| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: 100 Euro "Bundespolizei" Virus (Zugriff ohne Bildschirmübernahme durch Virus möglich)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.06.2013, 14:10
| #16 |
 |  100 Euro "Bundespolizei" Virus (Zugriff ohne Bildschirmübernahme durch Virus möglich) Ich werde jetzt nach und nach in diesen Beitrag alle Sachen einfügen. Was mir aufgefallen ist, in letzter Zeit kam beim Neustart immer folgende Fehlermeldung: Kopfzeile: RunDLL Inhalt: Problem beim Starten von C:\PROGRA~3\9jetolo.dat 1.adwcleaner Lauf: Zu viel Text fürs Direkte einfügen, .txt Datei zu groß(121KB) und weder Winzip noch 7Zip finden bzw. dürfen die Datei ins .zip Format umwandeln 2.adwcleaner Lauf: Code:
ATTFilter # AdwCleaner v2.301 - Datei am 01/06/2013 um 15:21:31 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows 7 Enterprise Service Pack 1 (64 bits)
# Benutzer : User1 - USER1-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\User1\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16576
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v11.0 (de)
Datei : C:\Users\User1\AppData\Roaming\Mozilla\Firefox\Profiles\9jspdxgc.default\prefs.js
[OK] Die Datei ist sauber.
-\\ Google Chrome v27.0.1453.94
Datei : C:\Users\User1\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [123042 octets] - [01/06/2013 14:57:21]
AdwCleaner[S2].txt - [933 octets] - [01/06/2013 15:21:31]
########## EOF - C:\AdwCleaner[S2].txt - [992 octets] ##########
Code:
ATTFilter ComboFix 13-06-01.01 - User1 01.06.2013 15:30:01.2.8 - x64
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.49.1031.18.6135.4309 [GMT 2:00]
ausgeführt von:: c:\users\User1\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5466.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM581F.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5831.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5A64.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5A76.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5A78.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5A8A.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5A8C.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5A8E.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5A9F.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5AA1.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5AB3.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5AB5.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5AB7.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5AC8.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5ADA.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5BE5.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5CB2.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5CC4.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5D42.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5D64.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5DFA.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5E1B.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5E4D.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5EBC.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5ECE.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5EEF.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5F20.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5F51.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5F91.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM5FF1.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM6021.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM60A0.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM60C1.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM60F2.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM6133.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM6144.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM61D3.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM6203.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM6234.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM6265.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM6296.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM62C7.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM62E8.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM6378.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM638A.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM638C.tmp
c:\users\User1\AppData\Local\Temp\XTMP1MC3VE\DEM63AD.tmp
c:\users\User1\AppData\Local\Temp\YTMP7MC8AA\TAA5D85.tmp
c:\users\User1\AppData\Local\Temp\YTMP7MC8AA\TAA5D96.tmp
c:\users\User1\AppData\Local\Temp\YTMP7MC8AA\TAA5D98.tmp
c:\users\User1\AppData\Local\Temp\YTMP7MC8AA\TAA5D9A.tmp
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-05-01 bis 2013-06-01 ))))))))))))))))))))))))))))))
.
.
