![]() |
| |||||||
Log-Analyse und Auswertung: 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg..Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
| | #1 |
![]() ![]() | 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. Guten Tag zusammen.... wie in der überschrift steht hatte ich über 50 mal den "TR/Click.AdClicer.c" und habe ihn mit meine Avira AntiVir entfern...jedoch können manche Programme, Setups und Spiele nicht mehr auf bestimmt Registy schlüssel und Ordner zugreiffen ![]() einmal wurden meine ganzen autostart Programme(AntiVir,Firewall etc.) sogar ganz entfernt ![]() z.b will Skype auch nicht starten bzw. kann es weder neu Installieren noch deinstallieren.. Beim Rootkit Tool GMER kommt folgende meldung: C:\Windows\system32\config\system: Das system kann angegebene Datei nicht finden. Computer Daten: Windows Vista Home Premium 64Bit(alle Updates drin) Standart Browser ist Firefox (Aktuelle) AntiVir: Avira AntiVir Free Firewall : ZoneAlarm Pro 2010 Spyware/Adaware: Windows Defender & Spybot S&D ThreadFire als "beobachter"^^ Als Admin angemeldet. Habe mit Avira mal kompletten Scann gemacht aber nicht gefunden....aber irgenwas stimmt immernoch nicht....PC ist auch langsamer geworden... könnte jemand vlt. das Logfile überprüfen? HijackThis Logfile: Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:40:42, on 06.12.2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18828) Boot mode: Normal Running processes: C:\Windows\SysWOW64\ZoneLabs\vsmon.exe C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Windows\SysWOW64\astsrv.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\EA Games\Need for Speed Undercover\PB\PnkBstrA.exe C:\Windows\SysWOW64\PSIService.exe C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe C:\Program Files (x86)\ThreatFire\TFService.exe C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe C:\Program Files (x86)\ThreatFire\TFTray.exe C:\Windows\CNYHKey.exe C:\Windows\ModLEDKey.exe C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe C:\Windows\SysWOW64\conime.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlinkLinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O1 - Hosts: ::1 localhost O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files (x86)\IEPro\iepro.dll O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [ThreatFire] "C:\Program Files (x86)\ThreatFire\TFTray.exe" O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe O4 - HKLM\..\Run: [MoLed] ModLEDKey.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0" O4 - HKLM\..\Run: [YouCam Mirror Tray icon] "C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files (x86)\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files (x86)\IEPro\iepro.dll O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files (x86)\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files (x86)\IEPro\iepro.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O17 - HKLM\System\CCS\Services\Tcpip\..\{09120B94-6A41-4E09-B262-3DD3E23152BB}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{09120B94-6A41-4E09-B262-3DD3E23152BB}: NameServer = 208.67.222.222,208.67.220.220 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll O23 - Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\Windows\system32\astsrv.exe O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: Game Jackal service (GameJackalService) - Unknown owner - C:\Program Files (x86)\SlySoft\Game Jackal\Game Jackal\GJService.exe (file missing) O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: nHancer Support (nHancer) - KSE - Korndörfer Software Engineering - C:\Program Files\nHancer\nHancerService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: PunkBuster (PnkBstrA) - Unknown owner - C:\Program Files (x86)\EA Games\Need for Speed Undercover\PB\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - C:\Program Files (x86)\WinPcap\rpcapd.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: ThreatFire - PC Tools - C:\Program Files (x86)\ThreatFire\TFService.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - Unknown owner - C:\Windows\System32\TuneUpDefragService.exe (file missing) O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - Unknown owner - C:\Windows\System32\TUProgSt.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\SysWOW64\ZoneLabs\vsmon.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 14480 bytes Code:
ATTFilter Logfile of random's system information tool 1.06 (written by random/random) Run by Akmal at 2009-12-06 14:38:49 Microsoft® Windows Vista™ Home Premium Service Pack 2 System drive C: has 210 GB (41%) free of 513 GB Total RAM: 4093 MB (28% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:39:16, on 06.12.2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18828) Boot mode: Normal Running processes: C:\Windows\SysWOW64\ZoneLabs\vsmon.exe C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Windows\SysWOW64\astsrv.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\EA Games\Need for Speed Undercover\PB\PnkBstrA.exe C:\Windows\SysWOW64\PSIService.exe C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe C:\Program Files (x86)\ThreatFire\TFService.exe C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe C:\Program Files (x86)\ThreatFire\TFTray.exe C:\Windows\CNYHKey.exe C:\Windows\ModLEDKey.exe C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe C:\Program Files (x86)\CryptLoad\CryptLoad.exe C:\Windows\SysWOW64\conime.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Users\xxx\Desktop\RSIT.exe C:\Program Files (x86)\Trend Micro\HijackThis\xxx.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O1 - Hosts: ::1 localhost O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files (x86)\IEPro\iepro.dll O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [ThreatFire] "C:\Program Files (x86)\ThreatFire\TFTray.exe" O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe O4 - HKLM\..\Run: [MoLed] ModLEDKey.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0" O4 - HKLM\..\Run: [YouCam Mirror Tray icon] "C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files (x86)\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files (x86)\IEPro\iepro.dll O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files (x86)\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files (x86)\IEPro\iepro.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O17 - HKLM\System\CCS\Services\Tcpip\..