Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: selbe problem mit Windows Security Alert - Antivirus Software Alert

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 15.08.2010, 13:24   #1
lavalampe92
 
selbe problem mit Windows Security Alert - Antivirus Software Alert - Ausrufezeichen

selbe problem mit Windows Security Alert - Antivirus Software Alert



also leute ich bin neu hier brauche aber dringend eure hilfe und hoffe ihr könnt mich irgendwie weiterbringen :-(

also mein Problem ist das gleiche wie bei Taube (http://www.trojaner-board.de/88401-w...-internet.html)

ehm ich versuche das problem wie von euch beschrieben zu lösen.
habe mir schon Malwarebytes runtergeladen und lasse grade den vollscan durchlaufen. poste ich auch gleich rein.

meine frage noch: brauche ich für den OTL- scan dann internet ?
weil ich keine verbindung mehr aufgebaut bekomme :-(

hoffe ihr könnt mir weiterhelfen

LG LavaLampe92

so hab jetzt Malwarebytes durchlaufen lassen:



dabei wurde das gefunden ^^
hier noch einmal der Log dazu:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4052

Windows 6.0.6002 Service Pack 2 (Safe Mode)
Internet Explorer 8.0.6001.18943

15.08.2010 14:20:59
mbam-log-2010-08-15 (14-20-59).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 298671
Laufzeit: 1 Stunde(n), 8 Minute(n), 0 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 3
Infizierte Registrierungswerte: 4
Infizierte Dateiobjekte der Registrierung: 1
Infizierte Verzeichnisse: 0
Infizierte Dateien: 5

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Trojan.BHO) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\java developer script browse (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\userinit (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vbesirujiqigiso (Trojan.Agent.U) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (explorer.exe,C:\RECYCLER\S-1-5-21-6910249558-1307336201-834733800-7649\nvapbar.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\RECYCLER\S-1-5-21-6910249558-1307336201-834733800-7649\nvapbar.exe (Worm.Autorun.B) -> Delete on reboot.
C:\Users\Public\jusched.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\User\AppData\Roaming\sdra64.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\User\AppData\Local\odrfeas.dll (Trojan.Agent.U) -> Quarantined and deleted successfully.
C:\Program Files\ICQToolbar\toolbaru.dll (Trojan.BHO) -> Quarantined and deleted successfully.


wie man gelesen hat war ich im abgesichterten modus, weil ich im normalen windows vista modus nichts mehr installieren oder anklicken konnte da mir das programm jeglichen zugriff verweigert !

wie ihr beschreibt wollte ich die gefundenen dateien löschen kam dabei aber folgende naricht:



ich hab auf ja gedrückt, aber beim neustart kam ich dann wieder in den normalen modus und das programm war immer noch da

ich hoffe ihr könnt was mit meinem materialien anstellen ^^
soll ich jetzt OTL runterladen und weiter machen ?

so hab jetzt OTL mal durchlaufen lassen im abgesichtern modus

Log OTL:
OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 15.08.2010 14:47:32 - Run 1
OTL by OldTimer - Version 3.2.9.1     Folder = C:\Users\User\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18943)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
893,00 Mb Total Physical Memory | 504,00 Mb Available Physical Memory | 56,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 52,14 Gb Total Space | 10,36 Gb Free Space | 19,88% Space Free | Partition Type: NTFS
Drive D: | 51,84 Gb Total Space | 49,51 Gb Free Space | 95,50% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 95,92 Mb Total Space | 58,74 Mb Free Space | 61,23% Space Free | Partition Type: FAT
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: USER-PC
Current User Name: User
Logged in as Administrator.
 
Current Boot Mode: SafeMode
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\User\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\User\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (SearchAnonymizer) -- C:\Users\User\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe ()
SRV - (wlidsvc) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV - (LVPrcSrv) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (LVCOMSer) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (GtFlashSwitch) -- C:\Program Files\Common Files\GtFlashSwitch\GtFlashSwitch.exe (OptionNV)
SRV - (gtdetectsc) -- C:\Windows\System32\Gtdetectsc.exe (OptionNV)
SRV - (WMIService) -- C:\Acer\Empowering Technology\ePower\ePowerSvc.exe (acer)
SRV - (eLockService) -- C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe (Acer Inc.)
SRV - (MobilityService) -- C:\Acer\Mobility Center\MobilityService.exe ()
SRV - (eNet Service) -- C:\Acer\Empowering Technology\eNet\eNet Service.exe (Acer Inc.)
SRV - (eRecoveryService) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
SRV - (eSettingsService) -- C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe ()
 
 
========== Driver Services (SafeList) ==========
 
DRV - (UIUSys) -- C:\Windows\System32\DRIVERS\UIUSYS.SYS File not found
DRV - (PCASp50) -- C:\Windows\System32\drivers\PCASp50.sys File not found
DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not found
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (SiFilter) -- C:\Windows\system32\DRIVERS\SiWinAcc.sys (Silicon Image, Inc)
DRV - (SI3112) -- C:\Windows\system32\DRIVERS\SI3112.sys (Silicon Image, Inc)
DRV - (LVUSBSta) -- C:\Windows\System32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) -- C:\Windows\System32\drivers\LV302V32.SYS (Logitech Inc.)
DRV - (LVPr2Mon) -- C:\Windows\System32\drivers\LVPr2Mon.sys ()
DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (GTSCSER) -- C:\Windows\System32\drivers\gtscser.sys (Option N.V.)
DRV - (GTF32BUS) -- C:\Windows\System32\drivers\gtf32bus.sys (Option N.V.)
DRV - (GTPTSER) -- C:\Windows\System32\drivers\gtptser.sys (Option N.V.)
DRV - (NTIDrvr) -- C:\Windows\System32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (PSDNServ) -- C:\Windows\system32\drivers\PSDNServ.sys (HiTRUST)
DRV - (PSDFilter) -- C:\Windows\system32\DRIVERS\psdfilter.sys (HiTRUST)
DRV - (psdvdisk) -- C:\Windows\system32\drivers\psdvdisk.sys (HiTRUST)
DRV - (NWADI) -- C:\Windows\System32\drivers\NWADIenum.sys (Novatel Wireless Inc)
DRV - (RTL8023xp) -- C:\Windows\System32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation                           )
DRV - (DKbFltr) -- C:\Windows\System32\drivers\DKbFltr.sys (Dritek System Inc.)
DRV - (DritekPortIO) -- C:\Program Files\Launch Manager\DPortIO.sys (Dritek System Inc.)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (HSFHWAZL) -- C:\Windows\System32\drivers\VSTAZL3.SYS (Conexant Systems, Inc.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\system32\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (ESDCR) -- C:\Windows\System32\drivers\ESD7SK.sys (ENE Technology Inc.)
DRV - (ESMCR) -- C:\Windows\System32\drivers\ESM7SK.sys (ENE Technology Inc.)
DRV - (EMSCR) -- C:\Windows\System32\drivers\EMS7SK.sys (ENE Technology Inc.)
DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (HSF_DPV) -- C:\Windows\System32\drivers\HSX_DPV.sys (Conexant Systems, Inc.)
DRV - (HSXHWAZL) -- C:\Windows\System32\drivers\HSXHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\Windows\System32\drivers\HSX_CNXT.sys (Conexant Systems, Inc.)
DRV - (MTOnlPktAlyX) -- C:\Program Files\T-Online\T-Online_Software_6\Basis-Software\Basis1\MTOnlPktAlyx.sys (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
DRV - (UBHelper) -- C:\Windows\System32\drivers\UBHelper.sys ()
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (odysseyIM4) -- C:\Windows\System32\drivers\odysseyIM4.sys (Funk Software, Inc.)
DRV - (int15) -- C:\Acer\Empowering Technology\eRecovery\int15.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.intl.acer.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.intl.acer.yahoo.com
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SEARCH PAGE = hxxp://google.icq.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://fullarticles.net
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:6522
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://www.google.de/search?q="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/skins7/"
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.9
FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.0.0.10
FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.5.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.0&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Live Search"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://go.microsoft.com/fwlink/?LinkId=69157"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: D:\Handy W810i\components [2010.07.26 00:27:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: D:\Handy W810i\plugins [2010.07.26 00:27:02 | 000,000,000 | ---D | M]
 
