Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: PUP.VShareRedir" Absturz bei Scan mit Malewarebyte

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 01.06.2013, 23:39   #1
cosmicus
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Guten Abend in die Runde,
auch ich bin nun Opfer vom PUP.VShareRedir" geworden.
Ich hoffe jemand kann helfen.
Habe gestern mit einen Scan durchgeführt und die Schädlinge endeckt.
Log s.u.
Der Rechner war bei MS Outlook und Mozzila ziemlich langsam.
Beim 2. Scan heute mit Malewarebyte stürzt nun das System immer nach ca. 30 sek ab.

Da ich hier gelesen habe, das die Bereinigung nur mit fachkundigen Begleitung werden sollte, hoffe ich, dass sich nun jemand bereit erklärt zu helfen.

Dafür schon vorab vielen Dank.


Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.05.31.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 7.0.5730.13
Luxhaus :: NOTEBOOK-LORENS [Administrator]

Schutz: Aktiviert

31.05.2013 22:03:51
mbam-log-2013-05-31 (22-03-51).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 315401
Laufzeit: 32 Minute(n), 52 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 7
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} (PUP.VShareRedir) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} (PUP.VShareRedir) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} (PUP.VShareRedir) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe (Security.Hijack) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 2
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser|{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Daten: ;áÃzÊ;XA³0öm»Áµ -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Daten: -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Alt 02.06.2013, 01:37   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die jemals fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs posten!


Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 02.06.2013, 14:06   #3
cosmicus
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Hi, Danke für die schnelle Rückmeldung,
von avira finde ich keine Funde -nur das:
Code:
ATTFilter

Typ:	Datei
Quelle:	C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\1RAPID\poucne izreke.exe
Status:	Infiziert
Quarantäne-Objekt:	5464ff35.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.02.10.224
Virendefinitionsdatei:	7.11.54.164
Meldung:	TR/Rogue.8433992
Datum/Uhrzeit:	23.12.2012, 21:25


Typ:	Datei
Quelle:	C:\System Volume Information\_restore{02F74226-ADAD-4233-BA14-8748A46718E6}\RP1532\A0314486.exe
Status:	Infiziert
Quarantäne-Objekt:	55535624.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.02.10.222
Virendefinitionsdatei:	7.11.54.74
Meldung:	TR/Rogue.8433992
Datum/Uhrzeit:	18.12.2012, 20:12


Typ:	Datei
Quelle:	C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\GetBooks\GetBooks.exe
Status:	Infiziert
Quarantäne-Objekt:	5528b3d9.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.02.10.222
Virendefinitionsdatei:	7.11.54.10
Meldung:	TR/Rogue.8433992
Datum/Uhrzeit:	16.12.2012, 20:47


Typ:	Datei
Quelle:	C:\Dokumente und Einstellungen\All Users\Dokumente\Downloads\handyspiele\handyspiele\Handy Pack XXL\Games\Java\Fieldstone.Technologies.36Sudoku.v1.60.S60.J2ME.Retail-SyMPDA\sym-0244.zip
Status:	Infiziert
Quarantäne-Objekt:	7ed8e7b8.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.02.10.222
Virendefinitionsdatei:	7.11.53.210
Meldung:	EXP/Java.AI
Datum/Uhrzeit:	14.12.2012, 01:54


Typ:	Datei
Quelle:	C:\Dokumente und Einstellungen\All Users\Dokumente\Downloads\handyspiele\handyspiele\Handy Pack XXL\Games\Java\Fieldstone.Technologies.64Sudoku.v1.60.S60.J2ME.Retail-SyMPDA\sym-0245.zip
Status:	Infiziert
Quarantäne-Objekt:	18efa87a.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.02.10.222
Virendefinitionsdatei:	7.11.53.210
Meldung:	EXP/Java.AI
Datum/Uhrzeit:	14.12.2012, 01:54


Typ:	Datei
Quelle:	C:\Dokumente und Einstellungen\All Users\Dokumente\Downloads\handyspiele\handyspiele\Handy Pack XXL\Games\Java\Fieldstone.Technologies.81Sudoku.v1.50.S60.J2ME.Retail-SyMPDA\sym-0150.zip
Status:	Infiziert
Quarantäne-Objekt:	4ab0f292.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.02.10.222
Virendefinitionsdatei:	7.11.53.210
Meldung:	EXP/Java.AI
Datum/Uhrzeit:	14.12.2012, 01:54


Typ:	Datei
Quelle:	C:\Dokumente und Einstellungen\All Users\Dokumente\Downloads\handyspiele\handyspiele\Handy Pack XXL\Games\Java\Fieldstone.Technologies.81Sudoku.v1.60.S60.J2ME.Retail-SyMPDA\sym-0247.zip
Status:	Infiziert
Quarantäne-Objekt:	5227dd35.qua
Wiederhergestellt:	NEIN
Zu Avira hochgeladen:	NEIN
Betriebssystem:	Windows XP/VISTA Workstation/Windows 7
Suchengine:	8.02.10.222
Virendefinitionsdatei:	7.11.53.210
Meldung:	EXP/Java.AI
Datum/Uhrzeit:	14.12.2012, 01:54
         
das habe ich noch gefunden:

[CODE]
[CODE]Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4629

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

30.12.2012 19:16:27
mbam-log-2012-12-30 (19-16-27).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 171659
Laufzeit: 17 Minute(n), 31 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\END (Trojan.FakeAlert) -> Quarantined and deleted successfully.
[CODE]Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4629

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

06.02.2012 15:28:18
mbam-log-2012-02-06 (15-28-18).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 161874
Laufzeit: 15 Minute(n), 53 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Temp\0.23772505544316902.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
[CODE]Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4629

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

04.02.2012 21:46:43
mbam-log-2012-02-04 (21-46-43).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 162465
Laufzeit: 41 Minute(n), 16 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 1
Infizierte Registrierungsschlüssel: 3
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 1
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
C:\Programme\YouTube Downloader Toolbar\IE\4.3\youtubedownloaderToolbarIE.dll (Adware.WidgiToolbar) -> Delete on reboot.

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Programme\YouTube Downloader Toolbar\IE\4.3\youtubedownloaderToolbarIE.dll (Adware.WidgiToolbar) -> Delete on reboot.
C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Temp\0.8613628312684669.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Temp\0.8818351004034779.exe (Trojan.Dropper) -> Delete on reboot.
[CODE]Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4629

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

04.02.2012 21:46:43
mbam-log-2012-02-04 (21-46-43).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 162465
Laufzeit: 41 Minute(n), 16 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 1
Infizierte Registrierungsschlüssel: 3
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 1
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
C:\Programme\YouTube Downloader Toolbar\IE\4.3\youtubedownloaderToolbarIE.dll (Adware.WidgiToolbar) -> Delete on reboot.

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Programme\YouTube Downloader Toolbar\IE\4.3\youtubedownloaderToolbarIE.dll (Adware.WidgiToolbar) -> Delete on reboot.
C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Temp\0.8613628312684669.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Temp\0.8818351004034779.exe (Trojan.Dropper) -> Delete on reboot.
Code:
ATTFilter
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4629

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

04.02.2012 21:46:43
mbam-log-2012-02-04 (21-46-43).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 162465
Laufzeit: 41 Minute(n), 16 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 1
Infizierte Registrierungsschlüssel: 3
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 1
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
C:\Programme\YouTube Downloader Toolbar\IE\4.3\youtubedownloaderToolbarIE.dll (Adware.WidgiToolbar) -> Delete on reboot.

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{f3fee66e-e034-436a-86e4-9690573bee8a} (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
         
[CODE]Search results from Spybot - Search & Destroy

01.06.2013 17:38:13
Scan took 00:00:20.
1 items found.

Error: Service check: the Services.sbs file is missing. Please use the update to get a new copy!

Statcounter: Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)



--- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---

2013-05-16 blindman.exe (2.1.18.151)
2013-05-16 explorer.exe (2.1.18.177)
2013-05-16 SDBootCD.exe (2.1.18.109)
2013-05-16 SDCleaner.exe (2.1.18.110)
2013-05-16 SDDelFile.exe (2.1.18.94)
2013-05-16 SDFiles.exe (2.1.18.135)
2013-03-20 SDFileScanHelper.exe (2.1.16.1)
2013-05-16 SDFSSvc.exe (2.1.18.208)
2013-05-16 SDHookHelper.exe (2.1.18.2)
2013-05-16 SDHookInst32.exe (2.1.18.2)
2013-05-16 SDImmunize.exe (2.1.18.130)
2013-05-16 SDLogReport.exe (2.1.18.107)
2013-05-16 SDOnAccess.exe (2.1.18.4)
2013-05-16 SDPESetup.exe (2.1.18.3)
2013-05-16 SDPEStart.exe (2.1.18.86)
2013-05-16 SDPhoneScan.exe (2.1.18.28)
2013-05-16 SDPRE.exe (2.1.18.22)
2013-05-16 SDPrepPos.exe (2.1.18.10)
2013-05-16 SDQuarantine.exe (2.1.18.103)
2013-05-16 SDRootAlyzer.exe (2.1.18.116)
2013-05-16 SDSBIEdit.exe (2.1.18.39)
2013-05-16 SDScan.exe (2.1.18.177)
2013-05-16 SDScript.exe (2.1.18.53)
2013-05-16 SDSettings.exe (2.1.18.136)
2013-05-16 SDShell.exe (2.1.18.2)
2013-05-16 SDShred.exe (2.1.18.107)
2013-05-16 SDSysRepair.exe (2.1.18.101)
2013-05-16 SDTools.exe (2.1.18.150)
2013-05-16 SDTray.exe (2.1.18.127)
2013-05-16 SDUpdate.exe (2.1.18.91)
2013-05-16 SDUpdSvc.exe (2.1.18.76)
2013-05-16 SDWelcome.exe (2.1.18.129)
2013-05-15 SDWSCSvc.exe (2.1.18.2)
2013-06-01 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2013-05-16 SDAdvancedCheckLibrary.dll (2.1.18.98)
2013-05-16 SDAV.dll
2013-05-16 SDECon32.dll (2.1.18.113)
2013-04-05 SDEvents.dll (2.1.16.2)
2013-05-16 SDFileScanLibrary.dll (2.1.18.12)
2013-05-16 SDHook32.dll (2.1.18.2)
2013-05-16 SDImmunizeLibrary.dll (2.1.18.2)
2013-05-16 SDLicense.dll (2.1.18.0)
2013-05-16 SDLists.dll (2.1.18.4)
2013-05-16 SDResources.dll (2.1.18.7)
2013-05-16 SDScanLibrary.dll (2.1.18.131)
2013-05-16 SDTasks.dll (2.1.18.15)
2013-05-16 SDWinLogon.dll (2.1.18.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2013-05-16 Tools.dll (2.1.18.36)
2010-08-13 Includes\Cookies.sbi (*)

[CODE]Search results from Spybot - Search & Destroy

01.06.2013 17:38:13
Scan took 00:00:20.
1 items found.

Error: Service check: the Services.sbs file is missing. Please use the update to get a new copy!

Statcounter: Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)



--- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---

2013-05-16 blindman.exe (2.1.18.151)
2013-05-16 explorer.exe (2.1.18.177)
2013-05-16 SDBootCD.exe (2.1.18.109)
2013-05-16 SDCleaner.exe (2.1.18.110)
2013-05-16 SDDelFile.exe (2.1.18.94)
2013-05-16 SDFiles.exe (2.1.18.135)
2013-03-20 SDFileScanHelper.exe (2.1.16.1)
2013-05-16 SDFSSvc.exe (2.1.18.208)
2013-05-16 SDHookHelper.exe (2.1.18.2)
2013-05-16 SDHookInst32.exe (2.1.18.2)
2013-05-16 SDImmunize.exe (2.1.18.130)
2013-05-16 SDLogReport.exe (2.1.18.107)
2013-05-16 SDOnAccess.exe (2.1.18.4)
2013-05-16 SDPESetup.exe (2.1.18.3)
2013-05-16 SDPEStart.exe (2.1.18.86)
2013-05-16 SDPhoneScan.exe (2.1.18.28)
2013-05-16 SDPRE.exe (2.1.18.22)
2013-05-16 SDPrepPos.exe (2.1.18.10)
2013-05-16 SDQuarantine.exe (2.1.18.103)
2013-05-16 SDRootAlyzer.exe (2.1.18.116)
2013-05-16 SDSBIEdit.exe (2.1.18.39)
2013-05-16 SDScan.exe (2.1.18.177)
2013-05-16 SDScript.exe (2.1.18.53)
2013-05-16 SDSettings.exe (2.1.18.136)
2013-05-16 SDShell.exe (2.1.18.2)
2013-05-16 SDShred.exe (2.1.18.107)
2013-05-16 SDSysRepair.exe (2.1.18.101)
2013-05-16 SDTools.exe (2.1.18.150)
2013-05-16 SDTray.exe (2.1.18.127)
2013-05-16 SDUpdate.exe (2.1.18.91)
2013-05-16 SDUpdSvc.exe (2.1.18.76)
2013-05-16 SDWelcome.exe (2.1.18.129)
2013-05-15 SDWSCSvc.exe (2.1.18.2)
2013-06-01 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2013-05-16 SDAdvancedCheckLibrary.dll (2.1.18.98)
2013-05-16 SDAV.dll
2013-05-16 SDECon32.dll (2.1.18.113)
2013-04-05 SDEvents.dll (2.1.16.2)
2013-05-16 SDFileScanLibrary.dll (2.1.18.12)
2013-05-16 SDHook32.dll (2.1.18.2)
2013-05-16 SDImmunizeLibrary.dll (2.1.18.2)
2013-05-16 SDLicense.dll (2.1.18.0)
2013-05-16 SDLists.dll (2.1.18.4)
2013-05-16 SDResources.dll (2.1.18.7)
2013-05-16 SDScanLibrary.dll (2.1.18.131)
2013-05-16 SDTasks.dll (2.1.18.15)
2013-05-16 SDWinLogon.dll (2.1.18.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2013-05-16 Tools.dll (2.1.18.36)
2010-08-13 Includes\Cookies.sbi (*)

[CODE]Search results from Spybot - Search & Destroy

01.06.2013 17:38:13
Scan took 00:00:20.
1 items found.

Error: Service check: the Services.sbs file is missing. Please use the update to get a new copy!

Statcounter: Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)



--- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---

2013-05-16 blindman.exe (2.1.18.151)
2013-05-16 explorer.exe (2.1.18.177)
2013-05-16 SDBootCD.exe (2.1.18.109)
2013-05-16 SDCleaner.exe (2.1.18.110)
2013-05-16 SDDelFile.exe (2.1.18.94)
2013-05-16 SDFiles.exe (2.1.18.135)
2013-03-20 SDFileScanHelper.exe (2.1.16.1)
2013-05-16 SDFSSvc.exe (2.1.18.208)
2013-05-16 SDHookHelper.exe (2.1.18.2)
2013-05-16 SDHookInst32.exe (2.1.18.2)
2013-05-16 SDImmunize.exe (2.1.18.130)
2013-05-16 SDLogReport.exe (2.1.18.107)
2013-05-16 SDOnAccess.exe (2.1.18.4)
2013-05-16 SDPESetup.exe (2.1.18.3)
2013-05-16 SDPEStart.exe (2.1.18.86)
2013-05-16 SDPhoneScan.exe (2.1.18.28)
2013-05-16 SDPRE.exe (2.1.18.22)
2013-05-16 SDPrepPos.exe (2.1.18.10)
2013-05-16 SDQuarantine.exe (2.1.18.103)
2013-05-16 SDRootAlyzer.exe (2.1.18.116)
2013-05-16 SDSBIEdit.exe (2.1.18.39)
2013-05-16 SDScan.exe (2.1.18.177)
2013-05-16 SDScript.exe (2.1.18.53)
2013-05-16 SDSettings.exe (2.1.18.136)
2013-05-16 SDShell.exe (2.1.18.2)
2013-05-16 SDShred.exe (2.1.18.107)
2013-05-16 SDSysRepair.exe (2.1.18.101)
2013-05-16 SDTools.exe (2.1.18.150)
2013-05-16 SDTray.exe (2.1.18.127)
2013-05-16 SDUpdate.exe (2.1.18.91)
2013-05-16 SDUpdSvc.exe (2.1.18.76)
2013-05-16 SDWelcome.exe (2.1.18.129)
2013-05-15 SDWSCSvc.exe (2.1.18.2)
2013-06-01 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2013-05-16 SDAdvancedCheckLibrary.dll (2.1.18.98)
2013-05-16 SDAV.dll
2013-05-16 SDECon32.dll (2.1.18.113)
2013-04-05 SDEvents.dll (2.1.16.2)
2013-05-16 SDFileScanLibrary.dll (2.1.18.12)
2013-05-16 SDHook32.dll (2.1.18.2)
2013-05-16 SDImmunizeLibrary.dll (2.1.18.2)
2013-05-16 SDLicense.dll (2.1.18.0)
2013-05-16 SDLists.dll (2.1.18.4)
2013-05-16 SDResources.dll (2.1.18.7)
2013-05-16 SDScanLibrary.dll (2.1.18.131)
2013-05-16 SDTasks.dll (2.1.18.15)
2013-05-16 SDWinLogon.dll (2.1.18.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2013-05-16 Tools.dll (2.1.18.36)
2010-08-13 Includes\Cookies.sbi (*)
Code:
ATTFilter
Search results from Spybot - Search & Destroy

24.03.2013 21:56:49
Scan took 00:57:06.
35 items found.

