kazy.mekml.1 auch bei mir :(

Carolinchen · 21.04.2011, 16:33

So der blöde Trojaner ist auch bei mir. Wollte, wie schon an anderen Stellen erwähnt, das mit OTL machen, aber ich kann da nichts in das Textfeld kopieren, weil es mir sagt aufgrund meiner überfüllten Festplatte, könne ich nichts zwischenspeichern

Okay komischerweise konnte ich es aber für hier zwischenspeichern:OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 21.04.2011 17:36:21 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Downloads\Software
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19048)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 53,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 94,16 Gb Total Space | 34,30 Gb Free Space | 36,43% Space Free | Partition Type: NTFS
Drive D: | 195,14 Gb Total Space | 195,05 Gb Free Space | 99,95% Space Free | Partition Type: NTFS
Drive E: | 4,02 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: CARO-PC | User Name: Caro | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\downloads\Software\OTL(2).exe (OldTimer Tools)
PRC - C:\ProgramData\MRtPNAFMRSnT.exe (WinTrust)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\Google\Google Toolbar\GoogleToolbarUser_32.exe (Google Inc.)
PRC - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\Free Download Manager\fdm.exe (FreeDownloadManager.ORG)
PRC - C:\Programme\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\OEM\OSD_1.16\osd.exe (ODM)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Programme\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe (Fujitsu Siemens Computers)
PRC - C:\Programme\OEM\OSD_1.16\OsdService.exe (TODO: <公司名稱>)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\downloads\Software\OTL(2).exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (TestHandler) -- C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe (Fujitsu Siemens Computers)
SRV - (OsdService) -- C:\Programme\OEM\OSD_1.16\OsdService.exe (TODO: <公司名稱>)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (BT848) -- C:\Windows\System32\drivers\BT848.sys (Illusion & Hope.)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (GpdDevDPort) -- C:\Windows\System32\directport.sys ()
DRV - (ahcix86s) -- C:\Windows\system32\drivers\ahcix86s.sys (AMD Technologies Inc.)
DRV - (JRAID) -- C:\Windows\system32\drivers\jraid.sys (JMicron Technology Corp.)
DRV - (GpdKbFilter) -- C:\Windows\System32\kbfiltr.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation                                            )
DRV - (FWLANUSB) -- C:\Windows\System32\drivers\fwlanusb.sys (AVM GmbH)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=FUJD&bmod=FUJD
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=FUJD&bmod=FUJD
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=FUJD&bmod=FUJD
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-168406859-3389016578-260752765-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKU\S-1-5-21-168406859-3389016578-260752765-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-168406859-3389016578-260752765-1000\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-168406859-3389016578-260752765-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-168406859-3389016578-260752765-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-168406859-3389016578-260752765-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "ClipGrab Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2536373&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.5.8.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.6.20090220
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.10.02 20:24:48 | 000,000,000 | -H-D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.10.10 21:46:53 | 000,000,000 | -H-D | M]
 
