Gain.Gator und Probleme mit Firefox (fvd.kallout.com)

So0ofer · 02.06.2011, 16:20

Den Internet Explorer 9 habe ich nicht installiert , da ich im moment nur Firefox verwende und demnach auf die Installation der neuen Version verzichtet .

Probleme gab es keine und der Keylogger den du meinst ist vermutlich der absichtilich installierte REFOG Keylogger , zur Beruhigung .

Das rauseditieren meines Namens war mir nach gefühlten 10000 Einträgen zu doof .

BitTorrent wurde nie bewusst installiert und wird auch nicht in der Programmliste aufgeführt ! :/

Hier die aswMBR.txt :

aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software
Run date: 2011-05-31 16:52:05
-----------------------------
16:52:05.814 OS Version: Windows x64 6.1.7600
16:52:05.814 Number of processors: 2 586 0x170A
16:52:05.814 ComputerName: ***-PC UserName: ***
16:52:10.026 Initialize success
16:52:14.191 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
16:52:14.191 Disk 0 Vendor: ST9500420ASG 0003SDM1 Size: 476940MB BusType: 11
16:52:16.250 Disk 0 MBR read successfully
16:52:16.266 Disk 0 MBR scan
16:52:16.266 Disk 0 Windows 7 default MBR code
16:52:16.266 Service scanning
16:52:19.729 Disk 0 trace - called modules:
16:52:19.745 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
16:52:19.745 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004c4a060]
16:52:19.745 3 CLASSPNP.SYS[fffff880018a743f] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80046f81f0]
16:52:19.745 Scan finished successfully
16:52:32.131 Disk 0 MBR has been saved successfully to "C:\Users\***\Desktop\MBR.dat"
16:52:32.131 The log file has been saved successfully to "C:\Users\***\Desktop\aswMBR.txt"

Hier die neue OTl logfile :OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 31.05.2011 16:54:03 - Run 2
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Users\***\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,82 Gb Available Physical Memory | 71,22% Memory free
7,93 Gb Paging File | 6,69 Gb Available in Paging File | 84,41% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 100,92 Gb Free Space | 22,37% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,78% Space Free | Partition Type: NTFS
 
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (SbieSvc) -- C:\Program Files\Sandboxie\SbieSvc.exe (tzuk)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (TeamViewer5) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (McComponentHostService) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files (x86)\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (vmm) -- C:\Windows\SysNative\Treiber\VMM.sys (Microsoft Corporation)
DRV:64bit: - (NPF) -- C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (k57nd60a) Broadcom NetLink (TM) -- C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.)
DRV:64bit: - (VPCNetS2) -- C:\Windows\SysNative\drivers\VMNetSrv.sys (Microsoft Corporation)
DRV:64bit: - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV - (SbieDrv) -- C:\Programme\Sandboxie\SbieDrv.sys (tzuk)
DRV - (ASPI32) -- C:\Windows\SysWow64\drivers\ASPI32.SYS (Adaptec)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://start.icq.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://my.daemon-search.com/startpage|hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1
FF - prefs.js..extensions.enabledItems: {464F169E-ACE1-4C5F-A778-A433A3DABBAE}:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
 
[2009.10.29 17:48:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2011.05.31 16:48:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions
[2010.02.07 20:21:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{2e17e2b2-b8d4-4a67-8d7b-fafa6cc9d1d0}
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.07.30 16:58:29 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.05.30 02:20:22 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.05.30 02:20:26 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.05.30 02:20:25 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\staged-xpis
[2010.03.17 22:00:51 | 000,002,004 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\3dlam-suche.xml
[2011.03.13 23:17:09 | 000,002,059 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\daemon-search.xml
[2011.05.18 16:55:12 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-1.xml
[2010.11.04 18:34:39 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-10.xml
[2010.11.05 12:57:05 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-11.xml
[2010.11.17 02:24:24 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-12.xml
[2011.01.31 23:58:24 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-13.xml
[2011.05.02 00:03:04 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-14.xml
[2011.05.04 14:53:43 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-15.xml
[2010.02.18 01:44:44 | 000,000,961 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-2.xml
[2010.03.12 22:39:56 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-3.xml
[2010.03.13 20:02:56 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-4.xml
[2010.06.26 10:40:43 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-5.xml
[2010.07.05 16:14:38 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-6.xml
[2010.08.16 12:34:54 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-7.xml
[2010.09.11 13:58:59 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-8.xml
[2010.09.16 23:30:28 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-9.xml
[2010.06.21 16:35:24 | 000,001,042 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin.xml
[2011.03.13 23:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.07.11 16:19:58 | 000,000,000 | ---D | M] (VMLoad) -- C:\Program Files (x86)\mozilla firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE}
[2009.11.07 03:11:02 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.21 21:37:27 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2009.03.24 11:10:44 | 000,114,688 | ---- | M] (Zylom) -- C:\Program Files (x86)\mozilla firefox\plugins\npzylomgamesplayer.dll
[2011.03.31 17:03:03 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.03.31 17:03:03 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.03.31 17:03:03 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.03.31 17:03:03 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.03.31 17:03:03 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (VMLoadHBO Class) - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Users\***\AppData\Roaming\VMLoad\addin\VMLoad.dll (TODO: <Company name>)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\ÜÜÜ\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - Unable to obtain root file information for disk D:\
O33 - MountPoints2\{22261174-1d57-11df-a8f7-0026b9054271}\Shell - "" = AutoRun
O33 - MountPoints2\{22261174-1d57-11df-a8f7-0026b9054271}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{4a86de2f-c497-11de-9097-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4a86de2f-c497-11de-9097-806e6f6e6963}\Shell\AutoRun\command - "" = E:\0data\cbs.exe
O33 - MountPoints2\{ea3be140-4dbf-11e0-ad00-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{ea3be140-4dbf-11e0-ad00-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
 
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamersFirst LIVE!.lnk -  - File not found
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk - C:\PROGRA~2\MCAFEE~1\202B13~1.181\SSSCHE~1.EXE - (McAfee, Inc.)
MsConfig:64bit - StartUpFolder: C:^Users^***^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^No-IP DUC.lnk - C:\PROGRA~2\No-IP\DUC20.exe - (Vitalwerks LLC)
MsConfig:64bit - StartUpFolder: C:^Users^***^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^VMLoad.lnk - C:\Users\***\AppData\Roaming\VMLoad\VMLoad.exe - ()
MsConfig:64bit - StartUpReg: AGEIA PhysX SysTray - hkey= - key= - C:\Program Files (x86)\AGEIA Technologies\TrayIcon.exe ()
MsConfig:64bit - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
MsConfig:64bit - StartUpReg: dellsupportcenter - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: DivXUpdate - hkey= - key= - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
MsConfig:64bit - StartUpReg: ICQ - hkey= - key= - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
MsConfig:64bit - StartUpReg: msnmsgr - hkey= - key= - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: Skype - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: Steam - hkey= - key= - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.05.31 15:27:25 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2009.07.14 00:16:42 | 000,836,608 | ---- | C] (Microsoft Corporation) -- C:\Users\***\AppData\Roaming\kernel33.dll
 
