Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Google Links führen auf falsche Seiten (https://www.trojaner-board.de/117472-google-links-fuehren-falsche-seiten.html)

faulwurf 17.06.2012 02:30
Google Links führen auf falsche Seiten
 
Guten Morgen,

bin neu hier und möchte mich vorneweg füre eure Hilfe bedanken.

Mein Problem:
Fast alle Google Links führen auf falsche Seiten mit gefährlichem Inhalt, teilweiße verweigert sogar Firefox diese Seiten zu öffnen, dann habe ich oben die IP: 173.214.255.56 stehen. Wenn man ( zumindest auf diesem Laptop) nach dieser googelt wird man direkt auf den Microsoft Support weitergeleiten mit einem Beitrag zu Maleware mit wenig hilfreichem Inhalt. Sonnst werde ich auf sehr merkwürdige Seite über rocketnews weitergeleitet. Manchmal funktionieren die Links jedoch auch.

Ich habe wie beschrieben alle Programme ausgeführt, danach war das Problem aufeinmal weg. Vielleicht lag es an defogger, ich schreibe diesen Beitrag dennoch da ich hier häufig gelesen habe, dass das verschwinden der Symptome nicht garantiert Virenfrei zu sein. Ich wäre sehr dankbar wenn jemand trotzdem noch einen Blick darauf werfen könnte aufgrund eines Fundes von Malewarebytes.

Hier noch die logs:
Malewarebytes:
Code:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.06.16.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Kathi :: KATHI-PC [Administrator]

16.06.2012 22:55:52
mbam-log-2012-06-17 (02-36-29).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 642063
Laufzeit: 3 Stunde(n), 2 Minute(n), 39 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Kathi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DFOWQYS6\MyPhoneExplorer_v2_5185[1].exe (PUP.Adware.Agent) -> Keine Aktion durchgeführt.

(Ende)
OTL.txt:
Code:
OTL logfile created on: 17.06.2012 02:43:01 - Run 1
OTL by OldTimer - Version 3.2.49.0    Folder = C:\Users\Kathi\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
5,90 Gb Total Physical Memory | 3,28 Gb Available Physical Memory | 55,64% Memory free
11,79 Gb Paging File | 8,64 Gb Available in Paging File | 73,30% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 446,13 Gb Total Space | 128,88 Gb Free Space | 28,89% Space Free | Partition Type: NTFS
 
Computer Name: KATHI-PC | User Name: Kathi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.06.17 02:41:26 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Kathi\Downloads\OTL.exe
PRC - [2012.04.17 15:05:00 | 000,651,264 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
PRC - [2012.03.23 14:25:24 | 000,087,040 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011.11.25 14:14:50 | 000,067,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
PRC - [2011.11.04 15:40:06 | 000,687,400 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.09.22 18:14:16 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
PRC - [2011.09.22 18:11:26 | 000,460,096 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
PRC - [2011.09.22 18:06:12 | 001,692,480 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
PRC - [2011.09.21 18:30:12 | 004,109,312 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
PRC - [2011.09.05 11:04:54 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.08.12 04:05:00 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
PRC - [2011.06.29 16:52:54 | 000,474,176 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
PRC - [2011.06.28 03:26:30 | 002,022,976 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
PRC - [2011.05.19 09:16:48 | 000,995,392 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
PRC - [2011.05.19 09:16:46 | 001,335,360 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
PRC - [2011.05.19 09:16:36 | 000,921,664 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
PRC - [2011.05.19 09:16:34 | 000,839,744 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
PRC - [2011.04.24 23:15:02 | 000,202,296 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
PRC - [2011.04.22 18:13:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.04.21 20:32:26 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.04.13 18:39:14 | 000,503,942 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2011.01.17 19:50:34 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2011.01.17 19:50:34 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2010.12.21 02:24:38 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010.12.21 02:24:36 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010.12.17 18:25:22 | 000,686,704 | ---- | M] () -- C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
PRC - [2010.11.17 18:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2010.10.02 00:55:28 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
PRC - [2009.03.05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2007.04.23 05:00:00 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.05.11 12:24:28 | 001,358,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\439862b007b2dd84127ff35af476f5ad\System.WorkflowServices.ni.dll
MOD - [2012.05.11 12:23:39 | 001,707,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ed560b26f2f86b3f07b7f6d384f92275\System.ServiceModel.Web.ni.dll
MOD - [2012.05.11 12:23:33 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\64de6810023adccdc56ddae13bdd6b03\System.Xml.Linq.ni.dll
MOD - [2012.05.11 12:22:13 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll
MOD - [2012.05.11 12:15:03 | 001,083,392 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\2ce8210219c7123610072357358df470\System.IdentityModel.ni.dll
MOD - [2012.05.11 12:15:01 | 002,347,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\72a24b45e11d64eb2bc840aae9419ba5\System.Runtime.Serialization.ni.dll
MOD - [2012.05.11 12:14:59 | 017,478,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\107779ca2708d2b31b2e1560e47f6d15\System.ServiceModel.ni.dll
MOD - [2012.05.11 12:14:59 | 000,256,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9e7bf69d97febe4ed1a288c787e5d9ca\SMDiagnostics.ni.dll
MOD - [2012.05.11 11:58:44 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll
MOD - [2012.05.11 11:58:37 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\1a690902e9a6293de228c16fab21e2f7\System.Web.ni.dll
MOD - [2012.05.11 11:58:31 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
MOD - [2012.05.11 11:58:24 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\07f019692c382d588d3c6cb2da2a9ec5\PresentationFramework.ni.dll
MOD - [2012.05.11 11:58:13 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\90555968565afd59bce4b0974e9903bd\System.Windows.Forms.ni.dll
MOD - [2012.05.11 11:58:08 | 001,590,784 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\69f6e582cb79f107c61308b468c1a215\System.Drawing.ni.dll
MOD - [2012.05.11 11:58:06 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\2d1fd350e9bc62ce659e5cbcfd555796\PresentationCore.ni.dll
MOD - [2012.05.11 11:57:57 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012.05.11 11:57:54 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012.05.11 11:57:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.05.11 11:57:50 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.05.11 11:57:44 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012.04.17 15:05:00 | 001,515,520 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\Maps\R66Api.dll
MOD - [2012.04.17 15:05:00 | 000,651,264 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
MOD - [2012.04.17 15:05:00 | 000,559,244 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\sqlite3.7.dll
MOD - [2012.04.17 15:05:00 | 000,516,599 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\sqlite3.dll
MOD - [2012.04.17 15:05:00 | 000,389,120 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\HtcDetect.dll
MOD - [2012.04.17 15:05:00 | 000,172,032 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\htcDetectLegend.dll
MOD - [2012.04.17 15:05:00 | 000,151,552 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\htcDisk.dll
MOD - [2012.04.17 15:05:00 | 000,103,936 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\OutputLog.dll
MOD - [2012.04.17 15:05:00 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\fdHttpd.dll
MOD - [2012.03.16 16:23:22 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2011.11.25 14:14:48 | 000,061,496 | ---- | M] () -- C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL\Program\clntutil.dll
MOD - [2011.11.17 14:47:17 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2011.09.22 18:14:16 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
MOD - [2011.06.29 16:52:54 | 000,474,176 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
MOD - [2011.06.28 03:26:30 | 002,022,976 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
MOD - [2011.06.28 03:25:30 | 000,058,944 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
MOD - [2011.06.25 07:32:36 | 000,323,136 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
MOD - [2011.06.25 07:20:26 | 000,565,968 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
MOD - [2011.04.24 23:13:34 | 010,674,576 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtWebKit4.dll
MOD - [2011.04.24 23:13:30 | 007,008,656 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtGui4.dll
MOD - [2011.04.24 23:13:28 | 000,192,912 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtSql4.dll
MOD - [2011.04.24 23:13:26 | 001,270,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtScript4.dll
MOD - [2011.04.24 23:13:26 | 000,758,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtNetwork4.dll
MOD - [2011.04.24 23:13:24 | 002,118,032 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtCore4.dll
MOD - [2011.04.24 23:13:24 | 002,089,360 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtDeclarative4.dll
MOD - [2011.04.22 18:13:00 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
MOD - [2011.04.20 20:00:06 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtWebKit\qmlwebkitplugin.dll
MOD - [2011.04.20 19:56:28 | 000,025,088 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\imageformats\qgif4.dll
MOD - [2010.12.17 18:25:22 | 000,686,704 | ---- | M] () -- C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
MOD - [2010.11.25 06:44:02 | 000,375,280 | ---- | M] () -- c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
MOD - [2010.11.21 08:49:35 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_de_b77a5c561934e089\System.Runtime.Serialization.resources.dll
MOD - [2010.11.21 05:24:08 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010.11.17 18:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
MOD - [2010.03.22 23:52:42 | 006,776,832 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
MOD - [2010.03.17 04:28:28 | 000,326,144 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
MOD - [2010.03.17 04:28:16 | 000,635,904 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
MOD - [2010.03.17 04:28:04 | 001,926,144 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
MOD - [2010.03.12 03:52:34 | 000,225,280 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
MOD - [2010.03.12 03:52:34 | 000,028,160 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
MOD - [2010.03.05 23:07:58 | 000,125,952 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
MOD - [2010.03.05 23:07:58 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
MOD - [2007.04.23 05:00:00 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2011.08.08 15:39:18 | 001,166,848 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011.07.28 05:04:48 | 001,517,328 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV:64bit: - [2011.07.28 04:48:34 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2011.07.28 04:44:18 | 000,844,560 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV:64bit: - [2011.06.03 20:51:38 | 000,134,928 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) Intel(R) Centrino(R) Wireless Bluetooth(R)
SRV:64bit: - [2010.11.29 23:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) Intel(R)
SRV:64bit: - [2010.09.23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009.11.18 04:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012.05.11 12:24:12 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.04.28 21:47:38 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.03.23 14:25:24 | 000,087,040 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2012.02.29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011.11.04 15:40:06 | 000,687,400 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86)
SRV - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011.09.22 18:06:12 | 001,692,480 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE -- (SftService)
SRV - [2011.09.05 11:04:54 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.08.12 02:04:58 | 000,248,304 | ---- | M] (CyberLink) [Auto | Stopped] -- c:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)
SRV - [2011.05.19 09:16:48 | 000,995,392 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service)
SRV - [2011.05.19 09:16:46 | 001,335,360 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service)
SRV - [2011.05.19 09:16:36 | 000,921,664 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)
SRV - [2011.04.24 23:15:02 | 000,202,296 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe -- (AVP)
SRV - [2011.04.22 18:13:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.04.21 20:32:26 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010.12.21 02:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2010.12.21 02:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010.11.25 13:34:18 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)
SRV - [2010.11.25 13:33:18 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)
SRV - [2010.08.26 04:28:54 | 002,823,000 | ---- | M] (Dell, Inc.) [Auto | Running] -- C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe -- (NOBU)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.06.14 12:32:23 | 000,615,728 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.11.17 14:47:27 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.11.17 14:47:27 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.10.01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011.10.01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011.10.01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011.10.01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011.08.08 15:32:08 | 000,299,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:64bit: - [2011.08.08 15:32:08 | 000,299,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:64bit: - [2011.08.04 03:28:32 | 008,604,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Intel(R)
DRV:64bit: - [2011.07.20 15:39:58 | 012,287,456 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011.07.20 02:54:06 | 000,059,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex)
DRV:64bit: - [2011.07.19 23:13:42 | 000,282,624 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf)
DRV:64bit: - [2011.05.19 09:17:04 | 000,053,248 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux)
DRV:64bit: - [2011.05.19 09:17:02 | 000,051,712 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaud.sys -- (btmaudio)
DRV:64bit: - [2011.05.17 17:27:52 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2011.05.17 17:27:50 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2011.05.03 15:42:40 | 000,222,464 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard)
DRV:64bit: - [2011.04.22 18:13:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2011.03.10 18:36:24 | 000,029,488 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
DRV:64bit: - [2011.03.04 13:23:28 | 000,011,864 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2)
DRV:64bit: - [2011.03.04 13:23:24 | 000,460,888 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Unknown] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1)
DRV:64bit: - [2011.03.04 07:29:20 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011.02.17 03:11:08 | 000,428,136 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.02.11 00:52:34 | 000,181,760 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2011.02.11 00:52:34 | 000,082,432 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2011.01.30 18:19:32 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV:64bit: - [2011.01.20 19:20:46 | 000,176,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2011.01.13 03:51:44 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.12.17 19:06:32 | 001,404,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010.12.15 19:02:04 | 000,174,168 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:64bit: - [2010.12.13 19:34:14 | 000,027,760 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelern.sys -- (Acceler)
DRV:64bit: - [2010.12.12 16:18:36 | 000,121,960 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB)
DRV:64bit: - [2010.11.29 23:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.10.20 02:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:64bit: - [2010.10.16 02:28:18 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:64bit: - [2010.08.20 12:05:12 | 000,021,616 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn)
DRV:64bit: - [2010.07.13 04:38:06 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\qicflt.sys -- (qicflt)
DRV:64bit: - [2010.06.25 16:08:10 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2010.03.19 11:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010.02.27 17:32:14 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2010.02.22 10:09:10 | 000,011,776 | ---- | M] (MBB Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\massfilter.sys -- (massfilter)
DRV:64bit: - [2009.11.02 20:27:10 | 000,022,544 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
DRV:64bit: - [2009.11.02 18:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2007.04.11 16:35:30 | 000,056,080 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2007.04.11 16:35:22 | 000,053,520 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2006.11.01 20:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}
IE:64bit: - HKLM\..\SearchScopes\{6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}
IE - HKLM\..\SearchScopes\{6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=at&l=de&s=gen
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=110187&tt=230512_54x&babsrc=SP_ss&mntrId=c43f51d20000000000004c80930f1357
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.at/"
FF - prefs.js..network.proxy.type: 0
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\linkfilter@kaspersky.ru [2012.06.14 13:19:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru [2012.06.14 13:19:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.28 21:47:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.11.21 22:08:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
 
[2011.11.21 21:57:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kathi\AppData\Roaming\mozilla\Extensions
[2012.06.03 23:30:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions
[2012.06.03 23:30:05 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2012.05.29 22:45:23 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.04.03 12:33:00 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.01.22 14:20:10 | 000,000,931 | ---- | M] () -- C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\searchplugins\conduit.xml
[2012.03.25 22:13:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.04.28 21:47:37 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.02.24 13:19:11 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.06.03 22:40:59 | 000,002,353 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012.02.24 13:19:11 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.02.24 13:19:11 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.24 13:19:11 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.24 13:19:11 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.24 13:19:11 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2012.05.15 20:14:03 | 000,249,971 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        www.008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        www.00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        www.1001-search.info
O1 - Hosts: 127.0.0.1        1001-search.info
O1 - Hosts: 127.0.0.1        www.100888290cs.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.10sek.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        www.123topsearch.com
O1 - Hosts: 127.0.0.1        123topsearch.com
O1 - Hosts: 127.0.0.1        www.132.com
O1 - Hosts: 127.0.0.1        132.com
O1 - Hosts: 127.0.0.1        www.136136.net
O1 - Hosts: 127.0.0.1        136136.net
O1 - Hosts: 127.0.0.1        www.139mm.com
O1 - Hosts: 8709 more lines...
O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)
O4:64bit: - HKLM..\Run: [DellStage] C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()
O4:64bit: - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [NVHotkey] C:\Windows\SysNative\nvHotkey.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] c:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Stage Remote] C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe ()
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AccuWeatherWidget] C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe ()
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (Dell, Inc.)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
O4 - HKLM..\Run: [NeroLauncher] C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe ()
O4 - HKLM..\Run: [PDVD9LanguageShortcut] c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl9] c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_2_202_235_Plugin.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9:64bit: - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
O9:64bit: - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.186.211.21 195.34.133.21
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7709C5DE-C576-4F21-B424-15B465CE8874}: DhcpNameServer = 18.0.0.1 18.0.0.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A8AD3D0E-8F50-470A-BA4C-12503C3695A3}: DhcpNameServer = 212.186.211.21 195.34.133.21
O18:64bit: - Protocol\Handler\bwfile-8876480 - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\klogon: DllName - (%SystemRoot%\System32\klogon.dll) - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{988439e7-5335-11e1-9766-4c80930f135a}\Shell - "" = AutoRun
O33 - MountPoints2\{988439e7-5335-11e1-9766-4c80930f135a}\Shell\AutoRun\command - "" = E:\LaunchU3.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.06.16 22:54:47 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\Malwarebytes
[2012.06.16 22:37:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.06.16 22:37:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.06.16 22:37:20 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.06.16 22:37:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.06.14 12:33:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2012
[2012.06.14 12:32:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2012.06.14 12:32:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab
[2012.06.14 12:32:23 | 000,615,728 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2012.06.04 19:26:59 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{66A9E9CC-B548-41C4-BE2D-44367683E2D7}
[2012.06.03 22:42:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\hpmonitor
[2012.06.03 22:41:50 | 000,018,816 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\Windows\SysNative\roboot64.exe
[2012.06.03 22:41:47 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\systweak
[2012.06.03 22:41:17 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\BabylonToolbar
[2012.06.03 22:41:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BabylonToolbar
[2012.06.03 22:40:42 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\Babylon
[2012.06.03 22:40:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2012.05.31 17:54:45 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{EFAC602A-D31B-4190-9B8C-86073B0A6F26}
[2012.05.31 17:54:34 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{1C3F23FD-07B2-409F-AED0-EFF8CE1BC41C}
[2012.05.31 17:52:13 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{5E714B3E-9D1D-4A6D-B61F-1F5C6F430A86}
[2012.05.31 17:49:30 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{C11A3213-3C4F-45B7-8D40-3072B78CCED7}
[2012.05.31 17:49:30 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{02AF220C-4EBA-4676-B722-56B61A891442}
[2012.05.30 12:38:39 | 000,000,000 | ---D | C] -- C:\Users\Kathi\Documents\My Documents
[2012.05.30 12:38:38 | 000,000,000 | ---D | C] -- C:\Users\Kathi\Documents\My Photos
[2012.05.30 12:38:21 | 000,000,000 | ---D | C] -- C:\Users\Kathi\Local Settings
[2012.05.30 00:19:51 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2012.05.29 23:36:05 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\Htc
[2012.05.29 23:35:47 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\HTC
[2012.05.29 23:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC Sync
[2012.05.29 23:35:16 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\Downloaded Installations
[2012.05.29 23:35:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
[2012.05.29 23:35:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spirent Communications
[2012.05.29 23:34:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HTC
[2012.05.29 22:49:01 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\TuneUp Software
[2012.05.29 22:48:54 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.05.29 22:48:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.05.29 22:48:51 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.05.29 22:45:30 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\OpenCandy
[2012.05.29 22:45:14 | 002,557,952 | ---- | C] (Nokia Corporation and/or its subsidiary(-ies)) -- C:\Windows\SysWow64\QtCore4.dll
[2012.05.29 22:45:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2012.05.29 22:45:13 | 000,405,176 | ---- | C] (Newtonsoft) -- C:\Windows\SysWow64\Newtonsoft.Json.Net20.dll
[2012.05.29 22:45:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2012.05.29 22:45:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2 C:\Users\Kathi\Documents\*.tmp files -> C:\Users\Kathi\Documents\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.06.17 02:40:20 | 000,000,000 | ---- | M] () -- C:\Users\Kathi\defogger_reenable
[2012.06.17 02:24:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.06.17 02:22:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.06.16 22:37:22 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.06.16 16:14:58 | 000,000,506 | ---- | M] () -- C:\Windows\tasks\SystemToolsDailyTest.job
[2012.06.14 12:33:09 | 000,152,233 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat
[2012.06.14 12:33:09 | 000,107,177 | ---- | M] () -- C:\Windows\SysNative\drivers\klick.dat
[2012.06.14 12:32:23 | 000,615,728 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2012.06.14 12:19:48 | 000,021,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.06.14 12:19:48 | 000,021,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.06.14 12:12:27 | 000,000,306 | ---- | M] () -- C:\Windows\tasks\Szutaqcjtz.job
[2012.06.14 12:12:12 | 453,640,191 | -HS- | M] () -- C:\hiberfil.sys
[2012.06.14 12:10:51 | 001,614,100 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.06.14 12:10:51 | 000,697,322 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.06.14 12:10:51 | 000,652,600 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.06.14 12:10:51 | 000,148,328 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.06.14 12:10:51 | 000,121,274 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.06.03 23:26:56 | 000,000,564 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2012.06.03 22:45:14 | 000,012,229 | ---- | M] () -- C:\Users\Kathi\Documents\Firmung.ics
[2012.06.03 22:45:07 | 000,008,479 | ---- | M] () -- C:\Users\Kathi\Documents\Geburtstag.ics
[2012.06.03 22:45:00 | 000,012,008 | ---- | M] () -- C:\Users\Kathi\Documents\Uni.ics
[2012.06.03 22:44:53 | 000,012,560 | ---- | M] () -- C:\Users\Kathi\Documents\Ströck.ics
[2012.06.03 22:44:46 | 000,048,789 | ---- | M] () -- C:\Users\Kathi\Documents\Pfarre.ics
[2012.06.03 22:44:35 | 000,028,274 | ---- | M] () -- C:\Users\Kathi\Documents\Privat.ics
[2012.06.03 22:41:10 | 000,000,251 | ---- | M] () -- C:\user.js
[2012.05.29 23:35:44 | 000,001,084 | ---- | M] () -- C:\Users\Public\Desktop\HTC Sync.lnk
[2012.05.26 10:45:42 | 000,000,000 | ---- | M] () -- C:\Users\Kathi\AppData\Local\rx_image32.Cache
[2 C:\Users\Kathi\Documents\*.tmp files -> C:\Users\Kathi\Documents\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.06.17 02:40:20 | 000,000,000 | ---- | C] () -- C:\Users\Kathi\defogger_reenable
[2012.06.16 22:37:22 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.06.14 12:33:09 | 000,152,233 | ---- | C] () -- C:\Windows\SysNative\drivers\klin.dat
[2012.06.14 12:33:09 | 000,107,177 | ---- | C] () -- C:\Windows\SysNative\drivers\klick.dat
[2012.06.03 22:45:13 | 000,012,229 | ---- | C] () -- C:\Users\Kathi\Documents\Firmung.ics
[2012.06.03 22:45:07 | 000,008,479 | ---- | C] () -- C:\Users\Kathi\Documents\Geburtstag.ics
[2012.06.03 22:44:59 | 000,012,008 | ---- | C] () -- C:\Users\Kathi\Documents\Uni.ics
[2012.06.03 22:44:53 | 000,012,560 | ---- | C] () -- C:\Users\Kathi\Documents\Ströck.ics
[2012.06.03 22:44:46 | 000,048,789 | ---- | C] () -- C:\Users\Kathi\Documents\Pfarre.ics
[2012.06.03 22:44:34 | 000,028,274 | ---- | C] () -- C:\Users\Kathi\Documents\Privat.ics
[2012.06.03 22:41:08 | 000,000,251 | ---- | C] () -- C:\user.js
[2012.05.29 23:35:44 | 000,001,084 | ---- | C] () -- C:\Users\Public\Desktop\HTC Sync.lnk
[2012.05.26 10:45:42 | 000,000,000 | ---- | C] () -- C:\Users\Kathi\AppData\Local\rx_image32.Cache
[2012.05.15 20:03:01 | 000,017,408 | ---- | C] () -- C:\Users\Kathi\AppData\Local\WebpageIcons.db
[2012.05.08 15:01:28 | 000,141,312 | RHS- | C] () -- C:\Windows\SysWow64\KBDIBOH.dll
[2012.01.06 12:24:13 | 000,002,021 | ---- | C] () -- C:\Program Files (x86)\Adobe Reader X.lnk
[2011.11.21 22:11:57 | 000,001,866 | ---- | C] () -- C:\Program Files (x86)\McAfee Security Scan Plus.lnk
[2011.11.17 14:26:00 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
[2011.11.17 14:25:10 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.11.17 14:25:06 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.11.17 14:25:05 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011.11.17 14:25:04 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011.11.17 14:25:02 | 013,903,872 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011.02.11 12:22:50 | 001,591,994 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
 
========== LOP Check ==========
 
[2012.06.03 22:40:42 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Babylon
[2012.06.03 22:41:17 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\BabylonToolbar
[2012.05.29 22:45:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\DVDVideoSoft
[2012.01.25 13:48:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.11.21 21:43:54 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Fingertapps
[2012.05.29 23:36:06 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\HTC
[2012.05.30 00:19:51 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2012.05.29 22:45:34 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\OpenCandy
[2012.03.16 16:27:14 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\OpenOffice.org
[2011.11.23 12:57:49 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\PCDr
[2012.06.03 23:25:09 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\SoftGrid Client
[2012.06.03 23:30:07 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\systweak
[2011.11.21 22:09:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Thunderbird
[2011.11.22 00:44:20 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\TP
[2012.05.29 22:49:01 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\TuneUp Software
[2012.06.03 23:26:56 | 000,000,564 | ---- | M] () -- C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2009.07.14 07:08:49 | 000,023,310 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.06.16 16:14:58 | 000,000,506 | ---- | M] () -- C:\Windows\Tasks\SystemToolsDailyTest.job
[2012.06.14 12:12:27 | 000,000,306 | ---- | M] () -- C:\Windows\Tasks\Szutaqcjtz.job
 
========== Purity Check ==========
 
 

< End of report >
Extras.txt:
Code:
OTL Extras logfile created on: 17.06.2012 02:43:01 - Run 1
OTL by OldTimer - Version 3.2.49.0    Folder = C:\Users\Kathi\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
5,90 Gb Total Physical Memory | 3,28 Gb Available Physical Memory | 55,64% Memory free
11,79 Gb Paging File | 8,64 Gb Available in Paging File | 73,30% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 446,13 Gb Total Space | 128,88 Gb Free Space | 28,89% Space Free | Partition Type: NTFS
 