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\s.ytimg.com\soundData.sol
  Properties.size=49
  Properties.md5=A0EA46CFB3941C1821293B2149ECAA7B
  Properties.filedate=1364115936
  Properties.filedatetext=2013-03-24 10:05:36

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\s.ytimg.com\videostats.sol
  Properties.size=275
  Properties.md5=D080086402E9A708FECFB81956738539
  Properties.filedate=1364115464
  Properties.filedatetext=2013-03-24 09:57:43

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\secureinclude.ebaystatic.com\ebayLSO.sol
  Properties.size=131
  Properties.md5=E040952C5FFA14A0C34B06DA1D1ED91B
  Properties.filedate=1363709466
  Properties.filedatetext=2013-03-19 17:11:05

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\secureinclude.ebaystatic.com\ebayT.sol
  Properties.size=39
  Properties.md5=B43F43445AA3414DDC22EC80FBB22871
  Properties.filedate=1363709466
  Properties.filedatetext=2013-03-19 17:11:05

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\staticloads.com\com.jeroenwijering.sol
  Properties.size=54
  Properties.md5=2A5BBE2DBDF5BBB0D72D399868E43109
  Properties.filedate=1363740526
  Properties.filedatetext=2013-03-20 01:48:46

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\www.baur.de\REGISTRY.sol
  Properties.size=42
  Properties.md5=F10611AA2C3676CBFB75469623E46626
  Properties.filedate=1364074814
  Properties.filedatetext=2013-03-23 22:40:13

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\www.baur.de\sol.sol
  Properties.size=342
  Properties.md5=0070C470AD181E7C3B127EA93C89167A
  Properties.filedate=1364107033
  Properties.filedatetext=2013-03-24 07:37:12

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\www.paypalobjects.com\ppLsoTest.sol
  Properties.size=48
  Properties.md5=74EE4375686A2069414EEF13E7B62789
  Properties.filedate=1363712539
  Properties.filedatetext=2013-03-19 18:02:18

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\www.xatech.com\chat.sol
  Properties.size=88
  Properties.md5=A464942AF96F080B4DFA9704CA94125A
  Properties.filedate=1363983362
  Properties.filedatetext=2013-03-22 21:16:02

Statcounter: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)
  

WebTrends live: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

Common Dialogs: [SBI $8E73A7FB] History  (20 files) (Registry Key, nothing done)
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU

Log: [SBI $8E73A7FB]  Activity: SchedLgU.Txt (File, nothing done)
  C:\WINDOWS\SchedLgU.Txt
  Properties.size=1474
  Properties.md5=57ACF7A4FC1C8FBF39AA1C50B1A288C7
  Properties.filedate=1364152886
  Properties.filedatetext=2013-03-24 20:21:25

Log: [SBI $8E73A7FB]  Install: setupapi.log (File, nothing done)
  C:\WINDOWS\setupapi.log
  Properties.size=1112
  Properties.md5=DBD7ECFC8480FF3E8EAA91B57215CF07
  Properties.filedate=1363982991
  Properties.filedatetext=2013-03-22 21:09:50

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemcore.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemcore.log
  Properties.size=55414
  Properties.md5=C1CA93C2EC7C43F2082A5152199560D7
  Properties.filedate=1364158029
  Properties.filedatetext=2013-03-24 21:47:08

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemess.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemess.log
  Properties.size=31714
  Properties.md5=D8DAEC02FADCA60266DF04A78480E063
  Properties.filedate=1364158044
  Properties.filedatetext=2013-03-24 21:47:24

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemprox.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemprox.log
  Properties.size=2403
  Properties.md5=79C6CB9B854506E68DE7C6F58F452AD9
  Properties.filedate=1364156554
  Properties.filedatetext=2013-03-24 21:22:33

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wmiprov.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wmiprov.log
  Properties.size=829
  Properties.md5=76BA68E90E0856CB160CD129374F46FE
  Properties.filedate=1364153245
  Properties.filedatetext=2013-03-24 20:27:24

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS Office 11.0 (Word): [SBI $15AC27CE] Recent file list (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Word\Data\Settings

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows Explorer: [SBI $2026AFB6] User Assistant history IE (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: [SBI $6107D172] User Assistant history files (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: [SBI $B7EBA926] Last visited history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Cookie: [SBI $49804B54] Browser: Cookie (5) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (9) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (69) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (19) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (29) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (4) (Browser: History, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (13) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (1) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (552) (Browser: Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 2.0.12.131  DLL (build: 20121113) ---

2012-11-13 blindman.exe (2.0.12.151)
2012-11-13 explorer.exe (2.0.12.173)
2012-11-13 SDBootCD.exe (2.0.12.109)
2012-11-13 SDCleaner.exe (2.0.12.110)
2012-11-13 SDDelFile.exe (2.0.12.94)
2012-11-13 SDFiles.exe (2.0.12.135)
2012-11-13 SDFileScanHelper.exe (2.0.12.1)
2012-11-13 SDFSSvc.exe (2.0.12.205)
2012-11-13 SDImmunize.exe (2.0.12.130)
2012-11-13 SDLogReport.exe (2.0.12.107)
2012-11-13 SDPESetup.exe (2.0.12.3)
2012-11-13 SDPEStart.exe (2.0.12.86)
2012-11-13 SDPhoneScan.exe (2.0.12.27)
2012-11-13 SDPRE.exe (2.0.12.13)
2012-11-13 SDPrepPos.exe (2.0.12.10)
2012-11-13 SDQuarantine.exe (2.0.12.103)
2012-11-13 SDRootAlyzer.exe (2.0.12.116)
2012-11-13 SDSBIEdit.exe (2.0.12.39)
2012-11-13 SDScan.exe (2.0.12.173)
2012-11-13 SDScript.exe (2.0.12.53)
2012-11-13 SDSettings.exe (2.0.12.130)
2012-11-13 SDShred.exe (2.0.12.105)
2012-11-13 SDSysRepair.exe (2.0.12.101)
2012-11-13 SDTools.exe (2.0.12.150)
2012-11-13 SDTray.exe (2.0.12.127)
2012-11-13 SDUpdate.exe (2.0.12.89)
2012-11-13 SDUpdSvc.exe (2.0.12.76)
2012-11-13 SDWelcome.exe (2.0.12.126)
2012-11-13 SDWSCSvc.exe (2.0.12.2)
2013-03-18 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.
Code:
ATTFilter
exe
         
2012-08-23 borlndmm.dll (10.0.2288.42451) 2012-09-05 DelZip190.dll (1.9.0.107) 2012-09-10 libeay32.dll (1.0.0.4) 2012-09-10 libssl32.dll (1.0.0.4) 2012-11-13 SDAdvancedCheckLibrary.dll (2.0.12.98) 2012-11-13 SDECon32.dll (2.0.12.113) 2012-11-13 SDEvents.dll (2.0.12.2) 2012-11-13 SDFileScanLibrary.dll (2.0.12.9) 2012-11-13 SDHelper.dll (2.0.12.88) 2012-11-13 SDImmunizeLibrary.dll (2.0.12.2) 2012-11-13 SDLists.dll (2.0.12.4) 2012-11-13 SDResources.dll (2.0.12.7) 2012-11-13 SDScanLibrary.dll (2.0.12.131) 2012-11-13 SDTasks.dll (2.0.12.15) 2012-11-13 SDWinLogon.dll (2.0.12.0) 2012-08-23 sqlite3.dll 2012-09-10 ssleay32.dll (1.0.0.4) 2012-11-13 Tools.dll (2.0.12.36) 2012-11-13 UninsSrv.dll (2.0.12.52) 2012-11-14 Includes\Adware.sbi (*) 2012-11-14 Includes\AdwareC.sbi (*) 2010-08-13 Includes\Cookies.sbi (*) 2012-11-14 Includes\Dialer.sbi (*) 2012-11-14 Includes\DialerC.sbi (*) 2012-11-14 Includes\HeavyDuty.sbi (*) 2012-11-14 Includes\Hijackers.sbi (*) 2012-11-14 Includes\HijackersC.sbi (*) 2012-11-14 Includes\iPhone.sbi (*) 2012-11-14 Includes\Keyloggers.sbi (*) 2012-11-14 Includes\KeyloggersC.sbi (*) 2012-11-14 Includes\Malware.sbi (*) 2012-11-14 Includes\MalwareC.sbi (*) 2012-11-14 Includes\PUPS.sbi (*) 2012-11-14 Includes\PUPSC.sbi (*) 2012-11-14 Includes\Security.sbi (*) 2012-11-14 Includes\SecurityC.sbi (*) 2008-06-03 Includes\Spybots.sbi (*) 2008-06-03 Includes\SpybotsC.sbi (*) 2012-11-14 Includes\Spyware.sbi (*) 2012-11-14 Includes\SpywareC.sbi (*) 2011-06-07 Includes\Tracks.sbi (*) 2005-02-17 Includes\Tracks.uti (*) 2012-11-14 Includes\Trojans.sbi (*) 2012-11-14 Includes\TrojansC-02.sbi (*) 2012-11-14 Includes\TrojansC-03.sbi (*) 2012-11-14 Includes\TrojansC-04.sbi (*) 2012-11-14 Includes\TrojansC-05.sbi (*) 2012-11-14 Includes\TrojansC.sbi (*)
Search results from Spybot - Search & Destroy

18.03.2013 23:29:08
Scan took 00:54:51.
162 items found.

Babylon.Toolbar: [SBI $38C57020] Library (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
Properties.size=323584
Properties.md5=5F933C75510CE7064600770488159453
Properties.filedate=1289121712
Properties.filedatetext=2010-11-07 10:21:52

Babylon.Toolbar: [SBI $554A5FF0] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylnApp.appCore

Babylon.Toolbar: [SBI $554A5FF0] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylnApp.appCore.1

Babylon.Toolbar: [SBI $554A5FF0] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Babylon.Toolbar: [SBI $5CBA2194] Library (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
Properties.size=184760
Properties.md5=CF158FAC1864EE97BFE3221285FEC23A
Properties.filedate=1289137528
Properties.filedatetext=2010-11-07 14:45:28

Babylon.Toolbar: [SBI $86348D5E] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Babylon.dskBnd

Babylon.Toolbar: [SBI $86348D5E] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Babylon.dskBnd.1

Babylon.Toolbar: [SBI $86348D5E] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}

Babylon.Toolbar: [SBI $B04483F7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr

Babylon.Toolbar: [SBI $B04483F7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1

Babylon.Toolbar: [SBI $B04483F7] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}

Babylon.Toolbar: [SBI $5601E539] Library (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
Properties.size=421888
Properties.md5=CE5D74D6AC19E94164DE0506D46B8AE8
Properties.filedate=1289121708
Properties.filedatetext=2010-11-07 10:21:48

Babylon.Toolbar: [SBI $7A3F9AD7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.xtrnl

Babylon.Toolbar: [SBI $7A3F9AD7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.xtrnl.1

Babylon.Toolbar: [SBI $7A3F9AD7] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

Babylon.Toolbar: [SBI $360EE791] Library (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
Properties.size=225720
Properties.md5=91BCFFE9095DFE033125ADD31EE7FFC1
Properties.filedate=1289137526
Properties.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $52C6ABB7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.BabylonESrvc

Babylon.Toolbar: [SBI $52C6ABB7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.BabylonESrvc.1

Babylon.Toolbar: [SBI $52C6ABB7] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484a-89D3-318C928DAC1B}

Babylon.Toolbar: [SBI $4E46F835] Program directory (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\BabylonToolbar\

Babylon.Toolbar: [SBI $1AA9620D] Program directory (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\BabylonToolbar\BabylonToolbar\

Babylon.Toolbar: [SBI $C2E2DFDF] Program directory (Directory, nothing done)
C:\Programme\BabylonToolbar\
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
Directory.subfile.size=93502
Directory.subfile.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
Directory.subfile.filedate=1293535580
Directory.subfile.filedatetext=2010-12-28 12:26:20
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
Directory.subfile.size=323584
Directory.subfile.md5=5F933C75510CE7064600770488159453
Directory.subfile.filedate=1289121712
Directory.subfile.filedatetext=2010-11-07 10:21:52
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
Directory.subfile.size=421888
Directory.subfile.md5=CE5D74D6AC19E94164DE0506D46B8AE8
Directory.subfile.filedate=1289121708
Directory.subfile.filedatetext=2010-11-07 10:21:48
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
Directory.subfile.size=286720
Directory.subfile.md5=000A83380536DF86EFE77D020D812F96
Directory.subfile.filedate=1289121720
Directory.subfile.filedatetext=2010-11-07 10:22:00
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
Directory.subfile.size=184760
Directory.subfile.md5=CF158FAC1864EE97BFE3221285FEC23A
Directory.subfile.filedate=1289137528
Directory.subfile.filedatetext=2010-11-07 14:45:28
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
Directory.subfile.size=94413
Directory.subfile.md5=2054AB2A45B1CF380D02D070D6DFE379
Directory.subfile.filedate=1308499538
Directory.subfile.filedatetext=2011-06-19 17:05:38
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
Directory.subfile.size=225720
Directory.subfile.md5=91BCFFE9095DFE033125ADD31EE7FFC1
Directory.subfile.filedate=1289137526
Directory.subfile.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $6FD65E4E] Program directory (Directory, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
Directory.subfile.size=93502
Directory.subfile.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
Directory.subfile.filedate=1293535580
Directory.subfile.filedatetext=2010-12-28 12:26:20
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
Directory.subfile.size=323584
Directory.subfile.md5=5F933C75510CE7064600770488159453
Directory.subfile.filedate=1289121712
Directory.subfile.filedatetext=2010-11-07 10:21:52
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
Directory.subfile.size=421888
Directory.subfile.md5=CE5D74D6AC19E94164DE0506D46B8AE8
Directory.subfile.filedate=1289121708
Directory.subfile.filedatetext=2010-11-07 10:21:48
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
Directory.subfile.size=286720
Directory.subfile.md5=000A83380536DF86EFE77D020D812F96
Directory.subfile.filedate=1289121720
Directory.subfile.filedatetext=2010-11-07 10:22:00
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
Directory.subfile.size=184760
Directory.subfile.md5=CF158FAC1864EE97BFE3221285FEC23A
Directory.subfile.filedate=1289137528
Directory.subfile.filedatetext=2010-11-07 14:45:28
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
Directory.subfile.size=94413
Directory.subfile.md5=2054AB2A45B1CF380D02D070D6DFE379
Directory.subfile.filedate=1308499538
Directory.subfile.filedatetext=2011-06-19 17:05:38
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
Directory.subfile.size=225720
Directory.subfile.md5=91BCFFE9095DFE033125ADD31EE7FFC1
Directory.subfile.filedate=1289137526
Directory.subfile.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $B2252BB5] Program directory (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
Properties.size=93502
Properties.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
Properties.filedate=1293535580
Properties.filedatetext=2010-12-28 12:26:20

Babylon.Toolbar: [SBI $B7E3BC8B] Executable (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
Properties.size=286720
Properties.md5=000A83380536DF86EFE77D020D812F96
Properties.filedate=1289121720
Properties.filedatetext=2010-11-07 10:22:00

Babylon.Toolbar: [SBI $247AFEA8] Executable (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
Properties.size=94413
Properties.md5=2054AB2A45B1CF380D02D070D6DFE379
Properties.filedate=1308499538
Properties.filedatetext=2011-06-19 17:05:38

Widgi.Toolbar: [SBI $16C3A07B] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\

Widgi.Toolbar: [SBI $000389AB] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\

Widgi.Toolbar: [SBI $1E14509F] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\Res\

Widgi.Toolbar: [SBI $51A36620] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\

Widgi.Toolbar: [SBI $14EAB21D] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\

Widgi.Toolbar: [SBI $65C7C8B1] Shared DLL (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Application Updater\ApplicationUpdater.exe

Widgi.Toolbar: [SBI $65C7C8B1] System file (File, nothing done)
C:\Programme\Application Updater\ApplicationUpdater.exe
Properties.size=387072
Properties.md5=CF46A776D2E44F180AF2773A9844D260
Properties.filedate=1296231028
Properties.filedatetext=2011-01-28 17:10:28

Widgi.Toolbar: [SBI $5AE37010] Shared DLL (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe

Widgi.Toolbar: [SBI $5AE37010] System file (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
Properties.size=526336
Properties.md5=B8F85EACBBBF7A36A542ED35105B10AF
Properties.filedate=1296232602
Properties.filedatetext=2011-01-28 17:36:42

Widgi.Toolbar: [SBI $1FDB1566] Shared DLL (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll

Widgi.Toolbar: [SBI $1FDB1566] System file (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
Properties.size=596992
Properties.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
Properties.filedate=1296232576
Properties.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $A3625505] Application data folder (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\

Widgi.Toolbar: [SBI $7C436CA1] Application data folder (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\res\

Widgi.Toolbar: [SBI $B7BA3A77] Application data folder (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\temp\

Widgi.Toolbar: [SBI $0B12F9B5] Program directory (Directory, nothing done)
C:\Programme\Application Updater\
Directory.subfile=C:\Programme\Application Updater\ApplicationUpdater.exe
Directory.subfile.size=387072
Directory.subfile.md5=CF46A776D2E44F180AF2773A9844D260
Directory.subfile.filedate=1296231028
Directory.subfile.filedatetext=2011-01-28 17:10:28
Directory.subfile=C:\Programme\Application Updater\config.ini
Directory.subfile.size=85
Directory.subfile.md5=9E44EB00BBA056FA9B8440EF1D6C356E
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $B5E507B2] Text file (File, nothing done)
C:\Programme\Application Updater\config.ini
Properties.size=85
Properties.md5=9E44EB00BBA056FA9B8440EF1D6C356E
Properties.filedate=1298355323
Properties.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $05E59E37] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
Directory.subfile.size=45
Directory.subfile.md5=DD9603D0052E892266D2C9AE59062A4B
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
Directory.subfile.size=526336
Directory.subfile.md5=B8F85EACBBBF7A36A542ED35105B10AF
Directory.subfile.filedate=1296232602
Directory.subfile.filedatetext=2011-01-28 17:36:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ff.xml
Directory.subfile.size=849
Directory.subfile.md5=ACF1EF4F2C71EB8FBBADC340153D920A
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ie.xml
Directory.subfile.size=460
Directory.subfile.md5=2D42E2CEF20A53BF068FAF3CA18D9108
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
Directory.subfile.size=146
Directory.subfile.md5=739A1DBBC5969F0560B61421F23573E5
Directory.subfile.filedate=1296232782
Directory.subfile.filedatetext=2011-01-28 17:39:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\install.rdf
Directory.subfile.size=990
Directory.subfile.md5=9A9AB91D3606EBE4684A4EB57549F7C5
Directory.subfile.filedate=1296232782
Directory.subfile.filedatetext=2011-01-28 17:39:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
Directory.subfile.size=232
Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
Directory.subfile.size=308
Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
Directory.subfile.size=596992
Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
Directory.subfile.filedate=1296232576
Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $9DDBABD2] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
Directory.subfile.size=45
Directory.subfile.md5=DD9603D0052E892266D2C9AE59062A4B
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
Directory.subfile.size=526336
Directory.subfile.md5=B8F85EACBBBF7A36A542ED35105B10AF
Directory.subfile.filedate=1296232602
Directory.subfile.filedatetext=2011-01-28 17:36:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ff.xml
Directory.subfile.size=849
Directory.subfile.md5=ACF1EF4F2C71EB8FBBADC340153D920A
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ie.xml
Directory.subfile.size=460
Directory.subfile.md5=2D42E2CEF20A53BF068FAF3CA18D9108
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $10B6A612] Data (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
Properties.size=45
Properties.md5=DD9603D0052E892266D2C9AE59062A4B
Properties.filedate=1298355323
Properties.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $2CCE143F] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\Res\

Widgi.Toolbar: [SBI $2CEF1646] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
Directory.subfile.size=146
Directory.subfile.md5=739A1DBBC5969F0560B61421F23573E5
Directory.subfile.filedate=1296232782
Directory.subfile.filedatetext=2011-01-28 17:39:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\install.rdf
Directory.subfile.size=990
Directory.subfile.md5=9A9AB91D3606EBE4684A4EB57549F7C5
Directory.subfile.filedate=1296232782
Directory.subfile.filedatetext=2011-01-28 17:39:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
Directory.subfile.size=232
Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
Directory.subfile.size=308
Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
Directory.subfile.size=596992
Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
Directory.subfile.filedate=1296232576
Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $AA0B055F] Data (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
Properties.size=146
Properties.md5=739A1DBBC5969F0560B61421F23573E5
Properties.filedate=1296232782
Properties.filedatetext=2011-01-28 17:39:42

Widgi.Toolbar: [SBI $56E021F7] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
Directory.subfile.size=232
Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
Directory.subfile.size=308
Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
Directory.subfile.size=596992
Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
Directory.subfile.filedate=1296232576
Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $2B7574E7] Data (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
Properties.size=232
Properties.md5=D2FE788EDBFAFCB041A266FAA706251A
Properties.filedate=1295313066
Properties.filedatetext=2011-01-18 02:11:06

Widgi.Toolbar: [SBI $B3254F10] Data (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
Properties.size=308
Properties.md5=78790228A0F4CACC233ED694B6C70CB2
Properties.filedate=1295313066
Properties.filedatetext=2011-01-18 02:11:06

Widgi.Toolbar: [SBI $E4808FA3] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Application Updater\

Click.GiftLoad: [SBI $5ABC7D37] User settings (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\enablehttp1_1

Uniblue.DriverScanner: [SBI $EE6536E6] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\driverscanner

Microsoft.WindowsSecurityCenter.AntiVirusOverride: [SBI $3604910C] Settings (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\s.ytimg.com\soundData.sol
Properties.size=49
Properties.md5=18350A328022541115D248C2EA04C860
Properties.filedate=1363600032
Properties.filedatetext=2013-03-18 10:47:12

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\s.ytimg.com\videostats.sol
Properties.size=275
Properties.md5=2351928AD51424CF333C8C33035B7F00
Properties.filedate=1363633163
Properties.filedatetext=2013-03-18 19:59:22

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\secureinclude.ebaystatic.com\ebayLSO.sol
Properties.size=131
Properties.md5=6B8C1ADE576AAE2DB14F24B3834174CA
Properties.filedate=1363433196
Properties.filedatetext=2013-03-16 12:26:36

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\secureinclude.ebaystatic.com\ebayT.sol
Properties.size=39
Properties.md5=B43F43445AA3414DDC22EC80FBB22871
Properties.filedate=1363433196
Properties.filedatetext=2013-03-16 12:26:36

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\static.afcdn.com\com.jeroenwijering.sol
Properties.size=50
Properties.md5=283B44FC0AC0DC2B75215D991B61C210
Properties.filedate=1363589265
Properties.filedatetext=2013-03-18 07:47:45

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\streamcloud.eu\com.jeroenwijering.sol
Properties.size=64
Properties.md5=1F823EB48C0B57444200E645153D8F54
Properties.filedate=1363453153
Properties.filedatetext=2013-03-16 17:59:12

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\www.paypalobjects.com\ppLsoTest.sol
Properties.size=48
Properties.md5=74EE4375686A2069414EEF13E7B62789
Properties.filedate=1363601614
Properties.filedatetext=2013-03-18 11:13:33

