Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: [Win7] unerwünschte Weiterleitung auf gomeo etc.

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 04.06.2011, 17:55   #1
cadeyrn
 
[Win7] unerwünschte Weiterleitung auf gomeo etc. - Standard

[Win7] unerwünschte Weiterleitung auf gomeo etc.



Hallo,

ich dachte ich bräuchte niemals so ein Board, aber sag niemals nie, nicht. Ih habe eine zweifelhafte .exe ausgeführt und natürlich war es nicht das was drin war. Selber doof, ist klar. Allerdings wäre mir natürlich nun sehr geholfen, wenn ich mitunter obiges Problem lösen könnte.
Ich bin auf diese Seite gestoßen, als ich "gomeo" bei Google eingab und habe so erst herausgefunden, dass es überhaupt schädliche Software sein könnte.

Ich frage zuerst nach, was ich denn machen soll, welche logs ihr braucht etc. oder soll ich den "Für alle Hilfesuchenden!..."-Thread befolgen?

Grüße
cadeyrn

€: Ich habe den Thread einfach mal befolgt und folgendes kam dabei heraus:

defogger_disable
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 18:00 on 04/06/2011 (cad)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCUAEMON Tools Lite -> Removed

Checking for services/drivers...
SPTD -> Disabled (Service running -> reboot required)


-=E.O.F=-


OTLOTL Logfile:
Code:
ATTFilter
OTL logfile created on: 04.06.2011 18:04:48 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Users\cad\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5,98 Gb Total Physical Memory | 4,80 Gb Available Physical Memory | 80,18% Memory free
11,96 Gb Paging File | 10,55 Gb Available in Paging File | 88,19% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,67 Gb Total Space | 415,83 Gb Free Space | 89,30% Space Free | Partition Type: NTFS
 
Computer Name: CAD-PC | User Name: cad | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.06.04 17:49:34 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\cad\Desktop\OTL.exe
PRC - [2011.03.28 16:15:04 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011.03.28 16:14:56 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.03.28 16:14:56 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2010.07.29 10:08:36 | 002,795,008 | ---- | M] (msi) -- C:\Program Files (x86)\msi\msi LED Manager\SLM.exe
PRC - [2010.03.03 20:16:06 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010.03.03 20:16:04 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2010.01.22 12:29:40 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
 
 
========== Modules (SafeList) ==========
 
MOD - [2011.06.04 17:49:34 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\cad\Desktop\OTL.exe
MOD - [2009.07.14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2010.06.22 17:30:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2011.03.28 16:15:04 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.03.28 16:14:56 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.03.05 10:26:38 | 001,425,168 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV - [2010.03.05 10:07:58 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV - [2010.03.05 10:06:22 | 000,831,760 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV - [2010.03.03 20:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.06.04 09:58:08 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011.06.04 08:22:24 | 000,868,848 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011.04.01 17:07:25 | 000,116,568 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2011.04.01 17:07:25 | 000,083,120 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2010.08.09 05:01:58 | 000,088,912 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\EUCR6SK.sys -- (EUCR)
DRV:64bit: - [2010.06.22 18:03:44 | 007,195,648 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2010.06.22 16:41:56 | 000,265,728 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010.06.16 01:34:44 | 000,116,240 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2010.03.17 22:21:58 | 007,680,512 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64) Intel(R)
DRV:64bit: - [2010.03.03 19:51:40 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.02.23 07:19:06 | 000,295,424 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.01.25 22:41:00 | 000,054,272 | ---- | M] (Sentelic Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\fspad_wlh64.sys -- (fspad_wlh64)
DRV:64bit: - [2010.01.22 12:22:22 | 000,180,224 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2010.01.22 12:22:18 | 000,077,824 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = EE F2 43 96 3B 22 CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://my.daemon-search.com/"
 
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.06.04 00:24:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.06.04 00:23:32 | 000,000,000 | ---D | M]
 