[2010.07.01 09:05:01 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\mozilla\Extensions
[2010.07.01 09:05:01 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\mozilla\Extensions\IMVUClientXUL@imvu.com
[2010.08.11 23:00:58 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\prhefwgd.default\extensions
[2010.06.09 17:16:54 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\prhefwgd.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.06.09 17:17:09 | 000,000,000 | ---D | M] (Stylish) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\prhefwgd.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
[2009.02.26 19:32:21 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\prhefwgd.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010.07.02 12:42:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\prhefwgd.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.06.09 17:16:54 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\prhefwgd.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2010.06.09 17:16:54 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\prhefwgd.default\extensions\personas@christopher.beard
[2009.10.28 18:44:36 | 000,000,828 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin-1.xml
[2009.10.28 18:44:36 | 000,000,828 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin-2.xml
[2009.10.28 18:44:36 | 000,000,828 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin-3.xml
[2009.10.29 09:33:26 | 000,000,961 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin-4.xml
[2009.11.21 16:01:22 | 000,000,961 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin-5.xml
[2009.12.19 17:04:45 | 000,000,961 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin-6.xml
[2010.01.17 18:22:22 | 000,000,961 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin-7.xml
[2010.02.01 10:34:02 | 000,000,950 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin-8.xml
[2010.04.22 13:33:22 | 000,000,945 | ---- | M] () -- C:\Users\User\AppData\Roaming\Mozilla\FireFox\Profiles\prhefwgd.default\searchplugins\icqplugin.xml
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll File not found
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKCU\..\Toolbar\WebBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\Huawei Modems\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [LogitechCommunicationsManager] C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\QuickCam\Quickcam.exe ()
O4 - HKLM..\Run: [ Malwarebytes Anti-Malware  (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Ocs_SM] C:\Users\User\AppData\Roaming\OCS\SM\SearchAnonymizer.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.)
O4 - HKCU..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKCU..\Run: [msnmsgr] C:\Program Files\MSN Messenger\MsnMsgr.Exe File not found
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [ynrbbqgv] C:\Users\User\AppData\Local\xjlrvmktc\bfissnxshdw.exe ()
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Program Files\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\PartyPoker\RunApp.exe File not found
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\PartyPoker\RunApp.exe File not found
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: btopenzone.com ([www] https in Trusted sites)
O15 - HKCU\..Trusted Domains: moove.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: t-mobile.net ([hotspot] https in Trusted sites)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} hxxp://static.pe.schuelervz.net/photouploader/ImageUploader5.cab?nocache=1222096874 (Image Uploader Control)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} hxxp://static.pe.schuelervz.net/photouploader/ImageUploader5.cab?nocache=1211561436 (Image Uploader Control)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\t-mobile - No CLSID value found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\User\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.12.06 02:01:37 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010.08.15 14:22:46 | 000,000,391 | ---- | M] () - F:\autorun.inf -- [ FAT ]
O33 - MountPoints2\{09875f77-7eef-11de-9aca-0016d466085a}\Shell\AutoRun\command - "" = F:\SoftwareManual.exe -- [2010.06.02 23:47:54 | 000,176,775 | RHS- | M] ()
O33 - MountPoints2\{09875f77-7eef-11de-9aca-0016d466085a}\Shell\explore\command - "" = F:\SoftwareManual.exe -- [2010.06.02 23:47:54 | 000,176,775 | RHS- | M] ()
O33 - MountPoints2\{09875f77-7eef-11de-9aca-0016d466085a}\Shell\open\command - "" = F:\SoftwareManual.exe -- [2010.06.02 23:47:54 | 000,176,775 | RHS- | M] ()
O33 - MountPoints2\{3f22fbc0-07b8-11dc-9bd3-0016d466085a}\Shell\AutoRun\command - "" = F:\SoftwareManual.exe -- [2010.06.02 23:47:54 | 000,176,775 | RHS- | M] ()
O33 - MountPoints2\{3f22fbc0-07b8-11dc-9bd3-0016d466085a}\Shell\explore\command - "" = F:\ -- File not found
O33 - MountPoints2\{3f22fbc0-07b8-11dc-9bd3-0016d466085a}\Shell\open\command - "" = F:\SoftwareManual.exe -- [2010.06.02 23:47:54 | 000,176,775 | RHS- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.08.15 14:44:09 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
[2010.08.15 13:07:27 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Malwarebytes
[2010.08.15 13:07:12 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.08.15 13:07:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.08.15 13:07:10 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.08.15 13:07:10 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.08.15 13:00:34 | 006,153,648 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\User\Desktop\mbam-setup.exe
[2010.08.12 18:07:48 | 000,000,000 | -HSD | C] -- C:\Windows\System32\%APPDATA%
[2010.08.12 18:06:04 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\xjlrvmktc
[2010.08.12 18:05:39 | 000,000,000 | -HSD | C] -- C:\Users\User\AppData\Roaming\lowsec
[2010.08.10 21:21:55 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2010.08.10 21:21:55 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2010.08.10 21:21:55 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2010.08.10 21:21:55 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2010.08.10 21:21:55 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010.08.10 21:21:55 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010.08.10 21:21:55 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2010.08.10 21:21:55 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2010.08.10 21:21:55 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2010.08.10 21:21:55 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2010.08.10 21:21:55 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2010.08.10 21:21:55 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2010.08.10 21:21:55 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2010.08.10 21:21:55 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2010.08.10 21:21:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2010.08.10 21:20:10 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2010.08.10 21:20:09 | 002,037,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2010.08.10 21:20:06 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2010.08.10 21:20:03 | 003,600,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2010.08.10 21:20:02 | 003,548,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2010.08.08 14:01:15 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\musik-oma
[2010.08.07 11:13:00 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\PhotoScape
[2010.08.04 20:10:38 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2010.08.04 19:52:35 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010.08.01 22:59:28 | 000,000,000 | ---D | C] -- C:\LogiShrd
[2010.08.01 22:59:28 | 000,000,000 | ---D | C] -- \LogiShrd
[2010.07.21 00:39:23 | 000,000,000 | RHSD | C] -- C:\RECYCLER
[2010.07.21 00:39:23 | 000,000,000 | RHSD | C] -- \RECYCLER
[2006.12.06 02:03:34 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\Interop.Shell32.dll
 