\{09120B94-6A41-4E09-B262-3DD3E23152BB}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{09120B94-6A41-4E09-B262-3DD3E23152BB}: NameServer = 208.67.222.222,208.67.220.220 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll O23 - Service: ABBYY FineReader 9.0 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\Windows\system32\astsrv.exe O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: Game Jackal service (GameJackalService) - Unknown owner - C:\Program Files (x86)\SlySoft\Game Jackal\Game Jackal\GJService.exe (file missing) O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: nHancer Support (nHancer) - KSE - Korndörfer Software Engineering - C:\Program Files\nHancer\nHancerService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: PunkBuster (PnkBstrA) - Unknown owner - C:\Program Files (x86)\EA Games\Need for Speed Undercover\PB\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - C:\Program Files (x86)\WinPcap\rpcapd.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: ThreatFire - PC Tools - C:\Program Files (x86)\ThreatFire\TFService.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - Unknown owner - C:\Windows\System32\TuneUpDefragService.exe (file missing) O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - Unknown owner - C:\Windows\System32\TUProgSt.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\SysWOW64\ZoneLabs\vsmon.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 14508 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00011268-E188-40DF-A514-835FCD78B1BF}] IE7Pro BHO - C:\Program Files (x86)\IEPro\iepro.dll [2009-09-02 777392] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}] ContributeBHO Class - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}] Spybot-S&D IE Protection - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID-Anmelde-Hilfsprogramm - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}] McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll [2009-02-13 150032] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2009-10-12 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}] SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll [2009-02-13 150032] {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153] "ThreatFire"=C:\Program Files (x86)\ThreatFire\TFTray.exe [2009-11-23 378128] "ledpointer"=C:\Windows\CNYHKey.exe [2006-11-09 5585408] "MoLed"=C:\Windows\ModLEDKey.exe [2006-11-09 53248] "ZoneAlarm Client"=C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe [2009-10-17 1037192] "VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-26 85160] "UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504] "YouCam Mirror Tray icon"=C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [2009-06-11 162912] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1555968] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "EnableLUA"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"= "NoActiveDesktopChanges"= "ForceActiveDesktopOn"= "BindDirectlyToPropertySetStorage"= "NoResolveTrack"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files (x86)\IEPro\MiniDM.exe"="C:\Program Files (x86)\IEPro\MiniDM.exe:*:Enabled:MiniDM" "C:\Program Files (x86)\Combat Arms EU\CombatArms.exe"="C:\Program Files (x86)\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe" "C:\Program Files (x86)\Combat Arms EU\Engine.exe"="C:\Program Files (x86)\Combat Arms EU\Engine.exe:*Enabled:Engine.exe" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G] shell\AutoRun\command - G:\Setup.EXE [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{11e3378f-d51e-11de-ad72-002243723cf9}] shell\AutoRun\command - J:\LaunchU3.exe -a [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9297beee-b7e7-11de-8101-002243723cf9}] shell\AutoRun\command - H:\LaunchU3.exe -a ======File associations====== .js - edit - C:\Windows\SysWOW64\Notepad.exe %1 .js - open - C:\Windows\SysWOW64\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2009-12-06 13:40:55 ----D---- C:\rsit 2009-12-06 13:15:51 ----D---- C:\Program Files (x86)\Trend Micro 2009-12-06 13:09:07 ----D---- C:\Program Files (x86)\Skype 2009-12-05 23:55:11 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2009-12-05 23:38:50 ----A---- C:\Windows\game.ini 2009-12-05 22:51:53 ----D---- C:\Program Files (x86)\Activision 2009-12-05 22:46:03 ----A---- C:\Program Files (x86)\fff-ea201.exe 2009-12-05 22:45:55 ----SHD---- C:\Windows\ftpcache 2009-12-05 13:51:16 ----D---- C:\Program Files (x86)\3D-Fahrschule 2009-12-05 11:52:30 ----D---- C:\Program Files (x86)\IDM Computer Solutions 2009-12-04 20:54:53 ----D---- C:\Program Files (x86)\Westwood Chat 2009-12-04 16:22:18 ----A---- C:\Windows\ntbtlog.txt 2009-12-03 22:49:48 ----D---- C:\Program Files (x86)\Resource Hacker 2009-12-02 22:27:07 ----D---- C:\Windows\Sun 2009-12-02 22:02:29 ----D---- C:\Program Files (x86)\Elaborate Bytes 2009-12-02 20:38:48 ----D---- C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor 2009-12-02 19:09:33 ----D---- C:\Program Files (x86)\JDownloader 2009-12-02 18:06:30 ----A---- C:\Windows\system32\d3dx10_39.dll 2009-12-02 18:06:30 ----A---- C:\Windows\system32\D3DCompiler_39.dll 2009-12-02 18:06:28 ----A---- C:\Windows\system32\D3DX9_39.dll 2009-12-02 18:00:15 ----D---- C:\Program Files (x86)\Codemasters 2009-11-29 18:48:45 ----D---- C:\Program Files (x86)\Alien Trilogy 2009-11-29 11:31:05 ----D---- C:\Program Files (x86)\WinPcap 2009-11-29 10:33:15 ----A---- C:\Windows\system32\NPSExec.exe 2009-11-29 10:33:15 ----A---- C:\Windows\system32\MSVCP50.DLL 2009-11-29 10:31:46 ----A---- C:\Windows\IsUninst.exe 2009-11-27 19:41:35 ----D---- C:\Program Files (x86)\Common Files\Steam 2009-11-27 19:41:34 ----D---- C:\Program Files (x86)\Steam 2009-11-26 19:12:25 ----D---- C:\Program Files (x86)\Disk_1_unpacked 2009-11-25 17:30:18 ----A---- C:\Windows\system32\tzres.dll 2009-11-25 17:29:45 ----A---- C:\Windows\system32\msxml6.dll 2009-11-25 17:29:45 ----A---- C:\Windows\system32\msxml3.dll 2009-11-24 20:55:37 ----D---- C:\Program Files (x86)\oZone3D 2009-11-24 19:11:51 ----A---- C:\Windows\system32\bassmod.dll 2009-11-23 07:26:02 ----D---- C:\Windows\Minidump 2009-11-22 17:22:26 ----A---- C:\Windows\system32\XAudio2_5.dll 2009-11-22 17:22:25 ----A---- C:\Windows\system32\xactengine3_5.dll 2009-11-22 17:22:22 ----A---- C:\Windows\system32\D3DCompiler_42.dll 2009-11-22 17:22:19 ----A---- C:\Windows\system32\d3dcsx_42.dll 2009-11-22 17:22:17 ----A---- C:\Windows\system32\d3dx11_42.dll 2009-11-22 17:22:16 ----A---- C:\Windows\system32\d3dx10_42.dll 2009-11-22 17:22:14 ----A---- C:\Windows\system32\D3DX9_42.dll 2009-11-22 17:22:11 ----A---- C:\Windows\system32\d3dx10_41.dll 2009-11-22 17:22:11 ----A---- C:\Windows\system32\D3DCompiler_41.dll 