Computer Name: KATHI-PC | User Name: Kathi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{059F376D-CFFC-41B5-A49C-FA21B5FC8772}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{09F16D24-3563-4F4F-870A-A241BE433304}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{0E59D596-3878-4FE0-B29E-1DBB89FC2EBF}" = lport=2869 | protocol=6 | dir=in | app=system |
"{11470A00-622B-4DBA-AE44-48F69506DBB0}" = lport=9702 | protocol=6 | dir=in | name=syncup_tcp_9702 |
"{15811BB9-7E30-43B4-90D5-10F58B086C8A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1736803B-4706-4518-A7C4-4C96A7DE8BC8}" = lport=9700 | protocol=17 | dir=in | name=syncup_udp_9700 |
"{1BF97A7A-2A1B-4933-AC99-1059861C92E3}" = rport=10243 | protocol=6 | dir=out | app=system |
"{27322DB7-6644-432F-A571-F8B8904A65B9}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3546DD99-C84F-42E4-8DA7-358AA790D009}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{377C178F-636B-4925-B633-6B23BC62A1D9}" = rport=139 | protocol=6 | dir=out | app=system |
"{3826A061-FA65-45DF-A50C-C1A44BD75D5A}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{59622AA5-6B7D-4B26-AAB4-7CD0CD462D96}" = rport=137 | protocol=17 | dir=out | app=system |
"{5E77A842-74AB-40CB-B42B-0F39AF92B13C}" = lport=138 | protocol=17 | dir=in | app=system |
"{63007B05-575C-4E8D-9FC9-C5B1D5159AB6}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{6806CF51-8FBB-42D7-9752-EE0D53EDC462}" = lport=9701 | protocol=6 | dir=in | name=syncup_tcp_9701 |
"{76AEB0E1-2658-4937-9547-37DA53304ED0}" = lport=137 | protocol=17 | dir=in | app=system |
"{7AAFD936-3987-4885-9E84-169115384C3E}" = rport=138 | protocol=17 | dir=out | app=system |
"{7B66F809-4F4F-4488-A19B-082BC0B19742}" = lport=139 | protocol=6 | dir=in | app=system |
"{7BA9CAFE-1A4B-40AB-AB3E-476581B01D01}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{827D659F-C55E-43A8-B1E1-4ED4ADB84D8F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{87FFD32D-C6BE-4AA9-8BFF-161FA63940ED}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8EA97E06-19BD-4E7A-BEA0-4B2BB02C6D61}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8EC0FDE3-DB62-495B-85E2-BD3F6B4598CE}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{92299AEF-62D2-4217-AC5B-762ABDABA537}" = rport=445 | protocol=6 | dir=out | app=system |
"{98762653-C147-4095-BB58-8E17831F18D5}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{AD5CAFAA-7489-4194-B126-3F5E36B2B04C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{C650135C-05EE-48C5-9F0D-76F42F3DF6D0}" = lport=445 | protocol=6 | dir=in | app=system |
"{D515DBBE-1FF8-4AC7-A4B3-92A25C622401}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{E564F6D5-63EC-499B-A331-0C819D435ECF}" = lport=10243 | protocol=6 | dir=in | app=system |
"{E6C18186-D5B0-40EB-AE17-5C598DEFB8D5}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{FAAD9BDF-B0AD-4F3F-B426-F5541A208825}" = lport=9700 | protocol=6 | dir=in | name=syncup_tcp_9700 |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{020C4D54-9317-48E1-9315-501FFDE116C5}" = protocol=17 | dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\devicesetup.exe |
"{06F43511-1EC2-45AC-BB2A-82D7CEC573F6}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{08459F4B-682B-4444-B83C-06E14504BDE9}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"{0A352E16-61B5-46CD-8772-F7F911AB1A99}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{0B6D707F-7A66-459D-A6AB-A6A4A9C36288}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{0C15AAAC-D098-40B1-8FC6-6DF1AE726F13}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"{0D1F07BC-7C77-41FB-A9CB-8933AEAB8301}" = protocol=17 | dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe |
"{0D3691BF-1733-498B-B984-1011DECB6436}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{140260F3-FA89-4A84-A038-9B3E4928AF86}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{198C2457-2751-47C6-884B-B17E7233B74F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1DA46F34-3D90-4518-A582-BBD1127D7968}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{242660B8-F8A5-4800-B114-682F4A2E9D2B}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd cinema\powerdvdcinema.exe |
"{266FC2AF-83CF-4AEA-9A8D-DA44D59CE006}" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"{26CF75EE-A795-42DB-8C0A-9B0B69AF9459}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{27DC47F5-6AC1-452E-A8A0-F3E425928B74}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2B687BF2-E61E-4097-A782-A3ACC6ED266F}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2C142129-C5F7-4959-8851-958524C4587C}" = protocol=6 | dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\devicesetup.exe |
"{2F894893-D3E2-4C3F-9F64-005C5F37060C}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe |
"{3C0432E5-3977-4223-B3A6-AF7E4065D7EF}" = protocol=6 | dir=out | app=system |
"{510DDCA1-1E7C-4129-942B-B2E363687E8B}" = dir=in | app=c:\program files\dell stage\dell stage\stage_primary.exe |
"{54914416-BD94-4DA0-9E47-DFC07E53807B}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{56615567-B344-457F-AD78-BD1791B771B0}" = dir=in | app=c:\program files\dell stage\musicstage\musicstageengine.exe |
"{56EBD193-6824-46FE-830D-D08CD1A2767E}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{58FAB9CF-CC6F-49E4-8DF7-359B4811E2D0}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{595D5075-F6B1-47E5-8EEA-9EEFAC5A93EE}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe |
"{61109B62-9B33-4134-AC3B-337EB43E16A6}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{69AB02FA-2B8A-4003-B756-B72962ADBDD5}" = dir=in | app=c:\program files (x86)\intel corporation\intel widi\widiapp.exe |
"{7225746E-21A2-4E36-B124-666B71C19441}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{736F7604-F721-4C25-905F-33139CD7287F}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe |
"{743350A3-C7FD-4F55-9DD3-DE1BEFF2D341}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{76C3FA98-2D5E-46B1-8EBD-748995A2ADC2}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe |
"{8D7314F0-A3CE-44FD-9740-748291F4F228}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8F501753-13F4-430D-8692-F8164BE1E121}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{8F61E1AF-5132-4493-AFCA-D05BC80D93ED}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\dell datasafe online\nobuclient.exe |
"{8FD2A016-4D1F-418B-B41F-84812F1B0F3A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{94CED901-C73E-4ED7-9130-522936C362C2}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe |
"{A4658768-149E-4FC2-A105-64F60992734E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ADDAEF1D-A16B-432B-BFC1-851AE481B7E1}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe |
"{B5B768CE-44E2-445E-AD85-1D083F62C3F7}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{B6D93139-A9E6-4E9B-8A37-AC103B369F63}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{B8815BD8-6B3B-46A9-B698-8729E863C50C}" = dir=in | app=c:\program files\dell stage\dell stage\accuweather\accuweather.exe |
"{BB60E462-80E9-4F4D-AD58-BC18A7196150}" = dir=in | app=c:\program files (x86)\dell\videostage\videostage.exe |
"{BCA90A5D-EBF4-453F-B737-C2D0BB407445}" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"{C4EE7321-1B32-464F-AEC9-95E9293B9B0D}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd9.exe |
"{C947AE95-8F46-406E-9019-E85733D251BB}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D1B3DEF4-37D5-434F-AAFF-9A54A4F305CB}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{EBB967BD-E4F1-4B78-87FA-529F38844404}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe |
"{EF8700E5-65F6-41B8-A78D-FD7B00825E71}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\dell datasafe online\nobuclient.exe |
"{F53E9F32-4D4E-4EED-91DD-A6BD9B4D2D45}" = protocol=6 | dir=in | app=c:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe |
"{F5E709B4-10F3-4A51-AF0F-36DBF2D755BB}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe |
"{F6796EF9-5AF2-44CC-A971-34483F80D4A2}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe |
"{FC5FF040-2BF1-4140-B729-A9D56DF49365}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FCA3A488-EB6D-4D0E-B0AE-1E3FA76E52B0}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe |
"TCP Query User{4A8A4D22-DA98-4507-8CA7-BF633B2D30D9}C:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe" = protocol=6 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"TCP Query User{AD6F409D-C5F0-4E77-948E-81FF7714A90B}C:\program files (x86)\dell\dell datasafe online\nobuclient.exe" = protocol=6 | dir=in | app=c:\program files (x86)\dell\dell datasafe online\nobuclient.exe |
"UDP Query User{12D3DD9B-736B-4F36-9DED-86B231E4EF0F}C:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe" = protocol=17 | dir=in | app=c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe |
"UDP Query User{2D98240A-68F7-4E64-81BD-DEC341C21619}C:\program files (x86)\dell\dell datasafe online\nobuclient.exe" = protocol=17 | dir=in | app=c:\program files (x86)\dell\dell datasafe online\nobuclient.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0090A87C-3E0E-43D4-AA71-A71B06563A4A}" = Dell Support Center
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{25FBDA9A-E868-4B3B-B9FF-D923818511A1}" = Intel(R) PROSet/Wireless WiFi-Software
"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit)
"{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel(R) Wireless Display
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90140000-006D-0407-1000-0000000FF1CE}" = Microsoft Office Klick-und-Los 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B1A8F3D-8059-43FB-A7AE-4F2C21F0AAF2}" = KhalInstallWrapper
"{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}" = RBVirtualFolder64Inst
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 268.30
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 268.30
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 268.30
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.21
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Überwachungstool für die Intel® Turbo-Boost-Technik 2.0
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E0FE1E14-3A7A-4DB0-9FFA-0DD945AE84DB}" = HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Dell Support Center" = Dell Support Center
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = Synaptics Pointing Device Driver
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07B22FB1-6A1E-41E7-8323-A9CA716026ED}" = bob internet
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0DD706AF-B542-438C-999E-B30C7F625C8D}" = Intel(R) WiDi
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 27
"{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}" = Logitech SetPoint
"{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver
"{3250260C-7A95-4632-893B-89657EB5545B}" = PhotoShowExpress
"{3255BC3F-32BA-41ED-93A0-B9AEB6CDD9E6}" = Dell MusicStage
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{40F06490-8C14-43AA-99D3-EEEFDBAC3CFC}" = SyncUP
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Anti-Virus 2012
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}" = Roxio Creator Starter
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7746BFAA-2B5D-4FFD-A0E8-4558F4668105}" = Roxio Burn
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{7EC66A95-AC2D-4127-940B-0445A526AB2F}" = Dell DataSafe Online
"{7FB00B6B-6843-97EC-EED6-78BD6D35370A}" = Zinio Reader 4
"{820B6609-4C97-3A2B-B644-573B06A0F0CC}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{83AA2913-C123-4146-85BD-AD8F93971D39}" = BabylonObjectInstaller
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{871B2A9D-0F12-44B3-88C1-E0CB10A232E4}" = HP Officejet Pro 8500 A910 Hilfe
"{873E4648-6F6E-47F6-A7B2-A6F8DFABDCE6}" = Windows Live Messenger
"{87434D51-51DB-4109-B68F-A829ECDCF380}" = AccelerometerP11
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}" = CDDRV_Installer
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90140011-0066-0407-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - Deutsch
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Sonic CinePlayer Decoder Pack
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"{A8B88634-7F90-402F-B66A-86429755F6A5}" = eBay
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB77DFDE-9949-4AEF-B180-BE322C3E65D0}" = HTC Sync
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.1) MUI
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AF4D3C63-009B-4A17-B02E-D395065DD3F0}" = Dell Stage Remote
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D92C9CCE-E5F0-4125-977A-0590F3225B74}" = SyncUP
"{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4335E82-17B3-460F-9E70-39D9BC269DB3}" = Dell PhotoStage
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E9F59205-F128-49A7-9039-4BDFB60EE4A3}" = Dell Stage
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{EF56258E-0326-48C5-A86C-3BAC26FC15DF}" = Roxio Creator Starter
"{F06B5C4C-8D2E-4B24-9D43-7A45EEC6C878}" = Roxio Creator Starter
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"BabylonToolbar" = Babylon toolbar on IE
"bob internet" = bob internet
"Dell Webcam Central" = Dell Webcam Central
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.22.508
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage
"InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Anti-Virus 2012
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.61.0.1400
"Mozilla Firefox 12.0 (x86 de)" = Mozilla Firefox 12.0 (x86 de)
"Mozilla Thunderbird 12.0.1 (x86 de)" = Mozilla Thunderbird 12.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.Click2Run" = Microsoft Office Klick-und-Los 2010
"ProInst" = Intel PROSet Wireless
"VLC media player" = VLC media player 1.1.11
"WinLiveSuite" = Windows Live Essentials
"ZinioReader4" = Zinio Reader 4
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 21.02.2012 11:13:45 | Computer Name = Kathi-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Die Daten sind unzulässig.  .
 
Error - 21.02.2012 11:13:45 | Computer Name = Kathi-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Die Daten sind unzulässig.  .
 
Error - 22.02.2012 06:31:47 | Computer Name = Kathi-PC | Source = WinMgmt | ID = 10
Description =
 
Error - 24.02.2012 05:34:46 | Computer Name = Kathi-PC | Source = VSS | ID = 12289
Description =
 
Error - 24.02.2012 06:31:17 | Computer Name = Kathi-PC | Source = WinMgmt | ID = 10
Description =
 
Error - 29.02.2012 18:17:03 | Computer Name = Kathi-PC | Source = VSS | ID = 12289
Description =
 
Error - 04.03.2012 09:37:03 | Computer Name = Kathi-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: pcdrsysinfoperipheral.p5x, Version:
 6.0.5907.23, Zeitstempel: 0x4f29b29d  Name des fehlerhaften Moduls: SynTPAPI.dll_unloaded,
 Version: 0.0.0.0, Zeitstempel: 0x4d0aed00  Ausnahmecode: 0xc0000005  Fehleroffset:
0x0000000063020350  ID des fehlerhaften Prozesses: 0x2dc0  Startzeit der fehlerhaften
 Anwendung: 0x01ccfa0bdcc91834  Pfad der fehlerhaften Anwendung: C:\Program Files\Dell
 Support Center\pcdrsysinfoperipheral.p5x  Pfad des fehlerhaften Moduls: SynTPAPI.dll
Berichtskennung:
 1fc26f4b-65ff-11e1-94c7-4c80930f135a
 
Error - 04.03.2012 15:07:00 | Computer Name = Kathi-PC | Source = WinMgmt | ID = 10
Description =
 
Error - 05.03.2012 16:31:24 | Computer Name = Kathi-PC | Source = WinMgmt | ID = 10
Description =
 
Error - 08.03.2012 16:49:54 | Computer Name = Kathi-PC | Source = Application Hang | ID = 1002
Description = Programm firefox.exe, Version 10.0.2.4428 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 1cf0    Startzeit:
 01ccfb0f4c5cdff1    Endzeit: 21    Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID:
 32a66b5f-6960-11e1-b1f3-4c80930f135a 
 
[ System Events ]
Error - 29.05.2012 14:42:16 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 29.05.2012 15:06:13 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 29.05.2012 15:42:12 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 29.05.2012 16:06:11 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 29.05.2012 16:42:17 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 29.05.2012 17:18:20 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 29.05.2012 17:42:20 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 29.05.2012 18:18:21 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 29.05.2012 18:52:21 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
Error - 30.05.2012 06:16:10 | Computer Name = Kathi-PC | Source = bowser | ID = 8003
Description =
 
 
< End of report >
gmer wurde nicht ausgeführt -> 64 Bit System

Nochmal vielen Dank,
lg Faulwurf

faulwurf 18.06.2012 13:36
sorry für den Doppelpost --> editieren leider nicht mehr möglich!

Die Symptome sind nach einem Tag wieder aufgetaucht, sprich das Problem besteht doch noch!

cosinus 21.06.2012 08:57
Malwarebytes erstellt bei jedem Scanvorgang genau ein Log. Hast du in der Vergangenheit schonmal mit Malwarebytes gescannt?
Wenn ja dann stehen auch alle Logs zu jedem Scanvorgang im Reiter Logdateien. Bitte alle posten, die dort sichtbar sind.

faulwurf 21.06.2012 10:21
Guten Morgen,
Erstmal vielen Dank, dafür das du dich meinem Thema annimmst.

Ich habe Malewarebytes erst mit auftreten der Probleme installiert somit ist das der einzige Log.

lg Faulwurf

cosinus 21.06.2012 13:23
Bitte erstmal routinemäßig einen neuen Vollscan mit malwarebytes machen und Log posten. =>ALLE lokalen Datenträger (außer CD/DVD) überprüfen lassen!
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Die Funde mit Malwarebytes bitte alle entfernen, sodass sie in der Quarantäne von Malwarebytes aufgehoben werden! NICHTS voreilig aus der Quarantäne entfernen!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset





Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
hier steht das Log

faulwurf 21.06.2012 23:18
Guten Abend,
hat ein wenig gedauert, dafür konnte ESET aber auch mit 6 Funden glänzen.:daumenhoc

Hier die Logs:

Malewarebytes:
Code:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.06.16.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Kathi :: KATHI-PC [Administrator]

21.06.2012 20:18:07
mbam-log-2012-06-22 (00-18-03).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 647832
Laufzeit: 1 Stunde(n), 38 Minute(n), 16 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Kathi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DFOWQYS6\MyPhoneExplorer_v2_5185[1].exe (PUP.Adware.Agent) -> Keine Aktion durchgeführt.

(Ende)
ESET:
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=d3fd48fbeb0cd1479deda6293f58e288
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-06-21 05:29:41
# local_time=2012-06-21 07:29:41 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1280 16777215 100 0 621319 621319 0 0
# compatibility_mode=5893 16776574 100 94 49972669 91921119 0 0
# compatibility_mode=8192 67108863 100 0 621 621 0 0
# scanned=439755
# found=6
# cleaned=0
# scan_time=8512
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarApp.dll        a variant of Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarEng.dll        Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarsrv.exe        probably a variant of Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll        Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll        Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I
C:\Users\Kathi\AppData\Local\Temp\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbar4ie.exe        Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I
lg Faulwurf

cosinus 22.06.2012 10:06
Code:
Datenbank Version: v2012.06.16.07
Du hast Malwarebytes vorher nicht aktualisiert. Bitte updaten und einen neuen Vollscan machen.

faulwurf 22.06.2012 12:34
Mahlzeit,

hier der neue Log:
Code:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.06.22.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Kathi :: KATHI-PC [Administrator]

22.06.2012 11:36:30
mbam-log-2012-06-22 (13-31-55).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 648767
Laufzeit: 1 Stunde(n), 48 Minute(n), 5 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Kathi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DFOWQYS6\MyPhoneExplorer_v2_5185[1].exe (PUP.Adware.Agent) -> Keine Aktion durchgeführt.

(Ende)
lg Faulwurf

cosinus 22.06.2012 13:00
Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
hier steht das Log
CustomScan mit OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT

faulwurf 22.06.2012 13:37
gesagt getan

Code:
OTL logfile created on: 22.06.2012 14:06:32 - Run 2
OTL by OldTimer - Version 3.2.49.0    Folder = C:\Users\Kathi\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
5,90 Gb Total Physical Memory | 3,13 Gb Available Physical Memory | 53,06% Memory free
11,79 Gb Paging File | 8,70 Gb Available in Paging File | 73,76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 446,13 Gb Total Space | 122,14 Gb Free Space | 27,38% Space Free | Partition Type: NTFS
 
Computer Name: KATHI-PC | User Name: Kathi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.06.17 02:41:26 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Kathi\Downloads\OTL.exe
PRC - [2012.05.30 13:56:52 | 003,048,136 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012.04.17 15:05:00 | 000,651,264 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
PRC - [2012.03.23 14:25:24 | 000,087,040 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011.11.25 14:14:50 | 000,067,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
PRC - [2011.11.04 15:40:06 | 000,687,400 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.09.22 18:14:16 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
PRC - [2011.09.22 18:11:26 | 000,460,096 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
PRC - [2011.09.22 18:06:12 | 001,692,480 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
PRC - [2011.09.21 18:30:12 | 004,109,312 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
PRC - [2011.09.05 11:04:54 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.08.12 04:05:00 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
PRC - [2011.06.29 16:52:54 | 000,474,176 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
PRC - [2011.06.28 03:26:30 | 002,022,976 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
PRC - [2011.05.19 09:16:48 | 000,995,392 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
PRC - [2011.05.19 09:16:46 | 001,335,360 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
PRC - [2011.05.19 09:16:36 | 000,921,664 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
PRC - [2011.05.19 09:16:34 | 000,839,744 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
PRC - [2011.04.22 18:13:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.04.21 20:32:26 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.04.13 18:39:14 | 000,503,942 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2010.12.21 02:24:38 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010.12.21 02:24:36 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010.12.17 18:25:22 | 000,686,704 | ---- | M] () -- C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
PRC - [2010.11.17 18:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2010.10.02 00:55:28 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
PRC - [2007.04.23 05:00:00 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.05.11 12:23:39 | 001,707,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ed560b26f2f86b3f07b7f6d384f92275\System.ServiceModel.Web.ni.dll
MOD - [2012.05.11 12:23:33 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\64de6810023adccdc56ddae13bdd6b03\System.Xml.Linq.ni.dll
MOD - [2012.05.11 12:22:13 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll
MOD - [2012.05.11 12:15:03 | 001,083,392 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\2ce8210219c7123610072357358df470\System.IdentityModel.ni.dll
MOD - [2012.05.11 12:15:01 | 002,347,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\72a24b45e11d64eb2bc840aae9419ba5\System.Runtime.Serialization.ni.dll
MOD - [2012.05.11 12:14:59 | 017,478,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\107779ca2708d2b31b2e1560e47f6d15\System.ServiceModel.ni.dll
MOD - [2012.05.11 12:14:59 | 000,256,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9e7bf69d97febe4ed1a288c787e5d9ca\SMDiagnostics.ni.dll
MOD - [2012.05.11 11:58:44 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll
MOD - [2012.05.11 11:58:31 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
MOD - [2012.05.11 11:58:06 | 000,185,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\d8af9a65cf0ed85d47360796e2645a06\UIAutomationTypes.ni.dll
MOD - [2012.05.11 11:58:06 | 000,060,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\ca2eff60beb3ba00a529a2d42dceca22\UIAutomationProvider.ni.dll
MOD - [2012.05.11 11:58:06 | 000,025,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2ec98ab0193d64e95b7d09d094deed97\Accessibility.ni.dll
MOD - [2012.05.11 11:57:57 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012.05.11 11:57:54 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012.05.11 11:57:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.05.11 11:57:50 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.05.11 11:57:44 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012.04.24 00:35:09 | 000,630,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
MOD - [2012.04.17 15:05:00 | 001,515,520 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\Maps\R66Api.dll
MOD - [2012.04.17 15:05:00 | 000,651,264 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
MOD - [2012.04.17 15:05:00 | 000,559,244 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\sqlite3.7.dll
MOD - [2012.04.17 15:05:00 | 000,516,599 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\sqlite3.dll
MOD - [2012.04.17 15:05:00 | 000,389,120 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\HtcDetect.dll
MOD - [2012.04.17 15:05:00 | 000,172,032 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\htcDetectLegend.dll
MOD - [2012.04.17 15:05:00 | 000,151,552 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\htcDisk.dll
MOD - [2012.04.17 15:05:00 | 000,103,936 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\OutputLog.dll
MOD - [2012.04.17 15:05:00 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\HTC\HTC Sync 3.0\fdHttpd.dll
MOD - [2012.03.22 00:32:36 | 005,025,792 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
MOD - [2012.02.11 01:31:41 | 005,283,840 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
MOD - [2012.02.11 01:31:40 | 004,218,880 | ---- | M] () -- C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
MOD - [2011.12.25 22:42:15 | 005,255,168 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
MOD - [2011.11.25 14:14:48 | 000,061,496 | ---- | M] () -- C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL\Program\clntutil.dll
MOD - [2011.11.17 14:47:17 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2011.09.22 18:14:16 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
MOD - [2011.06.29 16:52:54 | 000,474,176 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
MOD - [2011.06.28 03:26:30 | 002,022,976 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
MOD - [2011.06.28 03:25:30 | 000,058,944 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
MOD - [2011.06.25 07:32:36 | 000,323,136 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
MOD - [2011.06.25 07:20:26 | 000,565,968 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
MOD - [2011.04.22 18:13:00 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
MOD - [2010.12.17 18:25:22 | 000,686,704 | ---- | M] () -- C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
MOD - [2010.11.25 06:44:02 | 000,375,280 | ---- | M] () -- c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
MOD - [2010.11.21 08:49:35 | 000,249,856 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2010.11.21 08:49:35 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2010.11.21 08:49:35 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_de_b77a5c561934e089\System.Runtime.Serialization.resources.dll
MOD - [2010.11.21 05:24:52 | 000,507,904 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
MOD - [2010.11.21 05:24:08 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010.11.17 18:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
MOD - [2010.03.22 23:52:42 | 006,776,832 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
MOD - [2010.03.17 04:28:28 | 000,326,144 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
MOD - [2010.03.17 04:28:16 | 000,635,904 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
MOD - [2010.03.17 04:28:04 | 001,926,144 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
MOD - [2010.03.12 03:52:34 | 000,225,280 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
MOD - [2010.03.12 03:52:34 | 000,028,160 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
MOD - [2010.03.05 23:07:58 | 000,125,952 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
MOD - [2010.03.05 23:07:58 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
MOD - [2007.04.23 05:00:00 | 000,077,824 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2011.08.08 15:39:18 | 001,166,848 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011.07.28 05:04:48 | 001,517,328 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV:64bit: - [2011.07.28 04:48:34 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2011.07.28 04:44:18 | 000,844,560 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV:64bit: - [2011.06.03 20:51:38 | 000,134,928 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) Intel(R) Centrino(R) Wireless Bluetooth(R)
SRV:64bit: - [2010.11.29 23:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) Intel(R)
SRV:64bit: - [2010.09.23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009.11.18 04:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012.06.22 12:56:05 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.06.05 15:17:44 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.05.30 13:56:52 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012.05.11 12:24:12 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.03.23 14:25:24 | 000,087,040 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011.11.04 15:40:06 | 000,687,400 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86)
SRV - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011.09.22 18:06:12 | 001,692,480 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE -- (SftService)
SRV - [2011.09.05 11:04:54 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.08.12 02:04:58 | 000,248,304 | ---- | M] (CyberLink) [Auto | Stopped] -- c:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)
SRV - [2011.05.19 09:16:48 | 000,995,392 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service)
SRV - [2011.05.19 09:16:46 | 001,335,360 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service)
SRV - [2011.05.19 09:16:36 | 000,921,664 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)
SRV - [2011.04.24 23:15:02 | 000,202,296 | ---- | M] (Kaspersky Lab ZAO) [Auto | Stopped] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe -- (AVP)
SRV - [2011.04.22 18:13:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.04.21 20:32:26 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010.12.21 02:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2010.12.21 02:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010.11.25 13:34:18 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)
SRV - [2010.11.25 13:33:18 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)
SRV - [2010.08.26 04:28:54 | 002,823,000 | ---- | M] (Dell, Inc.) [Auto | Running] -- C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe -- (NOBU)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.06.14 12:32:23 | 000,615,728 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.11.17 14:47:27 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.11.17 14:47:27 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.10.01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011.10.01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011.10.01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011.10.01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011.08.08 15:32:08 | 000,299,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:64bit: - [2011.08.08 15:32:08 | 000,299,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:64bit: - [2011.08.04 03:28:32 | 008,604,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Intel(R)
DRV:64bit: - [2011.07.20 15:39:58 | 012,287,456 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011.07.20 02:54:06 | 000,059,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex)
DRV:64bit: - [2011.07.19 23:13:42 | 000,282,624 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf)
DRV:64bit: - [2011.05.19 09:17:04 | 000,053,248 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux)
DRV:64bit: - [2011.05.19 09:17:02 | 000,051,712 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaud.sys -- (btmaudio)
DRV:64bit: - [2011.05.17 17:27:52 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2011.05.17 17:27:50 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2011.05.03 15:42:40 | 000,222,464 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard)
DRV:64bit: - [2011.04.22 18:13:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2011.03.10 18:36:24 | 000,029,488 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
DRV:64bit: - [2011.03.04 13:23:28 | 000,011,864 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2)
DRV:64bit: - [2011.03.04 13:23:24 | 000,460,888 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1)
DRV:64bit: - [2011.03.04 07:29:20 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011.02.17 03:11:08 | 000,428,136 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.02.11 00:52:34 | 000,181,760 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2011.02.11 00:52:34 | 000,082,432 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2011.01.30 18:19:32 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV:64bit: - [2011.01.20 19:20:46 | 000,176,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2011.01.13 03:51:44 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.12.17 19:06:32 | 001,404,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010.12.15 19:02:04 | 000,174,168 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:64bit: - [2010.12.13 19:34:14 | 000,027,760 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelern.sys -- (Acceler)
DRV:64bit: - [2010.12.12 16:18:36 | 000,121,960 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB)
DRV:64bit: - [2010.11.29 23:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.10.20 02:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:64bit: - [2010.10.16 02:28:18 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:64bit: - [2010.08.20 12:05:12 | 000,021,616 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn)
DRV:64bit: - [2010.07.13 04:38:06 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\qicflt.sys -- (qicflt)
DRV:64bit: - [2010.06.25 16:08:10 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2010.03.19 11:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010.02.27 17:32:14 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2010.02.22 10:09:10 | 000,011,776 | ---- | M] (MBB Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\massfilter.sys -- (massfilter)
DRV:64bit: - [2009.11.02 20:27:10 | 000,022,544 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
DRV:64bit: - [2009.11.02 18:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2007.04.11 16:35:30 | 000,056,080 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2007.04.11 16:35:22 | 000,053,520 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2006.11.01 20:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}
IE:64bit: - HKLM\..\SearchScopes\{6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}
IE - HKLM\..\SearchScopes\{6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
 