========== Files - Modified Within 30 Days ==========
 
[2010.08.15 14:49:45 | 000,783,872 | ---- | M] () -- C:\Windows\System32\drivers\yhppk.sys
[2010.08.15 14:45:46 | 002,883,584 | -HS- | M] () -- C:\Users\User\ntuser.dat
[2010.08.15 14:44:16 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
[2010.08.15 14:31:40 | 001,472,290 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010.08.15 14:31:40 | 000,628,198 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.08.15 14:31:40 | 000,603,714 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.08.15 14:31:40 | 000,129,708 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.08.15 14:31:40 | 000,107,150 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.08.15 14:27:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.08.15 14:23:57 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.08.15 14:23:57 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.08.15 14:23:50 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.08.15 14:23:42 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.08.15 14:22:45 | 000,524,288 | -HS- | M] () -- C:\Users\User\ntuser.dat{a56621ca-c39f-11de-8e79-0016d466085a}.TMContainer00000000000000000001.regtrans-ms
[2010.08.15 14:22:45 | 000,065,536 | -HS- | M] () -- C:\Users\User\ntuser.dat{a56621ca-c39f-11de-8e79-0016d466085a}.TM.blf
[2010.08.15 13:07:14 | 000,000,782 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.08.15 13:00:36 | 006,153,648 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\User\Desktop\mbam-setup.exe
[2010.08.15 12:58:42 | 000,002,853 | ---- | M] () -- C:\Users\User\AppData\Local\azodemad.dll
[2010.08.15 12:38:40 | 000,002,853 | ---- | M] () -- C:\Users\User\AppData\Local\isajofoy.dll
[2010.08.15 11:57:44 | 000,002,853 | ---- | M] () -- C:\Users\User\AppData\Local\adatugapojuy.dll
[2010.08.15 11:22:29 | 000,002,853 | ---- | M] () -- C:\Users\User\AppData\Local\emuqajac.dll
[2010.08.15 10:57:07 | 000,001,356 | ---- | M] () -- C:\Users\User\AppData\Local\d3d9caps.dat
[2010.08.12 18:32:05 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.08.10 21:44:18 | 000,276,272 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010.08.10 21:30:36 | 000,000,118 | ---- | M] () -- C:\Windows\System32\MRT.INI
[2010.08.08 22:00:53 | 000,041,984 | ---- | M] () -- C:\Users\User\Documents\Es war spät am Abend als wir endlich in dem kleinen bescheidenen Dorf Girlan in Südtirol ankamen.doc
[2010.07.26 01:05:02 | 000,000,211 | --S- | M] () -- C:\Users\User\AppData\Local\4149341980.dat
[2010.07.20 01:02:15 | 000,079,360 | ---- | M] () -- C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== Files Created - No Company Name ==========
 
[2010.08.15 13:07:14 | 000,000,782 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.08.15 12:58:41 | 000,002,853 | ---- | C] () -- C:\Users\User\AppData\Local\azodemad.dll
[2010.08.15 12:38:40 | 000,002,853 | ---- | C] () -- C:\Users\User\AppData\Local\isajofoy.dll
[2010.08.15 11:57:44 | 000,002,853 | ---- | C] () -- C:\Users\User\AppData\Local\adatugapojuy.dll
[2010.08.15 11:22:29 | 000,002,853 | ---- | C] () -- C:\Users\User\AppData\Local\emuqajac.dll
[2010.08.12 18:07:44 | 000,783,872 | ---- | C] () -- C:\Windows\System32\drivers\yhppk.sys
[2010.08.10 21:30:36 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010.08.08 19:48:35 | 000,041,984 | ---- | C] () -- C:\Users\User\Documents\Es war spät am Abend als wir endlich in dem kleinen bescheidenen Dorf Girlan in Südtirol ankamen.doc
[2010.07.26 01:04:00 | 000,000,211 | --S- | C] () -- C:\Users\User\AppData\Local\4149341980.dat
[2010.07.26 01:04:00 | 000,000,000 | R--- | C] () -- C:\Users\User\AppData\Roaming\eIg6L.txt
[2009.12.24 16:04:32 | 000,066,482 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini
[2009.11.16 09:08:00 | 000,197,120 | ---- | C] () -- C:\Windows\patchw32.dll
[2009.08.03 15:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009.06.20 10:36:54 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.05.07 21:38:58 | 000,053,248 | ---- | C] () -- C:\Windows\System32\mgxasio2.dll
[2009.05.07 21:36:14 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2009.05.07 21:35:37 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2009.01.20 11:19:15 | 000,016,395 | ---- | C] () -- C:\Windows\System32\msdx92.dll
[2008.12.01 13:51:50 | 000,034,308 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2008.07.28 17:30:12 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2008.07.26 09:25:02 | 000,025,624 | ---- | C] () -- C:\Windows\System32\drivers\LVPr2Mon.sys
[2008.07.14 13:25:40 | 000,091,072 | ---- | C] () -- C:\Windows\System32\RoseCo2.dll
[2007.10.22 08:53:12 | 000,466,944 | ---- | C] () -- C:\Windows\System32\RemoveDevice.dll
[2007.10.22 08:53:12 | 000,466,944 | ---- | C] () -- C:\Windows\RemoveDevice.dll
[2007.05.22 21:17:54 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2007.05.21 15:35:24 | 000,000,057 | ---- | C] () -- C:\Windows\init.ini
[2007.05.16 01:53:10 | 000,000,092 | ---- | C] () -- C:\Windows\CLEANUP.INI
[2007.05.15 18:21:06 | 000,069,632 | ---- | C] () -- C:\Windows\System32\drivers\int15.sys
[2007.05.15 18:21:06 | 000,015,656 | ---- | C] () -- C:\Windows\System32\drivers\int15_64.sys
[2007.05.15 18:20:08 | 000,065,536 | ---- | C] () -- C:\Windows\System32\NATTraversal.dll
[2007.05.15 18:11:34 | 000,000,037 | ---- | C] () -- C:\Windows\Acer.ini
[2006.12.06 10:54:58 | 000,001,024 | RH-- | C] () -- C:\Windows\System32\NTIBUN4.dll
[2006.12.06 09:11:58 | 000,000,103 | ---- | C] () -- C:\Windows\Alaunch.ini
[2006.12.06 09:11:46 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2006.12.06 09:11:26 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006.12.06 02:12:22 | 000,198,144 | ---- | C] () -- C:\Windows\System32\_psisdecd.dll
[2006.12.06 02:03:36 | 000,331,776 | ---- | C] () -- C:\Windows\System32\ScrollBarLib.dll
[2006.12.06 02:01:58 | 000,013,952 | ---- | C] () -- C:\Windows\System32\drivers\UBHelper.sys
[2006.12.06 01:58:29 | 000,356,352 | ---- | C] () -- C:\Windows\EMCRI.dll
[2006.11.16 13:20:38 | 000,266,240 | ---- | C] () -- C:\Windows\System32\NotesExtmngr.dll
[2006.11.16 13:20:20 | 000,200,704 | ---- | C] () -- C:\Windows\System32\NotesActnMenu.dll
[2006.11.16 13:20:10 | 000,086,016 | ---- | C] () -- C:\Windows\System32\MSNSpook.dll
[2006.11.16 13:19:10 | 000,037,376 | ---- | C] () -- C:\Windows\System32\MSNChatHook.dll
[2006.11.16 13:19:04 | 000,123,904 | ---- | C] () -- C:\Windows\System32\BatchCrypto.dll
[2006.11.16 13:18:58 | 000,073,728 | ---- | C] () -- C:\Windows\System32\APISlice.dll
[2006.11.16 13:18:50 | 000,063,488 | ---- | C] () -- C:\Windows\System32\ShowErrMsg.dll
[2006.11.16 13:18:06 | 000,022,016 | ---- | C] () -- C:\Windows\System32\MailFormat_U.dll
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2001.12.26 16:12:30 | 000,065,536 | ---- | C] () -- C:\Windows\System32\multiplex_vcd.dll
[2001.09.03 23:46:38 | 000,110,592 | ---- | C] () -- C:\Windows\System32\Hmpg12.dll
[2001.07.30 16:33:56 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC.dll
[2001.07.23 22:04:36 | 000,118,784 | ---- | C] () -- C:\Windows\System32\HMPV2_ENC_MMX.dll
< End of report >
         
