![]() |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Msn verschickt Spam!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
| |
| | #1 |
![]() | Msn verschickt Spam! Ich weiss das das hier schon diskutiert wurde, aber ich habe nichts gefunden, dass auf meinen Fall zutrifft. Es ist so: Ich habe vor ein paar Tagen von einem Freund eine E-Mail bekommen, diese hat einen Link enthalten, ich Dummkopf habe aus Neugier drauf geklickt. Ich kam dann auf eine Seite bei der man Viagra und andere Medikamente bestellen kann. Ich bin dann sofort wieder weg von dieser Seite. Jetzt ein paar Tage später, finde ich in meinem Posteingang Nachrichten, die sagen, dass eine E-Mail an etwa zehn meiner Kontakte nicht versendet werden konnte. Die E-Mail enthätl auch den Link, der auf die Seite mit den Medikamenten führt. Dann ein paar Stunden später erhalte ich eine E-Mail von mir selbst, da ich mich selbst auch als Kontakt habe, in der dieser Li9nk auch wieder drin ist. Nun anschliessend habe i9ch mich im Internet etwas erkundigt und mein Passwort geändert. Hier im Forum steht, dass es sein kann, dass man sich beim Besuch der Seite einen Virus oder Trojaner heruntergeladen hat, daher habe ich einen Vollständigen Systemscann mit Norton gemacht, der hat nichts gefunden. Und jetzt ist noch etwas seltsam. Ich habe diesen Link, der mich auf die Seite mit den Medikamenten gebracht hat, nicht mit dem Computer geöffnet, sondern mit dem Ipod Touch. Daher kann es ja fast kein Virus sein, aber was ist es dann? Und was kann ich dagegen tun? Ich hoffe Ihr könnt mir helfen. glamp |
| | #2 | ||
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | Msn verschickt Spam! Hallo und Herzlich Willkommen!
__________________![]() Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]: Zitat:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen! 1. Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org
2. Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
3. → Lade Dir HJTscanlist.zip herunter → entpacke die Datei auf deinem Desktop → Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren → per Doppelklick starten → Wähle dein Betriebsystem aus - bei Win7 wähle Vista → Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen → Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren → Bitte kopiere den Inhalt hier in Deinen Thread. ** Falls es klappt auf einmal nicht, kannst den Text in mehrere Teile teilen und so posten 4. Ich würde gerne noch all deine installierten Programme sehen: Lade dir das Tool Ccleaner herunter → Download installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..." wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein Zitat:
** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw grußCoverflow
__________________ |
| | #3 |
![]() | Msn verschickt Spam! Sie gehen davon aus, dass ich einen Virus oder so was habe richtig?
__________________Nun aber wieso erkennt dann Norton nichts und wie kann ich diesen Virus bekommen haben, ich habe ja wie schon gesagt die Website nur von meinem Ipod Touch besucht. Wäre es nicht einfacher anstatt alle diese Sachen zu tun sich einfach eine neu E-Mail Adresse anzuschaffen und dann halt überall wo man registriert ist die E-Mail Adresse zuändern? |
| | #4 |
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | Msn verschickt Spam! Sie gehen davon aus, dass ich einen Virus oder so was habe richtig? Laut deinen Angaben ist nicht ausgeschlossen Nun aber wieso erkennt dann Norton nichts Jede Software funktioniert etwas anders und jedes Programm findet etwas anderes! Kannst Du mal mal im Netz schauen, findest unzählige Programme, aber keins ist davon 100%ig perfekt geht auch nicht, weil die Aktivität der PC-Viren-Erzeuger steigen pro Minute. Das heißt, ein Schutzprogramm usw nur nach bestimmten Merkmalen und die in der Datenbank gesammelten Daten können nach Viren suchen, erkennen und diese zu entfernen Wäre es nicht einfacher anstatt alle diese Sachen zu tun sich einfach eine neu E-Mail Adresse anzuschaffen und dann halt überall wo man registriert ist die E-Mail Adresse zuändern? das kann ja wohl nicht dauernd die Lösung sein, muss herausgefunden werden, wo die Ursache der Problematik liegt!
__________________ Warnung!: Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein! Anhang nicht öffnen, in unserem Forum erst nachfragen! Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten! Bitte diese Warnung weitergeben, wo Du nur kannst! |
| | #5 |
![]() | Msn verschickt Spam! Okay hier zuerst das von MBAM: : Code:
ATTFilter Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Datenbank Version: 6492
Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421
02.05.2011 20:46:12
mbam-log-2011-05-02 (20-46-12).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|)
Durchsuchte Objekte: 288130
Laufzeit: 1 Stunde(n), 53 Minute(n), 15 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM\COMPONENTS\WIDGITOOLBARFF.DLL (Adware.WidgiToolbar) -> Value: WIDGITOOLBARFF.DLL -> Quarantined and deleted successfully.
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
c:\program files\common files\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
|
| | #6 |
![]() | Msn verschickt Spam! Nun das vom 2 Schritt: : Code:
ATTFilter OTL Extras logfile created on: 02.05.2011 20:53:52 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Timo\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 60.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 109.03 Gb Free Space | 37.61% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: TIMO-MOBIL | User Name: Timo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{401FF33D-6A49-4D27-BBDC-288AEC1B47AD}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{904A90D9-9334-44C7-84F4-19FBE45F3126}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{FFDFCD60-B8C4-466B-82DE-C37E26F0E777}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0997A8ED-77C6-4B94-9A5F-76027ADAF832}" = protocol=6 | dir=in | app=c:\program files\spamihilator\cdcc.exe |
"{232838F7-EB3D-4154-8350-2D52133D83EE}" = protocol=17 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{41EAD167-C645-4291-988C-5E5FB5D96D14}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4E86B8B3-90AF-41B2-803E-08F68EF5DD05}" = protocol=6 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{7BB77A5D-DD19-48C1-94DE-84CEAA164402}" = protocol=6 | dir=in | app=c:\program files\spamihilator\spamihilator.exe |
"{870998A7-077C-44F9-B329-07BB00BFE55B}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{8C5B5EDE-EC52-4FB0-88B2-53ABF6E23750}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{94752534-85DD-439D-9702-CE8A9F95CE99}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{98439142-B30E-4303-A3BE-5078232DB6AE}" = protocol=6 | dir=in | app=c:\program files\spamihilator\dccproc.exe |
"{9F2751DE-ECD1-407C-9DDB-0E12AA96A150}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{A68D62C1-2C51-4B3F-9232-9632E3CD4AEC}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B2133616-A3F7-49B3-9DCD-EC1840293301}" = protocol=17 | dir=in | app=c:\program files\spamihilator\spamihilator.exe |
"{CE35DEE9-D716-47B8-A16D-D010D06BD81E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{DB9F1547-3694-4EF1-914C-0F870F1F6091}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{E08C5138-0E63-4839-BD60-26E3321AB30E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E625A7E7-FFE7-46F7-AB6F-33F118F5F629}" = protocol=17 | dir=in | app=c:\program files\spamihilator\cdcc.exe |
"{F1E851DF-11D8-42F5-947E-6CFDF69F6CDC}" = protocol=17 | dir=in | app=c:\program files\spamihilator\dccproc.exe |
"TCP Query User{BF006466-157E-4246-A8A3-1E8C88211742}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{18A8ACC5-B149-4E3C-A053-817CC2E96366}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{077A7810-A937-4465-AD08-ACED9807995F}" = ANNO 1602 Königs-Edition
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Central Data
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B9B76C9-4967-59FC-C994-191AEA152F04}" = ATI Catalyst Install Manager
"{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1C2B3CEA-482E-4453-B3E2-C9731337828A}" = Microsoft SQL Server 2008 Native Client
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Central Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{202F2838-156B-FC76-013F-9241B9673F39}" = CCC Help Thai
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 24
"{2B4E24A0-A06F-488D-87D8-16738E5E1104}" = Windows Live Family Safety
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{325ED81A-EC15-7CE8-729B-0392A1DD3854}" = CCC Help Czech
"{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIO Guide
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver
"{353FE16B-30FE-469A-BF55-B978F4218003}" = iTunes
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCA23DD-CEDA-CC7F-C74C-4D1EDAE919AA}" = Catalyst Control Center Graphics Full New
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{42DD2173-B7CA-8AB3-8AC2-40DFE2CA6FBC}" = CCC Help German
"{430DD2C5-65FD-9781-F9F2-693CAF05CD10}" = Catalyst Control Center InstallProxy
"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{49B8916D-1DEA-F18A-731F-BF0FE209C63B}" = CCC Help Chinese Standard
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser
"{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"{4EEAF8D8-CB79-06CA-A566-EAC1726DAABB}" = CCC Help Finnish
"{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Easy Media Creator 10 LJ
"{540DB82A-EE11-BBC1-8BD8-BB7D937A53A4}" = CCC Help Hungarian
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5882396B-9FB3-37AC-1AE1-5EA344BD7705}" = Catalyst Control Center Graphics Previews Vista
"{5BA149D9-D5FA-5AB3-400B-9F1BF424B7CE}" = CCC Help Chinese Traditional
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5C5EE8F2-0B38-4C13-AE4E-A87A237FE718}" =
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F5867F0-2D23-4338-A206-01A76C823924}" = VAIO Energie Verwaltung
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{642F96CC-1D3B-20DE-8673-44EE15B3DC2F}" = CCC Help Portuguese
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = Click to Disc
"{6D26ACF9-4919-0744-C509-28EAF53112D4}" = CCC Help Dutch
"{6E9CFEF5-0245-411F-8587-CF83DF9D4B05}" = Microsoft SQL Server 2008 Database Engine Services
"{71256374-2053-CF0F-BD54-20082980B95C}" = Catalyst Control Center Graphics Full Existing
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{72EEB695-388B-4835-8EA6-0C04545B06B9}" = Intel(R) PROSet/Wireless WiFi-Software
"{737D8F4D-24D4-D626-DEC0-9E39A6166890}" = CCC Help Danish
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Central Audio
"{74B705C2-173A-FFD1-98BC-AD5FB647AB38}" = CCC Help Polish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{784BDC03-2D22-BCAE-5CAC-84AFA799FBDE}" = CCC Help Turkish
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7C404084-C5A6-42FF-B731-0BAC79A6E134}" = VAIO Original Funktion Einstellungen
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{8572CE7D-46B0-70B3-96CD-534F07B35F5D}" = CCC Help Italian
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87544F2E-CCA5-01BC-AEBC-D8C1D759EE61}" = CCC Help English
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ED5D0B7-A193-413F-815A-530BE36B38F7}" = Spamihilator 0.9.9.53 (32-Bit)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90A40407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{90B38901-52C8-85A7-D6C8-9A5592C9FCAA}" = CCC Help Greek
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95229EF6-F4A1-413A-BA50-668311FAFE19}" = VAIO Original Function Settings
"{9648D00F-0589-619B-6114-BF2A0620168B}" = CCC Help Korean
"{96D0B6C6-5A72-4B47-8583-A87E55F5FE81}" =
"{9805E4EE-9B66-CABD-AF6B-4B84F2A8EF46}" = Skins
"{9973498D-EA29-4A68-BE0B-C88D6E03E928}" = ArcSoft WebCam Companion 2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AA2D735-3375-42D4-9A61-3FFEF82599D6}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup
"{9AC34FA1-BCDE-1D09-5DB7-EB6A064FDEA9}" = CCC Help Spanish
"{9B973FC0-E71F-6F89-10D6-1BFD063D1707}" = CCC Help Swedish
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9EAC0E21-510E-4259-A9C6-F5D5B8969036}" = Catalyst Control Center - Branding
"{A0B139A7-E8D5-49E8-A7BF-12421E652208}" = pdfforge Toolbar v4.3
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A3979A05-6834-D0A7-75CD-71B5A9E5F4C0}" = Catalyst Control Center Localization All
"{A6F21795-E629-35B2-9487-00A8363B28AA}" = Catalyst Control Center Graphics Light
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Central Copy
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B8E9F8A1-9F4D-43D5-ABD6-1DF067FAA469}" = Microsoft SQL Server 2008 Database Engine Services
"{C0AD2831-3398-A078-CBEB-39A6B381BB56}" = CCC Help Japanese
"{C18A02EC-966B-E7A7-9AC9-082F770ABF9B}" = CCC Help Russian
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{C9C390CC-F9B9-EFE8-27DF-6EB7FF8F8760}" = CCC Help Norwegian
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CD431A7B-88D8-0823-E66F-CCFAEA6DA7B4}" = ccc-core-static
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF0F8D1B-5FB9-468D-BD88-E6239906D2B7}" = Click to Disc
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D47E6B9C-F5A5-23B7-AB6A-3806AD4C9529}" = ccc-utility
"{D6DA6836-77C2-5338-10E3-D7A6CD65681D}" = Catalyst Control Center Core Implementation
"{DA8F979E-43B9-3EEC-721C-F297D9509992}" = Catalyst Control Center Graphics Previews Common
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Central Core
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}" = Microsoft SQL Server Native Client
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" =
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FE0782BC-7AB0-CF6A-6E38-D3040462C7EC}" = CCC Help French
"{FE51662F-D8F6-43B5-99D9-D4894AF00F83}" = Roxio Easy Media Creator Home
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"BFG-Big Fish Games Spiel-Suite" = Big Fish Games Spiel-Suite
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DivX Setup.divx.com" = DivX-Setup
"dt icon module" =
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free FLV Converter_is1" = Free FLV Converter V 6.96.0
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324
"Freemake Video Converter_is1" = Freemake Video Converter Version 2.0.1
"gtfirstboot Setting Request" =
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"InstallShield_{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MFU Module" =
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"NAV" = Norton AntiVirus
"ProInst" = Intel PROSet Wireless
"Samsung CLX-216x Series" = Samsung CLX-216x Series
"Samsung Universal Print Driver" = Samsung Universal Print Driver
"sp6" = Logitech SetPoint 6.20
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"VAIO Help and Support" =
"VLC media player" = VLC media player 1.1.7
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Worms for Pocket PC" = Worms for Pocket PC
"xp-AntiSpy" = xp-AntiSpy 3.97-9
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Zattoo4" = Zattoo4 4.0.5
