![]() |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Desktop Security 2010 lässt sich nicht entfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
| |
| | #1 |
| /// Winkelfunktion /// TB-Süch-Tiger™ ![]() ![]() ![]() ![]() ![]() ![]() | Desktop Security 2010 lässt sich nicht entfernen Kommt das OTL-Log noch?
__________________ Logfiles bitte immer in CODE-Tags posten |
| | #2 |
![]() | Desktop Security 2010 lässt sich nicht entfernen ja gleich morgen! hatte heute leider keine zeit dazu
__________________ |
| | #3 |
![]() | Desktop Security 2010 lässt sich nicht entfernen So da ist es:
__________________Das 1.: OTL logfile created on: 08.05.2010 15:46:00 - Run 1 OTL by OldTimer - Version 3.2.4.1 Folder = C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 71,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 88,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 298,08 Gb Total Space | 150,35 Gb Free Space | 50,44% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: 1E6BA6D99AD0475 Current User Name: Besitzer Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Programme\MirandaFusion\miranda32.exe ( ) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\MirandaFusion\mfwd.exe (Miranda Fusion Team) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\Programme\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Programme\RocketDock\RocketDock.exe () PRC - C:\Programme\Canon\IJPLM\ijplmsvc.exe () PRC - C:\Programme\Canon\MyPrinter\BJMYPRT.EXE (CANON INC.) PRC - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe (Nero AG) PRC - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexStoreSvr.exe (Nero AG) PRC - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe (Nero AG) PRC - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company) PRC - C:\WINDOWS\system32\CmWatch.exe () ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) MOD - C:\Programme\RocketDock\RocketDock.dll () ========== Win32 Services (SafeList) ========== SRV - (iPod Service) -- File not found SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (FLEXnet Licensing Service) -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.) SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.) SRV - (AdobeActiveFileMonitor7.0) -- C:\Programme\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated) SRV - (IJPLMSVC) -- C:\Programme\Canon\IJPLM\ijplmsvc.exe () SRV - (NMIndexingService) -- C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe (Nero AG) SRV - (LightScribeService) -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH) DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH) DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH) DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH) DRV - (MSICPL) -- C:\WINDOWS\system32\msicpl.dll (MSI) DRV - (gdrv) -- C:\WINDOWS\gdrv.sys (Windows (R) 2000 DDK provider) DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.) DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation ) DRV - (FWLANUSB) -- C:\WINDOWS\system32\drivers\fwlanusb.sys (AVM GmbH) DRV - (avmeject) -- C:\WINDOWS\system32\drivers\avmeject.sys (AVM Berlin) DRV - (w200mgmt) Sony Ericsson W200 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\w200mgmt.sys (MCCI) DRV - (w200mdm) -- C:\WINDOWS\system32\drivers\w200mdm.sys (MCCI) DRV - (w200mdfl) -- C:\WINDOWS\system32\drivers\w200mdfl.sys (MCCI) DRV - (w200bus) Sony Ericsson W200 driver (WDM) -- C:\WINDOWS\system32\drivers\w200bus.sys (MCCI) DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices) DRV - (UMSSSTOR) -- C:\WINDOWS\system32\drivers\Umss.SYS (C-Media Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.de/ [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {46beb884-0efc-abf8-49f6-83e08255f416}:4.6.6.6 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.05.06 17:54:13 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.05.06 17:56:02 | 000,000,000 | ---D | M] [2010.05.06 17:56:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Extensions [2010.05.06 19:28:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\49g1pln5.default\extensions [2010.05.06 17:54:09 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\49g1pln5.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.05.06 19:28:43 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010.05.06 19:28:44 | 000,000,000 | ---D | M] (z) -- C:\Programme\Mozilla Firefox\extensions\{46beb884-0efc-abf8-49f6-83e08255f416} [2010.04.01 18:54:38 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.04.01 18:54:38 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.04.01 18:54:38 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.04.01 18:54:38 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.04.01 18:54:38 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2006.02.28 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (no name) - {A20854FD-DDB5-4931-8F76-D11EA2364D94} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {71B6ACF7-4F0F-4FD8-BB69-6D1A4D271CB7} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [CanonMyPrinter] C:\Programme\Canon\MyPrinter\BJMyPrt.exe (CANON INC.) O4 - HKLM..\Run: [CanonSolutionMenu] C:\Programme\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.) O4 - HKLM..\Run: [CmCardRun] C:\WINDOWS\system32\CmWatch.exe () O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [WinSys2] C:\WINDOWS\system32\WinSys2.exe () O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - HKCU..\Run: [Miranda Fusion] C:\Programme\MirandaFusion\mfstart.exe (Miranda Fusion Team) O4 - HKCU..\Run: [RocketDock] C:\Programme\RocketDock\RocketDock.exe () O4 - HKLM..\RunOnceEx: [] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data] O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 () - file:///C:/DOKUME~1/Besitzer/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg O24 - Desktop Components:1 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008.05.31 10:28:34 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{12a13f4e-01c4-11de-94cf-001d7dd7db9a}\Shell - "" = AutoRun O33 - MountPoints2\{12a13f4e-01c4-11de-94cf-001d7dd7db9a}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{12a13f4e-01c4-11de-94cf-001d7dd7db9a}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found O33 - MountPoints2\{4cf68a75-3256-11dd-92b6-001d7dd7db9a}\Shell - "" = AutoRun O33 - MountPoints2\{4cf68a75-3256-11dd-92b6-001d7dd7db9a}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{4cf68a75-3256-11dd-92b6-001d7dd7db9a}\Shell\AutoRun\command - "" = F:\pushinst.exe -- File not found O33 - MountPoints2\{f878163d-0a7f-11de-94e9-001d7dd7db9a}\Shell\AutoRun\command - "" = fooool.exe O33 - MountPoints2\{f878163d-0a7f-11de-94e9-001d7dd7db9a}\Shell\explore\Command - "" = fooool.exe O33 - MountPoints2\{f878163d-0a7f-11de-94e9-001d7dd7db9a}\Shell\open\Command - "" = fooool.