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=at&l=de&s=gen
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=110187&tt=230512_54x&babsrc=SP_ss&mntrId=c43f51d20000000000004c80930f1357
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.at/"
FF - prefs.js..network.proxy.type: 0
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\linkfilter@kaspersky.ru [2012.06.14 13:19:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru [2012.06.14 13:19:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.06.22 12:56:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.11.21 22:08:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.06.22 12:56:05 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2011.11.21 21:57:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kathi\AppData\Roaming\mozilla\Extensions
[2012.06.03 23:30:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions
[2012.06.03 23:30:05 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2012.05.29 22:45:23 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.04.03 12:33:00 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.01.22 14:20:10 | 000,000,931 | ---- | M] () -- C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\searchplugins\conduit.xml
[2012.06.20 12:06:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.06.20 12:06:27 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.06.22 12:56:05 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.06.22 12:56:03 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.06.03 22:40:59 | 000,002,353 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012.06.22 12:56:03 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.06.22 12:56:03 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.22 12:56:03 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.22 12:56:03 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.22 12:56:03 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2012.05.15 20:14:03 | 000,249,971 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1        www.007guard.com
O1 - Hosts: 127.0.0.1        007guard.com
O1 - Hosts: 127.0.0.1        008i.com
O1 - Hosts: 127.0.0.1        www.008k.com
O1 - Hosts: 127.0.0.1        008k.com
O1 - Hosts: 127.0.0.1        www.00hq.com
O1 - Hosts: 127.0.0.1        00hq.com
O1 - Hosts: 127.0.0.1        010402.com
O1 - Hosts: 127.0.0.1        www.032439.com
O1 - Hosts: 127.0.0.1        032439.com
O1 - Hosts: 127.0.0.1        www.1001-search.info
O1 - Hosts: 127.0.0.1        1001-search.info
O1 - Hosts: 127.0.0.1        www.100888290cs.com
O1 - Hosts: 127.0.0.1        100888290cs.com
O1 - Hosts: 127.0.0.1        www.100sexlinks.com
O1 - Hosts: 127.0.0.1        100sexlinks.com
O1 - Hosts: 127.0.0.1        www.10sek.com
O1 - Hosts: 127.0.0.1        10sek.com
O1 - Hosts: 127.0.0.1        www.123topsearch.com
O1 - Hosts: 127.0.0.1        123topsearch.com
O1 - Hosts: 127.0.0.1        www.132.com
O1 - Hosts: 127.0.0.1        132.com
O1 - Hosts: 127.0.0.1        www.136136.net
O1 - Hosts: 127.0.0.1        136136.net
O1 - Hosts: 127.0.0.1        www.139mm.com
O1 - Hosts: 8709 more lines...
O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)
O4:64bit: - HKLM..\Run: [DellStage] C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()
O4:64bit: - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [NVHotkey] C:\Windows\SysNative\nvHotkey.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] c:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Stage Remote] C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe ()
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AccuWeatherWidget] C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe ()
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (Dell, Inc.)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
O4 - HKLM..\Run: [NeroLauncher] C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe ()
O4 - HKLM..\Run: [PDVD9LanguageShortcut] c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl9] c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2876235365-1884908569-728010607-1000..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2876235365-1884908569-728010607-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9:64bit: - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\ievkbd.dll (Kaspersky Lab ZAO)
O9:64bit: - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.186.211.21 195.34.133.21
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7709C5DE-C576-4F21-B424-15B465CE8874}: DhcpNameServer = 18.0.0.1 18.0.0.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A8AD3D0E-8F50-470A-BA4C-12503C3695A3}: DhcpNameServer = 212.186.211.21 195.34.133.21
O18:64bit: - Protocol\Handler\bwfile-8876480 - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\klogon: DllName - (%SystemRoot%\System32\klogon.dll) - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{988439e7-5335-11e1-9766-4c80930f135a}\Shell - "" = AutoRun
O33 - MountPoints2\{988439e7-5335-11e1-9766-4c80930f135a}\Shell\AutoRun\command - "" = E:\LaunchU3.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
 
 
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: MCODS - Reg Error: Value error.
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MCODS - Reg Error: Value error.
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: MCODS - Reg Error: Value error.
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: MCODS - Reg Error: Value error.
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.06.21 16:57:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2012.06.16 22:54:47 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\Malwarebytes
[2012.06.16 22:37:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.06.16 22:37:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.06.16 22:37:20 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.06.16 22:37:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.06.14 12:33:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2012
[2012.06.14 12:32:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2012.06.14 12:32:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab
[2012.06.14 12:32:23 | 000,615,728 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2012.06.04 19:26:59 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{66A9E9CC-B548-41C4-BE2D-44367683E2D7}
[2012.06.03 22:42:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\hpmonitor
[2012.06.03 22:41:50 | 000,018,816 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\Windows\SysNative\roboot64.exe
[2012.06.03 22:41:47 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\systweak
[2012.06.03 22:41:17 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\BabylonToolbar
[2012.06.03 22:41:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BabylonToolbar
[2012.06.03 22:40:42 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\Babylon
[2012.06.03 22:40:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2012.05.31 17:54:45 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{EFAC602A-D31B-4190-9B8C-86073B0A6F26}
[2012.05.31 17:54:34 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{1C3F23FD-07B2-409F-AED0-EFF8CE1BC41C}
[2012.05.31 17:52:13 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{5E714B3E-9D1D-4A6D-B61F-1F5C6F430A86}
[2012.05.31 17:49:30 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{C11A3213-3C4F-45B7-8D40-3072B78CCED7}
[2012.05.31 17:49:30 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\{02AF220C-4EBA-4676-B722-56B61A891442}
[2012.05.30 12:38:39 | 000,000,000 | ---D | C] -- C:\Users\Kathi\Documents\My Documents
[2012.05.30 12:38:38 | 000,000,000 | ---D | C] -- C:\Users\Kathi\Documents\My Photos
[2012.05.30 12:38:21 | 000,000,000 | ---D | C] -- C:\Users\Kathi\Local Settings
[2012.05.30 00:19:51 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2012.05.29 23:36:05 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\Htc
[2012.05.29 23:35:47 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\HTC
[2012.05.29 23:35:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC Sync
[2012.05.29 23:35:16 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Local\Downloaded Installations
[2012.05.29 23:35:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC
[2012.05.29 23:35:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spirent Communications
[2012.05.29 23:34:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HTC
[2012.05.29 22:49:01 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\TuneUp Software
[2012.05.29 22:48:54 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.05.29 22:48:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.05.29 22:48:51 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.05.29 22:45:30 | 000,000,000 | ---D | C] -- C:\Users\Kathi\AppData\Roaming\OpenCandy
[2012.05.29 22:45:14 | 002,557,952 | ---- | C] (Nokia Corporation and/or its subsidiary(-ies)) -- C:\Windows\SysWow64\QtCore4.dll
[2012.05.29 22:45:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2012.05.29 22:45:13 | 000,405,176 | ---- | C] (Newtonsoft) -- C:\Windows\SysWow64\Newtonsoft.Json.Net20.dll
[2012.05.29 22:45:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2012.05.29 22:45:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2 C:\Users\Kathi\Documents\*.tmp files -> C:\Users\Kathi\Documents\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.06.22 14:00:10 | 000,000,506 | ---- | M] () -- C:\Windows\tasks\SystemToolsDailyTest.job
[2012.06.22 13:24:11 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.06.22 11:35:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.06.19 12:41:53 | 000,021,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.06.19 12:41:53 | 000,021,296 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.06.18 21:36:21 | 001,614,100 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.06.18 21:36:21 | 000,697,322 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.06.18 21:36:21 | 000,652,600 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.06.18 21:36:21 | 000,148,328 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.06.18 21:36:21 | 000,121,274 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.06.17 10:54:48 | 000,000,306 | ---- | M] () -- C:\Windows\tasks\Szutaqcjtz.job
[2012.06.17 10:54:34 | 000,348,824 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.06.17 10:54:02 | 453,640,191 | -HS- | M] () -- C:\hiberfil.sys
[2012.06.17 02:40:20 | 000,000,000 | ---- | M] () -- C:\Users\Kathi\defogger_reenable
[2012.06.16 22:37:22 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.06.14 12:33:09 | 000,152,233 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat
[2012.06.14 12:33:09 | 000,107,177 | ---- | M] () -- C:\Windows\SysNative\drivers\klick.dat
[2012.06.14 12:32:23 | 000,615,728 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2012.06.03 23:26:56 | 000,000,564 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2012.06.03 22:45:14 | 000,012,229 | ---- | M] () -- C:\Users\Kathi\Documents\Firmung.ics
[2012.06.03 22:45:07 | 000,008,479 | ---- | M] () -- C:\Users\Kathi\Documents\Geburtstag.ics
[2012.06.03 22:45:00 | 000,012,008 | ---- | M] () -- C:\Users\Kathi\Documents\Uni.ics
[2012.06.03 22:44:53 | 000,012,560 | ---- | M] () -- C:\Users\Kathi\Documents\Ströck.ics
[2012.06.03 22:44:46 | 000,048,789 | ---- | M] () -- C:\Users\Kathi\Documents\Pfarre.ics
[2012.06.03 22:44:35 | 000,028,274 | ---- | M] () -- C:\Users\Kathi\Documents\Privat.ics
[2012.06.03 22:41:10 | 000,000,251 | ---- | M] () -- C:\user.js
[2012.05.29 23:35:44 | 000,001,084 | ---- | M] () -- C:\Users\Public\Desktop\HTC Sync.lnk
[2012.05.26 10:45:42 | 000,000,000 | ---- | M] () -- C:\Users\Kathi\AppData\Local\rx_image32.Cache
[2 C:\Users\Kathi\Documents\*.tmp files -> C:\Users\Kathi\Documents\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.06.17 02:40:20 | 000,000,000 | ---- | C] () -- C:\Users\Kathi\defogger_reenable
[2012.06.16 22:37:22 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.06.14 12:33:09 | 000,152,233 | ---- | C] () -- C:\Windows\SysNative\drivers\klin.dat
[2012.06.14 12:33:09 | 000,107,177 | ---- | C] () -- C:\Windows\SysNative\drivers\klick.dat
[2012.06.03 22:45:13 | 000,012,229 | ---- | C] () -- C:\Users\Kathi\Documents\Firmung.ics
[2012.06.03 22:45:07 | 000,008,479 | ---- | C] () -- C:\Users\Kathi\Documents\Geburtstag.ics
[2012.06.03 22:44:59 | 000,012,008 | ---- | C] () -- C:\Users\Kathi\Documents\Uni.ics
[2012.06.03 22:44:53 | 000,012,560 | ---- | C] () -- C:\Users\Kathi\Documents\Ströck.ics
[2012.06.03 22:44:46 | 000,048,789 | ---- | C] () -- C:\Users\Kathi\Documents\Pfarre.ics
[2012.06.03 22:44:34 | 000,028,274 | ---- | C] () -- C:\Users\Kathi\Documents\Privat.ics
[2012.06.03 22:41:08 | 000,000,251 | ---- | C] () -- C:\user.js
[2012.05.29 23:35:44 | 000,001,084 | ---- | C] () -- C:\Users\Public\Desktop\HTC Sync.lnk
[2012.05.26 10:45:42 | 000,000,000 | ---- | C] () -- C:\Users\Kathi\AppData\Local\rx_image32.Cache
[2012.05.15 20:03:01 | 000,017,408 | ---- | C] () -- C:\Users\Kathi\AppData\Local\WebpageIcons.db
[2012.05.08 15:01:28 | 000,141,312 | RHS- | C] () -- C:\Windows\SysWow64\KBDIBOH.dll
[2012.01.06 12:24:13 | 000,002,021 | ---- | C] () -- C:\Program Files (x86)\Adobe Reader X.lnk
[2011.11.21 22:11:57 | 000,001,866 | ---- | C] () -- C:\Program Files (x86)\McAfee Security Scan Plus.lnk
[2011.11.17 14:26:00 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
[2011.11.17 14:25:10 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.11.17 14:25:06 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.11.17 14:25:05 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011.11.17 14:25:04 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011.11.17 14:25:02 | 013,903,872 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011.02.11 12:22:50 | 001,591,994 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
 
========== LOP Check ==========
 
[2012.06.03 22:40:42 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Babylon
[2012.06.03 22:41:17 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\BabylonToolbar
[2012.05.29 22:45:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\DVDVideoSoft
[2012.01.25 13:48:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.11.21 21:43:54 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Fingertapps
[2012.05.29 23:36:06 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\HTC
[2012.05.30 00:19:51 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2012.05.29 22:45:34 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\OpenCandy
[2012.03.16 16:27:14 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\OpenOffice.org
[2011.11.23 12:57:49 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\PCDr
[2012.06.03 23:25:09 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\SoftGrid Client
[2012.06.03 23:30:07 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\systweak
[2011.11.21 22:09:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Thunderbird
[2011.11.22 00:44:20 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\TP
[2012.05.29 22:49:01 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\TuneUp Software
[2012.06.03 23:26:56 | 000,000,564 | ---- | M] () -- C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2009.07.14 07:08:49 | 000,023,562 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.06.22 14:00:10 | 000,000,506 | ---- | M] () -- C:\Windows\Tasks\SystemToolsDailyTest.job
[2012.06.17 10:54:48 | 000,000,306 | ---- | M] () -- C:\Windows\Tasks\Szutaqcjtz.job
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2012.05.29 23:34:46 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Adobe
[2012.06.03 22:40:42 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Babylon
[2012.06.03 22:41:17 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\BabylonToolbar
[2011.11.21 21:43:39 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Creative
[2011.11.21 21:43:31 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Dell
[2011.11.21 21:43:36 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Dell Touch Zone
[2012.05.29 22:45:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\DVDVideoSoft
[2012.01.25 13:48:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.11.21 21:43:54 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Fingertapps
[2011.12.06 14:34:47 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\HpUpdate
[2012.05.29 23:36:06 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\HTC
[2012.05.30 00:19:51 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2011.11.21 21:43:11 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Identities
[2011.11.25 14:11:19 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\InstallShield
[2011.11.21 22:39:06 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Intel
[2011.11.25 14:15:43 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Logitech
[2011.11.17 14:06:22 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Macromedia
[2011.11.25 14:09:39 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Macrovision
[2012.06.16 22:54:47 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Malwarebytes
[2010.11.21 09:00:23 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Media Center Programs
[2012.02.23 00:10:29 | 000,000,000 | --SD | M] -- C:\Users\Kathi\AppData\Roaming\Microsoft
[2011.11.21 21:57:25 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Mozilla
[2011.11.21 22:03:07 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Nero
[2012.05.29 22:45:34 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\OpenCandy
[2012.03.16 16:27:14 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\OpenOffice.org
[2011.11.23 12:57:49 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\PCDr
[2012.05.26 10:45:45 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Roxio
[2011.11.25 14:17:10 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Roxio Burn
[2012.06.21 17:03:16 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Skype
[2012.06.03 23:25:09 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\SoftGrid Client
[2012.06.03 23:30:07 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\systweak
[2011.11.21 22:09:35 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\Thunderbird
[2011.11.22 00:44:20 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\TP
[2012.05.29 22:49:01 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\TuneUp Software
[2012.01.31 13:24:45 | 000,000,000 | ---D | M] -- C:\Users\Kathi\AppData\Roaming\vlc
 
< %APPDATA%\*.exe /s >
[2012.05.29 23:34:42 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Kathi\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2011.11.25 14:12:41 | 000,010,134 | R--- | M] () -- C:\Users\Kathi\AppData\Roaming\Microsoft\Installer\{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}\ARPPRODUCTICON.exe
[2011.11.25 14:12:14 | 000,010,134 | R--- | M] () -- C:\Users\Kathi\AppData\Roaming\Microsoft\Installer\{9B1A8F3D-8059-43FB-A7AE-4F2C21F0AAF2}\ARPPRODUCTICON.exe
[2012.05.17 01:16:52 | 027,567,008 | ---- | M] (TuneUp Software) -- C:\Users\Kathi\AppData\Roaming\OpenCandy\ACB967B8D2944CD1845AB66FE8BEFA28\TuneUpUtilities2012_de-DE_1002177.exe
 
< %SYSTEMDRIVE%\*.exe >
 
< MD5 for: AGP440.SYS  >
[2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\drivers\AGP440.sys
[2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
[2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.21 04:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\drivers\atapi.sys
[2008.01.21 04:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.21 04:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\cngaudit.dll
[2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: IASTOR.SYS  >
[2011.01.13 03:51:44 | 000,439,320 | ---- | M] (Intel Corporation) MD5=D469B77687E12FE43E344806740B624D -- C:\Drivers\Chipset_IRST\f6flpy-x64\iaStor.sys
[2011.01.13 03:51:44 | 000,439,320 | ---- | M] (Intel Corporation) MD5=D469B77687E12FE43E344806740B624D -- C:\Windows\SysNative\drivers\iaStor.sys
[2011.01.13 03:51:44 | 000,439,320 | ---- | M] (Intel Corporation) MD5=D469B77687E12FE43E344806740B624D -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_a36325196df56f7d\iaStor.sys
[2011.01.13 03:51:44 | 000,439,320 | ---- | M] (Intel Corporation) MD5=D469B77687E12FE43E344806740B624D -- C:\Windows\SysNative\DriverStore\FileRepository\iastor.inf_amd64_neutral_e3082ac13af8d3bf\iaStor.sys
[2008.04.22 02:20:41 | 000,312,344 | ---- | M] (Intel Corporation) MD5=DB0CC620B27A928D968C1A1E9CD9CB87 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\Drivers\INF\SATA Driver (Intel) (Non-RAID)\IaStor.sys
[2008.04.22 02:20:41 | 000,312,344 | ---- | M] (Intel Corporation) MD5=DB0CC620B27A928D968C1A1E9CD9CB87 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\drivers\iaStor.sys
[2008.04.22 02:20:41 | 000,312,344 | ---- | M] (Intel Corporation) MD5=DB0CC620B27A928D968C1A1E9CD9CB87 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\iaahci.inf_77c04a30\iaStor.sys
[2008.04.22 02:20:41 | 000,312,344 | ---- | M] (Intel Corporation) MD5=DB0CC620B27A928D968C1A1E9CD9CB87 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\iastor.inf_054cd65f\iaStor.sys
 
< MD5 for: IASTORV.SYS  >
[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2008.01.21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\drivers\iaStorV.sys
[2008.01.21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2011.11.17 14:47:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.11.17 14:47:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.11.17 14:47:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.11.17 14:47:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\netlogon.dll
[2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.21 04:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\drivers\nvstor.sys
[2008.01.21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
[2011.11.17 14:47:26 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.11.17 14:47:26 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.11.17 14:47:26 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.11.17 14:47:26 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2008.01.21 04:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\scecli.dll
[2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009.04.11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\user32.dll
[2009.04.11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2008.01.21 04:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll
[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll
[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008.01.21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\userinit.exe
[2008.01.21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2008.01.21 04:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\wininit.exe
[2008.01.21 04:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2012.04.04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\winlogon.exe
[2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 04:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
[2008.01.21 04:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\System32\drivers\ws2ifsl.sys
[2008.01.21 04:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Users\Kathi\Sicherung Festplatte Sony\Lokaler Datenträger\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
[2012.05.08 15:01:28 | 000,141,312 | RHS- | M] () Unable to obtain MD5 -- C:\Windows\system32\KBDIBOH.dll
[1 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
 
<          >

< End of report >
lg Faulwurf

cosinus 22.06.2012 14:01
Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:
:OTL
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {6EBE8D3A-66C0-4F7D-AED5-A0D51359983F}
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/default.aspx?c=at&l=de&s=gen
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2269050
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2876235365-1884908569-728010607-1002\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110187&tt=230512_54x&babsrc=SP_ss&mntrId=c43f51d20000000000004c80930f1357
FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
[2012.06.03 23:30:05 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2012.01.22 14:20:10 | 000,000,931 | ---- | M] () -- C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\searchplugins\conduit.xml
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2876235365-1884908569-728010607-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7709C5DE-C576-4F21-B424-15B465CE8874}: DhcpNameServer = 18.0.0.1 18.0.0.3
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{988439e7-5335-11e1-9766-4c80930f135a}\Shell - "" = AutoRun
O33 - MountPoints2\{988439e7-5335-11e1-9766-4c80930f135a}\Shell\AutoRun\command - "" = E:\LaunchU3.exe
:Files
C:\Windows\tasks\Szutaqcjtz.job
C:\Users\Kathi\AppData\Roaming\systweak
C:\Users\Kathi\AppData\Roaming\BabylonToolbar
C:\Program Files (x86)\BabylonToolbar
C:\Users\Kathi\AppData\Roaming\Babylon
C:\ProgramData\Babylon
C:\user.js
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

faulwurf 22.06.2012 14:12
Scheint alles funktioniert zu haben.
Hier die Textdatei:
Code:
All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ deleted successfully.
C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll moved successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKU\S-1-5-21-2876235365-1884908569-728010607-1002\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKU\S-1-5-21-2876235365-1884908569-728010607-1002\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2876235365-1884908569-728010607-1002\Software\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
File C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll not found.
HKEY_USERS\S-1-5-21-2876235365-1884908569-728010607-1002\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2876235365-1884908569-728010607-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Prefs.js: "DVDVideoSoftTB Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl
C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin folder moved successfully.
C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\Plugins folder moved successfully.
C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\modules folder moved successfully.
C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\META-INF folder moved successfully.
C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\defaults folder moved successfully.
C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components folder moved successfully.
C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\chrome folder moved successfully.
C:\Users\Kathi\AppData\Roaming\mozilla\Firefox\Profiles\za9wu5mw.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} folder moved successfully.
C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\searchplugins\conduit.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
File C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
File C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ deleted successfully.
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2876235365-1884908569-728010607-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoControlPanel deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7709C5DE-C576-4F21-B424-15B465CE8874}\\DhcpNameServer| /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{988439e7-5335-11e1-9766-4c80930f135a}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{988439e7-5335-11e1-9766-4c80930f135a}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{988439e7-5335-11e1-9766-4c80930f135a}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{988439e7-5335-11e1-9766-4c80930f135a}\ not found.
File E:\LaunchU3.exe not found.
========== FILES ==========
C:\Windows\tasks\Szutaqcjtz.job moved successfully.
C:\Users\Kathi\AppData\Roaming\systweak folder moved successfully.
C:\Users\Kathi\AppData\Roaming\BabylonToolbar\Shared folder moved successfully.
C:\Users\Kathi\AppData\Roaming\BabylonToolbar\IE folder moved successfully.
C:\Users\Kathi\AppData\Roaming\BabylonToolbar\FF folder moved successfully.
C:\Users\Kathi\AppData\Roaming\BabylonToolbar\CR folder moved successfully.
C:\Users\Kathi\AppData\Roaming\BabylonToolbar folder moved successfully.
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh folder moved successfully.
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17 folder moved successfully.
C:\Program Files (x86)\BabylonToolbar\BabylonToolbar folder moved successfully.
C:\Program Files (x86)\BabylonToolbar folder moved successfully.
C:\Users\Kathi\AppData\Roaming\Babylon folder moved successfully.
C:\ProgramData\Babylon folder moved successfully.
C:\user.js moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56466 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Kathi
->Temp folder emptied: 117763108 bytes
->Temporary Internet Files folder emptied: 246082709 bytes
->Java cache emptied: 11588 bytes
->FireFox cache emptied: 646992809 bytes
->Flash cache emptied: 81422 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 49129681 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50434 bytes
RecycleBin emptied: 470500650 bytes
 
Total Files Cleaned = 1.460,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Kathi
->Flash cache emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
 
Total Flash Files Cleaned = 0,00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.49.0 log created on 06222012_150504

Files\Folders moved on Reboot...
C:\Users\Kathi\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...
lg Faulwurf

Edit: habs gerade zufällig bemerkt, das Problem besteht immer noch.

