Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Rechner verseucht?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 18.04.2011, 20:59   #1
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Rechner verseucht? - Standard

Rechner verseucht?



Zitat:
Es fing damit an das ich 2 meldungen bekamm, etwas auszuführen, da ich gerade ein patch über ein spiel zog
Geht das genauer? Was für ein Patch genau? Für welches Spiel?
Was willst du mit dem Schlangenöl TuneUp?

Außerdem => Bitte beachten => http://www.trojaner-board.de/95173-b...es-posten.html und http://www.trojaner-board.de/69886-a...-beachten.html
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 20.04.2011, 00:40   #2
nadrox
 
Rechner verseucht? - Standard

Rechner verseucht?



Zitat:
Zitat von cosinus Beitrag anzeigen
Geht das genauer? Was für ein Patch genau? Für welches Spiel?
Was willst du mit dem Schlangenöl TuneUp?

Außerdem => Bitte beachten => http://www.trojaner-board.de/95173-b...es-posten.html und http://www.trojaner-board.de/69886-a...-beachten.html



Tschuldige habe das mit dem HijackThis zu spät gelesen.

Habe den Patch für das Spiel, " The Wichter " geladen.

hxxp://www.the-witcher.de/?go=comments&id=659

So habe mein System nun 3 x neugemacht, die Festplatten formatiert, aber mein Pc ist genauso belastet wie davor und den dämmlichen Porno Pop Up bekomme ich immernoch, ich habe das Gefühl opfer eines Botnetzwerk´s geworden zu sein, in meinem Fall denke ich das mein Pc so verseucht ist, das beim formatieren das Zeug nichtmal gelöscht wird habe hir was im Forum dazu gelesen.

OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 20.04.2011 02:06:37 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\fuhackerhoe\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
6,00 Gb Total Physical Memory | 5,00 Gb Available Physical Memory | 81,00% Memory free
12,00 Gb Paging File | 11,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,31 Gb Total Space | 169,40 Gb Free Space | 86,73% Space Free | Partition Type: NTFS
Drive D: | 736,10 Gb Total Space | 735,99 Gb Free Space | 99,99% Space Free | Partition Type: NTFS
 
Computer Name: FUHACKERHOE-PC | User Name: fuhackerhoe | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.04.20 02:01:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\fuhackerhoe\Desktop\OTL.exe
PRC - [2011.03.18 19:56:37 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 
========== Modules (SafeList) ==========
 
MOD - [2011.04.20 02:01:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\fuhackerhoe\Desktop\OTL.exe
MOD - [2009.07.14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2011.03.09 06:53:04 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2011.04.20 01:04:06 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.03.09 11:22:42 | 009,258,496 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011.03.09 06:17:42 | 000,300,544 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010.11.17 14:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 86 79 DC 55 C6 FE CB 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "google.de"
 
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.04.19 21:21:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2011.04.19 21:21:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fuhackerhoe\AppData\Roaming\mozilla\Extensions
[2011.04.19 21:42:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fuhackerhoe\AppData\Roaming\mozilla\Firefox\Profiles\x0ah3500.default\extensions
[2011.04.19 22:13:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.04.19 22:13:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) -- 
() (No name found) -- C:\USERS\FUHACKERHOE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X0AH3500.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011.03.18 19:56:37 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010.01.01 10:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 10:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2010.01.01 10:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.01.01 10:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.01.01 10:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.01.01 10:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
 