[2010.10.01 23:57:02 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Caro\AppData\Roaming\mozilla\Extensions
[2011.04.20 20:50:38 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles\p34cu4gd.default\extensions
[2010.10.02 11:31:43 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles\p34cu4gd.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.10.02 11:31:43 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles\p34cu4gd.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011.04.05 20:30:59 | 000,000,000 | -H-D | M] (FastestTube) -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles\p34cu4gd.default\extensions\{6C8B07BF-0F6D-4EA4-B96F-FF1CCBAAE553}
[2011.04.20 20:50:39 | 000,000,000 | -H-D | M] ("ICQ Toolbar") -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles\p34cu4gd.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.10.02 11:31:43 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles\p34cu4gd.default\extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}
[2010.10.02 00:00:16 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles(108)\yddzplkd.default\extensions
[2010.10.02 00:00:16 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles(108)\yddzplkd.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.10.02 00:00:15 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Caro\AppData\Roaming\mozilla\Firefox\Profiles(108)\yddzplkd.default\extensions\staged-xpis
[2010.05.12 17:40:48 | 000,001,042 | -H-- | M] () -- C:\Users\Caro\AppData\Roaming\Mozilla\Firefox\Profiles\p34cu4gd.default\searchplugins\icqplugin.xml
[2011.01.12 17:31:51 | 000,000,000 | -H-D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2010.04.25 11:45:05 | 000,000,000 | -H-D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.07.22 00:39:28 | 000,000,000 | -H-D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{AB2CE124-6272-4B12-94A9-7303C7397BD1}
[2009.09.20 16:58:31 | 000,000,000 | -H-D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
[2010.04.25 11:45:05 | 000,000,000 | -H-D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.04.12 17:29:19 | 000,411,368 | -H-- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.09.14 23:32:39 | 000,001,392 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.09.14 23:32:39 | 000,002,344 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.09.14 23:32:39 | 000,006,805 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.07.21 22:48:20 | 000,003,803 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\MyHeritage.xml
[2010.09.14 23:32:39 | 000,001,178 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.09.14 23:32:39 | 000,001,105 | -H-- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | -H-- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (FastestTubeBHO Class) - {3E532CE8-C6D9-4A10-8ACE-4348C96E8B6A} - C:\Programme\FastestTube\1.2.12\WombatBHO.dll (Kwizzu)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Programme\Free Download Manager\iefdm2.dll ()
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKU\S-1-5-21-168406859-3389016578-260752765-1000\..\Toolbar\WebBrowser: (no name) - {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AVMWlanClient]  File not found
O4 - HKLM..\Run: [FSCRecovery] c:\Programme\Fujitsu Siemens Computers\Fujitsu Siemens Computers Recovery\FSCRecoveryReminder.exe (Fujitsu Siemens Computers GmbH)
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [NPCTray]  File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OSD] C:\Programme\OEM\OSD_1.16\osd.exe (ODM)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\Run: [fsc-reg]  File not found
O4 - HKU\S-1-5-18..\Run: [fsc-reg]  File not found
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-168406859-3389016578-260752765-1000..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe (FreeDownloadManager.ORG)
O4 - HKU\S-1-5-21-168406859-3389016578-260752765-1000..\Run: [ICQ] C:\Program Files\ICQ7.4\ICQ.exe (ICQ, LLC.)
O4 - HKU\S-1-5-21-168406859-3389016578-260752765-1000..\Run: [MRtPNAFMRSnT] C:\ProgramData\MRtPNAFMRSnT.exe (WinTrust)
O4 - HKU\S-1-5-21-168406859-3389016578-260752765-1000..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-168406859-3389016578-260752765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O8 - Extra context menu item: Alles mit FDM herunterladen - C:\Program Files\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Auswahl mit FDM herunterladen - C:\Program Files\Free Download Manager\dlselected.htm ()
O8 - Extra context menu item: Datei mit FDM herunterladen - C:\Program Files\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll (Google Inc.)
O8 - Extra context menu item: Videos mit FDM herunterladen - C:\Program Files\Free Download Manager\dlfvideo.htm ()
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Programme\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Programme\ICQ7.4\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-168406859-3389016578-260752765-1000\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-168406859-3389016578-260752765-1000\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL) - C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Caro\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Caro\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | -H-- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{6a9e5457-9e54-11de-ac31-00030dc316d7}\Shell - "" = AutoRun
O33 - MountPoints2\{6a9e5457-9e54-11de-ac31-00030dc316d7}\Shell\AutoRun\command - "" = F:\pushinst.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.04.21 17:21:14 | 000,000,000 | -H-D | C] -- C:\Users\Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
[2011.04.21 16:17:15 | 000,000,000 | -H-D | C] -- C:\Users\Caro\Desktop\Neuer Ordner
[2011.04.21 15:55:46 | 000,000,000 | -H-D | C] -- C:\Users\Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Recovery