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 24.04.2011 06:02:37 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description =
Error - 24.04.2011 06:39:36 | Computer Name = Timo-Mobil | Source = EventSystem | ID = 4621
Description =
Error - 24.04.2011 09:31:29 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description =
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1158214
Error - 24.04.2011 12:27:53 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1158214
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 9337502
Error - 24.04.2011 16:55:36 | Computer Name = Timo-Mobil | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 9337502
Error - 25.04.2011 07:47:36 | Computer Name = Timo-Mobil | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 11.02.2011 12:16:55 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 11.02.2011 12:16:55 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 11.02.2011 18:41:04 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 11.02.2011 18:41:04 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 04:54:56 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 04:54:56 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 05:14:38 | Computer Name = Timo-Mobil | Source = DCOM | ID = 10005
Description =
Error - 12.02.2011 05:14:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7009
Description =
Error - 12.02.2011 05:14:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 11:37:39 | Computer Name = Timo-Mobil | Source = Service Control Manager | ID = 7000
Description =
< End of report >
|
| | #7 |
![]() | Msn verschickt Spam! Die zweite Datei von Schritt Nummer 2: : Code:
ATTFilter OTL logfile created on: 02.05.2011 20:53:52 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Timo\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 60.00% Memory free 6.00 Gb Paging File | 5.00 Gb Available in Paging File | 81.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 289.92 Gb Total Space | 109.03 Gb Free Space | 37.61% Space Free | Partition Type: NTFS Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: TIMO-MOBIL | User Name: Timo | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Timo\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe () PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) PRC - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) PRC - C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.) PRC - C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer) PRC - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccsvchst.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Logitech, Inc.) PRC - C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) PRC - C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Sony Corporation) PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) PRC - C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation) PRC - C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) PRC - C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe () PRC - C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe () PRC - c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo) ========== Modules (SafeList) ========== MOD - C:\Users\Timo\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (BBSvc) -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.) SRV - (SeaPort) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) SRV - (Application Updater) -- C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.) SRV - (NAV) -- C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccSvcHst.exe (Symantec Corporation) SRV - (LBTServ) -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe (Logitech, Inc.) SRV - (Samsung UPD Service) -- C:\Windows\System32\SUPDSvc.exe (Samsung Electronics CO., LTD.) SRV - (VUAgent) -- C:\Program Files\Sony\VAIO Update 5\VUAgent.exe (Sony Corporation) SRV - (EvtEng) Intel(R) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) SRV - (RegSrvc) Intel(R) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation) SRV - (PACSPTISVR) -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe (Sony Corporation) SRV - (RtkAudioService) -- C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (VAIO Power Management) -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (IviRegMgr) -- c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo) ========== Driver Services (SafeList) ========== DRV - (BHDrvx86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20110419.001\BHDrvx86.sys (Symantec Corporation) DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110502.002\NAVEX15.SYS (Symantec Corporation) DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110502.002\NAVENG.SYS (Symantec Corporation) DRV - (IDSVix86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20110429.002\IDSvix86.sys (Symantec Corporation) DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation) DRV - (SYMTDIv) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SYMTDIV.SYS (Symantec Corporation) DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation) DRV - (SymEvent) -- C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation) DRV - (SRTSP) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SRTSP.SYS (Symantec Corporation) DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\system32\drivers\NAV\1205000.07D\SRTSPX.SYS (Symantec Corporation) DRV - (SymEFA) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMEFA.SYS (Symantec Corporation) DRV - (SymIRON) -- C:\Windows\system32\drivers\NAV\1205000.07D\Ironx86.SYS (Symantec Corporation) DRV - (SymDS) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMDS.SYS (Symantec Corporation) DRV - (LUsbFilt) -- C:\Windows\System32\drivers\LUsbFilt.sys (Logitech, Inc.) DRV - (LMouFilt) -- C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.) DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.) DRV - (s1039bus) Sony Ericsson Device 1039 driver (WDM) -- C:\Windows\System32\drivers\s1039bus.sys (MCCI Corporation) DRV - (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS) -- C:\Windows\System32\drivers\s1039nd5.sys (MCCI Corporation) DRV - (s1039mdm) -- C:\Windows\System32\drivers\s1039mdm.sys (MCCI Corporation) DRV - (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM) -- C:\Windows\System32\drivers\s1039unic.sys (MCCI Corporation) DRV - (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s1039mgmt.sys (MCCI Corporation) DRV - (s1039obex) -- C:\Windows\System32\drivers\s1039obex.sys (MCCI Corporation) DRV - (s1039mdfl) -- C:\Windows\System32\drivers\s1039mdfl.sys (MCCI Corporation) DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation) DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.) DRV - (RsFx0103) -- C:\Windows\System32\drivers\RsFx0103.sys (Microsoft Corporation) DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC) DRV - (DMICall) -- C:\Windows\System32\drivers\DMICall.sys (Sony Corporation) DRV - (risdptsk) -- C:\Windows\System32\drivers\risdptsk.sys (REDC) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.) DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys (Microsoft Corporation) DRV - (SFEP) -- C:\Windows\System32\drivers\SFEP.sys (Sony Corporation) DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.) DRV - (regi) -- C:\Windows\System32\drivers\regi.sys (InterVideo) DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.SYS (Samsung Electronics) DRV - (DgiVecp) -- C:\Windows\System32\drivers\DGIVECP.SYS (Samsung Electronics Co., Ltd.) DRV - (pfc) -- C:\Windows\System32\drivers\pfc.sys (Padus, Inc.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://eu.ask.com?o=15780&l=dis IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "hxxp://www.google.ch/" FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0 FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.1 FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.4.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPlgn\ [2011.01.14 18:35:42 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.04.30 13:18:27 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.04.30 13:18:27 | 000,000,000 | ---D | M] [2010.11.25 20:45:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Extensions [2011.05.01 22:58:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions [2010.12.21 22:28:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.03.08 22:57:00 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2011.03.28 17:39:36 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011.02.10 18:47:22 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8} [2011.02.02 23:20:09 | 000,000,000 | ---D | M] (20-20 3D Viewer) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\2020Player@2020Technologies.com [2010.09.28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\searchplugins\askcom.xml [2011.04.10 18:46:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010.12.21 18:11:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011.03.15 22:40:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011.03.10 18:53:15 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM [2011.01.14 18:35:42 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPLGN [2011.02.02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2010.10.27 07:44:13 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.10.27 07:44:13 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml [2010.10.27 07:44:13 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.10.27 07:44:13 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.10.27 07:44:13 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ips\ipsbho.dll (Symantec Corporation) O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.) O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found. O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) O4 - HKLM..\Run: [Maple_S2P] C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe () O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe () O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - Startup: C:\Users\Timo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Timo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - File not found O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\Windows\System32\VESWinlogon.dll (Sony Corporation) O24 - Desktop WallPaper: C:\Users\Timo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\Timo\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) - F:\Autorun.exe -- [ CDFS ] O32 - AutoRun File - [1999.08.31 05:52:00 | 000,000,766 | R--- | M] () - F:\Autorun.ico -- [ CDFS ] O32 - AutoRun File - [2001.09.06 01:04:00 | 000,000,283 | R--- | M] () - F:\Autorun.inf -- [ CDFS ] O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell - "" = AutoRun O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell\AutoRun\command - "" = G:\Startme.exe O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Acrobat\command - "" = F:\.\ar500deu.exe -- [2001.09.06 01:04:00 | 009,124,984 | R--- | M] () O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\DirectX\command - "" = F:\.\DirectX\dxsetup.exe -- [2001.10.16 12:24:46 | 000,140,288 | R--- | M] () O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Setup\command - "" = F:\.\Setup.exe -- [2002.12.02 15:33:00 | 000,107,512 | R--- | M] () O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell - "" = AutoRun O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a O33 - MountPoints2\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\Shell\AutoRun\command - "" = G:\wd_windows_tools\WDEULA.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.05.02 20:52:25 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Timo\Desktop\OTL.exe [2011.05.02 16:58:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\Malwarebytes [2011.05.02 16:58:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Malwarebytes' Anti-Malware [2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011.05.02 16:58:10 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011.05.02 16:58:10 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011.05.02 12:29:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{227CABBB-BF91-469F-8E02-D4D868EB4188} [2011.05.01 15:19:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{1C9253E1-D764-429F-85F4-AA2052B834DF} [2011.04.29 15:30:57 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{9802831A-8BF0-472C-921A-BC05E73CEEE3} [2011.04.28 18:13:08 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{C651C691-93ED-4E9E-94B4-02731314E127} [2011.04.27 20:00:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Free FLV Converter [2011.04.27 20:00:17 | 000,000,000 | ---D | C] -- C:\Program Files\Free FLV Converter [2011.04.27 17:22:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll [2011.04.27 17:22:26 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll [2011.04.27 17:22:22 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2011.04.27 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{442D6840-DFC6-4D21-BDAC-44DEF9361D1B} [2011.04.26 18:45:23 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{62042D88-21B2-49D2-9B41-BCCA7ED72F19} [2011.04.25 17:23:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\iTunes [2011.04.25 17:22:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2011.04.25 17:22:44 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2011.04.25 17:19:59 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2011.04.25 17:19:30 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2011.04.25 13:48:05 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{23A5F032-A21F-4F28-85D9-A4FE4C85642A} [2011.04.24 12:03:27 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{AFD43F2C-5F4F-495F-898D-F66F7301E02B} [2011.04.23 22:03:20 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{6CE53D7B-F97B-408C-B5FC-386964457F1B} [2011.04.23 00:20:31 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{1AE88077-B54F-49FA-B952-20C02E148367} [2011.04.22 12:20:07 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{EA904536-19B8-4BA0-A089-F1BB29F222EB} [2011.04.21 16:51:26 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{E8790765-5B89-44CD-AB59-0A1C66CE799C} [2011.04.20 19:33:05 | 000,124,016 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdm.sys [2011.04.20 19:33:05 | 000,123,504 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039unic.sys [2011.04.20 19:33:05 | 000,117,872 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mgmt.sys [2011.04.20 19:33:05 | 000,113,904 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039obex.sys [2011.04.20 19:33:05 | 000,098,672 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039bus.sys [2011.04.20 19:33:05 | 000,025,456 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039nd5.sys [2011.04.20 19:33:05 | 000,014,960 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdfl.sys [2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cmnt.sys [2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cm.sys [2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039whnt.sys [2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039wh.sys [2011.04.20 19:33:05 | 000,010,992 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cr.sys [2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson [2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Sony Ericsson [2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson [2011.04.20 13:21:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{A93F3534-7BB5-402A-8155-74318E533724} [2011.04.19 18:10:18 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{845A209A-BC21-4777-9122-6FD7E4A91BAF} [2011.04.19 17:34:37 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2011.04.19 17:34:37 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2011.04.19 17:34:37 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2011.04.19 17:34:37 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011.04.19 17:34:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2011.04.19 17:34:36 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2011.04.19 17:34:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2011.04.19 17:34:36 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2011.04.19 17:34:35 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2011.04.19 17:34:35 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2011.04.19 17:34:35 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011.04.19 17:34:35 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2011.04.19 17:34:35 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2011.04.19 17:34:35 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2011.04.19 17:34:35 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2011.04.19 17:34:35 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2011.04.19 17:34:35 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2011.04.19 17:34:34 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2011.04.19 17:34:34 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011.04.19 17:34:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2011.04.19 17:34:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2011.04.19 17:34:34 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2011.04.19 17:34:33 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011.04.19 17:34:33 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2011.04.19 17:34:33 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2011.04.19 17:34:32 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011.04.19 17:34:32 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll [2011.04.19 17:34:32 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll [2011.04.19 17:34:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011.04.19 17:34:32 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll [2011.04.19 17:34:32 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2011.04.19 17:34:31 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2011.04.19 17:34:31 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2011.04.19 17:34:31 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll [2011.04.19 17:34:31 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011.04.19 17:34:31 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2011.04.19 17:34:31 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2011.04.19 17:34:31 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2011.04.19 17:34:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2011.04.16 00:30:31 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2011.04.15 17:50:29 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2011.04.15 17:50:29 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2011.04.15 17:50:13 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll [2011.04.15 17:50:13 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll [2011.04.15 17:50:03 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2011.04.15 17:49:59 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe [2011.04.11 10:37:58 | 000,000,000 | ---D | C] -- C:\divx [2011.04.10 18:37:46 | 000,000,000 | ---D | C] -- C:\Program Files\Real [2011.04.10 18:37:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Real [2011.04.10 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\Real [2011.04.10 18:36:03 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft [2011.04.10 17:59:57 | 000,000,000 | ---D | C] -- C:\OutputFolder [2011.04.07 17:15:22 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Roaming\DonationCoder [2011.04.07 17:15:21 | 000,000,000 | ---D | C] -- C:\Users\Timo\Documents\DonationCoder [2011.04.06 16:20:16 | 000,197,920 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll [2011.04.06 16:20:16 | 000,107,808 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe [2011.04.06 16:20:16 | 000,091,424 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssd.dll [2011.04.06 16:20:16 | 000,075,040 | ---- | C] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll ========== Files - Modified Within 30 Days ========== [2011.05.02 20:56:14 | 000,002,097 | ---- | M] () -- C:\Users\Timo\Desktop\hjtscanlist.zip [2011.05.02 20:52:27 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Timo\Desktop\OTL.exe [2011.05.02 20:48:19 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.05.02 20:48:19 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.05.02 20:48:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.05.02 20:48:10 | 3186,659,328 | -HS- | M] () -- C:\hiberfil.sys [2011.05.02 16:58:13 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.05.01 23:31:53 | 000,056,832 | ---- | M] () -- C:\Users\Timo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.05.01 22:59:09 | 000,000,764 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011.04.26 22:37:39 | 000,002,593 | ---- | M] () -- C:\Users\Timo\Desktop\Microsoft Office Excel 2007.lnk [2011.04.25 19:43:51 | 000,002,591 | ---- | M] () -- C:\Users\Timo\Desktop\Microsoft Office Word 2007.lnk [2011.04.25 17:23:50 | 000,001,624 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2011.04.20 19:37:59 | 000,745,254 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.04.20 19:37:58 | 000,794,826 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.04.20 19:37:58 | 000,193,608 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.04.20 19:37:58 | 000,161,784 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.04.19 17:34:53 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat [2011.04.19 17:34:53 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat [2011.04.19 17:34:37 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2011.04.19 17:34:37 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2011.04.19 17:34:37 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2011.04.19 17:34:37 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011.04.19 17:34:36 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2011.04.19 17:34:36 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2011.04.19 17:34:36 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2011.04.19 17:34:36 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2011.04.19 17:34:35 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2011.04.19 17:34:35 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2011.04.19 17:34:35 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011.04.19 17:34:35 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2011.04.19 17:34:35 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2011.04.19 17:34:35 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2011.04.19 17:34:35 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2011.04.19 17:34:35 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2011.04.19 17:34:35 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2011.04.19 17:34:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2011.04.19 17:34:34 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2011.04.19 17:34:34 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011.04.19 17:34:34 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2011.04.19 17:34:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2011.04.19 17:34:34 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2011.04.19 17:34:33 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011.04.19 17:34:33 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2011.04.19 17:34:33 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2011.04.19 17:34:32 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011.04.19 17:34:32 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll [2011.04.19 17:34:32 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll [2011.04.19 17:34:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011.04.19 17:34:32 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll [2011.04.19 17:34:32 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2011.04.19 17:34:31 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2011.04.19 17:34:31 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2011.04.19 17:34:31 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll [2011.04.19 17:34:31 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011.04.19 17:34:31 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2011.04.19 17:34:31 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2011.04.19 17:34:31 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2011.04.19 17:34:31 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2011.04.16 13:51:33 | 000,403,848 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.04.13 17:24:10 | 000,000,447 | ---- | M] () -- C:\Users\Timo\Desktop\Schule - Verknüpfung.lnk [2011.04.11 10:30:46 | 000,002,032 | ---- | M] () -- C:\Users\Timo\AppData\Local\d3d9caps.dat [2011.04.09 18:13:09 | 000,005,146 | ---- | M] () -- C:\Users\Timo\.recently-used.xbel [2011.04.07 21:38:48 | 000,000,011 | R--- | M] () -- C:\Windows\amunres.lsl [2011.04.07 17:15:22 | 000,000,058 | ---- | M] () -- C:\Users\Timo\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat [2011.04.06 16:20:16 | 000,197,920 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll [2011.04.06 16:20:16 | 000,107,808 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe [2011.04.06 16:20:16 | 000,091,424 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll [2011.04.06 16:20:16 | 000,075,040 | ---- | M] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll ========== Files Created - No Company Name ========== [2011.05.02 20:56:29 | 000,030,259 | ---- | C] () -- C:\Users\Timo\Desktop\hjtscanlist.bat [2011.05.02 20:56:08 | 000,002,097 | ---- | C] () -- C:\Users\Timo\Desktop\hjtscanlist.zip [2011.05.02 16:58:13 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.04.25 17:23:50 | 000,001,624 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2011.04.19 17:34:35 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2011.04.13 17:24:10 | 000,000,447 | ---- | C] () -- C:\Users\Timo\Desktop\Schule - Verknüpfung.lnk [2011.04.09 18:13:09 | 000,005,146 | ---- | C] () -- C:\Users\Timo\.recently-used.xbel [2011.04.07 21:38:48 | 000,000,011 | R--- | C] () -- C:\Windows\amunres.lsl [2011.04.07 17:15:22 | 000,000,058 | ---- | C] () -- C:\Users\Timo\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat [2011.01.10 23:04:20 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll [2011.01.10 17:30:47 | 000,010,231 | ---- | C] () -- C:\Users\Timo\AppData\Roaming\SmarThruOptions.xml [2011.01.10 17:30:35 | 000,036,864 | ---- | C] () -- C:\Windows\System32\SvcMan.exe [2011.01.10 17:30:03 | 000,172,032 | ---- | C] () -- C:\Windows\System32\SecSNMP.dll [2011.01.10 17:29:46 | 000,000,124 | ---- | C] () -- C:\Windows\Readiris.ini [2011.01.10 17:29:42 | 000,023,040 | ---- | C] () -- C:\Windows\System32\irisco32.dll [2011.01.10 17:27:03 | 000,458,752 | ---- | C] () -- C:\Windows\ssndii.exe [2011.01.10 17:22:57 | 000,086,016 | R--- | C] () -- C:\Windows\WiaInst.exe [2011.01.10 17:21:48 | 000,217,088 | R--- | C] () -- C:\Windows\System32\ssminidriver.dll [2011.01.10 17:21:48 | 000,027,136 | R--- | C] () -- C:\Windows\System32\ssimgfilter.dll [2011.01.10 17:21:48 | 000,011,264 | R--- | C] () -- C:\Windows\System32\sssegfilter.dll [2011.01.10 17:21:48 | 000,010,752 | R--- | C] () -- C:\Windows\System32\sserrhandler.dll [2011.01.10 17:20:21 | 000,022,723 | ---- | C] () -- C:\Windows\System32\cx21sl3.dll [2010.11.29 23:06:13 | 000,000,079 | -HS- | C] () -- C:\ProgramData\.zreglib [2010.11.29 22:06:15 | 000,017,408 | ---- | C] () -- C:\Users\Timo\AppData\Local\WebpageIcons.db [2010.11.29 20:10:47 | 000,056,832 | ---- | C] () -- C:\Users\Timo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.11.29 18:25:12 | 000,026,624 | ---- | C] () -- C:\Windows\System32\spd__l.dll [2010.11.29 18:25:11 | 000,283,136 | ---- | C] () -- C:\Windows\System32\DscPnt.dll [2010.11.29 18:25:11 | 000,259,888 | ---- | C] () -- C:\Windows\SUPDRun.exe [2010.11.29 18:25:11 | 000,151,552 | ---- | C] () -- C:\Windows\System32\spd__ci.exe [2010.11.29 13:59:13 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll [2010.11.25 20:56:16 | 000,524,288 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2010.11.25 20:56:16 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2010.11.25 16:02:30 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010.11.25 16:02:00 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2010.11.25 16:02:00 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2010.11.25 14:09:21 | 000,002,032 | ---- | C] () -- C:\Users\Timo\AppData\Local\d3d9caps.dat [2010.11.25 08:24:42 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI [2009.08.03 16:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll [2009.08.03 16:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe [2009.05.14 23:22:08 | 000,011,264 | ---- | C] () -- C:\Windows\System32\atimuixx.dll [2008.10.29 18:13:34 | 000,180,720 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2008.07.10 21:07:09 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1511.dll [2008.07.10 21:07:08 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat [2008.07.10 21:07:08 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2008.07.10 21:07:08 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe [2008.07.10 21:04:31 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll [2008.07.10 11:22:18 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2008.01.21 09:15:58 | 000,794,826 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2008.01.21 09:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2008.01.21 09:15:58 | 000,193,608 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2008.01.21 09:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 14:47:37 | 000,403,848 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 12:33:01 | 000,745,254 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006.11.02 12:33:01 | 000,161,784 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2002.09.18 00:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe ========== Alternate Data Streams ========== @Alternate Data Stream - 728 bytes -> C:\Users\Timo\Documents\Französisch.eml:OECustomProperty < End of report > |