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.05.06 20:00:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Malwarebytes [2010.05.06 19:36:51 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Besitzer\Recent [2010.05.06 19:36:32 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Besitzer\IECompatCache [2010.05.06 19:34:38 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.05.06 19:34:37 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.05.06 19:34:37 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010.05.05 18:41:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.05.05 18:32:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2010.05.04 20:17:52 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2010.05.04 18:20:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Adobe [2010.05.04 18:19:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Sun [2010.04.28 13:42:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Miranda Fusion [2010.04.28 13:42:27 | 000,000,000 | ---D | C] -- C:\Programme\MirandaFusion [2010.04.27 22:20:59 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox [2010.04.23 14:08:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Adobe [2010.04.22 14:21:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Macromedia [2010.04.22 14:19:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Adobe [2010.04.19 18:55:26 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Besitzer\PrivacIE [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.05.08 15:41:53 | 000,176,979 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2010.05.08 15:41:52 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010.05.08 15:41:51 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010.05.08 15:41:50 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.05.08 15:40:01 | 005,767,168 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\ntuser.dat [2010.05.08 15:39:57 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Besitzer\ntuser.ini [2010.05.08 15:31:19 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.05.06 22:28:36 | 004,843,816 | -H-- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\IconCache.db [2010.05.06 22:27:00 | 000,001,092 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010.05.06 22:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At23.job [2010.05.06 22:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At95.job [2010.05.06 22:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At71.job [2010.05.06 22:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At47.job [2010.05.06 22:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At143.job [2010.05.06 22:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At119.job [2010.05.06 21:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At22.job [2010.05.06 21:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At94.job [2010.05.06 21:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At70.job [2010.05.06 21:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At46.job [2010.05.06 21:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At142.job [2010.05.06 21:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At118.job [2010.05.06 20:46:00 | 000,448,470 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.05.06 20:46:00 | 000,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.05.06 20:46:00 | 000,079,910 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.05.06 20:46:00 | 000,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.05.06 20:45:58 | 001,042,118 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010.05.06 20:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At21.job [2010.05.06 20:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At93.job [2010.05.06 20:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At69.job [2010.05.06 20:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At45.job [2010.05.06 20:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At141.job [2010.05.06 20:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At117.job [2010.05.06 19:50:54 | 000,096,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atapi.sys [2010.05.06 19:34:41 | 000,000,676 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.05.06 19:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At20.job [2010.05.06 19:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At92.job [2010.05.06 19:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At68.job [2010.05.06 19:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At44.job [2010.05.06 19:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At140.job [2010.05.06 19:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At116.job [2010.05.06 18:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At19.job [2010.05.06 17:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At18.job [2010.05.05 18:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At91.job [2010.05.05 18:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At67.job [2010.05.05 18:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At43.job [2010.05.05 18:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At139.job [2010.05.05 18:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At115.job [2010.05.04 19:34:03 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2010.05.03 16:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At17.job [2010.05.03 16:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At89.job [2010.05.03 16:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At65.job [2010.05.03 16:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At41.job [2010.05.03 16:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At137.job [2010.05.03 16:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At113.job [2010.05.03 14:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At87.job [2010.05.03 14:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At63.job [2010.05.03 14:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At39.job [2010.05.03 14:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At135.job [2010.05.03 14:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At111.job [2010.05.03 12:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At85.job [2010.05.03 12:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At61.job [2010.05.03 12:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At37.job [2010.05.03 12:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At133.job [2010.05.03 12:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At109.job [2010.05.02 17:25:04 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\chrtmp [2010.05.02 17:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At90.job [2010.05.02 17:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At66.job [2010.05.02 17:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At42.job [2010.05.02 17:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At138.job [2010.05.02 17:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At114.job [2010.05.02 14:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At15.job [2010.05.01 12:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At13.job [2010.04.29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.04.29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.04.28 15:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At16.job [2010.04.28 15:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At88.job [2010.04.28 15:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At64.job [2010.04.28 15:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At40.job [2010.04.28 15:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At136.job [2010.04.28 15:00:00 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At112.job [2010.04.28 13:42:35 | 000,000,682 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Miranda Fusion.lnk [2010.04.28 13:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At14.job [2010.04.27 18:54:27 | 000,000,112 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\k41WQK25d.dat [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At144.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At134.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At132.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At131.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At130.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At129.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At128.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At127.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At126.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At125.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At124.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At123.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At122.job [2010.04.27 14:44:24 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At121.job [2010.04.25 01:00:26 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At98.job [2010.04.25 01:00:26 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At74.job [2010.04.25 01:00:26 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At50.job [2010.04.25 01:00:26 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At26.job [2010.04.25 00:56:25 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At97.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At99.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At120.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At110.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At108.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At107.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At106.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At105.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At104.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At103.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At102.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At101.job [2010.04.25 00:48:36 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At100.job [2010.04.25 00:47:25 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At49.job [2010.04.25 00:34:25 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At73.job [2010.04.25 00:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At1.job [2010.04.25 00:16:25 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At25.job [2010.04.24 23:19:00 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At24.job [2010.04.24 23:00:26 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At96.job [2010.04.24 23:00:26 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At72.job [2010.04.24 23:00:26 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At48.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At86.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At84.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At83.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At82.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At81.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At80.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At79.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At78.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At77.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At76.job [2010.04.24 22:45:05 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At75.job [2010.04.24 21:59:00 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At62.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At60.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At59.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At58.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At57.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At56.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At55.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At54.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At53.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At52.job [2010.04.24 20:42:14 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At51.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At38.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At36.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At35.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At34.