--- --- ---


und dann noch der zweite

Log Extras:

OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 15.08.2010 14:47:32 - Run 1
OTL by OldTimer - Version 3.2.9.1     Folder = C:\Users\User\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18943)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
893,00 Mb Total Physical Memory | 504,00 Mb Available Physical Memory | 56,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 52,14 Gb Total Space | 10,36 Gb Free Space | 19,88% Space Free | Partition Type: NTFS
Drive D: | 51,84 Gb Total Space | 49,51 Gb Free Space | 95,50% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 95,92 Mb Total Space | 58,74 Mb Free Space | 61,23% Space Free | Partition Type: FAT
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: USER-PC
Current User Name: User
Logged in as Administrator.
 
Current Boot Mode: SafeMode
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- Reg Error: Key error. File not found
.html [@ = FirefoxHTML] -- D:\Handy W810i\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office10\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 0
"InternetSettingsDisableNotify" = 0
"AutoUpdateDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02C1A005-AAB9-4E3D-805D-2FE8980C4644}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{0CB60CE4-17C6-45B8-94E4-80801AC9956B}" = lport=3587 | protocol=6 | dir=in | svc=p2psvc | app=%systemroot%\system32\svchost.exe | 
"{11530858-BC9B-46FC-AB93-235C36736BC3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{18CE396A-AA44-4DEC-AAE8-C4B97623E3F1}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{1E93A1A6-B1A1-431E-B938-79363550D56D}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\netproj.exe | 
"{2597B8F4-0F8E-49A7-B9AF-9DEE2DA0C546}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{2767F353-608E-4F46-9B36-C3FFDAAC7BCC}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\netproj.exe | 
"{2E7D4EA3-3118-4E86-83D9-809A66A71DAB}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe | 
"{31E86C7C-DA51-4178-BAC3-9D5BF257F47D}" = lport=5722 | protocol=6 | dir=in | svc=dfsr | app=%systemroot%\system32\dfsr.exe | 
"{3658A206-FE68-4625-93A4-C17BAE55C926}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{3C3AC825-CCFC-4C09-B3B0-4A7BA49A15C7}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe | 
"{3D3B4A78-DF7D-4CED-B1A8-BF20632A8F8E}" = rport=3587 | protocol=6 | dir=out | svc=p2psvc | app=%systemroot%\system32\svchost.exe | 
"{3D84694F-F5A8-40C8-8787-1821753AFAE5}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{433C4897-9F29-493F-8D5D-C0B16F3A20D4}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe | 
"{43ACE2DC-A1EB-423A-BB80-5E400EED0671}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | 
"{48D65E28-6C6D-4E46-A50D-C245A043747A}" = rport=5357 | protocol=6 | dir=out | app=system | 
"{4AE1EB36-BFDD-4741-9D3F-9A64054A78F6}" = rport=5722 | protocol=6 | dir=out | svc=dfsr | app=%systemroot%\system32\dfsr.exe | 
"{4C772D59-4044-474F-BF9A-37535EA7D71F}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | 
"{503995DF-47FE-494E-AE46-1F605E83D2A2}" = lport=5358 | protocol=6 | dir=in | app=system | 
"{589E83E8-30E7-44A9-BFA7-A2DC91BF2DE0}" = rport=5722 | protocol=6 | dir=out | svc=dfsr | app=%systemroot%\system32\dfsr.exe | 
"{5C9EF325-9974-478F-9ED3-A6696C5C7FE5}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{78CFA978-F370-42C9-9CDF-7B9FF4993868}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\netproj.exe | 
"{8357220B-C9C0-4F64-A719-D48BE97FC9BE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{85007113-6B16-4BE7-BE1C-53A560F098D5}" = lport=5722 | protocol=6 | dir=in | svc=dfsr | app=%systemroot%\system32\dfsr.exe | 
"{871884CC-5B23-4D00-9296-B1ADE834649A}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{9299A9EA-7CC7-446A-897D-341F205E4EEF}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | 
"{9A3E4E1B-AB9D-4175-AB6F-74657CF96C95}" = lport=5357 | protocol=6 | dir=in | app=system | 
"{9CBDFA05-7559-419A-B3F5-DA74CE689D9A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{ABB8C9E1-D591-4BAF-AA8A-F94F30A81C32}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | 
"{B04B1DC4-FAB4-47CB-99C1-94BAB54E4431}" = rport=2869 | protocol=6 | dir=out | app=system | 
"{B2398453-59F4-40D8-B151-FCF70355DD5C}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe | 
"{BE48072F-B1F5-4500-B2DE-B5FEAF87A96B}" = rport=3587 | protocol=6 | dir=out | svc=p2psvc | app=%systemroot%\system32\svchost.exe | 
"{BE6C1039-825E-44A6-A5B9-9C3359EEF984}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{DD6B947C-6A0D-408F-B4A5-C0A203C1BB23}" = lport=3587 | protocol=6 | dir=in | svc=p2psvc | app=%systemroot%\system32\svchost.exe | 
"{EF52834E-37E0-44A1-B5CD-E8E1FE15DF5B}" = rport=5358 | protocol=6 | dir=out | app=system | 
"{F28B3BB7-A9C2-40C5-B242-F2A6C0EAA7D8}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{F2B5CC61-53E9-43A9-88E7-0E0E3856165B}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\netproj.exe | 