| | #8 |
![]() | Msn verschickt Spam! Nun noch das von Schritt Nummer 3: : Code:
ATTFilter $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
º º
hjtscanlist v2.0
º º
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Microsoft Windows [Version 6.0.6002]
C:
02.05.2011 20:48 C:\System Volume Information --------- 24576
C:\hiberfil.sys ---------
C:\pagefile.sys ---------
02.05.2011 16:58 C:\ProgramData --------- 12288
02.05.2011 16:58 C:\Program Files --------- 32768
01.05.2011 22:59 C:\Windows --------- 24576
26.04.2011 18:43 C:\Config.Msi --------- 0
11.04.2011 10:38 C:\divx --------- 0
10.04.2011 17:59 C:\OutputFolder --------- 0
25.01.2011 19:15 C:\Error.log --------- 638
15.01.2011 01:06 C:\Dev-Cpp --------- 4096
12.01.2011 15:28 C:\Downloads --------- 0
31.12.2010 03:05 C:\IO.SYS --------- 0
31.12.2010 03:05 C:\MSDOS.SYS --------- 0
26.11.2010 11:58 C:\Update --------- 0
26.11.2010 10:07 C:\cc_20101126_090719.reg --------- 73708
25.11.2010 16:33 C:\MSOCache --------- 0
25.11.2010 16:28 C:\Boot --------- 4096
25.11.2010 14:11 C:\$Recycle.Bin --------- 4096
25.11.2010 14:09 C:\Users --------- 4096
25.11.2010 14:05 C:\Programme --------- 0
25.11.2010 14:05 C:\Dokumente und Einstellungen --------- 0
25.11.2010 08:24 C:\Documentation --------- 0
25.11.2010 08:01 C:\Installer_Setup.log --------- 187
25.11.2010 07:41 C:\Intel --------- 0
11.04.2009 00:36 C:\bootmgr --------- 333257
10.07.2008 20:58 C:\BOOTSECT.BAK --------- 8192
21.01.2008 04:32 C:\PerfLogs --------- 0
02.11.2006 15:02 C:\Documents and Settings --------- 0
18.09.2006 23:43 C:\config.sys --------- 10
18.09.2006 23:43 C:\autoexec.bat --------- 24
----------------------------------------
C:\Windows
02.05.2011 20:51 C:\Windows\WindowsUpdate.log --------- 1454512
02.05.2011 20:48 C:\Windows\bootstat.dat --------- 67584
07.04.2011 21:38 C:\Windows\amunres.lsl --------- 11
10.01.2011 23:27 C:\Windows\win.ini --------- 475
10.01.2011 17:29 C:\Windows\Readiris.ini --------- 124
25.11.2010 08:24 C:\Windows\VAIOUpdt.INI --------- 0
25.11.2010 07:49 C:\Windows\csup.txt --------- 12
10.11.2010 03:28 C:\Windows\WLXPGSS.SCR --------- 301936
09.08.2010 04:03 C:\Windows\SUPDRun.exe --------- 259888
11.04.2009 00:27 C:\Windows\explorer.exe --------- 2926592
29.12.2008 15:35 C:\Windows\atiogl.xml --------- 15485
10.07.2008 14:45 C:\Windows\ocsetup_install_OEMHelpCustomization.etl --------- 29425664
10.07.2008 14:45 C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.perf --------- 196608
10.07.2008 14:45 C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.dpx --------- 65536
10.07.2008 11:39 C:\Windows\DIFxAPI.dll --------- 319456
10.07.2008 11:39 C:\Windows\HideWin.exe --------- 315392
10.07.2008 11:22 C:\Windows\ativpsrm.bin --------- 0
03.07.2008 08:06 C:\Windows\SkyTel.exe --------- 1826816
03.07.2008 08:06 C:\Windows\RtlUpd.exe --------- 1196032
03.07.2008 08:06 C:\Windows\RTKAUDIOSERVICE.EXE --------- 104992
03.07.2008 08:06 C:\Windows\RtHDVCpl.exe --------- 6295552
03.07.2008 08:05 C:\Windows\USetup.iss --------- 553
03.07.2008 08:05 C:\Windows\RtlExUpd.dll --------- 520192
28.06.2008 02:33 C:\Windows\snymsico.dll --------- 626688
21.01.2008 04:43 C:\Windows\WindowsShell.Manifest --------- 749
21.01.2008 04:24 C:\Windows\regedit.exe --------- 134656
21.01.2008 04:24 C:\Windows\bfsvc.exe --------- 58880
21.01.2008 04:24 C:\Windows\fveupdate.exe --------- 13312
21.01.2008 04:24 C:\Windows\HelpPane.exe --------- 498176
21.01.2008 04:23 C:\Windows\notepad.exe --------- 151040
15.03.2007 12:07 C:\Windows\ssndii.exe --------- 458752
26.02.2007 03:44 C:\Windows\WiaInst.exe --------- 86016
17.01.2007 11:23 C:\Windows\Dr. Printer Icon.ico --------- 11502
02.11.2006 14:35 C:\Windows\WMSysPr9.prx --------- 316640
02.11.2006 14:34 C:\Windows\twunk_16.exe --------- 49680
02.11.2006 14:34 C:\Windows\twain_32.dll --------- 50688
02.11.2006 14:34 C:\Windows\twunk_32.exe --------- 31232
02.11.2006 14:34 C:\Windows\twain.dll --------- 94784
02.11.2006 11:45 C:\Windows\winhlp32.exe --------- 9216
02.11.2006 11:45 C:\Windows\hh.exe --------- 14848
02.11.2006 09:46 C:\Windows\mib.bin --------- 43131
19.09.2006 13:41 C:\Windows\HomePremium.xml --------- 8328
18.09.2006 23:46 C:\Windows\system.ini --------- 219
18.09.2006 23:43 C:\Windows\_default.pif --------- 707
18.09.2006 23:43 C:\Windows\winhelp.exe --------- 256192
18.09.2006 23:30 C:\Windows\msdfmap.ini --------- 1405
18.09.2002 00:45 C:\Windows\lsb_un20.exe --------- 119808
17.12.1999 11:13 C:\Windows\unvise32.exe --------- 86016
----------------------------------------
C:\Windows\System
02.11.2006 14:34 C:\Windows\System\mciseq.drv --------- 25264
02.11.2006 14:34 C:\Windows\System\mciwave.drv --------- 28160
02.11.2006 14:34 C:\Windows\System\avifile.dll --------- 109456
02.11.2006 14:34 C:\Windows\System\avicap.dll --------- 69584
02.11.2006 14:34 C:\Windows\System\mciavi.drv --------- 73376
02.11.2006 14:34 C:\Windows\System\msvideo.dll --------- 126912
02.11.2006 09:10 C:\Windows\System\OLESVR.DLL --------- 24064
02.11.2006 09:10 C:\Windows\System\WFWNET.DRV --------- 12704
02.11.2006 09:10 C:\Windows\System\COMMDLG.DLL --------- 32816
02.11.2006 09:10 C:\Windows\System\TIMER.DRV --------- 4048
02.11.2006 09:10 C:\Windows\System\MMSYSTEM.DLL --------- 68992
02.11.2006 09:10 C:\Windows\System\mmtask.tsk --------- 1152
02.11.2006 09:10 C:\Windows\System\mouse.drv --------- 2032
02.11.2006 09:10 C:\Windows\System\vga.drv --------- 2176
02.11.2006 09:10 C:\Windows\System\sound.drv --------- 1744
02.11.2006 09:10 C:\Windows\System\keyboard.drv --------- 2000
02.11.2006 09:10 C:\Windows\System\SHELL.DLL --------- 5120
02.11.2006 09:10 C:\Windows\System\system.drv --------- 3360
18.09.2006 23:43 C:\Windows\System\ver.dll --------- 9008
18.09.2006 23:43 C:\Windows\System\olecli.dll --------- 82944
18.09.2006 23:43 C:\Windows\System\lzexpand.dll --------- 9936
18.09.2006 23:35 C:\Windows\System\stdole.tlb --------- 5532
----------------------------------------
C:\Windows\System32
02.05.2011 20:48 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 --------- 3616
02.05.2011 20:48 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 --------- 3616
02.05.2011 20:47 C:\Windows\system32\drivers --------- 65536
27.04.2011 17:20 C:\Windows\system32\catroot --------- 4096
27.04.2011 17:20 C:\Windows\system32\catroot2 --------- 4096
20.04.2011 19:37 C:\Windows\system32\perfh009.dat --------- 745254
20.04.2011 19:37 C:\Windows\system32\perfc009.dat --------- 161784
20.04.2011 19:37 C:\Windows\system32\perfh007.dat --------- 794826
20.04.2011 19:37 C:\Windows\system32\perfc007.dat --------- 193608
20.04.2011 19:37 C:\Windows\system32\PerfStringBackup.INI --------- 1894354
19.04.2011 18:05 C:\Windows\system32\de-DE --------- 327680
19.04.2011 18:05 C:\Windows\system32\migration --------- 4096
19.04.2011 18:05 C:\Windows\system32\wbem --------- 65536
19.04.2011 18:05 C:\Windows\system32\en-US --------- 12288
19.04.2011 17:34 C:\Windows\system32\icrav03.rat --------- 8798
19.04.2011 17:34 C:\Windows\system32\ticrf.rat --------- 1988
19.04.2011 17:34 C:\Windows\system32\msls31.dll --------- 161792
19.04.2011 17:34 C:\Windows\system32\wininet.dll --------- 1126912
19.04.2011 17:34 C:\Windows\system32\jsproxy.dll --------- 65024
19.04.2011 17:34 C:\Windows\system32\iertutil.dll --------- 1785344
19.04.2011 17:34 C:\Windows\system32\msrating.dll --------- 162304
19.04.2011 17:34 C:\Windows\system32\urlmon.dll --------- 1102336
19.04.2011 17:34 C:\Windows\system32\RegisterIEPKEYs.exe --------- 74752
19.04.2011 17:34 C:\Windows\system32\SetIEInstalledDate.exe --------- 76800
19.04.2011 17:34 C:\Windows\system32\mshtmler.dll --------- 48640
19.04.2011 17:34 C:\Windows\system32\iesysprep.dll --------- 86528
19.04.2011 17:34 C:\Windows\system32\ieui.dll --------- 176640
19.04.2011 17:34 C:\Windows\system32\ieframe.dll --------- 9702400
19.04.2011 17:34 C:\Windows\system32\tdc.ocx --------- 63488
19.04.2011 17:34 C:\Windows\system32\html.iec --------- 367104
19.04.2011 17:34 C:\Windows\system32\dxtrans.dll --------- 223232
19.04.2011 17:34 C:\Windows\system32\dxtmsft.dll --------- 353792
19.04.2011 17:34 C:\Windows\system32\ieapfltr.dat --------- 3695416
19.04.2011 17:34 C:\Windows\system32\ieapfltr.dll --------- 434176
19.04.2011 17:34 C:\Windows\system32\icardie.dll --------- 66048
19.04.2011 17:34 C:\Windows\system32\ie4uinit.exe --------- 74240
19.04.2011 17:34 C:\Windows\system32\iernonce.dll --------- 31744
19.04.2011 17:34 C:\Windows\system32\ieuinit.inf --------- 72822
19.04.2011 17:34 C:\Windows\system32\iesetup.dll --------- 74752
19.04.2011 17:34 C:\Windows\system32\url.dll --------- 231936
19.04.2011 17:34 C:\Windows\system32\iedkcs32.dll --------- 353584
19.04.2011 17:34 C:\Windows\system32\inetcpl.cpl --------- 1427456
19.04.2011 17:34 C:\Windows\system32\webcheck.dll --------- 203776
19.04.2011 17:34 C:\Windows\system32\licmgr10.dll --------- 23552
19.04.2011 17:34 C:\Windows\system32\inseng.dll --------- 78848
19.04.2011 17:34 C:\Windows\system32\mshtmled.dll --------- 72704
19.04.2011 17:34 C:\Windows\system32\wextract.exe --------- 152064
19.04.2011 17:34 C:\Windows\system32\iexpress.exe --------- 150528
19.04.2011 17:34 C:\Windows\system32\msfeeds.dll --------- 580608
19.04.2011 17:34 C:\Windows\system32\vbscript.dll --------- 420864
19.04.2011 17:34 C:\Windows\system32\mshtml.dll --------- 12268544
19.04.2011 17:34 C:\Windows\system32\mshtml.tlb --------- 2382848
19.04.2011 17:34 C:\Windows\system32\ieUnatt.exe --------- 142848
19.04.2011 17:34 C:\Windows\system32\occache.dll --------- 123392
19.04.2011 17:34 C:\Windows\system32\pngfilt.dll --------- 54272
19.04.2011 17:34 C:\Windows\system32\mshta.exe --------- 11776
19.04.2011 17:34 C:\Windows\system32\admparse.dll --------- 101888
19.04.2011 17:34 C:\Windows\system32\ieaksie.dll --------- 227840
19.04.2011 17:34 C:\Windows\system32\ieakui.dll --------- 163840
19.04.2011 17:34 C:\Windows\system32\jscript9.dll --------- 1797632
19.04.2011 17:34 C:\Windows\system32\jscript.dll --------- 716800
19.04.2011 17:34 C:\Windows\system32\imgutil.dll --------- 35840
19.04.2011 17:34 C:\Windows\system32\advpack.dll --------- 114176
19.04.2011 17:34 C:\Windows\system32\iepeers.dll --------- 118784
19.04.2011 17:34 C:\Windows\system32\msfeedsbs.dll --------- 41472
19.04.2011 17:34 C:\Windows\system32\msfeedssync.exe --------- 10752
19.04.2011 17:34 C:\Windows\system32\IEAdvpack.dll --------- 110592
19.04.2011 17:34 C:\Windows\system32\ieakeng.dll --------- 130560
18.04.2011 15:46 C:\Windows\system32\mrt.exe --------- 42181064
16.04.2011 13:51 C:\Windows\system32\FNTCACHE.DAT --------- 403848
11.04.2011 10:29 C:\Windows\system32\Tasks --------- 4096
06.04.2011 16:20 C:\Windows\system32\dnssd.dll --------- 91424
06.04.2011 16:20 C:\Windows\system32\dnssdX.dll --------- 197920
06.04.2011 16:20 C:\Windows\system32\jdns_sd.dll --------- 75040
06.04.2011 16:20 C:\Windows\system32\dns-sd.exe --------- 107808
15.03.2011 22:39 C:\Windows\system32\jupdate-1.6.0_24-b07.log --------- 3305
14.03.2011 15:57 C:\Windows\system32\TubeFinder.exe --------- 307200
13.03.2011 14:00 C:\Windows\system32\config --------- 12288
13.03.2011 14:00 C:\Windows\system32\Msdtc --------- 4096
13.03.2011 14:00 C:\Windows\system32\spool --------- 4096
12.03.2011 23:55 C:\Windows\system32\XpsPrint.dll --------- 876032
10.03.2011 19:03 C:\Windows\system32\mfc42u.dll --------- 1162240
10.03.2011 19:03 C:\Windows\system32\mfc42.dll --------- 1136640
03.03.2011 17:42 C:\Windows\system32\inetcomm.dll --------- 739328
03.03.2011 17:40 C:\Windows\system32\Apphlpdm.dll --------- 28672
03.03.2011 15:35 C:\Windows\system32\GameUXLegacyGDFs.dll --------- 4240384
03.03.2011 15:25 C:\Windows\system32\win32k.sys --------- 2041856
02.03.2011 17:44 C:\Windows\system32\dnsrslvr.dll --------- 86528
02.03.2011 17:44 C:\Windows\system32\dnsapi.dll --------- 168448
22.02.2011 16:13 C:\Windows\system32\XpsGdiConverter.dll --------- 288768
22.02.2011 15:33 C:\Windows\system32\DWrite.dll --------- 1068544
22.02.2011 15:33 C:\Windows\system32\FntCache.dll --------- 797696
18.02.2011 17:36 C:\Windows\system32\usbaaplrc.dll --------- 4184352
16.02.2011 18:16 C:\Windows\system32\atmlib.dll --------- 34304
16.02.2011 16:02 C:\Windows\system32\atmfd.dll --------- 292864
02.02.2011 22:40 C:\Windows\system32\javaws.exe --------- 157472
02.02.2011 22:40 C:\Windows\system32\javaw.exe --------- 145184
02.02.2011 22:40 C:\Windows\system32\java.exe --------- 145184
02.02.2011 22:40 C:\Windows\system32\deployJava1.dll --------- 472808
02.02.2011 18:11 C:\Windows\system32\MpSigStub.exe --------- 222080
----------------------------------------
C:\Windows\Prefetch
----------------------------------------
C:\Windows\Tasks
02.05.2011 20:48 C:\Windows\Tasks\SA.DAT --------- 6
02.05.2011 20:47 C:\Windows\Tasks\SCHEDLGU.TXT --------- 32554
----------------------------------------
C:\Windows\Temp
----------------------------------------
C:\Users\Timo\AppData\Local\Temp
02.05.2011 20:53 C:\Users\Timo\AppData\Local\Temp\jusched.log --------- 401
02.05.2011 20:49 C:\Users\Timo\AppData\Local\Temp\LuUpdater.log --------- 0
02.05.2011 20:49 C:\Users\Timo\AppData\Local\Temp\div9A0.tmp --------- 0
02.05.2011 20:48 C:\Users\Timo\AppData\Local\Temp\AdobeARM.log --------- 815
02.05.2011 20:48 C:\Users\Timo\AppData\Local\Temp\WPDNSE --------- 0
02.05.2011 20:48 C:\Users\Timo\AppData\Local\Temp\Adobe --------- 0
02.05.2011 20:48 C:\Users\Timo\AppData\Local\Temp\Timo.bmp --------- 31832
02.05.2011 15:11 C:\Users\Timo\AppData\Local\Temp\History --------- 0
02.05.2011 15:11 C:\Users\Timo\AppData\Local\Temp\Cookies --------- 0
02.05.2011 15:11 C:\Users\Timo\AppData\Local\Temp\Temporary Internet Files --------- 0
01.05.2011 22:59 C:\Users\Timo\AppData\Local\Temp\Low --------- 0
----------------------------------------
C:\Program Files
02.05.2011 16:58 C:\Program Files\Malwarebytes' Anti-Malware --------- 4096
01.05.2011 22:59 C:\Program Files\CCleaner --------- 0
30.04.2011 13:18 C:\Program Files\Mozilla Firefox --------- 24576
27.04.2011 20:00 C:\Program Files\Free FLV Converter --------- 8192
25.04.2011 17:23 C:\Program Files\iTunes --------- 8192
25.04.2011 17:22 C:\Program Files\iPod --------- 0
25.04.2011 17:20 C:\Program Files\Bonjour --------- 4096
21.04.2011 21:57 C:\Program Files\Microsoft Silverlight --------- 4096
20.04.2011 19:32 C:\Program Files\InstallShield Installation Information --------- 20480
20.04.2011 19:32 C:\Program Files\Sony Ericsson --------- 0
19.04.2011 18:05 C:\Program Files\Internet Explorer --------- 4096
16.04.2011 13:48 C:\Program Files\Windows Mail --------- 4096
11.04.2011 10:32 C:\Program Files\DivX --------- 4096
11.04.2011 10:29 C:\Program Files\Real --------- 0
11.04.2011 10:29 C:\Program Files\Common Files --------- 8192
11.04.2011 10:28 C:\Program Files\eRightSoft --------- 0
03.04.2011 16:37 C:\Program Files\Microsoft SQL Server --------- 4096
28.03.2011 17:38 C:\Program Files\DVDVideoSoft --------- 0
26.03.2011 11:58 C:\Program Files\Microsoft --------- 0
