Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: system tool entfernen

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 21.02.2011, 11:49   #1
hubertg
 
system tool entfernen - Standard

system tool entfernen



hallo hab ein problem mit meinem pc!! da is alles blau mit lauter kleinen ziffern(1er und 0er) hab das mit der otl schon probiert, aber ich komm mit f8 nicht zum erforderlichen programm!wie kann ich noch das sogenannte systemtool löschen, und verhindern, daß es wiederkommt! AVG ist installiert!!

Alt 21.02.2011, 11:54   #2
markusg
/// Malware-holic
 
system tool entfernen - Standard

system tool entfernen



versuch mal eine der anderen f-tasten um in den abgesicherten modus zu kommen, bzw ins auswahl menü.
__________________

__________________

Alt 21.02.2011, 12:10   #3
hubertg
 
system tool entfernen - Standard

system tool entfernen



bin jetzt im abgesicherten modus und hab die otl probiert aber da tut sich nichts!!
__________________

Alt 21.02.2011, 12:11   #4
markusg
/// Malware-holic
 
system tool entfernen - Standard

system tool entfernen



bist du im abgesichertem modus mit netzwerk oder ohne.
falls du im abgesicherten modus mit netzwerk bist, starte erneut neu und wähle dann nur abgesicherten modus, ohne netzwerk ist dieser und da könnte es funktionieren.
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 21.02.2011, 12:16   #5
hubertg
 
system tool entfernen - Standard

system tool entfernen



Zitat:
Zitat von markusg Beitrag anzeigen
bist du im abgesichertem modus mit netzwerk oder ohne.
falls du im abgesicherten modus mit netzwerk bist, starte erneut neu und wähle dann nur abgesicherten modus, ohne netzwerk ist dieser und da könnte es funktionieren.
Hab die beiden berichte jetzt erhalten!! OTL.Txt und Extras.Txt!! wie soll ich weiter vorgehen?


Alt 21.02.2011, 12:17   #6
markusg
/// Malware-holic
 
system tool entfernen - Standard

system tool entfernen



na da ich kein helsseher bin benötige ich die berichte.
also abspeichern und hier rein kopieren, bzw als datei(n) anhängen.
__________________
--> system tool entfernen

Alt 21.02.2011, 12:26   #7
hubertg
 
system tool entfernen - Standard

system tool entfernen



Zitat:
Zitat von markusg Beitrag anzeigen
na da ich kein helsseher bin benötige ich die berichte.
also abspeichern und hier rein kopieren, bzw als datei(n) anhängen.
Hab sie jetzt auf dem stick, nur weiss ich nicht wie ich sie hier reinkopiere!!

Alt 21.02.2011, 12:27   #8
markusg
/// Malware-holic
 
system tool entfernen - Standard

system tool entfernen



stick an sauberen pc anschließen.
erstes log öffnen.
rechtsklick, alles markieren.
rechtsklick, kopieren.
klicke jetzt auf antworten.
aktiviere das eingabefeld.
rechtsklick einfügen.
absenden.
genauso verfahren mit text2
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 21.02.2011, 12:33   #9
hubertg
 
system tool entfernen - Standard

system tool entfernen



OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 21.02.2011 13:04:08 - Run 1
OTL by OldTimer - Version 3.2.20.6     Folder = F:\
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 4,00 Gb Available Physical Memory | 88,00% Memory free
8,00 Gb Paging File | 8,00 Gb Available in Paging File | 94,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452,22 Gb Total Space | 369,75 Gb Free Space | 81,76% Space Free | Partition Type: NTFS
Drive D: | 13,24 Gb Total Space | 2,20 Gb Free Space | 16,62% Space Free | Partition Type: NTFS
Drive F: | 7,46 Gb Total Space | 7,46 Gb Free Space | 99,99% Space Free | Partition Type: FAT32
 