[2011.04.21 14:34:07 | 000,569,344 | -H-- | C] (WinTrust) -- C:\ProgramData\MRtPNAFMRSnT.exe
[2011.04.21 14:34:02 | 000,569,344 | -H-- | C] (WinTrust) -- C:\Users\Caro\Desktop\test.exe
[2011.04.20 20:50:48 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.4
[2011.04.20 20:50:03 | 000,000,000 | -H-D | C] -- C:\Programme\ICQ7.4
[2011.04.19 20:03:31 | 000,000,000 | -H-D | C] -- C:\Users\Caro\Desktop\Mein neuer Kleiderschrank
[2011.04.17 22:59:03 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.04.14 23:42:11 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011.04.14 23:42:11 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011.04.14 23:42:04 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011.04.14 23:42:04 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.04.14 23:42:03 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.04.14 23:42:03 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011.04.14 23:42:03 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.04.14 23:42:03 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.04.14 23:42:03 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.04.14 23:42:03 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011.04.14 23:42:03 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.04.14 23:42:03 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011.04.14 23:42:03 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011.04.14 23:42:03 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011.04.14 23:42:03 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011.04.14 23:42:03 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.04.14 23:42:03 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.04.14 23:42:03 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.04.14 23:42:03 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.04.14 23:41:58 | 001,161,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011.04.14 23:41:58 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011.04.14 23:41:55 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011.04.14 23:41:52 | 002,040,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.04.14 23:41:50 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.04.14 23:41:50 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.04.13 19:27:29 | 000,000,000 | -H-D | C] -- C:\Users\Caro\Desktop\Eigene Wohnung
[2011.04.12 21:13:38 | 000,000,000 | -H-D | C] -- C:\Users\Caro\Desktop\Mein Schwedenhaus
[2011.04.09 12:48:05 | 000,000,000 | -H-D | C] -- C:\Users\Caro\Desktop\Sommer 2011
[2011.04.09 12:09:57 | 000,000,000 | -H-D | C] -- C:\Users\Caro\Desktop\ORDENER
[2011.04.05 20:48:06 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamAlert
[2011.04.05 20:34:13 | 000,371,349 | -H-- | C] (Illusion & Hope.) -- C:\Windows\System32\drivers\BT848.sys
[2011.04.05 20:31:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastestTube
[2011.04.05 20:30:59 | 000,000,000 | -H-D | C] -- C:\ProgramData\WombatUpdater
[2011.04.05 20:30:59 | 000,000,000 | -H-D | C] -- C:\Programme\FastestTube
[2011.04.05 20:30:58 | 000,000,000 | -H-D | C] -- C:\Users\Caro\AppData\Local\FastestTube
[2011.04.05 20:30:56 | 000,000,000 | -H-D | C] -- C:\Users\Caro\AppData\Roaming\Free Download Manager
[2011.04.05 20:30:56 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
[2011.04.05 20:30:54 | 000,000,000 | -H-D | C] -- C:\ProgramData\FreeDownloadManager.ORG
[2011.04.05 20:30:52 | 000,000,000 | -H-D | C] -- C:\Programme\Free Download Manager
[2011.03.29 22:21:33 | 000,000,000 | -H-D | C] -- C:\Users\Caro\AppData\Roaming\Degener
[2011.03.29 22:21:33 | 000,000,000 | -H-D | C] -- C:\ProgramData\Degener
[2011.03.29 22:21:06 | 000,000,000 | RH-D | C] -- C:\Users\Caro\AppData\Roaming\SecuROM
[2011.03.29 20:55:37 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CLICK & LEARN DiDi 360°
[2011.03.29 20:50:02 | 001,730,048 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32L8.DLL
[2011.03.29 20:50:02 | 000,905,216 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32L8OB.LLX
[2011.03.29 20:50:02 | 000,557,056 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32L8EX.LLX
[2011.03.29 20:50:02 | 000,505,344 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32CT8.DLL
[2011.03.29 20:50:02 | 000,369,664 | -H-- | C] (combit GmbH) -- C:\Windows\System32\cm32l800.lng
[2011.03.29 20:50:02 | 000,340,992 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32DW8.DLL
[2011.03.29 20:50:02 | 000,151,040 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32L8S.DLL
[2011.03.29 20:50:02 | 000,126,464 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32PR8.DLL
[2011.03.29 20:50:02 | 000,115,712 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32UT8.DLL
[2011.03.29 20:50:02 | 000,114,688 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32CR8.DLL
[2011.03.29 20:50:02 | 000,079,872 | -H-- | C] (combit GmbH) -- C:\Windows\System32\CM32MM8.DLL
[2011.03.29 20:49:59 | 000,000,000 | -H-D | C] -- C:\Programme\CLICK & LEARN DiDi 360°
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011.04.21 17:30:09 | 000,000,294 | -H-- | M] () -- C:\Windows\tasks\Updater.job
[2011.04.21 17:20:47 | 000,001,092 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.04.21 17:20:10 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.04.21 17:20:09 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.04.21 17:20:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.04.21 17:18:57 | 3215,613,952 | -HS- | M] () -- C:\hiberfil.sys
[2011.04.21 17:18:55 | 157,446,577 | -H-- | M] () -- C:\Windows\MEMORY.DMP
[2011.04.21 16:02:50 | 000,000,104 | -H-- | M] () -- C:\ProgramData\~38788872
[2011.04.21 16:02:44 | 000,000,120 | -H-- | M] () -- C:\ProgramData\~38788872r
[2011.04.21 16:02:43 | 000,000,589 | -H-- | M] () -- C:\Users\Caro\Desktop\Windows Recovery.lnk