20.03.2011 19:47 C:\Program Files\Windows Live --------- 4096
15.03.2011 22:39 C:\Program Files\Java --------- 4096
10.03.2011 18:53 C:\Program Files\Application Updater --------- 0
10.03.2011 18:53 C:\Program Files\pdfforge Toolbar --------- 0
01.02.2011 22:58 C:\Program Files\Freemake --------- 0
29.01.2011 13:48 C:\Program Files\Tersus Visual Programming Platform --------- 4096
26.01.2011 21:30 C:\Program Files\FreeTime --------- 0
25.01.2011 19:18 C:\Program Files\QuickMediaConverter --------- 0
15.01.2011 00:49 C:\Program Files\Microsoft Visual Studio 9.0 --------- 0
15.01.2011 00:42 C:\Program Files\Microsoft Synchronization Services --------- 0
15.01.2011 00:42 C:\Program Files\Microsoft SQL Server Compact Edition --------- 0
15.01.2011 00:38 C:\Program Files\Microsoft Visual Studio 10.0 --------- 4096
15.01.2011 00:36 C:\Program Files\Microsoft Help Viewer --------- 0
15.01.2011 00:36 C:\Program Files\Microsoft SDKs --------- 0
15.01.2011 00:36 C:\Program Files\MSBuild --------- 0
10.01.2011 23:09 C:\Program Files\Riva --------- 0
10.01.2011 23:04 C:\Program Files\AviSynth 2.5 --------- 0
10.01.2011 17:43 C:\Program Files\VideoLAN --------- 0
10.01.2011 17:30 C:\Program Files\SmarThru 4 --------- 28672
10.01.2011 17:29 C:\Program Files\Readiris10 --------- 40960
10.01.2011 17:20 C:\Program Files\Samsung --------- 0
08.01.2011 12:56 C:\Program Files\AVS4YOU --------- 0
08.01.2011 12:49 C:\Program Files\ALLCapture 3.0 Testversion --------- 8192
08.01.2011 12:43 C:\Program Files\Mainconcept --------- 0
08.01.2011 12:42 C:\Program Files\ProgDVB --------- 0
07.01.2011 19:43 C:\Program Files\SlySoft --------- 0
02.01.2011 17:30 C:\Program Files\ANNO 1602 K”nigs-Edition --------- 4096
02.01.2011 17:30 C:\Program Files\directx --------- 0
30.12.2010 20:38 C:\Program Files\Adobe --------- 0
14.12.2010 22:37 C:\Program Files\QuickTime --------- 4096
06.12.2010 18:34 C:\Program Files\Google --------- 4096
29.11.2010 22:03 C:\Program Files\Zattoo4 --------- 4096
29.11.2010 18:57 C:\Program Files\Apple Software Update --------- 4096
29.11.2010 18:51 C:\Program Files\GIMP-2.0 --------- 0
29.11.2010 18:34 C:\Program Files\Spamihilator --------- 8192
29.11.2010 18:26 C:\Program Files\Samsung Printers --------- 0
29.11.2010 13:59 C:\Program Files\PDFCreator --------- 4096
26.11.2010 13:22 C:\Program Files\Logitech --------- 0
26.11.2010 12:14 C:\Program Files\xp-AntiSpy --------- 4096
26.11.2010 11:56 C:\Program Files\Sony --------- 12288
26.11.2010 11:13 C:\Program Files\Cisco --------- 0
26.11.2010 11:10 C:\Program Files\ATI Technologies --------- 0
25.11.2010 23:53 C:\Program Files\Windows Portable Devices --------- 0
25.11.2010 20:56 C:\Program Files\Xvid --------- 4096
25.11.2010 20:54 C:\Program Files\WinRAR --------- 4096
25.11.2010 20:35 C:\Program Files\Windows Media Player --------- 4096
25.11.2010 20:35 C:\Program Files\Movie Maker --------- 4096
25.11.2010 17:35 C:\Program Files\Microsoft.NET --------- 4096
25.11.2010 16:53 C:\Program Files\Microsoft Works --------- 4096
25.11.2010 16:41 C:\Program Files\Microsoft Office --------- 4096
25.11.2010 16:20 C:\Program Files\Windows Calendar --------- 0
25.11.2010 16:20 C:\Program Files\Windows Sidebar --------- 4096
25.11.2010 16:20 C:\Program Files\Windows Collaboration --------- 4096
25.11.2010 16:20 C:\Program Files\Windows Journal --------- 4096
25.11.2010 16:20 C:\Program Files\Windows Photo Gallery --------- 4096
25.11.2010 16:20 C:\Program Files\Windows Defender --------- 4096
25.11.2010 15:48 C:\Program Files\Symantec --------- 0
25.11.2010 15:48 C:\Program Files\Norton AntiVirus --------- 0
25.11.2010 15:46 C:\Program Files\NortonInstaller --------- 0
25.11.2010 14:05 C:\Program Files\Gemeinsame Dateien --------- 0
25.11.2010 14:05 C:\Program Files\Windows NT --------- 4096
25.11.2010 08:29 C:\Program Files\Intel --------- 0
25.11.2010 08:28 C:\Program Files\InterVideo --------- 0
25.11.2010 08:24 C:\Program Files\ArcSoft --------- 0
25.11.2010 08:16 C:\Program Files\Skype --------- 0
25.11.2010 08:16 C:\Program Files\Roxio --------- 4096
25.11.2010 07:59 C:\Program Files\Google BAE --------- 0
25.11.2010 07:58 C:\Program Files\ATI --------- 0
25.11.2010 07:54 C:\Program Files\Big Fish Games Spiel-Suite --------- 4096
25.11.2010 07:53 C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites --------- 8192
10.07.2008 11:41 C:\Program Files\Synaptics --------- 0
10.07.2008 11:41 C:\Program Files\CONEXANT --------- 0
10.07.2008 11:39 C:\Program Files\Realtek --------- 0
21.01.2008 04:43 C:\Program Files\desktop.ini --------- 174
02.11.2006 15:01 C:\Program Files\Uninstall Information --------- 0
02.11.2006 14:37 C:\Program Files\Microsoft Games --------- 4096
02.11.2006 14:37 C:\Program Files\Reference Assemblies --------- 0
----------------------------------------
C:\ProgramData\..
Timo
Public
Default
desktop.ini
Default User
All Users
----------------------------------------
C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
----------------------------------------
Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process 0 Services 0 24 K
System 4 Services 0 15'364 K
smss.exe 504 Services 0 772 K
csrss.exe 636 Services 0 6'196 K
wininit.exe 700 Services 0 4'084 K
csrss.exe 712 Console 1 10'376 K
services.exe 744 Services 0 6'968 K
lsass.exe 760 Services 0 2'316 K
lsm.exe 768 Services 0 3'992 K
winlogon.exe 836 Console 1 5'784 K
svchost.exe 960 Services 0 5'820 K
svchost.exe 1020 Services 0 6'808 K
svchost.exe 1056 Services 0 38'192 K
Ati2evxx.exe 1156 Services 0 4'244 K
svchost.exe 1208 Services 0 13'444 K
svchost.exe 1248 Services 0 74'036 K
svchost.exe 1268 Services 0 28'920 K
audiodg.exe 1336 Services 0 17'176 K
svchost.exe 1360 Services 0 4'772 K
SLsvc.exe 1376 Services 0 11'592 K
svchost.exe 1400 Services 0 10'684 K
RTKAUDIOSERVICE.EXE 1496 Services 0 3'136 K
dwm.exe 1684 Console 1 45'656 K
explorer.exe 1716 Console 1 48'316 K
Ati2evxx.exe 1816 Console 1 6'296 K
svchost.exe 1900 Services 0 14'916 K
wlanext.exe 2008 Services 0 14'804 K
spoolsv.exe 316 Services 0 10'560 K
svchost.exe 440 Services 0 15'688 K
taskeng.exe 592 Console 1 10'680 K
AppleMobileDeviceService. 1620 Services 0 6'912 K
ApplicationUpdater.exe 1424 Services 0 3'504 K
mDNSResponder.exe 1896 Services 0 4'976 K
EvtEng.exe 1120 Services 0 15'912 K
iviRegMgr.exe 2080 Services 0 3'312 K
sqlservr.exe 2116 Services 0 1'952 K
sqlservr.exe 2204 Services 0 43'360 K
ccsvchst.exe 2272 Services 0 10'424 K
svchost.exe 2356 Services 0 5'240 K
RegSrvc.exe 2376 Services 0 4'392 K
SeaPort.EXE 2400 Services 0 8'316 K
sqlbrowser.exe 2448 Services 0 3'588 K
sqlwriter.exe 2492 Services 0 7'076 K
svchost.exe 2572 Services 0 6'900 K
SPMService.exe 2608 Services 0 28'544 K
WLIDSVC.EXE 2696 Services 0 8'936 K
SearchIndexer.exe 2732 Services 0 18'376 K
XAudio.exe 2868 Services 0 2'480 K
WLIDSVCM.EXE 2916 Services 0 2'812 K
WUDFHost.exe 3088 Services 0 5'040 K
ccsvchst.exe 3224 Console 1 10'332 K
WmiPrvSE.exe 3332 Services 0 6'132 K
SPMgr.exe 3632 Console 1 4'900 K
taskeng.exe 3680 Console 1 4'908 K
VAIOUpdt.exe 3780 Console 1 7'308 K
MSASCui.exe 1236 Console 1 17'828 K
SynTPEnh.exe 2220 Console 1 6'612 K
ISBMgr.exe 2344 Console 1 5'956 K
taskeng.exe 3608 Services 0 5'508 K
dllhost.exe 3016 Services 0 3'968 K
MOM.exe 4124 Console 1 11'088 K
SetPoint.exe 4220 Console 1 13'228 K
Scan2pc.exe 4336 Console 1 8'700 K
SSMMgr.exe 4352 Console 1 4'812 K
SearchSettings.exe 4384 Console 1 8'656 K
jusched.exe 4608 Console 1 3'720 K
mobsync.exe 4624 Console 1 6'876 K
DivXUpdate.exe 4652 Console 1 14'360 K
iTunesHelper.exe 4696 Console 1 11'924 K
ONENOTEM.EXE 4980 Console 1 700 K
spamihilator.exe 4988 Console 1 4'844 K
KHALMNPR.exe 5016 Console 1 9'716 K
iPodService.exe 5584 Services 0 5'236 K
CCC.exe 5792 Console 1 24'964 K
svchost.exe 1672 Services 0 6'180 K
firefox.exe 1048 Console 1 78'924 K
plugin-container.exe 3524 Console 1 19'432 K
OTL.exe 5528 Console 1 29'020 K
SearchProtocolHost.exe 4720 Services 0 8'704 K
cmd.exe 4900 Console 1 3'032 K
conime.exe 3244 Console 1 3'376 K
notepad.exe 5944 Console 1 4'624 K
notepad.exe 3876 Console 1 7'428 K
dllhost.exe 5188 Console 1 4'176 K
tasklist.exe 5716 Console 1 4'736 K
WmiPrvSE.exe 3592 Services 0 5'800 K
SearchFilterHost.exe 2480 Services 0 4'452 K
***** Ende des Scans 02.05.2011 um 20:58:10.57 ***
: Code:
ATTFilter Activation Assistant for the 2007 Microsoft Office suites Microsoft Corporation 24.11.2010 13.1MB
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 25.04.2011 10.2.159.1
Adobe Flash Player ActiveX Adobe Systems Incorporated 24.11.2010 9.0.124.0
Adobe Reader X (10.0.1) - Deutsch Adobe Systems Incorporated 11.02.2011 114.8MB 10.0.1
ANNO 1602 Königs-Edition 01.01.2011 100.3MB 1.00
Apple Application Support Apple Inc. 24.04.2011 50.5MB 1.5.1
Apple Mobile Device Support Apple Inc. 07.03.2011 21.3MB 3.4.0.25
Apple Software Update Apple Inc. 28.11.2010 2.21MB 2.1.2.120
ArcSoft WebCam Companion 2 ArcSoft 24.11.2010 22.5MB
ATI Catalyst Install Manager ATI Technologies, Inc. 25.11.2010 13.7MB 3.0.710.0
Big Fish Games Spiel-Suite 24.11.2010 160.5MB
Bing Bar Microsoft Corporation 25.03.2011 18.8MB 7.0.609.0
Bonjour Apple Inc. 24.04.2011 1.09MB 2.0.5.0
Browser Address Error Redirector 24.11.2010
CCleaner Piriform 30.04.2011 2.90MB 3.06
Click to Disc Sony Corporation 25.11.2010 67.9MB 1.2.73.04270
Click to Disc Editor Sony Corporation 25.11.2010 185.4MB 2.0.03.04150
Dev-C++ 5 beta 9 release (4.9.9.2) 14.01.2011
DivX-Setup DivX, LLC 10.04.2011 2.24MB 2.4.1.4
Free Audio CD Burner version 1.4.7 DVDVideoSoft Limited. 27.03.2011 3.04MB
Free FLV Converter V 6.96.0 Koyote Soft 26.04.2011 11.5MB 6.96.0.0
Free YouTube to MP3 Converter version 3.9.35.324 DVDVideoSoft Limited. 27.03.2011 3.71MB
Freemake Video Converter Version 2.0.1 Ellora Assets Corporation 31.01.2011 39.6MB 2.0.1
GIMP 2.6.11 The GIMP Team 28.11.2010 109.0MB 2.6.11
Google Chrome Google Inc. 05.12.2010 156.2MB 8.0.552.215
Google Earth Google 24.11.2010 31.9MB 4.2.198.2451
HDAUDIO SoftV92 Data Fax Modem with SmartCP 09.07.2008 1.01MB
Intel(R) PROSet/Wireless WiFi-Software Intel(R) Corporation 25.11.2010 79.0MB 12.04.3000
iTunes Apple Inc. 24.04.2011 141.8MB 10.2.2.12
Java(TM) 6 Update 24 Oracle 20.12.2010 95.0MB 6.0.240
Java(TM) 6 Update 6 Sun Microsystems, Inc. 09.07.2008 171.1MB 1.6.0.60
Logitech SetPoint 6.20 Logitech 25.11.2010 6.20.64
Malwarebytes' Anti-Malware Malwarebytes Corporation 01.05.2011 4.73MB
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft Corporation 24.11.2010 36.7MB
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 24.11.2010 36.7MB
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 24.11.2010 120.2MB 4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 24.11.2010 24.5MB 4.0.30319
Microsoft .NET Framework 4 Extended Microsoft Corporation 14.01.2011 45.9MB 4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack Microsoft Corporation 14.01.2011 11.6MB 4.0.30319
Microsoft .NET Framework 4 Multi-Targeting Pack Microsoft Corporation 13.01.2011 83.2MB 4.0.30319
Microsoft Help Viewer 1.0 Microsoft Corporation 14.01.2011 6.04MB 1.0.30319
Microsoft Help Viewer 1.0 Language Pack - DEU Microsoft Corporation 14.01.2011 6.04MB 1.0.30319
Microsoft Office 2003 Web Components Microsoft Corporation 25.11.2010 21.7MB 11.0.8003.0
Microsoft Office Home and Student 2007 Microsoft Corporation 24.11.2010 307MB 12.0.6425.1000
Microsoft Silverlight Microsoft Corporation 20.04.2011 20.1MB 4.0.60310.0
Microsoft SQL Server 2005 Microsoft Corporation 24.11.2010 42.5MB
Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 28.11.2010 1.73MB 3.1.0000
Microsoft SQL Server 2008 Microsoft Corporation 14.01.2011 563MB
Microsoft SQL Server 2008 Browser Microsoft Corporation 13.01.2011 7.99MB 10.1.2531.0
Microsoft SQL Server 2008 Native Client Microsoft Corporation 13.01.2011 3.23MB 10.1.2531.0
Microsoft SQL Server Compact 3.5 SP2 DEU Microsoft Corporation 13.01.2011 3.66MB 3.5.8080.0
Microsoft SQL Server Native Client Microsoft Corporation 02.04.2011 2.63MB 9.00.5000.00
Microsoft SQL Server VSS Writer Microsoft Corporation 13.01.2011 1.79MB 10.1.2531.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 25.11.2010 0.24MB 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable - KB2467175 Microsoft Corporation 18.04.2011 0.30MB 8.0.51011
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Corporation 25.11.2010 0.19MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Corporation 18.04.2011 0.58MB 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 25.11.2010 0.57MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 Microsoft Corporation 13.01.2011 0.58MB 9.0.30729.4974
Microsoft Visual C++ 2010 Express - DEU Microsoft Corporation 14.01.2011 387MB 10.0.30319
Mozilla Firefox (3.6.17) Mozilla 29.04.2011 29.3MB 3.6.17 (de)
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 24.11.2010 35.00KB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 24.11.2010 1.33MB 4.20.9876.0
Music Transfer Sony Corporation 24.11.2010 40.6MB 1.2.00.17290
Norton AntiVirus Symantec Corporation 24.11.2010 69.3MB 18.5.0.125
OpenMG Secure Module 5.4.00 Sony Corporation 25.11.2010 5.4.00.04020
PDFCreator Frank Heindörfer, Philip Chinery 28.11.2010 24.9MB 1.1.0
pdfforge Toolbar v4.3 Spigot, Inc. 09.03.2011 2.44MB 4.3
QuickTime Apple Inc. 13.12.2010 72.9MB 7.69.80.9
Readiris Pro 10 09.01.2011 99.8MB
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 09.07.2008 22.0MB 6.0.1.5653
Roxio Easy Media Creator 10 LJ Roxio 24.11.2010 5.22MB 10.1
Samsung CLX-216x Series Samsung Electronics CO.,LTD 09.01.2011 238MB
Samsung Universal Print Driver Samsung Electronics Co., Ltd. 28.11.2010 2.39MB 2.02.05.00:24
Setting Utility Series Sony Corporation 09.07.2008 10.3MB 4.1.00.07030
Skype™ 3.8 Skype Technologies S.A. 24.11.2010 27.9MB 3.8.115
SmarThru 4 09.01.2011 12.9MB
Spamihilator 0.9.9.53 (32-Bit) Michel Krämer 28.11.2010 5.41MB 0.9.9.53
Synaptics Pointing Device Driver Synaptics 09.07.2008 12.9MB 9.1.13.0
Uninstall 1.0.0.1 27.03.2011 31.1MB
Unity Web Player Unity Technologies ApS 17.12.2010 0.20MB
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) Microsoft Corporation 02.04.2011 23.2MB 9.00.5000.00
Unterstützungsdateien für Microsoft SQL Server 2008-Setup Microsoft Corporation 13.01.2011 29.8MB 10.1.2731.0
VAIO Control Center Sony Corporation 09.07.2008 4.63MB 3.1.00.07040
VAIO Data Restore Tool Sony Corporation 24.11.2010 6.49MB 1.0.04.01170
VAIO Energie Verwaltung Sony Corporation 09.07.2008 6.33MB 3.1.00.06190
VAIO Guide Sony Corporation 24.11.2010 10.3MB 2.4.00.06190
VAIO Launcher Sony Corporation 24.11.2010 7.45MB 2.1.00.06130
VAIO Original Funktion Einstellungen Sony Corporation 25.11.2010 1.76MB 2.0.2.02240
VAIO Update Sony Corporation 25.11.2010 17.3MB 5.1.1.04090
VLC media player 1.1.7 VideoLAN 05.02.2011 77.4MB 1.1.7
Windows Live Essentials Microsoft Corporation 20.03.2011 15.4.3508.1109
Windows Live Mesh ActiveX control for remote connections Microsoft Corporation 28.11.2010 5.57MB 15.4.5722.2
WinDVD for VAIO InterVideo Inc. 24.11.2010 96.5MB 8.0-B9.513
WinRAR 24.11.2010 3.77MB
