Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: TR/Kazy.mekml.1

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 17.04.2011, 17:21   #1
Holger66
 
TR/Kazy.mekml.1 - Standard

TR/Kazy.mekml.1



OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 17.04.2011 17:59:48 - Run 3
OTL by OldTimer - Version 3.2.22.3     Folder = c:\Users\Holger\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19048)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 58,00% Memory free
7,00 Gb Paging File | 5,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 916,42 Gb Total Space | 661,90 Gb Free Space | 72,23% Space Free | Partition Type: NTFS
Drive D: | 15,00 Gb Total Space | 7,68 Gb Free Space | 51,19% Space Free | Partition Type: NTFS
Drive E: | 30,58 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: HOLGER-PC | User Name: Holger | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-1660295104-3766796009-1543979199-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\_Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~3\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\_Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{089FC158-179F-4671-8ECB-2E66D867B3F2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{0A51EB27-845B-46F7-8BB4-3C400B60ECA6}" = lport=138 | protocol=17 | dir=in | app=system | 
"{36D5960A-D28F-4A2C-8110-2C199E79DAA2}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{387C29A1-4B2D-429D-8DBE-9F6F91DF5AB0}" = lport=137 | protocol=17 | dir=in | app=system | 
"{4098B40F-53B6-405E-BC98-6DCC5D5C8CDE}" = lport=139 | protocol=6 | dir=in | app=system | 
"{49C0AAAA-1C49-4D33-99D2-2EAEFF1A8019}" = rport=137 | protocol=17 | dir=out | app=system | 
"{5082C79E-7572-40FB-8BDA-18AE40FD33CC}" = lport=445 | protocol=6 | dir=in | app=system | 
"{8BA4FD77-A943-4FC8-A19C-1D3B23AE0A7C}" = rport=139 | protocol=6 | dir=out | app=system | 
"{B07D0D7A-C15C-437F-B493-4541820D04DB}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{B6839ED4-89A4-4296-A211-D79D54B06AA8}" = rport=445 | protocol=6 | dir=out | app=system | 
"{C4DBBAFE-14AE-42E7-A31E-50A6EDEDA223}" = rport=138 | protocol=17 | dir=out | app=system | 
"{D056FFED-EABB-47BE-9B86-A39F7D67EE4D}" = lport=2869 | protocol=6 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0515A063-E6FA-4299-94CD-DFE8FDB44517}" = protocol=6 | dir=in | app=c:\_program files\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{057C4AF2-04FA-45B5-BBC0-7EDEB2DF8FAC}" = protocol=17 | dir=in | app=c:\_program files\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{0D3012AA-944D-4C65-8DCF-9E467D0ACBB0}" = protocol=6 | dir=in | app=c:\_program files\firefly studios\stronghold 2\stronghold2.exe | 
"{0F264DF6-2672-4B68-90AF-0C0E77E39FB9}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | 
"{21592AB3-2D7F-4D83-A240-10DE1EA35295}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{2370DD42-105F-4CEF-B2DE-FD5FD164F310}" = protocol=6 | dir=in | app=c:\_program files\steam\steamapps\common\mountblade warband\mb_warband.exe | 
"{2A17C7CE-E483-4200-A911-C416584047EC}" = protocol=17 | dir=in | app=c:\_program files\electronic arts\medal of honor airborne\unrealengine3\binaries\moha.exe | 
"{38F8F1CE-C351-4F32-AF63-1266124FF0C1}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{3BA0C3FD-7DBC-4148-9236-174663C47042}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{3C0B6748-4395-4686-8783-637DC4A68868}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{3FBCDA27-F82F-4687-A4B0-C7F05B078E6E}" = protocol=6 | dir=in | app=c:\program files\2k games\firaxis games\sid meier's civilization iv colonization\colonization.exe | 