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At33.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At32.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At31.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At30.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At29.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At28.job [2010.04.23 15:50:19 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\At27.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At9.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At8.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At7.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At6.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At5.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At4.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At3.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At2.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At12.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At11.job [2010.04.23 15:46:24 | 000,000,346 | ---- | M] () -- C:\WINDOWS\tasks\At10.job [2010.04.17 12:45:52 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010.04.17 12:39:42 | 000,327,650 | ---- | M] () -- C:\logfile [2010.04.17 12:06:55 | 001,249,280 | R--- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\ESBK.mb [2010.04.17 12:06:54 | 002,421,760 | R--- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\ESBK.mbb [2010.04.17 11:53:25 | 003,085,391 | R--- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\SDC19017.JPG [2010.04.17 11:53:00 | 001,760,577 | R--- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\PICT3706.JPG [2010.04.17 11:52:12 | 001,919,551 | R--- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\PICT3849.JPG [2010.04.17 11:50:36 | 003,207,650 | R--- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\SDC18675.JPG [2010.04.17 11:50:26 | 003,216,816 | R--- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\SDC18410.JPG [2010.04.17 11:50:10 | 003,788,586 | R--- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\SDC18734.JPG [2010.04.17 11:49:25 | 001,309,440 | R--- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\PICT3729.JPG [2010.04.17 11:48:08 | 001,828,584 | R--- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\PICT3850.JPG [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.05.06 19:34:41 | 000,000,676 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.05.02 17:25:04 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\chrtmp [2010.05.02 13:47:34 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010.04.30 14:10:16 | 005,767,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\ntuser.dat [2010.04.28 13:42:35 | 000,000,682 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Miranda Fusion.lnk [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At144.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At143.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At142.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At141.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At140.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At139.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At138.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At137.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At136.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At135.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At134.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At133.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At132.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At131.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At130.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At129.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At128.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At127.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At126.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At125.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At124.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At123.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At122.job [2010.04.27 14:44:24 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At121.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At99.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At98.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At97.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At120.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At119.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At118.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At117.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At116.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At115.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At114.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At113.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At112.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At111.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At110.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At109.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At108.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At107.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At106.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At105.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At104.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At103.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At102.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At101.job [2010.04.25 00:48:36 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At100.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At96.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At95.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At94.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At93.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At92.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At91.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At90.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At89.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At88.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At87.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At86.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At85.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At84.