2009-11-22 17:22:08 ----A---- C:\Windows\system32\D3DX9_41.dll 2009-11-22 17:22:07 ----A---- C:\Windows\system32\XAudio2_4.dll 2009-11-22 17:22:07 ----A---- C:\Windows\system32\XAPOFX1_3.dll 2009-11-22 17:22:06 ----A---- C:\Windows\system32\xactengine3_4.dll 2009-11-22 17:22:05 ----A---- C:\Windows\system32\X3DAudio1_6.dll 2009-11-22 17:22:02 ----A---- C:\Windows\system32\d3dx10_40.dll 2009-11-22 17:22:02 ----A---- C:\Windows\system32\D3DCompiler_40.dll 2009-11-22 17:22:00 ----A---- C:\Windows\system32\D3DX9_40.dll 2009-11-22 17:21:58 ----A---- C:\Windows\system32\XAudio2_3.dll 2009-11-22 17:21:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll 2009-11-22 17:21:57 ----A---- C:\Windows\system32\xactengine3_3.dll 2009-11-22 17:21:56 ----A---- C:\Windows\system32\X3DAudio1_5.dll 2009-11-22 17:21:54 ----A---- C:\Windows\system32\XAudio2_2.dll 2009-11-22 17:21:54 ----A---- C:\Windows\system32\XAPOFX1_1.dll 2009-11-22 17:21:51 ----A---- C:\Windows\system32\xactengine3_2.dll 2009-11-22 17:21:42 ----A---- C:\Windows\system32\XAudio2_1.dll 2009-11-22 17:21:42 ----A---- C:\Windows\system32\XAPOFX1_0.dll 2009-11-22 17:21:40 ----A---- C:\Windows\system32\xactengine3_1.dll 2009-11-22 17:21:39 ----A---- C:\Windows\system32\X3DAudio1_4.dll 2009-11-22 10:10:00 ----D---- C:\Program Files (x86)\AutoHotkey 2009-11-21 15:17:07 ----A---- C:\Windows\system32\d3dx10_38.dll 2009-11-21 15:17:07 ----A---- C:\Windows\system32\D3DCompiler_38.dll 2009-11-21 15:17:06 ----A---- C:\Windows\system32\D3DX9_38.dll 2009-11-21 13:40:49 ----A---- C:\Windows\system32\XAudio2_0.dll 2009-11-21 13:40:49 ----A---- C:\Windows\system32\xactengine3_0.dll 2009-11-21 13:40:49 ----A---- C:\Windows\system32\X3DAudio1_3.dll 2009-11-21 13:40:47 ----A---- C:\Windows\system32\d3dx10_37.dll 2009-11-21 13:40:47 ----A---- C:\Windows\system32\D3DCompiler_37.dll 2009-11-21 13:40:46 ----A---- C:\Windows\system32\D3DX9_37.dll 2009-11-21 13:40:45 ----A---- C:\Windows\system32\xactengine2_10.dll 2009-11-21 13:40:43 ----A---- C:\Windows\system32\d3dx10_36.dll 2009-11-21 13:40:43 ----A---- C:\Windows\system32\D3DCompiler_36.dll 2009-11-21 13:40:41 ----A---- C:\Windows\system32\d3dx9_36.dll 2009-11-21 13:40:40 ----A---- C:\Windows\system32\xactengine2_9.dll 2009-11-21 13:40:39 ----A---- C:\Windows\system32\d3dx10_35.dll 2009-11-21 13:40:39 ----A---- C:\Windows\system32\D3DCompiler_35.dll 2009-11-21 13:40:33 ----A---- C:\Windows\system32\d3dx9_35.dll 2009-11-21 13:40:32 ----A---- C:\Windows\system32\xactengine2_8.dll 2009-11-21 13:40:32 ----A---- C:\Windows\system32\X3DAudio1_2.dll 2009-11-21 13:40:30 ----A---- C:\Windows\system32\d3dx10_34.dll 2009-11-21 13:40:30 ----A---- C:\Windows\system32\D3DCompiler_34.dll 2009-11-21 13:40:27 ----A---- C:\Windows\system32\xinput1_3.dll 2009-11-21 13:40:27 ----A---- C:\Windows\system32\d3dx9_34.dll 2009-11-21 13:40:26 ----A---- C:\Windows\system32\xactengine2_7.dll 2009-11-21 13:40:25 ----A---- C:\Windows\system32\d3dx10_33.dll 2009-11-21 13:40:25 ----A---- C:\Windows\system32\D3DCompiler_33.dll 2009-11-21 13:40:23 ----A---- C:\Windows\system32\d3dx9_33.dll 2009-11-21 13:40:22 ----A---- C:\Windows\system32\xactengine2_6.dll 2009-11-21 13:40:21 ----A---- C:\Windows\system32\xactengine2_5.dll 2009-11-21 13:40:20 ----A---- C:\Windows\system32\d3dx10.dll 2009-11-21 13:40:18 ----A---- C:\Windows\system32\d3dx9_32.dll 2009-11-21 13:40:17 ----A---- C:\Windows\system32\xactengine2_4.dll 2009-11-21 13:40:17 ----A---- C:\Windows\system32\x3daudio1_1.dll 2009-11-21 13:40:16 ----A---- C:\Windows\system32\xactengine2_3.dll 2009-11-21 13:40:16 ----A---- C:\Windows\system32\d3dx9_31.dll 2009-11-21 13:40:15 ----A---- C:\Windows\system32\xinput1_2.dll 2009-11-21 13:40:14 ----A---- C:\Windows\system32\xinput1_1.dll 2009-11-21 13:40:14 ----A---- C:\Windows\system32\xactengine2_2.dll 2009-11-21 13:40:13 ----A---- C:\Windows\system32\xactengine2_1.dll 2009-11-21 13:40:05 ----A---- C:\Windows\system32\d3dx9_30.dll 2009-11-21 13:40:04 ----A---- C:\Windows\system32\xactengine2_0.dll 2009-11-21 13:40:04 ----A---- C:\Windows\system32\x3daudio1_0.dll 2009-11-21 13:40:03 ----A---- C:\Windows\system32\d3dx9_29.dll 2009-11-21 13:40:02 ----A---- C:\Windows\system32\d3dx9_28.dll 2009-11-21 13:40:01 ----A---- C:\Windows\system32\d3dx9_27.dll 2009-11-21 13:40:00 ----A---- C:\Windows\system32\d3dx9_26.dll 2009-11-21 13:39:57 ----A---- C:\Windows\system32\d3dx9_24.dll 2009-11-20 16:55:15 ----A---- C:\Windows\system32\wksprtPS.dll 2009-11-20 16:55:15 ----A---- C:\Windows\system32\tsgqec.dll 2009-11-20 16:55:15 ----A---- C:\Windows\system32\mstscax.dll 2009-11-20 16:55:15 ----A---- C:\Windows\system32\mstsc.exe 2009-11-20 16:55:15 ----A---- C:\Windows\system32\MsRdpWebAccess.dll 2009-11-20 16:55:15 ----A---- C:\Windows\system32\aaclient.dll 2009-11-20 16:51:51 ----A---- C:\Windows\system32\winrsmgr.dll 2009-11-20 16:51:49 ----A---- C:\Windows\system32\wsmplpxy.dll 2009-11-20 16:51:49 ----A---- C:\Windows\system32\winrssrv.dll 2009-11-20 16:51:46 ----A---- C:\Windows\system32\pwrshplugin.dll 2009-11-20 16:51:41 ----A---- C:\Windows\system32\WsmRes.dll 2009-11-20 16:51:41 ----A---- C:\Windows\system32\wsmprovhost.exe 2009-11-20 16:51:41 ----A---- C:\Windows\system32\winrshost.exe 2009-11-20 16:51:41 ----A---- C:\Windows\system32\winrs.exe 2009-11-20 16:51:41 ----A---- C:\Windows\system32\wevtfwd.dll 2009-11-20 16:51:41 ----A---- C:\Windows\system32\wecutil.exe 2009-11-20 16:51:41 ----A---- C:\Windows\system32\wecapi.dll 2009-11-20 16:51:39 ----A---- C:\Windows\system32\winrm.vbs 2009-11-20 16:51:38 ----A---- C:\Windows\system32\WsmWmiPl.dll 2009-11-20 16:51:38 ----A---- C:\Windows\system32\WsmSvc.dll 2009-11-20 16:51:38 ----A---- C:\Windows\system32\WsmAuto.dll 2009-11-20 16:51:38 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll 2009-11-20 16:51:38 ----A---- C:\Windows\system32\WSManHTTPConfig.exe 2009-11-20 16:51:38 ----A---- C:\Windows\system32\winrscmd.dll 2009-11-20 16:49:47 ----A---- C:\Windows\system32\slcinst.dll 2009-11-20 16:48:06 ----A---- C:\Windows\system32\bitsperf.dll 2009-11-20 16:48:05 ----A---- C:\Windows\system32\qmgrprxy.dll 2009-11-20 16:48:05 ----A---- C:\Windows\system32\bitsprx6.dll 2009-11-20 16:48:05 ----A---- C:\Windows\system32\bitsprx5.dll 2009-11-20 16:48:05 ----A---- C:\Windows\system32\bitsprx4.dll 2009-11-20 16:48:05 ----A---- C:\Windows\system32\bitsprx3.dll 2009-11-20 16:48:05 ----A---- C:\Windows\system32\bitsprx2.dll 2009-11-19 20:59:24 ----D---- C:\Program Files (x86)\Electronic Arts 2009-11-18 17:19:39 ----D---- C:\Windows\system32\URTTEMP 