[2011.06.04 00:24:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\cad\AppData\Roaming\mozilla\Extensions
[2011.06.04 00:24:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\cad\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011.06.04 08:37:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\cad\AppData\Roaming\mozilla\Firefox\Profiles\5n1pz3pe.default\extensions
[2011.06.04 00:57:59 | 000,002,059 | ---- | M] () -- C:\Users\cad\AppData\Roaming\Mozilla\Firefox\Profiles\5n1pz3pe.default\searchplugins\daemon-search.xml
[2011.06.04 17:38:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.06.04 08:16:08 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.06.04 17:38:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
File not found (No name found) -- 
[2011.04.14 18:40:03 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010.01.01 10:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 10:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2010.01.01 10:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.01.01 10:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.01.01 10:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.01.01 10:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O3:64bit: - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4:64bit: - HKLM..\Run: [fspuip] C:\Programme\FSP\FspUip.exe (Sentelic Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [msi LED Manager] C:\Program Files (x86)\msi\msi LED Manager\SLM.exe (msi)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 -  File not found
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{45383f6f-8e73-11e0-9433-6c626d2ab0a8}\Shell - "" = AutoRun
O33 - MountPoints2\{45383f6f-8e73-11e0-9433-6c626d2ab0a8}\Shell\AutoRun\command - "" = G:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
 