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At83.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At82.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At81.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At80.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At79.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At78.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At77.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At76.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At75.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At74.job [2010.04.24 22:45:05 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At73.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At72.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At71.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At70.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At69.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At68.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At67.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At66.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At65.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At64.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At63.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At62.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At61.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At60.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At59.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At58.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At57.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At56.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At55.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At54.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At53.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At52.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At51.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At50.job [2010.04.24 20:42:14 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At49.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At48.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At47.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At46.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At45.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At44.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At43.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At42.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At41.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At40.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At39.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At38.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At37.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At36.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At35.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At34.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At33.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At32.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At31.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At30.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At29.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At28.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At27.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At26.job [2010.04.23 15:50:19 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\At25.job [2010.04.23 15:46:59 | 000,000,112 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\k41WQK25d.dat [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At9.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At8.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At7.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At6.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At5.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At4.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At3.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At24.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At23.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At22.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At21.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At20.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At2.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At19.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At18.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At17.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At16.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At15.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At14.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At13.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At12.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At11.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At10.job [2010.04.23 15:46:24 | 000,000,346 | ---- | C] () -- C:\WINDOWS\tasks\At1.job [2010.04.17 11:53:25 | 003,085,391 | R--- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\SDC19017.JPG [2010.04.17 11:53:00 | 001,760,577 | R--- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\PICT3706.JPG [2010.04.17 11:52:12 | 001,919,551 | R--- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\PICT3849.JPG [2010.04.17 11:50:36 | 003,207,650 | R--- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\SDC18675.JPG [2010.04.17 11:50:26 | 003,216,816 | R--- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\SDC18410.JPG [2010.04.17 11:50:10 | 003,788,586 | R--- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\SDC18734.JPG [2010.04.17 11:49:25 | 001,309,440 | R--- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\PICT3729.JPG [2010.04.17 11:48:08 | 001,828,584 | R--- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\PICT3850.JPG [2010.04.02 18:14:38 | 000,000,000 | ---- | C] () -- C:\WINDOWS\msicpl.ini [2010.02.04 12:46:59 | 000,131,072 | R--- | C] () -- C:\WINDOWS\System32\smdll.dll [2010.02.04 12:46:55 | 000,262,144 | R--- | C] () -- C:\WINDOWS\System32\HookShield.dll [2010.02.04 12:46:55 | 000,258,048 | R--- | C] () -- C:\WINDOWS\System32\HookMAp.dll [2010.02.04 12:46:55 | 000,032,768 | R--- | C] () -- C:\WINDOWS\System32\Auxiliary.dll [2009.05.10 23:30:00 | 000,000,036 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2008.09.09 