========== Files - Modified Within 30 Days ==========
 
[2011.05.31 16:55:48 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.05.31 16:55:48 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.05.31 16:55:06 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.05.31 16:55:06 | 000,655,842 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.05.31 16:55:06 | 000,616,682 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.05.31 16:55:06 | 000,130,722 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.05.31 16:55:06 | 000,107,062 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.05.31 16:52:32 | 000,000,512 | ---- | M] () -- C:\Users\***\Desktop\MBR.dat
[2011.05.31 16:50:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.05.31 16:50:10 | 3193,585,664 | -HS- | M] () -- C:\hiberfil.sys
[2011.05.31 16:49:21 | 000,000,188 | ---- | M] () -- C:\Users\***\defogger_reenable
[2011.05.31 15:27:29 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe

========== Files Created - No Company Name ==========
 
[2011.05.31 16:52:32 | 000,000,512 | ---- | C] () -- C:\Users\Tim\Desktop\MBR.dat
[2011.05.31 16:49:20 | 000,000,188 | ---- | C] () -- C:\Users\Tim\defogger_reenable
[2010.12.21 21:39:39 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.16 02:18:47 | 000,037,888 | ---- | C] () -- C:\Windows\SysWow64\AVIwrap.dll
[2010.11.16 02:18:43 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.11.16 02:18:37 | 000,105,472 | ---- | C] () -- C:\Windows\SysWow64\OggDS.dll
[2010.11.16 02:18:37 | 000,092,672 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2010.11.16 02:18:37 | 000,090,624 | ---- | C] () -- C:\Windows\SysWow64\vorbisenc.dll
[2010.11.16 02:18:37 | 000,021,504 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll
[2010.11.16 02:18:31 | 000,132,096 | ---- | C] () -- C:\Windows\SysWow64\libavcodec.dll
[2010.11.16 02:18:31 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll
[2010.11.16 02:18:31 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2010.11.16 02:18:30 | 000,077,664 | ---- | C] () -- C:\Windows\SysWow64\IR21_R.DLL
[2010.11.16 02:18:30 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\Iyvu9_32.dll
[2010.11.16 02:18:27 | 000,180,736 | ---- | C] () -- C:\Windows\SysWow64\vfcodec.dll
[2010.11.16 02:18:25 | 000,202,240 | ---- | C] () -- C:\Windows\SysWow64\XviD.dll
[2010.11.16 02:18:24 | 000,039,936 | ---- | C] () -- C:\Windows\SysWow64\mp4fil32.dll
[2010.09.29 23:14:14 | 008,676,883 | ---- | C] () -- C:\Windows\SysWow64\mp3Media2.dll
[2010.02.22 16:44:41 | 000,029,620 | ---- | C] () -- C:\Windows\Output.exe
[2010.02.21 14:00:26 | 000,001,458 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2009.11.15 00:37:11 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2009.11.14 22:47:07 | 000,007,609 | ---- | C] () -- C:\Users\Tim\AppData\Local\Resmon.ResmonCfg
[2009.10.29 15:32:09 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009.10.20 19:19:30 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2005.04.08 03:16:43 | 000,175,853 | -H-- | C] () -- C:\Users\Tim\AppData\Roaming\logs.dat
 
========== LOP Check ==========
 
[2011.04.29 23:55:42 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\.minecraft
[2009.10.30 17:42:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Blitware
[2011.03.13 23:50:08 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DAEMON Tools Lite
[2009.11.07 00:52:12 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DNA
[2011.03.26 21:51:09 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft
[2011.03.24 11:02:27 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.11.17 01:23:15 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\ICQ
[2010.07.11 16:11:38 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Iggels
[2010.12.16 19:29:28 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\install
[2010.02.19 21:41:22 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\ManyCam
[2009.11.24 12:03:14 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\OpenOffice.org
[2009.10.29 16:59:23 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\SpieleEntwicklungsKombinat
[2010.10.22 19:11:00 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TeamViewer
[2010.01.05 02:27:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TuneUp Software
[2010.12.16 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Uniblue
[2010.07.30 13:54:02 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\VMLoad
[2010.02.05 10:28:27 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Wireshark
[2011.04.14 14:07:39 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.01.20 18:26:41 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2009.09.15 09:17:49 | 000,000,000 | ---D | M] -- C:\1033
[2009.10.30 19:39:02 | 000,000,000 | ---D | M] -- C:\ATI
[2009.10.29 15:27:35 | 000,000,000 | -HSD | M] -- C:\boot
[2011.05.31 01:00:52 | 000,000,000 | ---D | M] -- C:\Casino
[2010.02.18 01:16:28 | 000,000,000 | ---D | M] -- C:\DELL
[2010.02.21 02:55:47 | 000,000,000 | ---D | M] -- C:\directory
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2009.09.25 19:06:21 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2009.09.15 11:24:42 | 000,000,000 | ---D | M] -- C:\Drivers
[2011.03.07 02:21:43 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft
[2009.07.30 04:39:45 | 000,000,000 | ---D | M] -- C:\EFI
[2010.09.29 23:14:15 | 000,000,000 | ---D | M] -- C:\Mp3 Output
[2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2011.03.03 20:21:07 | 000,000,000 | R--D | M] -- C:\Programme
[2011.05.31 16:46:44 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2011.05.31 16:50:08 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2009.09.25 19:06:21 | 000,000,000 | -HSD | M] -- C:\Programme
[2009.10.29 15:45:41 | 000,000,000 | -HSD | M] -- C:\Recovery
[2010.02.21 14:01:06 | 000,000,000 | R--D | M] -- C:\Sandbox
[2009.09.25 19:13:50 | 000,000,000 | -HSD | M] -- C:\System Recovery
[2011.05.31 16:57:08 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2009.10.29 15:48:43 | 000,000,000 | R--D | M] -- C:\Users
[2011.05.01 23:01:32 | 000,000,000 | ---D | M] -- C:\Windows
[2009.10.29 15:14:06 | 000,000,000 | ---D | M] -- C:\Windows.old
 