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.04.20 02:05:40 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.04.20 02:04:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2011.04.20 02:04:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
[2011.04.20 02:01:46 | 000,791,393 | ---- | C] (Lars Hederer                                                ) -- C:\Users\fuhackerhoe\Desktop\Erunt-setup.exe
[2011.04.20 02:01:46 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Users\fuhackerhoe\Desktop\TFC.exe
[2011.04.20 02:00:51 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Local\ElevatedDiagnostics
[2011.04.20 01:46:01 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\fuhackerhoe\Desktop\OTL.exe
[2011.04.20 00:56:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2011.04.20 00:56:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2011.04.20 00:56:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
[2011.04.20 00:53:47 | 000,000,000 | -H-D | C] -- C:\$AVG
[2011.04.20 00:35:46 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\AVG10
[2011.04.20 00:14:19 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2011.04.20 00:13:49 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG10
[2011.04.20 00:13:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG
[2011.04.20 00:12:33 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2011.04.19 23:31:53 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Stardock
[2011.04.19 23:31:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Stardock
[2011.04.19 23:17:37 | 000,000,000 | ---D | C] -- C:\Windows\W7FBC
[2011.04.19 22:50:48 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.04.19 22:37:53 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\ATI
[2011.04.19 22:37:53 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Local\ATI
[2011.04.19 22:37:53 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2011.04.19 22:37:45 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\COMODO
[2011.04.19 22:18:24 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Macromedia
[2011.04.19 22:18:24 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Adobe
[2011.04.19 22:18:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2011.04.19 22:14:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2011.04.19 22:14:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2011.04.19 22:13:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2011.04.19 22:12:36 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\DAEMON Tools Lite
[2011.04.19 22:12:36 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2011.04.19 22:12:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JDownloader
[2011.04.19 22:10:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2011.04.19 22:10:32 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\Desktop\own shit#
[2011.04.19 22:10:31 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\ATI Technologies
[2011.04.19 22:10:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2011.04.19 22:10:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
[2011.04.19 22:10:08 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\Desktop\important#
[2011.04.19 22:10:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2011.04.19 22:09:57 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies
[2011.04.19 22:09:55 | 000,000,000 | ---D | C] -- C:\Programme\ATI
[2011.04.19 22:09:30 | 000,000,000 | ---D | C] -- C:\ATI
[2011.04.19 22:02:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2011.04.19 22:02:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2011.04.19 21:55:45 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Uniblue
[2011.04.19 21:55:09 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\WinRAR
[2011.04.19 21:55:09 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.04.19 21:55:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.04.19 21:55:07 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR
[2011.04.19 21:49:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue
[2011.04.19 21:40:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo
[2011.04.19 21:21:08 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Mozilla
[2011.04.19 21:21:08 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Local\Mozilla
[2011.04.19 21:21:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2011.04.19 20:43:17 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2011.04.19 20:07:35 | 000,253,888 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.04.19 20:02:22 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Local\Diagnostics
[2011.04.19 19:53:54 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.04.19 19:53:33 | 000,000,000 | ---D | C] -- C:\Programme\Alwil Software
[2011.04.19 19:53:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2011.04.19 19:49:00 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.04.19 19:49:00 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Searches
[2011.04.19 19:49:00 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.04.19 19:48:53 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Identities
[2011.04.19 19:48:50 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Contacts
[2011.04.19 19:48:48 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Local\VirtualStore
[2011.04.19 19:48:34 | 000,000,000 | --SD | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Microsoft
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Videos
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Saved Games
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Pictures
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Music
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Links
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Favorites
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Downloads
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Documents
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\Desktop
[2011.04.19 19:48:34 | 000,000,000 | R--D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Vorlagen
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\AppData\Local\Verlauf
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\AppData\Local\Temporary Internet Files
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Startmenü
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\SendTo
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Recent
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Netzwerkumgebung
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Lokale Einstellungen
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Documents\Eigene Videos
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Documents\Eigene Musik
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Eigene Dateien
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Documents\Eigene Bilder
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Druckumgebung
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Cookies
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\AppData\Local\Anwendungsdaten
[2011.04.19 19:48:34 | 000,000,000 | -HSD | C] -- C:\Users\fuhackerhoe\Anwendungsdaten
[2011.04.19 19:48:34 | 000,000,000 | -H-D | C] -- C:\Users\fuhackerhoe\AppData
[2011.04.19 19:48:34 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Local\Temp
[2011.04.19 19:48:34 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Local\Microsoft
[2011.04.19 19:48:34 | 000,000,000 | ---D | C] -- C:\Users\fuhackerhoe\AppData\Roaming\Media Center Programs
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\Recovery
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\Programme
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2011.04.19 19:48:28 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2011.04.19 19:48:22 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.04.19 19:44:18 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011.04.19 19:43:43 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011.03.21 19:56:10 | 000,053,760 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011.03.21 19:56:06 | 000,051,712 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.04.20 02:04:39 | 000,000,928 | ---- | M] () -- C:\Users\fuhackerhoe\Desktop\NTREGOPT.lnk
[2011.04.20 02:04:39 | 000,000,909 | ---- | M] () -- C:\Users\fuhackerhoe\Desktop\ERUNT.lnk
[2011.04.20 02:03:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.04.20 02:03:20 | 529,879,039 | -HS- | M] () -- C:\hiberfil.sys
[2011.04.20 02:02:22 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.04.20 02:02:22 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.04.20 02:01:48 | 000,791,393 | ---- | M] (Lars Hederer                                                ) -- C:\Users\fuhackerhoe\Desktop\Erunt-setup.exe
[2011.04.20 02:01:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\fuhackerhoe\Desktop\OTL.exe
[2011.04.20 02:01:48 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Users\fuhackerhoe\Desktop\TFC.exe
[2011.04.20 02:01:33 | 000,377,260 | ---- | M] () -- C:\Users\fuhackerhoe\Desktop\Load.exe
[2011.04.20 01:59:41 | 001,472,002 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.04.20 01:59:41 | 000,643,628 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.04.20 01:59:41 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.04.20 01:59:41 | 000,126,188 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.04.20 01:59:41 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.04.20 01:11:42 | 000,007,601 | ---- | M] () -- C:\Users\fuhackerhoe\AppData\Local\Resmon.ResmonCfg
[2011.04.20 00:57:01 | 000,000,917 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2011.04.19 23:48:35 | 000,000,272 | ---- | M] () -- C:\Windows\SysNative\drivers\sfi.dat
[2011.04.19 22:37:19 | 000,275,192 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.04.19 22:37:12 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2011.04.19 21:21:05 | 000,001,138 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.04.19 21:18:59 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2011.04.19 19:46:57 | 000,052,953 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2011.04.19 19:46:57 | 000,052,953 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2011.04.19 19:45:36 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.04.18 19:25:00 | 000,253,888 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.03.21 19:56:26 | 000,061,952 | ---- | M] () -- C:\Windows\SysNative\OVDecode64.dll
[2011.03.21 19:56:22 | 000,059,904 | ---- | M] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.03.21 19:56:10 | 000,053,760 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011.03.21 19:56:06 | 000,051,712 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
 