Computer Name: USER-PC | User Name: User | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~4\Office12\ONENOTE.EXE "%L" File not found
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~4\Office12\ONENOTE.EXE "%L"
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java(TM) 6 Update 14 (64-bit)
"{6C47240C-016E-03B5-D13E-AECAED09F2E3}" = ATI Catalyst Install Manager
"{7FD7F421-39B2-4CAC-BC41-7D83DDBAB329}" = HP 3D DriveGuard
"{88E60521-1E4E-4785-B9F1-1798A4BD0C30}" = HP MediaSmart SmartMenu
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{ADEB3402-CFBD-00E2-0EE6-F6A3F1AFACF0}" = ccc-utility64
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"FFE7D41DF3C645075BB149E21988B63996C34187" = ENE CIR Receiver Driver
"SynTPDeinstKey" = Synaptics Pointing Device Driver
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"{08DB3902-2CE0-474D-BCE3-0177766CE9F1}" = HP Support Assistant
"{09CC0D0E-061D-3C7B-3881-D2EB53A8AAFC}" = CCC Help Polish
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ 4.0
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron Flash Media Controller Driver
"{26606D8F-3133-DBE2-8AF5-AB28F300860A}" = CCC Help Chinese Standard
"{266D0EEA-E5A6-4A08-A0EE-5391D4EA44A7}" = Catalyst Control Center - Branding
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 24
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = HP MediaSmart Movie Themes
"{33C17B75-EA9C-0687-9CED-03D92637B042}" = CCC Help Hungarian
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons
"{37855057-DD23-4A5D-9A3E-96AB9797075C}_is1" = Power-Musicbox 6
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3FBDB7B8-7472-E895-2E5D-99D190B2D1B6}" = Catalyst Control Center InstallProxy
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = PowerRecover
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update
"{5271C0D4-24E4-4C3D-A782-C012033FD3CF}" = AMD USB Filter Driver
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{546937C5-0529-333E-0D5E-FE3C53108806}" = CCC Help Japanese
"{54CC7901-804D-4155-B353-21F0CC9112AB}" = HP Wireless Assistant
"{55C70B62-5EF1-D527-7CAB-E50D8B3B4990}" = Catalyst Control Center Graphics Full New
"{577ED77E-25D9-1A76-4EF0-773B9C173758}" = CCC Help Portuguese
"{5A166C0B-9557-4364-A057-F946D674E6AC}" = Windows Live Mail
"{5B295588-59C1-4386-9F85-BB4BEDCB0D22}" = HP Customer Experience Enhancements
"{5DB4EA68-A509-D408-585C-C9D045FADF72}" = Catalyst Control Center Graphics Previews Vista
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart Live TV
"{6D335F78-1F4F-7826-56DD-4F350EA6EADD}" = CCC Help Greek
"{6EF04EAE-0354-9919-E757-F1203E6F422B}" = CCC Help Italian
"{7028B245-30A2-BD8C-31B9-6008216FBDC2}" = CCC Help French
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{779D3256-84D0-936F-18F9-A154DC85B4B4}" = Catalyst Control Center Localization All
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX
"{7F4DA5B8-6884-47F2-AEBA-D9111E420C63}" = CCC Help Danish
"{7F9A8D27-A1B9-164F-FCB1-0B64C88629CF}" = CCC Help Norwegian
"{803263F7-8CAC-DC6D-3288-8128865A7472}" = CCC Help German
"{81821BF8-DA20-4F8C-AA87-F70A274828D4}" = Windows Live Writer
"{82EF29B1-9B60-4142-A155-0599216DD053}" = LightScribe System Software
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8CC47AA0-5774-61FC-6A59-7E1C936DB753}" = ccc-core-static
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91E04CA7-0B13-4F8C-AA4D-2A573AC96D19}" = Windows Live Essentials
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A28867B-109A-5BBF-85C0-FC1BAA98CA1C}" = CCC Help Russian
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A8BCC9E4-9036-3029-F2BC-AA73A62DA73D}" = CCC Help Turkish
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.1 MUI
"{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"{B51605BF-6326-4553-AE96-6D7F1813D5F5}" = HP User Guides 0154
"{B53E61D7-7C80-40DF-82D2-CF5390D6D20A}" = HP Advisor
"{B5C746E6-D961-445C-3768-5B6FAF6A1A31}" = CCC Help Spanish
"{C0769946-2CF1-9E8D-009B-5C413B3F01D1}" = CCC Help Czech
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{C4F7EEE5-3D99-8552-7483-B2F412838B2A}" = Catalyst Control Center Graphics Previews Common
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update
"{D4C41D27-A2D5-94C6-1D08-3D470A12EAF0}" = CCC Help Swedish
"{D9D6A848-1BFD-592B-5F9D-0BA8692FDF0B}" = CCC Help Finnish
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DCD91C2F-3A86-B328-59A0-5EED6190D983}" = Catalyst Control Center Graphics Full Existing
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}" = HP MediaSmart Internet TV
"{E5F5CAA5-84ED-DE41-40D0-8926FE7E5F4D}" = Catalyst Control Center Graphics Light
"{E6CE345D-BF83-1242-9E4D-3D60A5036D87}" = CCC Help English
"{EC155897-712F-5637-A5DA-6C7CE7CB5521}" = CCC Help Korean
"{F0580F64-44A1-C607-9364-887912B74F4D}" = CCC Help Thai
"{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL
"{F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}" = HP Setup
"{F3F9A4E5-CD9F-4657-CF99-5CE3F7729909}" = Catalyst Control Center Core Implementation
"{F5B1D41A-05B9-98E2-C350-E69D4A444CB4}" = CCC Help Chinese Traditional
"{FBB55C5E-2548-4511-A6F5-8CBCDE16484C}" = A1 Dashboard
"{FCF0F615-6E70-B949-028F-88D32C55C2BC}" = CCC Help Dutch
"8461-7759-5462-8226" = Vuze
"A1 Dashboard" = A1 Dashboard
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"AOL Toolbar" = AOL Toolbar 5.0
"AVG9Uninstall" = AVG Free 9.0
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"AVS4YOU Video Converter 7_is1" = AVS Video Converter 7
"conduitEngine" = Conduit Engine
"EasyBits Magic Desktop" = Magic Desktop
"ENTERPRISE" = Microsoft Office Enterprise 2007
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = HP MediaSmart Movie Themes
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart Live TV
"InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}" = HP MediaSmart Internet TV
"Raptr" = Raptr
"Ravensburger tiptoi" = Ravensburger tiptoi
"Vuze_Remote Toolbar" = Vuze Remote Toolbar
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 24.01.2011 08:16:40 | Computer Name = User-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 29.01.2011 04:18:01 | Computer Name = User-PC | Source = System Restore | ID = 8193
Description = 
 
Error - 29.01.2011 04:18:03 | Computer Name = User-PC | Source = VSS | ID = 12289
Description = 
 
Error - 29.01.2011 09:44:28 | Computer Name = User-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 30.01.2011 14:11:11 | Computer Name = User-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files
 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder
 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe
 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
 des "version"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 01.02.2011 05:43:02 | Computer Name = User-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WinRAR.exe, Version: 3.30.5.0, Zeitstempel:
 0x00000000  Name des fehlerhaften Moduls: UnAceV2.Dll, Version: 2.1.1.0, Zeitstempel:
 0x3c86a950  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0000cca0  ID des fehlerhaften Prozesses:
 0x1040  Startzeit der fehlerhaften Anwendung: 0x01cbc1f467ce9ec7  Pfad der fehlerhaften
 Anwendung: C:\Program Files (x86)\WinRAR\WinRAR.exe  Pfad des fehlerhaften Moduls:
 C:\Program Files (x86)\WinRAR\Formats\UnAceV2.Dll  Berichtskennung: a9104769-2de7-11e0-aeed-00269ec89415
 
Error - 01.02.2011 05:43:10 | Computer Name = User-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WinRAR.exe, Version: 3.30.5.0, Zeitstempel:
 0x00000000  Name des fehlerhaften Moduls: UnAceV2.Dll, Version: 2.1.1.0, Zeitstempel:
 0x3c86a950  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0000cca0  ID des fehlerhaften Prozesses:
 0x1040  Startzeit der fehlerhaften Anwendung: 0x01cbc1f467ce9ec7  Pfad der fehlerhaften
 Anwendung: C:\Program Files (x86)\WinRAR\WinRAR.exe  Pfad des fehlerhaften Moduls:
 C:\Program Files (x86)\WinRAR\Formats\UnAceV2.Dll  Berichtskennung: ad57bd66-2de7-11e0-aeed-00269ec89415
 