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.06.04 17:59:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2011.06.04 17:59:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamSpeak 3 Client
[2011.06.04 17:49:32 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\cad\Desktop\OTL.exe
[2011.06.04 17:40:29 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Malwarebytes
[2011.06.04 17:40:12 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.06.04 17:40:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.06.04 17:40:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.06.04 17:40:08 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.06.04 17:40:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.06.04 17:39:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2011.06.04 17:39:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2011.06.04 17:38:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2011.06.04 17:20:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft XNA
[2011.06.04 17:14:51 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\Adobe
[2011.06.04 17:06:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
[2011.06.04 16:58:16 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Avira
[2011.06.04 10:11:45 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\runic games
[2011.06.04 10:05:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Torchlight
[2011.06.04 09:58:08 | 000,254,528 | ---- | C] (DT Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2011.06.04 09:58:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2011.06.04 09:58:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2011.06.04 09:18:34 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2011.06.04 09:15:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2011.06.04 09:15:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011.06.04 09:14:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2011.06.04 08:22:24 | 000,868,848 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys
[2011.06.04 08:19:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
[2011.06.04 08:19:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys
[2011.06.04 08:16:13 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Skype
[2011.06.04 08:16:05 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2011.06.04 08:16:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011.06.04 08:16:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2011.06.04 08:14:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2011.06.04 08:14:54 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner
[2011.06.04 08:13:03 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\TuneUp Software
[2011.06.04 08:11:59 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2011.06.04 08:08:11 | 000,000,000 | -HSD | C] -- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2011.06.04 08:07:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2011.06.04 08:00:05 | 000,000,000 | ---D | C] -- C:\Users\cad\Programme
[2011.06.04 07:59:24 | 000,000,000 | ---D | C] -- C:\Users\cad\img
[2011.06.04 01:12:18 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\LolClient
[2011.06.04 01:12:17 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Macromedia
[2011.06.04 01:12:17 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Adobe
[2011.06.04 01:01:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
[2011.06.04 00:57:47 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\DAEMON Tools Lite
[2011.06.04 00:57:47 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2011.06.04 00:49:50 | 000,000,000 | ---D | C] -- C:\Users\cad\Documents\ICQ
[2011.06.04 00:48:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7.5
[2011.06.04 00:48:13 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\ICQ
[2011.06.04 00:48:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQ7.5
[2011.06.04 00:41:09 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\Ubisoft Game Launcher
[2011.06.04 00:38:15 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Ubisoft
[2011.06.04 00:38:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2011.06.04 00:32:23 | 000,000,000 | ---D | C] -- C:\Spiele
[2011.06.04 00:31:47 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\PMB Files
[2011.06.04 00:31:45 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2011.06.04 00:31:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pando Networks
[2011.06.04 00:24:53 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\Mozilla
[2011.06.04 00:24:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2011.06.04 00:24:17 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Thunderbird
[2011.06.04 00:24:17 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\Thunderbird
[2011.06.04 00:24:17 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Mozilla
[2011.06.04 00:23:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird
[2011.06.04 00:23:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2011.06.04 00:20:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft
[2011.06.04 00:18:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2011.06.04 00:18:21 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2011.06.04 00:18:21 | 000,083,120 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2011.06.04 00:18:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011.06.04 00:18:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2011.06.03 21:14:56 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\Microsoft Games
[2011.06.03 21:00:29 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\msi
[2011.06.03 20:58:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\msi
[2011.06.03 20:58:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\msi
[2011.06.03 20:57:54 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Intel Corporation
[2011.06.03 20:57:38 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\FSP
[2011.06.03 20:56:02 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\ATI
[2011.06.03 20:56:02 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\ATI
[2011.06.03 20:56:02 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2011.06.03 20:55:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camera Recorder
[2011.06.03 20:55:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Camera Recorder
[2011.06.03 20:54:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2011.06.03 20:53:44 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.06.03 20:53:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.06.03 20:53:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR 3.61 Multi
[2011.06.03 20:52:52 | 000,000,000 | ---D | C] -- C:\Programme\FSP
[2011.06.03 20:52:35 | 000,060,416 | ---- | C] (Sentelic Corporation) -- C:\Windows\SysNative\fspadco.dll
[2011.06.03 20:52:35 | 000,054,272 | ---- | C] (Sentelic Corporation) -- C:\Windows\SysNative\drivers\fspad_wlh64.sys
[2011.06.03 20:52:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
[2011.06.03 20:51:16 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\InstallShield
[2011.06.03 20:51:09 | 000,088,912 | ---- | C] (ENE Technology Inc.) -- C:\Windows\SysNative\drivers\EUCR6SK.sys
[2011.06.03 20:51:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NEC Electronics
[2011.06.03 20:51:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NEC Electronics
[2011.06.03 20:50:40 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\Downloaded Installations
[2011.06.03 20:50:08 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Intel