Worms for Pocket PC 25.12.2010
xp-AntiSpy 3.97-9 Christian Taubenheim 25.11.2010 0.65MB
Xvid 1.2.2 final uninstall Xvid team (Koepi) 24.11.2010 0.75MB 1.2
Zattoo4 4.0.5 Zattoo Inc. 28.11.2010 39.9MB 4.0.5
|
| | #9 | |
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | Msn verschickt Spam! 1. Die alte Java-Versionen verbleiben auf dem PC...aus Sicherheitsgründen müssen entfernt werden,auch in Zukunft darauf achten! Falls nach einen neuen Systemstart noch existieren, die alten Einträge bitte deinstallieren Code:
ATTFilter Java(TM) 6 Update 6
deinstalliere: unter `Systemsteuerung -->Software -->Ändern/Entfernen...` Code:
ATTFilter pdfforge Toolbar <- Adware -Toolbar Immer die benutzerdefinierte Installation wählen, nicht die Standardinstallation, weil dann oft Sachen mitinstalliert werden, die man nicht braucht oder nicht möchte. Bei Installation bitte die Lizenzbestimmungen immer lesen, und nicht sofort überall den Haken setzen bzw gesetzten Haken belassen, weil damit stimmt man nämlich zu, dass andere "Fremdprogramm", oder sogar Adware (Werbe-Pop-ups) durch Partnerprogrammen, Sponsoren etc - mitinstalliert wird, weil sich Freeware damit finanziert. in diese Kategorie gehören noch einige, wie z.B: -> Unerwünschte Toolbars deinstallieren 3. Zitat:
lösche nur den Inhalt der Ordner, nicht die Ordner selbst! - Dateien, die noch in Benutzung sind,nicht löschbar. gib in der Suchleiste unter dem Windows Start Button folgendes ein: Code:
ATTFilter %temp%
- anschließend den Papierkorb leeren 4. reinige dein System mit Ccleaner:
5. erneut einen Scan mit OTL:
__________________ Warnung!: Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein! Anhang nicht öffnen, in unserem Forum erst nachfragen! Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten! Bitte diese Warnung weitergeben, wo Du nur kannst! |
| | #10 |
![]() | Msn verschickt Spam! Ich kann den %temp% Ordner nicht finden, wenn ich nach ihm suche findet es Ihn nicht. Wie kann ich Ihn sonst noch finden? Aber kann ich den nicht auch mit dem CCleaner leeren? Ach ja und noch eine Frage die beiden Dateien, die bei MBAM unter Quarantäne stehen, kann ich die endgültig löschen? |
| | #11 |
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | Msn verschickt Spam! Start-> Alle Programme-> Zubehör-> Ausführen-> dort %temp% reinschreiben... mit CCleaner geht ja auch: CCleaner als Admin starten => gehe auf den Button links oben "Cleaner", setze Häkchen unter Reiter "Windows" (alle außer "Eingabefeld Verlauf" und bei "Erweitert" nur ein Häkchen bei "Alte Prefetchdaten" und "Benutzerdefinierte Dateien und Ordner"). Einstellungen => Benutzerdefiniert => Zu bereinigende Dateien und Ordner => Ordner hinzufügen => Anstelle von <DeinBenutzername> trägst Du den Namen ein, mit dem Du bei Vista eingeloggt bist. C:\Users\<DeinBenutzername>\AppData\Local\Temp\*.* C:\Users\Default\AppData\Local\Temp\*.* C:\Windows\Temp\*.*
__________________ Warnung!: Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein! Anhang nicht öffnen, in unserem Forum erst nachfragen! Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten! Bitte diese Warnung weitergeben, wo Du nur kannst! |
| | #12 |
![]() | Msn verschickt Spam! Ich habe bereits diese Ordner. C:\Users\xxxx\AppData\Local\Temp\*.* C:\Windows\Temp\*.* Wie kann ich diesen (C:\Users\Default\AppData\Local\Temp\*.*) erstellen, brauche ich den überhaupt? Wie bereits gefragt, kann ich die beiden Datein die bei MBAM unter Quarantäne stehen endgültig löschen? |
| | #13 |
| /// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | Msn verschickt Spam! brauche ich den überhaupt? nein, muss nicht Wie bereits gefragt, kann ich die beiden Datein die bei MBAM unter Quarantäne stehen endgültig löschen? ja natürlich
__________________ Warnung!: Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein! Anhang nicht öffnen, in unserem Forum erst nachfragen! Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten! Bitte diese Warnung weitergeben, wo Du nur kannst! |
| | #14 |
![]() | Msn verschickt Spam! Also hier dir Ergebnisse von OTL: : Code:
ATTFilter OTL logfile created on: 03.05.2011 23:53:28 - Run 2 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\xxx Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000807 | Country: xxxxxxx| Language: DES | Date Format: dd.MM.yyyy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 53.00% Memory free 6.00 Gb Paging File | 5.00 Gb Available in Paging File | 79.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 289.92 Gb Total Space | 106.34 Gb Free Space | 36.68% Space Free | Partition Type: NTFS Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: xxxxxx | User Name: xxxx| Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Timo\Documents\sonstiges\Sonstiges\Sicherheit\OTL.exe (OldTimer Tools) PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe () PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) PRC - C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer) PRC - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccsvchst.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Logitech, Inc.) PRC - C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) PRC - C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (Sony Corporation) PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) PRC - C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation) PRC - C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) PRC - C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe () PRC - C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe () PRC - c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo) ========== Modules (SafeList) ========== MOD - C:\Users\x\Documents\sonstiges\Sonstiges\Sicherheit\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (BBSvc) -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.) SRV - (SeaPort) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) SRV - (NAV) -- C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ccSvcHst.exe (Symantec Corporation) SRV - (LBTServ) -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe (Logitech, Inc.) SRV - (Samsung UPD Service) -- C:\Windows\System32\SUPDSvc.exe (Samsung Electronics CO., LTD.) SRV - (VUAgent) -- C:\Program Files\Sony\VAIO Update 5\VUAgent.exe (Sony Corporation) SRV - (EvtEng) Intel(R) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) SRV - (RegSrvc) Intel(R) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation) SRV - (PACSPTISVR) -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe (Sony Corporation) SRV - (RtkAudioService) -- C:\Windows\RTKAUDIOSERVICE.EXE (Realtek Semiconductor) SRV - (VAIO Power Management) -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (IviRegMgr) -- c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo) ========== Driver Services (SafeList) ========== DRV - (BHDrvx86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20110430.001\BHDrvx86.sys (Symantec Corporation) DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110503.003\NAVEX15.SYS (Symantec Corporation) DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110503.003\NAVENG.SYS (Symantec Corporation) DRV - (IDSVix86) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20110429.002\IDSvix86.sys (Symantec Corporation) DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation) DRV - (SYMTDIv) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SYMTDIV.SYS (Symantec Corporation) DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation) DRV - (SymEvent) -- C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation) DRV - (SRTSP) -- C:\Windows\System32\Drivers\NAV\1205000.07D\SRTSP.SYS (Symantec Corporation) DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\system32\drivers\NAV\1205000.07D\SRTSPX.SYS (Symantec Corporation) DRV - (SymEFA) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMEFA.SYS (Symantec Corporation) DRV - (SymIRON) -- C:\Windows\system32\drivers\NAV\1205000.07D\Ironx86.SYS (Symantec Corporation) DRV - (SymDS) -- C:\Windows\system32\drivers\NAV\1205000.07D\SYMDS.SYS (Symantec Corporation) DRV - (LUsbFilt) -- C:\Windows\System32\drivers\LUsbFilt.sys (Logitech, Inc.) DRV - (LMouFilt) -- C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.) DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.) DRV - (s1039bus) Sony Ericsson Device 1039 driver (WDM) -- C:\Windows\System32\drivers\s1039bus.sys (MCCI Corporation) DRV - (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS) -- C:\Windows\System32\drivers\s1039nd5.sys (MCCI Corporation) DRV - (s1039mdm) -- C:\Windows\System32\drivers\s1039mdm.sys (MCCI Corporation) DRV - (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM) -- C:\Windows\System32\drivers\s1039unic.sys (MCCI Corporation) DRV - (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s1039mgmt.sys (MCCI Corporation) DRV - (s1039obex) -- C:\Windows\System32\drivers\s1039obex.sys (MCCI Corporation) DRV - (s1039mdfl) -- C:\Windows\System32\drivers\s1039mdfl.sys (MCCI Corporation) DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation) DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.) DRV - (RsFx0103) -- C:\Windows\System32\drivers\RsFx0103.sys (Microsoft Corporation) DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC) DRV - (DMICall) -- C:\Windows\System32\drivers\DMICall.sys (Sony Corporation) DRV - (risdptsk) -- C:\Windows\System32\drivers\risdptsk.sys (REDC) DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.) DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys (Microsoft Corporation) DRV - (SFEP) -- C:\Windows\System32\drivers\SFEP.sys (Sony Corporation) DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.) DRV - (regi) -- C:\Windows\System32\drivers\regi.sys (InterVideo) DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.SYS (Samsung Electronics) DRV - (DgiVecp) -- C:\Windows\System32\drivers\DGIVECP.SYS (Samsung Electronics Co., Ltd.) DRV - (pfc) -- C:\Windows\System32\drivers\pfc.sys (Padus, Inc.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://eu.ask.com?o=15780&l=dis IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "hxxp://www.google.ch/" FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.1 FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.4.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPlgn\ [2011.01.14 18:35:42 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.04.30 13:18:27 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.04.30 13:18:27 | 000,000,000 | ---D | M] [2010.11.25 20:45:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Timo\AppData\Roaming\mozilla\Extensions [2011.05.03 13:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\x\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions [2010.12.21 22:28:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\xxxx\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.02.10 18:47:22 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\xxxx\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8} [2011.02.02 23:20:09 | 000,000,000 | ---D | M] (20-20 3D Viewer) -- C:\Users\Timo\AppData\Roaming\mozilla\Firefox\Profiles\ob9h2uln.default\extensions\2020Player@2020Technologies.com [2010.09.28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\ob9h2uln.default\searchplugins\askcom.xml [2011.05.03 13:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010.12.21 18:11:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011.03.15 22:40:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011.01.14 18:35:42 | 000,000,000 | ---D | M] (Norton IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\IPSFFPLGN [2011.02.02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2010.10.27 07:44:13 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.10.27 07:44:13 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml [2010.10.27 07:44:13 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.10.27 07:44:13 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.10.27 07:44:13 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.5.0.125\ips\ipsbho.dll (Symantec Corporation) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found. O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) O4 - HKLM..\Run: [Maple_S2P] C:\Program Files\Samsung\Samsung CLX-216x Series\SPanel\PSU\Scan2pc.exe () O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe () O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - Startup: C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Timo\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - File not found O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\Windows\System32\VESWinlogon.dll (Sony Corporation) O24 - Desktop WallPaper: C:\Users\x\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\x\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) - F:\Autorun.exe -- [ CDFS ] O32 - AutoRun File - [1999.08.31 05:52:00 | 000,000,766 | R--- | M] () - F:\Autorun.ico -- [ CDFS ] O32 - AutoRun File - [2001.09.06 01:04:00 | 000,000,283 | R--- | M] () - F:\Autorun.inf -- [ CDFS ] O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell - "" = AutoRun O33 - MountPoints2\{085f78fb-6b57-11e0-9495-001dba24bb8b}\Shell\AutoRun\command - "" = G:\Startme.exe O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Acrobat\command - "" = F:\.\ar500deu.exe -- [2001.09.06 01:04:00 | 009,124,984 | R--- | M] () O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe -- [1999.08.31 05:52:00 | 000,598,016 | R--- | M] (MAX DESIGN) O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\DirectX\command - "" = F:\.\DirectX\dxsetup.exe -- [2001.10.16 12:24:46 | 000,140,288 | R--- | M] () O33 - MountPoints2\{6d3612f7-f856-11df-9c3f-806e6f6e6963}\Shell\Setup\command - "" = F:\.\Setup.exe -- [2002.12.02 15:33:00 | 000,107,512 | R--- | M] () O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell - "" = AutoRun O33 - MountPoints2\{ced634c9-1cce-11e0-8b7f-001dba24bb8b}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a O33 - MountPoints2\{dda96fd3-fbd3-11df-a565-001dba24bb8b}\Shell\AutoRun\command - "" = G:\wd_windows_tools\WDEULA.