2009-11-17 20:20:12 ----D---- C:\Windows\San Andreas Mod Installer 2009-11-17 20:20:12 ----D---- C:\Program Files (x86)\San Andreas Mod Installer 2009-11-16 15:36:19 ----D---- C:\Documents and Settings\ReleaseEngineer.MACROVISION\Application Data\skypePM 2009-11-16 15:36:04 ----D---- C:\Program Files (x86)\MSXML 4.0 2009-11-15 22:14:00 ----D---- C:\Program Files (x86)\Corel 2009-11-15 22:14:00 ----D---- C:\Program Files (x86)\Common Files\Corel 2009-11-15 19:41:46 ----A---- C:\Windows\system32\xvidvfw.dll 2009-11-15 19:41:46 ----A---- C:\Windows\system32\xvidcore.dll 2009-11-15 19:41:46 ----A---- C:\Windows\system32\mpg4c32.dll 2009-11-15 19:41:46 ----A---- C:\Windows\system32\mcdvd_32.dll 2009-11-11 06:39:39 ----SHD---- C:\Windows\system32\%APPDATA% 2009-11-11 06:36:41 ----A---- C:\Windows\system32\WSDApi.dll 2009-11-08 13:56:37 ----A---- C:\Windows\system32\uxtuneup.dll 2009-11-08 13:56:35 ----A---- C:\Windows\system32\authuitu.dll 2009-11-08 13:56:03 ----D---- C:\Program Files (x86)\TuneUp Utilities 2009 2009-11-07 18:21:13 ----N---- C:\Windows\Setup1.exe 2009-11-07 18:21:04 ----A---- C:\Windows\ST6UNST.EXE 2009-11-07 12:19:48 ----D---- C:\Program Files (x86)\Acronis 2009-11-07 12:19:46 ----D---- C:\Program Files (x86)\Common Files\Acronis ======List of files/folders modified in the last 1 months====== 2009-12-06 14:39:05 ----D---- C:\Windows\Temp 2009-12-06 14:30:43 ----D---- C:\Windows\Prefetch 2009-12-06 13:49:28 ----SHD---- C:\Windows\Installer 2009-12-06 13:49:27 ----SHD---- C:\Config.Msi 2009-12-06 13:48:56 ----D---- C:\Windows\Internet Logs 2009-12-06 13:47:51 ----D---- C:\Program Files (x86)\SSS 2009-12-06 13:15:51 ----RD---- C:\Program Files (x86) 2009-12-06 12:34:35 ----D---- C:\Program Files (x86)\Mozilla Firefox 2009-12-06 08:46:47 ----D---- C:\Windows\System32 2009-12-06 08:46:46 ----D---- C:\Windows\inf 2009-12-05 23:55:19 ----D---- C:\Windows\system32\drivers 2009-12-05 23:55:16 ----HD---- C:\ProgramData 2009-12-05 23:38:50 ----AD---- C:\Windows 2009-12-05 23:38:47 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2009-12-05 15:25:15 ----D---- C:\Program Files (x86)\Common Files 2009-12-05 14:09:28 ----D---- C:\Program Files (x86)\Cyberlink 2009-12-05 14:08:29 ----D---- C:\Windows\winsxs 2009-12-05 11:48:34 ----D---- C:\Windows\SysWOW64 2009-12-05 11:48:34 ----A---- C:\Windows\system32\H@tKeysH@@k.DLL 2009-12-04 22:16:39 ----RD---- C:\Program Files 2009-12-04 20:33:58 ----D---- C:\Program Files (x86)\EA Games 2009-12-03 20:02:20 ----D---- C:\Program Files (x86)\Sierra 2009-12-03 19:57:15 ----D---- C:\Program Files (x86)\Serials 2005 2009-12-02 21:59:48 ----D---- C:\Program Files (x86)\SlySoft 2009-12-02 18:06:01 ----RSD---- C:\Windows\assembly 2009-12-01 19:31:56 ----D---- C:\Program Files (x86)\ThreatFire 2009-12-01 13:41:09 ----D---- C:\Windows\Microsoft.NET 2009-11-30 18:58:35 ----D---- C:\Windows\Registration 2009-11-30 18:40:21 ----D---- C:\Program Files (x86)\Common Files\microsoft shared 2009-11-27 16:03:50 ----D---- C:\Program Files (x86)\CAPCOM 2009-11-27 14:10:06 ----D---- C:\Windows\system32\RTCOM 2009-11-27 13:56:27 ----D---- C:\Program Files (x86)\DriverGenius 2009-11-26 19:00:11 ----RSD---- C:\Windows\Fonts 2009-11-26 15:31:56 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE 2009-11-26 14:24:51 ----D---- C:\Windows\rescache 2009-11-25 23:16:56 ----D---- C:\Windows\system32\de-DE 2009-11-25 20:42:57 ----D---- C:\Program Files (x86)\Croteam 2009-11-24 19:38:37 ----SHD---- C:\System Volume Information 2009-11-23 22:17:21 ----D---- C:\Windows\Help 2009-11-23 21:31:03 ----D---- C:\Windows\system32\ZoneLabs 2009-11-22 17:18:32 ----D---- C:\Program Files (x86)\Ubisoft 2009-11-22 10:10:01 ----D---- C:\Windows\ShellNew 2009-11-21 22:02:43 ----A---- C:\Windows\system32\PnkBstrB.exe 2009-11-21 17:01:17 ----D---- C:\Program Files (x86)\ArtMoney 2009-11-20 23:55:34 ----D---- C:\Program Files (x86)\Combat Arms EU 2009-11-20 17:21:03 ----D---- C:\Windows\system32\en-US 2009-11-20 17:21:02 ----D---- C:\Windows\system32\wbem 2009-11-20 17:20:42 ----D---- C:\Windows\PolicyDefinitions 2009-11-19 20:18:15 ----D---- C:\Program Files (x86)\Eidos Interactive 2009-11-19 06:37:14 ----D---- C:\Program Files (x86)\Internet Explorer 2009-11-16 15:36:19 ----RD---- C:\Users 2009-11-15 22:21:19 ----D---- C:\Program Files (x86)\Common Files\PX Storage Engine 2009-11-15 22:15:36 ----SD---- C:\Windows\Downloaded Program Files 2009-11-15 22:15:36 ----D---- C:\Program Files (x86)\Common Files\InstallShield 2009-11-15 19:49:30 ----D---- C:\Program Files (x86)\AVS4YOU 2009-11-15 19:48:54 ----D---- C:\Program Files (x86)\Common Files\AVSMedia 2009-11-12 22:24:31 ----SHD---- C:\Boot 2009-11-12 20:48:14 ----D---- C:\Windows\Debug 2009-11-11 06:38:57 ----D---- C:\Program Files (x86)\Windows Mail 2009-11-11 06:35:20 ----D---- C:\Program Files (x86)\McAfee 2009-11-08 15:41:18 ----A---- C:\Windows\EuBcd.ini 2009-11-08 14:06:01 ----D---- C:\Windows\Tasks 2009-11-08 13:40:24 ----D---- C:\Program Files (x86)\Messenger Plus! Live 2009-11-08 13:30:30 ----D---- C:\Program Files (x86)\Vidalia Bundle 2009-11-08 12:51:31 ----D---- C:\Program Files (x86)\Common Files\DVDVideoSoft 2009-11-07 18:33:54 ----D---- C:\Program Files (x86)\Serials World Portable 2009-11-07 16:46:17 ----D---- C:\Program Files (x86)\Left 4 Dead ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [] R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [] R1 vmm;Virtual Machine Monitor; \??\C:\Windows\system32\Treiber\vmm.sys [] R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2009-10-17 440520] R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2009/10/02 20:29:19]; \??\C:\Program Files (x86)\HomeCinema\PowerDVD9\000.fcl [2009-09-01 146928] R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-08-14 74720] R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [] R2 tifsfilter;Acronis True Image FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [] R3 AnyDVD;AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [2009-11-04 121280] R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032e.sys [] R3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] R3 KMWDFILTER;HIDUASDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [] R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys [] R3 netr28ux;RT2870 USB Wireless LAN Card Driver for Vista; C:\Windows\system32\DRIVERS\netr28ux.sys [] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [] R3 pbfilter;pbfilter; \??\C:\Program Files\PeerBlock\pbfilter.sys [2009-09-28 19544] R3 TfNetMon;TfNetMon; \??