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977] Text file (File, nothing done)
C:\Dokumente und Einstellungen\computeradministrar\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\6LLJMKDR\skype.com\#ui\preferences.sol
Properties.size=235
Properties.md5=1D7D04F31FE16A67CECFB96D82C67B0B
Properties.filedate=1358102109
Properties.filedatetext=2013-01-13 19:35:09

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977] Text file (File, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\static.putlocker.com\video_player.swf\org.flowplayer.sol
Properties.size=60
Properties.md5=11B628CEABE61125FA85414F1AC515EA
Properties.filedate=1363450129
Properties.filedatetext=2013-03-16 17:08:49

Right Media: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)


DoubleClick: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)


Statcounter: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)


FastClick: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)


MediaPlex: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)


MediaPlex: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)


DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


Statcounter: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


WebTrends live: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


Statcounter: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)


DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)


MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)


MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)


MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)


DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)


Common Dialogs: [SBI $8E73A7FB] History (12 files) (Registry Key, nothing done)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU

Log: [SBI $8E73A7FB] Activity: SchedLgU.Txt (File, nothing done)
C:\WINDOWS\SchedLgU.Txt
Properties.size=32338
Properties.md5=61653B1D03CDFE4C9E9F703194653198
Properties.filedate=1363630354
Properties.filedatetext=2013-03-18 19:12:33

Log: [SBI $8E73A7FB] Install: setupapi.log (File, nothing done)
C:\WINDOWS\setupapi.log
Properties.size=2504
Properties.md5=19D5316223C689F717BDEE3362024E86
Properties.filedate=1363633655
Properties.filedatetext=2013-03-18 20:07:34

Log: [SBI $8E73A7FB] Shutdown: System32\wbem\logs\wbemcore.log (File, nothing done)
C:\WINDOWS\System32\wbem\logs\wbemcore.log
Properties.size=53878
Properties.md5=4C7880AB4F8A0DD6F55D4B6C39AB40F6
Properties.filedate=1363645474
Properties.filedatetext=2013-03-18 23:24:34

Log: [SBI $8E73A7FB] Shutdown: System32\wbem\logs\wbemess.log (File, nothing done)
C:\WINDOWS\System32\wbem\logs\wbemess.log
Properties.size=49985
Properties.md5=C972ADB81B9C81850A42DD2FC1BF6E2A
Properties.filedate=1363642756
Properties.filedatetext=2013-03-18 22:39:16

Log: [SBI $8E73A7FB] Shutdown: System32\wbem\logs\wbemprox.log (File, nothing done)
C:\WINDOWS\System32\wbem\logs\wbemprox.log
Properties.size=3352
Properties.md5=531C35F1E800C0B18CB324380ABCB1D3
Properties.filedate=1363639984
Properties.filedatetext=2013-03-18 21:53:03

Log: [SBI $8E73A7FB] Shutdown: System32\wbem\logs\wmiprov.log (File, nothing done)
C:\WINDOWS\System32\wbem\logs\wmiprov.log
Properties.size=527
Properties.md5=BEE4B7E2D964B7D1615E5337F2FDF96D
Properties.filedate=1363630961
Properties.filedatetext=2013-03-18 19:22:41

Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Internet Explorer\TypedURLs

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Isobuster: [SBI $FFCD5808] Last save folder (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Smart Projects\IsoBuster\LastSavedPath

MS Media Player: [SBI $6D2E50D8] Last selected node (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\MediaPlayer\MediaLibraryUI\MLLastSelectedNode

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS Office 11.0 (Access): [SBI $7F916EA4] Recent database #1 (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Access\Settings\MRU1

MS Office 11.0 (Cliparts): [SBI $D2A56AFD] Last search made (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Clip Organizer\Search\Last Query

MS Office 11.0 (PowerPoint): [SBI $45221EA4] Recent template list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\Recent Templates

MS Office 11.0 (PowerPoint): [SBI $81078145] Recent animation list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentAnimationList

MS Office 11.0 (PowerPoint): [SBI $8C3C6CBB] Recent folder list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentFolderList

MS Office 11.0 (PowerPoint): [SBI $C04A11CB] Recent template list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentTemplateList

MS Office 11.0 (Word): [SBI $15AC27CE] Recent file list (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Word\Data\Settings

MS Fax: [SBI $F2D1A0E8] Last country ID (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastCountryID

MS Fax: [SBI $8F651DE1] Last recipient name (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastRecipientName

MS Fax: [SBI $17E7FB0C] Last recipient number (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastRecipientNumber

MS Windows Backup 5.0: [SBI $9CE336F6] Last created backup set (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Ntbackup\Hardware\Logical Disk File

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows.OpenWith: [SBI $6CBE8CD7] Open with list - .ASP extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ASP\OpenWithList

Windows.OpenWith: [SBI $CDE7D0A6] Open with list - .ASX extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ASX\OpenWithList

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

Windows.OpenWith: [SBI $691C1B44] Open with list - .BIN extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BIN\OpenWithList

Windows.OpenWith: [SBI $A1C94E79] Open with list - .BMP extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\OpenWithList

Windows.OpenWith: [SBI $63036C95] Open with list - .CAB extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CAB\OpenWithList

Windows.OpenWith: [SBI $3A470490] Open with list - .CCF extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CCF\OpenWithList

Windows.OpenWith: [SBI $9E8D5C8A] Open with list - .CDA extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CDA\OpenWithList

Windows.OpenWith: [SBI $E9115E4D] Open with list - .CER extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CER\OpenWithList

Windows.OpenWith: [SBI $7E93AD81] Open with list - .CSS extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSS\OpenWithList

Windows.OpenWith: [SBI $ECC28BDF] Open with list - .CSV extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSV\OpenWithList

Windows.OpenWith: [SBI $F34FE1D0] Open with list - .CUE extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CUE\OpenWithList

Windows Explorer: [SBI $7308A845] Run history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU

Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Explorer: [SBI $2026AFB6] User Assistant history IE (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: [SBI $2026AFB6] User Assistant history IE (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: [SBI $6107D172] User Assistant history files (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: [SBI $6107D172] User Assistant history files (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: [SBI $B7EBA926] Last visited history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Windows Explorer: [SBI $85C2C910] Last Copy/MoveTo folder (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\CopyMoveTo\LastFolder

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Cookie: [SBI $49804B54] Browser: Cookie (16) (Browser: Cookie, nothing done)


Cache: [SBI $49804B54] Browser: Cache (335) (Browser: Cache, nothing done)


Verlauf: [SBI $49804B54] Browser: History (88) (Browser: History, nothing done)


Cookie: [SBI $49804B54] Browser: Cookie (19) (Browser: Cookie, nothing done)


Cache: [SBI $49804B54] Browser: Cache (29) (Browser: Cache, nothing done)


Verlauf: [SBI $49804B54] Browser: History (4) (Browser: History, nothing done)


Cache: [SBI $49804B54] Browser: Cache (13) (Browser: Cache, nothing done)


Verlauf: [SBI $49804B54] Browser: History (1) (Browser: History, nothing done)


Cookie: [SBI $49804B54] Browser: Cookie (1148) (Browser: Cookie, nothing done)


Cookie: [SBI $49804B54] Browser: Cookie (104) (Browser: Cookie, nothing done)



--- Spybot - Search & Destroy version: 2.0.12.131 DLL (build: 20121113) ---

2012-11-13 blindman.exe (2.0.12.151)
2012-11-13 explorer.exe (2.0.12.173)
2012-11-13 SDBootCD.exe (2.0.12.109)
2012-11-13 SDCleaner.exe (2.0.12.110)
2012-11-13 SDDelFile.exe (2.0.12.94)
2012-11-13 SDFiles.exe (2.0.12.135)
2012-11-13 SDFileScanHelper.exe (2.0.12.1)
2012-11-13 SDFSSvc.exe (2.0.12.205)
2012-11-13 SDImmunize.exe (2.0.12.130)
2012-11-13 SDLogReport.exe (2.0.12.107)
2012-11-13 SDPESetup.exe (2.0.12.3)
2012-11-13 SDPEStart.exe (2.0.12.86)
2012-11-13 SDPhoneScan.exe (2.0.12.27)
2012-11-13 SDPRE.exe (2.0.12.13)
2012-11-13 SDPrepPos.exe (2.0.12.10)
2012-11-13 SDQuarantine.exe (2.0.12.103)
2012-11-13 SDRootAlyzer.exe (2.0.12.116)
2012-11-13 SDSBIEdit.exe (2.0.12.39)
2012-11-13 SDScan.exe (2.0.12.173)
2012-11-13 SDScript.exe (2.0.12.53)
2012-11-13 SDSettings.exe (2.0.12.130)
2012-11-13 SDShred.exe (2.0.12.105)
2012-11-13 SDSysRepair.exe (2.0.12.101)
2012-11-13 SDTools.exe (2.0.12.150)
2012-11-13 SDTray.exe (2.0.12.127)
2012-11-13 SDUpdate.exe (2.0.12.89)
2012-11-13 SDUpdSvc.exe (2.0.12.76)
2012-11-13 SDWelcome.exe (2.0.12.126)
2012-11-13 SDWSCSvc.exe (2.0.12.2)
2013-03-18 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2012-11-13 SDAdvancedCheckLibrary.dll (2.0.12.98)
2012-11-13 SDECon32.dll (2.0.12.113)
2012-11-13 SDEvents.dll (2.0.12.2)
2012-11-13 SDFileScanLibrary.dll (2.0.12.9)
2012-11-13 SDHelper.dll (2.0.12.88)
2012-11-13 SDImmunizeLibrary.dll (2.0.12.2)
2012-11-13 SDLists.dll (2.0.12.4)
2012-11-13 SDResources.dll (2.0.12.7)
2012-11-13 SDScanLibrary.dll (2.0.12.131)
2012-11-13 SDTasks.dll (2.0.12.15)
2012-11-13 SDWinLogon.dll (2.0.12.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2012-11-13 Tools.dll (2.0.12.36)
2012-11-13 UninsSrv.dll (2.0.12.52)
2012-11-14 Includes\Adware.sbi (*)
2012-11-14 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2012-11-14 Includes\Dialer.sbi (*)
2012-11-14 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2012-11-14 Includes\Hijackers.sbi (*)
2012-11-14 Includes\HijackersC.sbi (*)
2012-11-14 Includes\iPhone.sbi (*)
2012-11-14 Includes\Keyloggers.sbi (*)
2012-11-14 Includes\KeyloggersC.sbi (*)
2012-11-14 Includes\Malware.sbi (*)
2012-11-14 Includes\MalwareC.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2012-11-14 Includes\PUPSC.sbi (*)
2012-11-14 Includes\Security.sbi (*)
2012-11-14 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2012-11-14 Includes\Spyware.sbi (*)
2012-11-14 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2005-02-17 Includes\Tracks.uti (*)
2012-11-14 Includes\Trojans.sbi (*)
2012-11-14 Includes\TrojansC-02.sbi (*)
2012-11-14 Includes\TrojansC-03.sbi (*)
2012-11-14 Includes\TrojansC-04.sbi (*)
2012-11-14 Includes\TrojansC-05.sbi (*)
2012-11-14 Includes\TrojansC.sbi (*)

[CODE]Search results from Spybot - Search & Destroy

18.03.2013 23:29:08
Scan took 00:54:51.
162 items found.

Babylon.Toolbar: [SBI $38C57020] Library (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
Properties.size=323584
Properties.md5=5F933C75510CE7064600770488159453
Properties.filedate=1289121712
Properties.filedatetext=2010-11-07 10:21:52

Babylon.Toolbar: [SBI $554A5FF0] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylnApp.appCore

Babylon.Toolbar: [SBI $554A5FF0] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylnApp.appCore.1

Babylon.Toolbar: [SBI $554A5FF0] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Babylon.Toolbar: [SBI $5CBA2194] Library (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
Properties.size=184760
Properties.md5=CF158FAC1864EE97BFE3221285FEC23A
Properties.filedate=1289137528
Properties.filedatetext=2010-11-07 14:45:28

Babylon.Toolbar: [SBI $86348D5E] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Babylon.dskBnd

Babylon.Toolbar: [SBI $86348D5E] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Babylon.dskBnd.1

Babylon.Toolbar: [SBI $86348D5E] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}

Babylon.Toolbar: [SBI $B04483F7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr

Babylon.Toolbar: [SBI $B04483F7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1

Babylon.Toolbar: [SBI $B04483F7] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}

Babylon.Toolbar: [SBI $5601E539] Library (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
Properties.size=421888
Properties.md5=CE5D74D6AC19E94164DE0506D46B8AE8
Properties.filedate=1289121708
Properties.filedatetext=2010-11-07 10:21:48

Babylon.Toolbar: [SBI $7A3F9AD7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.xtrnl

Babylon.Toolbar: [SBI $7A3F9AD7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.xtrnl.1

Babylon.Toolbar: [SBI $7A3F9AD7] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

Babylon.Toolbar: [SBI $360EE791] Library (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
Properties.size=225720
Properties.md5=91BCFFE9095DFE033125ADD31EE7FFC1
Properties.filedate=1289137526
Properties.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $52C6ABB7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.BabylonESrvc

Babylon.Toolbar: [SBI $52C6ABB7] Root class (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.BabylonESrvc.1

Babylon.Toolbar: [SBI $52C6ABB7] Class ID (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484a-89D3-318C928DAC1B}

Babylon.Toolbar: [SBI $4E46F835] Program directory (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\BabylonToolbar\

Babylon.Toolbar: [SBI $1AA9620D] Program directory (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\BabylonToolbar\BabylonToolbar\

Babylon.Toolbar: [SBI $C2E2DFDF] Program directory (Directory, nothing done)
C:\Programme\BabylonToolbar\
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
Directory.subfile.size=93502
Directory.subfile.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
Directory.subfile.filedate=1293535580
Directory.subfile.filedatetext=2010-12-28 12:26:20
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
Directory.subfile.size=323584
Directory.subfile.md5=5F933C75510CE7064600770488159453
Directory.subfile.filedate=1289121712
Directory.subfile.filedatetext=2010-11-07 10:21:52
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
Directory.subfile.size=421888
Directory.subfile.md5=CE5D74D6AC19E94164DE0506D46B8AE8
Directory.subfile.filedate=1289121708
Directory.subfile.filedatetext=2010-11-07 10:21:48
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
Directory.subfile.size=286720
Directory.subfile.md5=000A83380536DF86EFE77D020D812F96
Directory.subfile.filedate=1289121720
Directory.subfile.filedatetext=2010-11-07 10:22:00
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
Directory.subfile.size=184760
Directory.subfile.md5=CF158FAC1864EE97BFE3221285FEC23A
Directory.subfile.filedate=1289137528
Directory.subfile.filedatetext=2010-11-07 14:45:28
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
Directory.subfile.size=94413
Directory.subfile.md5=2054AB2A45B1CF380D02D070D6DFE379
Directory.subfile.filedate=1308499538
Directory.subfile.filedatetext=2011-06-19 17:05:38
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
Directory.subfile.size=225720
Directory.subfile.md5=91BCFFE9095DFE033125ADD31EE7FFC1
Directory.subfile.filedate=1289137526
Directory.subfile.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $6FD65E4E] Program directory (Directory, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
Directory.subfile.size=93502
Directory.subfile.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
Directory.subfile.filedate=1293535580
Directory.subfile.filedatetext=2010-12-28 12:26:20
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
Directory.subfile.size=323584
Directory.subfile.md5=5F933C75510CE7064600770488159453
Directory.subfile.filedate=1289121712
Directory.subfile.filedatetext=2010-11-07 10:21:52
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
Directory.subfile.size=421888
Directory.subfile.md5=CE5D74D6AC19E94164DE0506D46B8AE8
Directory.subfile.filedate=1289121708
Directory.subfile.filedatetext=2010-11-07 10:21:48
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
Directory.subfile.size=286720
Directory.subfile.md5=000A83380536DF86EFE77D020D812F96
Directory.subfile.filedate=1289121720
Directory.subfile.filedatetext=2010-11-07 10:22:00
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
Directory.subfile.size=184760
Directory.subfile.md5=CF158FAC1864EE97BFE3221285FEC23A
Directory.subfile.filedate=1289137528
Directory.subfile.filedatetext=2010-11-07 14:45:28
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
Directory.subfile.size=94413
Directory.subfile.md5=2054AB2A45B1CF380D02D070D6DFE379
Directory.subfile.filedate=1308499538
Directory.subfile.filedatetext=2011-06-19 17:05:38
Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
Directory.subfile.size=225720
Directory.subfile.md5=91BCFFE9095DFE033125ADD31EE7FFC1
Directory.subfile.filedate=1289137526
Directory.subfile.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $B2252BB5] Program directory (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
Properties.size=93502
Properties.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
Properties.filedate=1293535580
Properties.filedatetext=2010-12-28 12:26:20

Babylon.Toolbar: [SBI $B7E3BC8B] Executable (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
Properties.size=286720
Properties.md5=000A83380536DF86EFE77D020D812F96
Properties.filedate=1289121720
Properties.filedatetext=2010-11-07 10:22:00

Babylon.Toolbar: [SBI $247AFEA8] Executable (File, nothing done)
C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
Properties.size=94413
Properties.md5=2054AB2A45B1CF380D02D070D6DFE379
Properties.filedate=1308499538
Properties.filedatetext=2011-06-19 17:05:38

Widgi.Toolbar: [SBI $16C3A07B] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\

Widgi.Toolbar: [SBI $000389AB] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\

Widgi.Toolbar: [SBI $1E14509F] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\Res\

Widgi.Toolbar: [SBI $51A36620] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\

Widgi.Toolbar: [SBI $14EAB21D] Settings (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\

Widgi.Toolbar: [SBI $65C7C8B1] Shared DLL (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Application Updater\ApplicationUpdater.exe

Widgi.Toolbar: [SBI $65C7C8B1] System file (File, nothing done)
C:\Programme\Application Updater\ApplicationUpdater.exe
Properties.size=387072
Properties.md5=CF46A776D2E44F180AF2773A9844D260
Properties.filedate=1296231028
Properties.filedatetext=2011-01-28 17:10:28

Widgi.Toolbar: [SBI $5AE37010] Shared DLL (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe

Widgi.Toolbar: [SBI $5AE37010] System file (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
Properties.size=526336
Properties.md5=B8F85EACBBBF7A36A542ED35105B10AF
Properties.filedate=1296232602
Properties.filedatetext=2011-01-28 17:36:42

Widgi.Toolbar: [SBI $1FDB1566] Shared DLL (Registry Value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll

Widgi.Toolbar: [SBI $1FDB1566] System file (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
Properties.size=596992
Properties.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
Properties.filedate=1296232576
Properties.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $A3625505] Application data folder (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\

Widgi.Toolbar: [SBI $7C436CA1] Application data folder (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\res\

Widgi.Toolbar: [SBI $B7BA3A77] Application data folder (Directory, nothing done)
C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\temp\