cosinus 24.06.2012 15:01
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

faulwurf 25.06.2012 00:58
Guten Morgen,

Log von TDSS-Killer:
Code:
01:51:40.0599 3684        TDSS rootkit removing tool 2.7.41.0 Jun 20 2012 20:53:32
01:51:40.0721 3684        ============================================================
01:51:40.0722 3684        Current date / time: 2012/06/25 01:51:40.0721
01:51:40.0722 3684        SystemInfo:
01:51:40.0722 3684       
01:51:40.0722 3684        OS Version: 6.1.7601 ServicePack: 1.0
01:51:40.0722 3684        Product type: Workstation
01:51:40.0722 3684        ComputerName: KATHI-PC
01:51:40.0722 3684        UserName: Kathi
01:51:40.0722 3684        Windows directory: C:\Windows
01:51:40.0722 3684        System windows directory: C:\Windows
01:51:40.0722 3684        Running under WOW64
01:51:40.0722 3684        Processor architecture: Intel x64
01:51:40.0722 3684        Number of processors: 4
01:51:40.0722 3684        Page size: 0x1000
01:51:40.0722 3684        Boot type: Normal boot
01:51:40.0722 3684        ============================================================
01:51:41.0482 3684        Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
01:51:41.0498 3684        ============================================================
01:51:41.0498 3684        \Device\Harddisk0\DR0:
01:51:41.0498 3684        MBR partitions:
01:51:41.0498 3684        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x34000, BlocksNum 0x2710000
01:51:41.0498 3684        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2744000, BlocksNum 0x37C41830
01:51:41.0498 3684        ============================================================
01:51:41.0528 3684        C: <-> \Device\Harddisk0\DR0\Partition1
01:51:41.0547 3684        ============================================================
01:51:41.0547 3684        Initialize success
01:51:41.0547 3684        ============================================================
01:52:04.0662 5532        ============================================================
01:52:04.0662 5532        Scan started
01:52:04.0662 5532        Mode: Manual; SigCheck; TDLFS;
01:52:04.0662 5532        ============================================================
01:52:07.0084 5532        1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
01:52:07.0246 5532        1394ohci - ok
01:52:07.0269 5532        Acceler        (e0065cbf1a25c015c218457d2cd522b9) C:\Windows\system32\DRIVERS\Accelern.sys
01:52:07.0324 5532        Acceler - ok
01:52:07.0392 5532        ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
01:52:07.0408 5532        ACPI - ok
01:52:07.0432 5532        AcpiPmi        (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
01:52:07.0539 5532        AcpiPmi - ok
01:52:07.0686 5532        AdobeARMservice (11a52cf7b265631deeb24c6149309eff) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
01:52:07.0696 5532        AdobeARMservice - ok
01:52:07.0957 5532        AdobeFlashPlayerUpdateSvc (990dc6edc9f933194d7cd4e65146bc94) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
01:52:07.0974 5532        AdobeFlashPlayerUpdateSvc - ok
01:52:08.0039 5532        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
01:52:08.0080 5532        adp94xx - ok
01:52:08.0108 5532        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
01:52:08.0125 5532        adpahci - ok
01:52:08.0150 5532        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
01:52:08.0204 5532        adpu320 - ok
01:52:08.0294 5532        AeLookupSvc    (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
01:52:08.0432 5532        AeLookupSvc - ok
01:52:08.0486 5532        AERTFilters    (d1e343bc00136ce03c4d403194d06a80) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
01:52:08.0570 5532        AERTFilters - ok
01:52:08.0987 5532        AFD            (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
01:52:09.0100 5532        AFD - ok
01:52:09.0132 5532        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
01:52:09.0160 5532        agp440 - ok
01:52:09.0191 5532        ALG            (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
01:52:09.0279 5532        ALG - ok
01:52:09.0302 5532        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
01:52:09.0319 5532        aliide - ok
01:52:09.0322 5532        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
01:52:09.0356 5532        amdide - ok
01:52:09.0371 5532        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
01:52:09.0414 5532        AmdK8 - ok
01:52:09.0462 5532        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys
01:52:09.0501 5532        AmdPPM - ok
01:52:09.0532 5532        amdsata        (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
01:52:09.0567 5532        amdsata - ok
01:52:09.0588 5532        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
01:52:09.0613 5532        amdsbs - ok
01:52:09.0626 5532        amdxata        (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
01:52:09.0657 5532        amdxata - ok
01:52:09.0697 5532        AMPPAL          (7d9e301ab3247765702d0b65e2e47e50) C:\Windows\system32\DRIVERS\AMPPAL.sys
01:52:09.0774 5532        AMPPAL - ok
01:52:09.0778 5532        AMPPALP        (7d9e301ab3247765702d0b65e2e47e50) C:\Windows\system32\DRIVERS\amppal.sys
01:52:09.0789 5532        AMPPALP - ok
01:52:10.0073 5532        AMPPALR3        (864c632b999be1237a3dc46736e71f27) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
01:52:10.0116 5532        AMPPALR3 - ok
01:52:10.0234 5532        AppID          (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
01:52:10.0417 5532        AppID - ok
01:52:10.0439 5532        AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
01:52:10.0497 5532        AppIDSvc - ok
01:52:10.0536 5532        Appinfo        (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
01:52:10.0599 5532        Appinfo - ok
01:52:10.0641 5532        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
01:52:10.0653 5532        arc - ok
01:52:10.0662 5532        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
01:52:10.0673 5532        arcsas - ok
01:52:10.0787 5532        aspnet_state    (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
01:52:10.0798 5532        aspnet_state - ok
01:52:10.0823 5532        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
01:52:10.0895 5532        AsyncMac - ok
01:52:10.0932 5532        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
01:52:10.0964 5532        atapi - ok
01:52:11.0019 5532        AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
01:52:11.0098 5532        AudioEndpointBuilder - ok
01:52:11.0103 5532        AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
01:52:11.0135 5532        AudioSrv - ok
01:52:11.0563 5532        AVP            (2718dc27571bd1e37813f5759d2dc118) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
01:52:11.0575 5532        AVP - ok
01:52:11.0614 5532        AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
01:52:11.0709 5532        AxInstSV - ok
01:52:11.0750 5532        b06bdrv        (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
01:52:11.0839 5532        b06bdrv - ok
01:52:11.0981 5532        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
01:52:12.0049 5532        b57nd60a - ok
01:52:12.0103 5532        BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
01:52:12.0178 5532        BDESVC - ok
01:52:12.0216 5532        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
01:52:12.0287 5532        Beep - ok
01:52:12.0366 5532        BFE            (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
01:52:12.0444 5532        BFE - ok
01:52:12.0781 5532        BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
01:52:12.0859 5532        BITS - ok
01:52:12.0935 5532        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
01:52:12.0977 5532        blbdrive - ok
01:52:13.0133 5532        Bluetooth Device Monitor (5ff7b9916a10e8e69e7c0d16f0b4787a) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
01:52:13.0188 5532        Bluetooth Device Monitor ( UnsignedFile.Multi.Generic ) - warning
01:52:13.0188 5532        Bluetooth Device Monitor - detected UnsignedFile.Multi.Generic (1)
01:52:13.0290 5532        Bluetooth Media Service (e43d73caf1023976efba1d0f0e69e271) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
01:52:13.0356 5532        Bluetooth Media Service ( UnsignedFile.Multi.Generic ) - warning
01:52:13.0356 5532        Bluetooth Media Service - detected UnsignedFile.Multi.Generic (1)
01:52:13.0441 5532        Bluetooth OBEX Service (20427929646784a482df34ef8c4fed23) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
01:52:13.0495 5532        Bluetooth OBEX Service ( UnsignedFile.Multi.Generic ) - warning
01:52:13.0495 5532        Bluetooth OBEX Service - detected UnsignedFile.Multi.Generic (1)
01:52:13.0672 5532        bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
01:52:13.0748 5532        bowser - ok
01:52:13.0785 5532        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
01:52:13.0821 5532        BrFiltLo - ok
01:52:13.0844 5532        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
01:52:13.0861 5532        BrFiltUp - ok
01:52:13.0899 5532        Browser        (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
01:52:13.0953 5532        Browser - ok
01:52:13.0987 5532        Brserid        (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
01:52:14.0078 5532        Brserid - ok
01:52:14.0091 5532        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
01:52:14.0127 5532        BrSerWdm - ok
01:52:14.0154 5532        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
01:52:14.0215 5532        BrUsbMdm - ok
01:52:14.0222 5532        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
01:52:14.0245 5532        BrUsbSer - ok
01:52:14.0281 5532        BthEnum        (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys
01:52:14.0343 5532        BthEnum - ok
01:52:14.0363 5532        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
01:52:14.0423 5532        BTHMODEM - ok
01:52:14.0456 5532        BthPan          (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
01:52:14.0493 5532        BthPan - ok
01:52:15.0859 5532        BTHPORT        (64c198198501f7560ee41d8d1efa7952) C:\Windows\system32\Drivers\BTHport.sys
01:52:15.0919 5532        BTHPORT - ok
01:52:16.0148 5532        bthserv        (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
01:52:16.0178 5532        bthserv - ok
01:52:16.0362 5532        BTHSSecurityMgr (9e2af97302b9f4bf97e952a865eb31ae) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
01:52:16.0373 5532        BTHSSecurityMgr - ok
01:52:16.0401 5532        BTHUSB          (f188b7394d81010767b6df3178519a37) C:\Windows\system32\Drivers\BTHUSB.sys
01:52:16.0443 5532        BTHUSB - ok
01:52:16.0494 5532        btmaudio        (274e47bd9c1367bdbfa9df10c2e6c544) C:\Windows\system32\drivers\btmaud.sys
01:52:16.0563 5532        btmaudio - ok
01:52:16.0574 5532        btmaux          (75eab5aaf6e9f83739249ce60b4b9c39) C:\Windows\system32\DRIVERS\btmaux.sys
01:52:16.0640 5532        btmaux - ok
01:52:16.0663 5532        btmhsf          (0b1cc2221dc5990e4557a78ce9afad4f) C:\Windows\system32\DRIVERS\btmhsf.sys
01:52:16.0732 5532        btmhsf - ok
01:52:16.0773 5532        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
01:52:16.0850 5532        cdfs - ok
01:52:16.0907 5532        cdrom          (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
01:52:16.0933 5532        cdrom - ok
01:52:17.0018 5532        CertPropSvc    (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
01:52:17.0079 5532        CertPropSvc - ok
01:52:17.0124 5532        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
01:52:17.0177 5532        circlass - ok
01:52:17.0219 5532        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
01:52:17.0235 5532        CLFS - ok
01:52:17.0583 5532        CLKMSVC10_9EC60124 (bb86f147b2a7152e4b4d71a2f0a87d41) c:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe
01:52:17.0619 5532        CLKMSVC10_9EC60124 - ok
01:52:17.0794 5532        clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
01:52:17.0856 5532        clr_optimization_v2.0.50727_32 - ok
01:52:17.0911 5532        clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
01:52:17.0934 5532        clr_optimization_v2.0.50727_64 - ok
01:52:17.0978 5532        clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
01:52:17.0992 5532        clr_optimization_v4.0.30319_32 - ok
01:52:18.0040 5532        clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
01:52:18.0054 5532        clr_optimization_v4.0.30319_64 - ok
01:52:18.0161 5532        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
01:52:18.0208 5532        CmBatt - ok
01:52:18.0233 5532        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
01:52:18.0249 5532        cmdide - ok
01:52:18.0453 5532        CNG            (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
01:52:18.0512 5532        CNG - ok
01:52:18.0545 5532        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
01:52:18.0555 5532        Compbatt - ok
01:52:18.0574 5532        CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys
01:52:18.0609 5532        CompositeBus - ok
01:52:18.0636 5532        COMSysApp - ok
01:52:18.0654 5532        crcdisk        (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
01:52:18.0670 5532        crcdisk - ok
01:52:18.0828 5532        CryptSvc        (4f5414602e2544a4554d95517948b705) C:\Windows\system32\cryptsvc.dll
01:52:18.0894 5532        CryptSvc - ok
01:52:18.0941 5532        CtClsFlt        (bc3d4f90978cd7c8eabd1baf3bf7873a) C:\Windows\system32\DRIVERS\CtClsFlt.sys
01:52:19.0016 5532        CtClsFlt - ok
01:52:19.0796 5532        cvhsvc          (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
01:52:19.0864 5532        cvhsvc - ok
01:52:19.0959 5532        DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
01:52:20.0058 5532        DcomLaunch - ok
01:52:20.0116 5532        defragsvc      (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
01:52:20.0173 5532        defragsvc - ok
01:52:20.0711 5532        DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
01:52:20.0760 5532        DfsC - ok
01:52:20.0800 5532        Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
01:52:20.0855 5532        Dhcp - ok
01:52:20.0880 5532        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
01:52:20.0932 5532        discache - ok
01:52:21.0020 5532        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
01:52:21.0048 5532        Disk - ok
01:52:21.0122 5532        Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
01:52:21.0181 5532        Dnscache - ok
01:52:21.0226 5532        dot3svc        (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
01:52:21.0287 5532        dot3svc - ok
01:52:21.0646 5532        DPS            (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
01:52:21.0740 5532        DPS - ok
01:52:21.0778 5532        drmkaud        (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
01:52:21.0822 5532        drmkaud - ok
01:52:22.0081 5532        DXGKrnl        (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
01:52:22.0124 5532        DXGKrnl - ok
01:52:22.0164 5532        EapHost        (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
01:52:22.0224 5532        EapHost - ok
01:52:25.0126 5532        ebdrv          (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
01:52:25.0239 5532        ebdrv - ok
01:52:26.0560 5532        EFS            (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
01:52:26.0669 5532        EFS - ok
01:52:26.0775 5532        ehRecvr        (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
01:52:26.0867 5532        ehRecvr - ok
01:52:26.0892 5532        ehSched        (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
01:52:26.0911 5532        ehSched - ok
01:52:26.0979 5532        elxstor        (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
01:52:27.0020 5532        elxstor - ok
01:52:27.0128 5532        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
01:52:27.0169 5532        ErrDev - ok
01:52:27.0215 5532        EventSystem    (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
01:52:27.0278 5532        EventSystem - ok
01:52:28.0463 5532        EvtEng          (e3a96d5ae6e5c7b5472011ba77353368) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
01:52:28.0508 5532        EvtEng - ok
01:52:29.0501 5532        exfat          (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
01:52:29.0570 5532        exfat - ok
01:52:29.0589 5532        fastfat        (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
01:52:29.0642 5532        fastfat - ok
01:52:29.0714 5532        Fax            (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
01:52:29.0800 5532        Fax - ok
01:52:29.0834 5532        fdc            (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
01:52:29.0870 5532        fdc - ok
01:52:29.0896 5532        fdPHost        (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
01:52:29.0946 5532        fdPHost - ok
01:52:30.0062 5532        FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
01:52:30.0127 5532        FDResPub - ok
01:52:30.0221 5532        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
01:52:30.0239 5532        FileInfo - ok
01:52:30.0260 5532        Filetrace      (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
01:52:30.0323 5532        Filetrace - ok
01:52:30.0358 5532        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
01:52:30.0375 5532        flpydisk - ok
01:52:30.0407 5532        FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
01:52:30.0422 5532        FltMgr - ok
01:52:30.0500 5532        FontCache      (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
01:52:30.0576 5532        FontCache - ok
01:52:30.0678 5532        FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
01:52:30.0686 5532        FontCache3.0.0.0 - ok
01:52:30.0718 5532        FsDepends      (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
01:52:30.0736 5532        FsDepends - ok
01:52:30.0812 5532        Fs_Rec          (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
01:52:30.0838 5532        Fs_Rec - ok
01:52:30.0860 5532        fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
01:52:30.0877 5532        fvevol - ok
01:52:30.0894 5532        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
01:52:30.0911 5532        gagp30kx - ok
01:52:30.0986 5532        gpsvc          (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
01:52:31.0026 5532        gpsvc - ok
01:52:31.0060 5532        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
01:52:31.0118 5532        hcw85cir - ok
01:52:31.0137 5532        HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys
01:52:31.0178 5532        HDAudBus - ok
01:52:31.0201 5532        HidBatt        (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
01:52:31.0246 5532        HidBatt - ok
01:52:31.0275 5532        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
01:52:31.0298 5532        HidBth - ok
01:52:31.0309 5532        HidIr          (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
01:52:31.0330 5532        HidIr - ok
01:52:31.0348 5532        hidserv        (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
01:52:31.0377 5532        hidserv - ok
01:52:31.0405 5532        HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
01:52:31.0432 5532        HidUsb - ok
01:52:31.0468 5532        hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
01:52:31.0522 5532        hkmsvc - ok
01:52:31.0564 5532        HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
01:52:31.0623 5532        HomeGroupListener - ok
01:52:31.0645 5532        HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
01:52:31.0680 5532        HomeGroupProvider - ok
01:52:31.0802 5532        HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
01:52:31.0844 5532        HpSAMD - ok
01:52:31.0922 5532        HTCAND64        (f47cec45fb85791d4ab237563ad0fa8f) C:\Windows\system32\Drivers\ANDROIDUSB.sys
01:52:32.0005 5532        HTCAND64 - ok
01:52:32.0063 5532        htcnprot        (b8b1b284362e1d8135112573395d5da5) C:\Windows\system32\DRIVERS\htcnprot.sys
01:52:32.0090 5532        htcnprot - ok
01:52:32.0179 5532        HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
01:52:32.0242 5532        HTTP - ok
01:52:32.0326 5532        huawei_enumerator (1642c62f1fd5e1ff44608283994a7bb8) C:\Windows\system32\DRIVERS\ew_jubusenum.sys
01:52:32.0403 5532        huawei_enumerator - ok
01:52:32.0438 5532        hwdatacard      (4b80af36ee9f31361c1dcb2ee563719a) C:\Windows\system32\DRIVERS\ewusbmdm.sys
01:52:32.0508 5532        hwdatacard - ok
01:52:32.0519 5532        hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
01:52:32.0535 5532        hwpolicy - ok
01:52:32.0558 5532        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
01:52:32.0582 5532        i8042prt - ok
01:52:32.0627 5532        iaStor          (d469b77687e12fe43e344806740b624d) C:\Windows\system32\drivers\iaStor.sys
01:52:32.0640 5532        iaStor - ok
01:52:32.0701 5532        iaStorV        (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
01:52:32.0741 5532        iaStorV - ok
01:52:32.0783 5532        iBtFltCoex      (8a4ec1c3f10385181b1066120c610ae5) C:\Windows\system32\DRIVERS\iBtFltCoex.sys
01:52:32.0818 5532        iBtFltCoex - ok
01:52:33.0103 5532        idsvc          (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
01:52:33.0158 5532        idsvc - ok
01:52:36.0980 5532        igfx            (0bd58366c86ef9ddc4f61afed0cada99) C:\Windows\system32\DRIVERS\igdkmd64.sys
01:52:37.0287 5532        igfx - ok
01:52:37.0678 5532        iirsp          (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
01:52:37.0720 5532        iirsp - ok
01:52:38.0121 5532        IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
01:52:38.0197 5532        IKEEXT - ok
01:52:38.0250 5532        Impcd          (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\drivers\Impcd.sys
01:52:38.0312 5532        Impcd - ok
01:52:38.0357 5532        intaud_WaveExtensible (caddf0927dac63edae48f5c35a61d87d) C:\Windows\system32\drivers\intelaud.sys
01:52:38.0366 5532        intaud_WaveExtensible - ok
01:52:38.0502 5532        IntcAzAudAddService (8fed6428fde53d7f4c105095f22524be) C:\Windows\system32\drivers\RTKVHD64.sys
01:52:38.0600 5532        IntcAzAudAddService - ok
01:52:39.0085 5532        IntcDAud        (fc727061c0f47c8059e88e05d5c8e381) C:\Windows\system32\DRIVERS\IntcDAud.sys
01:52:39.0127 5532        IntcDAud - ok
01:52:39.0147 5532        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
01:52:39.0163 5532        intelide - ok
01:52:39.0199 5532        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
01:52:39.0233 5532        intelppm - ok
01:52:39.0275 5532        IPBusEnum      (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
01:52:39.0347 5532        IPBusEnum - ok
01:52:39.0435 5532        IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
01:52:39.0483 5532        IpFilterDriver - ok
01:52:39.0516 5532        iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
01:52:39.0588 5532        iphlpsvc - ok
01:52:39.0678 5532        IPMIDRV        (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
01:52:39.0757 5532        IPMIDRV - ok
01:52:39.0898 5532        IPNAT          (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
01:52:39.0970 5532        IPNAT - ok
01:52:40.0009 5532        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
01:52:40.0049 5532        IRENUM - ok
01:52:40.0077 5532        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
01:52:40.0100 5532        isapnp - ok
01:52:40.0126 5532        iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
01:52:40.0150 5532        iScsiPrt - ok
01:52:40.0176 5532        iwdbus          (716f66336f10885d935b08174dc54242) C:\Windows\system32\DRIVERS\iwdbus.sys
01:52:40.0184 5532        iwdbus - ok
01:52:40.0221 5532        JMCR            (e56417c56b6a7316b6f527c890a1860d) C:\Windows\system32\DRIVERS\jmcr.sys
01:52:40.0239 5532        JMCR - ok
01:52:40.0265 5532        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
01:52:40.0285 5532        kbdclass - ok
01:52:40.0318 5532        kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
01:52:40.0357 5532        kbdhid - ok
01:52:40.0411 5532        KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
01:52:40.0423 5532        KeyIso - ok
01:52:40.0909 5532        KL1            (e656fe10d6d27794afa08136685a69e8) C:\Windows\system32\DRIVERS\kl1.sys
01:52:40.0925 5532        KL1 - ok
01:52:41.0010 5532        kl2            (d865dd8b0448e3f963d68c04c532858f) C:\Windows\system32\DRIVERS\kl2.sys
01:52:41.0023 5532        kl2 - ok
01:52:41.0107 5532        KLIF            (c7d4f357c482dd37e2b05f34093b7b0c) C:\Windows\system32\DRIVERS\klif.sys
01:52:41.0135 5532        KLIF - ok
01:52:41.0186 5532        KLIM6          (89fb5a33d7171b6d84f5eb721d5055e1) C:\Windows\system32\DRIVERS\klim6.sys
01:52:41.0198 5532        KLIM6 - ok
01:52:41.0209 5532        klmouflt        (9468d07e91ba136d82415f5dfc1fe168) C:\Windows\system32\DRIVERS\klmouflt.sys
01:52:41.0222 5532        klmouflt - ok
01:52:41.0274 5532        KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
01:52:41.0289 5532        KSecDD - ok
01:52:41.0306 5532        KSecPkg        (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
01:52:41.0345 5532        KSecPkg - ok
01:52:41.0417 5532        ksthunk        (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
01:52:41.0481 5532        ksthunk - ok
01:52:41.0920 5532        KtmRm          (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
01:52:42.0022 5532        KtmRm - ok
01:52:42.0075 5532        LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
01:52:42.0128 5532        LanmanServer - ok
01:52:42.0178 5532        LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
01:52:42.0229 5532        LanmanWorkstation - ok
01:52:42.0304 5532        LHidFilt        (97caaa9fd47af67e590552c34ce2d9b1) C:\Windows\system32\DRIVERS\LHidFilt.Sys
01:52:42.0333 5532        LHidFilt - ok
01:52:42.0377 5532        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
01:52:42.0434 5532        lltdio - ok
01:52:42.0489 5532        lltdsvc        (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
01:52:42.0550 5532        lltdsvc - ok
01:52:42.0586 5532        lmhosts        (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
01:52:42.0636 5532        lmhosts - ok
01:52:42.0664 5532        LMouFilt        (1a3c49b3edba8f8faf49ad5679813321) C:\Windows\system32\DRIVERS\LMouFilt.Sys
01:52:42.0681 5532        LMouFilt - ok
01:52:42.0896 5532        LMS            (7f32d4c47a50e7223491e8fb9359907d) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
01:52:42.0915 5532        LMS - ok
01:52:42.0940 5532        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
01:52:42.0956 5532        LSI_FC - ok
01:52:42.0979 5532        LSI_SAS        (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
01:52:42.0997 5532        LSI_SAS - ok
01:52:43.0015 5532        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
01:52:43.0033 5532        LSI_SAS2 - ok
01:52:43.0046 5532        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
01:52:43.0063 5532        LSI_SCSI - ok
01:52:43.0235 5532        luafv          (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
01:52:43.0288 5532        luafv - ok
01:52:43.0359 5532        massfilter      (830708a5cc0a19196c1dc205bed5a3a8) C:\Windows\system32\drivers\massfilter.sys
01:52:43.0415 5532        massfilter - ok
01:52:43.0440 5532        Mcx2Svc        (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
01:52:43.0478 5532        Mcx2Svc - ok
01:52:43.0513 5532        megasas        (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
01:52:43.0533 5532        megasas - ok
01:52:43.0550 5532        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
01:52:43.0574 5532        MegaSR - ok
01:52:43.0609 5532        MEIx64          (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys
01:52:43.0635 5532        MEIx64 - ok
01:52:43.0670 5532        MMCSS          (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
01:52:43.0719 5532        MMCSS - ok
01:52:43.0759 5532        Modem          (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
01:52:43.0834 5532        Modem - ok
01:52:43.0870 5532        monitor        (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
01:52:43.0901 5532        monitor - ok
01:52:43.0938 5532        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
01:52:43.0960 5532        mouclass - ok
01:52:43.0983 5532        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
01:52:44.0001 5532        mouhid - ok
01:52:44.0017 5532        mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
01:52:44.0028 5532        mountmgr - ok
01:52:44.0278 5532        MozillaMaintenance (15d5398eed42c2504bb3d4fc875c15d1) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
01:52:44.0303 5532        MozillaMaintenance - ok
01:52:44.0327 5532        mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
01:52:44.0346 5532        mpio - ok
01:52:44.0363 5532        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
01:52:44.0400 5532        mpsdrv - ok
01:52:44.0447 5532        MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
01:52:44.0494 5532        MpsSvc - ok
01:52:44.0709 5532        MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
01:52:44.0770 5532        MRxDAV - ok
01:52:44.0811 5532        mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
01:52:44.0861 5532        mrxsmb - ok
01:52:44.0888 5532        mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
01:52:44.0903 5532        mrxsmb10 - ok
01:52:44.0920 5532        mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
01:52:44.0932 5532        mrxsmb20 - ok
01:52:44.0972 5532        msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
01:52:44.0987 5532        msahci - ok
01:52:45.0032 5532        msdsm          (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
01:52:45.0056 5532        msdsm - ok
01:52:45.0077 5532        MSDTC          (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
01:52:45.0123 5532        MSDTC - ok
01:52:45.0150 5532        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
01:52:45.0202 5532        Msfs - ok
01:52:45.0229 5532        mshidkmdf      (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
01:52:45.0287 5532        mshidkmdf - ok
01:52:45.0326 5532        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
01:52:45.0339 5532        msisadrv - ok
01:52:45.0370 5532        MSiSCSI        (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
01:52:45.0410 5532        MSiSCSI - ok
01:52:45.0412 5532        msiserver - ok
01:52:45.0437 5532        MSKSSRV        (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
01:52:45.0493 5532        MSKSSRV - ok
01:52:45.0523 5532        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
01:52:45.0582 5532        MSPCLOCK - ok
01:52:45.0617 5532        MSPQM          (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
01:52:45.0681 5532        MSPQM - ok
01:52:46.0058 5532        MsRPC          (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
01:52:46.0089 5532        MsRPC - ok
01:52:46.0111 5532        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
01:52:46.0138 5532        mssmbios - ok
01:52:46.0156 5532        MSTEE          (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
01:52:46.0211 5532        MSTEE - ok
01:52:46.0243 5532        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
01:52:46.0268 5532        MTConfig - ok
01:52:46.0284 5532        Mup            (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
01:52:46.0295 5532        Mup - ok
01:52:46.0478 5532        MyWiFiDHCPDNS  (8f57db74bf5407a4cda6c8b005dc8dd0) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
01:52:46.0495 5532        MyWiFiDHCPDNS - ok
01:52:46.0803 5532        napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
01:52:46.0880 5532        napagent - ok
01:52:46.0940 5532        NativeWifiP    (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
01:52:46.0994 5532        NativeWifiP - ok
01:52:47.0246 5532        NAUpdate        (dfe14d63f0f649ee94a9e3442b7c8f2c) C:\Program Files (x86)\Nero\Update\NASvc.exe
01:52:47.0275 5532        NAUpdate - ok
01:52:47.0351 5532        NDIS            (c38b8ae57f78915905064a9a24dc1586) C:\Windows\system32\drivers\ndis.sys
01:52:47.0396 5532        NDIS - ok
01:52:47.0422 5532        NdisCap        (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
01:52:47.0481 5532        NdisCap - ok
01:52:47.0509 5532        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
01:52:47.0547 5532        NdisTapi - ok
01:52:47.0611 5532        Ndisuio        (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
01:52:47.0651 5532        Ndisuio - ok