< %PROGRAMFILES%\*.exe >
 
< %PROGRAMFILES%\*. >
[2010.02.14 02:00:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
[2010.06.11 18:19:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AGEIA Technologies
[2009.10.29 16:09:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update
[2009.11.07 00:37:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI
[2009.10.30 19:39:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ATI Technologies
[2009.10.29 16:20:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Avira
[2010.11.16 02:18:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Avisynth
[2011.03.03 20:14:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bonjour
[2010.04.20 09:18:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cain
[2011.01.23 01:19:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cheat Engine
[2010.12.21 21:37:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
[2010.02.18 01:35:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Creative Live! Cam
[2011.03.13 23:17:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Lite
[2011.05.31 16:47:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010.02.18 01:51:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dell
[2010.11.17 01:04:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DivX
[2009.11.07 00:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNA
[2010.02.28 01:00:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDTS
[2010.01.08 18:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDVideoSoft
[2011.03.13 23:54:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\EA GAMES
[2010.01.03 20:11:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ElcomSoft
[2009.11.06 23:04:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GamersFirst
[2010.08.15 11:58:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GUILD WARS
[2011.05.31 16:50:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HyperCam Toolbar
[2010.11.18 01:09:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ICQ6Toolbar
[2010.11.17 01:23:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ICQ7.2
[2011.04.05 22:57:50 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2011.04.13 18:18:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
[2011.03.03 20:22:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\iTunes
[2010.02.17 13:22:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
[2010.02.19 21:41:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ManyCam 2.4
[2010.08.08 23:35:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\McAfee Security Scan
[2010.05.29 14:21:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Messenger Plus! Live
[2009.10.30 15:52:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft
[2010.02.26 19:02:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Virtual PC
[2010.06.26 10:11:34 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
[2010.03.05 22:02:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mIRC
[2011.05.02 00:02:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox
[2009.07.14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
[2010.02.07 15:15:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\No-IP
[2009.11.24 12:01:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenOffice.org 3
[2009.10.29 16:57:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Paraworld MP Demo
[2011.03.03 20:17:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime
[2009.07.14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
[2009.11.08 18:25:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Rockstar Games
[2010.12.16 16:45:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Security Task Manager
[2010.12.21 21:37:27 | 000,000,000 | R--D | M] -- C:\Program Files (x86)\Skype
[2010.09.29 23:14:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Smallvideosoft
[2010.02.21 00:19:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\softendo.com
[2010.10.22 19:03:17 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2011.04.27 00:56:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Steam
[2010.02.18 18:25:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\TeamViewer
[2010.11.16 02:18:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Tsunami-Filter-Pack
[2009.07.14 05:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
[2009.10.29 16:08:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN
[2010.12.11 21:49:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VirtualDJ
[2010.11.16 02:18:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VirtualDub
[2010.07.11 16:19:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VMLoad
[2010.02.05 00:40:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Wecker 2.2
[2009.07.14 18:58:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
[2009.10.30 15:52:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
[2009.10.30 15:51:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live SkyDrive
[2010.12.17 11:55:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
[2010.10.16 12:55:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
[2009.07.14 06:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
[2009.07.14 18:58:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
[2009.07.14 06:32:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
[2009.07.14 18:58:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
[2010.04.20 09:18:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinPcap
[2009.11.04 01:02:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Zylom Games
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SysWOW64\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2009.04.30 11:48:37 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2009.04.30 11:48:36 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows.old\Windows\SysWOW64\explorer.exe
[2009.04.30 11:48:36 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19\explorer.exe
[2009.04.30 11:48:37 | 003,087,360 | ---- | M] (Microsoft Corporation) MD5=50514057C28A74BAC2BD04B7B990D615 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer.exe
[2009.04.30 11:48:36 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512\explorer.exe
[2009.08.03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009.04.30 11:48:36 | 003,086,848 | ---- | M] (Microsoft Corporation) MD5=72B9990E45C25AA3C75C4FB50A9D6CE0 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009.10.31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.04.30 11:48:36 | 003,080,704 | ---- | M] (Microsoft Corporation) MD5=BBD8E74F23D7605CB0CDB57A1B25D826 -- C:\Windows.old\Windows\explorer.exe
[2009.04.30 11:48:36 | 003,080,704 | ---- | M] (Microsoft Corporation) MD5=BBD8E74F23D7605CB0CDB57A1B25D826 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.04.30 11:48:35 | 003,081,216 | ---- | M] (Microsoft Corporation) MD5=E404A65EF890140410E9F3D405841C95 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer.exe
[2009.04.30 11:48:36 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c\explorer.exe
[2009.08.03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
[2008.01.21 03:48:44 | 003,080,704 | ---- | M] (Microsoft Corporation) MD5=F6D765FB6B457542D954682F50C26E4F -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer.exe
[2008.01.21 03:49:23 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0\explorer.exe
 
< MD5 for: REGEDIT.EXE  >
[2009.07.14 02:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=2E2C937846A0B8789E5E91739284D17A -- C:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e\regedit.exe
[2008.01.21 03:50:29 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows.old\Windows\SysWOW64\regedit.exe
[2008.01.21 03:50:29 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows.old\Windows\winsxs\wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_5aa1fb3ac896d9c8\regedit.exe
[2008.01.21 03:49:53 | 000,161,792 | ---- | M] (Microsoft Corporation) MD5=5DFBCE56E689D90AE9E2FB278F80058E -- C:\Windows.old\Windows\regedit.exe
[2008.01.21 03:49:53 | 000,161,792 | ---- | M] (Microsoft Corporation) MD5=5DFBCE56E689D90AE9E2FB278F80058E -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_504d50e8943617cd\regedit.exe
[2009.07.14 02:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\regedit.exe
[2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\SysWOW64\regedit.exe
[2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\winsxs\wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5a78515e29ea6f39\regedit.exe
 
< MD5 for: USERINIT.EXE  >
[2008.01.21 03:50:36 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows.old\Windows\SysWOW64\userinit.exe
[2008.01.21 03:50:36 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2008.01.21 03:49:46 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=A0AB2BB9A92293D9CE66E252719AB5FE -- C:\Windows.old\Windows\System32\userinit.exe
[2008.01.21 03:49:46 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=A0AB2BB9A92293D9CE66E252719AB5FE -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_384755998a0d6941\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2008.01.21 03:48:04 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows.old\Windows\SysWOW64\wininit.exe
[2008.01.21 03:48:04 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe
[2008.01.21 03:50:23 | 000,123,904 | ---- | M] (Microsoft Corporation) MD5=117EA87DF785CA1B9D821F6F213DCE07 -- C:\Windows.old\Windows\System32\wininit.exe
[2008.01.21 03:50:23 | 000,123,904 | ---- | M] (Microsoft Corporation) MD5=117EA87DF785CA1B9D821F6F213DCE07 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8\wininit.exe
[2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2008.01.21 03:49:47 | 000,406,016 | ---- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A -- C:\Windows.old\Windows\System32\winlogon.exe
[2008.01.21 03:49:47 | 000,406,016 | ---- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_cbe19c9a8d4eed2b\winlogon.exe
[2009.10.28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2008.01.21 03:50:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows.old\Windows\SysWOW64\winlogon.exe
[2008.01.21 03:50:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >

--- --- ---

M-K-D-B · 02.06.2011, 19:17

Hallo So0ofer,

Bitte beantworte mir folgende Fragen:

Zitat:

Zitat von So0ofer

BitTorrent wurde nie bewusst installiert und wird auch nicht in der Programmliste aufgeführt ! :/

Ist auch kein Eintrag mit dem Namen DNA zu finden?