\C:\Windows\system32\drivers\TfNetMon.sys [] R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [] R3 VPCNetS2;Virtual Machine Network Services Driver; C:\Windows\system32\DRIVERS\VMNetSrv.sys [] R3 ZSMC301b;Vimicro USB PC Camera (ZC0301PL); C:\Windows\System32\Drivers\usbVM31b.sys [] S3 cpuz130;cpuz130; \??\C:\Users\xxx\AppData\Local\Temp\cpuz130\cpuz_x64.sys [] S3 DCamUSBVM;Lenovo Q350 USB PC Camera; C:\Windows\System32\Drivers\usbVM31b.sys [] S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [] S3 ENTECH64;ENTECH64; \??\C:\Windows\system32\DRIVERS\ENTECH64.sys [] S3 epmntdrv;epmntdrv; \??\C:\Windows\system32\epmntdrv.sys [2009-02-25 9728] S3 esihdrv;esihdrv; \??\C:\Users\xxx\AppData\Local\Temp\esihdrv.sys [] S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\system32\EuGdiDrv.sys [2009-02-25 3072] S3 GPUTool;GPUTool; \??\C:\Users\xxx\AppData\Local\Temp\GPUTool.sys [] S3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [] S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [] S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [] S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [] S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2004-02-03 32768] S3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [] S3 usbscan;USB-Scannertreiber; C:\Windows\system32\DRIVERS\usbscan.sys [] S3 vsdatant7;vsdatant7; C:\Windows\System32\drivers\vsdatant.win7.sys [] S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [] S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [] S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [] S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-06 660768] R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2008-09-15 743192] R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672] R2 astcc;AST Service; C:\Windows\system32\astsrv.exe [2009-02-13 57344] R2 Bonjour Service;Bonjour-Dienst; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2008-12-12 238888] R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2009-01-27 73728] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2009-02-11 210216] R2 nHancer;nHancer Support; C:\Program Files\nHancer\nHancerService.exe [2009-10-04 39424] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [] R2 PnkBstrA;PunkBuster; C:\Program Files (x86)\EA Games\Need for Speed Undercover\PB\PnkBstrA.exe [2008-11-03 63040] R2 ProtexisLicensing;ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [2007-06-05 177704] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2009-02-25 247152] R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] R2 ThreatFire;ThreatFire; C:\Program Files (x86)\ThreatFire\TFService.exe [2009-11-23 70928] R2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%\System32\TUProgSt.exe,-1; C:\Windows\System32\TUProgSt.exe [] R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504] R2 vsmon;TrueVector Internet Monitor; C:\Windows\SysWOW64\ZoneLabs\vsmon.exe [2009-10-17 2384240] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 2297216] S2 GameJackalService;Game Jackal service; C:\Program Files (x86)\SlySoft\Game Jackal\Game Jackal\GJService.exe [] S3 Adobe Version Cue CS4;Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016] S3 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-03-29 89920] S3 DfSdkS;Defragmentation-Service; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [2009-08-24 544768] S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2009-10-20 1038088] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-10-20 655624] S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504] S3 iPod Service;iPod-Dienst; C:\Program Files\iPod\bin\iPodService.exe [2009-09-21 660256] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888] S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2009-09-04 3347280] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968] S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files (x86)\WinPcap\rpcapd.exe [2004-02-03 86016] S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2009-07-16 316664] S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [] S4 msvsmon90;Visual Studio 2008 Remote Debugger; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [2008-07-29 4737024] -----------------EOF----------------- MfG und Danke!
__________________ Nehm' das Leben nicht so ernst - Du kommst eh' nicht lebend raus! Geändert von Big Brain (06.12.2009 um 14:40 Uhr) |
| | #2 | ||
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. Hallo und Herzlich Willkommen!
__________________![]() dein Log sieht gut aus, zumindest "malwaremäßig"... ich würde an deiner Stelle sofort v. folgende Programme trennen: 1. Hauptproblem Nr.1 - zwei gleichzeitig installierte und aktivierte Antivirenprogramme: AntiVir Personal Edition Classic & McAfee Beide Scanner haben nämlich nur ein Ziel, dein System sinnvoll gegen Schädlingen zu prüfen/schützen. Damit sie behindern sich gegenseitig und eine Doppelbelastung ist im System, ie Folge kann ein Crash sein, oder im schlechtesten fall, kannst Du über eine komplette Neuinstallation freuen! Mehr AV Programme bedeutet nicht mehr Sicherheit! Deinstalliere also eines der AV-Programme und lass nur noch eins auf deinem PC laufen!! wenn Du Avira behalten möchtest, MC Affee zu deinstallieren: vielleicht unter dem Link findest du Tipps und Infos zum Thema McAfee McAfee-Consumer-Products-Removal-Tool 2. Messenger Plus! Live... Zitat:
3. Zone Alarm...Gescmacksache. Sie verlangsamt das System erheblich, macht oft auch Probleme. Meiner Meinung nach reicht die Windows eigene Firewall für den Otto-normal-Verbraucher auch aus! 4. Code:
ATTFilter TuneUp Utilities & Ashampoo
TuneUp: Wundermittel oder Placebo?/derfisch.de & „Schlangenöl“ für den Speicher - Sogenannte Optimierungstool wie Tuneup, Ashampoo & Co, gibt es viele! Die Hersteller versprechen weitaus mehr, als letztlich wirklich halten können. Windows beschleunigen/optimieren, kostet nur wenig Mühe, alles von Hand zu erledigen, ohne Zusatz-Tool besser - ansonst ist am Ende der Schrecken groß, wenn auf einmal das System nicht mehr startet oder Daten verloren sind. ![]()
stört unter gewissen Umständen das Setup von Avira 5. Ich würde gerne noch all deine installierten Programme sehen: Lade dir das Tool CCleaner herunter installieren ("Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ unter Options settings-> "german" einstellen dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..." wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein Zitat:
Coverflow |
| | #3 |
![]() ![]() | 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. Guten Abend....