[2011.06.03 20:49:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
[2011.06.03 20:49:10 | 000,000,000 | ---D | C] -- C:\Programme\Intel
[2011.06.03 20:49:10 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Intel
[2011.06.03 20:49:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2011.06.03 20:49:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco
[2011.06.03 20:47:46 | 000,000,000 | ---D | C] -- C:\Programme\DIFX
[2011.06.03 20:47:41 | 000,295,424 | ---- | C] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2011.06.03 20:46:14 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2011.06.03 20:46:14 | 000,000,000 | ---D | C] -- C:\Programme\Realtek
[2011.06.03 20:45:58 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2011.06.03 20:45:57 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2011.06.03 20:45:57 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll
[2011.06.03 20:45:57 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2011.06.03 20:45:57 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2011.06.03 20:45:57 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2011.06.03 20:45:57 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll
[2011.06.03 20:45:57 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll
[2011.06.03 20:45:57 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2011.06.03 20:45:49 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2011.06.03 20:45:49 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2011.06.03 20:45:49 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2011.06.03 20:45:49 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2011.06.03 20:45:48 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2011.06.03 20:45:48 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2011.06.03 20:45:43 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2011.06.03 20:45:42 | 001,756,160 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
[2011.06.03 20:45:41 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2011.06.03 20:45:41 | 000,334,848 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2011.06.03 20:45:41 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2011.06.03 20:45:33 | 000,330,656 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2011.06.03 20:45:32 | 000,474,896 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2011.06.03 20:45:31 | 001,325,328 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2011.06.03 20:45:31 | 001,178,384 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2011.06.03 20:45:31 | 000,489,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2011.06.03 20:45:30 | 000,315,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2011.06.03 20:45:30 | 000,268,560 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2011.06.03 20:45:30 | 000,265,488 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2011.06.03 20:45:30 | 000,124,128 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2011.06.03 20:45:30 | 000,124,128 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2011.06.03 20:45:30 | 000,123,104 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2011.06.03 20:45:29 | 001,110,800 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2011.06.03 20:45:29 | 000,504,592 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2011.06.03 20:45:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2011.06.03 20:45:27 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2011.06.03 20:45:23 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2011.06.03 20:45:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2011.06.03 20:44:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
[2011.06.03 20:43:57 | 000,055,296 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst.dll
[2011.06.03 20:43:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2011.06.03 20:43:07 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.06.03 20:43:06 | 000,000,000 | ---D | C] -- C:\Programme\ATI
[2011.06.03 20:42:20 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies
[2011.06.03 20:40:08 | 000,053,248 | R--- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2011.06.03 20:40:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2011.06.03 20:39:55 | 000,000,000 | ---D | C] -- C:\Intel
[2011.06.03 20:37:36 | 000,000,000 | R--D | C] -- C:\Users\cad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.06.03 20:37:36 | 000,000,000 | R--D | C] -- C:\Users\cad\Searches
[2011.06.03 20:37:36 | 000,000,000 | R--D | C] -- C:\Users\cad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.06.03 20:37:26 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Identities
[2011.06.03 20:37:24 | 000,000,000 | R--D | C] -- C:\Users\cad\Contacts
[2011.06.03 20:37:22 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\VirtualStore
[2011.06.03 20:37:10 | 000,000,000 | --SD | C] -- C:\Users\cad\AppData\Roaming\Microsoft
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Videos
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Saved Games
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Pictures
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Music
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Links
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Favorites
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Downloads
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Documents
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\Desktop
[2011.06.03 20:37:10 | 000,000,000 | R--D | C] -- C:\Users\cad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Vorlagen
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\AppData\Local\Verlauf
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\AppData\Local\Temporary Internet Files
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Startmenü
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\SendTo
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Recent
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Netzwerkumgebung
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Lokale Einstellungen
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Documents\Eigene Videos
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Documents\Eigene Musik
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Eigene Dateien
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Documents\Eigene Bilder
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Druckumgebung
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Cookies
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\AppData\Local\Anwendungsdaten
[2011.06.03 20:37:10 | 000,000,000 | -HSD | C] -- C:\Users\cad\Anwendungsdaten
[2011.06.03 20:37:10 | 000,000,000 | -H-D | C] -- C:\Users\cad\AppData
[2011.06.03 20:37:10 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\Temp
[2011.06.03 20:37:10 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Local\Microsoft
[2011.06.03 20:37:10 | 000,000,000 | ---D | C] -- C:\Users\cad\AppData\Roaming\Media Center Programs
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2011.06.03 20:35:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2011.06.03 18:53:47 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2011.06.03 17:57:27 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.06.03 17:54:42 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011.05.31 17:08:31 | 000,000,000 | -HSD | C] -- C:\Recovery
[2011.05.31 17:08:31 | 000,000,000 | -HSD | C] -- C:\Programme
[2011.05.31 17:08:31 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2011.05.31 17:03:22 | 000,000,000 | -HSD | C] -- C:\System Volume Information
 