"{4643C33C-456C-4802-9AE1-A54F5D1A7FE0}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{5795E24E-1FBC-4B6B-80B6-3CE52AA1D7BD}" = protocol=17 | dir=in | app=c:\_program files\firaxis games\sid meier's civilization 4\civilization4.exe | 
"{59CF60FF-C46E-4A28-A29B-188DA0BDDEA4}" = protocol=17 | dir=in | app=c:\_program files\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{7A386B8E-9F27-4E2E-84FF-F8F3348C41DB}" = protocol=17 | dir=in | app=c:\program files\2k games\firaxis games\sid meier's civilization iv colonization\colonization.exe | 
"{7E1E9D62-57BF-420D-94B0-EF69E3423EA1}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{8C975B28-EDA6-4358-B03C-17B27CF60A69}" = protocol=17 | dir=in | app=c:\_program files\steam\steam.exe | 
"{9B80087F-07BC-420F-95DD-A64CFCADE366}" = protocol=17 | dir=in | app=c:\_program files\firefly studios\stronghold 2\stronghold2.exe | 
"{A04FF128-2F3E-4076-89FA-037A243A0F65}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe | 
"{AAA2C185-8ED4-44C7-868E-B2D6F1D1DCEF}" = protocol=6 | dir=in | app=c:\_program files\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{B0781F63-93C2-4282-A556-94E3664EE13D}" = protocol=6 | dir=in | app=c:\_program files\firaxis games\sid meier's civilization 4\civilization4.exe | 
"{B525838C-14C8-4886-93B3-E2C8B617BDE9}" = protocol=6 | dir=in | app=c:\_program files\electronic arts\medal of honor airborne\unrealengine3\binaries\moha.exe | 
"{B7DC50C9-518F-41BF-A229-E7F3F8ABC9AC}" = protocol=6 | dir=in | app=c:\_program files\steam\steam.exe | 
"{BE4BC0CF-B44C-4D76-B232-BFC88D6352D8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{C2E96A2B-39E6-43C0-B9A8-E8E4AAD683A4}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe | 
"{C3085582-CC04-478E-B7B4-F02D5BA9F8C1}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{C336FC98-FAD6-4C21-B8E2-D9C761646828}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{C6EDA8D5-0AF8-470E-951C-720C7E9C3332}" = dir=in | app=c:\_program files\itunes\itunes.exe | 
"{C789AD4D-F050-43D1-92EA-ED2925FB17E5}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe | 
"{E781A2CB-5462-4C2C-ACB9-49ADEE85B3EA}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{E913C9CB-0CA0-4549-A244-ACA67D242B50}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | 
"{F77899DA-84EE-402D-981C-296B1B1ED266}" = protocol=17 | dir=in | app=c:\_program files\steam\steamapps\common\mountblade warband\mb_warband.exe | 
"{FC2D3DDA-B6DC-4B6C-AFE9-C96FDCC6BA76}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"TCP Query User{02C9E7E7-797E-4589-88AE-DFB9E2A483A3}C:\_program files\ea games\mohaa\mohaa.exe" = protocol=6 | dir=in | app=c:\_program files\ea games\mohaa\mohaa.exe | 
"TCP Query User{1AED8417-7B95-45B4-8A19-3D82D0295958}C:\program files\nokia\nokia ovi suite\nokiaovisuite.exe" = protocol=6 | dir=in | app=c:\program files\nokia\nokia ovi suite\nokiaovisuite.exe | 
"TCP Query User{1D664B47-3DB1-458B-A395-55C39671E8E9}C:\_program files\ea games\battlefield 1942\bf1942.exe" = protocol=6 | dir=in | app=c:\_program files\ea games\battlefield 1942\bf1942.exe | 
"TCP Query User{2EBF4D8E-CFCE-475F-9B33-2355E09D8BA6}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{580D57E6-4C1A-48A7-B2E7-FD655AB3E3F3}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
"TCP Query User{6619E065-94DF-4FB8-8895-4A75219371A5}C:\_program files\ea games\medal of honor pacific assault(tm)\mohpa.exe" = protocol=6 | dir=in | app=c:\_program files\ea games\medal of honor pacific assault(tm)\mohpa.exe | 