Error - 03.02.2011 04:05:44 | Computer Name = User-PC | Source = System Restore | ID = 8193
Description = 
 
Error - 03.02.2011 04:05:45 | Computer Name = User-PC | Source = VSS | ID = 12289
Description = 
 
Error - 03.02.2011 05:04:01 | Computer Name = User-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.16700,
 Zeitstempel: 0x4cd23213  Name des fehlerhaften Moduls: mshtml.dll, Version: 8.0.7600.16700,
 Zeitstempel: 0x4cd24781  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000c597b  ID des fehlerhaften
 Prozesses: 0x5f4  Startzeit der fehlerhaften Anwendung: 0x01cbc3795306899e  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\iexplore.exe  Pfad
 des fehlerhaften Moduls: C:\Windows\SysWOW64\mshtml.dll  Berichtskennung: 8a9327a9-2f74-11e0-aeed-00269ec89415
 
[ System Events ]
Error - 05.02.2011 04:52:52 | Computer Name = User-PC | Source = ACPI | ID = 327693
Description = : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen
 Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware
 hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie 
den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen
 Situationen zur Folge haben, dass der Computer fehlerhaft läuft.
 
Error - 05.02.2011 04:54:01 | Computer Name = User-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 05.02.2011 04:55:28 | Computer Name = User-PC | Source = DCOM | ID = 10000
Description = 
 
Error - 05.02.2011 04:56:26 | Computer Name = User-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 05.02.2011 09:29:10 | Computer Name = User-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 11.02.2011 08:03:06 | Computer Name = User-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 11.02.2011 15:50:13 | Computer Name = User-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.
 
Error - 11.02.2011 15:50:14 | Computer Name = User-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.
 
Error - 11.02.2011 15:50:14 | Computer Name = User-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.
 
Error - 11.02.2011 15:50:15 | Computer Name = User-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.
 
 
< End of report >
         
--- --- ---

Alt 21.02.2011, 12:35   #10
hubertg
 
system tool entfernen - Standard

system tool entfernen



OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 21.02.2011 13:04:08 - Run 1
OTL by OldTimer - Version 3.2.20.6     Folder = F:\
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 4,00 Gb Available Physical Memory | 88,00% Memory free
8,00 Gb Paging File | 8,00 Gb Available in Paging File | 94,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452,22 Gb Total Space | 369,75 Gb Free Space | 81,76% Space Free | Partition Type: NTFS
Drive D: | 13,24 Gb Total Space | 2,20 Gb Free Space | 16,62% Space Free | Partition Type: NTFS
Drive F: | 7,46 Gb Total Space | 7,46 Gb Free Space | 99,99% Space Free | Partition Type: FAT32
 
Computer Name: USER-PC | User Name: User | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - F:\OTL.exe (OldTimer Tools)
 