01:52:47.0665 5532        NdisWan        (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
01:52:47.0725 5532        NdisWan - ok
01:52:47.0759 5532        NDProxy        (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
01:52:47.0805 5532        NDProxy - ok
01:52:47.0819 5532        NetBIOS        (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
01:52:47.0870 5532        NetBIOS - ok
01:52:47.0904 5532        NetBT          (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
01:52:47.0945 5532        NetBT - ok
01:52:48.0012 5532        Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
01:52:48.0026 5532        Netlogon - ok
01:52:48.0344 5532        Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
01:52:48.0410 5532        Netman - ok
01:52:48.0846 5532        NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
01:52:48.0857 5532        NetMsmqActivator - ok
01:52:48.0860 5532        NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
01:52:48.0870 5532        NetPipeActivator - ok
01:52:49.0064 5532        netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
01:52:49.0485 5532        netprofm - ok
01:52:49.0487 5532        NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
01:52:49.0496 5532        NetTcpActivator - ok
01:52:49.0502 5532        NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
01:52:49.0512 5532        NetTcpPortSharing - ok
01:52:52.0815 5532        NETwNs64        (50ad7f7040c22bb7caa59a0880875a21) C:\Windows\system32\DRIVERS\NETwNs64.sys
01:52:53.0037 5532        NETwNs64 - ok
01:52:53.0281 5532        nfrd960        (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
01:52:53.0310 5532        nfrd960 - ok
01:52:53.0354 5532        NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
01:52:53.0412 5532        NlaSvc - ok
01:52:53.0967 5532        NOBU            (b9b72faaaa41d59b73b88fe3dd737ed1) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
01:52:54.0009 5532        NOBU - ok
01:52:54.0364 5532        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
01:52:54.0396 5532        Npfs - ok
01:52:54.0434 5532        nsi            (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
01:52:54.0493 5532        nsi - ok
01:52:54.0516 5532        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
01:52:54.0568 5532        nsiproxy - ok
01:52:54.0718 5532        Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
01:52:54.0788 5532        Ntfs - ok
01:52:55.0112 5532        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
01:52:55.0177 5532        Null - ok
01:52:55.0232 5532        nusb3hub        (0ebc9d13cd96c15b1b18d8678a609e4b) C:\Windows\system32\DRIVERS\nusb3hub.sys
01:52:55.0298 5532        nusb3hub - ok
01:52:55.0328 5532        nusb3xhc        (7bdec000d56d485021d9c1e63c2f81ca) C:\Windows\system32\DRIVERS\nusb3xhc.sys
01:52:55.0391 5532        nusb3xhc - ok
01:52:55.0612 5532        NVHDA          (f2662fdc20518ee8a8eed4f61ba42349) C:\Windows\system32\drivers\nvhda64v.sys
01:52:55.0628 5532        NVHDA - ok
01:52:57.0237 5532        nvlddmkm        (573b0941a37aebee96085d56a103f57b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
01:52:57.0626 5532        nvlddmkm - ok
01:52:57.0734 5532        nvpciflt        (43af7ebeac2ab623468e32caddcb61a4) C:\Windows\system32\DRIVERS\nvpciflt.sys
01:52:57.0757 5532        nvpciflt - ok
01:52:57.0822 5532        nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
01:52:57.0856 5532        nvraid - ok
01:52:57.0879 5532        nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
01:52:57.0900 5532        nvstor - ok
01:52:57.0922 5532        NvStUSB        (9e01b716c8085f7adb1cdc10103ceef8) C:\Windows\system32\drivers\nvstusb.sys
01:52:57.0937 5532        NvStUSB - ok
01:52:58.0030 5532        NVSvc          (c500760572c6059918fb0c960967695b) C:\Windows\system32\nvvsvc.exe
01:52:58.0064 5532        NVSvc - ok
01:52:58.0416 5532        nvUpdatusService (f28169a7adf7b41809cf92d369e744f0) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
01:52:58.0480 5532        nvUpdatusService - ok
01:52:58.0581 5532        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
01:52:58.0603 5532        nv_agp - ok
01:52:58.0611 5532        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
01:52:58.0655 5532        ohci1394 - ok
01:52:58.0722 5532        ose            (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
01:52:58.0736 5532        ose - ok
01:52:58.0950 5532        osppsvc        (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
01:52:59.0144 5532        osppsvc - ok
01:52:59.0653 5532        p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
01:52:59.0725 5532        p2pimsvc - ok
01:52:59.0756 5532        p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
01:52:59.0789 5532        p2psvc - ok
01:52:59.0917 5532        Parport        (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
01:52:59.0960 5532        Parport - ok
01:52:59.0997 5532        partmgr        (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys
01:53:00.0017 5532        partmgr - ok
01:53:00.0210 5532        PassThru Service (afada8b97be3c9398dc6c770409c3544) C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
01:53:00.0224 5532        PassThru Service ( UnsignedFile.Multi.Generic ) - warning
01:53:00.0224 5532        PassThru Service - detected UnsignedFile.Multi.Generic (1)
01:53:00.0252 5532        PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
01:53:00.0289 5532        PcaSvc - ok
01:53:00.0364 5532        pci            (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
01:53:00.0379 5532        pci - ok
01:53:00.0397 5532        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
01:53:00.0424 5532        pciide - ok
01:53:00.0454 5532        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
01:53:00.0485 5532        pcmcia - ok
01:53:00.0509 5532        pcw            (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
01:53:00.0522 5532        pcw - ok
01:53:00.0556 5532        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
01:53:00.0636 5532        PEAUTH - ok
01:53:00.0788 5532        PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
01:53:00.0810 5532        PerfHost - ok
01:53:00.0914 5532        pla            (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
01:53:01.0014 5532        pla - ok
01:53:01.0066 5532        PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
01:53:01.0156 5532        PlugPlay - ok
01:53:01.0222 5532        Pml Driver HPZ12 (f485770eec8959684cc4c4786b63c06c) C:\Windows\system32\HPZipm12.dll
01:53:01.0286 5532        Pml Driver HPZ12 - ok
01:53:01.0319 5532        PNRPAutoReg    (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
01:53:01.0359 5532        PNRPAutoReg - ok
01:53:01.0411 5532        PNRPsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
01:53:01.0426 5532        PNRPsvc - ok
01:53:01.0701 5532        PolicyAgent    (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
01:53:01.0771 5532        PolicyAgent - ok
01:53:01.0801 5532        Power          (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
01:53:01.0861 5532        Power - ok
01:53:01.0941 5532        PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
01:53:02.0001 5532        PptpMiniport - ok
01:53:02.0061 5532        Processor      (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
01:53:02.0131 5532        Processor - ok
01:53:02.0221 5532        ProfSvc        (53e83f1f6cf9d62f32801cf66d8352a8) C:\Windows\system32\profsvc.dll
01:53:02.0271 5532        ProfSvc - ok
01:53:02.0311 5532        ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
01:53:02.0321 5532        ProtectedStorage - ok
01:53:02.0371 5532        Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
01:53:02.0441 5532        Psched - ok
01:53:02.0491 5532        PxHlpa64        (87b04878a6d59d6c79251dc960c674c1) C:\Windows\system32\Drivers\PxHlpa64.sys
01:53:02.0501 5532        PxHlpa64 - ok
01:53:02.0531 5532        qicflt          (0928bd20273625622722fe1de5bbde57) C:\Windows\system32\DRIVERS\qicflt.sys
01:53:02.0551 5532        qicflt - ok
01:53:02.0661 5532        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
01:53:02.0721 5532        ql2300 - ok
01:53:03.0091 5532        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
01:53:03.0111 5532        ql40xx - ok
01:53:03.0782 5532        QWAVE          (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
01:53:03.0812 5532        QWAVE - ok
01:53:03.0822 5532        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
01:53:03.0872 5532        QWAVEdrv - ok
01:53:03.0902 5532        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
01:53:03.0942 5532        RasAcd - ok
01:53:04.0042 5532        RasAgileVpn    (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
01:53:04.0092 5532        RasAgileVpn - ok
01:53:04.0362 5532        RasAuto        (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
01:53:04.0452 5532        RasAuto - ok
01:53:04.0602 5532        Rasl2tp        (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
01:53:04.0712 5532        Rasl2tp - ok
01:53:05.0642 5532        RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
01:53:05.0732 5532        RasMan - ok
01:53:05.0822 5532        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
01:53:05.0892 5532        RasPppoe - ok
01:53:05.0962 5532        RasSstp        (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
01:53:06.0032 5532        RasSstp - ok
01:53:06.0182 5532        rdbss          (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
01:53:06.0222 5532        rdbss - ok
01:53:06.0242 5532        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\drivers\rdpbus.sys
01:53:06.0282 5532        rdpbus - ok
01:53:06.0312 5532        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
01:53:06.0342 5532        RDPCDD - ok
01:53:06.0362 5532        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
01:53:06.0422 5532        RDPENCDD - ok
01:53:06.0452 5532        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
01:53:06.0492 5532        RDPREFMP - ok
01:53:06.0662 5532        RDPWD          (e61608aa35e98999af9aaeeea6114b0a) C:\Windows\system32\drivers\RDPWD.sys
01:53:06.0742 5532        RDPWD - ok
01:53:06.0792 5532        rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
01:53:06.0802 5532        rdyboost - ok
01:53:06.0942 5532        RegSrvc        (fd11c1287d38a46fb72353e14d50089c) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
01:53:06.0972 5532        RegSrvc - ok
01:53:07.0002 5532        RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
01:53:07.0062 5532        RemoteAccess - ok
01:53:07.0092 5532        RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
01:53:07.0162 5532        RemoteRegistry - ok
01:53:07.0242 5532        RFCOMM          (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
01:53:07.0292 5532        RFCOMM - ok
01:53:07.0452 5532        RoxMediaDB12OEM (3c957189b31c34d3ad21967b12b6aed7) C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
01:53:07.0562 5532        RoxMediaDB12OEM - ok
01:53:07.0612 5532        RoxWatch12      (2b73088cc2ca757a172b425c9398e5bc) C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
01:53:07.0632 5532        RoxWatch12 - ok
01:53:08.0472 5532        RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
01:53:08.0532 5532        RpcEptMapper - ok
01:53:08.0562 5532        RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
01:53:08.0612 5532        RpcLocator - ok
01:53:08.0672 5532        RpcSs          (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
01:53:08.0702 5532        RpcSs - ok
01:53:08.0782 5532        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
01:53:08.0822 5532        rspndr - ok
01:53:08.0862 5532        RTL8167        (ed5873f7dfb2f96d37f13322211b6bdc) C:\Windows\system32\DRIVERS\Rt64win7.sys
01:53:08.0892 5532        RTL8167 - ok
01:53:08.0992 5532        SamSs          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
01:53:09.0002 5532        SamSs - ok
01:53:09.0052 5532        sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
01:53:09.0072 5532        sbp2port - ok
01:53:09.0102 5532        SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
01:53:09.0162 5532        SCardSvr - ok
01:53:09.0202 5532        scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
01:53:09.0262 5532        scfilter - ok
01:53:09.0652 5532        Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
01:53:09.0752 5532        Schedule - ok
01:53:09.0852 5532        SCPolicySvc    (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
01:53:09.0882 5532        SCPolicySvc - ok
01:53:10.0032 5532        sdbus          (111e0ebc0ad79cb0fa014b907b231cf0) C:\Windows\system32\DRIVERS\sdbus.sys
01:53:10.0092 5532        sdbus - ok
01:53:10.0242 5532        SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
01:53:10.0342 5532        SDRSVC - ok
01:53:10.0462 5532        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
01:53:10.0512 5532        secdrv - ok
01:53:10.0582 5532        seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
01:53:10.0612 5532        seclogon - ok
01:53:10.0702 5532        SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
01:53:10.0762 5532        SENS - ok
01:53:10.0832 5532        SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
01:53:10.0942 5532        SensrSvc - ok
01:53:11.0102 5532        Serenum        (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
01:53:11.0142 5532        Serenum - ok
01:53:11.0372 5532        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
01:53:11.0482 5532        Serial - ok
01:53:11.0672 5532        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
01:53:11.0732 5532        sermouse - ok
01:53:12.0002 5532        SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
01:53:12.0072 5532        SessionEnv - ok
01:53:12.0082 5532        sffdisk        (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
01:53:12.0140 5532        sffdisk - ok
01:53:12.0171 5532        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
01:53:12.0215 5532        sffp_mmc - ok
01:53:12.0240 5532        sffp_sd        (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\DRIVERS\sffp_sd.sys
01:53:12.0295 5532        sffp_sd - ok
01:53:12.0342 5532        sfloppy        (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
01:53:12.0409 5532        sfloppy - ok
01:53:13.0199 5532        Sftfs          (c6cc9297bd53e5229653303e556aa539) C:\Windows\system32\DRIVERS\Sftfslh.sys
01:53:13.0287 5532        Sftfs - ok
01:53:13.0855 5532        sftlist        (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
01:53:13.0886 5532        sftlist - ok
01:53:14.0141 5532        Sftplay        (390aa7bc52cee43f6790cdea1e776703) C:\Windows\system32\DRIVERS\Sftplaylh.sys
01:53:14.0165 5532        Sftplay - ok
01:53:14.0215 5532        Sftredir        (617e29a0b0a2807466560d4c4e338d3e) C:\Windows\system32\DRIVERS\Sftredirlh.sys
01:53:14.0227 5532        Sftredir - ok
01:53:14.0840 5532        SftService      (29ddea72c5bdf61d62f4d438dc0e497c) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
01:53:14.0890 5532        SftService - ok
01:53:15.0657 5532        Sftvol          (8f571f016fa1976f445147e9e6c8ae9b) C:\Windows\system32\DRIVERS\Sftvollh.sys
01:53:15.0719 5532        Sftvol - ok
01:53:16.0234 5532        sftvsa          (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
01:53:16.0297 5532        sftvsa - ok
01:53:16.0499 5532        SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
01:53:16.0671 5532        SharedAccess - ok
01:53:17.0435 5532        ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
01:53:17.0560 5532        ShellHWDetection - ok
01:53:17.0716 5532        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
01:53:17.0732 5532        SiSRaid2 - ok
01:53:17.0888 5532        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
01:53:17.0997 5532        SiSRaid4 - ok
01:53:26.0758 5532        Skype C2C Service (4ca43b85f22c7739311788b651a779cb) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
01:53:26.0898 5532        Skype C2C Service - ok
01:53:27.0553 5532        SkypeUpdate    (c70aebd3608ed9fcea2a1bae83567ffc) C:\Program Files (x86)\Skype\Updater\Updater.exe
01:53:27.0631 5532        SkypeUpdate - ok
01:53:29.0659 5532        Smb            (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
01:53:29.0706 5532        Smb - ok
01:53:29.0753 5532        SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
01:53:29.0784 5532        SNMPTRAP - ok
01:53:29.0815 5532        spldr          (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
01:53:29.0815 5532        spldr - ok
01:53:30.0954 5532        Spooler        (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
01:53:31.0017 5532        Spooler - ok
01:53:37.0319 5532        sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
01:53:37.0459 5532        sppsvc - ok
01:53:39.0160 5532        sppuinotify    (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
01:53:39.0207 5532        sppuinotify - ok
01:53:40.0111 5532        srv            (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
01:53:40.0189 5532        srv - ok
01:53:40.0907 5532        srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
01:53:40.0954 5532        srv2 - ok
01:53:41.0344 5532        srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
01:53:41.0391 5532        srvnet - ok
01:53:41.0827 5532        SSDPSRV        (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
01:53:41.0937 5532        SSDPSRV - ok
01:53:42.0077 5532        SstpSvc        (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
01:53:42.0125 5532        SstpSvc - ok
01:53:42.0234 5532        stdcfltn        (92e7f6666633d2dd91d527503daa7be0) C:\Windows\system32\DRIVERS\stdcfltn.sys
01:53:42.0281 5532        stdcfltn - ok
01:53:43.0139 5532        Stereo Service  (0683504bbb3ffc0a73d9d217b63dd0e0) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
01:53:43.0217 5532        Stereo Service - ok
01:53:43.0388 5532        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
01:53:43.0404 5532        stexstor - ok
01:53:43.0513 5532        StillCam        (decacb6921ded1a38642642685d77dac) C:\Windows\system32\DRIVERS\serscan.sys
01:53:43.0544 5532        StillCam - ok
01:53:44.0995 5532        stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
01:53:45.0214 5532        stisvc - ok
01:53:45.0432 5532        stllssvr        (7731f46ec0d687a931cba063e8f90ef0) C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
01:53:45.0494 5532        stllssvr - ok
01:53:45.0635 5532        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
01:53:45.0650 5532        swenum - ok
01:53:46.0727 5532        swprv          (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
01:53:46.0836 5532        swprv - ok
01:53:49.0862 5532        SynTP          (b0c7d4dcf4800df2f2145b500d0161e8) C:\Windows\system32\DRIVERS\SynTP.sys
01:53:50.0065 5532        SynTP - ok
01:53:54.0480 5532        SysMain        (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
01:53:54.0652 5532        SysMain - ok
01:53:56.0851 5532        TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
01:53:57.0007 5532        TabletInputService - ok
01:53:57.0132 5532        TapiSrv        (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
01:53:57.0319 5532        TapiSrv - ok
01:53:57.0413 5532        TBS            (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
01:53:57.0460 5532        TBS - ok
01:54:01.0500 5532        Tcpip          (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys
01:54:01.0578 5532        Tcpip - ok
01:54:05.0119 5532        TCPIP6          (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys
01:54:05.0150 5532        TCPIP6 - ok
01:54:05.0416 5532        tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
01:54:05.0478 5532        tcpipreg - ok
01:54:05.0509 5532        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
01:54:05.0572 5532        TDPIPE - ok
01:54:05.0650 5532        TDTCP          (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
01:54:05.0681 5532        TDTCP - ok
01:54:06.0024 5532        tdx            (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
01:54:06.0086 5532        tdx - ok
01:54:06.0274 5532        TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\DRIVERS\termdd.sys
01:54:06.0305 5532        TermDD - ok
01:54:06.0726 5532        TermService    (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
01:54:06.0788 5532        TermService - ok
01:54:06.0866 5532        Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
01:54:06.0882 5532        Themes - ok
01:54:07.0007 5532        THREADORDER    (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
01:54:07.0038 5532        THREADORDER - ok
01:54:07.0241 5532        TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
01:54:07.0303 5532        TrkWks - ok
01:54:07.0584 5532        TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
01:54:07.0646 5532        TrustedInstaller - ok
01:54:07.0693 5532        tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
01:54:07.0802 5532        tssecsrv - ok
01:54:07.0990 5532        TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
01:54:08.0083 5532        TsUsbFlt - ok
01:54:08.0208 5532        TsUsbGD        (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
01:54:08.0270 5532        TsUsbGD - ok
01:54:08.0473 5532        tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
01:54:08.0536 5532        tunnel - ok
01:54:08.0614 5532        TurboB          (fd24f98d2898be093fe926604be7db99) C:\Windows\system32\DRIVERS\TurboB.sys
01:54:08.0629 5532        TurboB - ok
01:54:09.0082 5532        TurboBoost      (600b406a04d90f577fea8a88d7379f08) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
01:54:09.0160 5532        TurboBoost - ok
01:54:09.0362 5532        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
01:54:09.0394 5532        uagp35 - ok
01:54:09.0550 5532        udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
01:54:09.0690 5532        udfs - ok
01:54:10.0049 5532        UI0Detect      (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
01:54:10.0158 5532        UI0Detect - ok
01:54:10.0408 5532        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
01:54:10.0439 5532        uliagpkx - ok
01:54:10.0517 5532        umbus          (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
01:54:10.0579 5532        umbus - ok
01:54:10.0642 5532        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
01:54:10.0657 5532        UmPass - ok
01:54:16.0554 5532        UNS            (2c16648a12999ae69a9ebf41974b0ba2) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
01:54:16.0663 5532        UNS - ok
01:54:17.0381 5532        upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
01:54:17.0428 5532        upnphost - ok
01:54:17.0818 5532        usbccgp        (19ad7990c0b67e48dac5b26f99628223) C:\Windows\system32\DRIVERS\usbccgp.sys
01:54:17.0911 5532        usbccgp - ok
01:54:18.0176 5532        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
01:54:18.0208 5532        usbcir - ok
01:54:18.0317 5532        usbehci        (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
01:54:18.0410 5532        usbehci - ok
01:54:18.0878 5532        usbhub          (8b892002d7b79312821169a14317ab86) C:\Windows\system32\DRIVERS\usbhub.sys
01:54:18.0972 5532        usbhub - ok
01:54:19.0034 5532        usbohci        (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
01:54:19.0144 5532        usbohci - ok
01:54:19.0222 5532        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
01:54:19.0284 5532        usbprint - ok
01:54:19.0487 5532        USBSTOR        (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
01:54:19.0612 5532        USBSTOR - ok
01:54:19.0690 5532        usbuhci        (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
01:54:19.0736 5532        usbuhci - ok
01:54:20.0126 5532        usbvideo        (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\system32\Drivers\usbvideo.sys
01:54:20.0204 5532        usbvideo - ok
01:54:20.0236 5532        UxSms          (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
01:54:20.0298 5532        UxSms - ok
01:54:20.0392 5532        VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
01:54:20.0423 5532        VaultSvc - ok
01:54:20.0594 5532        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
01:54:20.0641 5532        vdrvroot - ok
01:54:21.0998 5532        vds            (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
01:54:22.0186 5532        vds - ok
01:54:22.0279 5532        vga            (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
01:54:22.0342 5532        vga - ok
01:54:22.0435 5532        VgaSave        (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
01:54:22.0529 5532        VgaSave - ok
01:54:22.0856 5532        vhdmp          (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
01:54:22.0966 5532        vhdmp - ok
01:54:22.0997 5532        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
01:54:23.0012 5532        viaide - ok
01:54:23.0153 5532        volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
01:54:23.0200 5532        volmgr - ok
01:54:23.0340 5532        volmgrx        (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
01:54:23.0434 5532        volmgrx - ok
01:54:24.0026 5532        volsnap        (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
01:54:24.0167 5532        volsnap - ok
01:54:24.0541 5532        vsmraid        (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
01:54:24.0635 5532        vsmraid - ok
01:54:25.0477 5532        VSS            (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
01:54:25.0586 5532        VSS - ok
01:54:26.0288 5532        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
01:54:26.0335 5532        vwifibus - ok
01:54:26.0460 5532        vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
01:54:26.0538 5532        vwififlt - ok
01:54:26.0600 5532        vwifimp        (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
01:54:26.0632 5532        vwifimp - ok
01:54:27.0022 5532        W32Time        (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
01:54:27.0068 5532        W32Time - ok
01:54:27.0146 5532        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
01:54:27.0240 5532        WacomPen - ok
01:54:27.0380 5532        WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
01:54:27.0443 5532        WANARP - ok
01:54:27.0458 5532        Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
01:54:27.0490 5532        Wanarpv6 - ok
01:54:27.0646 5532        WatAdminSvc    (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
01:54:27.0755 5532        WatAdminSvc - ok
01:54:28.0566 5532        wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
01:54:28.0691 5532        wbengine - ok
01:54:30.0079 5532        WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
01:54:30.0111 5532        WbioSrvc - ok
01:54:30.0469 5532        wcncsvc        (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
01:54:30.0610 5532        wcncsvc - ok
01:54:30.0625 5532        WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
01:54:30.0688 5532        WcsPlugInService - ok
01:54:30.0937 5532        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
01:54:31.0000 5532        Wd - ok
01:54:31.0593 5532        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
01:54:31.0686 5532        Wdf01000 - ok
01:54:31.0905 5532        WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
01:54:32.0404 5532        WdiServiceHost - ok
01:54:32.0404 5532        WdiSystemHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
01:54:32.0419 5532        WdiSystemHost - ok
01:54:32.0763 5532        WebClient      (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
01:54:32.0887 5532        WebClient - ok
01:54:33.0324 5532        Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
01:54:33.0449 5532        Wecsvc - ok
01:54:33.0527 5532        wercplsupport  (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
01:54:33.0589 5532        wercplsupport - ok
01:54:33.0667 5532        WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
01:54:33.0699 5532        WerSvc - ok
01:54:33.0870 5532        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
01:54:33.0901 5532        WfpLwf - ok
01:54:34.0057 5532        WimFltr        (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys
01:54:34.0089 5532        WimFltr - ok
01:54:34.0135 5532        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
01:54:34.0198 5532        WIMMount - ok
01:54:34.0276 5532        WinDefend - ok
01:54:34.0276 5532        WinHttpAutoProxySvc - ok
01:54:34.0650 5532        Winmgmt        (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
01:54:34.0697 5532        Winmgmt - ok
01:54:35.0212 5532        WinRM          (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
01:54:35.0399 5532        WinRM - ok
01:54:36.0101 5532        WinUsb          (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
01:54:36.0195 5532        WinUsb - ok
01:54:36.0741 5532        Wlansvc        (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
01:54:36.0787 5532        Wlansvc - ok
01:54:37.0084 5532        wlcrasvc        (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
01:54:37.0115 5532        wlcrasvc - ok
01:54:38.0566 5532        wlidsvc        (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
01:54:38.0659 5532        wlidsvc - ok
01:54:39.0268 5532        WmiAcpi        (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
01:54:39.0299 5532        WmiAcpi - ok
01:54:39.0751 5532        wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
01:54:39.0798 5532        wmiApSrv - ok
01:54:39.0892 5532        WMPNetworkSvc - ok
01:54:39.0939 5532        WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
01:54:39.0970 5532        WPCSvc - ok
01:54:40.0204 5532        WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
01:54:40.0313 5532        WPDBusEnum - ok
01:54:40.0375 5532        ws2ifsl        (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
01:54:40.0485 5532        ws2ifsl - ok
01:54:40.0734 5532        wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
01:54:40.0812 5532        wscsvc - ok
01:54:40.0812 5532        WSearch - ok
01:54:42.0060 5532        wuauserv        (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll
01:54:42.0138 5532        wuauserv - ok
01:54:43.0293 5532        WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
01:54:43.0386 5532        WudfPf - ok
01:54:43.0839 5532        WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
01:54:43.0979 5532        WUDFRd - ok
01:54:44.0119 5532        wudfsvc        (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
01:54:44.0151 5532        wudfsvc - ok
01:54:44.0385 5532        WwanSvc        (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
01:54:44.0431 5532        WwanSvc - ok
01:54:44.0509 5532        MBR (0x1B8)    (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
01:54:49.0189 5532        \Device\Harddisk0\DR0 - ok
01:54:49.0236 5532        Boot (0x1200)  (36f42e9839cf5691c2eea8da2c29ab26) \Device\Harddisk0\DR0\Partition0
01:54:49.0236 5532        \Device\Harddisk0\DR0\Partition0 - ok
01:54:49.0236 5532        Boot (0x1200)  (94e3a9d1f06424214bae0dec5eced9a7) \Device\Harddisk0\DR0\Partition1
01:54:49.0252 5532        \Device\Harddisk0\DR0\Partition1 - ok
01:54:49.0252 5532        ============================================================
01:54:49.0252 5532        Scan finished
01:54:49.0252 5532        ============================================================
01:54:49.0252 1112        Detected object count: 4
01:54:49.0252 1112        Actual detected object count: 4
01:55:06.0162 1112        Bluetooth Device Monitor ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:06.0162 1112        Bluetooth Device Monitor ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:55:06.0162 1112        Bluetooth Media Service ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:06.0162 1112        Bluetooth Media Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:55:06.0162 1112        Bluetooth OBEX Service ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:06.0162 1112        Bluetooth OBEX Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:55:06.0162 1112        PassThru Service ( UnsignedFile.Multi.Generic ) - skipped by user
01:55:06.0162 1112        PassThru Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
lg Faulwurf

cosinus 25.06.2012 10:59
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

faulwurf 26.06.2012 23:49
Halli Hallo,
wurde gewarnt das Mcafee noch laufen soll, das kann aber nicht sein wurde mit kauf des Laptops deinstalliert. Habe mich davor noch vergewissert, dass es wirklich nicht mehr oben ist. Konnte auch keinen McAfee Prozess entdecken. -->

hier das Log von CF:

Code:
ComboFix 12-06-26.02 - Kathi 27.06.2012  0:39.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.43.1031.18.6038.4405 [GMT 2:00]
ausgeführt von:: c:\users\Kathi\Downloads\ComboFix.exe
AV: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee  Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\5907\Downloads\9a727e3b-3b75-44f1-aa0c-b5b6cd760030.dll
c:\programdata\Roaming
c:\users\Kathi\Documents\1760FECB.tmp
c:\users\Kathi\Documents\ppt3CA4.tmp
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-05-26 bis 2012-06-26  ))))))))))))))))))))))))))))))
.
.
2012-06-26 22:45 . 2012-06-26 22:45        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2012-06-26 22:45 . 2012-06-26 22:45        --------        d-----w-        c:\users\Default\AppData\Local\temp
2012-06-25 09:56 . 2012-06-25 09:56        --------        d-----w-        c:\users\Kathi\AppData\Local\Macromedia
2012-06-22 13:05 . 2012-06-22 13:05        --------        d-----w-        C:\_OTL
2012-06-22 10:56 . 2012-06-22 10:56        770384        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcr100.dll
2012-06-22 10:56 . 2012-06-22 10:56        421200        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcp100.dll
2012-06-21 14:57 . 2012-06-21 14:57        --------        d-----w-        c:\program files (x86)\ESET
2012-06-21 09:52 . 2012-06-02 22:19        2428952        ----a-w-        c:\windows\system32\wuaueng.dll
2012-06-21 09:52 . 2012-06-02 22:19        57880        ----a-w-        c:\windows\system32\wuauclt.exe
2012-06-21 09:52 . 2012-06-02 22:19        44056        ----a-w-        c:\windows\system32\wups2.dll
2012-06-21 09:52 . 2012-06-02 22:15        2622464        ----a-w-        c:\windows\system32\wucltux.dll
2012-06-21 09:52 . 2012-06-02 22:19        38424        ----a-w-        c:\windows\system32\wups.dll
2012-06-21 09:52 . 2012-06-02 22:19        701976        ----a-w-        c:\windows\system32\wuapi.dll
2012-06-21 09:52 . 2012-06-02 22:15        99840        ----a-w-        c:\windows\system32\wudriver.dll
2012-06-21 09:52 . 2012-06-02 13:19        186752        ----a-w-        c:\windows\system32\wuwebv.dll
2012-06-21 09:52 . 2012-06-02 13:15        36864        ----a-w-        c:\windows\system32\wuapp.exe
2012-06-16 20:54 . 2012-06-16 20:54        --------        d-----w-        c:\users\Kathi\AppData\Roaming\Malwarebytes
2012-06-16 20:37 . 2012-06-16 20:37        --------        d-----w-        c:\programdata\Malwarebytes
2012-06-16 20:37 . 2012-06-16 20:37        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2012-06-16 20:37 . 2012-04-04 13:56        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-06-14 10:32 . 2012-06-26 21:35        --------        d-----w-        c:\programdata\Kaspersky Lab
2012-06-14 10:32 . 2012-06-14 10:32        --------        d-----w-        c:\program files (x86)\Kaspersky Lab
2012-06-13 09:47 . 2012-04-26 05:41        77312        ----a-w-        c:\windows\system32\rdpwsx.dll
2012-06-13 09:47 . 2012-04-26 05:41        149504        ----a-w-        c:\windows\system32\rdpcorekmts.dll
2012-06-13 09:47 . 2012-04-26 05:34        9216        ----a-w-        c:\windows\system32\rdrmemptylst.exe
2012-06-03 20:42 . 2012-06-03 21:26        --------        d-----w-        c:\program files (x86)\hpmonitor
2012-06-03 20:41 . 2012-01-20 12:14        18816        ----a-w-        c:\windows\system32\roboot64.exe
2012-05-30 11:59 . 2012-05-30 11:59        4966600        ----a-w-        c:\program files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2012-05-29 21:36 . 2012-06-22 13:10        --------        d-----w-        c:\users\Kathi\AppData\Local\Htc
2012-05-29 21:35 . 2012-05-29 21:36        --------        d-----w-        c:\users\Kathi\AppData\Roaming\HTC
2012-05-29 21:35 . 2012-05-29 21:35        --------        d-----w-        c:\users\Kathi\AppData\Local\Downloaded Installations
2012-05-29 21:35 . 2012-05-29 21:35        --------        d-----w-        c:\program files (x86)\Spirent Communications
2012-05-29 21:34 . 2012-05-29 21:35        --------        d-----w-        c:\program files (x86)\HTC
2012-05-29 20:49 . 2012-05-29 20:49        --------        d-----w-        c:\users\Kathi\AppData\Roaming\TuneUp Software
2012-05-29 20:48 . 2012-05-29 20:49        --------        d-----w-        c:\programdata\TuneUp Software
2012-05-29 20:48 . 2012-05-29 20:48        --------        d-sh--w-        c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2012-05-29 20:48 . 2012-05-29 20:48        --------        d--h--w-        c:\programdata\Common Files
2012-05-29 20:45 . 2012-05-29 20:45        --------        d-----w-        c:\users\Kathi\AppData\Roaming\OpenCandy
2012-05-29 20:45 . 2012-03-22 11:43        2557952        ----a-w-        c:\windows\SysWow64\QtCore4.dll
2012-05-29 20:45 . 2012-04-18 11:49        405176        ----a-w-        c:\windows\SysWow64\Newtonsoft.Json.Net20.dll
2012-05-29 20:45 . 2012-05-29 20:45        --------        d-----w-        c:\program files (x86)\Common Files\DVDVideoSoft
2012-05-29 20:45 . 2012-05-29 20:45        --------        d-----w-        c:\program files (x86)\DVDVideoSoft
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-24 13:41 . 2012-05-11 10:00        426184        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-24 13:41 . 2011-11-17 11:07        70344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-30 11:35 . 2012-05-10 10:55        1918320        ----a-w-        c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-09-05 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2011-04-13 503942]
"Dell DataSafe Online"="c:\program files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe" [2010-08-26 1117528]
"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]
"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-18 50472]
"BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2011-08-12 75048]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544]
"NeroLauncher"="c:\program files (x86)\Nero\SyncUP\NeroLauncher.exe" [2011-07-07 75064]
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2011-05-30 885760]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
"HTC Sync Loader"="c:\program files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2012-04-17 651264]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-24 202296]
.
c:\users\Kathi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2011-11-25 67128]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2011-11-25 1041920]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages        REG_MULTI_SZ          kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/11/17 05:57;c:\program files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [2011-08-12 248304]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-05-30 3048136]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-06-05 160944]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-24 250056]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys [2011-08-08 299008]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2010-02-27 158976]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-05-17 34200]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2010-12-15 174168]
R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2010-02-22 11776]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-22 113120]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-28 340240]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2011-03-04 174184]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\drivers\nvstusb.sys [2010-12-12 121960]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2011-11-23 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-04-22 25960]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [2010-08-20 21616]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2011-03-04 11864]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2011-03-10 29488]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-09-05 64952]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-08-08 1166848]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-04 687400]
S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-22 2009704]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-03-23 87040]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-09-22 1692480]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-21 378472]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [2010-12-13 27760]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [2011-08-08 299008]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [2011-05-19 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-07-19 282624]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2011-01-30 86016]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-07-20 59904]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-16 317440]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-05-17 25496]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-11-02 22544]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [2011-08-04 8604672]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2011-02-10 82432]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2011-02-10 181760]
S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [2010-07-13 29288]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 23867665
*Deregistered* - 23867665
*Deregistered* - CLKMDRV10_9EC60124
.
Inhalt des "geplante Tasks" Ordners
.
2012-06-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-11 13:41]
.
2012-06-03 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\Dell Support Center\uaclauncher.exe [2012-04-13 06:11]
.
2012-06-26 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\Dell Support Center\uaclauncher.exe [2012-04-13 06:11]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-02-18 6611048]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-01-18 2188904]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-04-22 312936]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-05 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-05 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-05 416024]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-28 1935120]
"QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2011-01-25 4479648]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"Stage Remote"="c:\program files (x86)\Dell\Stage Remote\StageRemote.exe" [2011-06-28 2022976]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2011-05-30 2055816]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 134416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Free YouTube to MP3 Converter - c:\users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 212.186.211.21 195.34.133.21
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.at/
FF - prefs.js: network.proxy.type - 0
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=110187&tt=230512_54x
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - c43f51d20000000000004c80930f1357
FF - user.js: extensions.BabylonToolbar_i.hardId - c43f51d20000000000004c80930f1357
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15494
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1722:41
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-BabylonToolbar - c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-06-27  00:48:09
ComboFix-quarantined-files.txt  2012-06-26 22:48
.
Vor Suchlauf: 13 Verzeichnis(se), 136.265.830.400 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 136.293.421.056 Bytes frei
.
- - End Of File - - E1E95ECF617DA4ED7E9D3FEB9C7305E2

cosinus 27.06.2012 13:18
Combofix - Scripten

1. Starte das Notepad (Start / Ausführen / notepad[Enter])

2. Jetzt füge mit copy/paste den ganzen Inhalt der untenstehenden Codebox in das Notepad Fenster ein.

Code:
Firefox::
FF - ProfilePath - c:\users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=110187&tt=230512_54x
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - c43f51d20000000000004c80930f1357
FF - user.js: extensions.BabylonToolbar_i.hardId - c43f51d20000000000004c80930f1357
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15494
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1722:41
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
3. Speichere im Notepad als CFScript.txt auf dem Desktop.

4. Deaktivere den Guard Deines Antivirenprogramms und eine eventuell vorhandene Software Firewall.
(Auch Guards von Ad-, Spyware Programmen und den Tea Timer (wenn vorhanden) !)

5. Dann ziehe die CFScript.txt auf die cofi.exe, so wie es im unteren Bild zu sehen ist. Damit wird Combofix neu gestartet.

http://users.pandora.be/bluepatchy/m...s/CFScript.gif

6. Nach dem Neustart (es wird gefragt ob Du neustarten willst), poste bitte die folgenden Log Dateien:
Combofix.txt

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

faulwurf 05.07.2012 12:58
Entschuldigung für die Dauer, bin die letzten Tage nicht dazu gekommen.
Hier die Log-Datei:
Code:
ComboFix 12-07-05.02 - Kathi 05.07.2012  13:26:23.2.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.43.1031.18.6038.4218 [GMT 2:00]
ausgeführt von:: c:\users\Kathi\Desktop\ComboFix.exe
Benutzte Befehlsschalter :: c:\users\Kathi\Desktop\CFScript.txt
AV: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee  Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\5907\Downloads\a31dcb19-c462-4b91-b5af-0c0196d8d501.dll
c:\programdata\PCDr\5907\Downloads\eb1a169a-7868-4b2c-ae46-52b55b4db151.dll
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-06-05 bis 2012-07-05  ))))))))))))))))))))))))))))))
.
.
2012-07-05 11:39 . 2012-07-05 11:39        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2012-07-05 11:39 . 2012-07-05 11:39        --------        d-----w-        c:\users\Default\AppData\Local\temp
2012-06-25 09:56 . 2012-06-25 09:56        --------        d-----w-        c:\users\Kathi\AppData\Local\Macromedia
2012-06-22 13:05 . 2012-06-22 13:05        --------        d-----w-        C:\_OTL
2012-06-22 10:56 . 2012-06-22 10:56        770384        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcr100.dll
2012-06-22 10:56 . 2012-06-22 10:56        421200        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcp100.dll
2012-06-21 14:57 . 2012-06-21 14:57        --------        d-----w-        c:\program files (x86)\ESET
2012-06-21 09:52 . 2012-06-02 22:19        2428952        ----a-w-        c:\windows\system32\wuaueng.dll
2012-06-21 09:52 . 2012-06-02 22:19        57880        ----a-w-        c:\windows\system32\wuauclt.exe
2012-06-21 09:52 . 2012-06-02 22:19        44056        ----a-w-        c:\windows\system32\wups2.dll
2012-06-21 09:52 . 2012-06-02 22:15        2622464        ----a-w-        c:\windows\system32\wucltux.dll
2012-06-21 09:52 . 2012-06-02 22:19        38424        ----a-w-        c:\windows\system32\wups.dll
2012-06-21 09:52 . 2012-06-02 22:19        701976        ----a-w-        c:\windows\system32\wuapi.dll
2012-06-21 09:52 . 2012-06-02 22:15        99840        ----a-w-        c:\windows\system32\wudriver.dll
2012-06-21 09:52 . 2012-06-02 13:19        186752        ----a-w-        c:\windows\system32\wuwebv.dll
2012-06-21 09:52 . 2012-06-02 13:15        36864        ----a-w-        c:\windows\system32\wuapp.exe
2012-06-19 15:35 . 2012-06-19 15:35        4967624        ----a-w-        c:\program files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2012-06-16 20:54 . 2012-06-16 20:54        --------        d-----w-        c:\users\Kathi\AppData\Roaming\Malwarebytes
2012-06-16 20:37 . 2012-06-16 20:37        --------        d-----w-        c:\programdata\Malwarebytes
2012-06-16 20:37 . 2012-06-16 20:37        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2012-06-16 20:37 . 2012-04-04 13:56        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-06-14 10:32 . 2012-07-05 11:18        --------        d-----w-        c:\programdata\Kaspersky Lab
2012-06-14 10:32 . 2012-06-14 10:32        --------        d-----w-        c:\program files (x86)\Kaspersky Lab
2012-06-13 09:47 . 2012-04-26 05:41        77312        ----a-w-        c:\windows\system32\rdpwsx.dll
2012-06-13 09:47 . 2012-04-26 05:41        149504        ----a-w-        c:\windows\system32\rdpcorekmts.dll
2012-06-13 09:47 . 2012-04-26 05:34        9216        ----a-w-        c:\windows\system32\rdrmemptylst.exe
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-24 13:41 . 2012-05-11 10:00        426184        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-24 13:41 . 2011-11-17 11:07        70344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-18 11:49 . 2012-05-29 20:45        405176        ----a-w-        c:\windows\SysWow64\Newtonsoft.Json.Net20.dll
.
.
(((((((((((((((((((((((((((((  SnapShot@2012-06-26_22.45.56  )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-26 22:56 . 2012-06-26 22:56        13318              c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
- 2012-06-22 13:07 . 2012-06-22 13:07        13318              c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
- 2009-07-14 04:54 . 2012-06-24 13:40        16384              c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-07-05 11:17        16384              c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-07-05 11:17        32768              c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-24 13:40        32768              c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-07-05 11:17        16384              c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-24 13:40        16384              c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-21 03:09 . 2012-06-27 09:45        50954              c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-07-05 11:18        39628              c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2011-11-21 20:40 . 2012-06-24 13:41        32768              c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-11-21 20:40 . 2012-06-27 11:20        32768              c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-06-24 13:41 . 2012-06-24 13:41        32768              c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-06-24 13:41 . 2012-06-27 11:20        32768              c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-06-27 11:20        16384              c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-24 13:41        16384              c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:46 . 2012-06-27 09:47        95344              c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2011-11-22 10:05 . 2012-07-05 11:18        9938              c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2876235365-1884908569-728010607-1002_UserData.bin
+ 2012-07-04 19:10 . 2012-07-04 19:10        8192              c:\windows\system32\Microsoft\Protect\Recovery\Recovery.dat
+ 2011-11-17 04:00 . 2012-06-26 22:55        6412              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat
- 2011-11-17 04:00 . 2012-06-22 13:07        6412              c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat
- 2012-06-22 13:07 . 2012-06-22 13:07        2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-06-27 09:42 . 2012-07-05 11:15        2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-06-27 09:42 . 2012-07-05 11:15        2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-06-22 13:07 . 2012-06-22 13:07        2048              c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-05-29 20:49 . 2012-06-24 13:40        262144              c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2012-05-29 20:49 . 2012-07-05 11:17        262144              c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2011-11-22 09:17 . 2012-07-04 14:54        287554              c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2011-11-22 13:27 . 2012-07-04 16:16        304840              c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
- 2009-07-14 02:36 . 2012-06-18 19:36        652600              c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-07-05 11:20        652600              c:\windows\system32\perfh009.dat
- 2010-11-21 06:50 . 2012-06-18 19:36        697322              c:\windows\system32\perfh007.dat
+ 2010-11-21 06:50 . 2012-07-05 11:20        697322              c:\windows\system32\perfh007.dat
+ 2009-07-14 02:36 . 2012-07-05 11:20        121274              c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2012-06-18 19:36        121274              c:\windows\system32\perfc009.dat
+ 2010-11-21 06:50 . 2012-07-05 11:20        148328              c:\windows\system32\perfc007.dat
- 2010-11-21 06:50 . 2012-06-18 19:36        148328              c:\windows\system32\perfc007.dat
- 2011-11-17 11:39 . 2012-06-22 13:07        720736              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-11-17 11:39 . 2012-06-26 22:56        720736              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2009-07-14 05:01 . 2012-06-22 13:07        315960              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-06-26 22:55        315960              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-06-20 12:50 . 2012-06-20 12:50        7647232              c:\windows\Installer\20d76.msi
+ 2011-11-22 10:01 . 2012-06-26 22:56        17825600              c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2876235365-1884908569-728010607-1002-8192.dat
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-09-05 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2011-04-13 503942]
"Dell DataSafe Online"="c:\program files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe" [2010-08-26 1117528]
"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]
"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-18 50472]
"BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2011-08-12 75048]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544]
"NeroLauncher"="c:\program files (x86)\Nero\SyncUP\NeroLauncher.exe" [2011-07-07 75064]
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2011-05-30 885760]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
"HTC Sync Loader"="c:\program files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2012-04-17 651264]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-24 202296]
.
c:\users\Kathi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2011-11-25 67128]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2011-11-25 1041920]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages        REG_MULTI_SZ          kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/11/17 05:57;c:\program files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [2011-08-12 248304]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-06-19 3048136]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-06-05 160944]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-24 250056]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys [2011-08-08 299008]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2010-02-27 158976]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-05-17 34200]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2010-12-15 174168]
R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2010-02-22 11776]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-22 113120]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-28 340240]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2011-03-04 174184]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\drivers\nvstusb.sys [2010-12-12 121960]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2011-11-23 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-04-22 25960]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [2010-08-20 21616]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2011-03-04 11864]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2011-03-10 29488]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-09-05 64952]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-08-08 1166848]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-04 687400]
S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-22 2009704]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-03-23 87040]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-09-22 1692480]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-21 378472]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [2010-12-13 27760]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [2011-08-08 299008]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [2011-05-19 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-07-19 282624]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2011-01-30 86016]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-07-20 59904]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-16 317440]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-05-17 25496]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-11-02 22544]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [2011-08-04 8604672]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2011-02-10 82432]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2011-02-10 181760]
S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [2010-07-13 29288]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - CLKMDRV10_9EC60124
.
Inhalt des "geplante Tasks" Ordners
.
2012-07-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-11 13:41]
.
2012-07-05 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\Dell Support Center\uaclauncher.exe [2012-04-13 06:11]
.
2012-07-05 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\Dell Support Center\uaclauncher.exe [2012-04-13 06:11]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-02-18 6611048]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-01-18 2188904]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-04-22 312936]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-05 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-05 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-05 416024]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-28 1935120]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"Stage Remote"="c:\program files (x86)\Dell\Stage Remote\StageRemote.exe" [2011-06-28 2022976]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2011-05-30 2055816]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 134416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Free YouTube to MP3 Converter - c:\users\Kathi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
TCP: DhcpNameServer = 212.186.211.21 195.34.133.21
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.at/
FF - prefs.js: network.proxy.type - 0
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-07-05  13:56:10
ComboFix-quarantined-files.txt  2012-07-05 11:56
ComboFix2.txt  2012-06-26 22:48
.
Vor Suchlauf: 15 Verzeichnis(se), 140.477.886.464 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 140.582.768.640 Bytes frei
.
- - End Of File - - 1038B97390725186167BC57523F04BFF
lg Faulwurf

cosinus 05.07.2012 13:31
Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

faulwurf 09.07.2012 12:12
Mahlzeit,
gmer wurde nicht ausgeführt -->64bit-System<-- oder trotzdem machen?