Widgi.Toolbar: [SBI $0B12F9B5] Program directory (Directory, nothing done)
C:\Programme\Application Updater\
Directory.subfile=C:\Programme\Application Updater\ApplicationUpdater.exe
Directory.subfile.size=387072
Directory.subfile.md5=CF46A776D2E44F180AF2773A9844D260
Directory.subfile.filedate=1296231028
Directory.subfile.filedatetext=2011-01-28 17:10:28
Directory.subfile=C:\Programme\Application Updater\config.ini
Directory.subfile.size=85
Directory.subfile.md5=9E44EB00BBA056FA9B8440EF1D6C356E
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $B5E507B2] Text file (File, nothing done)
C:\Programme\Application Updater\config.ini
Properties.size=85
Properties.md5=9E44EB00BBA056FA9B8440EF1D6C356E
Properties.filedate=1298355323
Properties.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $05E59E37] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
Directory.subfile.size=45
Directory.subfile.md5=DD9603D0052E892266D2C9AE59062A4B
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
Directory.subfile.size=526336
Directory.subfile.md5=B8F85EACBBBF7A36A542ED35105B10AF
Directory.subfile.filedate=1296232602
Directory.subfile.filedatetext=2011-01-28 17:36:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ff.xml
Directory.subfile.size=849
Directory.subfile.md5=ACF1EF4F2C71EB8FBBADC340153D920A
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ie.xml
Directory.subfile.size=460
Directory.subfile.md5=2D42E2CEF20A53BF068FAF3CA18D9108
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
Directory.subfile.size=146
Directory.subfile.md5=739A1DBBC5969F0560B61421F23573E5
Directory.subfile.filedate=1296232782
Directory.subfile.filedatetext=2011-01-28 17:39:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\install.rdf
Directory.subfile.size=990
Directory.subfile.md5=9A9AB91D3606EBE4684A4EB57549F7C5
Directory.subfile.filedate=1296232782
Directory.subfile.filedatetext=2011-01-28 17:39:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
Directory.subfile.size=232
Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
Directory.subfile.size=308
Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
Directory.subfile.size=596992
Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
Directory.subfile.filedate=1296232576
Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $9DDBABD2] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
Directory.subfile.size=45
Directory.subfile.md5=DD9603D0052E892266D2C9AE59062A4B
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
Directory.subfile.size=526336
Directory.subfile.md5=B8F85EACBBBF7A36A542ED35105B10AF
Directory.subfile.filedate=1296232602
Directory.subfile.filedatetext=2011-01-28 17:36:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ff.xml
Directory.subfile.size=849
Directory.subfile.md5=ACF1EF4F2C71EB8FBBADC340153D920A
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ie.xml
Directory.subfile.size=460
Directory.subfile.md5=2D42E2CEF20A53BF068FAF3CA18D9108
Directory.subfile.filedate=1298355323
Directory.subfile.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $10B6A612] Data (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
Properties.size=45
Properties.md5=DD9603D0052E892266D2C9AE59062A4B
Properties.filedate=1298355323
Properties.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $2CCE143F] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\Res\

Widgi.Toolbar: [SBI $2CEF1646] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
Directory.subfile.size=146
Directory.subfile.md5=739A1DBBC5969F0560B61421F23573E5
Directory.subfile.filedate=1296232782
Directory.subfile.filedatetext=2011-01-28 17:39:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\install.rdf
Directory.subfile.size=990
Directory.subfile.md5=9A9AB91D3606EBE4684A4EB57549F7C5
Directory.subfile.filedate=1296232782
Directory.subfile.filedatetext=2011-01-28 17:39:42
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
Directory.subfile.size=232
Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
Directory.subfile.size=308
Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
Directory.subfile.size=596992
Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
Directory.subfile.filedate=1296232576
Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $AA0B055F] Data (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
Properties.size=146
Properties.md5=739A1DBBC5969F0560B61421F23573E5
Properties.filedate=1296232782
Properties.filedatetext=2011-01-28 17:39:42

Widgi.Toolbar: [SBI $56E021F7] Program directory (Directory, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
Directory.subfile.size=232
Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
Directory.subfile.size=308
Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
Directory.subfile.filedate=1295313066
Directory.subfile.filedatetext=2011-01-18 02:11:06
Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
Directory.subfile.size=596992
Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
Directory.subfile.filedate=1296232576
Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $2B7574E7] Data (File, nothing done)
C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
Properties.size=232
Properties.md5=D2FE788EDBFAFCB041A266FAA706251A
Properties.filedate=1295313066
Properties.filedatetext=2011-01-18 02:11:06
__________________

Alt 02.06.2013, 14:10   #4
cosmicus
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Code:
ATTFilter
Widgi.Toolbar: [SBI $B3254F10]  Data (File, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
  Properties.size=308
  Properties.md5=78790228A0F4CACC233ED694B6C70CB2
  Properties.filedate=1295313066
  Properties.filedatetext=2011-01-18 02:11:06

Widgi.Toolbar: [SBI $E4808FA3] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Application Updater\

Click.GiftLoad: [SBI $5ABC7D37] User settings (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\enablehttp1_1

Uniblue.DriverScanner: [SBI $EE6536E6] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\driverscanner

Microsoft.WindowsSecurityCenter.AntiVirusOverride: [SBI $3604910C] Settings (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\s.ytimg.com\soundData.sol
  Properties.size=49
  Properties.md5=18350A328022541115D248C2EA04C860
  Properties.filedate=1363600032
  Properties.filedatetext=2013-03-18 10:47:12

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\s.ytimg.com\videostats.sol
  Properties.size=275
  Properties.md5=2351928AD51424CF333C8C33035B7F00
  Properties.filedate=1363633163
  Properties.filedatetext=2013-03-18 19:59:22

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\secureinclude.ebaystatic.com\ebayLSO.sol
  Properties.size=131
  Properties.md5=6B8C1ADE576AAE2DB14F24B3834174CA
  Properties.filedate=1363433196
  Properties.filedatetext=2013-03-16 12:26:36

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\secureinclude.ebaystatic.com\ebayT.sol
  Properties.size=39
  Properties.md5=B43F43445AA3414DDC22EC80FBB22871
  Properties.filedate=1363433196
  Properties.filedatetext=2013-03-16 12:26:36

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\static.afcdn.com\com.jeroenwijering.sol
  Properties.size=50
  Properties.md5=283B44FC0AC0DC2B75215D991B61C210
  Properties.filedate=1363589265
  Properties.filedatetext=2013-03-18 07:47:45

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\streamcloud.eu\com.jeroenwijering.sol
  Properties.size=64
  Properties.md5=1F823EB48C0B57444200E645153D8F54
  Properties.filedate=1363453153
  Properties.filedatetext=2013-03-16 17:59:12

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\www.paypalobjects.com\ppLsoTest.sol
  Properties.size=48
  Properties.md5=74EE4375686A2069414EEF13E7B62789
  Properties.filedate=1363601614
  Properties.filedatetext=2013-03-18 11:13:33

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\computeradministrar\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\6LLJMKDR\skype.com\#ui\preferences.sol
  Properties.size=235
  Properties.md5=1D7D04F31FE16A67CECFB96D82C67B0B
  Properties.filedate=1358102109
  Properties.filedatetext=2013-01-13 19:35:09

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\static.putlocker.com\video_player.swf\org.flowplayer.sol
  Properties.size=60
  Properties.md5=11B628CEABE61125FA85414F1AC515EA
  Properties.filedate=1363450129
  Properties.filedatetext=2013-03-16 17:08:49

Right Media: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)
  

FastClick: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

WebTrends live: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

Common Dialogs: [SBI $8E73A7FB] History  (12 files) (Registry Key, nothing done)
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU

Log: [SBI $8E73A7FB]  Activity: SchedLgU.Txt (File, nothing done)
  C:\WINDOWS\SchedLgU.Txt
  Properties.size=32338
  Properties.md5=61653B1D03CDFE4C9E9F703194653198
  Properties.filedate=1363630354
  Properties.filedatetext=2013-03-18 19:12:33

Log: [SBI $8E73A7FB]  Install: setupapi.log (File, nothing done)
  C:\WINDOWS\setupapi.log
  Properties.size=2504
  Properties.md5=19D5316223C689F717BDEE3362024E86
  Properties.filedate=1363633655
  Properties.filedatetext=2013-03-18 20:07:34

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemcore.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemcore.log
  Properties.size=53878
  Properties.md5=4C7880AB4F8A0DD6F55D4B6C39AB40F6
  Properties.filedate=1363645474
  Properties.filedatetext=2013-03-18 23:24:34

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemess.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemess.log
  Properties.size=49985
  Properties.md5=C972ADB81B9C81850A42DD2FC1BF6E2A
  Properties.filedate=1363642756
  Properties.filedatetext=2013-03-18 22:39:16

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemprox.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemprox.log
  Properties.size=3352
  Properties.md5=531C35F1E800C0B18CB324380ABCB1D3
  Properties.filedate=1363639984
  Properties.filedatetext=2013-03-18 21:53:03

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wmiprov.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wmiprov.log
  Properties.size=527
  Properties.md5=BEE4B7E2D964B7D1615E5337F2FDF96D
  Properties.filedate=1363630961
  Properties.filedatetext=2013-03-18 19:22:41

Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Internet Explorer\TypedURLs

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Isobuster: [SBI $FFCD5808] Last save folder (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Smart Projects\IsoBuster\LastSavedPath

MS Media Player: [SBI $6D2E50D8] Last selected node (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\MediaPlayer\MediaLibraryUI\MLLastSelectedNode

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS Office 11.0 (Access): [SBI $7F916EA4] Recent database #1 (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Access\Settings\MRU1

MS Office 11.0 (Cliparts): [SBI $D2A56AFD] Last search made (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Clip Organizer\Search\Last Query

MS Office 11.0 (PowerPoint): [SBI $45221EA4] Recent template list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\Recent Templates

MS Office 11.0 (PowerPoint): [SBI $81078145] Recent animation list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentAnimationList

MS Office 11.0 (PowerPoint): [SBI $8C3C6CBB] Recent folder list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentFolderList

MS Office 11.0 (PowerPoint): [SBI $C04A11CB] Recent template list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentTemplateList

MS Office 11.0 (Word): [SBI $15AC27CE] Recent file list (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Word\Data\Settings

MS Fax: [SBI $F2D1A0E8] Last country ID (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastCountryID

MS Fax: [SBI $8F651DE1] Last recipient name (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastRecipientName

MS Fax: [SBI $17E7FB0C] Last recipient number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastRecipientNumber

MS Windows Backup 5.0: [SBI $9CE336F6] Last created backup set (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Ntbackup\Hardware\Logical Disk File

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows.OpenWith: [SBI $6CBE8CD7] Open with list - .ASP extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ASP\OpenWithList

Windows.OpenWith: [SBI $CDE7D0A6] Open with list - .ASX extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ASX\OpenWithList

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

Windows.OpenWith: [SBI $691C1B44] Open with list - .BIN extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BIN\OpenWithList

Windows.OpenWith: [SBI $A1C94E79] Open with list - .BMP extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\OpenWithList

Windows.OpenWith: [SBI $63036C95] Open with list - .CAB extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CAB\OpenWithList

Windows.OpenWith: [SBI $3A470490] Open with list - .CCF extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CCF\OpenWithList

Windows.OpenWith: [SBI $9E8D5C8A] Open with list - .CDA extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CDA\OpenWithList

Windows.OpenWith: [SBI $E9115E4D] Open with list - .CER extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CER\OpenWithList

Windows.OpenWith: [SBI $7E93AD81] Open with list - .CSS extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSS\OpenWithList

Windows.OpenWith: [SBI $ECC28BDF] Open with list - .CSV extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSV\OpenWithList

Windows.OpenWith: [SBI $F34FE1D0] Open with list - .CUE extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CUE\OpenWithList

Windows Explorer: [SBI $7308A845] Run history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU

Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Explorer: [SBI $2026AFB6] User Assistant history IE (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: [SBI $2026AFB6] User Assistant history IE (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: [SBI $6107D172] User Assistant history files (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: [SBI $6107D172] User Assistant history files (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: [SBI $B7EBA926] Last visited history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Windows Explorer: [SBI $85C2C910] Last Copy/MoveTo folder (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\CopyMoveTo\LastFolder

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Cookie: [SBI $49804B54] Browser: Cookie (16) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (335) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (88) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (19) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (29) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (4) (Browser: History, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (13) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (1) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (1148) (Browser: Cookie, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (104) (Browser: Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 2.0.12.131  DLL (build: 20121113) ---

2012-11-13 blindman.exe (2.0.12.151)
2012-11-13 explorer.exe (2.0.12.173)
2012-11-13 SDBootCD.exe (2.0.12.109)
2012-11-13 SDCleaner.exe (2.0.12.110)
2012-11-13 SDDelFile.exe (2.0.12.94)
2012-11-13 SDFiles.exe (2.0.12.135)
2012-11-13 SDFileScanHelper.exe (2.0.12.1)
2012-11-13 SDFSSvc.exe (2.0.12.205)
2012-11-13 SDImmunize.exe (2.0.12.130)
2012-11-13 SDLogReport.exe (2.0.12.107)
2012-11-13 SDPESetup.exe (2.0.12.3)
2012-11-13 SDPEStart.exe (2.0.12.86)
2012-11-13 SDPhoneScan.exe (2.0.12.27)
2012-11-13 SDPRE.exe (2.0.12.13)
2012-11-13 SDPrepPos.exe (2.0.12.10)
2012-11-13 SDQuarantine.exe (2.0.12.103)
2012-11-13 SDRootAlyzer.exe (2.0.12.116)
2012-11-13 SDSBIEdit.exe (2.0.12.39)
2012-11-13 SDScan.exe (2.0.12.173)
2012-11-13 SDScript.exe (2.0.12.53)
2012-11-13 SDSettings.exe (2.0.12.130)
2012-11-13 SDShred.exe (2.0.12.105)
2012-11-13 SDSysRepair.exe (2.0.12.101)
2012-11-13 SDTools.exe (2.0.12.150)
2012-11-13 SDTray.exe (2.0.12.127)
2012-11-13 SDUpdate.exe (2.0.12.89)
2012-11-13 SDUpdSvc.exe (2.0.12.76)
2012-11-13 SDWelcome.exe (2.0.12.126)
2012-11-13 SDWSCSvc.exe (2.0.12.2)
2013-03-18 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2012-11-13 SDAdvancedCheckLibrary.dll (2.0.12.98)
2012-11-13 SDECon32.dll (2.0.12.113)
2012-11-13 SDEvents.dll (2.0.12.2)
2012-11-13 SDFileScanLibrary.dll (2.0.12.9)
2012-11-13 SDHelper.dll (2.0.12.88)
2012-11-13 SDImmunizeLibrary.dll (2.0.12.2)
2012-11-13 SDLists.dll (2.0.12.4)
2012-11-13 SDResources.dll (2.0.12.7)
2012-11-13 SDScanLibrary.dll (2.0.12.131)
2012-11-13 SDTasks.dll (2.0.12.15)
2012-11-13 SDWinLogon.dll (2.0.12.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2012-11-13 Tools.dll (2.0.12.36)
2012-11-13 UninsSrv.dll (2.0.12.52)
2012-11-14 Includes\Adware.sbi (*)
2012-11-14 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2012-11-14 Includes\Dialer.sbi (*)
2012-11-14 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2012-11-14 Includes\Hijackers.sbi (*)
2012-11-14 Includes\HijackersC.sbi (*)
2012-11-14 Includes\iPhone.sbi (*)
2012-11-14 Includes\Keyloggers.sbi (*)
2012-11-14 Includes\KeyloggersC.sbi (*)
2012-11-14 Includes\Malware.sbi (*)
2012-11-14 Includes\MalwareC.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2012-11-14 Includes\PUPSC.sbi (*)
2012-11-14 Includes\Security.sbi (*)
2012-11-14 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2012-11-14 Includes\Spyware.sbi (*)
2012-11-14 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2005-02-17 Includes\Tracks.uti (*)
2012-11-14 Includes\Trojans.sbi (*)
2012-11-14 Includes\TrojansC-02.sbi (*)
2012-11-14 Includes\TrojansC-03.sbi (*)
2012-11-14 Includes\TrojansC-04.sbi (*)
2012-11-14 Includes\TrojansC-05.sbi (*)
2012-11-14 Includes\TrojansC.sbi (*)

Search results from Spybot - Search & Destroy

18.03.2013 23:29:08
Scan took 00:54:51.
162 items found.

Babylon.Toolbar: [SBI $38C57020]  Library (File, nothing done)
  C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
  Properties.size=323584
  Properties.md5=5F933C75510CE7064600770488159453
  Properties.filedate=1289121712
  Properties.filedatetext=2010-11-07 10:21:52

Babylon.Toolbar: [SBI $554A5FF0] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylnApp.appCore

Babylon.Toolbar: [SBI $554A5FF0] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylnApp.appCore.1

Babylon.Toolbar: [SBI $554A5FF0] Class ID (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Babylon.Toolbar: [SBI $5CBA2194]  Library (File, nothing done)
  C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
  Properties.size=184760
  Properties.md5=CF158FAC1864EE97BFE3221285FEC23A
  Properties.filedate=1289137528
  Properties.filedatetext=2010-11-07 14:45:28

Babylon.Toolbar: [SBI $86348D5E] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Babylon.dskBnd

Babylon.Toolbar: [SBI $86348D5E] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Babylon.dskBnd.1

Babylon.Toolbar: [SBI $86348D5E] Class ID (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}

Babylon.Toolbar: [SBI $B04483F7] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr

Babylon.Toolbar: [SBI $B04483F7] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1

Babylon.Toolbar: [SBI $B04483F7] Class ID (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}

Babylon.Toolbar: [SBI $5601E539]  Library (File, nothing done)
  C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
  Properties.size=421888
  Properties.md5=CE5D74D6AC19E94164DE0506D46B8AE8
  Properties.filedate=1289121708
  Properties.filedatetext=2010-11-07 10:21:48

Babylon.Toolbar: [SBI $7A3F9AD7] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.xtrnl

Babylon.Toolbar: [SBI $7A3F9AD7] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\bbylntlbr.xtrnl.1

Babylon.Toolbar: [SBI $7A3F9AD7] Class ID (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

Babylon.Toolbar: [SBI $360EE791]  Library (File, nothing done)
  C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
  Properties.size=225720
  Properties.md5=91BCFFE9095DFE033125ADD31EE7FFC1
  Properties.filedate=1289137526
  Properties.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $52C6ABB7] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.BabylonESrvc

Babylon.Toolbar: [SBI $52C6ABB7] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.BabylonESrvc.1

Babylon.Toolbar: [SBI $52C6ABB7] Class ID (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484a-89D3-318C928DAC1B}

Babylon.Toolbar: [SBI $4E46F835] Program directory (Directory, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\BabylonToolbar\

Babylon.Toolbar: [SBI $1AA9620D] Program directory (Directory, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\BabylonToolbar\BabylonToolbar\

Babylon.Toolbar: [SBI $C2E2DFDF] Program directory (Directory, nothing done)
  C:\Programme\BabylonToolbar\
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
  Directory.subfile.size=93502
  Directory.subfile.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
  Directory.subfile.filedate=1293535580
  Directory.subfile.filedatetext=2010-12-28 12:26:20
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
  Directory.subfile.size=323584
  Directory.subfile.md5=5F933C75510CE7064600770488159453
  Directory.subfile.filedate=1289121712
  Directory.subfile.filedatetext=2010-11-07 10:21:52
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
  Directory.subfile.size=421888
  Directory.subfile.md5=CE5D74D6AC19E94164DE0506D46B8AE8
  Directory.subfile.filedate=1289121708
  Directory.subfile.filedatetext=2010-11-07 10:21:48
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
  Directory.subfile.size=286720
  Directory.subfile.md5=000A83380536DF86EFE77D020D812F96
  Directory.subfile.filedate=1289121720
  Directory.subfile.filedatetext=2010-11-07 10:22:00
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
  Directory.subfile.size=184760
  Directory.subfile.md5=CF158FAC1864EE97BFE3221285FEC23A
  Directory.subfile.filedate=1289137528
  Directory.subfile.filedatetext=2010-11-07 14:45:28
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
  Directory.subfile.size=94413
  Directory.subfile.md5=2054AB2A45B1CF380D02D070D6DFE379
  Directory.subfile.filedate=1308499538
  Directory.subfile.filedatetext=2011-06-19 17:05:38
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
  Directory.subfile.size=225720
  Directory.subfile.md5=91BCFFE9095DFE033125ADD31EE7FFC1
  Directory.subfile.filedate=1289137526
  Directory.subfile.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $6FD65E4E] Program directory (Directory, nothing done)
  C:\Programme\BabylonToolbar\BabylonToolbar\
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
  Directory.subfile.size=93502
  Directory.subfile.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
  Directory.subfile.filedate=1293535580
  Directory.subfile.filedatetext=2010-12-28 12:26:20
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll
  Directory.subfile.size=323584
  Directory.subfile.md5=5F933C75510CE7064600770488159453
  Directory.subfile.filedate=1289121712
  Directory.subfile.filedatetext=2010-11-07 10:21:52
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll
  Directory.subfile.size=421888
  Directory.subfile.md5=CE5D74D6AC19E94164DE0506D46B8AE8
  Directory.subfile.filedate=1289121708
  Directory.subfile.filedatetext=2010-11-07 10:21:48
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
  Directory.subfile.size=286720
  Directory.subfile.md5=000A83380536DF86EFE77D020D812F96
  Directory.subfile.filedate=1289121720
  Directory.subfile.filedatetext=2010-11-07 10:22:00
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
  Directory.subfile.size=184760
  Directory.subfile.md5=CF158FAC1864EE97BFE3221285FEC23A
  Directory.subfile.filedate=1289137528
  Directory.subfile.filedatetext=2010-11-07 14:45:28
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
  Directory.subfile.size=94413
  Directory.subfile.md5=2054AB2A45B1CF380D02D070D6DFE379
  Directory.subfile.filedate=1308499538
  Directory.subfile.filedatetext=2011-06-19 17:05:38
  Directory.subfile=C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
  Directory.subfile.size=225720
  Directory.subfile.md5=91BCFFE9095DFE033125ADD31EE7FFC1
  Directory.subfile.filedate=1289137526
  Directory.subfile.filedatetext=2010-11-07 14:45:26