 
========== Modules (SafeList) ==========
 
MOD - F:\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (STacSV) -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (hpsrv) -- C:\Windows\SysNative\hpservice.exe (Hewlett-Packard)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AESTFilters) -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe (Andrea Electronics Corporation)
SRV - (avg9wd) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (HPDrvMntSvc.exe) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (GameConsoleService) -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (ezSharedSvc) -- C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (AvgTdiA) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgMfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgLdx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (hwdatacard) -- C:\Windows\SysNative\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (hwusbdev) -- C:\Windows\SysNative\drivers\ewusbdev.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (STHDA) -- C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (hpdskflt) -- C:\Windows\SysNative\drivers\hpdskflt.sys (Hewlett-Packard)
DRV:64bit: - (Accelerometer) -- C:\Windows\SysNative\drivers\Accelerometer.sys (Hewlett-Packard)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (enecir) -- C:\Windows\SysNative\drivers\enecir.sys (ENE TECHNOLOGY INC.)
DRV:64bit: - (SrvHsfV92) -- C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) -- C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (AgereSoftModem) -- C:\Windows\SysNative\drivers\agrsm64.sys (LSI Corp)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Research Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (AtiPcie) AMD PCI Express (3GIO) -- C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV:64bit: - (HpqKbFiltr) -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb
IE - HKLM\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_DE&c=94&bd=Pavilion&pf=cnnb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://news.google.at/nwshp?hl=de&tab=wn
IE - HKCU\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (AOL Toolbar BHO) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files (x86)\google\googletoolbar1.dll (Google Inc.)
O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC)
O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS)
O4 - HKLM..\Run: [HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [Raptr]  File not found
O4 - HKCU..\RunOnce: [nEmFaCg01812] C:\ProgramData\nEmFaCg01812\nEmFaCg01812.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O8:64bit: - Extra context menu item: &AOL Toolbar-Suche - C:\ProgramData\AOL\ieToolbar\resources\de-DE\local\search.html ()
O8:64bit: - Extra context menu item: &Google Search - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O8:64bit: - Extra context menu item: Backward &Links - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O8:64bit: - Extra context menu item: Cac&hed Snapshot of Page - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O8:64bit: - Extra context menu item: Si&milar Pages - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: &AOL Toolbar-Suche - C:\ProgramData\AOL\ieToolbar\resources\de-DE\local\search.html ()
O8 - Extra context menu item: &Google Search - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Backward &Links - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Cac&hed Snapshot of Page - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Si&milar Pages - C:\Program Files (x86)\Google\GoogleToolbar1.dll (Google Inc.)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{368ce258-2ad8-11e0-a771-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{368ce258-2ad8-11e0-a771-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{368ce28a-2ad8-11e0-a771-00269ec89415}\Shell - "" = AutoRun
O33 - MountPoints2\{368ce28a-2ad8-11e0-a771-00269ec89415}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.02.20 23:42:21 | 000,000,000 | ---D | C] -- C:\ProgramData\nEmFaCg01812
[2011.02.19 09:39:05 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\Vuze Downloads
[2011.02.19 09:31:33 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Raptr
[2011.02.19 09:31:21 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Raptr
[2011.02.19 09:31:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raptr
[2011.02.19 09:29:49 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Azureus
[2011.02.19 09:29:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vuze
[2011.02.19 09:29:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ConduitEngine
[2011.02.19 09:29:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Vuze_Remote
[2011.02.19 09:29:21 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Conduit
[2011.02.18 18:38:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit
[2011.02.18 18:38:50 | 000,000,000 | ---D | C] -- C:\extensions
[2011.02.18 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\BitTorrent
[2011.02.17 18:23:33 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2011.02.17 18:23:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2011.02.17 18:22:36 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011.02.17 18:22:36 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011.02.17 18:22:36 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011.02.17 16:30:41 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\RavensburgerTipToi
[2011.02.17 16:29:12 | 000,000,000 | ---D | C] -- C:\ProgramData\RavensburgerTipToi
[2011.02.17 16:27:44 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\tiptoi® Manager
[2011.02.17 16:27:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ravensburger tiptoi
[2011.02.11 20:46:56 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\AVS4YOU
[2011.02.11 20:46:37 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
[2011.02.11 20:46:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU
[2011.02.11 20:45:57 | 010,833,920 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\libmfxsw32.dll
[2011.02.11 20:45:56 | 010,915,840 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\libmfxhw32.dll
[2011.02.11 20:45:49 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\GdiPlus.dll
[2011.02.11 20:45:49 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll
[2011.02.11 20:45:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVSMedia
[2011.02.11 20:45:49 | 000,000,000 | ---D | C] -- C:\ProgramData\AVS4YOU
[2011.02.11 20:45:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVS4YOU
[2011.02.11 12:04:02 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\WinRAR
[2011.02.11 12:03:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.02.11 12:03:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.02.11 11:21:05 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCTL.OCX
[2011.02.11 11:21:05 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomct2.ocx
[2011.02.11 11:21:05 | 000,609,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comctl32.ocx
[2011.02.11 11:21:05 | 000,224,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TabCtl32.ocx
[2011.02.11 11:21:05 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMM32.OCX
[2011.02.11 11:21:05 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCDE.DLL
[2011.02.11 11:21:05 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Comdlg32.ocx
[2011.02.11 11:21:05 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6DE.DLL
[2011.02.11 11:21:05 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CMCTLDE.DLL
[2011.02.11 11:21:05 | 000,109,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswinsck.ocx
[2011.02.11 11:21:05 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCC2DE.DLL
[2011.02.11 11:21:05 | 000,040,960 | ---- | C] (<none>) -- C:\Windows\SysWow64\SSubTmr6.dll
[2011.02.11 11:21:05 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CMDLGDE.DLL
[2011.02.11 11:21:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TABCTDE.DLL
[2011.02.11 11:21:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WINSKDE.DLL
[2011.02.11 11:21:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMDE.DLL
[2011.02.11 11:21:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Power-Musicbox 6
[2011.02.11 11:21:02 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Power-Musicbox 6
[2011.02.11 11:21:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Power-Musicbox 6
[2011.02.09 21:21:22 | 000,000,000 | ---D | C] -- C:\ProgramData\{23D58E70-3B83-4B83-A227-68770F84F5EC}
[2011.02.09 20:52:36 | 000,013,048 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgrssta.dll
[2011.02.09 20:45:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\avg
[2011.02.09 20:39:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Free 9.0
[2011.02.09 20:39:50 | 000,317,520 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys
[2011.02.09 20:39:47 | 000,269,904 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys
[2011.02.09 20:39:42 | 000,035,536 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys
[2011.02.09 20:39:42 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\Avg
[2011.02.09 20:39:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG
[2011.02.09 20:39:25 | 000,000,000 | ---D | C] -- C:\ProgramData\avg9
[2011.02.09 20:32:16 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.02.09 20:32:15 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.02.09 20:32:15 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.02.09 20:32:15 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.02.09 20:32:15 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.02.09 20:32:15 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.02.09 20:32:15 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.02.09 20:32:15 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.02.09 20:32:14 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.02.09 20:32:14 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.02.09 20:32:14 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.02.09 20:32:14 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.02.09 20:32:13 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.02.09 20:32:13 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.02.09 20:31:58 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.02.09 20:31:58 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.02.09 20:31:58 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.02.09 20:31:57 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.02.09 20:31:56 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.02.09 20:31:56 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.02.09 20:31:56 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2011.02.09 20:31:54 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.02.09 20:31:54 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.02.09 20:31:54 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.02.09 20:31:54 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.02.04 23:39:32 | 000,000,000 | ---D | C] -- C:\ProgramData\fKlIpNh01804
[2011.02.04 12:39:08 | 000,000,000 | R-SD | C] -- C:\Users\User\Documents\My Stationery
[2011.02.04 12:09:30 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Adobe
[2011.02.03 11:32:45 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Philipp Winterberg
[2011.02.03 11:32:40 | 000,000,000 | ---D | C] -- C:\Users\User\Free RAR Extract Frog
[2011.02.03 09:19:00 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\HP Support Assistant
[2011.02.01 10:25:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2011.01.30 09:03:26 | 000,000,000 | ---D | C] -- C:\Canna
[2011.01.30 08:38:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2011.01.30 08:37:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
[2011.01.30 08:37:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DivX
[2011.01.30 08:30:00 | 000,237,168 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.01.30 08:29:11 | 000,000,000 | ---D | C] -- C:\Programme\Alwil Software
[2011.01.30 08:29:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2011.01.29 17:40:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2011.01.29 17:39:46 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2011.01.29 09:43:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2011.01.29 09:43:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2011.01.29 09:33:51 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\Webcam
[2011.01.29 09:30:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2011.01.29 09:27:48 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2011.01.29 09:27:48 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2011.01.29 09:27:48 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2011.01.29 09:27:48 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2011.01.29 09:27:48 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2011.01.29 09:27:48 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2011.01.29 09:27:48 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2011.01.29 09:27:48 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2011.01.29 09:27:25 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
