | ---D | M] -- C:\Users\Privat\AppData\Roaming\ICQ
[2012.07.16 12:45:52 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         
--- --- ---
_____________________________________________________________

EXTRAS.txt:OTL Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 01.08.2012 20:17:14 - Run 1
OTL by OldTimer - Version 3.2.55.0     Folder = C:\Users\Privat\Downloads
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,36 Gb Total Physical Memory | 1,27 Gb Available Physical Memory | 53,70% Memory free
4,71 Gb Paging File | 3,42 Gb Available in Paging File | 72,55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 195,21 Gb Total Space | 96,95 Gb Free Space | 49,66% Space Free | Partition Type: NTFS
 
Computer Name: SCHENKTOP | User Name: Privat | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03BC6B4A-F1E5-46B2-A40F-4A041B513145}" = rport=139 | protocol=6 | dir=out | app=system | 
"{0E4AF494-56F9-4F9A-8968-09015C047CE3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{12CB2C4B-97AE-4EE4-BBE5-20605C9FBB8D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{1995DD60-6BA4-41E4-AE9C-83923DD1E767}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2FBBD7BC-0219-4CB8-95B6-7374F7D86866}" = rport=138 | protocol=17 | dir=out | app=system | 
"{47DE310E-BCE0-4A0A-AAAB-CA99DBF60850}" = rport=137 | protocol=17 | dir=out | app=system | 
"{48634310-BBEE-4E68-BF62-8EB3C2C40CB3}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{587575DA-CA02-452D-ADA7-A22CC6D51231}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{81A7F399-B26D-44AA-A856-AAD300E5E377}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{91791ADE-47AE-495E-BB6C-6408BAEB368F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{95FBD3B4-65EB-4EE6-97CE-22FB3BB38AFA}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{BF793CCF-8385-415B-A4B6-D91A82BB0B09}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{C9E3AB00-3B37-4678-BDB7-A8440E41FACB}" = lport=137 | protocol=17 | dir=in | app=system | 
"{DD7E8582-C75D-4EF9-9F5E-E2AC4E0EB970}" = lport=139 | protocol=6 | dir=in | app=system | 
"{E539005F-0963-4BE8-B21F-7F84D6B1AA6D}" = lport=445 | protocol=6 | dir=in | app=system | 
"{E5EDC3FB-4C97-4CA2-83C5-DFC3D34219BA}" = rport=445 | protocol=6 | dir=out | app=system | 
"{E7583B49-A92D-47A4-93D1-DA391EB3D92B}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{F3135F0C-1E9C-4654-BFA9-5DD97E3FFDFE}" = lport=138 | protocol=17 | dir=in | app=system | 
"{F55D25C5-45C0-4122-BB15-FAD23EFDB5D3}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{F9F309F7-4792-4BF2-9952-FBBC51B6077E}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{FD03EC93-C252-4E50-904A-67C233F38FB1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02F5FA03-65A8-404E-AD9F-2AB827B9EA35}" = protocol=17 | dir=in | app=c:\program files\icq7.7\icq.exe | 
"{1655E2CB-8917-4198-AFAA-284FAEE54B7C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{29FD4A34-E95E-4813-B1C7-6CD4F03F8DA2}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{316D23D4-5633-46A2-906A-2EF3A3C81CBC}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{37F8EF9D-5F4E-40AE-A06B-1E5C1BA62138}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{3A3B3202-A00A-4AE9-B257-117C4886B66D}" = protocol=6 | dir=out | app=system | 
"{41E3E225-E489-4B9F-BACC-ED888EB1D3A1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{490931EB-6E23-464C-8DD6-46EA9CCD1F2D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{5DD10C30-894C-439C-98B2-4C5B77F03749}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{6602E9C9-500F-4EA5-8EAC-E63F114ECE47}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{68454DA8-0F1B-42AD-8F28-536003842CB5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{72E5D356-DAFC-48E3-9EF2-2C18067DB8F3}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{7C6102ED-009B-4775-9714-D400AEBCC0D5}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{7FCA8D7F-AF2A-4357-B518-8F88FF8EF064}" = protocol=17 | dir=in | app=c:\users\marcs' gf\appdata\roaming\spotify\spotify.exe | 
"{89FCCAD9-46E6-4B2C-94D3-077A75DFB745}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9503368C-9A84-43F3-A89A-51837D494E4C}" = protocol=6 | dir=in | app=c:\program files\icq7.7\icq.exe | 
"{9DE3D971-D2EC-421D-9E10-29128E5EC789}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{A4EEA5AE-5E17-45C6-B8D1-011EBDA46288}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{B9DDD3DB-E659-41EE-803D-FF68347D9F71}" = protocol=17 | dir=in | app=c:\program files\icq7.7\icq.exe | 
"{C02E7D66-C263-4CAB-8A1A-32E690317873}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{CEA6B770-E5D0-4EDD-8157-CCCA4107CB60}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe | 