Babylon.Toolbar: [SBI $B2252BB5]  Program directory (File, nothing done)
  C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
  Properties.size=93502
  Properties.md5=AA02A79239A33EEF3B2DE2D2D33BC84E
  Properties.filedate=1293535580
  Properties.filedatetext=2010-12-28 12:26:20

Babylon.Toolbar: [SBI $B7E3BC8B]  Executable (File, nothing done)
  C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
  Properties.size=286720
  Properties.md5=000A83380536DF86EFE77D020D812F96
  Properties.filedate=1289121720
  Properties.filedatetext=2010-11-07 10:22:00

Babylon.Toolbar: [SBI $247AFEA8]  Executable (File, nothing done)
  C:\Programme\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe
  Properties.size=94413
  Properties.md5=2054AB2A45B1CF380D02D070D6DFE379
  Properties.filedate=1308499538
  Properties.filedatetext=2011-06-19 17:05:38

Widgi.Toolbar: [SBI $16C3A07B] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\

Widgi.Toolbar: [SBI $000389AB] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\

Widgi.Toolbar: [SBI $1E14509F] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\Res\

Widgi.Toolbar: [SBI $51A36620] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\

Widgi.Toolbar: [SBI $14EAB21D] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\

Widgi.Toolbar: [SBI $65C7C8B1] Shared DLL (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Application Updater\ApplicationUpdater.exe

Widgi.Toolbar: [SBI $65C7C8B1]  System file (File, nothing done)
  C:\Programme\Application Updater\ApplicationUpdater.exe
  Properties.size=387072
  Properties.md5=CF46A776D2E44F180AF2773A9844D260
  Properties.filedate=1296231028
  Properties.filedatetext=2011-01-28 17:10:28

Widgi.Toolbar: [SBI $5AE37010] Shared DLL (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe

Widgi.Toolbar: [SBI $5AE37010]  System file (File, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
  Properties.size=526336
  Properties.md5=B8F85EACBBBF7A36A542ED35105B10AF
  Properties.filedate=1296232602
  Properties.filedatetext=2011-01-28 17:36:42

Widgi.Toolbar: [SBI $1FDB1566] Shared DLL (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll

Widgi.Toolbar: [SBI $1FDB1566]  System file (File, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
  Properties.size=596992
  Properties.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
  Properties.filedate=1296232576
  Properties.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $A3625505] Application data folder (Directory, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\

Widgi.Toolbar: [SBI $7C436CA1] Application data folder (Directory, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\res\

Widgi.Toolbar: [SBI $B7BA3A77] Application data folder (Directory, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Search Settings\temp\

Widgi.Toolbar: [SBI $0B12F9B5] Program directory (Directory, nothing done)
  C:\Programme\Application Updater\
  Directory.subfile=C:\Programme\Application Updater\ApplicationUpdater.exe
  Directory.subfile.size=387072
  Directory.subfile.md5=CF46A776D2E44F180AF2773A9844D260
  Directory.subfile.filedate=1296231028
  Directory.subfile.filedatetext=2011-01-28 17:10:28
  Directory.subfile=C:\Programme\Application Updater\config.ini
  Directory.subfile.size=85
  Directory.subfile.md5=9E44EB00BBA056FA9B8440EF1D6C356E
  Directory.subfile.filedate=1298355323
  Directory.subfile.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $B5E507B2]  Text file (File, nothing done)
  C:\Programme\Application Updater\config.ini
  Properties.size=85
  Properties.md5=9E44EB00BBA056FA9B8440EF1D6C356E
  Properties.filedate=1298355323
  Properties.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $05E59E37] Program directory (Directory, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
  Directory.subfile.size=45
  Directory.subfile.md5=DD9603D0052E892266D2C9AE59062A4B
  Directory.subfile.filedate=1298355323
  Directory.subfile.filedatetext=2011-02-22 07:15:23
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
  Directory.subfile.size=526336
  Directory.subfile.md5=B8F85EACBBBF7A36A542ED35105B10AF
  Directory.subfile.filedate=1296232602
  Directory.subfile.filedatetext=2011-01-28 17:36:42
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ff.xml
  Directory.subfile.size=849
  Directory.subfile.md5=ACF1EF4F2C71EB8FBBADC340153D920A
  Directory.subfile.filedate=1298355323
  Directory.subfile.filedatetext=2011-02-22 07:15:23
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ie.xml
  Directory.subfile.size=460
  Directory.subfile.md5=2D42E2CEF20A53BF068FAF3CA18D9108
  Directory.subfile.filedate=1298355323
  Directory.subfile.filedatetext=2011-02-22 07:15:23
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
  Directory.subfile.size=146
  Directory.subfile.md5=739A1DBBC5969F0560B61421F23573E5
  Directory.subfile.filedate=1296232782
  Directory.subfile.filedatetext=2011-01-28 17:39:42
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\install.rdf
  Directory.subfile.size=990
  Directory.subfile.md5=9A9AB91D3606EBE4684A4EB57549F7C5
  Directory.subfile.filedate=1296232782
  Directory.subfile.filedatetext=2011-01-28 17:39:42
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
  Directory.subfile.size=232
  Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
  Directory.subfile.filedate=1295313066
  Directory.subfile.filedatetext=2011-01-18 02:11:06
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
  Directory.subfile.size=308
  Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
  Directory.subfile.filedate=1295313066
  Directory.subfile.filedatetext=2011-01-18 02:11:06
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
  Directory.subfile.size=596992
  Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
  Directory.subfile.filedate=1296232576
  Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $9DDBABD2] Program directory (Directory, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
  Directory.subfile.size=45
  Directory.subfile.md5=DD9603D0052E892266D2C9AE59062A4B
  Directory.subfile.filedate=1298355323
  Directory.subfile.filedatetext=2011-02-22 07:15:23
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe
  Directory.subfile.size=526336
  Directory.subfile.md5=B8F85EACBBBF7A36A542ED35105B10AF
  Directory.subfile.filedate=1296232602
  Directory.subfile.filedatetext=2011-01-28 17:36:42
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ff.xml
  Directory.subfile.size=849
  Directory.subfile.md5=ACF1EF4F2C71EB8FBBADC340153D920A
  Directory.subfile.filedate=1298355323
  Directory.subfile.filedatetext=2011-02-22 07:15:23
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\yahoo_ie.xml
  Directory.subfile.size=460
  Directory.subfile.md5=2D42E2CEF20A53BF068FAF3CA18D9108
  Directory.subfile.filedate=1298355323
  Directory.subfile.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $10B6A612]  Data (File, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\config.ini
  Properties.size=45
  Properties.md5=DD9603D0052E892266D2C9AE59062A4B
  Properties.filedate=1298355323
  Properties.filedatetext=2011-02-22 07:15:23

Widgi.Toolbar: [SBI $2CCE143F] Program directory (Directory, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\Res\

Widgi.Toolbar: [SBI $2CEF1646] Program directory (Directory, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
  Directory.subfile.size=146
  Directory.subfile.md5=739A1DBBC5969F0560B61421F23573E5
  Directory.subfile.filedate=1296232782
  Directory.subfile.filedatetext=2011-01-28 17:39:42
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\install.rdf
  Directory.subfile.size=990
  Directory.subfile.md5=9A9AB91D3606EBE4684A4EB57549F7C5
  Directory.subfile.filedate=1296232782
  Directory.subfile.filedatetext=2011-01-28 17:39:42
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
  Directory.subfile.size=232
  Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
  Directory.subfile.filedate=1295313066
  Directory.subfile.filedatetext=2011-01-18 02:11:06
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
  Directory.subfile.size=308
  Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
  Directory.subfile.filedate=1295313066
  Directory.subfile.filedatetext=2011-01-18 02:11:06
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
  Directory.subfile.size=596992
  Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
  Directory.subfile.filedate=1296232576
  Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $AA0B055F]  Data (File, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\chrome.manifest
  Properties.size=146
  Properties.md5=739A1DBBC5969F0560B61421F23573E5
  Properties.filedate=1296232782
  Properties.filedatetext=2011-01-28 17:39:42

Widgi.Toolbar: [SBI $56E021F7] Program directory (Directory, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
  Directory.subfile.size=232
  Directory.subfile.md5=D2FE788EDBFAFCB041A266FAA706251A
  Directory.subfile.filedate=1295313066
  Directory.subfile.filedatetext=2011-01-18 02:11:06
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
  Directory.subfile.size=308
  Directory.subfile.md5=78790228A0F4CACC233ED694B6C70CB2
  Directory.subfile.filedate=1295313066
  Directory.subfile.filedatetext=2011-01-18 02:11:06
  Directory.subfile=C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll
  Directory.subfile.size=596992
  Directory.subfile.md5=187ECE8D6A5ACDC876C73A9B9B99FCC1
  Directory.subfile.filedate=1296232576
  Directory.subfile.filedatetext=2011-01-28 17:36:16

Widgi.Toolbar: [SBI $2B7574E7]  Data (File, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt
  Properties.size=232
  Properties.md5=D2FE788EDBFAFCB041A266FAA706251A
  Properties.filedate=1295313066
  Properties.filedatetext=2011-01-18 02:11:06

Widgi.Toolbar: [SBI $B3254F10]  Data (File, nothing done)
  C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt
  Properties.size=308
  Properties.md5=78790228A0F4CACC233ED694B6C70CB2
  Properties.filedate=1295313066
  Properties.filedatetext=2011-01-18 02:11:06

Widgi.Toolbar: [SBI $E4808FA3] Settings (Registry Value, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Programme\Application Updater\

Click.GiftLoad: [SBI $5ABC7D37] User settings (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\enablehttp1_1

Uniblue.DriverScanner: [SBI $EE6536E6] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\driverscanner

Microsoft.WindowsSecurityCenter.AntiVirusOverride: [SBI $3604910C] Settings (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\s.ytimg.com\soundData.sol
  Properties.size=49
  Properties.md5=18350A328022541115D248C2EA04C860
  Properties.filedate=1363600032
  Properties.filedatetext=2013-03-18 10:47:12

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\s.ytimg.com\videostats.sol
  Properties.size=275
  Properties.md5=2351928AD51424CF333C8C33035B7F00
  Properties.filedate=1363633163
  Properties.filedatetext=2013-03-18 19:59:22

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\secureinclude.ebaystatic.com\ebayLSO.sol
  Properties.size=131
  Properties.md5=6B8C1ADE576AAE2DB14F24B3834174CA
  Properties.filedate=1363433196
  Properties.filedatetext=2013-03-16 12:26:36

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\secureinclude.ebaystatic.com\ebayT.sol
  Properties.size=39
  Properties.md5=B43F43445AA3414DDC22EC80FBB22871
  Properties.filedate=1363433196
  Properties.filedatetext=2013-03-16 12:26:36

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\static.afcdn.com\com.jeroenwijering.sol
  Properties.size=50
  Properties.md5=283B44FC0AC0DC2B75215D991B61C210
  Properties.filedate=1363589265
  Properties.filedatetext=2013-03-18 07:47:45

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\streamcloud.eu\com.jeroenwijering.sol
  Properties.size=64
  Properties.md5=1F823EB48C0B57444200E645153D8F54
  Properties.filedate=1363453153
  Properties.filedatetext=2013-03-16 17:59:12

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\www.paypalobjects.com\ppLsoTest.sol
  Properties.size=48
  Properties.md5=74EE4375686A2069414EEF13E7B62789
  Properties.filedate=1363601614
  Properties.filedatetext=2013-03-18 11:13:33

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\computeradministrar\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\6LLJMKDR\skype.com\#ui\preferences.sol
  Properties.size=235
  Properties.md5=1D7D04F31FE16A67CECFB96D82C67B0B
  Properties.filedate=1358102109
  Properties.filedatetext=2013-01-13 19:35:09

Macromedia.FlashPlayer.Cookies: [SBI $1EF45977]  Text file (File, nothing done)
  C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Macromedia\Flash Player\#SharedObjects\BPCTR4RF\static.putlocker.com\video_player.swf\org.flowplayer.sol
  Properties.size=60
  Properties.md5=11B628CEABE61125FA85414F1AC515EA
  Properties.filedate=1363450129
  Properties.filedatetext=2013-03-16 17:08:49

Right Media: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Benutzer): Luxhaus) (Browser: Cookie, nothing done)
  

FastClick: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (Inaktive Benutzer): computeradministrar) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

WebTrends live: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

LinkSynergy: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

Statcounter: [SBI $8E73A7FB] Tracking cookie (Firefox: PE_C_ALL USERS (default)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $8E73A7FB] Tracking cookie (Firefox: computeradministrar (default)) (Browser: Cookie, nothing done)
  

Common Dialogs: [SBI $8E73A7FB] History  (12 files) (Registry Key, nothing done)
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU

Log: [SBI $8E73A7FB]  Activity: SchedLgU.Txt (File, nothing done)
  C:\WINDOWS\SchedLgU.Txt
  Properties.size=32338
  Properties.md5=61653B1D03CDFE4C9E9F703194653198
  Properties.filedate=1363630354
  Properties.filedatetext=2013-03-18 19:12:33

Log: [SBI $8E73A7FB]  Install: setupapi.log (File, nothing done)
  C:\WINDOWS\setupapi.log
  Properties.size=2504
  Properties.md5=19D5316223C689F717BDEE3362024E86
  Properties.filedate=1363633655
  Properties.filedatetext=2013-03-18 20:07:34

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemcore.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemcore.log
  Properties.size=53878
  Properties.md5=4C7880AB4F8A0DD6F55D4B6C39AB40F6
  Properties.filedate=1363645474
  Properties.filedatetext=2013-03-18 23:24:34

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemess.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemess.log
  Properties.size=49985
  Properties.md5=C972ADB81B9C81850A42DD2FC1BF6E2A
  Properties.filedate=1363642756
  Properties.filedatetext=2013-03-18 22:39:16

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wbemprox.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wbemprox.log
  Properties.size=3352
  Properties.md5=531C35F1E800C0B18CB324380ABCB1D3
  Properties.filedate=1363639984
  Properties.filedatetext=2013-03-18 21:53:03

Log: [SBI $8E73A7FB]  Shutdown: System32\wbem\logs\wmiprov.log (File, nothing done)
  C:\WINDOWS\System32\wbem\logs\wmiprov.log
  Properties.size=527
  Properties.md5=BEE4B7E2D964B7D1615E5337F2FDF96D
  Properties.filedate=1363630961
  Properties.filedatetext=2013-03-18 19:22:41

Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Internet Explorer\TypedURLs

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Isobuster: [SBI $FFCD5808] Last save folder (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Smart Projects\IsoBuster\LastSavedPath

MS Media Player: [SBI $6D2E50D8] Last selected node (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\MediaPlayer\MediaLibraryUI\MLLastSelectedNode

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS Office 11.0 (Access): [SBI $7F916EA4] Recent database #1 (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Access\Settings\MRU1

MS Office 11.0 (Cliparts): [SBI $D2A56AFD] Last search made (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Clip Organizer\Search\Last Query

MS Office 11.0 (PowerPoint): [SBI $45221EA4] Recent template list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\Recent Templates

MS Office 11.0 (PowerPoint): [SBI $81078145] Recent animation list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentAnimationList

MS Office 11.0 (PowerPoint): [SBI $8C3C6CBB] Recent folder list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentFolderList

MS Office 11.0 (PowerPoint): [SBI $C04A11CB] Recent template list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\PowerPoint\RecentTemplateList

MS Office 11.0 (Word): [SBI $15AC27CE] Recent file list (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Office\11.0\Word\Data\Settings

MS Fax: [SBI $F2D1A0E8] Last country ID (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastCountryID

MS Fax: [SBI $8F651DE1] Last recipient name (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastRecipientName

MS Fax: [SBI $17E7FB0C] Last recipient number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Fax\UserInfo\LastRecipientNumber

MS Windows Backup 5.0: [SBI $9CE336F6] Last created backup set (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Ntbackup\Hardware\Logical Disk File

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows.OpenWith: [SBI $6CBE8CD7] Open with list - .ASP extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ASP\OpenWithList

Windows.OpenWith: [SBI $CDE7D0A6] Open with list - .ASX extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ASX\OpenWithList

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

Windows.OpenWith: [SBI $691C1B44] Open with list - .BIN extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BIN\OpenWithList

Windows.OpenWith: [SBI $A1C94E79] Open with list - .BMP extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\OpenWithList

Windows.OpenWith: [SBI $63036C95] Open with list - .CAB extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CAB\OpenWithList

Windows.OpenWith: [SBI $3A470490] Open with list - .CCF extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CCF\OpenWithList

Windows.OpenWith: [SBI $9E8D5C8A] Open with list - .CDA extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CDA\OpenWithList

Windows.OpenWith: [SBI $E9115E4D] Open with list - .CER extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CER\OpenWithList

Windows.OpenWith: [SBI $7E93AD81] Open with list - .CSS extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSS\OpenWithList

Windows.OpenWith: [SBI $ECC28BDF] Open with list - .CSV extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CSV\OpenWithList

Windows.OpenWith: [SBI $F34FE1D0] Open with list - .CUE extension (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CUE\OpenWithList

Windows Explorer: [SBI $7308A845] Run history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU

Windows Explorer: [SBI $AA0766B5] Stream history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU

Windows Explorer: [SBI $2026AFB6] User Assistant history IE (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: [SBI $2026AFB6] User Assistant history IE (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count

Windows Explorer: [SBI $6107D172] User Assistant history files (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: [SBI $6107D172] User Assistant history files (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1011\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Windows Explorer: [SBI $B7EBA926] Last visited history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU

Windows Explorer: [SBI $85C2C910] Last Copy/MoveTo folder (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\CopyMoveTo\LastFolder

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2722348755-203697696-985015707-1005\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Cookie: [SBI $49804B54] Browser: Cookie (16) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (335) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (88) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (19) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (29) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (4) (Browser: History, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (13) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (1) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (1148) (Browser: Cookie, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (104) (Browser: Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 2.0.12.131  DLL (build: 20121113) ---

2012-11-13 blindman.exe (2.0.12.151)
2012-11-13 explorer.exe (2.0.12.173)
2012-11-13 SDBootCD.exe (2.0.12.109)
2012-11-13 SDCleaner.exe (2.0.12.110)
2012-11-13 SDDelFile.exe (2.0.12.94)
2012-11-13 SDFiles.exe (2.0.12.135)
2012-11-13 SDFileScanHelper.exe (2.0.12.1)
2012-11-13 SDFSSvc.exe (2.0.12.205)
2012-11-13 SDImmunize.exe (2.0.12.130)
2012-11-13 SDLogReport.exe (2.0.12.107)
2012-11-13 SDPESetup.exe (2.0.12.3)
2012-11-13 SDPEStart.exe (2.0.12.86)
2012-11-13 SDPhoneScan.exe (2.0.12.27)
2012-11-13 SDPRE.exe (2.0.12.13)
2012-11-13 SDPrepPos.exe (2.0.12.10)
2012-11-13 SDQuarantine.exe (2.0.12.103)
2012-11-13 SDRootAlyzer.exe (2.0.12.116)
2012-11-13 SDSBIEdit.exe (2.0.12.39)
2012-11-13 SDScan.exe (2.0.12.173)
2012-11-13 SDScript.exe (2.0.12.53)
2012-11-13 SDSettings.exe (2.0.12.130)
2012-11-13 SDShred.exe (2.0.12.105)
2012-11-13 SDSysRepair.exe (2.0.12.101)
2012-11-13 SDTools.exe (2.0.12.150)
2012-11-13 SDTray.exe (2.0.12.127)
2012-11-13 SDUpdate.exe (2.0.12.89)
2012-11-13 SDUpdSvc.exe (2.0.12.76)
2012-11-13 SDWelcome.exe (2.0.12.126)
2012-11-13 SDWSCSvc.exe (2.0.12.2)
2013-03-18 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2012-11-13 SDAdvancedCheckLibrary.dll (2.0.12.98)
2012-11-13 SDECon32.dll (2.0.12.113)
2012-11-13 SDEvents.dll (2.0.12.2)
2012-11-13 SDFileScanLibrary.dll (2.0.12.9)
2012-11-13 SDHelper.dll (2.0.12.88)
2012-11-13 SDImmunizeLibrary.dll (2.0.12.2)
2012-11-13 SDLists.dll (2.0.12.4)
2012-11-13 SDResources.dll (2.0.12.7)
2012-11-13 SDScanLibrary.dll (2.0.12.131)
2012-11-13 SDTasks.dll (2.0.12.15)
2012-11-13 SDWinLogon.dll (2.0.12.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2012-11-13 Tools.dll (2.0.12.36)
2012-11-13 UninsSrv.dll (2.0.12.52)
2012-11-14 Includes\Adware.sbi (*)
2012-11-14 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2012-11-14 Includes\Dialer.sbi (*)
2012-11-14 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2012-11-14 Includes\Hijackers.sbi (*)
2012-11-14 Includes\HijackersC.sbi (*)
2012-11-14 Includes\iPhone.sbi (*)
2012-11-14 Includes\Keyloggers.sbi (*)
2012-11-14 Includes\KeyloggersC.sbi (*)
2012-11-14 Includes\Malware.sbi (*)
2012-11-14 Includes\MalwareC.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2012-11-14 Includes\PUPSC.sbi (*)
2012-11-14 Includes\Security.sbi (*)
2012-11-14 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2012-11-14 Includes\Spyware.sbi (*)
2012-11-14 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2005-02-17 Includes\Tracks.uti (*)
2012-11-14 Includes\Trojans.sbi (*)
2012-11-14 Includes\TrojansC-02.sbi (*)
2012-11-14 Includes\TrojansC-03.sbi (*)
2012-11-14 Includes\TrojansC-04.sbi (*)
2012-11-14 Includes\TrojansC-05.sbi (*)
2012-11-14 Includes\TrojansC.sbi (*)
         
[/CODE][/CODE]
[/CODE]

so ich hoffe - ich habe mit meinem unwissen keine zu grossen fehler gemacht.
falls doch bitte gleich melden

Alt 02.06.2013, 17:25   #5
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Bevor wir uns an die Arbeit machen, möchte ich dich bitten, folgende Punkte vollständig und aufmerksam zu lesen.
  • Lies dir meine Anleitungen, die ich im Laufe dieses Strangs hier posten werde, aufmerksam durch. Frag umgehend nach, wenn dir irgendetwas unklar sein sollte, bevor du anfängst meine Anleitungen umzusetzen.