[2011.01.29 09:24:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011.01.29 09:24:02 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Skype
[2011.01.29 09:23:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011.01.29 09:23:53 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2011.01.29 09:23:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2011.01.28 13:42:42 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\CyberLink
[2011.01.28 13:42:41 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\PowerCinema
[2011.01.28 13:42:41 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\CyberLink
[2011.01.28 13:40:09 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2011.01.28 13:40:09 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2011.01.28 13:40:08 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2011.01.28 13:40:06 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2011.01.28 13:40:06 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2011.01.28 13:40:06 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2011.01.28 13:40:06 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2011.01.28 13:40:06 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2011.01.28 13:40:06 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2011.01.28 13:40:06 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2011.01.28 13:40:06 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2011.01.28 13:40:05 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2011.01.28 13:40:04 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2011.01.28 13:40:04 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2011.01.28 13:40:02 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2011.01.28 13:40:02 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2011.01.28 13:39:16 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2011.01.28 13:39:13 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.01.28 13:39:13 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2011.01.28 13:39:13 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2011.01.28 13:39:11 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2011.01.28 13:39:11 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll
[2011.01.28 13:39:00 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2011.01.28 13:39:00 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2011.01.28 13:38:58 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2011.01.28 13:38:57 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.01.28 13:38:46 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2011.01.28 13:38:46 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2011.01.28 13:38:44 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2011.01.28 13:38:44 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2011.01.28 13:38:43 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2011.01.28 13:38:43 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2011.01.28 13:38:33 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2011.01.28 13:38:21 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2011.01.28 13:38:21 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2011.01.28 13:38:20 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2011.01.28 13:38:19 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2011.01.28 13:38:18 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2011.01.28 13:38:17 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2011.01.28 13:38:16 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2011.01.28 13:38:15 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2011.01.28 13:38:14 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2011.01.28 13:38:14 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2011.01.28 13:38:12 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2011.01.28 13:29:58 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Macromedia
[2011.01.28 13:29:36 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2011.01.28 13:29:36 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll
[2011.01.28 13:29:28 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2011.01.28 13:29:28 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2011.01.28 13:25:27 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Adobe
[2011.01.28 13:25:20 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\AOL
[2011.01.28 13:17:36 | 000,000,000 | ---D | C] -- C:\ProgramData\mquadr.at
[2011.01.28 13:17:28 | 000,216,576 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbnet.sys
[2011.01.28 13:17:28 | 000,117,248 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys
[2011.01.28 13:17:28 | 000,114,560 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbdev.sys
[2011.01.28 13:17:28 | 000,029,696 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys
[2011.01.28 13:17:21 | 000,000,000 | -H-D | C] -- C:\ProgramData\{092C512F-9ECA-47B0-BF89-F0FF91DB1676}
[2011.01.28 13:17:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\A1 Dashboard
[2011.01.28 13:17:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A1
[2011.01.28 13:16:59 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\PackageAware
[2011.01.24 19:34:03 | 000,000,000 | ---D | C] -- C:\Windows\ehome
[2011.01.24 19:32:28 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011.01.24 12:45:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2011.01.24 12:45:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2011.01.24 12:44:33 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011.01.24 12:44:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2011.01.24 12:41:44 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office
[2011.01.24 12:41:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2011.01.24 12:41:05 | 000,000,000 | ---D | C] -- C:\Windows\SHELLNEW
[2011.01.24 12:40:55 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Microsoft Help
[2011.01.24 12:40:00 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2011.01.24 11:49:19 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\HpUpdate
[2011.01.24 11:41:39 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Hewlett-Packard
[2011.01.24 11:41:36 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\ATI
[2011.01.24 11:41:36 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\ATI
[2011.01.24 11:41:20 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.01.24 11:41:20 | 000,000,000 | R--D | C] -- C:\Users\User\Searches
[2011.01.24 11:41:20 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.01.24 11:41:12 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Identities
[2011.01.24 11:41:10 | 000,000,000 | R--D | C] -- C:\Users\User\Contacts
[2011.01.24 11:41:09 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\VirtualStore
[2011.01.24 11:40:57 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\hpqlog
[2011.01.24 11:40:50 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Hewlett-Packard_Company
[2011.01.24 11:39:55 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\HP TCS
[2011.01.24 11:38:24 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Hewlett-Packard
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Vorlagen
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\AppData\Local\Verlauf
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\AppData\Local\Temporary Internet Files
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Startmenü
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\SendTo
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Recent
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Netzwerkumgebung
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Lokale Einstellungen
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Documents\Eigene Videos
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Documents\Eigene Musik
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Eigene Dateien
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Documents\Eigene Bilder
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Druckumgebung
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Cookies
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\AppData\Local\Anwendungsdaten
[2011.01.24 11:36:55 | 000,000,000 | -HSD | C] -- C:\Users\User\Anwendungsdaten
[2011.01.24 11:36:54 | 000,000,000 | --SD | C] -- C:\Users\User\AppData\Roaming\Microsoft
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Videos
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Saved Games
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Pictures
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Music
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Links
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Favorites
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Downloads
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Documents
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\Desktop
[2011.01.24 11:36:54 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.01.24 11:36:54 | 000,000,000 | -H-D | C] -- C:\Users\User\AppData
[2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Temp
[2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recovery Manager
[2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Microsoft
[2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Media Center Programs
[2011.01.24 11:36:54 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Programme
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2011.01.24 11:36:36 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2011.01.24 11:25:13 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2011.01.24 11:06:25 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services
[2011.01.24 10:52:31 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LightScribe Direct Disc Labeling
[2011.01.24 10:52:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LightScribe
[2011.01.24 10:48:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Recovery
[2011.01.24 10:48:12 | 000,000,000 | ---D | C] -- C:\Windows\Hewlett-Packard
[2011.01.24 10:47:24 | 000,436,224 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AESTEC64.dll
[2011.01.24 10:47:23 | 000,160,768 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AESTAC64.dll
[2011.01.24 10:47:23 | 000,068,608 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AESTAR64.dll
[2011.01.24 10:47:22 | 012,158,464 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\idtcpl64.cpl
[2011.01.24 10:47:22 | 003,593,216 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stlang64.dll
[2011.01.24 10:47:22 | 000,564,224 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\idt64mp1.exe
[2011.01.24 10:47:22 | 000,450,048 | ---- | C] (IDT, Inc.) -- C:\Windows\sttray64.exe
[2011.01.24 10:47:22 | 000,090,624 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AESTCo64.dll
[2011.01.24 10:47:20 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SRSLabs
[2011.01.24 10:46:45 | 000,487,936 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\drivers\stwrt64.sys
[2011.01.24 10:46:45 | 000,209,920 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\staco64.dll
[2011.01.24 10:46:44 | 001,431,552 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapo64.dll
[2011.01.24 10:46:44 | 000,604,672 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapi64.dll
[2011.01.24 10:46:44 | 000,431,616 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stcplx64.dll
[2011.01.24 10:46:34 | 000,000,000 | ---D | C] -- C:\Programme\IDT
[2011.01.24 10:46:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros
[2011.01.24 10:46:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2011.01.24 10:45:59 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.01.24 10:45:34 | 000,215,040 | ---- | C] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2011.01.24 10:45:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2011.01.24 10:45:25 | 000,036,408 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\usbfilter.sys
[2011.01.24 10:45:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2011.01.24 10:45:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
[2011.01.24 10:45:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JMicron
[2011.01.24 10:45:01 | 000,000,000 | ---D | C] -- C:\Programme\DIFX
[2011.01.24 10:44:45 | 000,000,000 | ---D | C] -- C:\Programme\Synaptics
[2011.01.24 10:44:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
[2011.01.24 10:42:38 | 000,000,000 | ---D | C] -- C:\Programme\ATI
[2011.01.24 10:42:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2011.01.24 10:37:29 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
 