[2011.04.21 15:52:20 | 000,000,336 | -H-- | M] () -- C:\ProgramData\38788872
[2011.04.21 14:44:03 | 000,001,096 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.04.21 14:34:07 | 000,569,344 | -H-- | M] (WinTrust) -- C:\Users\Caro\Desktop\test.exe
[2011.04.21 14:34:07 | 000,569,344 | -H-- | M] (WinTrust) -- C:\ProgramData\MRtPNAFMRSnT.exe
[2011.04.21 11:33:14 | 000,031,776 | -H-- | M] () -- C:\ProgramData\nvModes.001
[2011.04.21 11:33:13 | 000,031,776 | -H-- | M] () -- C:\ProgramData\nvModes.dat
[2011.04.21 01:25:14 | 000,149,775 | -H-- | M] () -- C:\Users\Caro\Desktop\1519682.jpg
[2011.04.20 23:30:47 | 000,010,324 | -H-- | M] () -- C:\Users\Caro\AppData\Roaming\wklnhst.dat
[2011.04.20 20:50:48 | 000,001,615 | -H-- | M] () -- C:\Users\Public\Desktop\ICQ7.4.lnk
[2011.04.17 23:50:53 | 000,317,832 | -H-- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.04.17 23:28:01 | 000,628,742 | -H-- | M] () -- C:\Windows\System32\perfh007.dat
[2011.04.17 23:28:01 | 000,595,996 | -H-- | M] () -- C:\Windows\System32\perfh009.dat
[2011.04.17 23:28:01 | 000,104,070 | -H-- | M] () -- C:\Windows\System32\perfc009.dat
[2011.04.17 23:28:00 | 000,126,454 | -H-- | M] () -- C:\Windows\System32\perfc007.dat
[2011.04.09 12:31:37 | 000,000,164 | -H-- | M] () -- C:\ProgramData\{701ACAF9-F102-47c2-8907-36246F4DFB51}
[2011.04.05 20:48:06 | 000,000,637 | -H-- | M] () -- C:\Users\Caro\Desktop\CamAlert.lnk
[2011.04.05 20:34:13 | 000,371,349 | -H-- | M] (Illusion & Hope.) -- C:\Windows\System32\drivers\BT848.sys
[2011.04.05 20:30:56 | 000,000,870 | -H-- | M] () -- C:\Users\Caro\Desktop\Free Download Manager.lnk
[2011.03.31 20:24:18 | 000,000,069 | -H-- | M] () -- C:\Windows\NeroDigital.ini
[2011.03.29 22:01:32 | 000,000,843 | -H-- | M] () -- C:\Users\Public\Desktop\CLICK & LEARN DiDi 360°.lnk
[2011.03.28 18:33:57 | 000,000,680 | -H-- | M] () -- C:\Users\Caro\AppData\Local\d3d9caps.dat
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011.04.21 16:02:44 | 000,000,120 | -H-- | C] () -- C:\ProgramData\~38788872r
[2011.04.21 16:02:43 | 000,000,589 | -H-- | C] () -- C:\Users\Caro\Desktop\Windows Recovery.lnk
[2011.04.21 15:55:49 | 000,000,104 | -H-- | C] () -- C:\ProgramData\~38788872
[2011.04.21 15:52:17 | 000,000,336 | -H-- | C] () -- C:\ProgramData\38788872
[2011.04.21 01:25:25 | 000,149,775 | -H-- | C] () -- C:\Users\Caro\Desktop\1519682.jpg
[2011.04.20 20:50:48 | 000,001,615 | -H-- | C] () -- C:\Users\Public\Desktop\ICQ7.4.lnk
[2011.04.05 20:48:06 | 000,000,637 | -H-- | C] () -- C:\Users\Caro\Desktop\CamAlert.lnk
[2011.04.05 20:30:59 | 000,000,294 | -H-- | C] () -- C:\Windows\tasks\Updater.job
[2011.04.05 20:30:56 | 000,000,870 | -H-- | C] () -- C:\Users\Caro\Desktop\Free Download Manager.lnk
[2011.03.29 22:22:39 | 000,000,164 | -H-- | C] () -- C:\ProgramData\{701ACAF9-F102-47c2-8907-36246F4DFB51}
[2011.03.29 20:55:37 | 000,000,843 | -H-- | C] () -- C:\Users\Public\Desktop\CLICK & LEARN DiDi 360°.lnk
[2011.01.10 01:07:20 | 000,000,069 | -H-- | C] () -- C:\Windows\NeroDigital.ini
[2010.10.04 22:35:51 | 000,104,540 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2010.10.02 12:54:29 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2010.07.22 00:27:38 | 000,002,560 | -H-- | C] () -- C:\Windows\_MSRSTRT.EXE
[2009.11.10 23:43:39 | 000,000,680 | -H-- | C] () -- C:\Users\Caro\AppData\Local\d3d9caps.dat
[2009.09.21 21:15:25 | 000,012,717 | RH-- | C] () -- C:\Windows\hpwscr14.dat
[2009.09.21 21:13:28 | 000,205,929 | -H-- | C] () -- C:\Windows\hpwins14.dat
[2009.09.11 00:27:17 | 000,097,312 | -H-- | C] () -- C:\Windows\System32\drivers\Fwusb1b.bin
[2009.09.08 18:17:14 | 000,023,040 | -H-- | C] () -- C:\Users\Caro\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.09.08 16:58:16 | 000,010,324 | -H-- | C] () -- C:\Users\Caro\AppData\Roaming\wklnhst.dat
[2009.01.12 05:45:40 | 000,031,776 | -H-- | C] () -- C:\ProgramData\nvModes.001
[2009.01.12 05:45:37 | 000,031,776 | -H-- | C] () -- C:\ProgramData\nvModes.dat
[2009.01.12 04:35:31 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009.01.12 04:35:31 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008.06.17 21:27:28 | 000,007,168 | -H-- | C] () -- C:\Windows\System32\directport.sys
[2008.06.09 21:02:30 | 000,001,108 | RH-- | C] () -- C:\Windows\hpwmdl14.dat
[2008.04.25 14:23:38 | 000,012,288 | -H-- | C] () -- C:\Windows\System32\EvOnlDiag.dll
[2008.01.21 09:15:58 | 000,628,742 | -H-- | C] () -- C:\Windows\System32\perfh007.dat
[2008.01.21 09:15:58 | 000,290,748 | -H-- | C] () -- C:\Windows\System32\perfi007.dat
[2008.01.21 09:15:58 | 000,126,454 | -H-- | C] () -- C:\Windows\System32\perfc007.dat
[2008.01.21 09:15:58 | 000,036,916 | -H-- | C] () -- C:\Windows\System32\perfd007.dat
[2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 14:47:37 | 000,317,832 | -H-- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 12:33:01 | 000,595,996 | -H-- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 12:33:01 | 000,287,440 | -H-- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 12:33:01 | 000,104,070 | -H-- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 12:33:01 | 000,030,674 | -H-- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 12:23:21 | 000,215,943 | -H-- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 10:19:00 | 000,000,741 | -H-- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 09:40:29 | 000,013,750 | -H-- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 09:25:31 | 000,673,088 | -H-- | C] () -- C:\Windows\System32\mlang.dat
[2005.04.06 17:27:14 | 000,237,568 | -H-- | C] () -- C:\Windows\System32\xvidvfw.dll
[2005.04.06 17:24:40 | 001,216,512 | -H-- | C] () -- C:\Windows\System32\xvidcore.dll
[1998.07.06 00:00:00 | 000,064,512 | -H-- | C] () -- C:\Windows\System32\MSCC2DE.DLL
[1997.06.14 08:56:08 | 000,056,832 | -H-- | C] () -- C:\Windows\System32\iyvu9_32.dll
 
