| Gwedhwen | 30.10.2012 14:03 |
So erstmal die Logfiles:
OTL Fix: Code:
All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{40D3AC7A-E5B4-4F36-827B-059A97D6CEE5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40D3AC7A-E5B4-4F36-827B-059A97D6CEE5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A8F6064-A36C-4557-9A6C-51786DD4DADA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A8F6064-A36C-4557-9A6C-51786DD4DADA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D96191B8-3232-4398-9473-7DF4A20811F6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D96191B8-3232-4398-9473-7DF4A20811F6}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{09038620-190C-402B-A92F-18864E6AB22F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09038620-190C-402B-A92F-18864E6AB22F}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{40064957-18EB-412d-9146-3F57E8D92EEC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40064957-18EB-412d-9146-3F57E8D92EEC}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{40D3AC7A-E5B4-4F36-827B-059A97D6CEE5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40D3AC7A-E5B4-4F36-827B-059A97D6CEE5}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5A817CF6-92D5-4DE5-AC38-82DF8A73EF28}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5A817CF6-92D5-4DE5-AC38-82DF8A73EF28}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A8F6064-A36C-4557-9A6C-51786DD4DADA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A8F6064-A36C-4557-9A6C-51786DD4DADA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B1D1FB7-7233-4F7C-802C-21A1DDB12754}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8D27B32E-89EE-460e-82D2-5FC354078EAD}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8D27B32E-89EE-460e-82D2-5FC354078EAD}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D96191B8-3232-4398-9473-7DF4A20811F6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D96191B8-3232-4398-9473-7DF4A20811F6}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DAE8DCE8-B0E5-44F4-96E8-F2B9DA8D0546}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DAE8DCE8-B0E5-44F4-96E8-F2B9DA8D0546}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DCE59F23-A446-45a5-9459-E68FDC0DE38D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DCE59F23-A446-45a5-9459-E68FDC0DE38D}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Prefs.js: "MyStart Search" removed from browser.search.defaultenginename
Prefs.js: {9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}:1.0 removed from extensions.enabledAddons
Prefs.js: "hxxp://mystart.incredibar.com/mb165/?loc=IB_DS&a=6R8vUSfg15&&i=26&search=" removed from keyword.URL
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}\ not found.
File C:\Program Files\Web Assistant\Firefox not found.
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}\ not found.
C:\Users\DAHLMANN\AppData\Roaming\13001.016\components folder moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\13001.016 folder moved successfully.
Registry value HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}\ not found.
File C:\Users\DAHLMANN\AppData\Roaming\13001.016 not found.
C:\Users\DAHLMANN\AppData\Roaming\mozilla\firefox\profiles\8wsknoc1.default\searchplugins\11-suche.xml moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\mozilla\firefox\profiles\8wsknoc1.default\searchplugins\englische-ergebnisse.xml moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\mozilla\firefox\profiles\8wsknoc1.default\searchplugins\gmx-suche.xml moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\mozilla\firefox\profiles\8wsknoc1.default\searchplugins\lastminute.xml moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\mozilla\firefox\profiles\8wsknoc1.default\searchplugins\MyStart Search.xml moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\mozilla\firefox\profiles\8wsknoc1.default\searchplugins\sweetim.xml moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\mozilla\firefox\profiles\8wsknoc1.default\searchplugins\webde-suche.xml moved successfully.
Folder C:\USERS\DAHLMANN\APPDATA\ROAMING\13001.016\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{DFEFCDEE-CF1A-4FC8-89AF-189327213627} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFEFCDEE-CF1A-4FC8-89AF-189327213627}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C424171E-592A-415A-9EB1-DFD6D95D3530} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C424171E-592A-415A-9EB1-DFD6D95D3530}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NPSStartup deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Nllklx deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b8204fbe-bfc1-11e1-a8f1-861e98592deb}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b8204fbe-bfc1-11e1-a8f1-861e98592deb}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b8204fbe-bfc1-11e1-a8f1-861e98592deb}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b8204fbe-bfc1-11e1-a8f1-861e98592deb}\ not found.
File F:\Start.exe 1 not found.
ADS C:\ProgramData\Temp:0888F409 deleted successfully.
ADS C:\ProgramData\Temp:588B60C7 deleted successfully.
========== FILES ==========
C:\Users\DAHLMANN\AppData\Roaming\13001.014\components folder moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\13001.014 folder moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\13001.015\components folder moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\13001.015 folder moved successfully.
File\Folder C:\Users\DAHLMANN\AppData\Roaming\13001.016 not found.
C:\Users\DAHLMANN\AppData\Roaming\kock folder moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\UAs folder moved successfully.
C:\Users\DAHLMANN\AppData\Roaming\xmldm folder moved successfully.
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:\Users\DAHLMANN\Desktop\cmd.bat deleted successfully.
C:\Users\DAHLMANN\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: Administrator
->Temp folder emptied: 47679 bytes
->Temporary Internet Files folder emptied: 46057 bytes
User: All Users
User: DAHLMANN
->Temp folder emptied: 1216619 bytes
->Temporary Internet Files folder emptied: 5055893 bytes
->Java cache emptied: 55 bytes
->FireFox cache emptied: 321478680 bytes
->Flash cache emptied: 523 bytes
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 313,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 10302012_110648
Files\Folders moved on Reboot...