15:05:52 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI [2008.06.21 17:49:41 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2008.06.08 20:18:59 | 000,032,768 | R--- | C] () -- C:\WINDOWS\System32\CmCardRm.dll [2008.06.04 20:10:55 | 000,000,404 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI [2008.06.04 18:54:48 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007.12.05 01:41:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2007.12.05 01:41:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2007.12.05 01:41:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2007.12.05 01:41:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2007.12.05 01:41:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI < End of report > und das 2.: OTL Extras logfile created on: 08.05.2010 15:46:00 - Run 1 OTL by OldTimer - Version 3.2.4.1 Folder = C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 71,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 88,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 298,08 Gb Total Space | 150,35 Gb Free Space | 50,44% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: 1E6BA6D99AD0475 Current User Name: Besitzer Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- "C:\Programme\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- C:\Programme\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- C:\Programme\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" = C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe:*:Enabled:Kaspersky Anti-Virus -- File not found "C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.) "C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.) "C:\Programme\Participatory Culture Foundation\Miro\Miro_Downloader.exe" = C:\Programme\Participatory Culture Foundation\Miro\Miro_Downloader.exe:*:Enabled:Miro_Downloader -- File not found "C:\Programme\Kodak\Kodak EasyShare software\bin\EasyShare.exe" = C:\Programme\Kodak\Kodak EasyShare software\bin\EasyShare.exe:*:Enabled:EasyShare -- (Eastman Kodak Company) "C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6 -- File not found "C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\winsvcn.exe" = C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\winsvcn.exe:*:Enabled:Windows Update Manager -- File not found "C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\winvsn.exe" = C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\winvsn.exe:*:Enabled:Windows Control Manager -- File not found "C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\winvns.exe" = C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\winvns.exe:*:Enabled:WinUpdSrvc -- File not found "C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\winvsnc.exe" = C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\winvsnc.exe:*:Enabled:WindowsUpdateControl -- File not found "C:\Programme\MirandaFusion\miranda32.exe" = C:\Programme\MirandaFusion\miranda32.exe:*:Enabled:Miranda IM -- ( ) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}" = Notifier "{03EDED24-8375-407D-A721-4643D9768BE1}" = kgchlwn "{073F22CE-9A5B-4A40-A604-C7270AC6BF34}" = ESSSONIC "{10798AE3-DCBB-43C3-9C93-C23512427E25}" = Die Sims Deluxe "{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP520_series" = Canon MP520 series "{11F3F858-4131-4FFA-A560-3FE282933B6E}" = kgchday "{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}" = ESSPCD "{21BBAD12-C75F-4F06-A9B0-6F8BEEAF3846}" = Moorhuhn X - XS "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 11 "{2B04D44F-1D1B-4E0E-8431-D04F87C21031}" = Nero 7 Essentials "{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}" = essvatgt "{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6 "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{56AB063D-1450-4BDE-9F0D-E9C693429C51}" = netbrdg "{605A4E39-613C-4A12-B56F-DEFBE6757237}" = SHASTA "{65D85050-5610-4A91-A3B1-D5C744291AD4}" = PCDADDIN "{693C08A7-9E76-43FF-B11E-9A58175474C4}" = kgckids "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7A2FD295-38D2-4AAF-BF41-2C95EBB96126}" = Moorhuhn Kart 2 XXL "{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU "{8943CE61-53BD-475E-90E1-A580869E98A2}" = staticcr "{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}" = Bonjour "{8A502E38-29C9-49FA-BCFA-D727CA062589}" = ESSTOOLS "{8A8664E1-84C8-4936-891C-BC1F07797549}" = kgcvday "{8E92D746-CD9F-4B90-9668-42B74C14F765}" = ESSini "{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{91517631-A9F3-4B7C-B482-43E0068FD55A}" = ESSgui "{999D43F4-9709-4887-9B1A-83EBB15A8370}" = VPRINTOL "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BD54685-1496-46A5-AB62-357CD140ED8B}" = kgcinvt "{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}" = ESScore "{A1588373-1D86-4D44-86C9-78ABD190F9CC}" = kgcmove "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1031-7B44-A81300000003}" = Adobe Reader 8.1.5 - Deutsch "{AC76BA86-7AD7-1031-7B44-A81300000003}_814" = KB408682 "{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}" = ESSCDBK "{AFA9D219-A7FD-4240-8793-E5C7C9D715F4}" = IKEA Home Planner "{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}" = OfotoXMI "{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}" = CCScore "{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}" = KSU "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C99DCDA4-7407-4F72-A77E-C81C551D0C4E}" = PCDHELP "{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver "{CB6075D9-F912-40AE-BEA6-E590DA24F16B}" = Adobe Photoshop Elements 7.0 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1 "{D32470A1-B10C-4059-BA53-CF0486F68EBC}" = Kodak EasyShare Software "{DB02F716-6275-42E9-B8D2-83BA2BF5100B}" = SFR "{DEE88727-779B-47A9-ACEF-F87CA5F92A65}" = ScanSoft OmniPage SE 4 "{E1180142-3B31-4DCC-9D27-7AC2D37662BF}" = LightScribe 1.4.124.1 "{E18B549C-5D15-45DA-8D8F-8FD2BD946344}" = kgcbaby "{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}" = tooltips "{EC4455AB-F155-4CC1-A4C5-88F3777F9886}" = Apple Mobile Device Support "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1362843-0E0E-4F74-8662-724CF101ADCE}" = Skype web features "{F22C222C-3CE2-4A4B-A83F-AF4681371ABE}" = kgcbase "{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}" = SKINXSDK "{F5C63795-2708-4D15-BF18-5ABBFF7DFFC8}" = iTunes "{F9593CFB-D836-49BC-BFF1-0E669A411D9F}" = WIRELESS "{FDF9943A-3D5C-46B3-9679-586BD237DDEE}" = SKIN0001 "3B18191663CDFABAA2A93D4267E54D683153FF60" = Windows-Treiberpaket - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0) "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop Elements 7" = Adobe Photoshop Elements 7.0 "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "Canon MP520 series Benutzerregistrierung" = Canon MP520 series Benutzerregistrierung "CANONIJPLM100" = PIXMA Extended Survey Program "CanonMyPrinter" = Canon My Printer "CanonSolutionMenu" = Canon Utilities Solution Menu "CCleaner" = CCleaner (remove only) "C-Media Card Reader Driver" = C-Media USB Mass Storage Driver "Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX "FLOW.GAME" = FLOW.GAME "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie8" = Windows Internet Explorer 8 "IrfanView" = IrfanView (remove only) "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "MirandaFusion" = Miranda Fusion 2.0.22 "Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3) "MP Navigator EX 1.0" = Canon MP Navigator EX 1.0 "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "Neverball" = Neverball 1.5.1 "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "NVIDIA Drivers" = NVIDIA Drivers "PrintMaster 8.0" = PrintMaster® Silber "RocketDock_is1" = RocketDock 1.3.5 "Serif DrawPlus 3.0" = Serif DrawPlus 3.0 "ShockwaveFlash" = Adobe Flash Player 9 ActiveX "VLC media player" = VLC media player 0.9.6 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "Windows XP Service Pack" = Windows XP Service Pack 3 "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 04.05.2010 15:04:16 | Computer Name = 1E6BA6D99AD0475 | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung wupdhost.exe, Version 6.35.0.0, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 05.05.2010 11:26:55 | Computer Name = 1E6BA6D99AD0475 | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung startservice.exe, Version 6.35.0.0, fehlgeschlagenes Modul msvbvm60.dll, Version 6.0.98.2, Fehleradresse 0x000e450a. Error - 05.05.2010 11:28:39 | Computer Name = 1E6BA6D99AD0475 | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung guardgui.exe, Version 9.0.3.0, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x00000000. Error - 05.05.2010 11:29:34 | Computer Name = 1E6BA6D99AD0475 | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung nvdis.exe, Version 5.1.2600.5512, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 05.05.2010 12:13:48 | Computer Name = 1E6BA6D99AD0475 | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung startservice.exe, Version 6.35.0.0, fehlgeschlagenes Modul msvbvm60.dll, Version 6.0.98.2, Fehleradresse 0x000e450a. Error - 05.05.2010 15:26:04 | Computer Name = 1E6BA6D99AD0475 | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung startservice.exe, Version 6.35.0.0, fehlgeschlagenes Modul user32.dll, Version 5.1.2600.5512, Fehleradresse 0x00008d8a. Error - 05.05.2010 15:26:05 | Computer Name = 1E6BA6D99AD0475 | Source = Application Error | ID = 1004 Description = Fehlgeschlagene Anwendung taskmgr.dll, Version 4.3.21.0, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x00000000. Error - 05.05.2010 15:30:12 | Computer Name = 1E6BA6D99AD0475 | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung startservice.exe, Version 6.35.0.0, fehlgeschlagenes Modul user32.dll, Version 5.1.2600.5512, Fehleradresse 0x00008d8a. Error - 05.05.2010 15:30:40 | Computer Name = 1E6BA6D99AD0475 | Source = Microsoft Office 11 | ID = 2001 Description = Error - 08.05.2010 09:41:58 | Computer Name = 1E6BA6D99AD0475 | Source = PerfNet | ID = 2004 Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen werden nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0. [ System Events ] Error - 06.05.2010 16:00:00 | Computer Name = 1E6BA6D99AD0475 | Source = Schedule | ID = 7901 Description = Der Befehl "At95.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942402 Error - 06.05.2010 16:19:00 | Computer Name = 1E6BA6D99AD0475 | Source = Schedule | ID = 7901 Description = Der Befehl "At23.job" konnte aufgrund folgenden Fehlers nicht ausgeführt werden: %%2147942402 Error - 08.05.2010 09:31:32 | Computer Name = 1E6BA6D99AD0475 | Source = Service Control Manager | ID = 7009 Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Google Update Service (gupdate). Error - 08.05.2010 09:31:32 | Computer Name = 1E6BA6D99AD0475 | Source = Service Control Manager | ID = 7000 Description = Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error - 08.05.2010 09:31:45 | Computer Name = 1E6BA6D99AD0475 | Source = Ftdisk | ID = 262189 Description = Das System konnte den Treiber für das Speicherabbild nicht laden. Error - 08.05.2010 09:31:45 | Computer Name = 1E6BA6D99AD0475 | Source = Ftdisk | ID = 262193 Description = Die Konfiguration der Auslagerungsdatei für das Speicherabbild ist fehlgeschlagen. Stellen Sie sicher, dass eine Auslagerungsdatei auf der Startpartition vorhanden ist und dass diese groß genug ist, um den gesamten physikalischen Speicher abbilden zu können. Error - 08.05.2010 09:42:00 | Computer Name = 1E6BA6D99AD0475 | Source = Service Control Manager | ID = 7009 Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Google Update Service (gupdate). Error - 08.05.2010 09:42:00 | Computer Name = 1E6BA6D99AD0475 | Source = Service Control Manager | ID = 7000 Description = Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error - 08.05.2010 09:42:17 | Computer Name = 1E6BA6D99AD0475 | Source = Ftdisk | ID = 262189 Description = Das System konnte den Treiber für das Speicherabbild nicht laden. Error - 08.05.2010 09:42:17 | Computer Name = 1E6BA6D99AD0475 | Source = Ftdisk | ID = 262193 Description = Die Konfiguration der Auslagerungsdatei für das Speicherabbild ist fehlgeschlagen. Stellen Sie sicher, dass eine Auslagerungsdatei auf der Startpartition vorhanden ist und dass diese groß genug ist, um den gesamten physikalischen Speicher abbilden zu können. < End of report > Gruß gnaarz |
![]() |
| Themen zu Desktop Security 2010 lässt sich nicht entfernen |
| anleitung, autostart, befindet, ccleaner, desktop, desktop security 2010, eingabe, entfernen, festplatte, festplatte formatieren, formatieren, frage, hallo zusammen, lässt sich nicht entfernen, lösung, malwarebytes, modus, nicht mehr, platte, programm, registry, rkill, security, sperrt, starten, taskmanager, virus, wissens, zusammen |