"{F37A50E8-203A-454F-97FF-08BE209114BD}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{063D8B9A-7D13-4BDA-A5A4-E93D636AFE73}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{079543CC-C9CD-4D67-9936-6517C37B447A}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 
"{216D1941-F04F-4732-9B62-ABC4961FC2DF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{2A4DA450-59AA-4FAA-9C65-2AD28E0E677C}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe | 
"{381FBB05-D109-470A-8541-CB750A70162E}" = protocol=17 | dir=in | app=c:\program files\icq7.0\aolload.exe | 
"{3DCE08E0-7637-4B1E-A4AF-D67E16662155}" = protocol=17 | dir=in | app=c:\program files\icq7.0\aolload.exe | 
"{412BE592-0473-4240-BCD7-A35DD426D80E}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe | 
"{4A042480-42DC-48B4-AD6E-00F9797553D3}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{4F3763A4-3DF3-4D0D-9A28-C0146A4DE2AF}" = protocol=6 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | 
"{5A48FEE6-7DFA-423B-821B-6572F7790948}" = protocol=6 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | 
"{5C19EC2F-8010-4457-97E4-DCE010A9759D}" = dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 
"{5C2A84FC-5594-4B2F-95FE-13A530F63BA8}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{6FA44D5B-FC6F-4E26-A39D-82AACF4C2F7E}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{740D02B0-4E04-42E7-8D89-394B073ED772}" = protocol=6 | dir=in | app=c:\program files\icq7.0\aolload.exe | 
"{768C1C06-796A-4C67-A1F3-D9C2F3951FC6}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe | 
"{77298F48-CCD0-45A5-AAEC-CE02EC835106}" = protocol=17 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | 
"{799BBDB0-F2F7-4C23-A937-EF33F26911DA}" = protocol=17 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | 
"{8084F342-9B06-49D8-BD33-51B2FA9CCCF9}" = protocol=6 | dir=in | app=%systemroot%\system32\netproj.exe | 
"{8A892C74-8DB9-4DD9-9F7F-CA1CB9EFC2D3}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{8F89C7A7-A248-4028-A374-AC1825C8B693}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe | 
"{923ED53D-37E9-4626-A50B-DA7A48D1EBE6}" = protocol=17 | dir=in | app=c:\program files\sony ericsson\sony ericsson media manager\mediamanager.exe | 
"{9954689B-2EC5-4940-B9B8-F2F2D804503B}" = protocol=6 | dir=in | app=c:\program files\icq7.0\icq.exe | 
"{9AA4D901-AE2C-4013-AA5F-4A2AA9F13C6D}" = protocol=6 | dir=out | app=%systemroot%\system32\netproj.exe | 
"{9F2CB88B-D012-4429-8171-3EE2378C1902}" = protocol=6 | dir=in | app=c:\program files\icq7.0\icq.exe | 
"{A0325167-64A8-486F-AC06-7A4564052DB4}" = protocol=17 | dir=in | app=c:\program files\icq7.0\icq.exe | 
"{A299E0E1-7EBB-43D3-B0F3-48CCFC186943}" = protocol=17 | dir=in | app=c:\program files\icq7.0\icq.exe | 
"{A7C457A7-E740-4C09-B878-DBB3387D481E}" = protocol=6 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | 
"{B034AD1E-776F-4B0D-8993-52CCC9D58E1C}" = protocol=6 | dir=in | app=c:\program files\icq7.0\aolload.exe | 
"{B352B1EC-5305-481D-BC9E-0DB07407975D}" = protocol=6 | dir=in | app=c:\program files\sony ericsson\sony ericsson media manager\mediamanager.exe | 
"{BC2D79DC-6B78-4063-8697-9B7A12EFFD04}" = protocol=17 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | 
"{BD9A4E84-E536-4187-A867-9161166C9CBE}" = protocol=17 | dir=in | app=c:\program files\icq7.0\aolload.exe | 
"{BF76B27B-A42E-48B1-BDCA-9303F052AAA9}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 | 
"{C1BF3BD8-0127-4850-BEFA-CFC7F3093D13}" = protocol=17 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | 
"{C5F6DC72-C429-4462-9E73-62E916A0B740}" = protocol=6 | dir=in | app=c:\program files\icq7.0\aolload.exe | 
"{C92D0143-F3FC-4129-B458-B52624F1EA86}" = protocol=17 | dir=in | app=c:\program files\icq7.0\icq.exe | 
"{E071C3D7-1FB5-44CF-B843-7B3750F630E7}" = dir=in | app=c:\program files\msn messenger\livecall.exe | 
"{E71B54A8-2669-418C-ADA4-CDBF67A5E33B}" = protocol=6 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | 
"{EDC73BB8-1F93-47BF-8784-EDDBA0F0BD9A}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe | 
"{EEC1CA74-38B1-4A51-A067-B00967D935D0}" = protocol=6 | dir=in | app=c:\program files\icq7.0\icq.exe | 
"TCP Query User{0C3EB00C-26EC-4F7D-963E-BF19EBE9EEC1}D:\warcraft iii\war3.exe" = protocol=6 | dir=in | app=d:\warcraft iii\war3.exe | 
"TCP Query User{23C2CABE-5BFC-4CB6-BF86-9CFF79BE7166}D:\world of warcraft\wow-1.12.0-dede-downloader.exe" = protocol=6 | dir=in | app=d:\world of warcraft\wow-1.12.0-dede-downloader.exe | 
"TCP Query User{26B320B1-811A-4707-8472-FFF06BBE4F8D}C:\program files\icqlite\icqlite.exe" = protocol=6 | dir=in | app=c:\program files\icqlite\icqlite.exe | 
"TCP Query User{270BD754-E9E9-4F20-96C2-3B7BF54F7EE2}D:\hauptordner icq 6\icq6\icq.exe" = protocol=6 | dir=in | app=d:\hauptordner icq 6\icq6\icq.exe | 
"TCP Query User{3A9B7F55-AEF4-45AF-BB16-27F73A7AC643}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | 
"TCP Query User{3C64F2C0-2046-4421-96B9-B931F86F58A4}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"TCP Query User{3E589AED-71D4-4D3E-84CA-636A2289EBF8}D:\hauptordner icq 6\icq6\icq.exe" = protocol=6 | dir=in | app=d:\hauptordner icq 6\icq6\icq.exe | 