2013-06-01 13:40 . 2013-06-01 13:40 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-01 13:40 . 2013-06-01 13:40 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp
2013-06-01 13:40 . 2013-06-01 13:40 -------- d-----w- c:\users\Gast\AppData\Local\temp
2013-06-01 13:40 . 2013-06-01 13:40 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-01 13:40 . 2013-06-01 13:40 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2013-05-29 12:09 . 2013-05-29 12:09 2695 ----a-w- c:\programdata\olotej9.js
2013-05-29 12:09 . 2013-05-29 12:09 153 ----a-w- c:\programdata\olotej9.reg
2013-05-28 18:12 . 2013-06-01 13:23 -------- d-----w- c:\users\User1\AppData\Roaming\SanDisk
2013-05-28 18:07 . 2013-05-28 18:07 -------- d-----w- c:\users\User1\AppData\Roaming\SanDisk SecureAccess
2013-05-28 18:06 . 2013-05-28 18:06 -------- d-----w- c:\users\User1\AppData\Local\Proxure
2013-05-28 17:56 . 2013-05-28 17:56 -------- d-----w- c:\programdata\ClubSanDisk
2013-05-27 17:16 . 2013-05-27 17:16 -------- d-----w- c:\users\User1\AppData\Local\Chromium
2013-05-27 16:33 . 2013-05-27 16:33 -------- d-----w- c:\users\Public\Games
2013-05-25 11:07 . 2013-05-25 17:27 -------- d-----w- C:\ROOT
2013-05-24 19:45 . 2013-05-24 22:15 -------- d-----w- c:\users\User1\AppData\Local\Warframe
2013-05-22 15:57 . 2013-05-22 15:57 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2013-05-20 12:32 . 2013-05-20 12:33 -------- d-----w- C:\Riot Games
2013-05-20 11:46 . 2013-05-20 11:46 -------- d-----w- c:\users\User1\.swt
2013-05-18 17:32 . 2013-05-18 17:32 -------- d-----w- c:\windows\de
2013-05-18 17:30 . 2013-05-18 17:30 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-18 17:24 . 2013-05-18 17:24 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8f3b38201ce53ec03\DSETUP.dll
2013-05-18 17:24 . 2013-05-18 17:24 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8f3b38201ce53ec03\DXSETUP.exe
2013-05-18 17:24 . 2013-05-18 17:24 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8f3b38201ce53ec03\dsetup32.dll
2013-05-18 17:24 . 2013-05-18 17:24 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8de31d261ce53ec02\DSETUP.dll
2013-05-18 17:24 . 2013-05-18 17:24 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8de31d261ce53ec02\DXSETUP.exe
2013-05-18 17:24 . 2013-05-18 17:24 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8de31d261ce53ec02\dsetup32.dll
2013-05-18 17:24 . 2013-05-18 17:24 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8b0bd6a01ce53ec01\DSETUP.dll
2013-05-18 17:24 . 2013-05-18 17:24 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8b0bd6a01ce53ec01\DXSETUP.exe
2013-05-18 17:24 . 2013-05-18 17:24 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\8b0bd6a01ce53ec01\dsetup32.dll
2013-05-18 17:17 . 2013-05-18 17:20 -------- d-----w- c:\programdata\Sony
2013-05-18 17:17 . 2013-05-18 17:20 -------- d-----w- c:\program files\Sony
2013-05-18 17:17 . 2013-05-18 17:19 -------- d-----w- c:\users\User1\AppData\Local\Sony
2013-05-18 17:17 . 2013-05-18 17:17 -------- d-----w- c:\program files (x86)\Sony
2013-05-18 17:15 . 2013-05-18 17:20 -------- d-----w- c:\users\User1\AppData\Roaming\Sony
2013-05-17 16:03 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-05-11 10:37 . 2013-05-11 10:37 209472 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-25 11:07 . 2007-03-20 04:33 43520 ----a-w- c:\windows\SysWow64\libusb0.dll
2013-05-25 11:07 . 2007-03-20 04:33 43008 ----a-w- c:\windows\system32\libusb0.dll
2013-05-25 11:07 . 2007-03-20 04:33 16896 ----a-w- c:\windows\system32\drivers\libusb0.sys
2013-05-18 18:25 . 2012-04-06 09:15 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-18 18:25 . 2011-06-04 07:21 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-17 19:05 . 2010-10-24 07:39 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-04-13 05:49 . 2013-05-17 16:03 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-17 16:03 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-17 16:03 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-17 16:03 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-17 16:03 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-17 16:03 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 19:26 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-02 17:38 . 2013-04-02 17:38 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-02 17:38 . 2013-04-02 17:38 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-04-02 17:38 . 2013-04-02 17:38 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-04-02 17:38 . 2013-04-02 17:38 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-04-02 17:38 . 2013-04-02 17:38 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-04-02 17:38 . 2013-04-02 17:38 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-04-02 17:38 . 2013-04-02 17:38 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-04-02 17:38 . 2013-04-02 17:38 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-02 17:38 . 2013-04-02 17:38 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-04-02 17:38 . 2013-04-02 17:38 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-02 17:38 . 2013-04-02 17:38 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-02 17:38 . 2013-04-02 17:38 81408 ----a-w- c:\windows\system32\icardie.dll