========== Files - Modified Within 30 Days ==========
 
[2011.06.04 18:07:39 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.06.04 18:07:39 | 000,654,166 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.06.04 18:07:39 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.06.04 18:07:39 | 000,130,006 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.06.04 18:07:39 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.06.04 18:07:21 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.06.04 18:07:21 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.06.04 18:01:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.06.04 18:01:42 | 521,854,975 | -HS- | M] () -- C:\hiberfil.sys
[2011.06.04 18:00:47 | 000,000,188 | ---- | M] () -- C:\Users\cad\defogger_reenable
[2011.06.04 17:59:15 | 000,001,162 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2011.06.04 17:49:42 | 000,050,477 | ---- | M] () -- C:\Users\cad\Desktop\Defogger.exe
[2011.06.04 17:49:34 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\cad\Desktop\OTL.exe
[2011.06.04 17:06:45 | 000,001,979 | ---- | M] () -- C:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
[2011.06.04 09:58:08 | 000,254,528 | ---- | M] (DT Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2011.06.04 08:38:21 | 000,001,633 | ---- | M] () -- C:\Users\Public\Desktop\League of Legends - US.lnk
[2011.06.04 08:22:24 | 000,868,848 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys
[2011.06.04 01:02:59 | 000,001,813 | ---- | M] () -- C:\Users\Public\Desktop\League of Legends - Europe.lnk
[2011.06.03 20:57:11 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2011.06.03 18:00:36 | 000,274,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.06.03 17:57:30 | 000,057,050 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2011.06.03 17:57:30 | 000,057,050 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.05.29 09:11:20 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
 
========== Files Created - No Company Name ==========
 
[2011.06.04 18:00:47 | 000,000,188 | ---- | C] () -- C:\Users\cad\defogger_reenable
[2011.06.04 17:59:15 | 000,001,162 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2011.06.04 17:49:42 | 000,050,477 | ---- | C] () -- C:\Users\cad\Desktop\Defogger.exe
[2011.06.04 17:06:45 | 000,001,979 | ---- | C] () -- C:\Users\Public\Desktop\Die Schlacht um Mittelerde™ II.lnk
[2011.06.04 09:15:40 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011.06.04 08:38:21 | 000,001,633 | ---- | C] () -- C:\Users\Public\Desktop\League of Legends - US.lnk
[2011.06.04 01:02:59 | 000,001,813 | ---- | C] () -- C:\Users\Public\Desktop\League of Legends - Europe.lnk
[2011.06.04 00:24:50 | 000,001,150 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011.06.03 20:57:11 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.06.03 20:51:09 | 000,361,808 | ---- | C] () -- C:\Windows\EMCRI_E.dll
[2011.06.03 20:47:41 | 000,067,584 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2011.06.03 20:46:03 | 000,000,176 | R--- | C] () -- C:\Windows\SysNative\drivers\RTHDAEQ0.dat
[2011.06.03 20:43:57 | 000,063,416 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb
[2011.06.03 20:43:57 | 000,021,682 | ---- | C] () -- C:\Windows\atiogl.xml
[2011.06.03 20:43:57 | 000,002,857 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.06.03 20:43:57 | 000,002,857 | ---- | C] () -- C:\Windows\SysNative\atipblag.dat
[2011.06.03 20:37:46 | 000,001,405 | ---- | C] () -- C:\Users\cad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011.06.03 20:37:39 | 000,001,439 | ---- | C] () -- C:\Users\cad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011.06.03 17:57:20 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011.06.03 17:57:12 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011.05.31 17:03:22 | 521,854,975 | -HS- | C] () -- C:\hiberfil.sys
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
 