Zitat:

Zitat von So0ofer

Probleme gab es keine und der Keylogger den du meinst ist vermutlich der absichtilich installierte REFOG Keylogger , zur Beruhigung .

Warum setzt du auf einem privaten Rechner einen Keylogger ein? Bitte erkläre mir das, am besten so ausführlich wie möglich.

So0ofer · 02.06.2011, 22:10

Achja , unter DNA war's zu finden . Ist jetzt deinstalliert .

Den Keylogger habe ich eingesetzt da ich eine Zeitlang nicht der Alleinnutzer des Rechners war und mir nach mehrmaligen Toolbar Installationen die Sache zu doof war . Der Keylogger ist aber nicht mehr in Benutzung .

M-K-D-B · 03.06.2011, 13:09

Hallo So0ofer,

Zitat:

Zitat von So0ofer

Achja , unter DNA war's zu finden . Ist jetzt deinstalliert .

Gut.

Zitat:

Zitat von So0ofer

Den Keylogger habe ich eingesetzt da ich eine Zeitlang nicht der Alleinnutzer des Rechners war und mir nach mehrmaligen Toolbar Installationen die Sache zu doof war . Der Keylogger ist aber nicht mehr in Benutzung .

Ich möchte dich darauf hinweisen, dass der Keylogger von den folgenden Programmen automatisch entfernt wird.

Schritt # 1: Add-ons in Firefox entfernen

Starte Firefox
Klicke auf Extras -> Add-ons
Entferne die folgenden Add-ons (sofern sie vorhanden sind):
- Zynga Community Toolbar
- DVDVideoSoftTB Community Toolbar
- Fast Video Download (with SearchMenu)
- Conduit Engine
Zum Abschluss musst du Firefox schließen und neu starten, damit die Entfernung abgeschlossen werden kann.
Kontrolliere, ob die genannten Erweiterungen auch entfernt wurden.
Schließe Firefox wieder.

Schritt # 2: Fix mit OTL

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Kopiere nun den Inhalt in die Textbox.

Code:

ATTFilter

:OTL
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()
[2011.03.26 21:51:09 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft
[2010.01.05 02:27:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TuneUp Software
[2010.12.16 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Uniblue
[2011.03.07 02:21:43 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft
[2011.05.31 16:47:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010.01.08 18:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDVideoSoft
[2011.05.31 16:50:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HyperCam Toolbar
[2009.11.07 00:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNA
[2009.11.07 00:52:12 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DNA

:files
C:\Windows\SysWOW64\MPK

:commands
[Purity]
[Emptytemp]

Schließe bitte nun alle Programme.
Klicke nun bitte auf den Fix Button.
OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
( Auch zu finden unter C:\_OTL\MovedFiles\<time_date>.txt)
Kopiere nun den Inhalt hier in Deinen Thread

Schritt # 3: Kontrollscan mit Malwarebytes' Anti-Malware (MBAM)
Downloade Dir bitte Malwarebytes' Anti-Malware

Installiere das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche nach Aktualisierung
Wenn das Update beendet wurde, aktiviere Quick-Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Schritt # 4: ComboFix ausführen

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Lade ComboFix von einem dieser Download-Spiegel herunter:

BleepingComputer - ForoSpyware

* Wichtig !! Speichere ComboFix auf dem Desktop

Deaktivere Deine Anti-Virus- und Anti-Spyware-Programme. Normalerweise kannst Du dies über einen Rechtsklick auf das Systemtray-Icon tun. Die Programme könnten sonst eventuell unsere Programme bei deren Arbeit stören.
Doppelklicke auf die ComboFix.exe und folge den Anweisungen.
ComboFix wird schauen, ob die Microsoft-Windows-Wiederherstellungskonsole installiert ist. Dies ist Teil des Prozesses. Angesichts der Art von Malware Infizierungen, die es heute gibt, wird dringend empfohlen, diese Wiederherstellungskonsole auf dem PC installiert zu haben, bevor jegliche Reinigung von Malware durchgeführt wird.
Folge den Anweisungen, um ComboFix das Herunterladen und Installieren der Wiederherstellungskonsole zu ermöglichen und stimme dem Lizenzvertrag (EULA) zu, sobald Du dazu aufgefordert wirst.

**Zur Information: Sollte die Wiederherstellungskonsole schon installiert sein, so wird ComboFix seine Malware-Entfernungsprozedur normal fortfahren.

Sobald die Wiederherstellungskonsole durch ComboFix installiert wurde, solltest Du folgende Nachricht sehen:

Klicke "Ja", um mit dem Suchlauf nach Malware fortzufahren.

Wenn ComboFix fertig ist, wird es ein Log erstellen. Bitte füge die C:\ComboFix.txt Deiner nächsten Antwort bei.

Schritt # 5: Systemscan mit OTL

Starte bitte OTL.exe.
Wähle unter Extra Registrierung: Benutze Safe List und klicke auf den Scan Button.
Poste die OTL.txt und die Extras.txt hier in deinen Thread.

Schritt # 6: Deine Rückmeldung
Zur weiteren Analyse benötige ich zusammen mit deiner nächsten Antwort

das Logfile des OTL-Fix,
das Logfile von MBAM,
das Logfile von ComboFix und
die beiden neuen Logfiles von OTL (OTL.txt und Extras.txt).

So0ofer · 03.06.2011, 14:54

Hat soweit alles funktioniert , vielen Dank

Hier die logfiles :

PS: Habe die logfile von mbam vor dem löschen der Dateien erstellt , aber konnte alles gelöscht werden .

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Datenbank Version: 6762

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

01.06.2011 15:26:24
mbam-log-2011-06-01 (15-26-09).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 156841
Laufzeit: 2 Minute(n), 32 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 4
Infizierte Dateien: 7

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
c:\programdata\MPK (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDA (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDM (Refog.Keylogger) -> No action taken.

Infizierte Dateien:
c:\Users\Tim\AppData\Roaming\kernel33.dll (Trojan.Agent) -> No action taken.
c:\Users\Tim\AppData\Roaming\logs.dat (Bifrose.Trace) -> No action taken.
c:\programdata\MPK\M0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\S0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1\D0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1\S0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDM\cpfm.bin (Refog.Keylogger) -> No action taken.