"TCP Query User{6844A193-97E3-4B93-991C-B14AA88AC5DF}C:\program files\nokia\nokia software updater\nsu_ui_client.exe" = protocol=6 | dir=in | app=c:\program files\nokia\nokia software updater\nsu_ui_client.exe | 
"TCP Query User{C21CA7EC-2EE6-47CA-89C8-861597235F39}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"TCP Query User{C6D7F5AF-B24C-41CD-9A1B-4D722C75CCF2}C:\program files\common files\nokia\service layer\a\nsl_host_process.exe" = protocol=6 | dir=in | app=c:\program files\common files\nokia\service layer\a\nsl_host_process.exe | 
"TCP Query User{C84AABF1-F8AA-4530-A181-480FF7AF1A16}C:\_program files\anno 1701\anno1701.exe" = protocol=6 | dir=in | app=c:\_program files\anno 1701\anno1701.exe | 
"TCP Query User{D8A5E671-AB73-4C46-AEA5-E7F9241DF7BC}C:\program files\nero\nero 7\nero showtime\showtime.exe" = protocol=6 | dir=in | app=c:\program files\nero\nero 7\nero showtime\showtime.exe | 
"TCP Query User{E20E8BBF-DC5F-44CE-899F-45F3BEC53310}C:\program files\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files\epson software\event manager\eeventmanager.exe | 
"UDP Query User{014B671B-5C15-46B2-8D92-85E046600B7A}C:\program files\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files\epson software\event manager\eeventmanager.exe | 
"UDP Query User{03471FF4-4240-4041-8BE1-0209E59E1ECA}C:\program files\nokia\nokia ovi suite\nokiaovisuite.exe" = protocol=17 | dir=in | app=c:\program files\nokia\nokia ovi suite\nokiaovisuite.exe | 
"UDP Query User{10DD42BD-9D54-4BC9-8EDE-88576A02F8D2}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
"UDP Query User{8382E535-50FC-4B74-9161-39619A9DC004}C:\program files\nokia\nokia software updater\nsu_ui_client.exe" = protocol=17 | dir=in | app=c:\program files\nokia\nokia software updater\nsu_ui_client.exe | 
"UDP Query User{8A4386A7-106B-4AD6-9B0B-FB453E4CC94E}C:\_program files\ea games\mohaa\mohaa.exe" = protocol=17 | dir=in | app=c:\_program files\ea games\mohaa\mohaa.exe | 
"UDP Query User{92C5846E-FFCA-46E6-BCC6-E4C35E083FD6}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{ACFF1F55-F011-450B-B33C-BB1245F88B39}C:\program files\common files\nokia\service layer\a\nsl_host_process.exe" = protocol=17 | dir=in | app=c:\program files\common files\nokia\service layer\a\nsl_host_process.exe | 
"UDP Query User{B3852BCF-4470-4156-B1F2-236E6D3C224A}C:\_program files\ea games\battlefield 1942\bf1942.exe" = protocol=17 | dir=in | app=c:\_program files\ea games\battlefield 1942\bf1942.exe | 
"UDP Query User{BA3F990F-BFBE-4F11-8D3C-3C6C53F767EC}C:\_program files\anno 1701\anno1701.exe" = protocol=17 | dir=in | app=c:\_program files\anno 1701\anno1701.exe | 
"UDP Query User{C414DB31-D74B-43DD-A8A3-2043007614E8}C:\program files\nero\nero 7\nero showtime\showtime.exe" = protocol=17 | dir=in | app=c:\program files\nero\nero 7\nero showtime\showtime.exe | 
"UDP Query User{D24C17D2-B617-45FA-8BFC-9CBC575D655F}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
"UDP Query User{FC249D23-9B0A-442C-AFF6-4F2A07928F2F}C:\_program files\ea games\medal of honor pacific assault(tm)\mohpa.exe" = protocol=17 | dir=in | app=c:\_program files\ea games\medal of honor pacific assault(tm)\mohpa.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{02627EE5-EACA-4742-A9CC-E687631773E4}" = Nero ShowTime
"{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}" = Epson Event Manager
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{095B1DCF-5E8B-47EC-9B18-481918A731DB}" = Microsoft Default Manager
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{09C468CA-2940-466A-AAE8-DCC0C6E9323C}" = Nokia Software Updater