"TCP Query User{43AE5F19-CF20-4605-BAFA-AA11A855602D}C:\program files\zattoo\zattood.exe" = protocol=6 | dir=in | app=c:\program files\zattoo\zattood.exe | 
"TCP Query User{456198EB-C4BA-4E15-B35E-2D36D4E718D5}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{55DC67C0-197B-4555-A597-A5D3FDC81C02}C:\program files\t-online\t-online_software_6\internet-telefon\phone.exe" = protocol=6 | dir=in | app=c:\program files\t-online\t-online_software_6\internet-telefon\phone.exe | 
"TCP Query User{65AB8EF6-92B4-41E5-91AA-5F7DA4C55357}D:\hauptordner icq 6\icq6.5\icq.exe" = protocol=6 | dir=in | app=d:\hauptordner icq 6\icq6.5\icq.exe | 
"TCP Query User{6952B066-1F06-4081-A65A-3557D7E0A1DF}C:\users\user\appdata\roaming\imvuclient\1vivoxvoice.exe" = protocol=6 | dir=in | app=c:\users\user\appdata\roaming\imvuclient\1vivoxvoice.exe | 
"TCP Query User{724A9428-20DF-49A7-B003-7777239F444E}D:\hauptordner icq 6\icq6.5\icq.exe" = protocol=6 | dir=in | app=d:\hauptordner icq 6\icq6.5\icq.exe | 
"TCP Query User{7C5FDB3C-82B4-4EE9-95B7-9C12FA1182D0}D:\haushaltsbuch-speicher\_adv.exe" = protocol=6 | dir=in | app=d:\haushaltsbuch-speicher\_adv.exe | 
"TCP Query User{7EA2B172-36E5-4768-8A03-17FAC29279D7}D:\warcraft iii\war3.exe" = protocol=6 | dir=in | app=d:\warcraft iii\war3.exe | 
"TCP Query User{876CAFA0-4115-436B-BFF9-4C4A7FCA652C}C:\program files\joost\xulrunner\tvprunner.exe" = protocol=6 | dir=in | app=c:\program files\joost\xulrunner\tvprunner.exe | 
"TCP Query User{A978A757-8961-4C4D-AAA7-4FAA56C01C83}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{B5E8D014-DDF3-4C23-AFC8-2926895BB007}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"TCP Query User{C62119A1-7342-4397-B11F-0998A1D96F3B}C:\program files\zattoo\zattoo.exe" = protocol=6 | dir=in | app=c:\program files\zattoo\zattoo.exe | 
"TCP Query User{DBD22E8A-5C27-487F-BED8-150371E912FC}C:\windows\system32\dpnsvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dpnsvr.exe | 
"TCP Query User{F2ED1C43-5893-431E-AEC2-8EAB7CA122A5}C:\program files\paradox interactive\hearts of iron 2\hoi2.exe" = protocol=6 | dir=in | app=c:\program files\paradox interactive\hearts of iron 2\hoi2.exe | 
"UDP Query User{08B55CBE-A464-4CB8-ACC6-37960F94F8AE}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{2BD3B381-21E8-4B8D-9EA9-5C36CE2D4041}D:\warcraft iii\war3.exe" = protocol=17 | dir=in | app=d:\warcraft iii\war3.exe | 
"UDP Query User{33D1C41F-9759-4F6E-8D32-B304670C3A37}D:\hauptordner icq 6\icq6.5\icq.exe" = protocol=17 | dir=in | app=d:\hauptordner icq 6\icq6.5\icq.exe | 
"UDP Query User{34788E95-6BA3-4E68-A77C-EBE1A4CB0DBE}C:\users\user\appdata\roaming\imvuclient\1vivoxvoice.exe" = protocol=17 | dir=in | app=c:\users\user\appdata\roaming\imvuclient\1vivoxvoice.exe | 
"UDP Query User{37B8460B-8A0D-4CC3-9B3C-39BB6110A585}C:\program files\zattoo\zattoo.exe" = protocol=17 | dir=in | app=c:\program files\zattoo\zattoo.exe | 
"UDP Query User{45A685D2-5051-46B6-A011-5C538E562644}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{464251CC-ABD1-4693-8450-5FE5EECE52CA}C:\program files\t-online\t-online_software_6\internet-telefon\phone.exe" = protocol=17 | dir=in | app=c:\program files\t-online\t-online_software_6\internet-telefon\phone.exe | 
"UDP Query User{51F4A122-A668-4937-BE8E-F7D92FA360B5}D:\hauptordner icq 6\icq6.5\icq.exe" = protocol=17 | dir=in | app=d:\hauptordner icq 6\icq6.5\icq.exe | 
"UDP Query User{537F6239-B9A4-4347-BFA3-3B38588DF39D}D:\haushaltsbuch-speicher\_adv.exe" = protocol=17 | dir=in | app=d:\haushaltsbuch-speicher\_adv.exe | 
"UDP Query User{5518203E-BD73-418A-AA2B-573370BF3B3A}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
"UDP Query User{58FC73E8-2AA9-4C46-AEE3-9065FDDC9F81}C:\program files\zattoo\zattood.exe" = protocol=17 | dir=in | app=c:\program files\zattoo\zattood.exe | 
"UDP Query User{5F330336-B9F8-40BE-90A6-05D9C2729658}D:\hauptordner icq 6\icq6\icq.exe" = protocol=17 | dir=in | app=d:\hauptordner icq 6\icq6\icq.exe | 
"UDP Query User{797DB354-9AEC-42CC-9A94-1389FC6737C4}D:\hauptordner icq 6\icq6\icq.exe" = protocol=17 | dir=in | app=d:\hauptordner icq 6\icq6\icq.exe | 
"UDP Query User{9995ED87-0326-40F7-A3E7-681120196B7A}D:\warcraft iii\war3.exe" = protocol=17 | dir=in | app=d:\warcraft iii\war3.exe | 
"UDP Query User{CAFC431E-81CC-4FDE-A0DC-D735C366688D}C:\program files\paradox interactive\hearts of iron 2\hoi2.exe" = protocol=17 | dir=in | app=c:\program files\paradox interactive\hearts of iron 2\hoi2.exe | 
"UDP Query User{CBCBBA6C-9B77-45DD-A35A-4D4576CAF4EE}C:\program files\joost\xulrunner\tvprunner.exe" = protocol=17 | dir=in | app=c:\program files\joost\xulrunner\tvprunner.exe | 
"UDP Query User{D0F8F92B-E0DD-477E-98C2-64899A0848E6}C:\program files\icqlite\icqlite.exe" = protocol=17 | dir=in | app=c:\program files\icqlite\icqlite.exe | 
"UDP Query User{D8C5E959-AF2E-4A07-AB40-3E1AEDB10105}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | 
"UDP Query User{DA9E5DE3-43CF-485C-BA52-D14CBF7172FE}D:\world of warcraft\wow-1.12.0-dede-downloader.exe" = protocol=17 | dir=in | app=d:\world of warcraft\wow-1.12.0-dede-downloader.exe | 
"UDP Query User{DBFAB41C-B47B-4EBC-A890-330AFBD7CBED}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe | 