========== Files - Modified Within 30 Days ==========
 
[2011.02.21 13:03:59 | 001,472,002 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.02.21 13:03:59 | 000,643,628 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.02.21 13:03:59 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.02.21 13:03:59 | 000,126,188 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.02.21 13:03:59 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.02.21 12:59:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.02.21 12:59:05 | 3218,235,392 | -HS- | M] () -- C:\hiberfil.sys
[2011.02.21 12:34:42 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.02.21 12:34:42 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.02.20 18:22:35 | 071,428,947 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm
[2011.02.19 16:25:54 | 000,488,326 | ---- | M] () -- C:\Users\User\AppData\Local\tmp002.JPG
[2011.02.19 16:25:53 | 000,468,294 | ---- | M] () -- C:\Users\User\AppData\Local\tmp002.1
[2011.02.19 16:25:52 | 000,765,595 | ---- | M] () -- C:\Users\User\AppData\Local\tmp002.0
[2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.JPG
[2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.3
[2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.2
[2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.1
[2011.02.19 14:36:29 | 000,068,242 | ---- | M] () -- C:\Users\User\AppData\Local\tmp001.0
[2011.02.19 09:31:21 | 000,001,650 | ---- | M] () -- C:\Users\User\Desktop\Raptr.lnk
[2011.02.19 09:29:41 | 000,001,852 | ---- | M] () -- C:\Users\Public\Desktop\Vuze.lnk
[2011.02.18 18:30:53 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.02.17 16:30:33 | 000,001,076 | ---- | M] () -- C:\Users\User\Desktop\tiptoi.lnk
[2011.02.11 20:46:40 | 000,001,297 | ---- | M] () -- C:\Users\User\Desktop\AVS4YOU Software Navigator.lnk
[2011.02.11 20:46:05 | 000,001,241 | ---- | M] () -- C:\Users\User\Desktop\AVS Video Converter.lnk
[2011.02.11 11:27:52 | 000,001,107 | ---- | M] () -- C:\Users\Public\Desktop\Power-Musicbox 6.lnk
[2011.02.11 11:27:52 | 000,001,077 | ---- | M] () -- C:\Users\Public\Desktop\SetUp-Tool.lnk
[2011.02.09 21:08:39 | 000,435,472 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.02.09 20:52:37 | 000,317,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys
[2011.02.09 20:52:36 | 000,035,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys
[2011.02.09 20:52:36 | 000,013,048 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgrssta.dll
[2011.02.09 20:52:32 | 000,269,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys
[2011.02.09 20:45:19 | 000,142,495 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\microavi.avg
[2011.02.09 20:39:54 | 000,113,461 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\iavichjw.avm
[2011.02.09 20:39:54 | 000,001,858 | ---- | M] () -- C:\Users\Public\Desktop\AVG Free 9.0.lnk
[2011.02.09 20:39:42 | 006,061,540 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\avi7.avg
[2011.02.09 20:39:42 | 000,492,629 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\miniavi.avg
[2011.02.09 20:34:48 | 000,588,472 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWow64\ezsvc7x.dll
[2011.02.02 21:40:39 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011.02.02 21:40:38 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011.02.02 21:40:36 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011.02.02 21:40:23 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2011.01.30 08:38:09 | 000,001,867 | ---- | M] () -- C:\Users\Public\Desktop\DivX Movies.lnk
[2011.01.30 08:38:09 | 000,001,146 | ---- | M] () -- C:\Users\Public\Desktop\DivX Player.lnk
[2011.01.30 08:30:03 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2011.01.29 09:45:55 | 000,001,754 | ---- | M] () -- C:\Users\Public\Desktop\Browserwahl.lnk
[2011.01.29 09:23:54 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.01.28 13:17:20 | 000,001,016 | ---- | M] () -- C:\Users\Public\Desktop\A1 Dashboard.lnk
[2011.01.24 11:50:54 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.01.24 11:37:42 | 000,000,000 | RHS- | M] () -- C:\Windows\SysWow64\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF00105RC_E572195-041_4A_I3637_SHP_V33.22_F.10_T091015_WU3-0_L407_M4093_J500_7AMD_8F62_92.20_#110124_N10EC8168;168C002B_(VV869EA#ABD)_XMOBILE_CN10_Z.MRK
[2011.01.24 11:37:42 | 000,000,000 | RHS- | M] () -- C:\Windows\SysNative\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF00105RC_E572195-041_4A_I3637_SHP_V33.22_F.10_T091015_WU3-0_L407_M4093_J500_7AMD_8F62_92.20_#110124_N10EC8168;168C002B_(VV869EA#ABD)_XMOBILE_CN10_Z.MRK
[2011.01.24 11:36:13 | 000,052,953 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2011.01.24 11:36:13 | 000,052,953 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2011.01.24 10:44:50 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01007.Wdf
 