"{0D005F09-A5F4-473B-A901-5735C6AF5628}" = Silent Hunter 4 Wolves of the Pacific
"{0DEA94ED-915A-4834-A87E-388D012C8E02}" = Medal of Honor Allied Assault
"{0EABFEF6-6D10-4C12-8667-3029C481D355}" = Nokia Photos
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{127B684B-A002-44C8-99A7-6CF8F1E26873}" = PunkBuster für Battlefield 1942
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19DC9559-9C20-4A46-A67D-7ECBA52A2788}" = Nokia PC Suite
"{1B9B5B3B-28E7-4E59-A80D-D670AA984514}" = Nokia Connectivity Cable Driver
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{1FECF5F8-8E75-432C-9FF7-1C04F1956B54}" = Realtek Ethernet Network Card Diagnostic tool for Windows Vista
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{235BBFC6-D863-4066-A01A-3BD504C31031}" = Nero 7 Premium
"{25F28E39-FDBB-11DB-8314-0800200C9A66}" = Medal of Honor Airborne
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 13
"{2A697B53-0DE3-42DA-B41D-C3F804B1C538}" = iTunes
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{2DC94AFD-A6E2-4AB4-9132-4A3F8E07B386}" = Apple Application Support
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3138EAD3-700B-4A10-B617-B3F8096EE30D}" = Dell Edoc Viewer
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{39F58DDB-B2B8-4B86-AF20-4706A80EB30D}" = Epson Easy Photo Print 2
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4377F918-E6C9-4ECA-A7F5-754B310B7ED8}" = Sid Meier's Civilization 4
"{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update
"{4E1CD3D5-D4EE-4246-AE24-F0FD5A60390D}" = OviMPlatform
"{50D25574-2C48-4AEC-8FFC-32AEAD2EAEFF}" = Nokia Ovi Player
"{566BAEC0-74CB-4ACC-9E18-8779AC974FB0}" = Windows Live Toolbar
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}" = Medal of Honor Pacific Assault(tm)
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{5A166C0B-9557-4364-A057-F946D674E6AC}" = Windows Live Mail
"{5D9BE3C1-8BA4-4E7E-82FD-9F74FA6815D1}" = Nero Vision Help
"{5E08ECD1-C98E-4711-BF65-8FD736B3F969}" = Nero RescueAgent Help
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{60C731FB-C951-41CE-AD41-8E54C8594609}" = Nero Disc Copy Gadget Help
"{60DED9C2-22BF-47A3-B6C8-6B141BA31DFD}" = Ovi Desktop Sync Engine
"{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner
"{65F1CF63-31E0-450B-96F3-4A88BE7361A6}" = AGEIA PhysX v7.07.09
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}" = Battlefield 1942
"{6B96DADA-1A27-4A04-8CB2-CC45168D05FA}" = Windows Live Fotogalerie
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{70B31335-50EE-4834-8431-27412CDE62BD}" = Nokia_Multimedia_Common_Components_2_5
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{81821BF8-DA20-4F8C-AA87-F70A274828D4}" = Windows Live Writer
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{835686C5-8650-49EB-8CA0-4528B4035495}" = Windows Live Call
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}" = Windows Live Messenger
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8C1E2925-14F8-45AA-B999-1E2A74BF5607}" = Windows Live Sync
"{8c52bc34-3a29-4694-8907-4d380524a6ca}" = Nero 9 Essentials
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A0D65C73-F2C5-432F-8788-90F8A2E99B98}" = Nokia Ovi Suite Software Updater
"{A2433A63-5F5D-40E5-B529-9123C2B3E734}" = Anno 1701
"{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.3 - Deutsch
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B2D55EB8-32C5-4B43-9006-9E97DECBA178}" = Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B73B4A99-4173-4747-BBEC-0F05E966F9D2}" = Battlefield 1942: Secret Weapons of WWII
"{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit
"{B935C985-A17F-484B-8470-09E4FC27DC26}" = Dell-eBay
"{BA8A4718-D307-4647-A87A-305980D685FD}_is1" = Arsenal of Democracy
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C73F2967-062E-48F2-A462-D335B8950183}" = Safari
"{C768790F-04FB-11E0-9B2C-001AA037B01E}" = Google Earth
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE96F5A5-584D-4F8F-AA3E-9BAED413DB72}" = Nero CoverDesigner Help
"{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}" = Sid Meier's Civilization 4
"{D057AA08-8CBF-42E3-9EAB-23B8FED1C279}" = Battlefield 1942: The Road To Rome
"{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"{D24DDB61-8868-46CF-BC36-BECC1674F0C1}" = Creative ZEN
"{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}" = Nero ShowTime
"{DC19A2BC-9698-430E-AD50-456B837B1BCD}" = GoGear SA018 Device Manager
"{DCD22647-6D31-479D-8F97-16D0AA934D9E}" = PC Connectivity Solution
"{DEE1E2E5-B553-4F88-9DE7-23CBEA5D739C}" = Nokia Ovi Suite
"{DF5F687F-8018-4542-9F98-7084E9022917}" = Windows Live Essentials
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E498385E-1C51-459A-B45F-1721E37AA1A0}" = Movie Templates - Starter Kit
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{EF36A836-BF89-4A4F-B079-057B0C68C1E0}" = Sid Meier's Civilization IV Colonization
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1861F30-3419-44DB-B2A1-C274825698B3}" = Nero Disc Copy Gadget
"{F3C1DE9E-5E16-4BA9-B854-7B53A45E3579}" = Cisco Systems VPN Client 5.0.05.0290
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{F6BDD7C5-89ED-4569-9318-469AA9732572}" = Nero BurnRights Help
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"{F9000000-0018-0000-0000-074957833700}" = ABBYY FineReader 9.0 Sprint
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows-Treiberpaket - Nokia Modem  (02/15/2007 3.1)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
"ABBYY FineReader 9.0 Sprint" = ABBYY FineReader 9.0 Sprint
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AudibleManager" = AudibleManager
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"B726756F5B5A5AA9D798B399386FC6205A45F19E" = Windows-Treiberpaket - Nokia Modem  (02/15/2007 3.1)
"CD8424B9400BFF7D34AA18F816C71322AC4BDAA7" = Windows-Treiberpaket - Nokia Modem  (05/24/2007 6.84.0.1)
"Combat Arms" = Combat Arms
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"DivX Setup.divx.com" = DivX-Setup
"DVDVideoSoft Toolbar" = DVDVideoSoft Toolbar
"EPSON Scanner" = EPSON Scan
"EPSON SX218 Series" = EPSON SX218 Series Printer Uninstall
"EPSON SX218 Series Manual" = EPSON SX218 Series Handbuch
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free Studio_is1" = Free Studio version 4.8
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.3
"Google Chrome" = Google Chrome
"GoToAssist" = GoToAssist 8.0.0.514
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mount&Blade" = Mount&Blade
"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)
"Napoleon's Campaigns_is1" = Napoleon's Campaigns 1.05a
"Nokia Ovi Suite" = Nokia Ovi Suite
"Nokia PC Suite" = Nokia PC Suite
"NVIDIA Drivers" = NVIDIA Drivers
"Steam App 48700" = Mount and Blade: Warband
"Steam App 8930" = Sid Meier's Civilization V
"SysInfo" = Creative Systeminformationen
"Tropico3" = Tropico 3 1.00
"Uninstall_is1" = Uninstall 1.0.0.1
"VLC media player" = VLC media player 1.0.1
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"ZENcast Organizer" = ZENcast Organizer
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 17.04.2011 05:07:37 | Computer Name = Holger-PC | Source = Windows Search Service | ID = 7040
Description = 
 
