Weisser Bildschirm - Warten sie während die Verbindung mit dem Internet hergestellt wird - Win Xp
Hallo!!!
Ich habe mir auch diesen BKA oder Gema-Virus eingefangen. Bei mir geht gar nichts mehr. Ich kann meinen Pc auch im abgesicherten Modus nicht mehr hochfahren. Wenn ich den Taskmanager aufrufen will sagt er mir, dass er deaktiviert ist. Ich habe mir über ein zweiten PC die OTLPEnet.exe runtergeladen, mir eine ISO erstellt und vom infizierten PC aus gebootet. Scan durchgeführt und folgendes Protokoll erhalten: Code:
OTL logfile created on: 3/22/2012 7:02:21 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 91.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 48.83 Gb Total Space | 20.53 Gb Free Space | 42.05% Space Free | Partition Type: NTFS
Drive D: | 48.83 Gb Total Space | 48.75 Gb Free Space | 99.84% Space Free | Partition Type: NTFS
Drive E: | 208.92 Gb Total Space | 62.77 Gb Free Space | 30.05% Space Free | Partition Type: NTFS
Drive F: | 3.82 Gb Total Space | 3.82 Gb Free Space | 100.00% Space Free | Partition Type: FAT32
Drive G: | 159.18 Gb Total Space | 120.47 Gb Free Space | 75.68% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
========== Win32 Services (SafeList) ==========
SRV - [2011/11/09 15:05:42 | 002,420,616 | ---- | M] (Check Point Software Technologies LTD) [Auto] -- C:\Programme\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon)
SRV - [2011/11/03 10:44:28 | 000,497,280 | ---- | M] (Check Point Software Technologies) [Auto] -- C:\Programme\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc)
SRV - [2011/05/06 13:31:24 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- C:\Programme\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2011/05/06 13:31:21 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- C:\Programme\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2009/12/06 11:13:14 | 000,397,312 | R--- | M] () [Auto] -- C:\Programme\Gemeinsame Dateien\AVerMedia\Service\AVerScheduleService.exe -- (AVerScheduleService)
SRV - [2009/11/12 08:48:56 | 000,071,096 | ---- | M] () [Auto] -- C:\Programme\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2009/10/30 04:48:42 | 000,348,160 | R--- | M] (AVerMedia) [Auto] -- C:\Programme\Gemeinsame Dateien\AVerMedia\Service\AVerRemote.exe -- (AVerRemote)
SRV - [2009/05/06 12:53:50 | 001,220,608 | ---- | M] (MAGIX AG) [Auto] -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2008/08/07 05:10:02 | 003,276,800 | ---- | M] (MAGIX®) [On_Demand] -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2003/07/28 15:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [File_System | System] -- -- (vcdrom)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand] -- -- (cpuz132)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2011/11/09 15:01:38 | 000,525,840 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System] -- C:\WINDOWS\system32\vsdatant.sys -- (Vsdatant)
DRV - [2011/11/03 10:44:20 | 000,027,016 | ---- | M] (Check Point Software Technologies) [Kernel | Auto] -- C:\Programme\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)
DRV - [2011/09/19 06:07:44 | 000,029,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2011/06/13 05:03:54 | 000,306,664 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2011/05/07 04:17:09 | 000,243,152 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2011/05/06 13:31:21 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010/11/11 19:10:52 | 000,100,456 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2010/08/29 23:47:06 | 001,414,528 | ---- | M] (AVerMedia TECHNOLOGIES, Inc. ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AVerTM62.sys -- (TRIDCap)
DRV - [2009/11/12 07:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2008/04/13 18:16:24 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\MPE.sys -- (MPE)
DRV - [2008/04/04 12:34:26 | 000,014,208 | ---- | M] (MAGIX) [Kernel | Boot] -- C:\WINDOWS\System32\drivers\disksec.sys -- (DiskSec)
DRV - [2007/01/25 05:12:22 | 000,302,336 | ---- | M] (Midiman/M-Audio) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\delta.sys -- (DELTA) Service for Delta Driver (WDM)
DRV - [2004/05/05 16:48:40 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Hard_Chair_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?AF=110004&babsrc=HP_ss&mntrId=a8e88a7100000000000000196698ac00
IE - HKU\Hard_Chair_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\LocalService.NT-AUTORITÄT_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Sandra_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.defaultthis.engineName: "softonic-de3 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2431245&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811&ilc=12"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p="
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\npFFApi.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Programme\AVG\AVG9\Firefox [2011/09/19 06:20:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Programme\CheckPoint\ZAForceField\TrustChecker [2012/03/11 11:52:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/02/22 05:50:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011/10/29 09:55:07 | 000,000,000 | ---D | M]
[2011/03/27 09:06:25 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Extensions
[2012/03/12 18:19:11 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions
[2011/03/29 11:34:56 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/03/11 11:41:05 | 000,000,000 | ---D | M] (Complitly - Speed up your search with your personal search suggestions tool) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
[2011/04/22 09:46:26 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012/03/11 11:52:32 | 000,000,000 | ---D | M] (DealPly) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
[2012/03/12 18:19:11 | 000,000,000 | ---D | M] ("I Want This") -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions\crossriderapp2258@crossrider.com
[2011/07/13 05:39:54 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions\engine@conduit.com
[2012/03/11 11:50:34 | 000,000,000 | ---D | M] (Babylon) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions\ffxtlbr@babylon.com
[2011/07/14 06:07:08 | 000,000,000 | ---D | M] (Gutscheinrausch.de) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mozilla\Firefox\Profiles\bwoftuqx.default\extensions\mail@gutscheinrausch.de
[2011/11/17 14:25:44 | 000,002,333 | ---- | M] () -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Mozilla\Firefox\Profiles\bwoftuqx.default\searchplugins\askcom.xml
[2011/06/20 08:06:48 | 000,000,927 | ---- | M] () -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Mozilla\Firefox\Profiles\bwoftuqx.default\searchplugins\conduit.xml
[2011/07/11 14:04:02 | 000,000,633 | ---- | M] () -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Mozilla\Firefox\Profiles\bwoftuqx.default\searchplugins\startsear.xml
[2011/11/10 04:40:45 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
File not found (No name found) --
[2012/02/22 05:50:53 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011/06/30 05:22:59 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2011/10/03 05:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Programme\mozilla firefox\plugins\npvsharetvplg.dll
[2012/02/21 10:48:33 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/03/11 11:50:07 | 000,002,310 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\babylon.xml
[2012/02/21 10:48:33 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/02/21 10:48:33 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/02/21 10:48:33 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/02/21 10:48:33 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/02/21 10:48:33 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2008/04/14 08:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - File not found
O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - File not found
O2 - BHO: (Complitly) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Complitly\Complitly.dll (SimplyGen)
O2 - BHO: (I Want This) - {11111111-1111-1111-1111-110011221158} - C:\Programme\I Want This\I Want This.dll (215 Apps)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Programme\DealPly\DealPlyIE.dll (DealPly Technologies Ltd)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKU\Hard_Chair_ON_C\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\Hard_Chair_ON_C\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\Hard_Chair_ON_C\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Programme\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [ISW] C:\Programme\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TrayServer] C:\Programme\MAGIX\Video_deluxe_16\Trayserver.exe (MAGIX AG)
O4 - HKLM..\Run: [ZoneAlarm] C:\Programme\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
O4 - HKU\Hard_Chair_ON_C..\Run: [ZPseiK15zRSy1wG] File not found
O4 - HKU\Sandra_ON_C..\Run: [ZPseiK15zRSy1wG] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Hard_Chair_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Hard_Chair_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O7 - HKU\Hard_Chair_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
O7 - HKU\Hard_Chair_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\Hard_Chair_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\LocalService.NT-AUTORITÄT_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService.NT-AUTORITÄT_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Sandra_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Sandra_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
O7 - HKU\Sandra_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\Sandra_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O9 - Extra Button: HP Sammelmappe - {58ECB495-38F0-49cb-A538-10282ABF65E7} - File not found
O9 - Extra Button: HP Intelligente Auswahl - {700259D7-1666-479a-93B1-3250410481E8} - File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\hw56suzj11.exe) - File not found
O20 - HKLM Winlogon: UserInit - (C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\hw56suzj11.exe) - File not found
O20 - HKU\Hard_Chair_ON_C Winlogon: Shell - (C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\hw56suzj11.exe) - File not found
O20 - HKU\Hard_Chair_ON_C Winlogon: UserInit - (C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\hw56suzj11.exe) - File not found
O20 - HKU\Sandra_ON_C Winlogon: Shell - (C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\hw56suzj11.exe) - File not found
O20 - HKU\Sandra_ON_C Winlogon: UserInit - (C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\hw56suzj11.exe) - File not found
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper:
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/03/10 12:30:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012/03/22 17:22:08 | 002,237,440 | R--- | C] (OldTimer Tools) -- C:\OTLPE.exe