"UDP Query User{E422A87F-4883-457B-BD37-B183291AE982}C:\windows\system32\dpnsvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dpnsvr.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0093DFA0-5062-CA37-A1F9-9DCBE3E40045}" = ccc-core-static
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0622BD28-3CD8-2D6F-0233-F705A02C0564}" = ccc-utility
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID-Anmelde-Assistent
"{11316260-6666-467B-AC34-183FCB5D4335}" = Acer Mobility Center Plug-In
"{116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}" = Acer eLock Management
"{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker
"{1A655D51-1423-48A3-B748-8F5A0BE294C8}" = Microsoft Visual J# .NET Redistributable Package 1.1
"{1CA2F1E3-8C8B-387B-5ECC-6FC494D1AC49}" = Catalyst Control Center Graphics Previews Common
"{1F8AE5F3-DCF7-1911-427B-E23AE9385FF8}" = ATI Catalyst Install Manager
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 20
"{295C31E5-3F91-498E-9623-DA24D2FA2B6A}" = T-Online WLAN-Access Finder
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{31DABA20-10A1-4746-9D9F-57955B8DFF66}" = Free Games Offer, Desktop Shortcut
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{37FD2F04-EC91-41AE-B5AB-AFF904BF20EE}" = Mobile Broadband Drivers
"{3AB2F8DF-F905-44F9-8003-C81FEE95BC2B}" = Communication Center
"{3AF8FCCD-F51A-4014-9002-F195E1CBC876}" = Logitech QuickCam
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F02AAF6-3E2A-F09D-2E09-A94CFBFA16A3}" = Catalyst Control Center Graphics Previews Vista
"{44AFDB86-1509-4CDC-9B2E-1C73B2DEE5F0}" = Mobile Broadband Drivers
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{53735ECE-E461-4FD0-B742-23A352436D3A}" = Logitech Updater
"{58E5844B-7CE2-413D-83D1-99294BF6C74F}" = Acer ePower Management
"{5B09BD67-4C99-46A1-8161-B7208CE18121}" = QuickTime
"{647CB822-0C48-4487-5780-8757D9B2BBAC}" = Catalyst Control Center Graphics Light
"{67ADE9AF-5CD9-4089-8825-55DE4B366799}" = NTI Backup NOW! 4.7
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver
"{7E910FDA-CBBE-4451-8728-235E6A4DE162}" = Sony Ericsson Media Manager 1.1
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{907B4640-266B-4A21-92FB-CD1A86CD0F63}" = RollerCoaster Tycoon 3
"{94389919-B0AA-4882-9BE8-9F0B004ECA35}" = Acer Tour
"{98786147-80E3-41A5-A80C-1F3C028558CF}" = Hearts of Iron 2
"{9B5EB3A9-4F86-F06B-5B7A-5F287C5C3766}" = Catalyst Control Center Graphics Full Existing
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB6097D9-D722-4987-BD9E-A076E2848EE2}" = Acer Empowering Technology
"{AC76BA86-7AD7-1031-7B44-A90000000001}" = Adobe Reader 9 - Deutsch
"{AEEAE013-92F1-4515-B278-139F1A692A35}" = Acer eDataSecurity Management
"{B1275E23-717A-4D52-997A-1AD1E24BC7F3}" = T-Online 6.0
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{BB3B4056-4539-485E-A996-3B52480AA4B7}" = GT HSDPA driver installer
"{BF839132-BD43-4056-ACBF-4377F4A88E2A}" = Acer ePresentation Management
"{BF962E1B-D17A-4713-A100-6531A132D83D}_is1" = Foto-Mosaik-Edda 5.5.0
"{C06554A1-2C1E-4D20-B613-EE62C79927CC}" = Acer eNet Management
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC4E7920-E04D-1A04-51B8-14FAB63DD6B7}" = Skins
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE65A9A0-9686-45C6-9098-3C9543A412F0}" = Acer eSettings Management
"{D1B598DE-0264-4377-9328-174171CB715F}" = Catalyst Control Center Core Implementation
"{E1180142-3B31-4DCC-9D27-7AC2D37662BF}" = LightScribe  1.4.124.1
"{E728E952-DD4F-4BCD-A5C8-40FBFEFF91FE}" = OpenOffice.org Installer 1.0
"{E75450F4-D97C-41BA-926E-F03ABC331A9F}" = Catalyst Control Center Graphics Full New
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}" = Update Manager
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F7B0939E-58DF-11DF-B3A6-005056806466}" = Google Earth
"7-Zip" = 7-Zip 4.32
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"G-Force" = G-Force
"Hamachi" = Hamachi 1.0.3.0
"Huawei Modems" = Huawei modem
"ICQToolbar" = ICQ Toolbar
"lvdrivers_11.80" = Logitech QuickCam-Treiberpaket
"MAGIX Music Maker 15 Premium D" = MAGIX Music Maker 15 Premium 15.0.0.19 (D)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox (3.6)" = Mozilla Firefox (3.6)
"Novatel_V20025Installer" = Novatel driver package V2.00.25
"Novatel_V20051Installer" = Novatel driver package V2.00.51
"Nvu_is1" = Nvu 1.0
"OptionPCCardInstaller" = Option Fusion Card driver, Ricola v 2.0.0.0
"OptionPCCardInstaller_tmcc" = Option PC Cards driver package
"OptionPluss_PCCardInstaller" = Option Fusion+ Card driver, Nozomi v 2.1.1.112
"PhotoScape" = PhotoScape
"PsuedoLiveUpdate" = LiveUpdate (Symantec Corporation)
"SearchAnonymizer" = SearchAnonymizer
"ShockwaveFlash" = Macromedia Flash Player 8
"Sierra Wireless AirCards" = Sierra Wireless AirCards
"ST6UNST #1" = BEWERBUNGSMASTER
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"VLC media player" = VLC media player 0.9.6
"Warcraft III" = Warcraft III
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 15.08.2008 10:47:52 | Computer Name = User-PC | Source = Perflib | ID = 1005
Description = 
 