__________________Vielen Dank schonmal....... 1. Von McAffe habe ich nur den SiteAdvisor für Firefox.. 2. "TuneUp Utilities & Ashampoo" benutze ich nur einige Funktionen..... 3. naja....ich bin nicht so ganz ein Otto-normal User... ![]() 4. Die CCleaner Liste: (Ist OK ,dass ich die als anhang hochgeladen habe? weißt ja bestimmt wareum
__________________ Geändert von Big Brain (09.12.2009 um 19:41 Uhr) |
| | #4 |
![]() ![]() | 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. oh..leider bisschen zu spät gemerkt... tut mir leid.... ![]() also hier die CCleaner Liste: Code:
ATTFilter 3D-Fahrschule 04.12.2009 146,5MB
3DMark Vantage Futuremark Corporation 02.10.2009 596,9MB 1.0.2.1
7-Zip 4.65 (x64 edition) Igor Pavlov 01.10.2009 3,98MB 4.65.00.0
ABBYY FineReader 9.0 Professional Edition ABBYY 09.10.2009 303,7MB 9.00.724.5507
Acrobat.com Adobe Systems Incorporated 19.10.2009 1,70MB 1.2.443
Acronis*True*Image*Home Acronis 06.11.2009 145,4MB 12.0.9551
Adobe AIR Adobe Systems Inc. 14.11.2009 1.1.0.5790
Adobe Creative Suite 4 Master Collection Adobe Systems Incorporated 14.11.2009 9.155,1MB 4.0
Adobe Flash Player 10 ActiveX Adobe Systems, Inc. 19.10.2009 1,96MB 10.0.2.54
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 30.11.2009 10.0.32.18
Adobe Media Player Adobe Systems Incorporated 19.10.2009 2,95MB 1.1
Adobe Shockwave Player 11.5 Adobe Systems, Inc. 29.10.2009 11.5.2.602
Alien Trilogy 08.12.2009 52,1MB
Allok 3GP PSP MP4 iPod Video Converter 6.2.0603 Allok Soft Inc 15.10.2009 16,0MB
Allok AVI DivX MPEG to DVD Converter 2.5.0609 Allok Soft Inc. 15.10.2009 22,7MB
Allok AVI MPEG Converter 4.4.0725 Allok Soft Inc. 15.10.2009 21,4MB
Allok AVI to DVD SVCD VCD Converter 3.9.0725 Allok Soft .Inc 15.10.2009 22,8MB
Allok MOV Converter 4.4.0725 Allok Soft Inc. 15.10.2009 16,4MB
Allok MPEG4 Converter 6.2.0603 Allok Soft Inc 15.10.2009 16,1MB
Allok QuickTime to AVI MPEG DVD Converter 3.4.0725 Allok Soft Inc. 15.10.2009 21,0MB
Allok RM RMVB to AVI MPEG DVD Converter 3.4.0725 Allok Soft Inc. 15.10.2009 18,8MB
Allok Video Converter 4.4.0725 Allok Soft Inc. 15.10.2009 25,5MB
Allok Video Joiner 4.4.0725 Allok Soft Inc. 15.10.2009 26,2MB
Allok Video Splitter 3.1.0609 Allok Soft Inc. 15.10.2009 37,3MB
Allok Video to 3GP Converter 6.2.0603 Allok Soft .Inc 15.10.2009 16,0MB
Allok Video to DVD Burner 2.5.0609 Allok Soft Inc 15.10.2009 25,1MB
Allok Video to FLV Converter 6.2.0603 Allok Soft .Inc 15.10.2009 16,0MB
Allok Video to iPod Converter 6.2.0603 Allok Soft Inc 15.10.2009 15,9MB
Allok Video to MP4 Converter 6.2.0603 Allok Soft Inc 15.10.2009 16,0MB
Allok Video to PSP Converter 6.2.0603 Allok Soft .Inc 15.10.2009 15,9MB
Apple Application Support Apple Inc. 03.10.2009 32,2MB 1.0
Apple Mobile Device Support Apple Inc. 01.10.2009 2.6.0.32
Apple Software Update Apple Inc. 03.10.2009 2,16MB 2.1.1.116
ArtMoney SE v7.31 System SoftLab 17.10.2009 17,0MB 7.31
Ashampoo WinOptimizer 6.50 Ashampoo GmbH & Co. KG 03.10.2009 45,2MB 6.5.0
Assassin's Creed 07.12.2009 6.849,2MB 1.0
Audacity 1.3.9 (Unicode) Audacity Team 02.10.2009 30,4MB
AutoHotkey 1.0.48.05 Chris Mallett 21.11.2009 2,59MB 1.0.48.05
Autostart-Manager 2006 Wirth New Media Sarl 04.10.2009 0,77MB 6.00.0000
Avira AntiVir Personal - Free Antivirus Avira GmbH 02.10.2009 74,5MB
AVS Audio Converter version 5.1 Online Media Technologies Ltd. 14.11.2009 2,55MB
AVS Audio Editor version 4.2 Online Media Technologies Ltd. 14.11.2009 3,21MB
AVS Audio Recorder version 3.9 Online Media Technologies Ltd. 14.11.2009 2,20MB
AVS Cover Editor 1.3.1.96 (AVS4YOU) Online Media Technologies Ltd. 14.11.2009 66,8MB
AVS Disc Creator version 3.5 Online Media Technologies Ltd. 14.11.2009 5,67MB
AVS DVD Authoring Online Media Technologies Ltd. 14.11.2009 12,0MB
AVS DVD Copy version 4.1.1 Online Media Technologies Ltd. 14.11.2009 2,57MB
AVS Media Player 3.1 Online Media Technologies Ltd. 14.11.2009 16,9MB
AVS Registry Cleaner version 1.1 Online Media Technologies Ltd. 14.11.2009 2,62MB
AVS Ringtone Maker version 1.6 Online Media Technologies Ltd. 14.11.2009 2,51MB
AVS System Info Online Media Technologies Ltd. 14.11.2009 11,3MB
AVS TV Recorder 2.0.1 Online Media Technologies Ltd. 14.11.2009 3,16MB
AVS Update Manager 1.0 Online Media Technologies Ltd. 14.11.2009 9,55MB
AVS Video Converter 6 Online Media Technologies Ltd. 14.11.2009 34,1MB
AVS Video Editor 4 4.2.1.166 Online Media Technologies Ltd. 14.11.2009 27,7MB
AVS Video Recorder 2.4 (Service Version) Online Media Technologies Ltd. 14.11.2009 3,38MB
AVS4YOU Software Navigator 1.3 Online Media Technologies Ltd. 14.11.2009 8,84MB
Badaboom 1.2.1.7 Elemental Technologies 01.10.2009 34,3MB 1.2.1.7
Bonjour Apple Inc. 01.10.2009 1.0.106
Call of Duty(R) 4 - Modern Warfare(TM) Activision 04.12.2009 6.392,5MB 1.7
CCleaner Piriform 06.12.2009 2,70MB
Cellfactor Revolution Timeline Interactive 01.10.2009
CloneCD SlySoft 05.11.2009 4,67MB
CloneDVD2 Elaborate Bytes 05.11.2009 8,81MB
Corel MediaOne Corel Corporation 14.11.2009 179,8MB 2.100.0000
CorelDRAW Essential Edition 3 Corel Corporation 14.11.2009 229,7MB
CPUID CPU-Z 1.52.2 25.10.2009
Crysis(R) Electronic Arts 10.10.2009 2.304,7MB 1.21.0000
Crysis(R) Tournament Map Pack Crytek 22.10.2009 201,3MB 1.00.0000
CyberLink LabelPrint CyberLink Corp. 01.10.2009 126,8MB 2.5.1616
CyberLink MediaShow CyberLink Corp. 01.10.2009 182,6MB 4.1.2609
CyberLink PhotoNow CyberLink Corp. 01.10.2009 21,8MB 1.1.5615
CyberLink Power2Go CyberLink Corp. 01.10.2009 102,7MB 6.1.2806
CyberLink PowerDirector CyberLink Corp. 01.10.2009 322,4MB 7.0.2718
CyberLink PowerDVD 9 CyberLink Corp. 01.10.2009 240,3MB 9.0.1531
CyberLink PowerDVD Copy CyberLink Corp. 01.10.2009 11,5MB 1.0.5611