OSAM-Log
Code:
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 12:44:33 on 09.07.2012

OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 64-bit
Default Browser: Mozilla Corporation Firefox 13.0.1

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"Adobe Flash Player Updater.job" - "Adobe Systems Incorporated" - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
"PCDoctorBackgroundMonitorTask.job" - "PC-Doctor, Inc." - C:\Program Files\Dell Support Center\uaclauncher.exe
"SystemToolsDailyTest.job" - "PC-Doctor, Inc." - C:\Program Files\Dell Support Center\uaclauncher.exe

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"catchme" (catchme) - ? - C:\ComboFix\catchme.sys  (File not found)
"Sftfs" (Sftfs) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftfslh.sys
"Sftplay" (Sftplay) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftplaylh.sys
"Sftredir" (Sftredir) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftredirlh.sys
"Sftvol" (Sftvol) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftvollh.sys
"WimFltr" (WimFltr) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\wimfltr.sys

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} "Album Download IE Asynchronous Pluggable Protocol Interface" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
{9462A756-7B47-47BC-8C80-C34B9B80B32B} "BackWeb GA Pluggable Protocol" - "Logitech Inc." - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
{91774881-D725-4E58-B298-07617B9B86A8} "Skype IE add-on Pluggable Protocol" - "Skype Technologies S.A." - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{AE424E85-F6DF-4910-A6A9-438797986431} "OpenOffice.org Property Handler" - ? - C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\propertyhdl.dll
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files (x86)\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\PhotoViewerShim.dll
{0563DB41-F538-4B37-A92D-4659049B7766} "WLMD Message Handler" - ? -  (File not found | COM-object registry key not found)
{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab
{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_27" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\npjpi160_27.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{4248FE82-7FCB-46AC-B270-339F08212110} "&Virtuelle Tastatur" - "Kaspersky Lab ZAO" - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll
{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "@C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004" - "Microsoft Corporation" - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
{CCF151D8-D089-449F-A5A4-D9909053F20F} "Li&nks untersuchen" - "Kaspersky Lab ZAO" - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll
{898EA8C8-E7FF-479B-8935-AEC46303B9E5} "Skype Click to Call" - "Skype Technologies S.A." - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{E33CF602-D945-461A-83F0-819F76A199F8} "FilterBHO Class" - "Kaspersky Lab ZAO" - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll
{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} "IEVkbdBHO Class" - "Kaspersky Lab ZAO" - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} "Skype Browser Helper" - "Skype Technologies S.A." - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID-Anmelde-Hilfsprogramm" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

[LSA Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Lsa )-----
"Security Packages" - "Microsoft Corp." - C:\Windows\system32\livessp.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"OpenOffice.org 3.3.lnk" - ? - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe  (Shortcut exists | File found, but it contains no detailed information | File exists)
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
"Logitech Desktop Messenger.lnk" - "Logitech Inc." - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe  (Shortcut exists | File exists)
"Logitech SetPoint.lnk" - "Logitech Inc." - C:\Program Files\Logitech\SetPoint\SetPoint.exe  (Shortcut exists | File exists)
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"AccuWeatherWidget" - ? - "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"AVP" - "Kaspersky Lab ZAO" - "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe"
"BDRegion" - "cyberlink" - c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
"Dell DataSafe Online" - "Dell, Inc." - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
"Dell Webcam Central" - "Creative Technology Ltd" - "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
"Desktop Disc Tool" - ? - "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
"HP Software Update" - "Hewlett-Packard" - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
"HTC Sync Loader" - ? - "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
"NeroLauncher" - ? - C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900  (File found, but it contains no detailed information)
"PDVD9LanguageShortcut" - "CyberLink Corp." - "c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
"RemoteControl9" - "CyberLink Corp." - "c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
"RoxWatchTray" - "Sonic Solutions" - "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"HP Discovery Port Monitor (HP Officejet Pro 8500 A910)" - "Hewlett-Packard Co." - C:\Windows\system32\HPDiscoPM5312.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101" (WMPNetworkSvc) - ? - "C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe"  (File not found)
"@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200" (NAUpdate) - "Nero AG" - C:\Program Files (x86)\Nero\Update\NASvc.exe
"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
"Adobe Flash Player Update Service" (AdobeFlashPlayerUpdateSvc) - "Adobe Systems Incorporated" - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
"Application Virtualization Client" (sftlist) - "Microsoft Corporation" - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
"Application Virtualization Service Agent" (sftvsa) - "Microsoft Corporation" - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
"ASP.NET State Service" (aspnet_state) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
"Bluetooth Device Monitor" (Bluetooth Device Monitor) - "Intel Corporation" - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
"Bluetooth Media Service" (Bluetooth Media Service) - "Intel Corporation" - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
"Bluetooth OBEX Service" (Bluetooth OBEX Service) - "Intel Corporation" - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
"Client Virtualization Handler" (cvhsvc) - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
"CyberLink Product - 2011/11/17 05:57:48" (CLKMSVC10_9EC60124) - "CyberLink" - c:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe
"Dell DataSafe Online" (NOBU) - "Dell, Inc." - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
"Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service" (BTHSSecurityMgr) - "Intel(R) Corporation" - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
"Intel(R) Management and Security Application Local Management Service" (LMS) - "Intel Corporation" - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
"Intel(R) Management and Security Application User Notification Service" (UNS) - "Intel Corporation" - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
"Intel(R) PROSet/Wireless Event Log" (EvtEng) - "Intel(R) Corporation" - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
"Intel(R) PROSet/Wireless Registry Service" (RegSrvc) - "Intel(R) Corporation" - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
"Intel(R) Turbo Boost Technology Monitor 2.0" (TurboBoost) - "Intel(R) Corporation" - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
"Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service" (AMPPALR3) - "Intel Corporation" - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
"Internet Pass-Through Service" (PassThru Service) - ? - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
"Kaspersky Anti-Virus Service" (AVP) - "Kaspersky Lab ZAO" - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
"Microsoft .NET Framework NGEN v4.0.30319_X64" (clr_optimization_v4.0.30319_64) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
"NVIDIA Driver Helper Service" (NVSvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe
"NVIDIA Stereoscopic 3D Driver Service" (Stereo Service) - "NVIDIA Corporation" - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
"NVIDIA Update Service Daemon" (nvUpdatusService) - "NVIDIA Corporation" - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
"Office  Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"Office Software Protection Platform" (osppsvc) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
"Roxio Hard Drive Watcher 12" (RoxWatch12) - "Sonic Solutions" - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
"RoxMediaDB12OEM" (RoxMediaDB12OEM) - "Sonic Solutions" - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
"Skype C2C Service" (Skype C2C Service) - "Skype Technologies S.A." - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
"Skype Updater" (SkypeUpdate) - "Skype Technologies" - C:\Program Files (x86)\Skype\Updater\Updater.exe
"SoftThinks Agent Service" (SftService) - "SoftThinks SAS" - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
"stllssvr" (stllssvr) - "MicroVision Development, Inc." - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
"Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corp." - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
"Wireless PAN DHCP Server" (MyWiFiDHCPDNS) - ? - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"WindowsLive Local NSP" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
"WindowsLive NSP" - "Microsoft Corp." - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
Das avast Tool hat ohne Meldung einfach aufgehört zu scannen, konnte zwar den Log speichern bin mir aber nicht sicher das da alles korrekt abgelaufen ist.
Log:
Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-07-09 12:57:58
-----------------------------
12:57:58.876    OS Version: Windows x64 6.1.7601 Service Pack 1
12:57:58.876    Number of processors: 4 586 0x2A07
12:57:58.876    ComputerName: KATHI-PC  UserName: Kathi
12:58:05.443    Initialize success
12:58:08.797    AVAST engine defs: 12070900
12:58:12.682    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
12:58:12.682    Disk 0 Vendor: ST950042 0002 Size: 476940MB BusType: 3
12:58:12.682    Disk 0 MBR read successfully
12:58:12.697    Disk 0 MBR scan
12:58:12.697    Disk 0 Windows VISTA default MBR code
12:58:12.697    Disk 0 Partition 1 00    DE Dell Utility Dell 8.0      101 MB offset 63
12:58:12.713    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        20000 MB offset 212992
12:58:12.729    Disk 0 Partition 3 00    07    HPFS/NTFS NTFS      456835 MB offset 41172992
12:58:12.744    Disk 0 scanning C:\Windows\system32\drivers
12:58:25.131    Service scanning
12:58:47.158    Modules scanning
12:58:47.158    Disk 0 trace - called modules:
12:58:47.189    ntoskrnl.exe CLASSPNP.SYS disk.sys stdcfltn.sys ACPI.sys iaStor.sys
12:58:47.189    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007e5f060]
12:58:47.189    3 CLASSPNP.SYS[fffff8800205143f] -> nt!IofCallDriver -> [0xfffffa8007cd9cb0]
12:58:47.189    5 stdcfltn.sys[fffff8800237bc52] -> nt!IofCallDriver -> [0xfffffa8006302ba0]
12:58:47.189    7 ACPI.sys[fffff88000f9c7a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80062ed050]
12:58:48.827    AVAST engine scan C:\Windows
12:58:53.039    AVAST engine scan C:\Windows\system32
13:01:32.409    AVAST engine scan C:\Windows\system32\drivers
13:01:46.855    AVAST engine scan C:\Users\Kathi
13:08:22.659    Disk 0 MBR has been saved successfully to "C:\Users\Kathi\Desktop\MBR.dat"
13:08:22.659    The log file has been saved successfully to "C:\Users\Kathi\Desktop\aswMBR.txt"
lg Faulwurf

cosinus 09.07.2012 13:04
Zitat:
gmer wurde nicht ausgeführt -->64bit-System<-- oder trotzdem machen?
Versuch es ruhig, hin und wieder läuft GMER auf einem 64-Bit-Windows

faulwurf 09.07.2012 14:02
Hat funktioniert.
Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-07-09 15:00:56
Windows 6.1.7601 Service Pack 1
Running: gwb4qxv7.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\4c80930f135a                     
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\4c80930f135a@0024033d809e        0xA1 0x94 0x82 0x9D ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\4c80930f135a@64a76954e179        0x13 0x99 0x76 0xBA ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\4c80930f135a@e899c414f97e        0x95 0x16 0x33 0x37 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\4c80930f135a (not active ControlSet) 
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\4c80930f135a@0024033d809e            0xA1 0x94 0x82 0x9D ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\4c80930f135a@64a76954e179            0x13 0x99 0x76 0xBA ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\4c80930f135a@e899c414f97e            0x95 0x16 0x33 0x37 ...

---- EOF - GMER 1.0.15 ----
Habs mit dem avast tool nochmal probiert, nach einer Stunde ging dann irgendwann doch etwas weiter aber daraufhin stürzte das Programm ab.

lg Faulwurf

cosinus 09.07.2012 14:08
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

faulwurf 09.07.2012 19:19
Hi,
Mbam:
Code:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.07.09.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Kathi :: KATHI-PC [Administrator]

09.07.2012 15:09:52
mbam-log-2012-07-09 (15-09-52).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 650493
Laufzeit: 1 Stunde(n), 40 Minute(n), 50 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
und der etwas beunruhigende SuperAntiSpyware-Log:
Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 07/09/2012 at 08:15 PM

Application Version : 5.5.1006

Core Rules Database Version : 8864
Trace Rules Database Version: 6676

Scan type      : Complete Scan
Total Scan Time : 03:00:37

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 688
Memory threats detected  : 0
Registry items scanned    : 71438
Registry threats detected : 0
File items scanned        : 378391
File threats detected    : 641

Adware.Tracking Cookie
        C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Cookies\SCK4VL4O.txt [ /serving-sys.com ]
        C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Cookies\1P9567YK.txt [ /2o7.net ]
        C:\Users\Kathi\AppData\Roaming\Microsoft\Windows\Cookies\2W4JXXO8.txt [ /bs.serving-sys.com ]
        C:\USERS\KATHI\AppData\Roaming\Microsoft\Windows\Cookies\Low\TOJBWFR2.txt [ Cookie:kathi@server.lon.liveperson.net/ ]
        C:\USERS\KATHI\AppData\Roaming\Microsoft\Windows\Cookies\Low\M6WOE4PU.txt [ Cookie:kathi@c.atdmt.com/ ]
        C:\USERS\KATHI\AppData\Roaming\Microsoft\Windows\Cookies\Low\RDQGGQNY.txt [ Cookie:kathi@www.etracker.de/ ]
        C:\USERS\KATHI\AppData\Roaming\Microsoft\Windows\Cookies\Low\0HHP2NSL.txt [ Cookie:kathi@invitemedia.com/ ]
        C:\USERS\KATHI\AppData\Roaming\Microsoft\Windows\Cookies\Low\L1X7T0B5.txt [ Cookie:kathi@liveperson.net/ ]
        C:\USERS\KATHI\AppData\Roaming\Microsoft\Windows\Cookies\Low\6O6XODAB.txt [ Cookie:kathi@www.ardmediathek.de/ ]
        C:\USERS\KATHI\AppData\Roaming\Microsoft\Windows\Cookies\Low\CPS1WQ6X.txt [ Cookie:kathi@imrworldwide.com/cgi-bin ]
        C:\USERS\KATHI\Cookies\1P9567YK.txt [ Cookie:kathi@2o7.net/ ]
        C:\USERS\KATHI\Cookies\2W4JXXO8.txt [ Cookie:kathi@bs.serving-sys.com/ ]
        delivery.ibanner.de [ C:\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\RCW86CVL ]
        .edsa.122.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .austrianairlines.122.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        track.webtrekk.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .megaclick.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .f.megaclick.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .webresint.122.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .thelabelfinder.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .www.thelabelfinder.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        webcount.feratel.at [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .a.revenuemax.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .autoscout24.112.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tracking.3gnet.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .htc.122.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        s09.flagcounter.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .twittercounter.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .twittercounter.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .totalyfreesex.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .totalyfreesex.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        eas4.emediate.eu [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tracking.oe24.at [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        wstat.wibiya.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .xxxlutz.at [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .xxxlutz.at [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .firstchoice.112.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .h.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .c.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .ehg-firstchoice.hitbox.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .hitbox.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .lexmark.122.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        mediathek.daserste.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        7.rotator.wigetmedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .xm.xtendmedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adnet.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .account.frogster-online.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .c1.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .c1.atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adxpose.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .ibanner.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        7.rotator.wigetmedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        bridge.ame.admarketplace.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .admarketplace.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .kaspersky.122.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tto2.traffictrack.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ads.247activemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        server.adform.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        server.adformdsp.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adformdsp.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .aim4media.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .lucidmedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adserver.adtechus.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .blogads.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .blogads.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .clickbank.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .clickbank.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.adnet.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.adnet.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .advertisingenhanced.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .advertisingenhanced.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        livestat.derstandard.at [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .myroitracking.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        mediaservices-d.openxenterprise.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .findhe.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        trekmedia.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        trekmedia.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .aerlingus.122.2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .accounts.google.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.netxmedia.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tag.tlvmedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        tag.tlvmedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        eas4.emediate.eu [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.adition.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.adition.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        server.adform.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .unister-adservices.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .rotator.wigetmedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .quartermedia.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .quartermedia.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .weborama.fr [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .weborama.fr [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .weborama.fr [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .weborama.fr [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .weboramadata.solution.weborama.fr [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .weboramadata.solution.weborama.fr [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        server.lon.liveperson.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        mediathek.daserste.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZA9WU5MW.DEFAULT\COOKIES.SQLITE ]
        .divx.112.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        cdn2.themis-media.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        cdn5.specificclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        files.youporn.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        findel.scene7.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        imagesrv.adition.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        media.scanscout.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        mediathek.daserste.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        secure-us.imrworldwide.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        www.euros4click.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\6WNJH8J8 ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[9].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVING-SYS[7].TXT [ /SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVING-SYS[6].TXT [ /SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@TRADEDOUBLER[4].TXT [ /TRADEDOUBLER ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@WWW.ETRACKER[2].TXT [ /WWW.ETRACKER ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@TRAFFICTRACK[1].TXT [ /TRAFFICTRACK ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@TRADEDOUBLER[3].TXT [ /TRADEDOUBLER ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT.COMBING[5].TXT [ /ATDMT.COMBING ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@BS.SERVING-SYS[8].TXT [ /BS.SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@BS.SERVING-SYS[1].TXT [ /BS.SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT.COMBING[8].TXT [ /ATDMT.COMBING ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVER.LON.LIVEPERSON[4].TXT [ /SERVER.LON.LIVEPERSON ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[10].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@DOUBLECLICK[2].TXT [ /DOUBLECLICK ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVER.LON.LIVEPERSON[5].TXT [ /SERVER.LON.LIVEPERSON ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@AD.YIELDMANAGER[2].TXT [ /AD.YIELDMANAGER ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[2].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ZEDO[3].TXT [ /ZEDO ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@APMEBF[1].TXT [ /APMEBF ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[3].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@BS.SERVING-SYS[4].TXT [ /BS.SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@STATSE.WEBTRENDSLIVE[1].TXT [ /STATSE.WEBTRENDSLIVE ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@MEDIAPLEX[3].TXT [ /MEDIAPLEX ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT.COMBING[2].TXT [ /ATDMT.COMBING ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@KONTERA[2].TXT [ /KONTERA ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@CHITIKA[1].TXT [ /CHITIKA ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVING-SYS[2].TXT [ /SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[6].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@BS.SERVING-SYS[2].TXT [ /BS.SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVING-SYS[4].TXT [ /SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@WEBMASTERPLAN[2].TXT [ /WEBMASTERPLAN ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT.COMBING[4].TXT [ /ATDMT.COMBING ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[8].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[7].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVING-SYS[1].TXT [ /SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@CONTENT.YIELDMANAGER[1].TXT [ /CONTENT.YIELDMANAGER ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ADFARM1.ADITION[2].TXT [ /ADFARM1.ADITION ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@MEDIATHEK.DASERSTE[2].TXT [ /MEDIATHEK.DASERSTE ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@STATCOUNTER[1].TXT [ /STATCOUNTER ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT.COMBING[1].TXT [ /ATDMT.COMBING ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@MEDIAPLEX[2].TXT [ /MEDIAPLEX ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[5].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ADX.CHIP[2].TXT [ /ADX.CHIP ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@BS.SERVING-SYS[3].TXT [ /BS.SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@AUSTRIANAIRLINES.122.2O7[1].TXT [ /AUSTRIANAIRLINES.122.2O7 ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@APMEBF[2].TXT [ /APMEBF ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ZEDO[2].TXT [ /ZEDO ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVING-SYS[3].TXT [ /SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@TRADEDOUBLER[2].TXT [ /TRADEDOUBLER ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@BS.SERVING-SYS[5].TXT [ /BS.SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@MSNPORTAL.112.2O7[1].TXT [ /MSNPORTAL.112.2O7 ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT.COMBING[3].TXT [ /ATDMT.COMBING ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ADFARM1.ADITION[3].TXT [ /ADFARM1.ADITION ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[4].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ZANOX[1].TXT [ /ZANOX ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@DOUBLECLICK[1].TXT [ /DOUBLECLICK ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[11].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ADTECH[1].TXT [ /ADTECH ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVER.LON.LIVEPERSON[3].TXT [ /SERVER.LON.LIVEPERSON ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@SERVER.LON.LIVEPERSON[1].TXT [ /SERVER.LON.LIVEPERSON ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT.COMBING[7].TXT [ /ATDMT.COMBING ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@BS.SERVING-SYS[6].TXT [ /BS.SERVING-SYS ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@ATDMT[1].TXT [ /ATDMT ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@FASTCLICK[2].TXT [ /FASTCLICK ]
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\KATHI@STATCOUNTER[2].TXT [ /STATCOUNTER ]
        .msnportal.112.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adxpose.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .austrianairlines.122.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .gostats.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .estat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adserver.adtechus.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .themis-media.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .qksrv.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .qksrv.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.qksrv.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .thinkgeek.112.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        media.gan-online.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        media.gan-online.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        media.gan-online.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .azjmp.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .azjmp.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        uk.sitestat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        uk.sitestat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        rotator.adjuggler.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        adsrv.admediate.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        adsrv.admediate.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        track.webtrekk.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tyrolean.122.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .greysoundtracks.free.fr [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .greysoundtracks.free.fr [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .edsa.122.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        tracking.weinwelt.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        tracking.weinwelt.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        stat.aldi.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        stat.aldi.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .webresint.122.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        fr.sitestat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        fr.sitestat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .hertz.122.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .careers.peopleclick.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .careers.peopleclick.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        wstat.wibiya.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .premiumtv.122.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        user.lucidmedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .roitracking.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        eas4.emediate.eu [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        de.partypoker.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .xxxlutz.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .xxxlutz.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .advertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .xm.xtendmedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .komtrack.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .komtrack.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        adsrv1.admediate.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ads.247activemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .de.partypoker.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .de.partypoker.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .de.partypoker.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .traveladvertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .traveladvertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .traveladvertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .traveladvertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .yadro.ru [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .snapfish.112.2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        adserv.chirurgie-portal.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .friendquestions.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .friendquestions.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adcentriconline.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .clickfuse.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ads.rokatraffic.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        stat.onestat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .shinystat.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        tracking.oe24.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.star-advertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.star-advertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.star-advertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.star-advertising.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ads.crakmedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.crakmedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .ads.crakmedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.mediamarkt.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .mediabrandsww.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .yieldmanager.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .content.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .prizetrack.info [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tracking.parktastic.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .content.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .lucidmedia.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.docfinder.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .docfinder.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .docfinder.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .docfinder.at [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        server.lon.liveperson.net [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\USERS\KATHI\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\S49P1GCM.DEFAULT\COOKIES.SQLITE ]

Rootkit.Agent/Gen
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\PROGRAM FILES\BOB\BOB INTERNET\48200.IDX
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\PROGRAM FILES\BOB\BOB INTERNET\73720.IDX

Trojan.Agent/Gen-Yoddos
        C:\USERS\KATHI\SICHERUNG FESTPLATTE SONY\LOKALER DATENTRäGER\PROGRAM FILES\WINRAR\DEFAULT.SFX
lg Faulwurf

cosinus 10.07.2012 09:43
Sieht ok aus, da wurden nur Cookies gefunden und drei Fehlalarme waren dabei
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

faulwurf 10.07.2012 12:15
Nunja, habs gerade nochmal ausprobiert. Werde leider immer noch über rocketnews etc. weitergeleitet :confused:
Aber danke für den Tipp mit den Cookies, werde mir da vlt das ein oder andere Tool runterladen, bin zb. von Adblock ziehmlich begeistert!!
lg Faulwurf

cosinus 10.07.2012 14:16
adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren

Downloade Dir bitte AdwCleaner auf deinen Desktop.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Search.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

faulwurf 10.07.2012 14:29
Ging recht schnell

Code:
# AdwCleaner v1.701 - Logfile created 07/10/2012 at 15:28:23
# Updated 02/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Kathi - KATHI-PC
# Running from : C:\Users\Kathi\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Users\Kathi\AppData\Local\Conduit
Folder Found : C:\Users\Kathi\AppData\LocalLow\Conduit
Folder Found : C:\Users\Kathi\AppData\LocalLow\DVDVideoSoftTB
Folder Found : C:\Users\Kathi\AppData\Roaming\OpenCandy
Folder Found : C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\ConduitCommon
Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\Program Files (x86)\DVDVideoSoftTB
File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml

***** [Registry] *****
[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKLM\SOFTWARE\Babylon
Key Found : HKLM\SOFTWARE\BabylonToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\b
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\DVDVideoSoftTB
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
[x64] Key Found : HKCU\Software\AppDataLow\Software\Conduit
[x64] Key Found : HKCU\Software\AppDataLow\Toolbar
[x64] Key Found : HKCU\Software\BabylonToolbar
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
[x64] Key Found : HKLM\SOFTWARE\Classes\b
[x64] Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
[x64] Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
[x64] Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
[x64] Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

***** [Registre - GUID] *****

Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v13.0.1 (de)

Profile name : default
File : C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\prefs.js

Found : user_pref("CT2269050..clientLogIsEnabled", false);
Found : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2269050.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Found : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2269050.BrowserCompStateIsOpen_129681780741097243", true);
Found : user_pref("CT2269050.CTID", "CT2269050");
Found : user_pref("CT2269050.CurrentServerDate", "21-6-2012");
Found : user_pref("CT2269050.DSInstall", true);
Found : user_pref("CT2269050.DialogsAlignMode", "LTR");
Found : user_pref("CT2269050.DialogsGetterLastCheckTime", "Wed Jun 20 2012 16:07:01 GMT+0200");
Found : user_pref("CT2269050.DownloadReferralCookieData", "");
Found : user_pref("CT2269050.EMailNotifierPollDate", "Wed Jan 25 2012 12:49:16 GMT+0100");
Found : user_pref("CT2269050.EnableClickToSearchBox", false);
Found : user_pref("CT2269050.EnableSearchHistory", false);
Found : user_pref("CT2269050.EnableSearchSuggest", false);
Found : user_pref("CT2269050.FirstServerDate", "25-1-2012");
Found : user_pref("CT2269050.FirstTime", true);
Found : user_pref("CT2269050.FirstTimeFF3", true);
Found : user_pref("CT2269050.FixPageNotFoundErrors", false);
Found : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2269050.HPInstall", true);
Found : user_pref("CT2269050.HasUserGlobalKeys", true);
Found : user_pref("CT2269050.HomePageProtectorEnabled", true);
Found : user_pref("CT2269050.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=[...]
Found : user_pref("CT2269050.Initialize", true);
Found : user_pref("CT2269050.InitializeCommonPrefs", true);
Found : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2269050.InstallationType", "UnknownIntegration");
Found : user_pref("CT2269050.InstalledDate", "Wed Jan 25 2012 12:49:16 GMT+0100");
Found : user_pref("CT2269050.InvalidateCache", false);
Found : user_pref("CT2269050.IsGrouping", false);
Found : user_pref("CT2269050.IsInitSetupIni", true);
Found : user_pref("CT2269050.IsMulticommunity", false);
Found : user_pref("CT2269050.IsOpenThankYouPage", false);
Found : user_pref("CT2269050.IsOpenUninstallPage", false);
Found : user_pref("CT2269050.IsProtectorsInit", true);
Found : user_pref("CT2269050.LanguagePackLastCheckTime", "Thu Jun 21 2012 23:50:51 GMT+0200");
Found : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2269050.LastLogin_3.12.0.7", "Sat Apr 28 2012 21:47:21 GMT+0200");
Found : user_pref("CT2269050.LastLogin_3.12.2.3", "Sun Jun 03 2012 22:20:20 GMT+0200");
Found : user_pref("CT2269050.LastLogin_3.13.0.6", "Fri Jun 22 2012 11:37:59 GMT+0200");
Found : user_pref("CT2269050.LastLogin_3.9.0.3", "Wed Jan 25 2012 12:49:21 GMT+0100");
Found : user_pref("CT2269050.LatestVersion", "3.13.0.6");
Found : user_pref("CT2269050.Locale", "en");
Found : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Found : user_pref("CT2269050.MCDetectTooltipShow", false);
Found : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Found : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);
Found : user_pref("CT2269050.OriginalFirstVersion", "3.9.0.3");
Found : user_pref("CT2269050.RadioLastCheckTime", "Wed Jan 25 2012 12:49:23 GMT+0100");
Found : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Found : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Found : user_pref("CT2269050.RadioShrinked", "shrinked");
Found : user_pref("CT2269050.RadioShrinkedFromSetup", true);
Found : user_pref("CT2269050.SHRINK_TOOLBAR", 0);
Found : user_pref("CT2269050.SavedHomepage", "chrome://branding/locale/browserconfig.properties");
Found : user_pref("CT2269050.SearchBackToDefaultEngine", false);
Found : user_pref("CT2269050.SearchBoxWidth", 100);
Found : user_pref("CT2269050.SearchCaption", "DVDVideoSoftTB Customized Web Search");
Found : user_pref("CT2269050.SearchEngineBeforeUnload", "DVDVideoSoftTB Customized Web Search");
Found : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
Found : user_pref("CT2269050.SearchInNewTabEnabled", true);
Found : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Thu Jun 21 2012 23:47:36 GMT+0200");
Found : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2269050.SearchInNewTabUserEnabled", false);
Found : user_pref("CT2269050.SearchProtectorEnabled", true);
Found : user_pref("CT2269050.SearchProtectorToolbarDisabled", false);
Found : user_pref("CT2269050.SendProtectorDataViaLogin", true);
Found : user_pref("CT2269050.ServiceMapLastCheckTime", "Thu Jun 21 2012 17:14:17 GMT+0200");
Found : user_pref("CT2269050.SettingsLastCheckTime", "Fri Jun 22 2012 11:35:51 GMT+0200");
Found : user_pref("CT2269050.SettingsLastUpdate", "1340130112");
Found : user_pref("CT2269050.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13");
Found : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Wed Jan 25 2012 12:49:13 GMT+0100");
Found : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1312887586");
Found : user_pref("CT2269050.ToolbarShrinkedFromSetup", true);
Found : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");
Found : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Found : user_pref("CT2269050.UserID", "UN94038792108749311");
Found : user_pref("CT2269050.ValidationData_Toolbar", 2);
Found : user_pref("CT2269050.WeatherNetwork", "");
Found : user_pref("CT2269050.WeatherPollDate", "Wed Jan 25 2012 12:49:23 GMT+0100");
Found : user_pref("CT2269050.WeatherUnit", "C");
Found : user_pref("CT2269050.alertChannelId", "666138");
Found : user_pref("CT2269050.approveUntrustedApps", true);
Found : user_pref("CT2269050.autoDisableScopes", -1);
Found : user_pref("CT2269050.backendstorage.cbfirsttime", "576564204A616E20323520323031322031323A34393A34342[...]
Found : user_pref("CT2269050.backendstorage.shoppingapp.gk.exipres", "4D6F6E204A616E20333020323031322031323A[...]
Found : user_pref("CT2269050.backendstorage.shoppingapp.gk.geolocation", "61757374726961");
Found : user_pref("CT2269050.components.1000034", false);
Found : user_pref("CT2269050.components.1000082", false);
Found : user_pref("CT2269050.components.1000234", false);
Found : user_pref("CT2269050.components.129023235807856892", false);
Found : user_pref("CT2269050.components.129121052374999726", false);
Found : user_pref("CT2269050.components.129351672002618989", false);
Found : user_pref("CT2269050.components.129351776130744254", false);
Found : user_pref("CT2269050.components.129391330693125668", false);
Found : user_pref("CT2269050.components.129466585396013141", false);
Found : user_pref("CT2269050.components.129466585399606892", false);
Found : user_pref("CT2269050.components.129681780741097243", false);
Found : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Found : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Wed Jan 25 2012 12:49:16 GMT+0100");
Found : user_pref("CT2269050.homepageProtectorEnableByLogin", true);
Found : user_pref("CT2269050.initDone", true);
Found : user_pref("CT2269050.isAppTrackingManagerOn", true);
Found : user_pref("CT2269050.isFirstRadioInstallation", false);
Found : user_pref("CT2269050.isSearchProtectorNotifyChanges", false);
Found : user_pref("CT2269050.myStuffEnabled", true);
Found : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2269050.revertSettingsEnabled", true);
Found : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);
Found : user_pref("CT2269050.searchProtectorEnableByLogin", true);
Found : user_pref("CT2269050.testingCtid", "");
Found : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Thu Jun 21 2012 17:14:17 GMT+0200");
Found : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Wed Jan 25 2012 12:49:24 GMT+0100");
Found : user_pref("CT2269050.usageEnabled", false);
Found : user_pref("CT2269050.usagesFlag", 2);
Found : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2269050&Search[...]
Found : user_pref("CommunityToolbar.ConduitSearchList", "DVDVideoSoftTB Customized Web Search");
Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/maxi.gif"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play_mini[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"21b[...]
Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Kathi\\AppData\\Roaming\\Mozilla\\F[...]
Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3");
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Found : user_pref("CommunityToolbar.ToolbarsList", "CT2269050");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");
Found : user_pref("CommunityToolbar.ToolbarsList4", "CT2269050");
Found : user_pref("CommunityToolbar.globalUserId", "2182b824-36e9-47ec-bbda-0b829cb3e2db");
Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Jan 25 2012 12:49:2[...]
Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.notifications.locale", "en");
Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Jan 25 2012 12:49:14 GMT+0100");
Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.notifications.userId", "392505fd-867e-4bdf-9f3c-64a6563beb51");
Found : user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Found : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]

*************************

AdwCleaner[R1].txt - [22848 octets] - [10/07/2012 15:28:23]

########## EOF - C:\AdwCleaner[R1].txt - [22977 octets] ##########

cosinus 10.07.2012 20:24
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Delete.
  • Bestätige jeweils mit Ok.
  • Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.

faulwurf 10.07.2012 21:42
Bitteeeschön
Code:
# AdwCleaner v1.701 - Logfile created 07/10/2012 at 22:37:15
# Updated 02/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Kathi - KATHI-PC
# Running from : C:\Users\Kathi\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Users\Kathi\AppData\Local\Conduit
Folder Deleted : C:\Users\Kathi\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Kathi\AppData\LocalLow\DVDVideoSoftTB
Folder Deleted : C:\Users\Kathi\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\ConduitCommon
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\DVDVideoSoftTB
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml

***** [Registry] *****
[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\DVDVideoSoftTB
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar

***** [Registre - GUID] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v13.0.1 (de)

Profile name : default
File : C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\prefs.js

C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\user.js ... Deleted !