========== LOP Check ==========
 
[2011.06.04 09:59:03 | 000,000,000 | ---D | M] -- C:\Users\cad\AppData\Roaming\DAEMON Tools Lite
[2011.06.04 17:31:10 | 000,000,000 | ---D | M] -- C:\Users\cad\AppData\Roaming\ICQ
[2011.06.04 01:12:18 | 000,000,000 | ---D | M] -- C:\Users\cad\AppData\Roaming\LolClient
[2011.06.04 10:11:45 | 000,000,000 | ---D | M] -- C:\Users\cad\AppData\Roaming\runic games
[2011.06.04 00:24:17 | 000,000,000 | ---D | M] -- C:\Users\cad\AppData\Roaming\Thunderbird
[2011.06.04 08:13:03 | 000,000,000 | ---D | M] -- C:\Users\cad\AppData\Roaming\TuneUp Software
[2011.06.04 00:38:15 | 000,000,000 | ---D | M] -- C:\Users\cad\AppData\Roaming\Ubisoft
[2009.07.14 07:08:49 | 000,003,402 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.06.03 20:37:23 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.05.31 17:08:31 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2011.06.03 20:39:55 | 000,000,000 | ---D | M] -- C:\Intel
[2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2011.06.04 08:14:54 | 000,000,000 | R--D | M] -- C:\Programme
[2011.06.04 17:59:12 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2011.06.04 17:40:11 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.05.31 17:08:31 | 000,000,000 | -HSD | M] -- C:\Programme
[2011.06.03 20:35:44 | 000,000,000 | -HSD | M] -- C:\Recovery
[2011.06.04 17:26:43 | 000,000,000 | ---D | M] -- C:\Spiele
[2011.06.04 18:05:31 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.06.03 20:37:10 | 000,000,000 | R--D | M] -- C:\Users
[2011.06.04 18:01:49 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\SoftwareDistribution\Download\71d84967e1e9a8a414d570c6caa8bb08\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\SoftwareDistribution\Download\71d84967e1e9a8a414d570c6caa8bb08\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\SysWOW64\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\SoftwareDistribution\Download\71d84967e1e9a8a414d570c6caa8bb08\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SoftwareDistribution\Download\0cfc8dbf763c806fb82e646c7352a6fc\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SoftwareDistribution\Download\71d84967e1e9a8a414d570c6caa8bb08\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\SoftwareDistribution\Download\71d84967e1e9a8a414d570c6caa8bb08\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\SoftwareDistribution\Download\71d84967e1e9a8a414d570c6caa8bb08\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\SoftwareDistribution\Download\00236e2e422dab929dcda56260d05350\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SoftwareDistribution\Download\71d84967e1e9a8a414d570c6caa8bb08\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\SoftwareDistribution\Download\0cfc8dbf763c806fb82e646c7352a6fc\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\SoftwareDistribution\Download\00236e2e422dab929dcda56260d05350\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\SoftwareDistribution\Download\0cfc8dbf763c806fb82e646c7352a6fc\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\SoftwareDistribution\Download\00236e2e422dab929dcda56260d05350\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\SoftwareDistribution\Download\0cfc8dbf763c806fb82e646c7352a6fc\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\SoftwareDistribution\Download\71d84967e1e9a8a414d570c6caa8bb08\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\SoftwareDistribution\Download\00236e2e422dab929dcda56260d05350\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
 
< MD5 for: REGEDIT.EXE  >
[2009.07.14 03:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=2E2C937846A0B8789E5E91739284D17A -- C:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e\regedit.exe
[2009.07.14 03:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\regedit.exe
[2009.07.14 03:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\SysWOW64\regedit.exe
[2009.07.14 03:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\winsxs\wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5a78515e29ea6f39\regedit.exe
 
< MD5 for: USERINIT.EXE  >
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\SysNative\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\SoftwareDistribution\Download\0cfc8dbf763c806fb82e646c7352a6fc\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SoftwareDistribution\Download\0cfc8dbf763c806fb82e646c7352a6fc\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >
         
--- --- ---



ExtrasOTL Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 04.06.2011 18:04:48 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Users\cad\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5,98 Gb Total Physical Memory | 4,80 Gb Available Physical Memory | 80,18% Memory free
11,96 Gb Paging File | 10,55 Gb Available in Paging File | 88,19% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,67 Gb Total Space | 415,83 Gb Free Space | 89,30% Space Free | Partition Type: NTFS
 