_______________________________________________

Combofix Logfile:

Code:

ATTFilter

ComboFix 11-06-03.02 - Tim 01.06.2011  15:36:49.1.2 - x64
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.49.1031.18.4061.2638 [GMT 1:00]
ausgeführt von:: c:\users\Tim\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
D:\Autorun.inf
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-05-01 bis 2011-06-01  ))))))))))))))))))))))))))))))
.
.
2011-06-01 14:43 . 2011-06-01 14:43	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-06-01 14:22 . 2011-06-01 14:22	--------	d-----w-	c:\users\Tim\AppData\Roaming\Malwarebytes
2011-06-01 14:22 . 2011-05-29 08:11	39984	----a-w-	c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-06-01 14:22 . 2011-06-01 14:22	--------	d-----w-	c:\programdata\Malwarebytes
2011-06-01 14:22 . 2011-06-01 14:22	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2011-06-01 14:22 . 2011-05-29 08:11	25912	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-06-01 14:17 . 2011-06-01 14:17	--------	d-----w-	C:\_OTL
2011-06-01 12:35 . 2011-05-09 22:00	8718160	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{DC02FF99-5242-49D9-9F46-BD2DD502A98F}\mpengine.dll
2011-05-25 14:13 . 2011-04-22 20:18	27008	----a-w-	c:\windows\system32\drivers\Diskdump.sys
2011-05-25 14:13 . 2011-04-09 06:58	142336	----a-w-	c:\windows\system32\poqexec.exe
2011-05-25 14:13 . 2011-04-09 05:56	123904	----a-w-	c:\windows\SysWow64\poqexec.exe
2011-05-12 10:38 . 2011-04-09 06:45	5509504	----a-w-	c:\windows\system32\ntoskrnl.exe
2011-05-12 10:38 . 2011-04-09 06:13	3957632	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2011-05-12 10:38 . 2011-04-09 06:13	3901824	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-13 22:17 . 2011-03-13 22:17	513080	----a-w-	c:\windows\system32\drivers\sptd.sys
2011-03-12 12:03 . 2011-04-29 20:03	662528	----a-w-	c:\windows\system32\XpsPrint.dll
2011-03-12 11:31 . 2011-04-29 20:03	442880	----a-w-	c:\windows\SysWow64\XpsPrint.dll
2011-03-11 06:23 . 2011-04-29 20:03	187264	----a-w-	c:\windows\system32\drivers\storport.sys
2011-03-11 06:23 . 2011-04-29 20:03	1657216	----a-w-	c:\windows\system32\drivers\ntfs.sys
2011-03-11 06:23 . 2011-04-29 20:03	166272	----a-w-	c:\windows\system32\drivers\nvstor.sys
2011-03-11 06:23 . 2011-04-29 20:03	148352	----a-w-	c:\windows\system32\drivers\nvraid.sys
2011-03-11 06:23 . 2011-04-29 20:03	410496	----a-w-	c:\windows\system32\drivers\iaStorV.sys
2011-03-11 06:22 . 2011-04-29 20:03	107904	----a-w-	c:\windows\system32\drivers\amdsata.sys
2011-03-11 06:22 . 2011-04-29 20:03	27008	----a-w-	c:\windows\system32\drivers\amdxata.sys
2011-03-11 06:19 . 2011-04-12 17:59	1395712	----a-w-	c:\windows\system32\mfc42.dll
2011-03-11 06:19 . 2011-04-12 17:59	1359872	----a-w-	c:\windows\system32\mfc42u.dll
2011-03-11 06:18 . 2011-04-29 20:03	2566144	----a-w-	c:\windows\system32\esent.dll
2011-03-11 06:15 . 2011-04-29 20:03	96768	----a-w-	c:\windows\system32\fsutil.exe
2011-03-11 05:40 . 2011-04-12 17:59	1137664	----a-w-	c:\windows\SysWow64\mfc42.dll
2011-03-11 05:40 . 2011-04-12 17:59	1164288	----a-w-	c:\windows\SysWow64\mfc42u.dll
2011-03-11 05:39 . 2011-04-29 20:03	1686016	----a-w-	c:\windows\SysWow64\esent.dll
2011-03-11 05:37 . 2011-04-29 20:03	74240	----a-w-	c:\windows\SysWow64\fsutil.exe
2011-03-08 06:14 . 2011-04-12 17:57	976896	----a-w-	c:\windows\system32\inetcomm.dll
2011-03-08 05:38 . 2011-04-12 17:57	740864	----a-w-	c:\windows\SysWow64\inetcomm.dll
2011-03-04 06:17 . 2011-04-29 20:03	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:17 . 2011-04-29 20:03	347648	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-12-16 281768]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"DELL Webcam Manager"="c:\program files (x86)\Dell\Dell Webcam Manager\DellWMgr.exe" /s
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 PCD5SRVC{048DBD20-445E8C82-05040104};PCD5SRVC{048DBD20-445E8C82-05040104} - PCDR Kernel Mode Service Helper Driver;c:\progra~2\DELLSU~1\HWDiag\bin\PCD5SRVC_x64.pkms [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-05-12 136360]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 TeamViewer5;TeamViewer 5;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-19 2011944]
S3 k57nd60a;Broadcom NetLink (TM)-Gigabit-Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\DRIVERS\ManyCam_x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series - Adaptertreiber für Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = my.daemon-search.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Free YouTube Download - c:\users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to Mp3 Converter - c:\users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://my.daemon-search.com/startpage|hxxp://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - Ext: VMLoad: {464F169E-ACE1-4C5F-A778-A433A3DABBAE} - c:\program files (x86)\Mozilla Firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - c:\program files (x86)\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: DVDVideoSoft Menu: {ACAA314B-EEBA-48e4-AD47-84E31C44796C} - %profile%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCD5SRVC{048DBD20-445E8C82-05040104}]
"ImagePath"="\??\c:\progra~2\DELLSU~1\HWDiag\bin\PCD5SRVC_x64.pkms"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10a.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10a.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10a.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-06-01  15:45:28
ComboFix-quarantined-files.txt  2011-06-01 14:45
.
Vor Suchlauf: 18 Verzeichnis(se), 123.327.410.176 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 123.253.506.048 Bytes frei
.
- - End Of File - - CBD9E22F586459281C2F8D672FD245A1

--- --- ---

___________________________________________OTL Logfile:

Code:

ATTFilter

OTL Extras logfile created on: 01.06.2011 15:46:52 - Run 3
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Users\Tim\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,62 Gb Available Physical Memory | 66,02% Memory free
7,93 Gb Paging File | 6,48 Gb Available in Paging File | 81,73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 114,87 Gb Free Space | 25,47% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,79% Space Free | Partition Type: NTFS
 