  • Solltest du bei einem Schritt Probleme haben, stoppe dort und beschreib mir das Problem so gut du kannst. Manchmal erfordert ein Schritt den vorhergehenden.

  • Bitte nur Scans durchführen zu denen du von einem Helfer aufgefordert wurdest! Installiere / Deinstalliere keine Software ohne Aufforderung!

  • Poste die Logfiles direkt in deinen Thread (bitte in CODE-Tags) und nicht als Anhang, ausser du wurdest dazu aufgefordert. Logs in Anhängen erschweren mir das Auswerten!

  • Die Logs der aufgegebenen Tools wie zB Malwarebytes sind immer zu posten - egal ob ein Fund dabei war oder nicht!

  • Beachte bitte auch => Löschen von Logfiles und andere Anfragen

Note:
Sollte ich drei Tage nichts von mir hören lassen, so melde dich bitte in diesem Strang => Erinnerung an meinem Thread.
Nervige "Wann geht es weiter" Nachrichten enden mit Schließung deines Themas. Auch ich habe ein Leben abseits des Trojaner-Boards.


Erstmal eine Kontrolle mit OTL bitte:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Setze oben mittig den Haken bei Scanne alle Benutzer
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles hier in CODE-Tags in den Thread.


Alt 02.06.2013, 21:56   #6
cosmicus
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 02.06.2013 21:10:36 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Dokumente und Einstellungen\Luxhaus\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,65 Gb Available Physical Memory | 32,59% Memory free
3,84 Gb Paging File | 2,54 Gb Available in Paging File | 66,12% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 232,88 Gb Total Space | 3,86 Gb Free Space | 1,66% Space Free | Partition Type: NTFS
 
Computer Name: NOTEBOOK-LORENS | User Name: Luxhaus | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Dokumente und Einstellungen\Luxhaus\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe (Safer-Networking Ltd.)
PRC - C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Oracle Corporation)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Programme\PANDORA.TV\PanService\PanProcess.exe (PandoraTV)
PRC - C:\Programme\PANDORA.TV\PanService\PandoraService.exe (Pandora.TV)
PRC - C:\Programme\Secunia\PSI\psia.exe (Secunia)
PRC - C:\Programme\Secunia\PSI\sua.exe (Secunia)
PRC - C:\Programme\Guard-ICQ\GuardICQ.exe ()
PRC - C:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe (Deutsche Telekom AG)
PRC - C:\Programme\Gemeinsame Dateien\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe (ABBYY)
PRC - C:\WINDOWS\system32\lxebcoms.exe ( )
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\17440cd05eee7f87026b3c17119eed58\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\b6efe2639cf6d0f305cf4cb8d0a34304\System.ServiceModel.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\e8172ec65cbfc6cb540889acb30f44a7\System.IdentityModel.ni.dll ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlFileFormats150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\snlThirdParty150.bpl ()
MOD - C:\Programme\Spybot - Search & Destroy 2\DEC150.bpl ()
MOD - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\e143370f0583abe015d8e3d2d536185e\System.Web.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\d7ee03714420b252415b952d40ef59e4\System.ServiceProcess.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\64bfc7fc01a4a79ce6b2c433c2e6e1a9\SMDiagnostics.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\51e7151c1420690c754d7f986c4b1c42\System.Runtime.Serialization.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\fe025743210c22bea2f009e1612c38bf\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\aeac298c43c77d8860db8e7634d9f2eb\System.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\eab2340ead8e1a84bdf1a87868659979\mscorlib.ni.dll ()
MOD - C:\Programme\Avira\AntiVir Desktop\sqlite3.dll ()
MOD - C:\Programme\PANDORA.TV\PanService\avformat-53.dll ()
MOD - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Programme\Guard-ICQ\GuardICQ.exe ()
MOD - C:\Programme\Spybot - Search & Destroy 2\sqlite3.dll ()
MOD - C:\Programme\PANDORA.TV\PanService\avcodec-53.dll ()
MOD - C:\Programme\Spybot - Search & Destroy 2\av\BDSmartDB.dll ()
MOD - C:\Programme\PANDORA.TV\PanService\libupnp.dll ()
MOD - C:\Programme\PANDORA.TV\PanService\avutil-51.dll ()
MOD - C:\Programme\TeraCopy\TeraCopyExt.dll ()
MOD - \\?\C:\Programme\Spybot - Search & Destroy 2\av\avxdisk.dll ()
MOD - C:\WINDOWS\system32\spool\prtprocs\w32x86\lxebdrpp.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (SDWSCService) -- C:\Programme\Spybot File not found
SRV - (SDUpdateService) -- C:\Programme\Spybot File not found
SRV - (SDScannerService) -- C:\Programme\Spybot File not found
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AntiVirWebService) -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirMailService) -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG)
SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (JavaQuickStarterService) -- C:\Programme\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (UxTuneUp) -- C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (SkypeUpdate) -- C:\Programme\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Skype C2C Service) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (PanService) -- C:\Programme\PANDORA.TV\PanService\PandoraService.exe (Pandora.TV)
SRV - (Secunia PSI Agent) -- C:\Programme\Secunia\PSI\psia.exe (Secunia)
SRV - (Secunia Update Agent) -- C:\Programme\Secunia\PSI\sua.exe (Secunia)
SRV - (Guard.Mail.ru) -- C:\Programme\Guard-ICQ\GuardICQ.exe ()
SRV - (Netzmanager Service) -- C:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe (Deutsche Telekom AG)
SRV - (TVersityMediaServer) -- C:\Programme\TVersity\Media Server\MediaServer.exe ()
SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (SZASSIST) -- C:\Programme\Clarus\Samsung SecretZone\SZAssistSVC.exe (Clarus, Inc.)
SRV - (PMBDeviceInfoProvider) -- C:\Programme\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
SRV - (FsUsbExService) -- C:\WINDOWS\system32\FsUsbExService.Exe (Teruten)
SRV - (ABBYY.Licensing.FineReader.Corporate.10.0) -- C:\Programme\Gemeinsame Dateien\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe (ABBYY)
SRV - (UI Assistant Service) -- C:\Programme\Mobile Partner Manager\AssistantServices.exe ()
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (Fabs) -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
SRV - (lxeb_device) -- C:\WINDOWS\system32\lxebcoms.exe ( )
SRV - (lxebCATSCustConnectService) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxebserv.exe ()
SRV - (FirebirdServerMAGIXInstance) -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe (MAGIX®)
SRV - (NMIndexingService) -- C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe (Nero AG)
SRV - (IGDCTRL) -- C:\Programme\FRITZ!DSL\IGDCTRL.EXE (AVM Berlin)
SRV - (WisLMSvc) -- C:\Programme\Launch Manager\WisLMSvc.exe (Wistron Corp.)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (WDICA) --  File not found
DRV - (TelekomNM3) -- C:\PROGRA~1\NETZMA~1\NMINFR~1\TelekomNM3.SYS File not found
DRV - (SymIMMP) -- system32\DRIVERS\SymIM.sys File not found
DRV - (SymIM) -- system32\DRIVERS\SymIM.sys File not found
DRV - (PDRFRAME) --  File not found
DRV - (PDRELI) --  File not found
DRV - (PDFRAME) --  File not found
DRV - (PDCOMP) --  File not found
DRV - (PCIDump) --  File not found
DRV - (mailKmd) --  File not found
DRV - (LMIInfo) -- C:\Programme\LogMeIn\x86\RaInfo.sys File not found
DRV - (lbrtfdc) --  File not found
DRV - (Changer) --  File not found
DRV - (MBAMSwissArmy) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avkmgr) -- C:\WINDOWS\system32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (PSI) -- C:\WINDOWS\system32\drivers\psi_mf.sys (Secunia)
DRV - (ui11rdr) -- C:\WINDOWS\system32\drivers\ui11rdr.SYS (1&1 Internet AG)
DRV - (mvd22) -- C:\Programme\Clarus\Samsung SecretZone\mvd22.sys ()
DRV - (mdf16) -- C:\Programme\Clarus\Samsung SecretZone\mdf16.sys ()
DRV - (FsUsbExDisk) -- C:\WINDOWS\system32\FsUsbExDisk.Sys ()
DRV - (Ndisprot) -- C:\WINDOWS\system32\drivers\Ndisprot.sys (Windows (R) 2000 DDK provider)
DRV - (ZTEusbser6k) -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys (ZTE Incorporated)
DRV - (ZTEusbnmea) -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys (ZTE Incorporated)
DRV - (ZTEusbmdm6k) -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated)
DRV - (massfilter) -- C:\WINDOWS\system32\drivers\massfilter.sys (ZTE Incorporated)
DRV - (UsbserFilt) -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys (Nokia)
DRV - (nmwcdc) -- C:\WINDOWS\system32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcd) -- C:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia)
DRV - (upperdev) -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys (Nokia)
DRV - (PID_PEPI) -- C:\WINDOWS\system32\drivers\LV302V32.SYS (Logitech Inc.)
DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (mf) -- C:\WINDOWS\system32\drivers\mf.sys (Microsoft Corporation)
DRV - (auusb) -- C:\WINDOWS\system32\drivers\auusb.sys (Auerswald GmbH & Co.KG                         )
DRV - (LMIRfsClientNP) -- C:\WINDOWS\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV - (LVUSBSta) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (LMIRfsDriver) -- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\CHDAud.sys (Conexant Systems Inc.)
DRV - (NETw4x32) -- C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation)
DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation                           )
DRV - (btaudio) -- C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.)
DRV - (BTSERIAL) -- C:\WINDOWS\system32\drivers\btserial.sys (Broadcom Corporation.)
DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.)
DRV - (BTDriver) -- C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.)
DRV - (btwmodem) -- C:\WINDOWS\system32\drivers\btwmodem.sys (Broadcom Corporation.)
DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.)
DRV - (BTWDNDIS) -- C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.)
DRV - (S3SavageNB) -- C:\WINDOWS\system32\drivers\s3gnbm.sys (S3 Graphics, Inc.)
DRV - (Hotkey) -- C:\WINDOWS\System32\drivers\HOTKEY.sys ()
DRV - (BrUsbScn) -- C:\WINDOWS\system32\drivers\BrUsbScn.sys (Brother Industries Ltd.)
DRV - (brfilt) -- C:\WINDOWS\system32\drivers\BrFilt.sys (Brother Industries Ltd.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = localhost:21320
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "https://www.google.de/"
FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10
FF - prefs.js..extensions.enabledAddons: %7Bef4e370e-d9f0-4e00-b93e-a4f274cfdd5a%7D:1.4.9
FF - prefs.js..extensions.enabledAddons: %7Bdc572301-7619-498c-a57d-39143191b318%7D:0.4.1.0
FF - prefs.js..extensions.enabledAddons: %7B9AA46F4F-4DC7-4c06-97AF-5035170634FE%7D:5.5
FF - prefs.js..extensions.enabledAddons: youtube2mp3%40mondayx.de:1.2.3
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Programme\Picasa2\npPicasa2.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Programme\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programme\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programme\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Mozilla\Firefox Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2007.11.21 00:22:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Programme\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.12.14 06:12:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2013.05.24 11:50:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2013.05.24 11:49:39 | 000,000,000 | ---D | M]
 
[2008.12.24 18:52:42 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Extensions
[2013.06.01 03:12:21 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions
[2010.12.24 15:40:40 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.03.20 01:24:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}(2)
[2010.03.20 01:24:22 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2013.05.10 10:42:44 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010.03.20 01:24:22 | 000,000,000 | ---D | M] (iMacros for Firefox) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}(2)
[2011.06.19 16:30:12 | 000,000,000 | ---D | M] (Microsoft Choice Guard) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\ChoiceGuard@Microsoft
[2013.04.15 01:44:57 | 000,000,000 | ---D | M] ("FRITZ!Box AddOn") -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\fb_add_on@avm.de
[2010.03.20 01:24:20 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\firefox@tvunetworks.com
[2012.09.22 01:49:57 | 000,101,871 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\ciuvo-extension@icq.de.xpi
[2013.05.20 20:19:27 | 000,194,311 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\jid0-c1av474BVPIHcGJfBp3GkhlhAa4@jetpack.xpi
[2012.12.16 17:50:43 | 000,259,172 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\jid0-k75TfRGfOXPHfEZmJ9cKu5eCgLc@jetpack.xpi
[2013.05.31 22:10:39 | 000,011,510 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\youtube2mp3@mondayx.de.xpi
[2013.05.27 08:37:03 | 000,534,431 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
[2013.05.28 11:09:42 | 000,067,831 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{1f91cde0-c040-11da-a94d-0800200c9a66}.xpi
[2013.05.17 22:52:27 | 000,117,280 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
[2012.12.12 13:34:28 | 000,036,098 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2013.05.10 10:40:50 | 000,870,680 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.09.22 03:15:43 | 000,434,392 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
[2013.04.21 07:43:21 | 000,765,412 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
[2013.02.22 14:38:18 | 000,685,671 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi
[2012.06.18 13:53:02 | 000,002,337 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\searchplugins\bing.xml
[2012.09.04 20:22:54 | 000,002,342 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\searchplugins\icq-search.xml
[2013.01.13 01:00:24 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\searchplugins\icqplugin-4.xml
[2012.06.18 13:53:02 | 000,002,079 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\searchplugins\{A9973FB0-7B6C-4350-9E25-709F02581D65}.xml
[2012.06.18 13:53:02 | 000,002,190 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\searchplugins\{CDFA7367-A4A4-447B-981F-7CD4CFFF4957}.xml
[2012.06.18 13:53:02 | 000,001,872 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Mozilla\Firefox\Profiles\ar39acro.default\searchplugins\{D6F49BE1-E8FB-4003-B58C-17B17D8C6501}.xml
[2013.05.31 22:44:43 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.05.31 22:44:44 | 000,000,000 | ---D | M] (Recorder Toolbar) -- C:\Programme\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2}
[2013.05.24 11:49:33 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013.05.24 11:49:33 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\{B922D405-6D13-4A2B-AE89-08A030DA4402}
[2013.05.24 11:49:33 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013.05.24 11:49:33 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\search@searchsettings.com
[2013.05.24 11:50:02 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
[2013.05.24 11:50:02 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013.03.08 00:29:38 | 000,244,736 | ---- | M] (Dassault Systèmes SolidWorks Corp.) -- C:\Programme\mozilla firefox\plugins\npEModelPlugin.dll
[1999.12.31 16:00:00 | 000,167,704 | ---- | M] (Tracker Software Products Ltd.) -- C:\Programme\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll
[2007.09.12 11:19:00 | 000,008,784 | ---- | M] () -- C:\Programme\mozilla firefox\plugins\ractrlkeyhook.dll
[2007.09.12 11:22:00 | 000,245,408 | ---- | M] (Microsoft Corporation) -- C:\Programme\mozilla firefox\plugins\unicows.dll
 