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.05.03 13:18:50 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{B8DE6097-E19B-4757-8F9E-BA1FCD00B02E} [2011.05.02 16:58:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\Malwarebytes [2011.05.02 16:58:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Malwarebytes' Anti-Malware [2011.05.02 16:58:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011.05.02 16:58:10 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011.05.02 16:58:10 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011.05.02 12:29:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{227CABBB-BF91-469F-8E02-D4D868EB4188} [2011.05.01 15:19:45 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{1C9253E1-D764-429F-85F4-AA2052B834DF} [2011.04.29 15:30:57 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{9802831A-8BF0-472C-921A-BC05E73CEEE3} [2011.04.28 18:13:08 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{C651C691-93ED-4E9E-94B4-02731314E127} [2011.04.27 20:00:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Free FLV Converter [2011.04.27 20:00:17 | 000,000,000 | ---D | C] -- C:\Program Files\Free FLV Converter [2011.04.27 17:22:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll [2011.04.27 17:22:26 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll [2011.04.27 17:22:22 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll [2011.04.27 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{442D6840-DFC6-4D21-BDAC-44DEF9361D1B} [2011.04.26 18:45:23 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{62042D88-21B2-49D2-9B41-BCCA7ED72F19} [2011.04.25 17:23:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\iTunes [2011.04.25 17:22:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2011.04.25 17:22:44 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2011.04.25 17:19:59 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2011.04.25 13:48:05 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{23A5F032-A21F-4F28-85D9-A4FE4C85642A} [2011.04.24 12:03:27 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{AFD43F2C-5F4F-495F-898D-F66F7301E02B} [2011.04.23 22:03:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{6CE53D7B-F97B-408C-B5FC-386964457F1B} [2011.04.23 00:20:31 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{1AE88077-B54F-49FA-B952-20C02E148367} [2011.04.22 12:20:07 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Local\{EA904536-19B8-4BA0-A089-F1BB29F222EB} [2011.04.21 16:51:26 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Local\{E8790765-5B89-44CD-AB59-0A1C66CE799C} [2011.04.20 19:33:05 | 000,124,016 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdm.sys [2011.04.20 19:33:05 | 000,123,504 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039unic.sys [2011.04.20 19:33:05 | 000,117,872 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mgmt.sys [2011.04.20 19:33:05 | 000,113,904 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039obex.sys [2011.04.20 19:33:05 | 000,098,672 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039bus.sys [2011.04.20 19:33:05 | 000,025,456 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039nd5.sys [2011.04.20 19:33:05 | 000,014,960 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039mdfl.sys [2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cmnt.sys [2011.04.20 19:33:05 | 000,012,528 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cm.sys [2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039whnt.sys [2011.04.20 19:33:05 | 000,012,400 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039wh.sys [2011.04.20 19:33:05 | 000,010,992 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s1039cr.sys [2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson [2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme\Sony Ericsson [2011.04.20 19:32:59 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson [2011.04.20 13:21:45 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{A93F3534-7BB5-402A-8155-74318E533724} [2011.04.19 18:10:18 | 000,000,000 | ---D | C] -- C:\Users\Timo\AppData\Local\{845A209A-BC21-4777-9122-6FD7E4A91BAF} [2011.04.19 17:34:37 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2011.04.19 17:34:37 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2011.04.19 17:34:37 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2011.04.19 17:34:37 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011.04.19 17:34:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2011.04.19 17:34:36 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2011.04.19 17:34:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2011.04.19 17:34:36 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2011.04.19 17:34:35 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2011.04.19 17:34:35 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2011.04.19 17:34:35 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011.04.19 17:34:35 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2011.04.19 17:34:35 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2011.04.19 17:34:35 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2011.04.19 17:34:35 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2011.04.19 17:34:35 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2011.04.19 17:34:35 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2011.04.19 17:34:34 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2011.04.19 17:34:34 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011.04.19 17:34:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2011.04.19 17:34:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2011.04.19 17:34:34 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2011.04.19 17:34:33 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011.04.19 17:34:33 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2011.04.19 17:34:33 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2011.04.19 17:34:32 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011.04.19 17:34:32 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll [2011.04.19 17:34:32 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll [2011.04.19 17:34:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011.04.19 17:34:32 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll [2011.04.19 17:34:32 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2011.04.19 17:34:31 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2011.04.19 17:34:31 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2011.04.19 17:34:31 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll [2011.04.19 17:34:31 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011.04.19 17:34:31 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2011.04.19 17:34:31 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2011.04.19 17:34:31 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2011.04.19 17:34:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2011.04.16 00:30:31 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2011.04.15 17:50:29 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2011.04.15 17:50:29 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2011.04.15 17:50:13 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll [2011.04.15 17:50:13 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll [2011.04.15 17:50:03 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2011.04.15 17:49:59 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe [2011.04.11 10:37:58 | 000,000,000 | ---D | C] -- C:\divx [2011.04.10 18:37:46 | 000,000,000 | ---D | C] -- C:\Program Files\Real [2011.04.10 18:37:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Real [2011.04.10 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Roaming\Real [2011.04.10 18:36:03 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft [2011.04.10 17:59:57 | 000,000,000 | ---D | C] -- C:\OutputFolder [2011.04.07 17:15:22 | 000,000,000 | ---D | C] -- C:\Users\xxxx\AppData\Roaming\DonationCoder [2011.04.07 17:15:21 | 000,000,000 | ---D | C] -- C:\Users\xxxx\Documents\DonationCoder [2011.04.06 16:20:16 | 000,197,920 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll [2011.04.06 16:20:16 | 000,107,808 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe [2011.04.06 16:20:16 | 000,091,424 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssd.dll [2011.04.06 16:20:16 | 000,075,040 | ---- | C] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll ========== Files - Modified Within 30 Days ========== [2011.05.03 23:17:32 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.05.03 23:17:32 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.05.03 21:17:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.05.03 21:17:31 | 3186,659,328 | -HS- | M] () -- C:\hiberfil.sys [2011.05.01 23:31:53 | 000,056,832 | ---- | M] () -- C:\Users\xxxx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.05.01 22:59:09 | 000,000,764 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011.04.26 22:37:39 | 000,002,593 | ---- | M] () -- C:\Users\xxxx\Desktop\Microsoft Office Excel 2007.lnk [2011.04.25 19:43:51 | 000,002,591 | ---- | M] () -- C:\Users\xxxx\Desktop\Microsoft Office Word 2007.lnk [2011.04.25 17:23:50 | 000,001,624 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2011.04.20 19:37:59 | 000,745,254 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.04.20 19:37:58 | 000,794,826 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.04.20 19:37:58 | 000,193,608 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.04.20 19:37:58 | 000,161,784 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.04.19 17:34:53 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat [2011.04.19 17:34:53 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat [2011.04.19 17:34:37 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll [2011.04.19 17:34:37 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll [2011.04.19 17:34:37 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe [2011.04.19 17:34:37 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2011.04.19 17:34:36 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2011.04.19 17:34:36 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll [2011.04.19 17:34:36 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe [2011.04.19 17:34:36 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll [2011.04.19 17:34:35 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat [2011.04.19 17:34:35 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll [2011.04.19 17:34:35 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec [2011.04.19 17:34:35 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll [2011.04.19 17:34:35 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2011.04.19 17:34:35 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll [2011.04.19 17:34:35 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll [2011.04.19 17:34:35 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe [2011.04.19 17:34:35 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf [2011.04.19 17:34:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll [2011.04.19 17:34:34 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2011.04.19 17:34:34 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll [2011.04.19 17:34:34 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe [2011.04.19 17:34:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll [2011.04.19 17:34:34 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll [2011.04.19 17:34:33 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2011.04.19 17:34:33 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll [2011.04.19 17:34:33 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe [2011.04.19 17:34:32 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2011.04.19 17:34:32 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll [2011.04.19 17:34:32 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll [2011.04.19 17:34:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2011.04.19 17:34:32 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll [2011.04.19 17:34:32 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll [2011.04.19 17:34:31 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2011.04.19 17:34:31 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll [2011.04.19 17:34:31 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll [2011.04.19 17:34:31 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll [2011.04.19 17:34:31 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll [2011.04.19 17:34:31 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll [2011.04.19 17:34:31 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll [2011.04.19 17:34:31 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe [2011.04.16 13:51:33 | 000,403,848 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.04.13 17:24:10 | 000,000,447 | ---- | M] () -- C:\Users\xxxx\Desktop\Schule - Verknüpfung.lnk [2011.04.11 10:30:46 | 000,002,032 | ---- | M] () -- C:\Users\xxxx\AppData\Local\d3d9caps.dat [2011.04.09 18:13:09 | 000,005,146 | ---- | M] () -- C:\Users\Timo\.recently-used.xbel [2011.04.07 21:38:48 | 000,000,011 | R--- | M] () -- C:\Windows\amunres.lsl [2011.04.07 17:15:22 | 000,000,058 | ---- | M] () -- C:\Users\xxxx\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat [2011.04.06 16:20:16 | 000,197,920 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll [2011.04.06 16:20:16 | 000,107,808 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe [2011.04.06 16:20:16 | 000,091,424 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll [2011.04.06 16:20:16 | 000,075,040 | ---- | M] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll ========== Files Created - No Company Name ========== [2011.04.25 17:23:50 | 000,001,624 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2011.04.19 17:34:35 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf [2011.04.13 17:24:10 | 000,000,447 | ---- | C] () -- C:\Users\xxxx\Desktop\Schule - Verknüpfung.lnk [2011.04.09 18:13:09 | 000,005,146 | ---- | C] () -- C:\Users\Timo\.recently-used.xbel [2011.04.07 21:38:48 | 000,000,011 | R--- | C] () -- C:\Windows\amunres.lsl [2011.04.07 17:15:22 | 000,000,058 | ---- | C] () -- C:\Users\xxxx\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat [2011.01.10 23:04:20 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll [2011.01.10 17:30:47 | 000,010,231 | ---- | C] () -- C:\Users\xxxx\AppData\Roaming\SmarThruOptions.xml [2011.01.10 17:30:35 | 000,036,864 | ---- | C] () -- C:\Windows\System32\SvcMan.exe [2011.01.10 17:30:03 | 000,172,032 | ---- | C] () -- C:\Windows\System32\SecSNMP.dll [2011.01.10 17:29:46 | 000,000,124 | ---- | C] () -- C:\Windows\Readiris.ini [2011.01.10 17:29:42 | 000,023,040 | ---- | C] () -- C:\Windows\System32\irisco32.dll [2011.01.10 17:27:03 | 000,458,752 | ---- | C] () -- C:\Windows\ssndii.exe [2011.01.10 17:22:57 | 000,086,016 | R--- | C] () -- C:\Windows\WiaInst.exe [2011.01.10 17:21:48 | 000,217,088 | R--- | C] () -- C:\Windows\System32\ssminidriver.dll [2011.01.10 17:21:48 | 000,027,136 | R--- | C] () -- C:\Windows\System32\ssimgfilter.dll [2011.01.10 17:21:48 | 000,011,264 | R--- | C] () -- C:\Windows\System32\sssegfilter.dll [2011.01.10 17:21:48 | 000,010,752 | R--- | C] () -- C:\Windows\System32\sserrhandler.dll [2011.01.10 17:20:21 | 000,022,723 | ---- | C] () -- C:\Windows\System32\cx21sl3.dll [2010.11.29 23:06:13 | 000,000,079 | -HS- | C] () -- C:\ProgramData\.zreglib [2010.11.29 22:06:15 | 000,017,408 | ---- | C] () -- C:\Users\xxxx\AppData\Local\WebpageIcons.db [2010.11.29 20:10:47 | 000,056,832 | ---- | C] () -- C:\Users\xxxx\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.11.29 18:25:12 | 000,026,624 | ---- | C] () -- C:\Windows\System32\spd__l.dll [2010.11.29 18:25:11 | 000,283,136 | ---- | C] () -- C:\Windows\System32\DscPnt.dll [2010.11.29 18:25:11 | 000,259,888 | ---- | C] () -- C:\Windows\SUPDRun.exe [2010.11.29 18:25:11 | 000,151,552 | ---- | C] () -- C:\Windows\System32\spd__ci.exe [2010.11.29 13:59:13 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll [2010.11.25 20:56:16 | 000,524,288 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2010.11.25 20:56:16 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2010.11.25 16:02:30 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2010.11.25 16:02:00 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2010.11.25 16:02:00 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2010.11.25 14:09:21 | 000,002,032 | ---- | C] () -- C:\Users\xxxx\AppData\Local\d3d9caps.dat [2010.11.25 08:24:42 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI [2009.08.03 16:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll [2009.08.03 16:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe [2009.05.14 23:22:08 | 000,011,264 | ---- | C] () -- C:\Windows\System32\atimuixx.dll [2008.10.29 18:13:34 | 000,180,720 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2008.07.10 21:07:09 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1511.dll [2008.07.10 21:07:08 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat [2008.07.10 21:07:08 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll [2008.07.10 21:07:08 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe [2008.07.10 21:04:31 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll [2008.07.10 11:22:18 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2008.01.21 09:15:58 | 000,794,826 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2008.01.21 09:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2008.01.21 09:15:58 | 000,193,608 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2008.01.21 09:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 14:47:37 | 000,403,848 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 12:33:01 | 000,745,254 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006.11.02 12:33:01 | 000,161,784 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2002.09.18 00:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe ========== Alternate Data Streams ========== @Alternate Data Stream - 728 bytes -> C:\Users\xxxx\Documents\Französisch.eml:OECustomProperty < End of report > |
| | #15 |
![]() | Msn verschickt Spam! Hier noch das zweite Ergebniss: :OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 03.05.2011 23:53:28 - Run 2
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\x\Documents\sonstiges\Sonstiges\Sicherheit
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000807 | Country: xxxx| Language: xxx| Date Format: dd.MM.yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 53.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.92 Gb Total Space | 106.34 Gb Free Space | 36.68% Space Free | Partition Type: NTFS
Drive F: | 687.65 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: x-MOBIL | User Name: x| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{401FF33D-6A49-4D27-BBDC-288AEC1B47AD}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{904A90D9-9334-44C7-84F4-19FBE45F3126}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{FFDFCD60-B8C4-466B-82DE-C37E26F0E777}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0997A8ED-77C6-4B94-9A5F-76027ADAF832}" = protocol=6 | dir=in | app=c:\program files\spamihilator\cdcc.exe |
"{232838F7-EB3D-4154-8350-2D52133D83EE}" = protocol=17 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{41EAD167-C645-4291-988C-5E5FB5D96D14}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4E86B8B3-90AF-41B2-803E-08F68EF5DD05}" = protocol=6 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{7BB77A5D-DD19-48C1-94DE-84CEAA164402}" = protocol=6 | dir=in | app=c:\program files\spamihilator\spamihilator.exe |
"{870998A7-077C-44F9-B329-07BB00BFE55B}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{8C5B5EDE-EC52-4FB0-88B2-53ABF6E23750}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{94752534-85DD-439D-9702-CE8A9F95CE99}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{98439142-B30E-4303-A3BE-5078232DB6AE}" = protocol=6 | dir=in | app=c:\program files\spamihilator\dccproc.exe |
"{9F2751DE-ECD1-407C-9DDB-0E12AA96A150}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{A68D62C1-2C51-4B3F-9232-9632E3CD4AEC}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B2133616-A3F7-49B3-9DCD-EC1840293301}" = protocol=17 | dir=in | app=c:\program files\spamihilator\spamihilator.exe |
"{CE35DEE9-D716-47B8-A16D-D010D06BD81E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{DB9F1547-3694-4EF1-914C-0F870F1F6091}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{E08C5138-0E63-4839-BD60-26E3321AB30E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E625A7E7-FFE7-46F7-AB6F-33F118F5F629}" = protocol=17 | dir=in | app=c:\program files\spamihilator\cdcc.exe |
"{F1E851DF-11D8-42F5-947E-6CFDF69F6CDC}" = protocol=17 | dir=in | app=c:\program files\spamihilator\dccproc.exe |
"TCP Query User{BF006466-157E-4246-A8A3-1E8C88211742}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{18A8ACC5-B149-4E3C-A053-817CC2E96366}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{077A7810-A937-4465-AD08-ACED9807995F}" = ANNO 1602 Königs-Edition
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Central Data
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B9B76C9-4967-59FC-C994-191AEA152F04}" = ATI Catalyst Install Manager
"{14291118-0C19-45EA-A4FA-5C1C0F5FDE09}" = Primo
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1C2B3CEA-482E-4453-B3E2-C9731337828A}" = Microsoft SQL Server 2008 Native Client
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Central Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{202F2838-156B-FC76-013F-9241B9673F39}" = CCC Help Thai
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 24
"{2B4E24A0-A06F-488D-87D8-16738E5E1104}" = Windows Live Family Safety
"{325ED81A-EC15-7CE8-729B-0392A1DD3854}" = CCC Help Czech
"{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIO Guide
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver
"{353FE16B-30FE-469A-BF55-B978F4218003}" = iTunes
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCA23DD-CEDA-CC7F-C74C-4D1EDAE919AA}" = Catalyst Control Center Graphics Full New
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{42DD2173-B7CA-8AB3-8AC2-40DFE2CA6FBC}" = CCC Help German
"{430DD2C5-65FD-9781-F9F2-693CAF05CD10}" = Catalyst Control Center InstallProxy
"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{49B8916D-1DEA-F18A-731F-BF0FE209C63B}" = CCC Help Chinese Standard
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser
"{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"{4EEAF8D8-CB79-06CA-A566-EAC1726DAABB}" = CCC Help Finnish
"{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Easy Media Creator 10 LJ
"{540DB82A-EE11-BBC1-8BD8-BB7D937A53A4}" = CCC Help Hungarian
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5882396B-9FB3-37AC-1AE1-5EA344BD7705}" = Catalyst Control Center Graphics Previews Vista
"{5BA149D9-D5FA-5AB3-400B-9F1BF424B7CE}" = CCC Help Chinese Traditional
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5C5EE8F2-0B38-4C13-AE4E-A87A237FE718}" =
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F5867F0-2D23-4338-A206-01A76C823924}" = VAIO Energie Verwaltung
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{642F96CC-1D3B-20DE-8673-44EE15B3DC2F}" = CCC Help Portuguese
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = Click to Disc
"{6D26ACF9-4919-0744-C509-28EAF53112D4}" = CCC Help Dutch
"{6E9CFEF5-0245-411F-8587-CF83DF9D4B05}" = Microsoft SQL Server 2008 Database Engine Services
"{71256374-2053-CF0F-BD54-20082980B95C}" = Catalyst Control Center Graphics Full Existing
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{72EEB695-388B-4835-8EA6-0C04545B06B9}" = Intel(R) PROSet/Wireless WiFi-Software
"{737D8F4D-24D4-D626-DEC0-9E39A6166890}" = CCC Help Danish
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Central Audio
"{74B705C2-173A-FFD1-98BC-AD5FB647AB38}" = CCC Help Polish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{784BDC03-2D22-BCAE-5CAC-84AFA799FBDE}" = CCC Help Turkish
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7C404084-C5A6-42FF-B731-0BAC79A6E134}" = VAIO Original Funktion Einstellungen
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{8572CE7D-46B0-70B3-96CD-534F07B35F5D}" = CCC Help Italian
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87544F2E-CCA5-01BC-AEBC-D8C1D759EE61}" = CCC Help English
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8ED5D0B7-A193-413F-815A-530BE36B38F7}" = Spamihilator 0.9.9.53 (32-Bit)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90A40407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{90B38901-52C8-85A7-D6C8-9A5592C9FCAA}" = CCC Help Greek
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95229EF6-F4A1-413A-BA50-668311FAFE19}" = VAIO Original Function Settings
"{9648D00F-0589-619B-6114-BF2A0620168B}" = CCC Help Korean
"{96D0B6C6-5A72-4B47-8583-A87E55F5FE81}" =
"{9805E4EE-9B66-CABD-AF6B-4B84F2A8EF46}" = Skins
"{9973498D-EA29-4A68-BE0B-C88D6E03E928}" = ArcSoft WebCam Companion 2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AA2D735-3375-42D4-9A61-3FFEF82599D6}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup
"{9AC34FA1-BCDE-1D09-5DB7-EB6A064FDEA9}" = CCC Help Spanish
"{9B973FC0-E71F-6F89-10D6-1BFD063D1707}" = CCC Help Swedish
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9EAC0E21-510E-4259-A9C6-F5D5B8969036}" = Catalyst Control Center - Branding
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A3979A05-6834-D0A7-75CD-71B5A9E5F4C0}" = Catalyst Control Center Localization All
"{A6F21795-E629-35B2-9487-00A8363B28AA}" = Catalyst Control Center Graphics Light
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Central Copy
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B8E9F8A1-9F4D-43D5-ABD6-1DF067FAA469}" = Microsoft SQL Server 2008 Database Engine Services
"{C0AD2831-3398-A078-CBEB-39A6B381BB56}" = CCC Help Japanese
"{C18A02EC-966B-E7A7-9AC9-082F770ABF9B}" = CCC Help Russian
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{C9C390CC-F9B9-EFE8-27DF-6EB7FF8F8760}" = CCC Help Norwegian
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CD431A7B-88D8-0823-E66F-CCFAEA6DA7B4}" = ccc-core-static
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Music Transfer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF0F8D1B-5FB9-468D-BD88-E6239906D2B7}" = Click to Disc
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D47E6B9C-F5A5-23B7-AB6A-3806AD4C9529}" = ccc-utility
"{D6DA6836-77C2-5338-10E3-D7A6CD65681D}" = Catalyst Control Center Core Implementation
"{DA8F979E-43B9-3EEC-721C-F297D9509992}" = Catalyst Control Center Graphics Previews Common
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Central Core
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}" = Microsoft SQL Server Native Client
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" =
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FE0782BC-7AB0-CF6A-6E38-D3040462C7EC}" = CCC Help French
"{FE51662F-D8F6-43B5-99D9-D4894AF00F83}" = Roxio Easy Media Creator Home
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"BFG-Big Fish Games Spiel-Suite" = Big Fish Games Spiel-Suite
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DivX Setup.divx.com" = DivX-Setup
"dt icon module" =
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free FLV Converter_is1" = Free FLV Converter V 6.96.0
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324
"Freemake Video Converter_is1" = Freemake Video Converter Version 2.0.1
"gtfirstboot Setting Request" =
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}" = Click to Disc Editor
"InstallShield_{AEA6A4C2-7C4E-48F9-A770-879DE2EDEE1B}" = OpenMG Secure Module 5.4.00
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MFU Module" =
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"NAV" = Norton AntiVirus
"ProInst" = Intel PROSet Wireless
"Samsung CLX-216x Series" = Samsung CLX-216x Series
"Samsung Universal Print Driver" = Samsung Universal Print Driver
"sp6" = Logitech SetPoint 6.20
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"VAIO Help and Support" =
"VLC media player" = VLC media player 1.1.7
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Worms for Pocket PC" = Worms for Pocket PC
"xp-AntiSpy" = xp-AntiSpy 3.97-9
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Zattoo4" = Zattoo4 4.0.5
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 26.04.2011 12:44:27 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description =
Error - 26.04.2011 13:07:56 | Computer Name = x-Mobil | Source = EventSystem | ID = x
Description =
Error - 26.04.2011 16:12:40 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description =
Error - 26.04.2011 17:16:02 | Computer Name = x-Mobil | Source = EventSystem | ID = 4621
Description =
Error - 27.04.2011 11:13:22 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description =
Error - 27.04.2011 14:07:05 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
0xc0000005, Fehleroffset 0x7265766e, Prozess-ID 0x150, Anwendungsstartzeit 01cc0505a59fd47e.
Error - 27.04.2011 14:08:09 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
0xc0000005, Fehleroffset 0x7265766e, Prozess-ID 0x1754, Anwendungsstartzeit 01cc0505a2c479ee.
Error - 27.04.2011 14:08:10 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
0xc0000005, Fehleroffset 0x7265766e, Prozess-ID 0x154c, Anwendungsstartzeit 01cc0505a08f235e.
Error - 27.04.2011 14:08:12 | Computer Name = x-Mobil | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung FLVToX.exe, Version 2.0.0.29, Zeitstempel 0x4be49305,
fehlerhaftes Modul unknown, Version 0.0.0.0, Zeitstempel 0x00000000, Ausnahmecode
0xc0000005, Fehleroffset 0x7265766e, Prozess-ID 0x768, Anwendungsstartzeit 01cc0505a46b4c1e.
Error - 28.04.2011 12:12:31 | Computer Name = x-Mobil | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 11.02.2011 18:41:04 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 04:54:56 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 04:54:56 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 05:14:38 | Computer Name = x-Mobil | Source = DCOM | ID = 10005
Description =
Error - 12.02.2011 05:14:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7009
Description =
Error - 12.02.2011 05:14:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 11:37:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 11:37:39 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 14:18:13 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
Error - 12.02.2011 14:18:13 | Computer Name = x-Mobil | Source = Service Control Manager | ID = 7000
Description =
< End of report >
|
![]() |
| Themen zu Msn verschickt Spam! |
| andere, besuch, computer, e-mail, enthalten, erhalte, forum, freund, hoffe, interne, internet, link, msn, nachrichten, nichts, norton, passwort, posteingang, seite, sofort, spam, stunden, trojaner, verschickt, virus, wieder weg |