Computer Name: TIM-PC | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
========== Firewall Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{5324EDAC-DED3-3A65-6881-84B4B8A8A7F9}" = ATI Catalyst Install Manager
"{5D492FFA-C816-57FD-10F6-4742329EED76}" = ccc-utility64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{8A7CAA24-7B23-410B-A7C3-F994B0944160}" = Microsoft Virtual PC 2007
"{8F473675-D702-45F9-8EBC-342B40C17BF5}" = Apple Mobile Device Support
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{B24A47E5-F196-461E-A7A4-AADB72CB19DD}" = iTunes
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"HyperCam 2 (64 bit)" = HyperCam 2 (64 bit)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Sandboxie" = Sandboxie 3.44 (64-bit)
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.0.1200
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"5f48e2ab41c5d005" = RapidShare Manager
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 01.06.2011 08:25:13 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 08:25:13 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 4571
 
Error - 01.06.2011 08:25:13 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 4571
 
Error - 01.06.2011 08:25:14 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 08:25:14 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 5569
 
Error - 01.06.2011 08:25:14 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 5569
 
Error - 01.06.2011 09:01:04 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 01.06.2011 09:01:04 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1669
 
Error - 01.06.2011 09:01:04 | Computer Name = Tim-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1669
 
Error - 01.06.2011 10:32:14 | Computer Name = Tim-PC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Tim\Downloads\SoftonicDownloader_fuer_zsnes.exe".
 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche
 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.
In
 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest.
 
[ System Events ]
Error - 19.11.2010 23:49:23 | Computer Name = Tim-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   ASPI32
 
Error - 19.11.2010 23:12:45 | Computer Name = Tim-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 20.11.2010 10:04:51 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 20.11.2010 13:45:58 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:24:01 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:26:55 | Computer Name = Tim-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?25.?11.?2010 um 15:26:01 unerwartet heruntergefahren.
 
Error - 25.11.2010 10:26:45 | Computer Name = Tim-PC | Source = Application Popup | ID = 1060
Description = Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASPI32.SYS
 nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version
 des Treibers zu erhalten.
 
Error - 25.11.2010 10:26:54 | Computer Name = Tim-PC | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
 
Error - 25.11.2010 10:26:54 | Computer Name = Tim-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 25.11.2010 10:27:47 | Computer Name = Tim-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   ASPI32
 
 
< End of report >

--- --- ---

____________________________________________OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 01.06.2011 15:46:52 - Run 3
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Users\Tim\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,97 Gb Total Physical Memory | 2,62 Gb Available Physical Memory | 66,02% Memory free
7,93 Gb Paging File | 6,48 Gb Available in Paging File | 81,73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 114,87 Gb Free Space | 25,47% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 7,00 Gb Free Space | 47,79% Space Free | Partition Type: NTFS
 
Computer Name: TIM-PC | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Tim\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Tim\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (SbieSvc) -- C:\Program Files\Sandboxie\SbieSvc.exe (tzuk)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (TeamViewer5) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (McComponentHostService) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Program Files (x86)\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (vmm) -- C:\Windows\SysNative\Treiber\VMM.sys (Microsoft Corporation)
DRV:64bit: - (NPF) -- C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netw5v64) Intel(R) -- C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (k57nd60a) Broadcom NetLink (TM) -- C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (ManyCam) -- C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.)
DRV:64bit: - (VPCNetS2) -- C:\Windows\SysNative\drivers\VMNetSrv.sys (Microsoft Corporation)
DRV:64bit: - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV - (SbieDrv) -- C:\Programme\Sandboxie\SbieDrv.sys (tzuk)
DRV - (ASPI32) -- C:\Windows\SysWow64\drivers\ASPI32.SYS (Adaptec)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://my.daemon-search.com/startpage|hxxp://start.icq.com/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.3
FF - prefs.js..extensions.enabledItems: {464F169E-ACE1-4C5F-A778-A433A3DABBAE}:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.02 00:02:49 | 000,000,000 | ---D | M]
 
[2009.10.29 17:48:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Extensions
[2011.06.01 15:15:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions
[2010.02.07 20:21:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{2e17e2b2-b8d4-4a67-8d7b-fafa6cc9d1d0}
[2010.07.30 16:58:29 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.05.30 02:20:22 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.05.30 02:20:26 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.05.30 02:20:25 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tim\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\staged-xpis
[2010.03.17 22:00:51 | 000,002,004 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\3dlam-suche.xml
[2011.03.13 23:17:09 | 000,002,059 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\daemon-search.xml
[2011.05.18 16:55:12 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-1.xml
[2010.11.04 18:34:39 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-10.xml
[2010.11.05 12:57:05 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-11.xml
[2010.11.17 02:24:24 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-12.xml
[2011.01.31 23:58:24 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-13.xml
[2011.05.02 00:03:04 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-14.xml
[2011.05.04 14:53:43 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-15.xml
[2010.02.18 01:44:44 | 000,000,961 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-2.xml
[2010.03.12 22:39:56 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-3.xml
[2010.03.13 20:02:56 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-4.xml
[2010.06.26 10:40:43 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-5.xml
[2010.07.05 16:14:38 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-6.xml
[2010.08.16 12:34:54 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-7.xml
[2010.09.11 13:58:59 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-8.xml
[2010.09.16 23:30:28 | 000,000,950 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin-9.xml
[2010.06.21 16:35:24 | 000,001,042 | ---- | M] () -- C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\g9t8irqj.default\searchplugins\icqplugin.xml
[2011.03.13 23:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.07.11 16:19:58 | 000,000,000 | ---D | M] (VMLoad) -- C:\Program Files (x86)\mozilla firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE}
[2009.11.07 03:11:02 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.21 21:37:27 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2009.03.24 11:10:44 | 000,114,688 | ---- | M] (Zylom) -- C:\Program Files (x86)\mozilla firefox\plugins\npzylomgamesplayer.dll
[2011.03.31 17:03:03 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.03.31 17:03:03 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.03.31 17:03:03 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.03.31 17:03:03 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.03.31 17:03:03 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.06.01 15:43:27 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (VMLoadHBO Class) - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Users\Tim\AppData\Roaming\VMLoad\addin\VMLoad.dll (TODO: <Company name>)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Tim\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.06.01 15:33:35 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011.06.01 15:33:35 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011.06.01 15:33:35 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011.06.01 15:33:28 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.06.01 15:33:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.06.01 15:31:51 | 004,112,250 | R--- | C] (Swearware) -- C:\Users\Tim\Desktop\ComboFix.exe
[2011.06.01 15:22:36 | 000,000,000 | ---D | C] -- C:\Users\Tim\AppData\Roaming\Malwarebytes
[2011.06.01 15:22:30 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.06.01 15:22:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.06.01 15:22:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.06.01 15:22:25 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.06.01 15:22:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.06.01 15:17:48 | 000,000,000 | ---D | C] -- C:\_OTL
[2011.05.31 15:27:25 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\Tim\Desktop\OTL.exe
[2011.05.25 15:13:51 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.05.25 15:13:48 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2011.05.25 15:13:48 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2011.05.12 11:38:38 | 005,509,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.05.12 11:38:36 | 003,957,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.05.12 11:38:36 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
 