CyberLink PowerProducer CyberLink Corp. 01.10.2009 164,8MB 5.0.1.1412
CyberLink YouCam CyberLink Corp. 04.12.2009 126,5MB 3.0.1811.7429
DivX Codec DivX, Inc. 06.12.2009 1,31MB 6.9.1
DivX Converter DivX, Inc. 06.12.2009 45,3MB 7.1.0
DivX Player DivX, Inc. 06.12.2009 8,43MB 7.2.0
DivX Plus DirectShow Filters DivX, Inc. 06.12.2009 1,58MB
DivX Plus Web Player DivX,Inc. 06.12.2009 2,83MB 2.0.0
Doom Collector's Edition 08.12.2009 66,7MB
Driver Genius Professional 01.10.2009 17,2MB
Driver Genius Professional Edition v9.0.0.182 26.11.2009 18,3MB
Driver Sweeper 2.0.5 Phyxion.net 10.10.2009 142,4MB
Dune 08.12.2009 383,8MB
Dune II 22.11.2009 12,5MB
EA Network Play System 28.11.2009 1,37MB
EASEUS Partition Master 3.5 Unlimited Edition EASEUS 16.10.2009 70,9MB
EasyBCD 1.7.2 NeoSmart Technologies 11.10.2009 1,54MB 1.7.2
Empire Earth 05.10.2009 5,77MB
Empire Earth III Sierra Entertainment 05.10.2009 5.013,0MB 1.00.0000
EVEREST Ultimate Edition v5.30 Lavalys, Inc. 07.10.2009 15,7MB 5.30
Fraps (remove only) 24.10.2009 2,20MB
Free Studio version 4.2 DVDVideoSoft Limited. 07.11.2009 67,9MB
Futuremark SystemInfo Futuremark Corporation 02.10.2009 4,51MB 3.20.1.2
HijackThis 2.0.2 TrendMicro 05.12.2009 0,77MB 2.0.2
HLSW v1.3.2.1 Timo Stripf 05.12.2009 35,2MB
HyperCam 2 22.10.2009 4,14MB
HyperSnap 6 Hyperionics Technology LLC 09.10.2009 11,0MB 6.40.04
IE7Pro IE7Pro Team 02.10.2009 8,45MB 2.4.7
Intel(R) Network Connections 14.6.7.0 Intel 04.12.2009 14.6.7.0
Intel® Matrix Storage Manager Intel Corporation 01.10.2009
iTunes Apple Inc. 01.10.2009 9.0.1.8
Java(TM) 6 Update 16 Sun Microsystems, Inc. 11.10.2009 97,7MB 6.0.160
JDownloader AppWork UG (haftungsbeschränkt) 01.12.2009 52,9MB 0.89
K-Lite Mega Codec Pack 5.4.4 06.12.2009 46,6MB 5.4.4
LightScribe System Software LightScribe 01.10.2009 23,0MB 1.18.1.1
LockHunter version 1.0 beta 3, 64 bit edition Crystal Rich, Ltd 08.11.2009
LogMeIn Hamachi LogMeIn, Inc. 05.12.2009 3,55MB 2.0.1.66
M.A.X. 08.12.2009 375,7MB
Malwarebytes' Anti-Malware Malwarebytes Corporation 04.12.2009 4,12MB
McAfee SiteAdvisor McAfee, Inc. 07.11.2009 7,06MB 3.0.152
MCE Software Encoder 1.1 CyberLink Corporation 01.10.2009 1,51MB 1.1.0.1918
Medal of Honor Allied Assault 24.11.2009 3,13MB
Mercenaries 2: World in Flames(tm) Electronic Arts 25.11.2009 1.856,8MB 2.0.1.0
Microsoft .NET Framework 1.1 18.11.2009
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft Corporation 01.10.2009
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 01.10.2009
Microsoft Games for Windows - LIVE Microsoft Corporation 25.11.2009 8,31MB 3.1.186.0
Microsoft Games for Windows - LIVE Redistributable Microsoft Corporation 25.11.2009 32,3MB 3.1.99.0
Microsoft Office Enterprise 2007 Microsoft Corporation 08.12.2009 786,3MB 12.0.6425.1000
Microsoft Office Live Add-in 1.4 Microsoft Corporation 02.10.2009 0,49MB 2.0.3008.0
Microsoft Office Project Professional 2007 Microsoft Corporation 14.11.2009 786,3MB 12.0.6425.1000
Microsoft Office Visio Professional 2007 Microsoft Corporation 14.11.2009 786,3MB 12.0.6425.1000
Microsoft Reader 25.10.2009 1,76MB
Microsoft Reader Text-to-Speech deutsch Microsoft Corporation 25.10.2009 2,29MB 01.00.0000
Microsoft Silverlight Microsoft Corporation 03.10.2009 26,9MB 3.0.40818.0
Microsoft Virtual PC 2007 Microsoft Corporation 01.10.2009 36,9MB 6.0.156.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 Microsoft Corporation 01.10.2009 0,25MB 8.0.50727.4053
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 02.10.2009 0,25MB 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 04.12.2009 0,41MB 8.0.59193
Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 01.10.2009 0,69MB 8.0.56336
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Corporation 02.10.2009 0,19MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 Microsoft Corporation 01.10.2009 0,76MB 9.0.21022.218
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 15.11.2009 0,57MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 02.10.2009 0,58MB 9.0.30729
Microsoft Visual Studio 2008 Remote Debugger Light (x64) - DEU Microsoft Corporation 01.10.2009
Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - deu Microsoft Corporation 01.10.2009 5,74MB 3.5.30729
Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32 Microsoft Corporation 01.10.2009 2,61MB 6.1.5295.17011
Microsoft WSE 3.0 Runtime Microsoft Corp. 02.10.2009 0,92MB 3.0.5305.0
Mirror's Edge™ Electronic Arts 02.10.2009 3.204,2MB 1.0.1.0
Mozilla Firefox (3.5.5) Mozilla 07.11.2009 30,4MB 3.5.5 (de)
MSXML 4.0 SP2 (KB927978) Microsoft Corporation 15.11.2009 1,24MB 4.20.9841.0
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 15.11.2009 1,28MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 24.11.2009 1,34MB 4.20.9876.0
Need For Speed High Stakes 28.11.2009 449,6MB
Need for Speed™ Most Wanted 12.10.2009 2.820,8MB
Need for Speed™ Undercover Electronic Arts 20.11.2009 2.396,8MB 1.0.1.0
Neverball 1.5.4 16.10.2009 188,3MB 1.5.4
NFS HS Stock Pack 28.11.2009
NFS4 01.10.2009
nHancer KSE 01.10.2009 7,93MB 2.5.0700
NTREGOPT 1.1j Lars Hederer 13.10.2009 0,25MB
NVIDIA Drivers NVIDIA Corporation 01.10.2009 1.10
NVIDIA PhysX NVIDIA Corporation 01.10.2009 120,1MB 9.09.0814
OF Dragon Rising Codemasters 01.12.2009 5.202,5MB 1.00.0000
oZone3D.Net FurMark v1.7.0 oZone3D.Net 23.11.2009 3,16MB
PC SECURITY TEST 2009 AxBx 05.10.2009 3,50MB
PCMark Vantage Futuremark Corporation 02.10.2009 784,2MB 1.0.1.1
PeerBlock 1.0.0 (r181) PeerBlock, LLC 03.10.2009 1.0.0.181
Polipo 1.0.4 07.11.2009 1,02MB
Postal 2 Apocalypse Weekend Expansion Pack 09.10.2009 817,5MB
Postal 2 Share The Pain 09.10.2009 2.637,6MB
PowerISO 01.10.2009 3,03MB
Privoxy 3.0.6 02.10.2009 2,04MB