Computer Name: CAD-PC | User Name: cad | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1A8BA6CE-822D-4888-89E2-ACBF4308F271}" = Intel(R) PROSet/Wireless WiFi-Software
"{2773AD7E-83FA-0656-40A8-DEC64D8F1365}" = ccc-utility64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{E86906FF-C63D-4EAF-ACE7-5F8D55FBEA9A}" = Finger Sensing Pad Driver
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FDAF0654-0EB1-4995-E1F7-0B660AA388B0}" = ATI Catalyst Install Manager
"4A6263828F32211742974C677F066151C53114B7" = Windows-Treiberpaket - Realtek (RTL8167) Net  (11/27/2009 7.011.1127.2009)
"8426FCB8FBFE7DD936977F568A58E018229E5BC1" = ENE USB Card Reader Driver
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"ProInst" = Intel PROSet Wireless
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{09E112B6-FF82-6D43-2F10-5457EB497A0D}" = CCC Help Italian
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23E91CDA-F3E7-4C94-5B64-81AA33021A5A}" = ccc-core-static
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java(TM) 6 Update 25
"{286B6FE4-2ABE-EA32-63DC-240511F65273}" = Catalyst Control Center InstallProxy
"{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}" = Die Schlacht um Mittelerde™ II
"{32CD9747-C2FD-A4CC-F5AA-8554026D5AE9}" = CCC Help German
"{34319A5A-9FA3-7CA5-2B8C-E7B27978D14B}" = Catalyst Control Center Graphics Previews Vista
"{34B61214-F4D3-4449-A918-F52A36FB2F71}" = msi LED Manager
"{38FFBAA2-E184-5AC2-2F3B-21B7F1D204A3}" = CCC Help Portuguese
"{3BDDA587-7CDE-430C-90A4-E2C4E48D3AE9}" = Camera Recorder
"{3D0960E3-BAB2-A4D5-2938-5263F20CCABF}" = CCC Help Russian
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{40F41436-9855-69D1-6624-05051032A042}" = CCC Help Chinese Standard
"{4696DB09-A111-F16E-DBD1-2E86C4137609}" = Catalyst Control Center Localization All
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C3D6B4A-F65B-A117-9353-7075AD8B7AB8}" = Catalyst Control Center Graphics Previews Common
"{51CC4231-6D5F-9E64-4C82-22B719F8043E}" = CCC Help Hungarian
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{5A77BE6F-4E2C-63EE-B6E0-750589A0DCAB}" = CCC Help Turkish
"{6D728744-83D7-4490-B019-200C5092A284}" = CCC Help Polish
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{89734B00-C43C-9ACE-21EC-F9468A2950F7}" = CCC Help Chinese Traditional
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{92041178-60AE-ABE9-40A9-5448E41C7865}" = CCC Help English
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{976116B5-155F-B718-160C-CB1B101A4EEA}" = CCC Help Korean
"{978F7D42-EB1F-004E-C6BC-4928E7F172EB}" = CCC Help French
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A690B48E-491E-224E-53C5-3CFAFC3D8D97}" = CCC Help Czech
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{BFCC0EF6-7051-BC40-8848-7C7767D92D78}" = CCC Help Spanish
"{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"DAEMON Tools Lite" = DAEMON Tools Lite
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.0.1200
"Mozilla Firefox 4.0.1 (x86 de)" = Mozilla Firefox 4.0.1 (x86 de)
"Mozilla Thunderbird (3.1.10)" = Mozilla Thunderbird (3.1.10)
"Runic Games Torchlight" = Torchlight
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR Archivierer
 
========== Last 10 Event Log Errors ==========
 
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
 
< End of report >
         
--- --- ---

Geändert von cadeyrn (04.06.2011 um 18:20 Uhr)

Alt 05.06.2011, 08:54   #2
cadeyrn
 
[Win7] unerwünschte Weiterleitung auf gomeo etc. - Standard

[Win7] unerwünschte Weiterleitung auf gomeo etc.