========== Chrome  ==========
 
CHR - Extension: No name found = C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: No name found = C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: No name found = C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: No name found = C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\
CHR - Extension: No name found = C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\.bak
CHR - Extension: No name found = C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2004.08.04 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programme\Lexmark Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (Recorder Toolbar) - {120A8821-2BEE-4C29-BCDA-62C577781992} - C:\Programme\MedienTeam66\MP3 Recorder for YouTube\IEPlugin.dll (MedienTeam66)
O3 - HKLM\..\Toolbar: (PDFXChange 4.0) - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - C:\Programme\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll (Tracker Softaware)
O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programme\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Lexmark Symbolleiste) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programme\Lexmark Toolbar\toolband.dll ()
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKCU..\Run: [DWQueuedReporting] C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\Luxhaus\Startmenü\Programme\Autostart\Dropbox.lnk = C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 [2012.12.08 16:09:08 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 [2012.12.08 16:09:08 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 [2012.12.08 16:09:08 | 000,000,000 | ---D | M]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Free YouTube Download - C:\Programme\Gemeinsame Dateien\DVDVideoSoft\plugins\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Programme\Gemeinsame Dateien\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\FRITZ!DSL\\sarah.dll ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\FRITZ!DSL\sarah.dll (AVM Berlin)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\FRITZ!DSL\sarah.dll (AVM Berlin)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Programme\FRITZ!DSL\sarah.dll (AVM Berlin)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\Programme\FRITZ!DSL\sarah.dll (AVM Berlin)
O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3D82218B-6DE2-4CFB-9303-F36FA77B7489}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LMIinit: DllName - (LMIinit.dll) - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) -  File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O27 - HKLM IFEO\applicationinstaller.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\backitup.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\contentcopier.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\coverdes.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\davsrv.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\discspeed.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\drivespeed.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\dw20.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\excel.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\friadr32.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\frifax32.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\fritzboxmonitor.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\friver32.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\frivw32.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\imagedrive.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\infopath.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\infotool.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\install.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\mediaserver.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\msaccess.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\msoxmled.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\mspub.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\mstore.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nero.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\neroburnrights.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nerohome.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\neromediahome.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nerorescueagent.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\neroscoutoptions.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nerostartsmart.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\nerovision.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\npsguide.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\offdiag.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\ois.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\outlook.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\pcsuite.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\pcsynclv.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\photosnap.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\photosnapviewer.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\picasa3.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\picasaphotoviewer.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\pmbbrowser.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\pmblauncher.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\pmbmapview.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\powerpnt.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\proflwiz.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\recode.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\setupx.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\showtime.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\skype.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\soundtrax.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\stcenter.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\szmgr.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\taskmgr.exe: Debugger - C:\Programme\TuneUp Utilities 2013\PMLauncher.exe (TuneUp Software)
O27 - HKLM IFEO\uimain.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\uninst.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\waveedit.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\winword.exe: Debugger - C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.07.24 19:03:40 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{412b64d0-239f-11e0-90ca-0013e89d0937}\Shell - "" = AutoRun
O33 - MountPoints2\{412b64d0-239f-11e0-90ca-0013e89d0937}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{412b64d0-239f-11e0-90ca-0013e89d0937}\Shell\AutoRun\command - "" = E:\laucher.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.06.02 21:07:40 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\OTL.exe
[2013.06.02 12:20:38 | 000,000,000 | ---D | C] -- C:\f6e41b4ffd14a2e23e0ae8e98bf6c0
[2013.06.02 12:19:22 | 000,000,000 | ---D | C] -- C:\0a31f0dee16f16bbf128c7
[2013.06.01 22:46:54 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2013.06.01 17:29:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Spybot - Search & Destroy 2
[2013.06.01 17:28:55 | 000,015,224 | ---- | C] (Safer Networking Limited) -- C:\WINDOWS\System32\sdnclean.exe
[2013.05.31 22:44:52 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\MT66 Software Update
[2013.05.31 22:44:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\MedienTeam66
[2013.05.31 22:44:25 | 000,000,000 | ---D | C] -- C:\Programme\MedienTeam66
[2013.05.31 20:41:38 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Luxhaus\Recent
[2013.05.28 05:58:45 | 000,000,000 | ---D | C] -- C:\172be6b870bb58cd80f511a69cc030a3
[2013.05.28 05:56:09 | 000,000,000 | ---D | C] -- C:\82c3a61c9952bba9f80277
[2013.05.27 10:36:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\QuickTime
[2013.05.27 10:27:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\iTunes
[2013.05.27 10:26:34 | 000,000,000 | ---D | C] -- C:\Programme\iPod
[2013.05.27 10:26:11 | 000,000,000 | ---D | C] -- C:\Programme\iTunes
[2013.05.27 10:26:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013.05.24 11:49:29 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[2013.05.21 00:05:22 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime
[2013.05.20 20:18:55 | 000,000,000 | ---D | C] -- C:\a9588c73b9d298d88221
[2013.05.20 20:13:21 | 000,000,000 | ---D | C] -- C:\ddc4aa3b43611813e093a258a9e5
[2013.05.19 19:11:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PANDORATV
[2013.05.19 19:10:58 | 000,000,000 | ---D | C] -- C:\Programme\PANDORA.TV
[2013.05.16 09:39:31 | 017,613,192 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2013.05.15 10:29:20 | 000,000,000 | ---D | C] -- C:\2053cd56c0e6fb0326
[2013.05.15 10:28:11 | 000,000,000 | ---D | C] -- C:\5f9f8d7e59427de816acd574d47fa3a1
[2013.05.04 17:26:45 | 000,000,000 | ---D | C] -- C:\243bbe1c0e8888ad24b3aecc34
[2013.05.04 17:23:34 | 000,000,000 | ---D | C] -- C:\3f171dc7afd288c059389fd3c2480722
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.06.02 21:39:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.06.02 21:07:40 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\OTL.exe
[2013.06.02 16:10:16 | 000,000,636 | ---- | M] () -- C:\WINDOWS\tasks\Check for updates (Spybot - Search & Destroy).job
[2013.06.02 16:08:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.06.02 16:08:02 | 2137,444,352 | -HS- | M] () -- C:\hiberfil.sys
[2013.06.02 00:12:57 | 1485,382,656 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\backup 11.3.2013 .pst
[2013.06.01 22:46:54 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2013.06.01 22:44:20 | 000,000,310 | ---- | M] () -- C:\WINDOWS\tasks\MT66 Software Update.job
[2013.06.01 17:29:58 | 000,000,608 | ---- | M] () -- C:\WINDOWS\tasks\Refresh immunization (Spybot - Search & Destroy).job
[2013.06.01 17:29:58 | 000,000,438 | ---- | M] () -- C:\WINDOWS\tasks\Scan the system (Spybot - Search & Destroy).job
[2013.06.01 17:29:09 | 000,001,806 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Spybot-S&D Start Center.lnk
[2013.05.31 22:44:33 | 000,000,887 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\MP3 Recorder for YouTube.lnk
[2013.05.31 21:45:46 | 000,000,762 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.05.31 20:53:08 | 000,009,656 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\cc_20130531_205256.reg
[2013.05.31 20:00:17 | 000,000,660 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk
[2013.05.28 06:08:25 | 000,050,688 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.05.27 10:36:41 | 000,001,590 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\QuickTime Player.lnk
[2013.05.27 10:27:30 | 000,001,528 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\iTunes.lnk
[2013.05.23 19:47:16 | 002,859,492 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\Scan0007.pdf
[2013.05.23 12:24:41 | 000,771,562 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\Scan0006.pdf
[2013.05.23 12:10:53 | 001,254,362 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\Scan.pdf
[2013.05.20 23:06:05 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013.05.20 21:42:15 | 000,056,238 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\cc_20130520_214207.reg
[2013.05.19 19:10:28 | 000,000,688 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\KMPlayer.lnk
[2013.05.18 09:30:48 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013.05.18 08:54:32 | 000,000,148 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\default.pls
[2013.05.18 04:14:49 | 000,380,040 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.05.18 03:25:58 | 000,604,204 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2013.05.18 03:25:58 | 000,573,916 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.05.18 03:25:58 | 000,137,002 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2013.05.18 03:25:58 | 000,116,832 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.05.16 16:07:59 | 000,067,316 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\Isartaler_zurFreigabe (3) (3).pdf
[2013.05.16 09:39:39 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.05.16 09:39:39 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.05.16 09:39:32 | 017,613,192 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2013.05.15 10:47:00 | 009,332,369 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\My Fiat v0.2.ipa
[2013.05.13 13:52:40 | 000,001,092 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013.05.13 13:52:40 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013.05.13 08:53:20 | 000,245,288 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\TARIF All net Basic.pdf
[2013.05.10 10:55:48 | 000,366,151 | ---- | M] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\Scan0005.pdf
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.06.01 17:29:57 | 000,000,438 | ---- | C] () -- C:\WINDOWS\tasks\Scan the system (Spybot - Search & Destroy).job
[2013.06.01 17:29:55 | 000,000,636 | ---- | C] () -- C:\WINDOWS\tasks\Check for updates (Spybot - Search & Destroy).job
[2013.06.01 17:29:55 | 000,000,608 | ---- | C] () -- C:\WINDOWS\tasks\Refresh immunization (Spybot - Search & Destroy).job
[2013.06.01 17:29:09 | 000,001,812 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Spybot-S&D Start Center.lnk
[2013.06.01 17:29:09 | 000,001,806 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Spybot-S&D Start Center.lnk
[2013.05.31 22:44:57 | 000,000,310 | ---- | C] () -- C:\WINDOWS\tasks\MT66 Software Update.job
[2013.05.31 22:44:33 | 000,000,887 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\MP3 Recorder for YouTube.lnk
[2013.05.31 21:45:46 | 000,000,762 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.05.31 20:52:59 | 000,009,656 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\cc_20130531_205256.reg
[2013.05.27 10:36:41 | 000,001,590 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\QuickTime Player.lnk
[2013.05.27 10:27:30 | 000,001,528 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\iTunes.lnk
[2013.05.23 19:47:06 | 002,859,492 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\Scan0007.pdf
[2013.05.23 12:24:39 | 000,771,562 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\Scan0006.pdf
[2013.05.23 12:10:50 | 001,254,362 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\Scan.pdf
[2013.05.20 21:42:12 | 000,056,238 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\cc_20130520_214207.reg
[2013.05.19 19:10:28 | 000,000,688 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\KMPlayer.lnk
[2013.05.16 16:07:59 | 000,067,316 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\Isartaler_zurFreigabe (3) (3).pdf
[2013.05.15 10:47:00 | 009,332,369 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\My Fiat v0.2.ipa
[2013.05.13 08:53:20 | 000,245,288 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Desktop\TARIF All net Basic.pdf
[2013.05.10 10:55:47 | 000,366,151 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Eigene Dateien\Scan0005.pdf
[2013.04.30 17:46:20 | 000,386,010 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2013.04.11 15:12:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\eDrawingOfficeAutomator.INI
[2013.03.19 00:45:03 | 000,000,847 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2013.01.21 19:15:43 | 000,010,455 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\fAertif_elster_2048.pfx
[2012.12.05 11:00:35 | 000,090,888 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2012.10.31 14:32:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2012.09.28 15:13:18 | 000,022,819 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Microsoft Excel 97-2003.ADR
[2012.09.19 09:30:57 | 000,038,471 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Kommagetrennte Werte (DOS).ADR
[2012.08.13 10:57:00 | 000,012,927 | ---- | C] () -- C:\Programme\readme.html
[2012.06.18 13:52:15 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\sqlite36_engine.dll
[2012.06.15 18:13:43 | 000,074,762 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\6.2. dg.pdf
[2012.06.08 23:30:04 | 000,118,116 | ---- | C] () -- C:\WINDOWS\GXTranscoder v2 Uninstaller.exe
[2012.05.08 14:15:36 | 000,000,005 | ---- | C] () -- C:\Programme\basis-link
[2012.02.15 11:08:31 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011.07.04 13:02:33 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011.06.18 14:00:08 | 000,050,688 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.25 16:31:37 | 000,038,479 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Kommagetrennte Werte (Windows).ADR
[2010.09.15 15:06:43 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\$_hpcst$.hpc
[2008.01.01 22:56:11 | 000,000,148 | ---- | C] () -- C:\Dokumente und Einstellungen\Luxhaus\default.pls
[2007.12.20 14:25:47 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
 
========== ZeroAccess Check ==========
 
[2007.07.24 19:10:13 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 04:22:25 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 12:51:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 04:22:32 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 122 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:9FF7C773

< End of report >
         
--- --- ---


OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 02.06.2013 21:10:36 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Dokumente und Einstellungen\Luxhaus\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,65 Gb Available Physical Memory | 32,59% Memory free
3,84 Gb Paging File | 2,54 Gb Available in Paging File | 66,12% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 232,88 Gb Total Space | 3,86 Gb Free Space | 1,66% Space Free | Partition Type: NTFS
 
Computer Name: NOTEBOOK-LORENS | User Name: Luxhaus | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Betrachten mit XnView] -- "C:\Programme\XnView\xnview.exe" "%1" (XnView, hxxp://www.xnview.com)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [TVersity] -- "C:\Programme\TVersity\Media Server\GUILaunch.exe" -type "folder" -url "%1" -title "" -tags "" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1 -- [2012.12.08 16:09:08 | 000,000,000 | ---D | M]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1 -- [2012.12.08 16:09:08 | 000,000,000 | ---D | M]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1 -- [2012.12.08 16:09:08 | 000,000,000 | ---D | M]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1 -- [2012.12.08 16:09:08 | 000,000,000 | ---D | M]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1 -- [2012.12.08 16:09:08 | 000,000,000 | ---D | M]
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"5031:UDP" = 5031:UDP:LocalSubNet:Enabled:AVM TAPI Services for FRITZ!Box - UDP 5031
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)
"C:\Programme\Microsoft ActiveSync\rapimgr.exe" = C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\wcescomm.exe" = C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\WCESMgr.exe" = C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application -- (Microsoft Corporation)
"C:\Programme\Windows Live\Messenger\msnmsgr.exe" = C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)
"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Programme\FRITZ!DSL\IGDCTRL.EXE" = C:\Programme\FRITZ!DSL\IGDCTRL.EXE:*:Enabled:AVM FRITZ!DSL - igdctrl.exe -- (AVM Berlin)
"C:\Programme\FRITZ!DSL\FBOXUPD.EXE" = C:\Programme\FRITZ!DSL\FBOXUPD.EXE:*:Enabled:AVM FRITZ!DSL - fboxupd.exe -- (AVM Berlin)
"C:\Programme\FRITZ!DSL\WebwaIgd.exe" = C:\Programme\FRITZ!DSL\WebwaIgd.exe:*:Enabled:AVM FRITZ!DSL - webwaigd.exe -- (AVM Berlin)
"C:\Programme\Mozilla Firefox\firefox.exe" = C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox -- (Mozilla Corporation)
"D:\Drivers\Windows Utilities\Installer32\InstallationManager.exe" = D:\Drivers\Windows Utilities\Installer32\InstallationManager.exe:*:Enabled:Lexmark Windows Common Installer
"C:\Programme\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Programme\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater -- (Nokia Corporation)
"C:\Programme\Gemeinsame Dateien\Nokia\Service Layer\A\nsl_host_process.exe" = C:\Programme\Gemeinsame Dateien\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process  -- (Nokia Corporation)
"C:\Programme\Microsoft ActiveSync\rapimgr.exe" = C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\wcescomm.exe" = C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\WCESMgr.exe" = C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application -- (Microsoft Corporation)
"C:\Programme\Java\jre1.6.0_03\bin\javaw.exe" = C:\Programme\Java\jre1.6.0_03\bin\javaw.exe:*:Disabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\WINDOWS\system32\lxebcoms.exe" = C:\WINDOWS\system32\lxebcoms.exe:*:Enabled:Pro200-S500 Series Server -- ( )
"C:\Programme\FRITZ!Box Monitor\FRITZBoxMonitor.exe" = C:\Programme\FRITZ!Box Monitor\FRITZBoxMonitor.exe:*:Enabled:FRITZ!Box Monitor -- (AVM Berlin)
"C:\Programme\Java\jre6\bin\javaw.exe" = C:\Programme\Java\jre6\bin\javaw.exe:*:Disabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\WINDOWS\system32\fxsclnt.exe" = C:\WINDOWS\system32\fxsclnt.exe:*:Disabled:Microsoft  Fax Console -- (Microsoft Corporation)
"C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Dropbox\bin\Dropbox.exe" = C:\Dokumente und Einstellungen\Luxhaus\Anwendungsdaten\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox -- (Dropbox, Inc.)
"C:\Programme\BitTorrent\BitTorrent.exe" = C:\Programme\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"C:\Programme\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Programme\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server -- (PeeringPortal)
"C:\Programme\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Programme\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server -- (PeeringPortal)
"C:\Programme\Windows Live\Messenger\msnmsgr.exe" = C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft Corporation)
"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
"C:\Programme\Logitech\Vid HD\Vid.exe" = C:\Programme\Logitech\Vid HD\Vid.exe:*:Enabled:Logitech Vid HD -- (Logitech Inc.)
"C:\Programme\FRITZ!\igd_finder.exe" = C:\Programme\FRITZ!\igd_finder.exe:LocalSubNet:Enabled:AVM FRITZ!fax for FRITZ!Box - igd_finder.exe -- ()
"C:\Programme\FRITZ!\FriFax32.exe" = C:\Programme\FRITZ!\FriFax32.exe:*:Enabled:FRITZ!fax -- (AVM Berlin)
"C:\Programme\TeamViewer\Version7\TeamViewer.exe" = C:\Programme\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
"C:\Programme\TeamViewer\Version7\TeamViewer_Service.exe" = C:\Programme\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH)
"C:\Programme\TAPI Services for FRITZ!Box\fboxset.exe" = C:\Programme\TAPI Services for FRITZ!Box\fboxset.exe:LocalSubNet:Enabled:AVM TAPI Services for FRITZ!Box - fboxset.exe -- (AVM GmbH)
"C:\Programme\TAPI Services for FRITZ!Box\igd_finder.exe" = C:\Programme\TAPI Services for FRITZ!Box\igd_finder.exe:LocalSubNet:Enabled:AVM TAPI Services for FRITZ!Box - igd_finder.exe -- ()
"C:\Programme\HP\HP Officejet 7500 E910\Bin\DeviceSetup.exe" = C:\Programme\HP\HP Officejet 7500 E910\Bin\DeviceSetup.exe:LocalSubNet:Enabled:HP Geräteeinrichtung -- (Hewlett-Packard Co.)
"C:\Programme\HP\HP Officejet 7500 E910\Bin\HPNetworkCommunicator.exe" = C:\Programme\HP\HP Officejet 7500 E910\Bin\HPNetworkCommunicator.exe:LocalSubNet:Enabled:HP Netzwerkkommunikator -- (Hewlett-Packard Co.)
"C:\Programme\TVersity\Media Server\MediaServer.exe" = C:\Programme\TVersity\Media Server\MediaServer.exe:*:Disabled:TVersity Media Server -- ()
"C:\Programme\Bonjour\mDNSResponder.exe" = C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Dienst "Bonjour" -- (Apple Inc.)
"C:\Programme\Skype\Phone\Skype.exe" = C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)
"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Programme\Spybot - Search & Destroy 2\SDTray.exe" = C:\Programme\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon -- (Safer-Networking Ltd.)
"C:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Programme\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Programme\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Programme\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
"C:\Programme\PANDORA.TV\PanService\PanProcess.exe" = C:\Programme\PANDORA.TV\PanService\PanProcess.exe:*:Enabled:PanProcess -- (PandoraTV)
"C:\Programme\PANDORA.TV\PanService\PandoraService.exe" = C:\Programme\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService -- (Pandora.TV)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0766C1B9-B2DC-46E5-8934-4F3D6B42B1BD}" = ICQ Sparberater
"{1017A80C-6F09-4548-A84D-EDD6AC9525F0}" = Lexmark Symbolleiste
"{11CF3ABC-DFB0-47DE-B31F-71CB995A12D7}_is1" = Mein Büro
"{11E568E0-3244-4BCB-875E-F334269DFDCB}" = iTunes
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 2.6.5
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{235211CA-D0E3-4EC8-95D4-C024CE37537C}" = WISO Mein Geld 2012 Professional
"{2457326B-C110-40C3-89B0-889CC913871A}" = AVM FRITZ!DSL
"{24DC9885-E759-4BD2-8A20-D4AC509A7FDE}" = HP Officejet 7500 E910 Hilfe
"{26A24AE4-039D-4CA4-87B4-2F83216035FF}" = Java(TM) 6 Update 35
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 21
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (ACT7)
"{2ED4869A-6D7B-4a8f-8261-B842DA4852FA}_is1" = MP3 Recorder for YouTube 1.0 Professional-E
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{31a52f2e-32e8-4c8f-9d99-6fd0c37c99ef}" = Gigaset QuickSync
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{34B32B70-8081-11E2-89AF-B8AC6F98CCE3}" = Google Earth Plug-in
"{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}" = Firebird SQL Server - MAGIX Edition
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3BA4DE05-7021-4681-8AA4-457226C474AD}" = MAGIX Speed burnR (MSI)
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F4EC965-28EF-45C3-B063-04B25D4E9679}" = WIDCOMM Bluetooth Software
"{43772878-1749-6652-9318-487463599443}" = Gehirnjogging Vol. 6
"{43A36C7B-CE48-4E4F-9A5A-6B20FF4B05CA}" = Lexmark X560n Scanner-Treiber
"{43B74FAB-FB58-447D-8D3A-5F638AF36FD1}" = Netzmanager
"{48D605CB-2C01-49AA-97B2-983CC068847D}" = Studie zur Verbesserung von HP Officejet 7500 E910 Produkten
"{4985E90C-A34B-4768-8848-8559EA757A88}" = MAGIX Screenshare
"{49D59D86-7A0D-4217-979A-3D43F1F45CC8}" = BUHL-Lizenzmanagement-Software
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}" = Fotostory 3 für Windows
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{66491E5A-7899-4863-A2E9-057E10BCB578}" = Samsung SecretZone
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6E0352EE-6F0D-4FBC-B1B8-4FF032C78BE0}" = PC Connectivity Solution
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72CD4C5F-AB0B-4814-8780-9A4F26A2086B}" = Presto! PageManager 7.12.20
"{75426376-58A7-46A1-A868-B72A1D175F42}" = Type2018 TWAIN Driver Ver.3
"{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7A108EBC-C9DF-4E14-93A8-42CF316F1ECF}" = Marketsplash Schnellzugriffe
"{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}" = Text-To-Speech-Runtime
"{821D6F49-1B20-4809-8C73-286CFC52B1B1}" = Samsung Auto Backup
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (German) 12
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_OUTLOOKSTD_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_OUTLOOKSTD_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_OUTLOOKSTD_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_OUTLOOKSTD_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_OUTLOOKSTD_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_OUTLOOKSTD_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00E0-0000-0000-0000000FF1CE}" = Microsoft Office Outlook 2007
"{90120000-00E0-0000-0000-0000000FF1CE}_OUTLOOKSTD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92881120-6DA5-44A3-8BAB-2429A01D022E}" = YouTube Downloader Toolbar v4.3
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0122-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{95120000-0122-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}" = OpenOffice.org 3.4.1
"{A066194B-DC8F-449A-8E0F-B57BDD3A2072}" = SyncToy 2.1 (x86)
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}" = Mobile Partner Manager
"{AA9E5C89-FE5F-41DE-A9FF-E88D801EEBB2}" = HP Officejet 7500 E910 - Grundlegende Software für das Gerät
"{AC76BA86-7AD7-1031-7B44-A70900000002}" = Adobe Reader 7.0.9 - Deutsch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update
"{B2AF05E3-4B0C-44A6-B146-322219BF3562}_is1" = Wondershare Dr.Fone(Build 2.0.0.12)
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}" = PMB
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B8B4D43C-EAA0-4EEC-B93E-D4D012316286}" = Free DWG Viewer 6.0
"{B944FA21-81AF-4A77-8328-CE4F4CC51031}" = Nero 8
"{C0513D6D-9B66-4FE8-A55A-4B26A87A95F4}" = SolidWorks eDrawings 2013
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C457BA5F-35F9-480C-90F8-5C91DB443A15}_is1" = Shutdown Manager
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D0846526-66DD-4DC9-A02C-98F9A2806812}" = Launch Manager V1.4.6
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D2C5E510-BE6D-42CC-9F61-E4F939078474}" = Lexmark 
"{D3A80508-CD83-4CA3-8671-914A1BC78B61}" = Microsoft Sync Framework 2.0 Provider Services (x86) ENU 
"{D8EEDC94-EE82-46A0-A7DB-812E3C6A0A6E}_is1" = PSD Viewer
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E2D7E05E-C8C7-45F4-8D89-D6696075E0B7}" = Sansa Updater
"{E38531EE-318C-4EFB-A36B-1A57BFBDAB3C}_is1" = PDF-XChange 4 Pro
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E7084B89-69E0-46B3-A118-8F99D06988CD}" = Microsoft SQL Server VSS Writer
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}" = Samsung PC Studio 3 USB Driver Installer
"{EC1F15E1-F3CC-46EE-B7A5-849A08ED60DC}}_is1" = PantsOff 2.0
"{ECF6FCDB-7B6D-4ED0-9C18-996FAA64CAF6}" = Dienstprogramme für Lexmark X560n Ver.1.0.0.0
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1" = MT66 Software Update
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F43CF77A-A8FA-4AFD-ADC6-08F4A35F12A5}" = MAGIX Music Maker 17 Premium
"{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE)
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FF63121D-91C6-42CC-B341-F1AA729728E7}" = Microsoft Sync Framework 2.0 Core Components (x86) ENU 
"05B59228C7E1C21DFBE89260F879BD95880548D8" = Windows-Treiberpaket - Nokia Modem  (10/05/2009 4.2)
"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows Driver Package - Nokia Modem  (02/15/2007 3.1)
"1&1 EasyLogin" = 1&1 EasyLogin
"1&1 Upload-Manager" = 1&1 Upload-Manager
"2B77EDB2643AA62CA7DD23F4E52CA138F61AF7B8" = Windows Driver Package - Intel net  (02/25/2007 11.1.0.86)
"4F6D5E84-5826-4394-9F40-3A9A19165651_is1" = Pandora Service
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
"560CEE382FE04EEE8EE428712CD776BE_is1" = Microsys Launcher
"6D7E910F-716D-41E2-98A4-29691C352C1A_is1" = Lookeen Version 8.3.1.5156
"8CDCFB95BB84DD9C0F88F22266A0CA86035E55BA" = Windows-Treiberpaket - Nokia Modem  (06/01/2009 7.01.0.4)
"9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Windows-Treiberpaket - Nokia Modem  (05/22/2008 7.00.0.1)
"A5F682C869AF68EB8EDD49BDADFC08B7DF1C11C3" = Windows Driver Package - Intel (NETw4x32) net  (02/25/2007 11.1.0.86)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Anti-Twin 2011-01-05 17.57.22" = Anti-Twin (Installation 05.01.2011)
"Avira AntiVir Desktop" = Avira Antivirus Premium
"AVMFBoxMonitor" = AVM FRITZ!Box Monitor
"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Windows-Treiberpaket - Nokia Modem  (05/22/2008 3.8)
"CCleaner" = CCleaner
"CNXT_HDAUDIO" = Conexant HD Audio
"D1E8C9A9258DD7BF813A3525430A4EB3576736EA" = Windows Driver Package - Intel net  (02/25/2007 11.1.0.86)
"DirSync" = DirSync  2.93
"doPDF 6  printer_is1" = doPDF 6.2  printer
"ElsterFormular für Privatanwender und Unternehmer 12.2.0.6412k" = ElsterFormular
"FC9E80E6E67400E836A009325C6E1CF5D77EFB1D" = Windows Driver Package - Intel (w29n51) net  (02/08/2007 9.0.4.33)
"ffdshow_is1" = ffdshow [rev 3154] [2009-12-09]
"Firefox Preloader_is1" = Firefox Preloader
"FotoWorks XL_is1" = FotoWorks XL
"Free Download Manager Language Pack_is1" = Free Download Manager Language Pack
"Free M4a to MP3 Converter_is1" = Free M4a to MP3 Converter 7.1
"Free PDF to Word Converter_is1" = Free PDF to Word Converter 5.1.0.383
"Free YouTube Download_is1" = Free YouTube Download version 3.2.0.128
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.12.0.128
"FreeFileSync" = FreeFileSync 5.10
"FRITZ! 2.0" = AVM FRITZ!fax für FRITZ!Box
"GIMP-2_is1" = GIMP 2.8.4
"Google Chrome" = Google Chrome
"Guard.Mail.ru" = Guard.ICQ
"GXTranscoder v2" = GXTranscoder v2
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ImgBurn" = ImgBurn
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"InterActual Player" = InterActual Player
"IrfanView" = IrfanView (remove only)
"JDownloader" = JDownloader
"LetsTrade" = LetsTrade Komponenten
"Lexmark Pro200-S500 Series" = Lexmark Pro200-S500 Series
"Logitech Vid" = Logitech Vid HD
"MAGIX_MSI_mm17dlx" = MAGIX Music Maker 17 Premium
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"Mein Büro 2008_is1" = Mein Büro 2008
"meinHausplaner" = meinHausplaner
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"MOBackup-DatensicherungfürOutlook" = MOBackup - Datensicherung für Outlook (Testversion)
"MODupRemover-E-MailDuplikateentfernen" = MODupRemover - Outlook E-Mail Duplikate entfernen
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 21.0 (x86 de)" = Mozilla Firefox 21.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"ODIR_is1" = ODIR
"Open Codecs" = Xiph.Org Open Codecs 0.85.17777
"OpenAL" = OpenAL
"OUTLOOKSTD" = Microsoft Office Outlook 2007
"PDFTK Builder_is1" = PDFTK Builder 3.5.3
"Picasa 3" = Picasa 3
"picture-relate@walthelm.net" = PictureRelate
"Public Duplicate Eraser_is1" = Public Duplicate Eraser
"QuickPar" = QuickPar 0.9
"Secunia PSI" = Secunia PSI (3.0.0.4001)
"Security Task Manager" = Security Task Manager 1.8g
"SUPER ©" = SUPER © Version 2010.bld.38 (May 2, 2010)
"TeamViewer 7" = TeamViewer 7
"TeraCopy_is1" = TeraCopy 2.27
"The KMPlayer" = The KMPlayer (remove only)
"TIPP10_is1" = TIPP10 Version 2.1.0
"Totalcmd" = Total Commander (Remove or Repair)
"TuneUp Utilities 2013" = TuneUp Utilities 2013
"TVAnts 1.0" = TVAnts 1.0
"TVersity Codec Pack" = TVersity Codec Pack 1.7
"TVersity Media Server" = TVersity Media Server 1.9.7
"Wdf01000" = Microsoft Kernel-Mode Driver Framework 1.0
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"WISO Mein Geld 2012 Professional" = WISO Mein Geld 2012 Professional
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01007" = Microsoft User-Mode Driver Framework Feature Pack 1.7
"XMedia Recode" = XMedia Recode 2.2.6.8
"XnView_is1" = XnView 1.99.6
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Free Internet TV_is1" = Free Internet TV v8.0
"UnityWebPlayer" = Unity Web Player
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 31.05.2013 15:42:15 | Computer Name = NOTEBOOK-LORENS | Source = VSS | ID = 12292
Description = Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse
 mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422] ist ein Fehler aufgetreten.
 