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Eset Code:
B:\$RECYCLE.BIN.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
B:\eigenen Fotos.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
B:\Kündigungen.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
B:\System Volume Information.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\$RECYCLE.BIN.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\Flyer.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\G und T.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\Games.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\Gesellschaftsspiele.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\GIMP Schule.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\Musik.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\Rezepte.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
R:\System Volume Information.lnk Win32/Dorkbot.D worm cleaned by deleting - quarantined
OTL Code:
OTL logfile created on: 30.10.2012 13:44:00 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\DAHLMANN\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 0,98 Gb Available Physical Memory | 49,27% Memory free
4,24 Gb Paging File | 2,87 Gb Available in Paging File | 67,74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 453,55 Gb Total Space | 174,85 Gb Free Space | 38,55% Space Free | Partition Type: NTFS
Drive D: | 12,21 Gb Total Space | 1,67 Gb Free Space | 13,66% Space Free | Partition Type: NTFS
Drive R: | 465,75 Gb Total Space | 446,42 Gb Free Space | 95,85% Space Free | Partition Type: NTFS
Computer Name: GERO-PC | User Name: DAHLMANN | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.10.30 09:26:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\DAHLMANN\Desktop\OTL.exe
PRC - [2012.10.27 20:56:54 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2012.09.29 19:54:26 | 000,399,432 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012.09.13 14:26:52 | 001,006,448 | ---- | M] () -- C:\Windows\System32\dmwu.exe
PRC - [2012.08.08 10:28:00 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.06.11 18:19:36 | 000,468,992 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2012.06.11 18:19:02 | 000,217,600 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2012.05.08 10:28:13 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.08 10:28:12 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.05.08 10:28:12 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.10.15 09:53:00 | 001,328,960 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2009.08.11 13:51:32 | 005,586,664 | ---- | M] () -- C:\Windows\System32\WTMKM.exe
PRC - [2009.08.06 15:34:36 | 000,397,032 | ---- | M] () -- C:\Windows\System32\atwtusb.exe
PRC - [2009.04.11 07:28:06 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\ink\TabTip.exe
PRC - [2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.04.11 07:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2008.01.21 03:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2008.01.21 03:25:33 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe
PRC - [2008.01.21 03:25:32 | 000,198,656 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\ink\InputPersonalization.exe
PRC - [2008.01.21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Defender\MSASCui.exe
========== Modules (No Company Name) ==========
MOD - [2012.10.27 20:56:54 | 002,295,264 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2012.06.12 21:34:34 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f2691cfa7671cdc58179e56ba9227591\System.Windows.Forms.ni.dll
MOD - [2012.06.12 21:34:27 | 001,592,320 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\18f9789aa214c657113e676b3a9015aa\System.Drawing.ni.dll
MOD - [2012.06.12 21:34:03 | 014,329,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7343fbab1ba137db2f8b284047ef3f3c\PresentationFramework.ni.dll
MOD - [2012.06.12 21:33:43 | 012,219,392 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\7b6293b0c23321c255c2530aea8e32bb\PresentationCore.ni.dll
MOD - [2012.06.11 17:24:32 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll
MOD - [2012.06.11 11:45:06 | 000,369,152 | ---- | M] () -- C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2012.05.11 18:24:22 | 000,060,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5fd0071c259b92078ced7cd752a14730\UIAutomationProvider.ni.dll
MOD - [2012.05.11 18:23:00 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll
MOD - [2012.05.11 18:22:47 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bd76aaaa03ddc15d1840207b5a480644\System.Configuration.ni.dll
MOD - [2012.05.11 05:03:01 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2630342a066a7cb9056d9eb6157687a\System.Xml.ni.dll
MOD - [2012.05.11 05:02:07 | 002,295,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\0f2b877ed16daa577f95be735a63d19c\System.Core.ni.dll
MOD - [2012.05.11 05:02:00 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c8c3ab08933fef9fb6657da871395c46\PresentationFramework.Aero.ni.dll
MOD - [2012.05.11 05:01:29 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\54426ee1881b42af5b090e223f43823c\WindowsBase.ni.dll
MOD - [2012.05.11 05:01:26 | 007,953,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll
MOD - [2012.05.11 05:01:20 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll
MOD - [2011.12.27 03:51:23 | 005,251,072 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
MOD - [2009.08.11 13:51:32 | 005,586,664 | ---- | M] () -- C:\Windows\System32\WTMKM.exe
MOD - [2009.03.30 05:42:12 | 000,434,176 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2009.03.30 05:42:12 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
MOD - [2009.03.30 05:42:11 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009.02.25 02:16:56 | 000,249,856 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2009.02.18 19:39:19 | 000,094,208 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
MOD - [2006.08.29 08:29:00 | 000,180,224 | ---- | M] () -- C:\Windows\System32\ATWTINK.DLL
========== Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- C:\Windows\system32\HPZipm12.dll -- (Pml Driver HPZ12)
SRV - File not found [Auto | Stopped] -- C:\Windows\system32\HPZinw12.dll -- (Net Driver HPZ12)