========== Files Created - No Company Name ==========
 
[2011.02.19 16:25:53 | 000,488,326 | ---- | C] () -- C:\Users\User\AppData\Local\tmp002.JPG
[2011.02.19 14:34:19 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.3
[2011.02.19 14:34:16 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.2
[2011.02.19 14:34:06 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.1
[2011.02.19 14:34:04 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.JPG
[2011.02.19 14:34:04 | 000,068,242 | ---- | C] () -- C:\Users\User\AppData\Local\tmp001.0
[2011.02.19 14:33:19 | 000,468,294 | ---- | C] () -- C:\Users\User\AppData\Local\tmp002.1
[2011.02.19 14:33:15 | 000,765,595 | ---- | C] () -- C:\Users\User\AppData\Local\tmp002.0
[2011.02.19 09:31:21 | 000,001,650 | ---- | C] () -- C:\Users\User\Desktop\Raptr.lnk
[2011.02.19 09:29:41 | 000,001,852 | ---- | C] () -- C:\Users\Public\Desktop\Vuze.lnk
[2011.02.19 09:29:41 | 000,001,852 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vuze.lnk
[2011.02.18 18:30:53 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2011.02.17 16:27:47 | 000,001,076 | ---- | C] () -- C:\Users\User\Desktop\tiptoi.lnk
[2011.02.11 20:46:40 | 000,001,297 | ---- | C] () -- C:\Users\User\Desktop\AVS4YOU Software Navigator.lnk
[2011.02.11 20:46:05 | 000,001,241 | ---- | C] () -- C:\Users\User\Desktop\AVS Video Converter.lnk
[2011.02.11 11:21:06 | 000,001,107 | ---- | C] () -- C:\Users\Public\Desktop\Power-Musicbox 6.lnk
[2011.02.11 11:21:06 | 000,001,077 | ---- | C] () -- C:\Users\Public\Desktop\SetUp-Tool.lnk
[2011.02.09 20:39:54 | 071,428,947 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm
[2011.02.09 20:39:54 | 000,142,495 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\microavi.avg
[2011.02.09 20:39:54 | 000,113,461 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\iavichjw.avm
[2011.02.09 20:39:54 | 000,001,858 | ---- | C] () -- C:\Users\Public\Desktop\AVG Free 9.0.lnk
[2011.02.09 20:39:42 | 006,061,540 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\avi7.avg
[2011.02.09 20:39:42 | 000,492,629 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\miniavi.avg
[2011.01.30 08:38:09 | 000,001,867 | ---- | C] () -- C:\Users\Public\Desktop\DivX Movies.lnk
[2011.01.30 08:38:08 | 000,001,146 | ---- | C] () -- C:\Users\Public\Desktop\DivX Player.lnk
[2011.01.30 08:30:03 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2011.01.29 09:45:55 | 000,001,754 | ---- | C] () -- C:\Users\Public\Desktop\Browserwahl.lnk
[2011.01.28 13:17:20 | 000,001,016 | ---- | C] () -- C:\Users\Public\Desktop\A1 Dashboard.lnk
[2011.01.24 19:34:49 | 000,048,265 | ---- | C] () -- C:\Windows\HomePremium.xml
[2011.01.24 11:50:54 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.01.24 11:41:42 | 000,000,000 | ---- | C] () -- C:\Users\User\AppData\Local\QSwitch.txt
[2011.01.24 11:41:42 | 000,000,000 | ---- | C] () -- C:\Users\User\AppData\Local\DSwitch.txt
[2011.01.24 11:41:42 | 000,000,000 | ---- | C] () -- C:\Users\User\AppData\Local\AtStart.txt
[2011.01.24 11:41:39 | 000,000,186 | ---- | C] () -- C:\ProgramData\HPWALog.txt
[2011.01.24 11:41:25 | 000,001,409 | ---- | C] () -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011.01.24 11:41:21 | 000,001,443 | ---- | C] () -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011.01.24 11:39:46 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.01.24 11:39:46 | 000,002,202 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
[2011.01.24 11:39:46 | 000,002,196 | ---- | C] () -- C:\Users\Public\Desktop\eBay.lnk
[2011.01.24 11:37:42 | 000,000,000 | RHS- | C] () -- C:\Windows\SysWow64\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF00105RC_E572195-041_4A_I3637_SHP_V33.22_F.10_T091015_WU3-0_L407_M4093_J500_7AMD_8F62_92.20_#110124_N10EC8168;168C002B_(VV869EA#ABD)_XMOBILE_CN10_Z.MRK
[2011.01.24 11:37:42 | 000,000,000 | RHS- | C] () -- C:\Windows\SysNative\drivers\103C_HP_cNB_Pavilion dv6 Notebook PC_Y5335KV_0U_QCNF00105RC_E572195-041_4A_I3637_SHP_V33.22_F.10_T091015_WU3-0_L407_M4093_J500_7AMD_8F62_92.20_#110124_N10EC8168;168C002B_(VV869EA#ABD)_XMOBILE_CN10_Z.MRK
[2011.01.24 11:05:40 | 000,000,105 | ---- | C] () -- C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
[2011.01.24 11:05:31 | 000,000,032 | ---- | C] () -- C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
[2011.01.24 11:05:12 | 000,000,032 | ---- | C] () -- C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
[2011.01.24 11:04:48 | 000,000,032 | ---- | C] () -- C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
[2011.01.24 11:04:23 | 000,000,032 | ---- | C] () -- C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
[2011.01.24 10:47:22 | 000,015,222 | ---- | C] () -- C:\Windows\SysNative\nbspkrs.ico
[2011.01.24 10:47:22 | 000,003,774 | ---- | C] () -- C:\Windows\SysNative\bltinmic.ico
[2011.01.24 10:47:22 | 000,003,774 | ---- | C] () -- C:\Windows\SysNative\2hps.ico
[2011.01.24 10:45:34 | 000,067,584 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2011.01.24 10:44:50 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01007.Wdf
[2011.01.24 10:38:50 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011.01.24 10:38:38 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011.01.24 10:36:36 | 3218,235,392 | -HS- | C] () -- C:\hiberfil.sys
[2009.10.01 19:46:48 | 000,000,109 | ---- | C] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
[2009.10.01 19:43:09 | 000,000,110 | ---- | C] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
[2009.10.01 19:41:40 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
[2009.10.01 19:41:01 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
[2009.07.15 16:50:42 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2004.07.12 22:07:21 | 003,375,104 | ---- | C] () -- C:\Windows\SysWow64\qt-mt331.dll
 