Error - 31.05.2013 15:59:21 | Computer Name = NOTEBOOK-LORENS | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung iTunes.exe, Version 11.0.3.42, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 31.05.2013 18:23:17 | Computer Name = NOTEBOOK-LORENS | Source = VSS | ID = 12292
Description = Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse
 mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422] ist ein Fehler aufgetreten.
 
Error - 31.05.2013 20:25:35 | Computer Name = NOTEBOOK-LORENS | Source = VSS | ID = 12292
Description = Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse
 mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422] ist ein Fehler aufgetreten.
 
Error - 31.05.2013 20:31:43 | Computer Name = NOTEBOOK-LORENS | Source = VSS | ID = 12292
Description = Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse
 mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422] ist ein Fehler aufgetreten.
 
Error - 31.05.2013 21:07:22 | Computer Name = NOTEBOOK-LORENS | Source = CltMngSvc | ID = 1000
Description = 
 
Error - 01.06.2013 05:42:06 | Computer Name = NOTEBOOK-LORENS | Source = ESENT | ID = 490
Description = svchost (732) Versuch, Datei "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
 für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der
 Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet
 wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 
Error - 01.06.2013 05:42:08 | Computer Name = NOTEBOOK-LORENS | Source = ESENT | ID = 490
Description = svchost (732) Versuch, Datei "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
 für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der
 Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet
 wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 
Error - 01.06.2013 06:19:37 | Computer Name = NOTEBOOK-LORENS | Source = PandoraService.exe | ID = 0
Description = 
 
Error - 01.06.2013 06:24:13 | Computer Name = NOTEBOOK-LORENS | Source = PandoraService.exe | ID = 0
Description = 
 
[ OSession Events ]
Error - 25.02.2013 05:15:50 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 280
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 25.02.2013 05:17:44 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 108
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 25.02.2013 15:40:06 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 33553
 seconds with 14580 seconds of active time.  This session ended with a crash.
 
Error - 01.03.2013 04:05:42 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 56791
 seconds with 6000 seconds of active time.  This session ended with a crash.
 
Error - 02.03.2013 10:20:21 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 108151
 seconds with 5040 seconds of active time.  This session ended with a crash.
 
Error - 27.03.2013 14:56:45 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4580
 seconds with 2100 seconds of active time.  This session ended with a crash.
 
Error - 11.04.2013 02:11:00 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 171
 seconds with 120 seconds of active time.  This session ended with a crash.
 
Error - 07.05.2013 06:32:44 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 240286
 seconds with 8760 seconds of active time.  This session ended with a crash.
 
Error - 14.05.2013 10:35:49 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 180313
 seconds with 12240 seconds of active time.  This session ended with a crash.
 
Error - 14.05.2013 12:10:47 | Computer Name = NOTEBOOK-LORENS | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4853
 seconds with 1380 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 02.06.2013 09:53:52 | Computer Name = NOTEBOOK-LORENS | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Spybot-S&D
 2 Security Center Service.
 
Error - 02.06.2013 09:53:52 | Computer Name = NOTEBOOK-LORENS | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1053
 
Error - 02.06.2013 10:09:48 | Computer Name = NOTEBOOK-LORENS | Source = Service Control Manager | ID = 7000
Description = Der Dienst "LogMeIn Kernel Information Provider" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%3
 
Error - 02.06.2013 10:09:48 | Computer Name = NOTEBOOK-LORENS | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst lxebCATSCustConnectService.
 
Error - 02.06.2013 10:09:48 | Computer Name = NOTEBOOK-LORENS | Source = Service Control Manager | ID = 7000
Description = Der Dienst "lxebCATSCustConnectService" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1053
 
Error - 02.06.2013 10:09:48 | Computer Name = NOTEBOOK-LORENS | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Spybot-S&D
 2 Security Center Service.
 
Error - 02.06.2013 10:09:48 | Computer Name = NOTEBOOK-LORENS | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1053
 
Error - 02.06.2013 10:10:30 | Computer Name = NOTEBOOK-LORENS | Source = DCOM | ID = 10010
Description = Der Server "{4EB61BAC-A3B6-4760-9581-655041EF4D69}" konnte innerhalb
 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 
Error - 02.06.2013 10:30:01 | Computer Name = NOTEBOOK-LORENS | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "upnphost"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {204810B9-73B2-11D4-BF42-00B0D0118B56}
 
Error - 02.06.2013 11:54:40 | Computer Name = NOTEBOOK-LORENS | Source = Dhcp | ID = 1001
Description = Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server
 für die  Netzwerkkarte mit der Netzwerkadresse 0013E89D0937 zugeteilt werden. Der
 folgende Fehler  ist aufgetreten:   %%1223.  Es wird weiterhin im Hintergrund versucht,
 eine Adresse vom  Netzwerkadressserver (DHCP) zugeteilt zu bekommen.
 
 
< End of report >
         
--- --- ---

Alt 03.06.2013, 00:08   #7
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Zitat:
Windows XP Professional Edition Service Pack 3
Warum hast du eine Professional-Edition von Windows, brauchst du das als Heimanwender?
Oder ist das rein zufällig ein Büro-/Firmen-PC bzw. ein Uni-Rechner?

Alt 03.06.2013, 13:41   #8
cosmicus
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Ich hatte es damals beim laptopkauf dazubekommen-wahlweise Vista oder XP. ich habe mich für XP entschieden.

Alt 03.06.2013, 15:36   #9
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Das ist aber kein gewerblich genutztes System?

Alt 03.06.2013, 18:22   #10
cosmicus
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



ich hatte es mal für die arbeit genutzt, da ich selbsständig war-aktuell nicht mehr.
was schlägst du weiter vor?

Alt 04.06.2013, 10:58   #11
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Ok, weil es gewerbliche Daten noch enthalten könnte poste ich mal diesen Hinweis

Zitat:
3. Grundsätzlich bereinigen wir keine gewerblich genutzten Rechner. Dafür ist die IT Abteilung eurer Firma zuständig.

Bei Kleinunternehmen, welche keinen IT Support haben, machen wir da eine Ausnahme und helfen gerne ( kleine Spende hilft auch uns ).
Voraussetzung: Ihr teilt uns dies in eurer ersten Antwort mit.

Bedenkt jedoch, dass Logfiles viele heikle Informationen enthalten können ( Kundendaten, Bankdaten, etc ) sowie das Malware die Möglichkeit besitzt, diese auszuspähen und zu missbrauchen. Hier legen wir euch ein Formatieren und Neuaufsetzen nahe.
Siehe => http://www.trojaner-board.de/108422-...-anfragen.html

Gelesen und verstanden?

Alt 05.06.2013, 22:21   #12
cosmicus
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



o.k. geht in ordnung

Spende ist i. O.
bestimmter betrag oder was vom herzen kommt?

Alt 06.06.2013, 10:37   #13
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Es ging mir weniger um die Spende, sondern um den farblich hervorgehoben Teil in der Zitatbox.

Alt 06.06.2013, 18:45   #14
cosmicus
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



meinst du die Daten im bereits geposteten Logfiles oder der künftigen?
Wie wllst du jetzt vorgehen?
VG

Alt 07.06.2013, 10:19   #15
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Standard

PUP.VShareRedir" Absturz bei Scan mit Malewarebyte



Ist dieser farblich hervorgehobene Satz denn so schwer zu verstehen?
Es geht darum, dass in allen Logs brisante Daten stehen könnten, darauf wollte ich nur hinweisen, kann ja sein, dass du das auf keinen Fall willst bzw die Logs dann lieber nochmal genauer durchschauen möchtest. Und deswegen hab ich dich auch abeschließend gefragt "gelesen und verstanden"

Der Grund warum ich auf soetwas ständig hinweise, ist der, dass ich nervige Löschanfragen vermeiden will. Es ist schon mehfach vorgekommen, dass wir recht penetrante Aufforderungen bekommen haben, die Logs sofort zu löschen (obwohl sie schon Monate lang hier drin standen), sonst kommt ein Anwalt und blablablubb.

Geändert von cosinus (07.06.2013 um 10:34 Uhr)

Antwort

Themen zu PUP.VShareRedir" Absturz bei Scan mit Malewarebyte
absturz, administrator, adware.widgitoolbar, anti-malware, autostart, bereit, dateien, exp/java.ai, explorer, hijack.taskmanager, microsoft, outlook, pup.vshareredir, quarantäne, rechner, scan, security.hijack, service, service pack 3, software, speicher, system, trojan.dropper, trojan.fakealert, version



Ähnliche Themen: PUP.VShareRedir" Absturz bei Scan mit Malewarebyte


  1. Absturz des Laptops bei jedem Viren Scan
    Plagegeister aller Art und deren Bekämpfung - 08.09.2014 (17)
  2. Malwarebyte Scan führt zu Absturz
    Plagegeister aller Art und deren Bekämpfung - 06.04.2014 (3)
  3. "PUP.VShareRedir" Meldungen bei Malewarebytes!
    Plagegeister aller Art und deren Bekämpfung - 18.05.2013 (5)
  4. Laptop immer langsamer, absturz, OTL scan abgestürzt, gmer scan > Systemabsturz - HILFE!
    Plagegeister aller Art und deren Bekämpfung - 06.02.2013 (3)
  5. aswMBR absturz mit blue screen beim SCAN
    Plagegeister aller Art und deren Bekämpfung - 05.02.2013 (3)
  6. MalwareBytes findet "PUP.VShareRedir"
    Plagegeister aller Art und deren Bekämpfung - 13.11.2012 (3)
  7. Fehlermeldung bei Start "temp/install_0_msi.exe", Malewarebyte: Trojan.Agent --> svchosptd.exe & Trojan.Ransom.Gen --> ctfmon.lnk
    Plagegeister aller Art und deren Bekämpfung - 18.10.2012 (10)
  8. Fehlermeldung bei Start "temp/install_0_msi.exe"; Malewarebyte: Trojan.Ransom.Gen->ctfmon.lnk
    Log-Analyse und Auswertung - 07.10.2012 (6)
  9. Fehlermeldung bei Start "temp/install_0_msi.exe"; Malewarebyte: Trojan.Ransom.Gen
    Log-Analyse und Auswertung - 02.09.2012 (15)
  10. Langsame Internetverbindung, MalwareBytes liefert "pup.vshareredir"
    Plagegeister aller Art und deren Bekämpfung - 07.08.2012 (17)
  11. Mit BKA-Trojaner infiziert. Malwarebytes hat "PUP.VShareRedir" gefunden.
    Log-Analyse und Auswertung - 08.03.2012 (11)
  12. Search completion automatisches redirect, malwarebytes findet "PUP.VShareRedir"
    Log-Analyse und Auswertung - 27.02.2012 (25)
  13. Malwarebytes findet " PUP.VShareRedir "Registry bitte Logfile auswerten!
    Log-Analyse und Auswertung - 09.01.2012 (17)
  14. Absturz bei Adaware und escan - Scan, unregelmäßiger Bluescreen, ntkrnlpa.exe
    Log-Analyse und Auswertung - 21.03.2011 (33)
  15. absturz bei malware scan
    Log-Analyse und Auswertung - 08.06.2010 (4)
  16. firefox-absturz beim öffnen nach AVira-AV-Scan
    Antiviren-, Firewall- und andere Schutzprogramme - 05.05.2010 (8)
  17. Absturz von Hijack This 1.99 bei Scan
    Log-Analyse und Auswertung - 28.04.2005 (8)

Zum Thema PUP.VShareRedir" Absturz bei Scan mit Malewarebyte - Guten Abend in die Runde, auch ich bin nun Opfer vom PUP.VShareRedir" geworden. Ich hoffe jemand kann helfen. Habe gestern mit einen Scan durchgeführt und die Schädlinge endeckt. Log s.u. - PUP.VShareRedir" Absturz bei Scan mit Malewarebyte...
Archiv
Du betrachtest: PUP.VShareRedir" Absturz bei Scan mit Malewarebyte auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.