SRV - [2012.10.27 20:56:54 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.10.24 14:34:15 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.10.09 15:53:24 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.09.29 19:54:26 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.09.29 19:54:26 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012.09.13 14:26:52 | 001,006,448 | ---- | M] () [Auto | Running] -- C:\Windows\System32\dmwu.exe -- (WebOptimizer)
SRV - [2012.07.13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.11 18:19:02 | 000,217,600 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012.05.08 10:28:13 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.08 10:28:12 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009.08.06 15:34:36 | 000,397,032 | ---- | M] () [Auto | Running] -- C:\Windows\System32\atwtusb.exe -- (WTService)
SRV - [2009.03.31 09:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008.02.03 12:00:00 | 000,129,992 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\System32\ezsvc7.dll -- (ezSharedSvc)
SRV - [2008.01.21 03:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2008.01.21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pcdrndisuio.sys -- (PcdrNdisuio)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2012.09.29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012.06.11 19:58:44 | 008,733,696 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012.06.11 17:25:48 | 000,295,936 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012.05.08 10:28:13 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.08 10:28:13 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012.02.23 13:31:36 | 000,083,984 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdLH3.sys -- (AtiHDAudioService)
DRV - [2011.10.15 09:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011.09.16 15:08:07 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2009.10.08 15:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.04.17 02:17:54 | 000,006,144 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\walvhid.sys -- (vhidmini)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.03.20 10:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009.03.20 10:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus)
DRV - [2009.03.20 10:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl)
DRV - [2009.03.08 18:15:14 | 000,006,144 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\moufiltr.sys -- (moufiltr)
DRV - [2008.09.10 01:58:08 | 000,020,640 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- C:\Programme\PC-Doctor for Windows\pcd5srvc.pkms -- (PCD5SRVC{BD6912E3-AC9D80E8-05040000})
DRV - [2008.08.06 17:26:08 | 000,124,928 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008.01.18 06:43:16 | 000,016,128 | ---- | M] (Razer USA Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Lycosa.sys -- (LycoFltr)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "google.de"
FF - prefs.js..extensions.enabledAddons: {0e3dbc69-a682-48da-84e1-82c63a5d678e}:3.15.1.0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.1.13: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.1.13: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.12.15 22:30:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.08.30 00:21:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.27 20:56:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.10.30 10:57:36 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.27 20:56:55 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.10.30 10:57:36 | 000,000,000 | ---D | M]
[2011.11.23 19:38:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DAHLMANN\AppData\Roaming\mozilla\Extensions
[2012.10.23 19:36:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DAHLMANN\AppData\Roaming\mozilla\Firefox\Profiles\8wsknoc1.default\extensions
[2012.08.22 18:05:28 | 000,000,000 | ---D | M] (Bigpoint Games DE Community Toolbar) -- C:\Users\DAHLMANN\AppData\Roaming\mozilla\Firefox\Profiles\8wsknoc1.default\extensions\{0e3dbc69-a682-48da-84e1-82c63a5d678e}
[2012.03.04 21:35:39 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\DAHLMANN\AppData\Roaming\mozilla\Firefox\Profiles\8wsknoc1.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.10.23 08:03:13 | 000,000,000 | ---D | M] (LavaFox V2-Purple) -- C:\Users\DAHLMANN\AppData\Roaming\mozilla\Firefox\Profiles\8wsknoc1.default\extensions\zigboom555@aol.com
[2012.08.22 13:21:07 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\DAHLMANN\AppData\Roaming\mozilla\firefox\profiles\8wsknoc1.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.10.27 20:56:47 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2009.07.20 09:26:14 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2012.10.27 20:56:54 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.02.10 23:27:02 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.10.24 08:47:17 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.02.10 23:27:02 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.10 23:27:02 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.10 23:27:02 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.10 23:27:02 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [MacrokeyManager] C:\Windows\System32\WTMKM.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O8 - Extra context menu item: Free YouTube Download - C:\Users\DAHLMANN\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\DAHLMANN\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Web-Suche - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab (20-20 3D Viewer for IKEA)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {B1953AD6-C50E-11D3-B020-00A0C9251384} hxxp://www.o2c.de/download/o2cplayer.cab (o2c Player (ELECO Software GmbH))
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Java Plug-in 1.7.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1203B36D-2B94-4182-B849-2B0372C74BAE}: NameServer = 62.220.18.8 89.246.64.8
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\DAHLMANN\Pictures\Da bin ich.JPG
O24 - Desktop BackupWallPaper: C:\Users\DAHLMANN\Pictures\Da bin ich.JPG