2013-04-02 17:38 . 2013-04-02 17:38 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-04-02 17:38 . 2013-04-02 17:38 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-04-02 17:38 . 2013-04-02 17:38 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-02 17:38 . 2013-04-02 17:38 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-04-02 17:38 . 2013-04-02 17:38 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-04-02 17:38 . 2013-04-02 17:38 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-04-02 17:38 . 2013-04-02 17:38 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-04-02 17:38 . 2013-04-02 17:38 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-04-02 17:38 . 2013-04-02 17:38 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-02 17:38 . 2013-04-02 17:38 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-04-02 17:38 . 2013-04-02 17:38 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-04-02 17:38 . 2013-04-02 17:38 441856 ----a-w- c:\windows\system32\html.iec
2013-04-02 17:38 . 2013-04-02 17:38 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-04-02 17:38 . 2013-04-02 17:38 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-04-02 17:38 . 2013-04-02 17:38 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-04-02 17:38 . 2013-04-02 17:38 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-02 17:38 . 2013-04-02 17:38 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-04-02 17:38 . 2013-04-02 17:38 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-04-02 17:38 . 2013-04-02 17:38 235008 ----a-w- c:\windows\system32\url.dll
2013-04-02 17:38 . 2013-04-02 17:38 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-02 17:38 . 2013-04-02 17:38 216064 ----a-w- c:\windows\system32\msls31.dll
2013-04-02 17:38 . 2013-04-02 17:38 197120 ----a-w- c:\windows\system32\msrating.dll
2013-04-02 17:38 . 2013-04-02 17:38 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-04-02 17:38 . 2013-04-02 17:38 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-04-02 17:38 . 2013-04-02 17:38 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-02 17:38 . 2013-04-02 17:38 149504 ----a-w- c:\windows\system32\occache.dll
2013-04-02 17:38 . 2013-04-02 17:38 144896 ----a-w- c:\windows\system32\wextract.exe
2013-04-02 17:38 . 2013-04-02 17:38 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-02 17:38 . 2013-04-02 17:38 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-04-02 17:38 . 2013-04-02 17:38 13824 ----a-w- c:\windows\system32\mshta.exe
2013-04-02 17:38 . 2013-04-02 17:38 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-02 17:38 . 2013-04-02 17:38 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-04-02 17:38 . 2013-04-02 17:38 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-04-02 17:38 . 2013-04-02 17:38 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-04-02 17:38 . 2013-04-02 17:38 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-04-02 17:38 . 2013-04-02 17:38 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-02 17:38 . 2013-04-02 17:38 102912 ----a-w- c:\windows\system32\inseng.dll
2013-04-02 17:37 . 2013-04-02 17:37 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-04-02 17:37 . 2013-04-02 17:37 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-04-02 17:37 . 2013-04-02 17:37 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-04-02 17:37 . 2013-04-02 17:37 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-04-02 17:37 . 2013-04-02 17:37 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-04-02 17:37 . 2013-04-02 17:37 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-04-02 17:37 . 2013-04-02 17:37 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-04-02 17:37 . 2013-04-02 17:37 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-04-02 17:37 . 2013-04-02 17:37 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-04-02 17:37 . 2013-04-02 17:37 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-04-02 17:37 . 2013-04-02 17:37 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2013-04-02 17:37 . 2013-04-02 17:37 1504768 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-04-02 17:37 . 2013-04-02 17:37 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-04-02 17:37 . 2013-04-02 17:37 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-04-02 17:37 . 2013-04-02 17:37 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll
2013-04-02 17:37 . 2013-04-02 17:37 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-04-02 17:37 . 2013-04-02 17:37 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-04-02 17:37 . 2013-04-02 17:37 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-04-02 17:37 . 2013-04-02 17:37 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-04-02 17:37 . 2013-04-02 17:37 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-04-02 17:37 . 2013-04-02 17:37 296960 ----a-w- c:\windows\system32\d3d10core.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\users\User1\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\users\User1\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\users\User1\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-04-19 18678376]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2013-05-03 1635752]
"ManyCam"="c:\program files (x86)\ManyCam\Bin\ManyCam.exe" [2013-05-16 5412688]
"SanDiskSecureAccess_Manager.exe"="c:\users\User1\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe" [2013-05-28 30705792]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"ArcSoft Connection Service"="c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2012-06-28 74752]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-05-15 2255184]
.