"{D46F9D8A-BA82-4669-A084-9B897D8F9A09}" = protocol=6 | dir=in | app=c:\program files\icq7.7\icq.exe | 
"{DA7CBD9C-EC4D-4DD2-894D-76C41007E041}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{EC550B06-CAB9-4F23-B588-FD77165BC0B6}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{EDED3C2B-1C5F-4D91-A3C2-4C5166D878B8}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe | 
"{F6FD8299-08C4-41E3-BEB2-32C719BFA579}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{F7F30B91-A77D-4D35-9A89-97B32A0F543C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{FBAE8C75-941F-49B1-AE84-0E8DF73F4BD0}" = protocol=6 | dir=in | app=c:\users\marcs' gf\appdata\roaming\spotify\spotify.exe | 
"{FF2F1F5D-9F73-4E23-8661-2882C0E1BCEC}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"TCP Query User{0A850A9E-76BB-4300-80DE-5ABA546AC390}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"TCP Query User{4E1587AF-AF04-46CD-A944-EE27908E76E9}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{10AE137E-BD98-4742-9834-9DDA24B888C3}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{D698FBE6-483D-4626-AD2C-6C3F9923AD49}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08A25478-C5DD-4EA7-B168-3D687CA987FF}" = Die Sims™ 3 Traumsuite-Accessoires
"{0F842B77-56EA-4AAF-8295-81A022350B5E}" = Microsoft Security Client
"{1280E900-35DA-4E08-A700-B79A5B2B8532}" = Microsoft Antimalware Service DE-DE Language Pack
"{23B8A91D-680B-462B-87AD-3D70F7341731}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{2C82E097-694E-44ea-A947-2750679469CF}" = Die Sims™ 2
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{41AA7187-8272-462c-9EED-7B614DA1404E}" = Die Sims™ 2 Haustiere Fun-Collection
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{44EAFE3D-09A9-4478-A2BF-0EED22F4E49F}" = Die Sims™ 3 Erstelle ein Muster-Tool
"{4817189D-1785-4627-A33C-39FD90919300}" = Die Sims™ 2 Haustiere
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client DE-DE Language Pack
"{5C648FDB-0138-4619-B66E-230EF53E8E2C}" = Die Sims™ 2 Teen Style-Accessoires
"{6522C636-B04C-4333-9BEB-9E0C0B6350D6}" = Die Sims™ 2 Küchen- und Bad-Einrichtungs-Accessoires
"{65761BAE-11E8-48FE-B30F-1F01011AB906}" = Die Sims™ 3 "Erstelle eine Welt"-Tool - Beta
"{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = Die Sims 2
"{71828142-5A24-4BD0-97E7-976DA08CE6CF}" = Die Sims™ 3 Luxus-Accessoires
"{76703039-C98C-4e62-A12C-4D7066BE9985}" = Die Sims™ 2 Studentenleben Collection
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7B11296A-F894-449C-8DF6-6AAAA7D4D118}" = Die Sims™ 3 Stadt-Accessoires
"{7B3577F5-1D82-4C9B-008B-69D026FD8BCA}" = Die Sims 2: Open For Business
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{84DDE556-43EF-43ed-B2DF-37AF9E5DDD75}" = Die Sims™ 2 H&M®-Fashion-Accessoires
"{87F6C83D-F949-4d14-B5CB-DC8C75F8932D}" = Die Sims™ 2 Freizeit-Spaß
"{8BE514E8-4486-4730-8B68-FA15EEDC942E}" = Watchtower Library 2011 - Deutsch
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Deutsch
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B6F5B704-06D3-4687-90F3-6195304AD755}" = Die Sims™ 2 Apartment-Leben
"{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}" = Dolby Advanced Audio v2
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die Sims™ 3
"{C12631C6-804D-4B32-B0DD-8A496462F106}" = Die Sims™ 3 Einfach tierisch
"{C9EAEE6B-741F-421D-B9CE-9FA300DA92AD}_is1" = Super Mario Bros. X version 1.3
"{D53599B0-AA76-4CC6-B9EF-CC2F27B56F24}_is1" = Picture Collage Maker 3.0.3
"{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}" = Die Sims™ 2 Vier Jahreszeiten
"{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}" = Die Sims™ 3 Lebensfreude
"{EAA38532-7AD0-4f78-918A-4F4F02096ECE}" = Die Sims™ 2 Party-Accessoires
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}" = Apple Mobile Device Support
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F248ADFA-64E0-4b03-8A83-059078BED6A0}" = Die Sims™ 2 Gute Reise
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F7529650-B9DB-481B-0089-A2AC3C2821C1}" = Die Sims 2: Nightlife
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"DivX Setup" = DivX-Setup
"Elantech" = ETDWare PS/2-X86 8.0.6.0_WHQL
"FormatFactory" = FormatFactory 2.80
"Free YouTube Download_is1" = Free YouTube Download version 3.1.27.508
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.14.1206
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 14.0.1 (x86 de)" = Mozilla Firefox 14.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MPE" = MyPhoneExplorer
"Origin" = Origin
"Pekka Kana 2" = Pekka Kana 2
"PhotoScape" = PhotoScape
"Picasa 3" = Picasa 3
"Steam App 48000" = LIMBO
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"VLC media player" = VLC media player 1.1.11
"WinGimp-2.0_is1" = GIMP 2.6.12
 