[2012/03/22 17:22:08 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/03/11 11:50:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\DealPly
[2012/03/11 11:50:49 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Hard Chair\PrivacIE
[2012/03/11 11:50:48 | 000,000,000 | ---D | C] -- C:\Programme\DealPly
[2012/03/11 11:41:02 | 000,000,000 | ---D | C] -- C:\Programme\Complitly
[2012/03/11 11:41:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Complitly
[2012/03/11 11:41:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hard Chair\Lokale Einstellungen\Anwendungsdaten\Babylon
[2012/03/11 11:41:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Babylon
[2012/03/11 11:41:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Babylon
[2012/02/29 10:28:38 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Hard Chair\IETldCache
[2012/02/29 06:40:45 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Sandra\IETldCache
[2012/02/29 06:18:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2012/02/29 06:17:54 | 011,082,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2012/02/29 06:17:54 | 002,000,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2012/02/29 06:17:54 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2012/02/29 06:17:54 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2012/02/29 06:17:54 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2012/02/29 06:17:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2012/02/29 06:16:45 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2012/02/22 05:41:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hard Chair\Lokale Einstellungen\Anwendungsdaten\Google
[2012/02/22 05:41:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hard Chair\Lokale Einstellungen\Anwendungsdaten\I Want This
[2012/02/22 05:41:05 | 000,000,000 | ---D | C] -- C:\Programme\I Want This
[2011/10/26 10:37:13 | 000,877,784 | ---- | C] (MAGIX AG) -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\mgxoschk.dll
========== Files - Modified Within 30 Days ==========
[2012/03/22 12:28:23 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/03/22 12:28:20 | 000,000,388 | ---- | M] () -- C:\WINDOWS\tasks\PCCT - MAGIX AG.job
[2012/03/22 12:28:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/03/22 09:59:33 | 076,011,089 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2012/03/17 10:01:44 | 000,000,034 | ---- | M] () -- C:\WINDOWS\cdplayer.ini
[2012/03/14 18:12:46 | 000,169,096 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/03/14 12:55:07 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/03/12 04:37:28 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/03/11 11:50:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\DealPly
[2012/03/11 11:50:10 | 000,000,474 | ---- | M] () -- C:\user.js
[2012/03/08 11:40:30 | 000,002,495 | ---- | M] () -- C:\Dokumente und Einstellungen\Hard Chair\Desktop\Microsoft Word.lnk
[2012/02/29 10:28:43 | 000,000,795 | ---- | M] () -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Browser starten.lnk
[2012/02/29 06:40:47 | 000,000,795 | ---- | M] () -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Browser starten.lnk
[2012/02/22 07:16:10 | 000,415,916 | ---- | M] () -- C:\WINDOWS\System32\vsconfig.xml
[2012/02/22 05:48:26 | 000,002,523 | ---- | M] () -- C:\Dokumente und Einstellungen\Hard Chair\Desktop\Microsoft Excel.lnk
========== Files Created - No Company Name ==========
[2012/03/11 11:41:09 | 000,000,474 | ---- | C] () -- C:\user.js
[2012/02/16 12:05:13 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/01/07 11:16:03 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\Sandra\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/11/01 08:07:23 | 000,162,721 | ---- | C] () -- C:\WINDOWS\hpoins21.dat
[2011/11/01 08:07:23 | 000,008,138 | ---- | C] () -- C:\WINDOWS\hpomdl21.dat
[2011/10/26 08:31:02 | 000,014,472 | ---- | C] () -- C:\Dokumente und Einstellungen\Hard Chair\.recently-used.xbel
[2011/09/11 10:12:35 | 000,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2011/05/13 10:45:38 | 000,000,046 | ---- | C] () -- C:\WINDOWS\Speed.INI
[2011/05/02 07:53:48 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2011/05/02 07:51:58 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\AVerIO.dll
[2011/05/02 07:51:58 | 000,003,456 | R--- | C] () -- C:\WINDOWS\System32\AVerIO.sys
[2011/05/02 07:50:27 | 000,606,208 | R--- | C] () -- C:\WINDOWS\System32\sptlib21.dll
[2011/05/02 07:50:27 | 000,311,296 | R--- | C] () -- C:\WINDOWS\System32\sptlib01.dll
[2011/05/02 07:50:27 | 000,307,200 | R--- | C] () -- C:\WINDOWS\System32\sptlib22.dll
[2011/05/02 07:50:27 | 000,307,200 | R--- | C] () -- C:\WINDOWS\System32\sptlib03.dll
[2011/05/02 07:50:27 | 000,294,912 | R--- | C] () -- C:\WINDOWS\System32\sptlib11.dll
[2011/05/02 07:50:27 | 000,225,280 | R--- | C] () -- C:\WINDOWS\System32\sptlib02.dll
[2011/05/02 07:50:27 | 000,135,168 | R--- | C] () -- C:\WINDOWS\System32\sptlib12.dll
[2011/04/28 14:27:02 | 000,000,046 | ---- | C] () -- C:\WINDOWS\PCCT.INI
[2011/04/10 11:14:36 | 000,007,256 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2011/03/30 14:53:06 | 000,252,080 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011/03/30 14:53:04 | 000,252,080 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011/03/30 14:53:04 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011/03/30 14:44:55 | 000,081,936 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2011/03/29 12:19:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PlgEnabler2a.INI