Error - 17.04.2011 05:07:37 | Computer Name = Holger-PC | Source = Windows Search Service | ID = 9002
Description = 
 
Error - 17.04.2011 05:07:37 | Computer Name = Holger-PC | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 17.04.2011 05:07:38 | Computer Name = Holger-PC | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 17.04.2011 05:07:38 | Computer Name = Holger-PC | Source = Windows Search Service | ID = 3028
Description = 
 
Error - 17.04.2011 05:07:38 | Computer Name = Holger-PC | Source = Windows Search Service | ID = 3058
Description = 
 
Error - 17.04.2011 05:07:52 | Computer Name = Holger-PC | Source = Windows Search Service | ID = 7040
Description = 
 
Error - 17.04.2011 05:08:14 | Computer Name = Holger-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 17.04.2011 05:12:49 | Computer Name = Holger-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung CijYFJMKlQ.exe, Version 3.0.1.1, Zeitstempel
 0x21475346, fehlerhaftes Modul USER32.dll, Version 6.0.6002.18005, Zeitstempel 
0x49e0380e, Ausnahmecode 0xc0000409, Fehleroffset 0x00065276,  Prozess-ID 0xec8, Anwendungsstartzeit
 01cbfcdee5763314.
 
Error - 17.04.2011 07:21:35 | Computer Name = Holger-PC | Source = WinMgmt | ID = 10
Description = 
 
[ System Events ]
Error - 17.04.2011 07:25:10 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 17.04.2011 07:25:40 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 17.04.2011 07:25:43 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 17.04.2011 07:25:44 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 17.04.2011 07:25:44 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 17.04.2011 08:30:32 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7034
Description = 
 
Error - 17.04.2011 08:31:37 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 17.04.2011 08:37:13 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7022
Description = 
 
Error - 17.04.2011 10:48:43 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7034
Description = 
 
Error - 17.04.2011 11:14:59 | Computer Name = Holger-PC | Source = Service Control Manager | ID = 7034
Description = 
 
 
< End of report >
         
--- --- ---

Antwort

Themen zu TR/Kazy.mekml.1
andere, anzeige, anzeigen, bereits, dateien, desktop, gefunde, hallo zusammen, markusg, nicht mehr, ordner, ordneroptionen, pc spinnt, schei, sichtbar, spinn, spinnt, tr/kazy.mekml.1, troja, trojaner, verknüpfungen, versteckte, versteckte ordner, vivaldi, zusammen, ändern




Ähnliche Themen: TR/Kazy.mekml.1


  1. TR/Kazy.mekml.1 ; 'TR/FakeSysdef.A.621 ; 'TR/Kazy.22847'..
    Log-Analyse und Auswertung - 15.05.2011 (33)
  2. TR/Kazy.mekml.1 - was tun?
    Plagegeister aller Art und deren Bekämpfung - 12.05.2011 (5)
  3. TR/Kazy.mekml.1
    Log-Analyse und Auswertung - 06.05.2011 (1)
  4. Tr/kazy.mekml.1
    Log-Analyse und Auswertung - 03.05.2011 (13)
  5. TR/Kazy.mekml.1
    Plagegeister aller Art und deren Bekämpfung - 02.05.2011 (2)
  6. TR/Kazy.mekml.1
    Plagegeister aller Art und deren Bekämpfung - 01.05.2011 (37)
  7. TR/Kazy.mekml.1 - OTL Fix?
    Log-Analyse und Auswertung - 01.05.2011 (17)
  8. TR/Kazy.mekml.1 ... SOS
    Plagegeister aller Art und deren Bekämpfung - 30.04.2011 (34)
  9. TR/kazy.mekml.1
    Plagegeister aller Art und deren Bekämpfung - 29.04.2011 (10)
  10. TR/kazy.mekml.1
    Mülltonne - 26.04.2011 (0)
  11. TR/Kazy.mekml.1
    Log-Analyse und Auswertung - 26.04.2011 (1)
  12. Osterei: TR/Kazy.mekml.1 und TR/Kazy.20364
    Log-Analyse und Auswertung - 25.04.2011 (1)
  13. tr/kazy.mekml.1
    Plagegeister aller Art und deren Bekämpfung - 23.04.2011 (9)
  14. kazy.mekml.1
    Log-Analyse und Auswertung - 23.04.2011 (3)
  15. TR/Kazy.mekml.1
    Plagegeister aller Art und deren Bekämpfung - 22.04.2011 (6)
  16. TR/kazy.mekml.1
    Log-Analyse und Auswertung - 20.04.2011 (16)
  17. TR/Kazy.mekml.1
    Plagegeister aller Art und deren Bekämpfung - 18.04.2011 (4)

Zum Thema TR/Kazy.mekml.1 - OTL EXTRAS Logfile: Code: Alles auswählen Aufklappen ATTFilter OTL Extras logfile created on: 17.04.2011 17:59:48 - Run 3 OTL by OldTimer - Version 3.2.22.3 Folder = c:\Users\Holger\Downloads Windows Vista Home - TR/Kazy.mekml.1...
Archiv
Du betrachtest: TR/Kazy.mekml.1 auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.