Hat sich erledigt! Trotzdem Danke! Da ich den PC erst neu aufgesetzt habe, kann ich es auch gerade wieder nochmal neu machen, und es ist die sichere Variante.

Thread kann gelöscht werden!
__________________


Antwort

Themen zu [Win7] unerwünschte Weiterleitung auf gomeo etc.
.exe, 64-bit, ausgeführt, board, brauch, bräuchte, c:\windows\system32\rundll32.exe, focus, frage, geholfen, gomeo, google, hilfesuche, hilfesuchenden, install.exe, langs, league of legends, lösen, mozilla thunderbird, natürlich, niemals, oldtimer, problem, required, schädliche, schädliche software, searchplugins, sehr geholfen, seite, shortcut, software, sptd.sys, start menu, syswow64, unerwünschte, usb 3.0, webcheck, weiterleitung, win, win7, überhaupt



Ähnliche Themen: [Win7] unerwünschte Weiterleitung auf gomeo etc.


  1. Google: unerwünschte Weiterleitung
    Log-Analyse und Auswertung - 13.12.2011 (71)
  2. Google (unerwünschte) Weiterleitung
    Log-Analyse und Auswertung - 10.12.2011 (2)
  3. gomeo entfernen - weiterleitung auf andere websites
    Log-Analyse und Auswertung - 06.09.2011 (9)
  4. Automatische Google-Weiterleitung zu Gomeo [Win7]
    Plagegeister aller Art und deren Bekämpfung - 20.07.2011 (3)
  5. Dauernde Weiterleitung auf Ask / Gomeo
    Log-Analyse und Auswertung - 26.05.2011 (17)
  6. Weiterleitung zu Epoclick, Gomeo, google analytics, google websites, google anderer länder
    Plagegeister aller Art und deren Bekämpfung - 10.05.2011 (6)
  7. Automatische Weiterleitung bei google Linka auf Gomeo
    Plagegeister aller Art und deren Bekämpfung - 15.03.2011 (19)
  8. Unerwünschte Weiterleitung nach gomeo, ask.com etc.
    Plagegeister aller Art und deren Bekämpfung - 15.03.2011 (6)
  9. Weiterleitung google auf Gomeo // ständige Trojaner/etc meldungen von Avira
    Plagegeister aller Art und deren Bekämpfung - 12.03.2011 (8)
  10. unerwünschte Weiterleitung im Firefox
    Plagegeister aller Art und deren Bekämpfung - 15.02.2011 (15)
  11. Weiterleitung zu Gomeo u.a., Rechner lahmt, I-Net Verbindung lahmt -> Panik
    Plagegeister aller Art und deren Bekämpfung - 09.02.2011 (1)
  12. Unerwünschte Weiterleitung mit Firefox
    Plagegeister aller Art und deren Bekämpfung - 26.12.2010 (37)
  13. Ständige Google Weiterleitung zu Gomeo usw,
    Log-Analyse und Auswertung - 14.12.2010 (7)
  14. unerwünschte Weiterleitung bei Googel
    Log-Analyse und Auswertung - 22.08.2010 (13)
  15. unerwünschte Weiterleitung bei Google
    Log-Analyse und Auswertung - 15.07.2009 (16)
  16. Unerwünschte Weiterleitung bei google
    Log-Analyse und Auswertung - 21.06.2009 (2)
  17. unerwünschte Weiterleitung Browser
    Log-Analyse und Auswertung - 07.12.2007 (0)

Zum Thema [Win7] unerwünschte Weiterleitung auf gomeo etc. - Hallo, ich dachte ich bräuchte niemals so ein Board, aber sag niemals nie, nicht. Ih habe eine zweifelhafte .exe ausgeführt und natürlich war es nicht das was drin war. Selber - [Win7] unerwünschte Weiterleitung auf gomeo etc....
Archiv
Du betrachtest: [Win7] unerwünschte Weiterleitung auf gomeo etc. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.