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2012.10.30 11:21:12 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012.10.30 11:20:47 | 002,322,184 | ---- | C] (ESET) -- C:\Users\DAHLMANN\Desktop\esetsmartinstaller_enu.exe
[2012.10.30 11:06:48 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.10.30 11:06:02 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012.10.30 11:06:02 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012.10.30 11:06:02 | 000,093,672 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2012.10.30 10:57:20 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.10.30 09:26:48 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\DAHLMANN\Desktop\OTL.exe
[2012.10.29 20:33:08 | 000,000,000 | R--D | C] -- C:\Dropbox
[2012.10.29 10:26:59 | 000,000,000 | ---D | C] -- C:\Program Files\AMD APP
[2012.10.28 21:49:14 | 000,000,000 | ---D | C] -- C:\Users\DAHLMANN\AppData\Roaming\Malwarebytes
[2012.10.28 21:49:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.10.28 21:49:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.10.28 21:49:02 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.10.28 21:49:02 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.10.27 20:56:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012.10.19 20:22:47 | 000,000,000 | ---D | C] -- C:\Users\DAHLMANN\AppData\Roaming\Alien Skin
[2012.10.10 09:06:46 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012.10.10 09:06:42 | 003,602,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012.10.10 09:06:42 | 003,550,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012.10.06 21:17:02 | 000,000,000 | ---D | C] -- C:\Users\DAHLMANN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2012.10.06 21:15:29 | 000,000,000 | ---D | C] -- C:\Users\DAHLMANN\AppData\Roaming\Dropbox
[2012.10.01 19:48:58 | 000,000,000 | ---D | C] -- C:\Users\DAHLMANN\AppData\Roaming\Skype
[2012.10.01 19:48:48 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2012.10.01 19:48:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.10.01 19:48:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2012.10.01 19:48:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2012.10.01 09:40:13 | 000,000,000 | ---D | C] -- C:\Users\DAHLMANN\Neuer Ordner
[1 C:\Users\DAHLMANN\AppData\Roaming\*.tmp files -> C:\Users\DAHLMANN\AppData\Roaming\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.10.30 13:44:39 | 000,538,941 | ---- | M] () -- C:\Users\DAHLMANN\Desktop\adwcleaner.exe
[2012.10.30 13:17:39 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.10.30 13:17:39 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.10.30 13:04:26 | 000,001,441 | ---- | M] () -- C:\scu.dat
[2012.10.30 12:53:02 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.10.30 12:13:53 | 002,411,637 | ---- | M] () -- C:\Users\DAHLMANN\Adventkaffee.png
[2012.10.30 12:13:53 | 000,402,631 | ---- | M] () -- C:\Users\DAHLMANN\.recently-used.xbel
[2012.10.30 11:46:27 | 000,041,156 | ---- | M] () -- C:\Users\DAHLMANN\Desktop\Biblographie Roberts_Robb.odt
[2012.10.30 11:22:26 | 000,618,204 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.10.30 11:22:26 | 000,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.10.30 11:22:26 | 000,122,636 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.10.30 11:22:26 | 000,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.10.30 11:20:51 | 002,322,184 | ---- | M] (ESET) -- C:\Users\DAHLMANN\Desktop\esetsmartinstaller_enu.exe
[2012.10.30 11:17:52 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2012.10.30 11:17:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.10.30 11:17:29 | 2145,574,912 | -HS- | M] () -- C:\hiberfil.sys
[2012.10.30 09:26:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\DAHLMANN\Desktop\OTL.exe
[2012.10.29 10:27:09 | 000,000,000 | ---- | M] () -- C:\Users\DAHLMANN\defogger_reenable
[2012.10.28 18:53:48 | 000,000,000 | ---- | M] () -- C:\Users\DAHLMANN\AppData\Roaming\CE96.exe
[2012.10.24 08:44:49 | 000,397,272 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.10.09 15:53:24 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.10.09 15:53:24 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.10.08 07:37:11 | 000,020,690 | ---- | M] () -- C:\Users\DAHLMANN\Documents\cc_20121008_083706.reg
[1 C:\Users\DAHLMANN\AppData\Roaming\*.tmp files -> C:\Users\DAHLMANN\AppData\Roaming\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.10.30 13:44:30 | 000,538,941 | ---- | C] () -- C:\Users\DAHLMANN\Desktop\adwcleaner.exe
[2012.10.30 12:13:53 | 000,402,631 | ---- | C] () -- C:\Users\DAHLMANN\.recently-used.xbel
[2012.10.30 11:25:19 | 000,001,441 | ---- | C] () -- C:\scu.dat
[2012.10.29 10:27:09 | 000,000,000 | ---- | C] () -- C:\Users\DAHLMANN\defogger_reenable
[2012.10.28 20:59:03 | 002,411,637 | ---- | C] () -- C:\Users\DAHLMANN\Adventkaffee.png
[2012.10.28 18:53:48 | 000,000,000 | ---- | C] () -- C:\Users\DAHLMANN\AppData\Roaming\CE96.exe
[2012.10.21 23:44:07 | 000,041,156 | ---- | C] () -- C:\Users\DAHLMANN\Desktop\Biblographie Roberts_Robb.odt
[2012.10.19 19:08:30 | 000,001,093 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xenofex 2 Manual.lnk
[2012.10.08 07:37:09 | 000,020,690 | ---- | C] () -- C:\Users\DAHLMANN\Documents\cc_20121008_083706.reg
[2012.09.28 15:36:56 | 000,180,224 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012.09.17 10:48:41 | 001,006,448 | ---- | C] () -- C:\Windows\System32\dmwu.exe
[2012.09.17 10:48:41 | 000,028,160 | ---- | C] () -- C:\Windows\System32\ImHttpComm.dll
[2012.08.16 19:49:23 | 000,160,831 | ---- | C] () -- C:\Windows\Sqirlz Water Reflections Uninstaller.exe
[2012.07.05 18:20:15 | 000,000,013 | ---- | C] () -- C:\Users\DAHLMANN\AppData\Roaming\urhtps.dat
[2012.07.04 16:23:54 | 000,000,051 | ---- | C] () -- C:\Users\DAHLMANN\AppData\Roaming\blckdom.res
[2012.06.13 23:24:32 | 005,586,664 | ---- | C] () -- C:\Windows\System32\WTMKM.exe
[2012.06.13 23:24:32 | 000,397,032 | ---- | C] () -- C:\Windows\System32\atwtusb.exe
[2012.06.13 23:24:32 | 000,118,432 | ---- | C] () -- C:\Windows\System32\Calibration.exe
[2012.06.13 23:24:32 | 000,045,056 | ---- | C] () -- C:\Windows\System32\InstallService.exe
[2012.06.13 23:24:31 | 000,180,224 | ---- | C] () -- C:\Windows\System32\ATWTINK.DLL
[2012.06.13 23:24:31 | 000,106,216 | ---- | C] () -- C:\Windows\RmTablet.exe