========== Files - Modified Within 30 Days ==========
 
[2011.06.01 15:43:27 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2011.06.01 15:32:54 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.06.01 15:32:54 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.06.01 15:32:39 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.06.01 15:32:39 | 000,655,842 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.06.01 15:32:39 | 000,616,682 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.06.01 15:32:39 | 000,130,722 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.06.01 15:32:39 | 000,107,062 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.06.01 15:32:07 | 004,112,250 | R--- | M] (Swearware) -- C:\Users\Tim\Desktop\ComboFix.exe
[2011.06.01 15:27:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.06.01 15:27:28 | 3193,585,664 | -HS- | M] () -- C:\hiberfil.sys
[2011.06.01 15:22:30 | 000,001,115 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.31 16:52:32 | 000,000,512 | ---- | M] () -- C:\Users\Tim\Desktop\MBR.dat
[2011.05.31 16:49:21 | 000,000,188 | ---- | M] () -- C:\Users\Tim\defogger_reenable
[2011.05.31 15:27:29 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Tim\Desktop\OTL.exe

 
========== Files Created - No Company Name ==========
 
[2011.06.01 15:33:35 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.06.01 15:33:35 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011.06.01 15:33:35 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.06.01 15:33:35 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.06.01 15:33:35 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.06.01 15:22:30 | 000,001,115 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.05.31 16:52:32 | 000,000,512 | ---- | C] () -- C:\Users\Tim\Desktop\MBR.dat
[2011.05.31 16:49:20 | 000,000,188 | ---- | C] () -- C:\Users\Tim\defogger_reenable
[2010.12.21 21:39:39 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.11.16 02:18:47 | 000,037,888 | ---- | C] () -- C:\Windows\SysWow64\AVIwrap.dll
[2010.11.16 02:18:43 | 000,073,216 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.11.16 02:18:37 | 000,105,472 | ---- | C] () -- C:\Windows\SysWow64\OggDS.dll
[2010.11.16 02:18:37 | 000,092,672 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2010.11.16 02:18:37 | 000,090,624 | ---- | C] () -- C:\Windows\SysWow64\vorbisenc.dll
[2010.11.16 02:18:37 | 000,021,504 | ---- | C] () -- C:\Windows\SysWow64\ogg.dll
[2010.11.16 02:18:31 | 000,132,096 | ---- | C] () -- C:\Windows\SysWow64\libavcodec.dll
[2010.11.16 02:18:31 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll
[2010.11.16 02:18:31 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll
[2010.11.16 02:18:30 | 000,077,664 | ---- | C] () -- C:\Windows\SysWow64\IR21_R.DLL
[2010.11.16 02:18:30 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\Iyvu9_32.dll
[2010.11.16 02:18:27 | 000,180,736 | ---- | C] () -- C:\Windows\SysWow64\vfcodec.dll
[2010.11.16 02:18:25 | 000,202,240 | ---- | C] () -- C:\Windows\SysWow64\XviD.dll
[2010.11.16 02:18:24 | 000,039,936 | ---- | C] () -- C:\Windows\SysWow64\mp4fil32.dll
[2010.09.29 23:14:14 | 008,676,883 | ---- | C] () -- C:\Windows\SysWow64\mp3Media2.dll
[2010.02.22 16:44:41 | 000,029,620 | ---- | C] () -- C:\Windows\Output.exe
[2010.02.21 14:00:26 | 000,001,458 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2009.11.15 00:37:11 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2009.11.14 22:47:07 | 000,007,609 | ---- | C] () -- C:\Users\Tim\AppData\Local\Resmon.ResmonCfg
[2009.10.29 15:32:09 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009.10.20 19:19:30 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2006.03.20 20:43:15 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll

< End of report >

--- --- ---

__________________________

All processes killed
Error: Unable to interpret <HKCU\..\URLSearchHook: - Reg Error: Key error. File not found> in the current context!
Error: Unable to interpret <IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local> in the current context!
Error: Unable to interpret <FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1> in the current context!
Error: Unable to interpret <FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2> in the current context!
Error: Unable to interpret <FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2> in the current context!
Error: Unable to interpret <[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}> in the current context!
Error: Unable to interpret <[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}> in the current context!
Error: Unable to interpret <[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}> in the current context!
Error: Unable to interpret <[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com> in the current context!
Error: Unable to interpret <O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found> in the current context!
Error: Unable to interpret <O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - File not found> in the current context!
Error: Unable to interpret <O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()> in the current context!
Error: Unable to interpret <[2011.03.26 21:51:09 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft> in the current context!
Error: Unable to interpret <[2010.01.05 02:27:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TuneUp Software> in the current context!
Error: Unable to interpret <[2010.12.16 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Uniblue> in the current context!
Error: Unable to interpret <[2011.03.07 02:21:43 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft> in the current context!
Error: Unable to interpret <[2011.05.31 16:47:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Toolbar> in the current context!
Error: Unable to interpret <[2010.01.08 18:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDVideoSoft> in the current context!
Error: Unable to interpret <[2011.05.31 16:50:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HyperCam Toolbar> in the current context!
Error: Unable to interpret <[2009.11.07 00:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNA> in the current context!
Error: Unable to interpret <[2009.11.07 00:52:12 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DNA> in the current context!
========== FILES ==========
C:\Windows\SysWOW64\MPK\Lang folder moved successfully.
C:\Windows\SysWOW64\MPK\Images folder moved successfully.
C:\Windows\SysWOW64\MPK\Help\Spanish folder moved successfully.
C:\Windows\SysWOW64\MPK\Help\German folder moved successfully.
C:\Windows\SysWOW64\MPK\Help\English folder moved successfully.
C:\Windows\SysWOW64\MPK\Help folder moved successfully.
C:\Windows\SysWOW64\MPK folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Tim
->Temp folder emptied: 268139293 bytes
->Temporary Internet Files folder emptied: 399552065 bytes
->Java cache emptied: 1222877 bytes
->FireFox cache emptied: 63519815 bytes
->Flash cache emptied: 301668 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 22459 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 171483 bytes
RecycleBin emptied: 14276668195 bytes

Total Files Cleaned = 14.314,00 mb

OTL by OldTimer - Version 3.2.23.0 log created on 06012011_151748

Files\Folders moved on Reboot...
C:\Users\Tim\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

M-K-D-B · 03.06.2011, 15:58

Hallo So0ofer,

Zitat:

Zitat von So0ofer

Hat soweit alles funktioniert , vielen Dank

Ich muss dich leider enttäuschen, funktioniert hat kaum etwas.