========== LOP Check ==========
 
[2011.02.20 23:49:54 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Azureus
[2011.02.18 18:52:27 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\BitTorrent
[2011.02.11 12:00:10 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Philipp Winterberg
[2011.02.11 11:30:44 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Power-Musicbox 6
[2011.02.21 20:21:42 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Raptr
[2011.02.17 16:35:17 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\RavensburgerTipToi
[2009.07.14 06:08:49 | 000,009,954 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         
--- --- ---

Alt 21.02.2011, 12:38   #11
markusg
/// Malware-holic
 
system tool entfernen - Standard

system tool entfernen



• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
O4 - HKCU..\RunOnce: [nEmFaCg01812] C:\ProgramData\nEmFaCg01812\nEmFaCg01812.exe ()
:files
C:\ProgramData\nEmFaCg01812
:Commands
[purity]
[EMPTYFLASH]
[emptytemp]
[Reboot]

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
pc sollte wieder im normalen modus starten.
öffne computer, C: dann _OTL
dort rechtsklick auf moved files
wähle zu moved files.rar oder zip hinzufügen.

lade das archiv in unserem upload channel hoch.
http://www.trojaner-board.de/54791-a...ner-board.html
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 21.02.2011, 12:43   #12
hubertg
 
system tool entfernen - Standard

system tool entfernen



Zitat:
Zitat von markusg Beitrag anzeigen
• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
O4 - HKCU..\RunOnce: [nEmFaCg01812] C:\ProgramData\nEmFaCg01812\nEmFaCg01812.exe ()
:files
C:\ProgramData\nEmFaCg01812
:Commands
[purity]
[EMPTYFLASH]
[emptytemp]
[Reboot]

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
pc sollte wieder im normalen modus starten.
öffne computer, C: dann _OTL
dort rechtsklick auf moved files
wähle zu moved files.rar oder zip hinzufügen.

lade das archiv in unserem upload channel hoch.
http://www.trojaner-board.de/54791-a...ner-board.html


soll ich das jetzt am sauberen oder am anderen pc durchführen?

Alt 21.02.2011, 12:44   #13
markusg
/// Malware-holic
 
system tool entfernen - Standard

system tool entfernen



na was denkst du denn...? am infizierten natürlich :-)
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 21.02.2011, 12:48   #14
hubertg
 
system tool entfernen - Standard

system tool entfernen



Zitat:
Zitat von markusg Beitrag anzeigen
na was denkst du denn...? am infizierten natürlich :-)
oh sorry na ja kenn mich halt nicht so aus!!

Alt 21.02.2011, 12:55   #15
hubertg
 
system tool entfernen - Standard

system tool entfernen



Zitat:
Zitat von hubertg Beitrag anzeigen
oh sorry na ja kenn mich halt nicht so aus!!
OMG wie bleibt mir das jetzt am stick oben, das ich da raufkopieren soll?

Antwort

Themen zu system tool entfernen
avg, blau, entferne, entfernen, installier, installiert, kleine, kleinen, lauter, löschen, probiert, problem, programm, system, system tool, system tool entfernen, tool, verhindern



Ähnliche Themen: system tool entfernen


  1. system tool
    Plagegeister aller Art und deren Bekämpfung - 24.03.2011 (27)
  2. System Tool entfernen und dazugehörige Logfile
    Plagegeister aller Art und deren Bekämpfung - 20.03.2011 (20)
  3. System Tool entfernen!
    Plagegeister aller Art und deren Bekämpfung - 19.03.2011 (1)
  4. System mit System-Tool befallen
    Plagegeister aller Art und deren Bekämpfung - 07.03.2011 (26)
  5. System Tool
    Plagegeister aller Art und deren Bekämpfung - 27.02.2011 (21)
  6. System tool komplett entfernen.
    Log-Analyse und Auswertung - 26.02.2011 (5)
  7. System tool komplett entfernen.
    Mülltonne - 25.02.2011 (1)
  8. Problem beim Entfernen von System Tool
    Plagegeister aller Art und deren Bekämpfung - 20.02.2011 (1)
  9. System Tool (Rückstände) entfernen
    Alles rund um Windows - 16.02.2011 (1)
  10. System tool kann ich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 16.02.2011 (13)
  11. Vollständiges Entfernen von System Tool
    Plagegeister aller Art und deren Bekämpfung - 13.02.2011 (16)
  12. System Tool
    Plagegeister aller Art und deren Bekämpfung - 23.01.2011 (18)
  13. System Tool entfernen, aber wie ?
    Plagegeister aller Art und deren Bekämpfung - 17.01.2011 (43)
  14. System Tool
    Plagegeister aller Art und deren Bekämpfung - 11.01.2011 (2)
  15. System Tool entfernen
    Plagegeister aller Art und deren Bekämpfung - 07.01.2011 (1)
  16. System tool
    Log-Analyse und Auswertung - 31.12.2010 (3)
  17. System Tool entfernen
    Anleitungen, FAQs & Links - 31.10.2010 (2)

Zum Thema system tool entfernen - hallo hab ein problem mit meinem pc!! da is alles blau mit lauter kleinen ziffern(1er und 0er) hab das mit der otl schon probiert, aber ich komm mit f8 nicht - system tool entfernen...
Archiv
Du betrachtest: system tool entfernen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.