Error - 15.08.2008 10:47:52 | Computer Name = User-PC | Source = Perflib | ID = 1018
Description = 
 
Error - 15.08.2008 10:47:53 | Computer Name = User-PC | Source = Perflib | ID = 1008
Description = 
 
Error - 15.08.2008 14:44:07 | Computer Name = User-PC | Source = EventSystem | ID = 4621
Description = 
 
Error - 20.08.2008 03:57:59 | Computer Name = User-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 20.08.2008 04:00:27 | Computer Name = User-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 25.08.2008 11:01:24 | Computer Name = User-PC | Source = Application Hang | ID = 1002
Description = Programm SndVol.exe, Version 6.0.6001.18000 arbeitet nicht mehr mit
 Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: a34  Anfangszeit: 01c90512b7b4e91d  Zeitpunkt
 der Beendigung: 36
 
Error - 29.08.2008 08:58:16 | Computer Name = User-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 29.08.2008 10:52:04 | Computer Name = User-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 29.08.2008 10:52:15 | Computer Name = User-PC | Source = RasClient | ID = 20227
Description = 
 
[ System Events ]
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 15.08.2010 08:28:42 | Computer Name = User-PC | Source = Service Control Manager | ID = 7001
Description = 
 
 
< End of report >
         
--- --- ---


hoffe ihr könnt mir helfen :'(
Miniaturansicht angehängter Grafiken
selbe problem mit Windows Security Alert - Antivirus Software Alert-screenshot.jpg   selbe problem mit Windows Security Alert - Antivirus Software Alert-screenshot2.jpg  

Alt 15.08.2010, 20:52   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
selbe problem mit Windows Security Alert - Antivirus Software Alert - Standard

selbe problem mit Windows Security Alert - Antivirus Software Alert



Zitat:
Datenbank Version: 4052
Du hast Malwarebytes vorher nicht aktualisiert. Bitte updaten und einen Vollscan machen.
__________________

__________________

Alt 15.08.2010, 21:59   #3
lavalampe92
 
selbe problem mit Windows Security Alert - Antivirus Software Alert - Standard

selbe problem mit Windows Security Alert - Antivirus Software Alert



ich hab mir aber die aktuellste version runtergeladen. zwar von einem anderen computer und hab sie dann per stick auf den desktop von meinem laptop gezogen.
ich kann ja keine updates machen weil ich keine internetverbindung hin kriege :-(
was nun ?
__________________

Alt 15.08.2010, 22:31   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
selbe problem mit Windows Security Alert - Antivirus Software Alert - Standard

selbe problem mit Windows Security Alert - Antivirus Software Alert



Lad das Setup für ein manuelles Update => Manual database update - Malwarebytes Forum
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Antwort

Themen zu selbe problem mit Windows Security Alert - Antivirus Software Alert
7-zip, alert, anti virus trojaner, antivirus, antivirus software alert, brauche, components, corp./icp, dringend, excel.exe, firefox.exe, frage, hijack.shell, hoffe, home premium, hotspot, infizierte dateien, install.exe, intrusion prevention, jusched.exe, keine verbindung, laufzeit, launch, leute, location, malwarebytes, neu, nvstor.sys, oldtimer, otl.exe, poste, problem, programdata, runtergeladen, saver, searchplugins, security, security alert, sierra, software, trojan.agent.u, verbindung, versuche, vlc media player, weiterhelfen, windows, windows security, windows security alert, worm.autorun.b



Ähnliche Themen: selbe problem mit Windows Security Alert - Antivirus Software Alert


  1. AntiVirus Software Alert / Windows Security Alert
    Plagegeister aller Art und deren Bekämpfung - 15.01.2011 (19)
  2. Windows Security Alert / AV Security Suite / Antivirus Software Alert
    Plagegeister aller Art und deren Bekämpfung - 08.01.2011 (1)
  3. Windows antivirus software alert
    Log-Analyse und Auswertung - 30.12.2010 (15)
  4. Antivirus software alert/windows sacurity alert
    Plagegeister aller Art und deren Bekämpfung - 14.12.2010 (3)
  5. Meldung Windows Security Alert / AV Security Suite / Antivirus Software Alert
    Plagegeister aller Art und deren Bekämpfung - 17.09.2010 (26)
  6. Windows Security Alert / AV Security Suite / Antivirus Software Alert / gefakter AV lähmt PC
    Plagegeister aller Art und deren Bekämpfung - 09.09.2010 (3)
  7. antivirus windows security alert hats sich nstalliert
    Plagegeister aller Art und deren Bekämpfung - 09.09.2010 (1)
  8. Mcafee antivirus software alert
    Plagegeister aller Art und deren Bekämpfung - 31.08.2010 (5)
  9. Antivirus Software Alert -Virus
    Plagegeister aller Art und deren Bekämpfung - 16.08.2010 (11)
  10. Windows Security Alert / AV Security Suite / Antivirus Software Alert
    Plagegeister aller Art und deren Bekämpfung - 26.07.2010 (21)
  11. nochmal Antivirus Software Alert
    Plagegeister aller Art und deren Bekämpfung - 24.07.2010 (4)
  12. Windows Security Alert / AV Security Suite / Antivirus Software Alert// Ohne Internet
    Plagegeister aller Art und deren Bekämpfung - 21.07.2010 (1)
  13. Virus - Security Warning/Antivirus Software Alert
    Plagegeister aller Art und deren Bekämpfung - 20.07.2010 (3)
  14. Fake Windows Security Alert & Antivirus // Entfernt, aber ist wirklich alles weg?
    Plagegeister aller Art und deren Bekämpfung - 07.05.2010 (5)
  15. Windows Security Alert Problem
    Log-Analyse und Auswertung - 20.01.2010 (18)
  16. system alert, windows security alert und fremde antiviren programme
    Plagegeister aller Art und deren Bekämpfung - 01.01.2010 (51)
  17. windows security alert - Unbekantes Problem
    Log-Analyse und Auswertung - 02.08.2008 (4)

Zum Thema selbe problem mit Windows Security Alert - Antivirus Software Alert - also leute ich bin neu hier brauche aber dringend eure hilfe und hoffe ihr könnt mich irgendwie weiterbringen :-( also mein Problem ist das gleiche wie bei Taube ( http://www.trojaner-board.de/88401-w...-internet.html - selbe problem mit Windows Security Alert - Antivirus Software Alert...
Archiv
Du betrachtest: selbe problem mit Windows Security Alert - Antivirus Software Alert auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.