c:\users\User1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\User1\AppData\Roaming\Dropbox\bin\Dropbox.exe [2013-3-12 29106336]
MutiKeyboard Driver.lnk - c:\program files (x86)\MultiKeyboard Driver\KbdDrv.exe [2011-3-27 366080]
OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2013-1-8 228448]
regmonstd.lnk - c:\windows\System32\rundll32.exe [2009-7-14 45568]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GamersFirst LIVE!.lnk - c:\program files (x86)\GamersFirst\LIVE!\Live.exe [2012-6-22 2720408]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe [2012-04-26 2438696]
R3 DFX11_1;DFX Audio Enhancer 11.1;c:\windows\system32\drivers\dfx11_1x64.sys [2012-08-29 28008]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
R3 libusb0;LibUsb-Win32 - Kernel Driver 03/20/2007, 0.1.12.1;c:\windows\system32\DRIVERS\libusb0.sys [2013-05-25 16896]
R3 OverwolfUpdaterService;Overwolf Updater Service;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [2013-01-02 18360]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 REN2CAP_DRIVER;Hear;c:\windows\system32\drivers\ren2cap.sys [2011-11-07 46728]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 Usbfilt;Usbfilt;c:\windows\SYSTEM32\DRIVERS\usbfilt.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
R3 X6va009;X6va009;c:\windows\SysWOW64\Drivers\X6va009 [x]
R3 X6va011;X6va011;c:\windows\SysWOW64\Drivers\X6va011 [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2013-05-15 2467664]
S2 HTCMonitorService;HTCMonitorService;c:\program files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2013-01-29 87368]
S2 ODDPwrSvc;Acer ODD Power Service;c:\program files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [2009-07-30 151552]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
S3 e1yexpress;Intel(R) Gigabit-Netzwerkverbindungstreiber;c:\windows\system32\DRIVERS\e1y60x64.sys [2009-06-10 281088]
S3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv_x64.sys [2012-10-11 44928]
S3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv_x64.sys [2013-01-31 28160]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-06 18:25]
.
2013-06-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-23 17:09]
.
2013-06-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-23 17:09]
.
2013-06-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-282528629-1781749117-1907237759-1000Core.job
- c:\users\User1\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-29 07:31]
.
2013-06-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-282528629-1781749117-1907237759-1000UA.job
- c:\users\User1\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-29 07:31]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 162552 ----a-w- c:\users\User1\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 162552 ----a-w- c:\users\User1\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 162552 ----a-w- c:\users\User1\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 162552 ----a-w- c:\users\User1\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ODDPwr"="c:\program files\Acer\Optical Drive Power Management\ODDPwr.exe" [2009-07-30 215040]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>;*.local
uSearchAssistant = hxxp://www.google.com
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
FF - ProfilePath - c:\users\User1\AppData\Roaming\Mozilla\Firefox\Profiles\9jspdxgc.default\
FF - prefs.js: browser.startup.homepage - google.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-Akamai NetSession Interface - c:\users\User1\AppData\Local\Akamai\netsession_win.exe
WebBrowser-{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-Free Audio CD Burner_is1 - c:\program files (x86)\DVDVideoSoft\Free Audio CD Burner\unins000.exe
AddRemove-Free MP4 Video Converter_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\Uninstall.exe
AddRemove-Free Studio_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\Uninstall.exe
AddRemove-Uninstall_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va009]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va009"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va011]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va011"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-06-01 15:54:11 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-06-01 13:54
.
Vor Suchlauf: 30 Verzeichnis(se), 221.975.265.280 Bytes frei
Nach Suchlauf: 32 Verzeichnis(se), 221.897.121.792 Bytes frei
.
- - End Of File - - 1697FB22399B6360BA9532E88A144FDD
PS: USB Stick funktioniert wieder, Vielen Dank Habs jetzt in einen Zip Ordner gekriegt, hat aber noch 17KB also wie soll ich das hier hochgeladen bekommen? MfG Moritz Geändert von Trojanus (01.06.2013 um 15:01 Uhr) |
| Themen zu 100 Euro "Bundespolizei" Virus (Zugriff ohne Bildschirmübernahme durch Virus möglich) |
| 100 euro virus, antivir, aufgehangen, avira, avira antivir, bildschirm, bundes-polizei-virus, computer, download, euro, forum, gen, log, logfile, probleme, programme, rootkits, seite, spybot, spybot search and destroy, starten, stick, suche, usb, usb stick, viren, virus, zugriff |
Baum-Darstellung