PureBasic 4.31 (64 bit) Fantaisie Software 04.12.2009
QuickTime Apple Inc. 03.10.2009 76,5MB 7.64.17.73
Ralink RT2870 Wireless LAN Card Ralink 26.11.2009 2,41MB 1.5.4.0
RAR Password Unlocker 3.0 Password Unlocker, Inc. 12.10.2009 10,0MB
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 26.11.2009 10,6MB 6.0.1.5953
Revo Uninstaller 1.83 VS Revo Group 02.10.2009 2,59MB 1.83
RocketDock 1.3.5 Punk Software 13.10.2009 18,6MB
SimpleScreenshot 1.30 05.10.2009
Skype™ 4.1 06.12.2009 31,1MB
Spybot - Search & Destroy Safer Networking Limited 11.10.2009 54,2MB 1.6.2
Steam Valve Corporation 26.11.2009 0,35MB 1.0.0.0
Steamless Left4Dead Pack Steamless 01.10.2009 6.729,0MB 1.0
TeamViewer 5 TeamViewer GmbH 07.12.2009 16,6MB 5.0.7418
ThreatFire PC Tools 03.10.2009 19,2MB
Tor 0.2.1.20 07.11.2009 6,91MB
TuneUp Utilities 2009 TuneUp Software 07.11.2009 47,1MB 8.0.3300.1
UltraEdit 15.20 IDM Computer Solutions, Inc. 04.12.2009 44,1MB 15.20.23
Uninstall 1.0.0.1 07.11.2009 36,9MB
Universal Extractor 1.6 Jared Breland 03.10.2009 11,7MB 1.6
USB Wireless Keyboard Driver My Company Name 05.11.2009 1,03MB V1.1
Vidalia 0.2.5 07.11.2009 30,9MB
Virtual DJ - Atomix Productions 02.10.2009 21,9MB
VirtualCloneDrive Elaborate Bytes 01.12.2009 2,24MB
Warmonger 11.10.2009 1.631,1MB
Westwood Chat 4.221 03.12.2009 2,56MB
Winamp Nullsoft, Inc 18.10.2009 13,8MB 5.56
Windows 7 Upgrade Advisor Microsoft Corporation 01.12.2009 9,53MB 2.0.5000.0
Windows Live Essentials Microsoft Corporation 02.10.2009 44,1MB 14.0.8089.0726
Windows Live ID-Anmelde-Assistent Microsoft Corporation 01.10.2009 8,12MB 6.500.3146.0
Windows Live-Uploadtool Microsoft Corporation 03.10.2009 0,22MB 14.0.8014.1029
WinPcap 3.1 beta Politecnico di Torino 28.11.2009 0,38MB
WinRAR 01.10.2009
WinUHA 2.0 RC1 (2005.02.27) Klaimsoft 02.10.2009 2,15MB
WMV to AVI MPEG DVD WMV Converter 4.4.0725 Allok Soft Inc. 15.10.2009 18,3MB
Wolfenstein 3D 08.12.2009 5,61MB
WORLD IN CONFLICT Massive Entertainment AB 20.11.2009 4.940,6MB 1.0.0.0
ZoneAlarm Pro Check Point, Inc 22.11.2009 17,7MB 9.1.008.000
µTorrent 04.10.2009 0,37MB 1.8.1
__________________ Nehm' das Leben nicht so ernst - Du kommst eh' nicht lebend raus! |
| | #5 |
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. hi nun mal so zur Info... 1. Thema ZoneAlarm & Firewall allgemein: - der Angreifer kann sich jeder Zeit erhöhte Rechte verschaffen, Antiviren-, Firewall- und andere Schutzprogramme einfach abschalten... ![]() "in diesem Sinne"... - Je mehr verschiedene Programme man als Nutzer installiert um so mehr muss man sich mit Probleme begeben Ausserdem heutige Anwendungen sind so komplex, dass nicht mehr garantiert werden kann, dass sie fehlerfrei sind. Man geht in der Regel sogar davon aus, dass zahlreiche Fehler enthalten sind. Also darunter eine spezielle Mauer, `Firewall` auch! Generell ist je weniger offene Ports, ist ein System um so sicherer! - McAfee für den IE schützt dich genauso wenig! - mit div. Optimizer Tools kann man das System leicht kaputt optimieren ![]() ** Ergebnis von Malwarebytes' Anti-Malware bitte posten! Geändert von kira (10.12.2009 um 09:37 Uhr) |
| | #6 |
![]() ![]() | 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. hi, hier Malware Bericht: Code:
ATTFilter Malwarebytes' Anti-Malware 1.42
Datenbank Version: 3308
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18865
10.12.2009 11:37:33
mbam-log-2009-12-10 (11-07-33).txt
Scan-Methode: Vollständiger Scan (C:\|)
Durchsuchte Objekte: 269345
Laufzeit: 32 minute(s), 57 second(s)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
ZoneAlarm...weil man damit auch programmen alles mögliche verbieten und erlauben kann z.b den Internet Zugriff...kann bei der Windows Firewall hat nicht und ich brauche diese Funktion.......und nur ein AntiVir Proggi von Avira...die Free Edition...ich weiß,dass sich mehere Security Tools gegenseitig umlegen^^ ThreadFire ist weder eine Firewall noch ein AntiVir Proggi..es achtet nur auf das Verhalten von Programmen... was tunig angeht...reichen mir die Bootmittel: Datenträger...und defrag... mit den Tools stelle ich nur einige sachen wie z.b das aussehen ein^^ mfg
__________________ --> 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. |
| | #7 |
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. hi 1. alle Anwendungen schließen → Ordner für temporäre Dateien bitte leeren **Lösche nur den Inhalt der Ordner, nicht die Ordner selbst! - Dateien, die noch in Benutzung sind,nicht löschbar.
2. reinige dein System mit Ccleaner:
3. - Bitte unbedingt alle vorhandenen externen Laufwerke inkl. evtl. vorhandener USB-Sticks an den Rechner anschließen, aber dabei die Shift-Taste gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. - Führe dann einen Komplett-Systemcheck mit Nod32 - die Scanergebnis als *.txt Dateien speichern) - (ESET Online Scanner Vor dem Scan Einstellungen im Internet Explorer: - "Extras→ Internetoptionen→ Sicherheit": - alles auf Standardstufe stellen - Active X erlauben - berichte genau wie es dein Rechner geht |
![]() |
| Themen zu 50 mal TR/Click.AdClicer.c, Registy gesperrt , System Ordner weg.. |
| antivir, antivir guard, avgntflt.sys, avira, bho, bonjour, browser, desktop, device driver, diagnostics, email, firefox, flash player, fontcache, hdaudio.sys, home, home premium, hängen, lenovo, local\temp, logfile, malwarebytes' anti-malware, menu.exe, need for speed, nicht starten, notepad.exe, nvlddmkm.sys, pdf-datei, plug-in, preferences, registry, rootkit, safer networking, scan, security, senden, siteadvisor, software, starten, studio, system, syswow64, updates, usbaapl64, virtual machine, vista, visual studio, windows, wireless lan, wlidsvc.exe, wscript.exe, zone alarm |