========== Files Created - No Company Name ==========
 
[2011.04.20 02:04:39 | 000,000,928 | ---- | C] () -- C:\Users\fuhackerhoe\Desktop\NTREGOPT.lnk
[2011.04.20 02:04:39 | 000,000,909 | ---- | C] () -- C:\Users\fuhackerhoe\Desktop\ERUNT.lnk
[2011.04.20 02:01:33 | 000,377,260 | ---- | C] () -- C:\Users\fuhackerhoe\Desktop\Load.exe
[2011.04.20 01:11:42 | 000,007,601 | ---- | C] () -- C:\Users\fuhackerhoe\AppData\Local\Resmon.ResmonCfg
[2011.04.20 00:58:54 | 000,035,048 | ---- | C] () -- C:\Windows\explorev4.bmp
[2011.04.20 00:57:01 | 000,000,917 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2011.04.19 23:48:35 | 000,000,272 | ---- | C] () -- C:\Windows\SysNative\drivers\sfi.dat
[2011.04.19 22:37:12 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.04.19 22:12:37 | 000,001,970 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2011.04.19 22:12:37 | 000,001,949 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
[2011.04.19 22:12:37 | 000,001,928 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2011.04.19 21:21:05 | 000,001,150 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011.04.19 21:21:05 | 000,001,138 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.04.19 19:55:00 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2011.04.19 19:49:05 | 000,001,409 | ---- | C] () -- C:\Users\fuhackerhoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011.04.19 19:49:02 | 000,001,443 | ---- | C] () -- C:\Users\fuhackerhoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011.04.19 19:46:53 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011.04.19 19:46:51 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011.04.19 19:45:36 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.04.19 19:43:43 | 529,879,039 | -HS- | C] () -- C:\hiberfil.sys
[2011.03.21 19:56:26 | 000,061,952 | ---- | C] () -- C:\Windows\SysNative\OVDecode64.dll
[2011.03.21 19:56:22 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011.01.13 05:03:18 | 000,003,155 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
 
========== LOP Check ==========
 
[2011.04.20 00:35:46 | 000,000,000 | ---D | M] -- C:\Users\fuhackerhoe\AppData\Roaming\AVG10
[2011.04.19 22:13:52 | 000,000,000 | ---D | M] -- C:\Users\fuhackerhoe\AppData\Roaming\DAEMON Tools Lite
[2011.04.19 21:55:45 | 000,000,000 | ---D | M] -- C:\Users\fuhackerhoe\AppData\Roaming\Uniblue
[2009.07.14 07:08:49 | 000,002,646 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.04.20 00:53:47 | 000,000,000 | -H-D | M] -- C:\$AVG
[2011.04.19 19:48:50 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2011.04.19 22:09:30 | 000,000,000 | ---D | M] -- C:\ATI
[2011.04.20 01:55:05 | 000,000,000 | -HSD | M] -- C:\Config.Msi
[2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.04.19 19:48:28 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2011.04.20 00:01:04 | 000,000,000 | R--D | M] -- C:\Programme
[2011.04.20 02:04:39 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2011.04.20 00:14:19 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.04.19 19:48:28 | 000,000,000 | -HSD | M] -- C:\Programme
[2011.04.19 19:48:28 | 000,000,000 | -HSD | M] -- C:\Recovery
[2011.04.20 02:06:59 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.04.19 19:48:33 | 000,000,000 | R--D | M] -- C:\Users
[2011.04.20 02:05:40 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: EXPLORER.EXE  >
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\SysWOW64\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
 