Deleted : user_pref("CT2269050..clientLogIsEnabled", false);
Deleted : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2269050.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129681780741097243", true);
Deleted : user_pref("CT2269050.CTID", "CT2269050");
Deleted : user_pref("CT2269050.CurrentServerDate", "21-6-2012");
Deleted : user_pref("CT2269050.DSInstall", true);
Deleted : user_pref("CT2269050.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2269050.DialogsGetterLastCheckTime", "Wed Jun 20 2012 16:07:01 GMT+0200");
Deleted : user_pref("CT2269050.DownloadReferralCookieData", "");
Deleted : user_pref("CT2269050.EMailNotifierPollDate", "Wed Jan 25 2012 12:49:16 GMT+0100");
Deleted : user_pref("CT2269050.EnableClickToSearchBox", false);
Deleted : user_pref("CT2269050.EnableSearchHistory", false);
Deleted : user_pref("CT2269050.EnableSearchSuggest", false);
Deleted : user_pref("CT2269050.FirstServerDate", "25-1-2012");
Deleted : user_pref("CT2269050.FirstTime", true);
Deleted : user_pref("CT2269050.FirstTimeFF3", true);
Deleted : user_pref("CT2269050.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2269050.HPInstall", true);
Deleted : user_pref("CT2269050.HasUserGlobalKeys", true);
Deleted : user_pref("CT2269050.HomePageProtectorEnabled", true);
Deleted : user_pref("CT2269050.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=[...]
Deleted : user_pref("CT2269050.Initialize", true);
Deleted : user_pref("CT2269050.InitializeCommonPrefs", true);
Deleted : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2269050.InstallationType", "UnknownIntegration");
Deleted : user_pref("CT2269050.InstalledDate", "Wed Jan 25 2012 12:49:16 GMT+0100");
Deleted : user_pref("CT2269050.InvalidateCache", false);
Deleted : user_pref("CT2269050.IsGrouping", false);
Deleted : user_pref("CT2269050.IsInitSetupIni", true);
Deleted : user_pref("CT2269050.IsMulticommunity", false);
Deleted : user_pref("CT2269050.IsOpenThankYouPage", false);
Deleted : user_pref("CT2269050.IsOpenUninstallPage", false);
Deleted : user_pref("CT2269050.IsProtectorsInit", true);
Deleted : user_pref("CT2269050.LanguagePackLastCheckTime", "Thu Jun 21 2012 23:50:51 GMT+0200");
Deleted : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2269050.LastLogin_3.12.0.7", "Sat Apr 28 2012 21:47:21 GMT+0200");
Deleted : user_pref("CT2269050.LastLogin_3.12.2.3", "Sun Jun 03 2012 22:20:20 GMT+0200");
Deleted : user_pref("CT2269050.LastLogin_3.13.0.6", "Fri Jun 22 2012 11:37:59 GMT+0200");
Deleted : user_pref("CT2269050.LastLogin_3.9.0.3", "Wed Jan 25 2012 12:49:21 GMT+0100");
Deleted : user_pref("CT2269050.LatestVersion", "3.13.0.6");
Deleted : user_pref("CT2269050.Locale", "en");
Deleted : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2269050.MCDetectTooltipShow", false);
Deleted : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2269050.OriginalFirstVersion", "3.9.0.3");
Deleted : user_pref("CT2269050.RadioLastCheckTime", "Wed Jan 25 2012 12:49:23 GMT+0100");
Deleted : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Deleted : user_pref("CT2269050.RadioShrinked", "shrinked");
Deleted : user_pref("CT2269050.RadioShrinkedFromSetup", true);
Deleted : user_pref("CT2269050.SHRINK_TOOLBAR", 0);
Deleted : user_pref("CT2269050.SavedHomepage", "chrome://branding/locale/browserconfig.properties");
Deleted : user_pref("CT2269050.SearchBackToDefaultEngine", false);
Deleted : user_pref("CT2269050.SearchBoxWidth", 100);
Deleted : user_pref("CT2269050.SearchCaption", "DVDVideoSoftTB Customized Web Search");
Deleted : user_pref("CT2269050.SearchEngineBeforeUnload", "DVDVideoSoftTB Customized Web Search");
Deleted : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
Deleted : user_pref("CT2269050.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Thu Jun 21 2012 23:47:36 GMT+0200");
Deleted : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2269050.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2269050.SearchProtectorEnabled", true);
Deleted : user_pref("CT2269050.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2269050.SendProtectorDataViaLogin", true);
Deleted : user_pref("CT2269050.ServiceMapLastCheckTime", "Thu Jun 21 2012 17:14:17 GMT+0200");
Deleted : user_pref("CT2269050.SettingsLastCheckTime", "Fri Jun 22 2012 11:35:51 GMT+0200");
Deleted : user_pref("CT2269050.SettingsLastUpdate", "1340130112");
Deleted : user_pref("CT2269050.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13");
Deleted : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Wed Jan 25 2012 12:49:13 GMT+0100");
Deleted : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1312887586");
Deleted : user_pref("CT2269050.ToolbarShrinkedFromSetup", true);
Deleted : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");
Deleted : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2269050.UserID", "UN94038792108749311");
Deleted : user_pref("CT2269050.ValidationData_Toolbar", 2);
Deleted : user_pref("CT2269050.WeatherNetwork", "");
Deleted : user_pref("CT2269050.WeatherPollDate", "Wed Jan 25 2012 12:49:23 GMT+0100");
Deleted : user_pref("CT2269050.WeatherUnit", "C");
Deleted : user_pref("CT2269050.alertChannelId", "666138");
Deleted : user_pref("CT2269050.approveUntrustedApps", true);
Deleted : user_pref("CT2269050.autoDisableScopes", -1);
Deleted : user_pref("CT2269050.backendstorage.cbfirsttime", "576564204A616E20323520323031322031323A34393A34342[...]
Deleted : user_pref("CT2269050.backendstorage.shoppingapp.gk.exipres", "4D6F6E204A616E20333020323031322031323A[...]
Deleted : user_pref("CT2269050.backendstorage.shoppingapp.gk.geolocation", "61757374726961");
Deleted : user_pref("CT2269050.components.1000034", false);
Deleted : user_pref("CT2269050.components.1000082", false);
Deleted : user_pref("CT2269050.components.1000234", false);
Deleted : user_pref("CT2269050.components.129023235807856892", false);
Deleted : user_pref("CT2269050.components.129121052374999726", false);
Deleted : user_pref("CT2269050.components.129351672002618989", false);
Deleted : user_pref("CT2269050.components.129351776130744254", false);
Deleted : user_pref("CT2269050.components.129391330693125668", false);
Deleted : user_pref("CT2269050.components.129466585396013141", false);
Deleted : user_pref("CT2269050.components.129466585399606892", false);
Deleted : user_pref("CT2269050.components.129681780741097243", false);
Deleted : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Wed Jan 25 2012 12:49:16 GMT+0100");
Deleted : user_pref("CT2269050.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2269050.initDone", true);
Deleted : user_pref("CT2269050.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2269050.isFirstRadioInstallation", false);
Deleted : user_pref("CT2269050.isSearchProtectorNotifyChanges", false);
Deleted : user_pref("CT2269050.myStuffEnabled", true);
Deleted : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2269050.revertSettingsEnabled", true);
Deleted : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2269050.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2269050.testingCtid", "");
Deleted : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Thu Jun 21 2012 17:14:17 GMT+0200");
Deleted : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Wed Jan 25 2012 12:49:24 GMT+0100");
Deleted : user_pref("CT2269050.usageEnabled", false);
Deleted : user_pref("CT2269050.usagesFlag", 2);
Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2269050&Search[...]
Deleted : user_pref("CommunityToolbar.ConduitSearchList", "DVDVideoSoftTB Customized Web Search");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/maxi.gif"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play_mini[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"21b[...]
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Kathi\\AppData\\Roaming\\Mozilla\\F[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2269050");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");
Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2269050");
Deleted : user_pref("CommunityToolbar.globalUserId", "2182b824-36e9-47ec-bbda-0b829cb3e2db");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Jan 25 2012 12:49:2[...]
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Jan 25 2012 12:49:14 GMT+0100");
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "392505fd-867e-4bdf-9f3c-64a6563beb51");
Deleted : user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]

*************************

AdwCleaner[S1].txt - [21284 octets] - [10/07/2012 22:37:15]

########## EOF - C:\AdwCleaner[S1].txt - [21413 octets] ##########
Problem besteht noch :( ,
lg Faulwurf

cosinus 11.07.2012 10:09
Erstell dir mal ein neues Profil und teste => Firefox-Profile erstellen und löschen | Anleitung | Firefox-Hilfe
Das alte Profil aber nicht löschen!

faulwurf 11.07.2012 12:32
Gesagt - getan verändert hat sich leider nichts. :heulen:
Ich hoffe, du bist noch nicht am Ende deiner Weisheit ;)

lg Faulwurf

cosinus 11.07.2012 14:09
Hast du rein zufällig einen Router? Wenn ja wurde da das Adminpasswort geändert?
Wenn nicht, setz diesen Router auf Werkseinstellungen zurück und konfiguriere ihn neu. Wichtig ist, dass du das unsichere vordefinierte Adminkennwort zum Router änderst!

faulwurf 11.07.2012 19:01
Ja hab ich getan,

nun verhält sich das Internet auf diesem Laptop jedoch sehr merkwürdig,

(schreibe gerade von einem zweiten da ist alles normal )

...viele Seiten werden nicht geladen, google geht manchmal jedoch funktionieren die Links jetzt garnicht mehr, größtgenteils bekomme ich die Meldung Server nicht gefunden. 2-3 Mal bekam ich eine Verbindung zu google etc dann wieder nicht.

lg Faulwurf

cosinus 12.07.2012 10:00
Und das DIng ist sicher auf Werkseinstellungen jetzt?
Verhält sich jetzt nur das Notebook so? Was ist mit dem Rechner?
Was für einen Router genau hast du da?

faulwurf 12.07.2012 10:25
Guten Morgen,

Wir sind bei UPC (Wien) und haben einen Thomson Router (Thomson TWG870UG - es bestehen nur Wlan Verbindungen zu ihm).

Ja, mein Rechner verhält sich komplett normal, die Probleme gibt es nur auf dem Dell meiner Schwester.

Habe gestern das Passwort geändert und dabei über die Software auf Factory Defaults umgestellt. Die Set up time steht jetzt wieder auf 15h daher denke ich schon das es funktioniert hat. Ich kann auch noch direkt am Gerät reseten (das werde ich in den nächsten 10 min erledigen und die Ergebnisse posten).

lg Faulwurf

Edit: Gerät auch noch vor Ort resetet, hat nichts gebracht. Beim Starten von IE fragte er mich frech ob ich das Addon Babylon.Toolbar.com zulassen möchte, als ich auf Nein geklickt habe, hatte ich plötzlich nur noch eingeschränkte Konnektivität zu meinem Router.(IE zu -->FF auf lustigerweise wieder Internetverbindung aber troztdem immer Server nicht gefunden.) Was ist das bitte für ein böses Viech??
Kann dir eine Fernwartung mit Teamviewer anbieten, damit könntest du dir vlt den Router etwas genauer ansehen, wenn das hier erlaubt ist.

cosinus 12.07.2012 13:13
Welchen Rechner haben wir denn hier jetzt unter die Lupe genommen? :wtf: :balla: :confused:

Mit dem adwCleaner sollte Babylon aber eigentlich rausgeschmissen worden sein! :kloppen:

faulwurf 12.07.2012 13:35
Den Dell meiner Schwester, ich schreibe von meinem Virenfreien *aufholzklopf* Notebook, der aber den selben Router verwendet. Von diesem wurde auch der Router zurückgesetzt.

Das kann ich nicht beurteilen^^ gibt aber beim IE bei den Addons sogar noch einen Programmpfad auf eine BabylonToolbar.dll -> C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll

war übrigens nie installiert...:balla:

denke schon das da noch Teile des Trojaners oben sind, der Rechner verhält sich jetzt merkwürdiger als vorher :lach:

Kann ich die Sony Festplattensicherung vom Laptop manuell löschen? Vlt sitzt da der Wurm. (Sie hatte vorher ein Sony Notebook von dem die Daten auf dieses book (Dell) übertragen wurden.)

lg Faulwurf

Edit: lasse adwcleaner grad nochmal drüber rennen, der findet aber definitiv noch Reste von BabylonToolbar
Hier die Logs:
Code:
# AdwCleaner v1.701 - Logfile created 07/12/2012 at 15:36:57
# Updated 02/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Kathi - KATHI-PC
# Running from : C:\Users\Kathi\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****
[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Key Found : HKLM\SOFTWARE\Babylon
Key Found : HKLM\SOFTWARE\BabylonToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\b
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\DVDVideoSoftTB
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
[x64] Key Found : HKLM\SOFTWARE\Classes\b
[x64] Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
[x64] Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
[x64] Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
[x64] Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
[x64] Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

***** [Registre - GUID] *****

Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
[x64] Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v13.0.1 (de)

Profile name : default
File : C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\prefs.js

[OK] File is clean.

Profile name : Standard-Benutzer [Profil par d�faut]
File : C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\i9bpz5fc.Standard-Benutzer\prefs.js

Found : user_pref("extensions.ui.lastCategory", "addons://search/babylon%20");

*************************

AdwCleaner[S1].txt - [21387 octets] - [10/07/2012 22:37:15]
AdwCleaner[R1].txt - [8638 octets] - [12/07/2012 15:36:57]

########## EOF - C:\AdwCleaner[R1].txt - [8766 octets] ##########
Und vom Deleten ist mir der 1. Log irgendwie abhanden gekommen durch ein Windows Update beim restart, das Log ist auch nicht in C:\ zu finden. Hab deshalb ein 2tes erzeugt^^
Code:
# AdwCleaner v1.701 - Logfile created 07/12/2012 at 15:42:41
# Updated 02/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Kathi - KATHI-PC
# Running from : C:\Users\Kathi\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v13.0.1 (de)

Profile name : default
File :
C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\za9wu5mw.default\prefs.js

[OK] File is clean.

Profile name : Standard-Benutzer [Profil par défaut]
File :
C:\Users\Kathi\AppData\Roaming\Mozilla\Firefox\Profiles\i9bpz5fc.Standard-Benutzer\prefs.js

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [8685 octets] - [12/07/2012 15:36:57]
AdwCleaner[S2].txt - [945 octets] - [12/07/2012 15:42:41]

########## EOF - C:\AdwCleaner[S2].txt - [1072 octets] ##########
Teamviewer haha^^?

cosinus 12.07.2012 14:57
Lt adwCleaner dürfte aber nun nichts mehr drauf sein

faulwurf 12.07.2012 15:57
Das heißt wie gehts jz weiter? Kann derzeit keine Verbindung zu Seiten herstellen... das ging ja vorher auch noch....?

cosinus 12.07.2012 18:23
Ich mag es nicht nicht wenn mehrere Rechner immer in einem Strang erwähnt werden

Bitte schreib nochmal gnaz deutlich auf was mit welchem Rechner jetzt wie genau der Stand der Dinge ist!

Zitat:
das ging ja vorher auch noch....?
Wenn das ein Rechner ist, von dem ich noch kein einziges Log gesehen habe kann ich das alles nun wirklich nicht beurteilen!

Der bereinigte Rechner läuft jetzt, der andere lt deiner Aussage nicht betroffene hat nun keine Verbindung mehr?

faulwurf 12.07.2012 18:48
Glaub du hast mich da falsch verstanden, es geht nur um das Notebook meiner Schwester einem Dell, von diesem stammen die Log-Daten und dieser ist infiziert. Kein anderer Pc sonnst ist betroffen. Ich schreibe nur von meinem Notebook, da das derzeit auf ihrem Dell nicht geht.

Ganz genau: auf ihrem Notebook ist der Zugriff auf Internet nun über einen Browser nicht mehr möglich obwohl verbindung zum Internet besteht.

Auf meinem funktioniert das gott sei dank noch!

cosinus 12.07.2012 19:26
Also ist nur dieser bereinifte Rechner betroffen?

Falsche Proxy-Settings sind ausgeschlossen? Wenn nicht prüfen siehe unten
  • Klick mit rechts auf einen freien Bereich auf dem Desktop und sag "Neu, Verknüpfung erstellen"

  • Tipp als Ziel cmd.exe ein und bestätige mit OK, eine neue Verknüpfung zur Konsole auf dem Desktop müsste sich nun befinden

  • Falls dem so ist, diese neue Verknüpfung rechtsklicken => Als Administrator ausführen => Sicherheitsabfrage der Benutzerkontensteuerung ggf. bestätigen => schwarze Eingabeaufforderung öffnet sich

  • Tipp dort ein:
    Code:
    ipconfig /all > c:\ipconfig.txt
    und bestätige mit enter.

  • Öffne die Datei c:\ipconfig.txt und poste den Inhalt hier mit CODE-Tags umschlossen






Falsche Proxy Einstellungen entfernen
  • Klicke im Start-Menü unter "Einstellungen" auf "Systemsteuerung" -> "Internetoptionen".
  • Wähle die Karteikarte "Verbindungen->Lan-Einstellungen“ und überprüfe ob bei Proxyserver ein Häkchen steht,
    wenn ja -> Entfernen, dann -> OK (sofern nicht richtige Eintragung)

faulwurf 12.07.2012 19:38
Ja, nur das Dell Notebook meiner Schwester.

Code:
Windows-IP-Konfiguration

Hostname . . . . . . . . . . . . : Kathi-PC
Prim„res DNS-Suffix . . . . . . . :
Knotentyp . . . . . . . . . . . . : Hybrid
IP-Routing aktiviert . . . . . . : Nein
WINS-Proxy aktiviert . . . . . . : Nein

Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung 3:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft Virtual WiFi Miniport
Adapter #2
Physikalische Adresse . . . . . . : 4C-80-93-0F-13-57
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja

Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung 2:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
Physikalische Adresse . . . . . . : 4C-80-93-0F-13-57
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja

Ethernet-Adapter Bluetooth-Netzwerkverbindung:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Bluetooth-Ger„t (PAN)
Physikalische Adresse . . . . . . : 4C-80-93-0F-13-5A
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja

Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung:

Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Intel(R) Centrino(R) Wireless-N 1030
Physikalische Adresse . . . . . . : 4C-80-93-0F-13-56
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja
Verbindungslokale IPv6-Adresse . : fe80::4d0b:5348:78c3:a83d%13(Bevorzugt)
IPv4-Adresse . . . . . . . . . . : 192.168.0.11(Bevorzugt)
Subnetzmaske . . . . . . . . . . : 255.255.255.0
Lease erhalten. . . . . . . . . . : Donnerstag, 12. Juli 2012 15:43:48
Lease l„uft ab. . . . . . . . . . : Donnerstag, 19. Juli 2012 21:33:25
Standardgateway . . . . . . . . . : 192.168.0.1
DHCP-Server . . . . . . . . . . . : 192.168.0.1
DHCPv6-IAID . . . . . . . . . . . : 239894675
DHCPv6-Client-DUID. . . . . . . . :
00-01-00-01-16-56-3E-80-84-8F-69-B6-94-42
DNS-Server . . . . . . . . . . . : 212.186.211.21
195.34.133.21
NetBIOS ber TCP/IP . . . . . . . : Aktiviert

Ethernet-Adapter LAN-Verbindung:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix: XW-DL
Beschreibung. . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physikalische Adresse . . . . . . : 84-8F-69-B6-94-42
DHCP aktiviert. . . . . . . . . . : Ja
Autokonfiguration aktiviert . . . : Ja

Tunneladapter Teredo Tunneling Pseudo-Interface:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 13:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-6zu4-Adapter
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{A8AD3D0E-8F50-470A-BA4C-12503C3695A3}:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{E450DB1E-2EC9-48BD-B7EC-BC899DBC28EB}:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #2
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{1A6DFB0B-BA91-4C6E-B2BF-F63BA48F5996}:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #3
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{75CA6934-F412-41EF-81A9-BBE58B629DD4}:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #4
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.XW-DL:

Medienstatus. . . . . . . . . . . : Medium getrennt
Verbindungsspezifisches DNS-Suffix:
Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #5
Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
DHCP aktiviert. . . . . . . . . . : Nein
Autokonfiguration aktiviert . . . : Ja
Häckchen war da nun ist es weg :)

lg Faulwurf

cosinus 12.07.2012 20:58
Ist nun ein Seitenaufbau möglich? EIne WLAN-Verbindung besteht ja :pfeiff:

faulwurf 12.07.2012 21:16
Das sagte ich ja :lach:
nein leider nicht,....

lg faulwurf

cosinus 13.07.2012 10:48
Probier mal Folgendes:

winsock-reset mit netsh (Vista & W7)
  • Klick mit rechts auf einen freien Bereich auf dem Desktop und sag "Neu, Verknüpfung erstellen"

  • Tipp als Ziel cmd.exe ein und bestätige mit OK, eine neue Verknüpfung zur Konsole auf dem Desktop müsste sich nun befinden

  • Falls dem so ist, diese neue Verknüpfung rechtsklicken => Als Administrator ausführen => Sicherheitsabfrage der Benutzerkontensteuerung ggf. bestätigen => schwarze Eingabeaufforderung öffnet sich

  • Tipp dort ein:
    Code:
    netsh winsock reset catalog
    und bestätige mit enter.

Schau mal ob das Zurücksetzen hilft, wenn es nicht sofort hilft, starte Windows bitte vorher neu und schau dann nochmal ob du eine Verbindung hast

faulwurf 13.07.2012 12:53
Ja der Seitenaufbau ist nun teilweiße möglich, aber die Seiten bauen sich alle fehlerhaft oder teils garnicht auf.:confused:

lg Faulwurf

cosinus 13.07.2012 20:34
  • Klick mit rechts auf einen freien Bereich auf dem Desktop und sag "Neu, Verknüpfung erstellen"
  • Tipp als Ziel cmd.exe ein und bestätige mit OK, eine neue Verknüpfung zur Konsole auf dem Desktop müsste sich nun befinden
  • Falls dem so ist, diese neue Verknüpfung zu cmd.exe auf dem Desktop rechtsklicken => Als Administrator ausführen => Sicherheitsabfrage der Benutzerkontensteuerung ggf. bestätigen => schwarze Eingabeaufforderung öffnet sich
  • Tipp dort ein:
    Code:
    netsh int ip reset c:\resetlog.txt
    und bestätige mit enter.
  • zweiten Befehl eintippen und ausführen:
    Code:
    netsh branchcache reset
  • dritten Befehl eintippen und ausführen:
    Code:
    netsh winsock reset
  • Windows neu starten und berichten ob dein WLAN gefunden wird bzw. ob eine Internetverbindung steht

faulwurf 13.07.2012 21:20
Bis auf den zweiten Befehl (Fehlermeldung: Befehl nicht gefunden) hat das geklappt. Internetverbindung habe ich angeblich, ein Seitenaufbau ist jedoch immer noch nicht möglich:headbang:

lg Faulwurf

cosinus 13.07.2012 22:07
Das gibt es doch garnicht :stirn:
Hast du das Notebook mal versucht per Kabel an den Router zu hängen? Wenn nein mach das mal und schau deaktivier WLAN, probier dann mal zu surfen

faulwurf 15.07.2012 15:17
Heute funktioniert der Seitenaufbau ganz normal :confused:
Habe nichts verändert, und war eig kurz davor das System neu aufzusetzten.
Nun weiß ich leider nicht genau wie ich weiters vorgehen soll, denkst du das dieses System nun als bereinigt angesehen werden kann oder sollte ich das System trotzdem neu aufsetzen? :glaskugel:

cosinus 15.07.2012 18:14
Na plattmachen kannste immer noch. Außerdem will man doch schon irgendwie wissen was die Ursache jetzt ist

Bezogen sich die Verbindungsprobleme nur auf das WLAN und mit Kabel war alles gut?
Erzähl mal mehr übers WLAN.
Verschlüsselung: WEP, WPA oder WPA2?
Schlüssel: Anzahl der Zeichen und Zeichensatz?


Alle Zeitangaben in WEZ +1. Es ist jetzt 18:31 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131