[2012.06.13 23:24:31 | 000,010,251 | ---- | C] () -- C:\Windows\System32\Default_2.ini
[2012.06.13 23:24:31 | 000,009,868 | ---- | C] () -- C:\Windows\System32\Default_1.ini
[2012.06.13 23:24:31 | 000,008,229 | ---- | C] () -- C:\Windows\aiptbl.ini
[2012.06.13 23:24:31 | 000,000,677 | ---- | C] () -- C:\Windows\System32\MKProfile.ini
[2012.04.12 20:30:10 | 000,637,743 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2011.12.12 11:48:40 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.11.21 21:35:22 | 000,000,064 | ---- | C] () -- C:\Windows\GPlrLanc.dat
[2011.10.26 02:20:30 | 000,037,376 | ---- | C] () -- C:\Windows\System32\atitmpxx.dll
[2011.10.25 21:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\System32\OVDecoder.dll
[2011.09.12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2011.07.14 10:21:38 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2011.04.03 23:12:22 | 000,000,038 | ---- | C] () -- C:\Windows\System32\ZX9EQJT7_{7163EAD3-00C3-454F-A6D3-D2F9BE5F046E}.dat
[2011.02.22 16:18:42 | 000,000,192 | ---- | C] () -- C:\Users\DAHLMANN\AppData\Roaming\wklnhst.dat
[2011.02.06 14:59:53 | 000,018,432 | ---- | C] () -- C:\Users\DAHLMANN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.02.06 13:03:26 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2011.02.06 13:03:26 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2009.07.12 14:54:00 | 000,002,032 | ---- | C] () -- C:\Users\DAHLMANN\AppData\Local\d3d9caps.dat
========== ZeroAccess Check ==========
[2006.11.02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2011.12.26 15:46:09 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\1&1 Mail & Media GmbH
[2012.10.19 20:22:47 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\Alien Skin
[2011.10.07 10:23:35 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\Canneverbe Limited
[2012.10.29 21:05:32 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\Dropbox
[2012.03.04 21:35:48 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\DVDVideoSoft
[2012.03.04 21:35:38 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.02.28 19:35:53 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\EPSON
[2011.01.09 14:28:44 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\FloodLightGames
[2011.11.08 00:43:37 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\FOG Downloader
[2012.10.30 11:40:18 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\gtk-2.0
[2011.07.14 10:37:54 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\OpenOffice.org
[2011.02.06 13:21:16 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\PC Suite
[2011.06.27 22:26:06 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\Pogo Games
[2011.02.06 13:03:11 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\Samsung
[2011.07.14 10:00:03 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\Template
[2012.01.10 12:39:42 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\toolplugin
[2010.04.02 18:18:00 | 000,000,000 | ---D | M] -- C:\Users\DAHLMANN\AppData\Roaming\WinBatch
========== Purity Check ==========
< End of report >
Extras Code:
OTL Extras logfile created on: 30.10.2012 13:44:00 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\DAHLMANN\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 0,98 Gb Available Physical Memory | 49,27% Memory free
4,24 Gb Paging File | 2,87 Gb Available in Paging File | 67,74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 453,55 Gb Total Space | 174,85 Gb Free Space | 38,55% Space Free | Partition Type: NTFS
Drive D: | 12,21 Gb Total Space | 1,67 Gb Free Space | 13,66% Space Free | Partition Type: NTFS
Drive R: | 465,75 Gb Total Space | 446,42 Gb Free Space | 95,85% Space Free | Partition Type: NTFS
Computer Name: GERO-PC | User Name: DAHLMANN | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0068029A-B116-4D49-8678-A984FFDED2EF}" = lport=445 | protocol=6 | dir=in | app=system |
"{2F84DDA7-B8DC-4F99-9CD7-CDE2DF2CEC43}" = lport=139 | protocol=6 | dir=in | app=system |
"{33CFB0F7-598F-48C3-BC6A-2CA741E8EBB3}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{3761CBA1-1873-4D87-8752-121C983C4B93}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{4846AAC2-DACC-4B93-840A-5B781946501E}" = rport=138 | protocol=17 | dir=out | app=system |
"{4B084D7E-1726-487A-B47F-BE1AAE5C75BD}" = lport=138 | protocol=17 | dir=in | app=system |
"{55B3A1F4-4494-44C5-9CE8-922BB5AE638B}" = lport=137 | protocol=17 | dir=in | app=system |
"{C0AC44FA-1CF1-40FD-AC98-3E795C41D02F}" = rport=445 | protocol=6 | dir=out | app=system |
"{D0A0C0FB-319D-4AF9-9623-80E4247C9113}" = rport=137 | protocol=17 | dir=out | app=system |
"{EFFB3AD1-553C-42D7-B728-B4DDE1268E08}" = rport=139 | protocol=6 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{080DE684-EDEF-4CD9-9579-0DD7D9EB3A27}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{08BD93D2-8ACE-4BB1-B878-D2FAA8E855AC}" = protocol=6 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsvsvr.exe |
"{1075F1D0-1DB8-44C1-8FB1-99D76155F610}" = protocol=6 | dir=in | app=r:\games\steam\steam.exe |
"{10E976F7-3713-4D68-9707-79F661D8A7DD}" = protocol=6 | dir=in | app=r:\games\steam\steamapps\common\blades of time\bladesoftime.exe |
"{158863FB-48B6-4F9D-A02D-FBB7E966E793}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{1D3CD3ED-2D97-4747-96CB-CF2FCABEEDA4}" = protocol=17 | dir=in | app=r:\games\steam\steamapps\common\blades of time\bladesoftime.exe |
"{3F13BDBD-A749-4B2D-90E8-0B7032DC4F6A}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{4C1DB663-9628-4562-B1A4-D105C57977E0}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe |
"{523E50CA-C6D0-446A-BDE7-35E56695AEAB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{6AC4E75A-79B8-4DB4-991E-9E55E61869CE}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{6B65A8FC-C84C-4439-B15E-1DB3B06DBD18}" = protocol=17 | dir=in | app=r:\games\steam\steam.exe |
"{6B7672D5-88BD-46E9-8399-E2B1798D01DE}" = protocol=6 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsasvr.exe |
"{874D150C-4275-4F2F-BFD0-0744157062EC}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{944F65A9-07B6-4C77-9157-50A7772B4577}" = protocol=17 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsvsvr.exe |