< MD5 for: USERINIT.EXE  >
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\SysNative\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >
         
--- --- ---

OTL Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 20.04.2011 02:06:37 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\fuhackerhoe\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
6,00 Gb Total Physical Memory | 5,00 Gb Available Physical Memory | 81,00% Memory free
12,00 Gb Paging File | 11,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,31 Gb Total Space | 169,40 Gb Free Space | 86,73% Space Free | Partition Type: NTFS
Drive D: | 736,10 Gb Total Space | 735,99 Gb Free Space | 99,99% Space Free | Partition Type: NTFS
 
Computer Name: FUHACKERHOE-PC | User Name: fuhackerhoe | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{40B91513-A7B9-94AB-5353-926FB1C07334}" = WMV9/VC-1 Video Playback
"{47B188E2-2447-5C40-15B6-9D49DC90BF5B}" = ATI Catalyst Install Manager
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{8A61B820-598D-05B2-5F8D-7388E15AE2DB}" = AMD Drag and Drop Transcoding
"{D7B6A47A-3DC9-64FE-BFD0-ED02F036D539}" = ccc-utility64
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
"WinRAR archiver" = WinRAR 4.00 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{19A492A0-888F-44A0-9B21-D91700763F62}" = Catalyst Control Center - Branding
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java(TM) 6 Update 24
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{8E884205-E3A3-55F3-2EE2-0E39F8E6CCED}" = Catalyst Control Center Graphics Previews Common
"{9329BA0E-DD91-D33E-B73F-AA5179C53736}" = Catalyst Control Center
"{BD5D6437-94F6-C8F4-AF1B-B1658E0CB8F7}" = CCC Help English
"{F38556C1-486C-C07B-4655-2F1BCF18C68A}" = Catalyst Control Center InstallProxy
"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables
"1489-3350-5074-6281" = JDownloader 0.9
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ERUNT_is1" = ERUNT 1.1j
"Mozilla Firefox 4.0 (x86 de)" = Mozilla Firefox 4.0 (x86 de)
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 19.04.2011 18:56:47 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddWin32ServiceFiles: Unable to back up image of service
 COMODO Internet Security Helper Service since QueryServiceConfig API failed  System
 Error: Das System kann die angegebene Datei nicht finden.  .
 
Error - 19.04.2011 19:02:09 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddLegacyDriverFiles: Unable to back up image of binary
 COMODO Internet Security Sandbox Driver.  System Error: Das System kann die angegebene
 Datei nicht finden.  .
 
Error - 19.04.2011 19:02:09 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddLegacyDriverFiles: Unable to back up image of binary
 COMODO Internet Security Helper Driver.  System Error: Das System kann die angegebene
 Datei nicht finden.  .
 
Error - 19.04.2011 19:02:10 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddWin32ServiceFiles: Unable to back up image of service
 COMODO Internet Security Helper Service since QueryServiceConfig API failed  System
 Error: Das System kann die angegebene Datei nicht finden.  .
 
Error - 19.04.2011 19:52:49 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddLegacyDriverFiles: Unable to back up image of binary
 COMODO Internet Security Sandbox Driver.  System Error: Das System kann die angegebene
 Datei nicht finden.  .
 
Error - 19.04.2011 19:52:49 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddLegacyDriverFiles: Unable to back up image of binary
 COMODO Internet Security Helper Driver.  System Error: Das System kann die angegebene
 Datei nicht finden.  .
 
Error - 19.04.2011 19:52:49 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddWin32ServiceFiles: Unable to back up image of service
 COMODO Internet Security Helper Service since QueryServiceConfig API failed  System
 Error: Das System kann die angegebene Datei nicht finden.  .
 
Error - 19.04.2011 19:53:34 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddLegacyDriverFiles: Unable to back up image of binary
 COMODO Internet Security Sandbox Driver.  System Error: Das System kann die angegebene
 Datei nicht finden.  .
 
Error - 19.04.2011 19:53:34 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddLegacyDriverFiles: Unable to back up image of binary
 COMODO Internet Security Helper Driver.  System Error: Das System kann die angegebene
 Datei nicht finden.  .
 