Zitat:

Zitat von So0ofer

PS: Habe die logfile von mbam vor dem löschen der Dateien erstellt...

Die Reihenfolge hat ihren Sinn und sollte deshalb auch eingehalten werden.

Zitat:

Zitat von So0ofer

Infizierte Verzeichnisse:
c:\programdata\MPK (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDA (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDM (Refog.Keylogger) -> No action taken.

Infizierte Dateien:
c:\Users\Tim\AppData\Roaming\kernel33.dll (Trojan.Agent) -> No action taken.
c:\Users\Tim\AppData\Roaming\logs.dat (Bifrose.Trace) -> No action taken.
c:\programdata\MPK\M0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\S0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1\D0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\1\S0000 (Refog.Keylogger) -> No action taken.
c:\programdata\MPK\CPDM\cpfm.bin (Refog.Keylogger) -> No action taken.

Hast du die Funde auch entfernen lassen? Sieht nicht so aus. Die Anleitung war eindeutig: Scannen lassen, dann entfernen, dann wird Logfile erstellt und dieses dann posten.

Dann gabs noch eine Fehlermeldung mit OTL:

Code:

ATTFilter

Error: Unable to interpret

Grund hierfür ist, dass du die erste Zeile meines Fixes

Zitat:

:OTL

nicht mit kopiert hast. Über jeder Code-Box gibt es hier im Forum drei Buttons. Es ist nicht verboten, diese zu verwenden.

Auf ein Neues:

Schritt # 1: Fix mit OTL

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Kopiere nun den Inhalt in die Textbox.

Code:

ATTFilter

:OTL
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
[2011.05.30 02:20:27 | 000,000,000 | ---D | M] (Zynga Community Toolbar) -- %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.05.30 02:20:23 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2011.05.30 02:20:19 | 000,000,000 | ---D | M] (Conduit Engine) -- %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} -  File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\MPK\mpk.exe) - C:\Windows\SysWOW64\MPK\MPK.exe ()
[2011.03.26 21:51:09 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DVDVideoSoft
[2010.01.05 02:27:16 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\TuneUp Software
[2010.12.16 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\Uniblue
[2011.03.07 02:21:43 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft
[2011.05.31 16:47:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2010.01.08 18:02:11 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DVDVideoSoft
[2011.05.31 16:50:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HyperCam Toolbar
[2009.11.07 00:53:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DNA
[2009.11.07 00:52:12 | 000,000,000 | ---D | M] -- C:\Users\Tim\AppData\Roaming\DNA

:files
c:\programdata\MPK

:commands
[Emptytemp]

Schließe bitte nun alle Programme.
Klicke nun bitte auf den Fix Button.
OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
( Auch zu finden unter C:\_OTL\MovedFiles\<time_date>.txt)
Kopiere nun den Inhalt hier in Deinen Thread

Schritt # 2: Kontrollscan mit Malwarebytes' Anti-Malware (MBAM)

Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche nach Aktualisierung
Wenn das Update beendet wurde, aktiviere Quick-Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Schritt # 3: Systemscan mit OTL

Starte bitte OTL.exe.
Wähle unter Extra Registrierung: Benutze Safe List und klicke auf den Scan Button.
Poste die OTL.txt und die Extras.txt hier in deinen Thread.

Schritt # 4: Deine Rückmeldung
Zur weiteren Analyse benötige ich zusammen mit deiner nächsten Antwort

das Logfile des OTL-Fix,
das Logfile von MBAM und
die beiden neuen Logfiles von OTL (OTL.txt und Extras.txt).

So0ofer · 03.06.2011, 16:26

Alles auf Neu :

Die gefundene Malware wurde von mbam entfernt habe nur die ausversehen die log vor dem entfernen gepostet aber die aktuelle ist jetzt dabei .

All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Prefs.js: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:3.3.5.1 removed from extensions.enabledItems
Prefs.js: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.2 removed from extensions.enabledItems
Prefs.js: engine@conduit.com:3.3.3.2 removed from extensions.enabledItems
Folder %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\ not found.
Folder %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
Folder %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}\ not found.
Folder %appdata%\mozilla\Firefox\Profiles\g9t8irqj.default\extensions\engine@conduit.com\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully.
64bit-Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit:C:\Windows\SysWOW64\MPK\mpk.exe deleted successfully.
File C:\Windows\SysWOW64\MPK\MPK.exe not found.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeYouTubeUploader folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToXboxConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPSPConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPlayStationConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSonyPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToSamsungPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNokiaPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToNintendoConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMP3Converter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToMotorolaPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToLGPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPodConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPhoneConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToiPadConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToHTCPhonesConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToFlashConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToBlackberryConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAppleTVConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeVideoToAndroidConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioToFlashConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\FreeAudioConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\TropicalSeaShore folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\PrinceOfPersia folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\PrairieRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\None folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Mountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\MistyRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\iPhoneDeepBlue folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\iPhoneBall folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\HarryPotter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\GreenHills folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\GoldenMountains folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Default folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Concert folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AzureLagoon folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\Avatar folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AutumnRoad folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes\AboveTheClouds folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3GPVideoConverter folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3DPhotoMaker\Themes folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft\Free3DPhotoMaker folder moved successfully.
C:\Users\Tim\AppData\Roaming\DVDVideoSoft folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\LogonScreens\Cache folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\LogonScreens folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\LogoAnimations\Cache folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\LogoAnimations folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\BootScreens\Cache folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler\BootScreens folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\WinStyler folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\StartUp Manager\Deaktivierte Objekte folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\StartUp Manager folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\Speed Optimizer folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\Program Statistics folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\Dashboard folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities\Backups folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software\TuneUp Utilities folder moved successfully.
C:\Users\Tim\AppData\Roaming\TuneUp Software folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue\RegistryBooster\_temp folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue\RegistryBooster\history folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue\RegistryBooster\backup folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue\RegistryBooster folder moved successfully.
C:\Users\Tim\AppData\Roaming\Uniblue folder moved successfully.
C:\DVDVideoSoft folder moved successfully.
C:\Program Files (x86)\DAEMON Tools Toolbar folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free YouTube Download folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\zh-CN folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\nl-NL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\ko-KR folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\ja-JP folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\it-IT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\zh-CHS folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\ru-RU folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\pt-PT folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\pl-PL folder moved successfully.
C:\Program Files (x86)\DVDVideoSoft\Free Studio\Free YouTube Uploader\nl-NL folder moved successfully.

Gain.Gator und Probleme mit Firefox (fvd.kallout.com)

Plagegeister aller Art und deren Bekämpfung: Gain.Gator und Probleme mit Firefox (fvd.kallout.com)