========== Last 10 Event Log Errors ==========
 
Error: Unable to start EventLog service!
 
< End of report >
         
--- --- ---
____________________________________________________________


Ich hoffe mir kann jemand helfen :-(
(Mir kann ggf auch per ICQ oder skype geschrieben werden)

Vielen Dank schon mal im Voraus!

Lg melomana

Geändert von melomana (01.08.2012 um 19:57 Uhr)

 

Themen zu Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden"
administratorkonto, bho, bildschirm, bonjour, browser, converter, desktop, einstellungen, firefox, flash player, format, install.exe, logfile, mozilla, mp3, nvpciflt.sys, origin, plug-in, programm, realtek, registry, rundll, scan, security, software, super, svchost.exe, system, trojaner, udp, updates, website kann nicht angezeigt werden, werden", windows




Ähnliche Themen: Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden"


  1. Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.
    Log-Analyse und Auswertung - 20.03.2014 (26)
  2. Weißer Bildschirm, "Website kann nicht angezeigt werden
    Log-Analyse und Auswertung - 05.02.2013 (26)
  3. Virus: "Website kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 12.12.2012 (3)
  4. "Webseite kann nicht angezeigt werden" bei Windows 7 Boot
    Plagegeister aller Art und deren Bekämpfung - 03.12.2012 (2)
  5. "Website kann nicht angezeigt werden" Virus (OTL Dateien vorhanden)
    Plagegeister aller Art und deren Bekämpfung - 21.11.2012 (4)
  6. Weißer Bildschirm, "Diese Website kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 18.11.2012 (21)
  7. Weißer Bildschirm, "Diese Website kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 17.11.2012 (35)
  8. Trojaner Ransom-D / Weißer Bildschirm: "Diese Website kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 07.11.2012 (39)
  9. "Webseite kann nicht angezeigt werden" bei Windows 7 Boot
    Plagegeister aller Art und deren Bekämpfung - 29.10.2012 (25)
  10. Weißer Bildschirm und Meldung "Seite kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 23.10.2012 (9)
  11. weißer Bildschirm mit Text " Website kann nicht angezeigt werden" -> Avast meldete Trojaner Ransom-D
    Plagegeister aller Art und deren Bekämpfung - 14.10.2012 (25)
  12. Weißer Bildschirm, "Website kann nicht angezeigt werden", Conteneur ActiveX
    Plagegeister aller Art und deren Bekämpfung - 05.10.2012 (4)
  13. "Diese Website kann nicht angezeigt werden" -> PC nicht benutzbar
    Plagegeister aller Art und deren Bekämpfung - 15.08.2012 (1)
  14. Weißer Bildschirm und Meldung " Webside kann nicht angezeigt werden"
    Log-Analyse und Auswertung - 14.08.2012 (12)
  15. Auch keinen Zugriff mehr aufden Desktop "Webseite kann nicht angezeigt werden"
    Log-Analyse und Auswertung - 09.08.2012 (1)
  16. Ich kann nicht auf meinen Desktop zugreifen Meldung Die Website kann nicht angezeigt werden
    Plagegeister aller Art und deren Bekämpfung - 07.08.2012 (1)
  17. Meldung im Vollbild "Webseite kann nicht angezeigt werden" kein Zugriff auf Desktop
    Plagegeister aller Art und deren Bekämpfung - 31.03.2012 (1)

Zum Thema Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden" - Hallo, vor ca. einer Stunde wurde plötzlich der Bildschirm meines Laptops weiß und es erschien die Meldung "Website kann nicht angezeigt werden". Der Ton des Video-clips, den ich mir gerade - Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden"...
Archiv
Du betrachtest: Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.