[2011/03/28 11:56:38 | 000,129,024 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE
[2011/03/27 12:03:02 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2011/03/27 11:27:58 | 000,000,111 | ---- | C] () -- C:\WINDOWS\installation.ini
[2011/03/27 11:26:10 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2011/03/27 11:23:14 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011/03/27 09:06:08 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011/03/27 08:57:25 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011/03/27 08:54:59 | 000,169,096 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/03/27 08:52:53 | 000,017,920 | ---- | C] () -- C:\Dokumente und Einstellungen\Hard Chair\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/27 08:51:37 | 000,000,019 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2011/03/27 08:41:44 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/03/27 08:17:44 | 000,005,213 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2011/03/27 08:17:39 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2011/03/27 08:08:34 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011/03/27 08:03:48 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/08/16 12:57:00 | 002,292,678 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2008/10/07 03:13:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/10/07 03:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/04/14 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/04/14 08:00:00 | 000,516,060 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2008/04/14 08:00:00 | 000,492,750 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/04/14 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/04/14 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2008/04/14 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/04/14 08:00:00 | 000,100,318 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2008/04/14 08:00:00 | 000,083,398 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/04/14 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/04/14 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2008/04/14 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/04/14 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/04/14 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008/04/14 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2002/05/28 13:55:42 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2002/05/28 13:54:40 | 000,004,605 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
========== LOP Check ==========
[2011/09/29 10:16:59 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\Application Updater
[2011/04/22 09:42:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\AMozilla
[2011/07/05 09:34:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\AnvSoft
[2011/07/16 14:09:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Any Video Converter Professional
[2012/03/11 11:41:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Babylon
[2011/07/15 05:50:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\BitTorrent
[2011/03/27 12:03:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Canneverbe Limited
[2011/03/27 10:22:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\CheckPoint
[2012/03/11 11:41:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Complitly
[2011/04/22 09:46:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\DVDVideoSoftIEHelpers
[2011/11/11 12:32:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\FreeVideoConverter
[2011/10/11 05:39:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\gtk-2.0
[2011/11/02 11:15:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Imaxel
[2011/10/28 08:47:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\MAGIX
[2011/07/14 06:19:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\OpenCandy
[2011/04/04 05:18:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Sony
[2011/09/24 10:23:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hard Chair\Anwendungsdaten\Systweak
[2012/01/07 10:53:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\CheckPoint
[2012/01/07 11:13:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Sandra\Anwendungsdaten\MAGIX
[2011/05/02 07:54:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\AVer MediaCenter
[2011/05/06 13:29:43 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\avg9
[2012/03/11 11:41:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Babylon
[2011/03/27 12:03:11 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Canneverbe Limited
[2011/11/19 08:25:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\CheckPoint
[2011/03/28 11:48:23 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Common Files
[2011/10/26 10:36:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\MAGIX
[2011/03/27 09:08:01 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\MailFrontier
[2011/07/16 14:08:06 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP
[2012/01/07 11:55:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\tmp
[2011/12/10 08:40:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\YouTube Downloader
[2012/03/22 12:28:20 | 000,000,388 | ---- | M] () -- C:\WINDOWS\Tasks\PCCT - MAGIX AG.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 123 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:661DFA1C
< End of report >
So, nun weiss ich nicht mehr weiter. Hoffentlich kann mir von euch einer helfen. Ich bedanke mich schon mal im Vorraus.
MfG Grohm72!!! |