Error - 19.04.2011 19:53:34 | Computer Name = fuhackerhoe-PC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddWin32ServiceFiles: Unable to back up image of service
 COMODO Internet Security Helper Service since QueryServiceConfig API failed  System
 Error: Das System kann die angegebene Datei nicht finden.  .
 
[ System Events ]
Error - 19.04.2011 17:48:45 | Computer Name = fuhackerhoe-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "COMODO Internet Security Helper Service" wurde aufgrund
 folgenden Fehlers nicht gestartet:   %%2
 
Error - 19.04.2011 19:04:11 | Computer Name = fuhackerhoe-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
 Steam Client Service erreicht.
 
Error - 19.04.2011 19:04:11 | Computer Name = fuhackerhoe-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1053
 
 
< End of report >
         
--- --- ---


PS : Habe das System heute erst 2 x neu aufgesetzt, habe aber das Gefühl das Problem ist nicht bereinigt da der Porno Pop Up nach gefühlten 2minuten im I-net (Wo ich neuste Antiviurs Software runterladen wollte) wieder aufging, habe nun alles mögliche an Anti-Viren Programmen versucht, vlt findet ihr was. Mir fällt auf das mein Pc seid gestern (Gestern wurde er verseucht) bei kleinen Anwendungen schon Geräusche macht wie mein alter Pc es beim entpacken von zb 5gig Winrar Datein getatn hat. Mit diesem System konnte ich bis Dato zb Crysis spielen und im Hintergrund schwere Datein entpacken ohne diese Geräusche, das er hart zu tun hat. Kann das nicht besser ausdrücken verzeiht bitte. Ich hoffe ihr könnt mir mit diesen Daten nun helfen.

LG
__________________


Geändert von nadrox (20.04.2011 um 01:22 Uhr)

Antwort

Themen zu Rechner verseucht?
avira, bho, bingbar, exe, festplatte, firefox, google, grafikkarte, helper, hijack, hijackthis, internet, internet explorer, kaspersky, langsam, log, log file, logfile, mein log, mozilla, musik, plug-in, pop ups, programme, rechner verseucht, software, syswow64, ups, virus, windows




Ähnliche Themen: Rechner verseucht?


  1. Ist mei Rechner verseucht?
    Plagegeister aller Art und deren Bekämpfung - 30.10.2015 (13)
  2. Glaube, mein Rechner ist verseucht.
    Plagegeister aller Art und deren Bekämpfung - 03.06.2015 (11)
  3. DHL Paketankündigung - Link angeklickt - Rechner verseucht?
    Log-Analyse und Auswertung - 27.05.2015 (17)
  4. Neuer Rechner, direkt verseucht
    Plagegeister aller Art und deren Bekämpfung - 26.01.2015 (3)
  5. Rechner scheint verseucht!
    Plagegeister aller Art und deren Bekämpfung - 11.06.2014 (13)
  6. Rechner verseucht, werde den Trojaner nicht los.
    Plagegeister aller Art und deren Bekämpfung - 18.03.2011 (14)
  7. Rechner verseucht, AntiVir scheitert
    Plagegeister aller Art und deren Bekämpfung - 16.03.2011 (12)
  8. Rechner verseucht ? macht was er will
    Antiviren-, Firewall- und andere Schutzprogramme - 06.09.2010 (6)
  9. Rechner noch verseucht?
    Plagegeister aller Art und deren Bekämpfung - 13.01.2010 (46)
  10. Hilfe mein Rechner ist verseucht!!!
    Mülltonne - 31.10.2008 (0)
  11. Rechner/Laptop verseucht? Neuinstallation nötig?
    Plagegeister aller Art und deren Bekämpfung - 02.09.2008 (15)
  12. Rechner verseucht???
    Log-Analyse und Auswertung - 15.08.2007 (18)
  13. Ist mein Rechner verseucht?
    Log-Analyse und Auswertung - 18.03.2007 (6)
  14. Rechner ist vollkommen verseucht
    Log-Analyse und Auswertung - 09.04.2006 (3)
  15. Bitte um Hilfe - Rechner total verseucht!
    Log-Analyse und Auswertung - 02.06.2005 (11)
  16. Hilfe - Rechner verseucht
    Plagegeister aller Art und deren Bekämpfung - 10.05.2005 (3)
  17. hilfe mein rechner ist verseucht
    Plagegeister aller Art und deren Bekämpfung - 08.11.2003 (2)

Zum Thema Rechner verseucht? - Zitat: Es fing damit an das ich 2 meldungen bekamm, etwas auszuführen, da ich gerade ein patch über ein spiel zog Geht das genauer? Was für ein Patch genau? Für - Rechner verseucht?...
Archiv
Du betrachtest: Rechner verseucht? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.