"{9FC1EC6B-2E73-447E-8649-157FD94E70D2}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe |
"{A981034D-3AB5-4867-BF7C-C4AF0DED76A5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{A9B1A99E-5F29-431D-97F5-3C968DE1205B}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B3E35E8B-A3E5-4120-92CB-EEC80ACCADDD}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{E29DC291-523F-40D8-B36B-F6B952546ADA}" = protocol=17 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsasvr.exe |
"{F2222BEF-5631-4A8F-BC91-17473D714F06}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe |
"{F3BBFF7B-87A4-4371-9B81-F260F7AEA9C4}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe |
"{F7C61352-3691-4AFB-9FDD-D1E339DC04BF}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{FD046431-D388-4BE4-85B3-A84A6F26B0BA}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe |
"TCP Query User{041F4DC0-498C-4BC4-B331-1FC635395B50}C:\program files\rom\client.exe" = protocol=6 | dir=in | app=c:\program files\rom\client.exe |
"TCP Query User{7DC6E08F-CBDD-45B4-952C-F86CBACDAED8}C:\stick rebby\eclipse\eclipse.exe" = protocol=6 | dir=in | app=c:\stick rebby\eclipse\eclipse.exe |
"TCP Query User{CF96DD63-8382-4A3B-8A12-A699CB7A2A7E}C:\program files\rom\launcher.exe" = protocol=6 | dir=in | app=c:\program files\rom\launcher.exe |
"UDP Query User{0179A92A-5CC5-4798-85AB-AD5D05D0D229}C:\stick rebby\eclipse\eclipse.exe" = protocol=17 | dir=in | app=c:\stick rebby\eclipse\eclipse.exe |
"UDP Query User{2404FF9F-5DA9-4BFB-8098-D56786A68837}C:\program files\rom\launcher.exe" = protocol=17 | dir=in | app=c:\program files\rom\launcher.exe |
"UDP Query User{6EF4AA18-0635-43A4-B7F9-841B397215CF}C:\program files\rom\client.exe" = protocol=17 | dir=in | app=c:\program files\rom\client.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{14DDF23F-414A-46DB-4762-56569080292C}" = CCC Help Russian
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21D6A73A-48E6-2195-C408-2158273A914E}" = Catalyst Control Center Localization All
"{2222706F-666A-4037-7777-210328764D10}" = JavaFX 2.1.0 SDK
"{2596DB11-997F-FC5B-F5C2-737623D9D8B6}" = Catalyst Control Center
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 9
"{28904D9A-13A6-ECA2-48D8-21542759D998}" = CCC Help Polish
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2C8BBDA6-79A7-B2DE-3E5B-287E7F667C67}" = CCC Help Danish
"{2E119961-E99B-C147-9AC3-A93683172DC1}" = CCC Help Swedish
"{2FA75B40-17C9-4D22-88CA-80A5D52FAB13}" = LightScribe System Software
"{32A3A4F4-B792-11D6-A78A-00B0D0170040}" = Java SE Development Kit 7 Update 4
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{44ED90A1-453B-5C9A-D9ED-80D8AB0258B8}" = CCC Help Thai
"{45E00595-897E-64B6-28F9-5D0927EBA4A5}" = CCC Help Chinese Standard
"{46DE5F4E-BA8B-AC9E-0EED-05B7D93AD215}" = CCC Help Spanish
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5B04E832-4530-B8FF-F742-8BE25ADD43BD}" = CCC Help German
"{5ED93D68-5EAA-9343-9B74-B1E276217264}" = CCC Help Dutch
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B976ADF-8AE8-434E-B282-A06C7F624D2F}" = Python 2.5.2
"{6D185295-DE89-9C39-18E6-310C148836EB}" = CCC Help Chinese Traditional
"{71A8F958-D272-E262-7C9A-7B8F713EE0C3}" = CCC Help French
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7513D3F0-55BC-273C-7A53-488394EDBFCC}" = CCC Help Italian
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{79AA9BFA-F962-A1E9-71CE-D0887A92444C}" = CCC Help Portuguese
"{7ACEF1BF-9306-5AD7-5F30-ECE72A81E924}" = CCC Help Finnish
"{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{83721450-E604-4C37-ABEB-CE7F18C587C8}" = LightScribe Template Labeler
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C1EC871-05B9-03B7-96F6-9BD5C0D8F41D}" = Catalyst Control Center Graphics Previews Common
"{A0640EC2-B97E-4FC1-AD14-227C9E386BB4}" = HP Recovery Manager RSS
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = Runes of Magic
"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B83FC356-B7C0-441F-8A4D-D71E088E7974}" = NVIDIA PhysX
"{C028F57F-603A-AB6E-F2D0-1374EA538F8A}" = ccc-utility
"{C4129D57-5C83-3BF0-A11A-3798C008C6C7}" = CCC Help Greek
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0BC4101-6C30-ECFF-F693-63408134F29B}" = CCC Help Czech
"{D2402DAD-B180-A4A0-261D-4A8933BFBFEE}" = CCC Help Japanese
"{D5068813-9F8D-9F7A-92C0-A3EECBA2D82B}" = AMD Catalyst Install Manager
"{DA7E8D81-2B14-415B-8FC5-02CE4CF9F839}" = CCC Help Hungarian
"{DB3FBD3C-A061-34C9-0A2B-6CCDD8C96640}" = CCC Help Turkish
"{E086E914-2928-48F9-364B-0C715DFF6A45}" = CCC Help Korean
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E8F30BD6-ABAB-C24E-E9A7-BF67EB96152C}" = CCC Help Norwegian
"{E9A5B6CD-7ABB-F295-2E11-F25BC322FF80}" = CCC Help English
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{F6D6B258-E3CA-4AAC-965A-68D3E3140A8C}" = iTunes
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira Free Antivirus
"CCleaner" = CCleaner
"Defraggler" = Defraggler
"DivX Setup" = DivX-Setup
"DVD Flick_is1" = DVD Flick 1.3.0.7
"EPSON BX300F Series" = EPSON BX300F Series Printer Uninstall
"EPSON Scanner" = EPSON Scan
"ESET Online Scanner" = ESET Online Scanner v3
"FormatFactory" = FormatFactory 2.70
"Free ISO Creator (by minidvdsoft)_is1" = Free ISO Creator version 2.8
"Free Video Dub_is1" = Free Video Dub version 1.8.12.804
"Free YouTube Download_is1" = Free YouTube Download version 3.0.13.815
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.17.221
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.65.1.1000
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 16.0.2 (x86 de)" = Mozilla Firefox 16.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"PC-Doctor for Windows" = Hardware Diagnose Tools
"RealPlayer 15.0" = RealPlayer
"Rmtablet" = Pen Pad Driver with Macro Key Manager
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile Modem Device" = Samsung Mobile Modem Device Software
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SAMSUNG USB Mobile Device" = SAMSUNG USB Mobile Device Software
"Sqirlz Water Reflections" = Sqirlz Water Reflections
"Steam App 208670" = Blades of Time
"SystemRequirementsLab" = System Requirements Lab
"Venetica_is1" = Venetica
"VLC media player" = VLC media player 1.1.11
"WildTangent hp Master Uninstall" = My HP Games