========== LOP Check ==========
 
[2010.07.17 18:26:48 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\Amazon
[2011.03.29 22:21:34 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\Degener
[2009.11.03 15:04:11 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\FMZilla
[2011.04.21 17:39:22 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\Free Download Manager
[2011.01.24 00:20:44 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\gtk-2.0
[2009.10.24 23:34:56 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\hdbADS
[2011.04.21 17:25:17 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\ICQ
[2009.12.01 23:47:28 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\OpenOffice.org
[2009.09.11 23:43:12 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\Opera
[2010.06.04 15:00:44 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\Scribus
[2009.10.09 20:14:09 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\Synthesia
[2009.09.13 16:34:00 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\Teleca
[2009.09.21 21:33:09 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\Template
[2010.01.23 02:03:50 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\TubeBox
[2010.10.01 23:50:43 | 000,000,000 | -H-D | M] -- C:\Users\Caro\AppData\Roaming\WindSolutions
[2011.04.21 16:29:10 | 000,032,564 | -H-- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011.04.21 17:30:09 | 000,000,294 | -H-- | M] () -- C:\Windows\Tasks\Updater.job
 
========== Purity Check ==========
 
 
 
< End of report >

--- --- ---

kazy.mekml.1 auch bei mir :(

Plagegeister aller Art und deren Bekämpfung: kazy.mekml.1 auch bei mir :(

kazy.mekml.1 auch bei mir :(

Ähnliche Themen: kazy.mekml.1 auch bei mir :(