"WinGimp-2.0_is1" = GIMP 2.6.11
"WNLT" = Web Optimizer
"Xenofex2" = Alien Skin Xenofex 2.0
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 18.05.2012 06:56:42 | Computer Name = Gero-PC | Source = RasClient | ID = 20227
Description =
Error - 18.05.2012 08:48:03 | Computer Name = Gero-PC | Source = WinMgmt | ID = 10
Description =
Error - 19.05.2012 03:01:42 | Computer Name = Gero-PC | Source = WinMgmt | ID = 10
Description =
Error - 19.05.2012 03:29:51 | Computer Name = Gero-PC | Source = WinMgmt | ID = 10
Description =
Error - 19.05.2012 15:34:41 | Computer Name = Gero-PC | Source = WinMgmt | ID = 10
Description =
Error - 20.05.2012 02:55:38 | Computer Name = Gero-PC | Source = WinMgmt | ID = 10
Description =
Error - 20.05.2012 02:56:42 | Computer Name = Gero-PC | Source = RasClient | ID = 20227
Description =
Error - 20.05.2012 05:33:56 | Computer Name = Gero-PC | Source = WinMgmt | ID = 10
Description =
Error - 21.05.2012 03:03:15 | Computer Name = Gero-PC | Source = WinMgmt | ID = 10
Description =
Error - 21.05.2012 06:28:39 | Computer Name = Gero-PC | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 30.10.2012 05:57:41 | Computer Name = Gero-PC | Source = DCOM | ID = 10005
Description =
Error - 30.10.2012 05:57:42 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7009
Description =
Error - 30.10.2012 05:57:42 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7000
Description =
Error - 30.10.2012 06:06:48 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7034
Description =
Error - 30.10.2012 06:11:06 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 30.10.2012 06:11:06 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 30.10.2012 06:11:06 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7026
Description =
Error - 30.10.2012 06:19:11 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 30.10.2012 06:19:11 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 30.10.2012 06:19:11 | Computer Name = Gero-PC | Source = Service Control Manager | ID = 7026
Description =
< End of report >
AdwCleaner R1 Code:
# AdwCleaner v2.005 - Datei am 30/10/2012 um 13:45:03 erstellt
# Aktualisiert am 14/10/2012 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : DAHLMANN - GERO-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\DAHLMANN\Desktop\adwcleaner.exe
# Option [Suche]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Datei Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Datei Gefunden : C:\user.js
Ordner Gefunden : C:\Program Files\SweetIM
Ordner Gefunden : C:\Users\DAHLMANN\AppData\LocalLow\boost_interprocess
Ordner Gefunden : C:\Users\DAHLMANN\AppData\Roaming\Mozilla\Firefox\Profiles\8wsknoc1.default\ConduitCommon
Ordner Gefunden : C:\Users\DAHLMANN\AppData\Roaming\Mozilla\Firefox\Profiles\8wsknoc1.default\CT2843456
Ordner Gefunden : C:\Users\DAHLMANN\AppData\Roaming\Mozilla\Firefox\Profiles\8wsknoc1.default\extensions\{0e3dbc69-a682-48da-84e1-82c63a5d678e}
Ordner Gefunden : C:\Users\DAHLMANN\AppData\Roaming\Toolplugin
***** [Registrierungsdatenbank] *****
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gefunden : HKCU\Software\IM
Schlüssel Gefunden : HKCU\Software\ImInstaller
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gefunden : HKLM\Software\Web Assistant
***** [Internet Browser] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v16.0.2 (de)
Profilname : default
Datei : C:\Users\DAHLMANN\AppData\Roaming\Mozilla\Firefox\Profiles\8wsknoc1.default\prefs.js
Gefunden : user_pref("CT2843456..clientLogIsEnabled", false);
Gefunden : user_pref("CT2843456..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Gefunden : user_pref("CT2843456..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Gefunden : user_pref("CT2843456.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Gefunden : user_pref("CT2843456.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Gefunden : user_pref("CT2843456.AppTrackingLastCheckTime", "Tue Aug 21 2012 05:32:50 GMT+0200");
Gefunden : user_pref("CT2843456.BrowserCompStateIsOpen_1334739430000", true);
Gefunden : user_pref("CT2843456.CT2843456", "CT2843456");
Gefunden : user_pref("CT2843456.CommunitiesChangesLastCheckTime", "0");
Gefunden : user_pref("CT2843456.CurrentServerDate", "30-10-2012");
Gefunden : user_pref("CT2843456.DSInstall", false);
Gefunden : user_pref("CT2843456.DialogsAlignMode", "LTR");
Gefunden : user_pref("CT2843456.DialogsGetterLastCheckTime", "Sat Oct 27 2012 16:57:27 GMT+0200");
Gefunden : user_pref("CT2843456.DownloadReferralCookieData", "");
Gefunden : user_pref("CT2843456.EnableSearchHistory", false);
Gefunden : user_pref("CT2843456.EnableSearchSuggest", false);
Gefunden : user_pref("CT2843456.FeedPollDate11011575", "Fri Jan 20 2012 23:07:19 GMT+0100");
Gefunden : user_pref("CT2843456.FeedPollDate2574136", "Fri Jan 20 2012 23:07:19 GMT+0100");
Gefunden : user_pref("CT2843456.FeedPollDate4280505", "Fri Jan 20 2012 23:07:19 GMT+0100");
Gefunden : user_pref("CT2843456.FeedPollDate6372323", "Fri Jan 20 2012 23:07:19 GMT+0100");
Gefunden : user_pref("CT2843456.FeedPollDate9365294", "Fri Jan 20 2012 23:07:19 GMT+0100");
Gefunden : user_pref("CT2843456.FirstServerDate", "19-1-2012");
Gefunden : user_pref("CT2843456.FirstTime", true);
Gefunden : user_pref("CT2843456.FirstTimeFF3", true);
Gefunden : user_pref("CT2843456.FixPageNotFoundErrors", false);
Gefunden : user_pref("CT2843456.GroupingInvalidateCache", false);
Gefunden : user_pref("CT2843456.GroupingLastCheckTime", "0");
Gefunden : user_pref("CT2843456.GroupingLastServerUpdateTime", "0");
Gefunden : user_pref("CT2843456.GroupingServerCheckInterval", 1440);
Gefunden : user_pref("CT2843456.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Gefunden : user_pref("CT2843456.HPInstall", false);
Gefunden : user_pref("CT2843456.HasUserGlobalKeys", true);
Gefunden : user_pref("CT2843456.HomePageProtectorEnabled", false);
Gefunden : user_pref("CT2843456.HomepageBeforeUnload", "chrome://branding/locale/browserconfig.properties");
Gefunden : user_pref("CT2843456.Initialize", true);
Gefunden : user_pref("CT2843456.InitializeCommonPrefs", true);
Gefunden : user_pref("CT2843456.InstallationAndCookieDataSentCount", 3);
Gefunden : user_pref("CT2843456.InstallationType", "Unknown");
Gefunden : user_pref("CT2843456.InstalledDate", "Wed Jan 18 2012 22:17:48 GMT+0100");
Gefunden : user_pref("CT2843456.InvalidateCache", false);
Gefunden : user_pref("CT2843456.IsAlertDBUpdated", true);
Gefunden : user_pref("CT2843456.IsGrouping", false);
Gefunden : user_pref("CT2843456.IsInitSetupIni", true);
Gefunden : user_pref("CT2843456.IsMulticommunity", false);
Gefunden : user_pref("CT2843456.IsOpenThankYouPage", true);
Gefunden : user_pref("CT2843456.IsOpenUninstallPage", true);
Gefunden : user_pref("CT2843456.IsProtectorsInit", true);
Gefunden : user_pref("CT2843456.LanguagePackLastCheckTime", "Mon Oct 29 2012 22:56:26 GMT+0100");
Gefunden : user_pref("CT2843456.LanguagePackReloadIntervalMM", 1440);
Gefunden : user_pref("CT2843456.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Gefunden : user_pref("CT2843456.LastLogin_3.10.0.1", "Wed Apr 18 2012 14:22:40 GMT+0200");
Gefunden : user_pref("CT2843456.LastLogin_3.12.0.7", "Thu Apr 26 2012 21:18:51 GMT+0200");
Gefunden : user_pref("CT2843456.LastLogin_3.12.2.3", "Wed May 30 2012 22:03:17 GMT+0200");
Gefunden : user_pref("CT2843456.LastLogin_3.13.0.6", "Wed Aug 22 2012 14:45:00 GMT+0200");
Gefunden : user_pref("CT2843456.LastLogin_3.15.1.0", "Tue Oct 30 2012 13:20:16 GMT+0100");
Gefunden : user_pref("CT2843456.LastLogin_3.9.0.3", "Wed Mar 07 2012 22:28:01 GMT+0100");
Gefunden : user_pref("CT2843456.LatestVersion", "3.14.1.0");
Gefunden : user_pref("CT2843456.Locale", "de-de");
Gefunden : user_pref("CT2843456.MCDetectTooltipHeight", "83");
Gefunden : user_pref("CT2843456.MCDetectTooltipShow", false);
Gefunden : user_pref("CT2843456.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Gefunden : user_pref("CT2843456.MCDetectTooltipWidth", "295");
Gefunden : user_pref("CT2843456.MyStuffEnabledAtInstallation", true);
Gefunden : user_pref("CT2843456.OriginalFirstVersion", "3.9.0.3");
Gefunden : user_pref("CT2843456.RadioIsPodcast", false);
Gefunden : user_pref("CT2843456.RadioLastCheckTime", "0");
Gefunden : user_pref("CT2843456.RadioLastUpdateIPServer", "0");
Gefunden : user_pref("CT2843456.RadioLastUpdateServer", "0");
Gefunden : user_pref("CT2843456.RadioMediaID", "10887511");
Gefunden : user_pref("CT2843456.RadioMediaType", "Media Player");
Gefunden : user_pref("CT2843456.RadioMenuSelectedID", "EBRadioMenu_CT2843456_RECENT10887511");
Gefunden : user_pref("CT2843456.RadioShrinked", "expanded");
Gefunden : user_pref("CT2843456.RadioShrinkedFromSetup", false);
Gefunden : user_pref("CT2843456.RadioStationName", "BlackBeats%20FM%20(D)");
Gefunden : user_pref("CT2843456.RadioStationURL", "hxxp://www.blackbeats.fm/listen.m3u");
Gefunden : user_pref("CT2843456.RadioVolume", "100");
Gefunden : user_pref("CT2843456.SHRINK_TOOLBAR", 1);
Gefunden : user_pref("CT2843456.SearchBoxWidth", 100);
Gefunden : user_pref("CT2843456.SearchCaption", "Bigpoint Games DE Customized Web Search");
Gefunden : user_pref("CT2843456.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Gefunden : user_pref("CT2843456.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Gefunden : user_pref("CT2843456.SearchFromAddressBarIsInit", true);
Gefunden : user_pref("CT2843456.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT284[...]
Gefunden : user_pref("CT2843456.SearchInNewTabEnabled", true);
Gefunden : user_pref("CT2843456.SearchInNewTabIntervalMM", 1440);
Gefunden : user_pref("CT2843456.SearchInNewTabLastCheckTime", "Mon Oct 29 2012 22:56:04 GMT+0100");
Gefunden : user_pref("CT2843456.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Gefunden : user_pref("CT2843456.SearchInNewTabUserEnabled", false);
Gefunden : user_pref("CT2843456.SearchProtectorEnabled", false);
Gefunden : user_pref("CT2843456.SearchProtectorToolbarDisabled", false);
Gefunden : user_pref("CT2843456.SendProtectorDataViaLogin", true);
Gefunden : user_pref("CT2843456.ServiceMapLastCheckTime", "Mon Oct 29 2012 19:15:34 GMT+0100");
Gefunden : user_pref("CT2843456.SettingsLastCheckTime", "Tue Oct 30 2012 13:41:43 GMT+0100");
Gefunden : user_pref("CT2843456.SettingsLastUpdate", "1351515188");
Gefunden : user_pref("CT2843456.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2843456&SearchSource=13");
Gefunden : user_pref("CT2843456.ThirdPartyComponentsInterval", 504);
Gefunden : user_pref("CT2843456.ThirdPartyComponentsLastCheck", "Tue Oct 30 2012 09:20:16 GMT+0100");
Gefunden : user_pref("CT2843456.ThirdPartyComponentsLastUpdate", "1331806000");
Gefunden : user_pref("CT2843456.ToolbarShrinkedFromSetup", false);
Gefunden : user_pref("CT2843456.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2843456");
Gefunden : user_pref("CT2843456.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Gefunden : user_pref("CT2843456.UserID", "UN18954106453702657");
Gefunden : user_pref("CT2843456.ValidationData_Search", 2);
Gefunden : user_pref("CT2843456.ValidationData_Toolbar", 2);
Gefunden : user_pref("CT2843456.WeatherNetwork", "");
Gefunden : user_pref("CT2843456.WeatherPollDate", "Tue Oct 30 2012 13:20:53 GMT+0100");
Gefunden : user_pref("CT2843456.WeatherUnit", "C");
Gefunden : user_pref("CT2843456.alertChannelId", "1235508");
Gefunden : user_pref("CT2843456.approveUntrustedApps", false);
Gefunden : user_pref("CT2843456.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D4[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e.:2z527", "247E707571777278333228702A7B797B7B7E30273224262[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e06cg5el8:", "6E6D6E6E6C6F746F7273");
Gefunden : user_pref("CT2843456.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473747472757A757879242F4B4947[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347474[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Gefunden : user_pref("CT2843456.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215[...]
Gefunden : user_pref("CT2843456.backendstorage./9b-0?3g>d", "3E3F3B6C726C72457A73454745207A7C7A7A2520217D7C2A21[...]
Gefunden : user_pref("CT2843456.backendstorage./9b-0?3g@6:5;", "");
Gefunden : user_pref("CT2843456.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E424[...]
Gefunden : user_pref("CT2843456.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Gefunden : user_pref("CT2843456.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484778213F3E484F4E4D464[...]
Gefunden : user_pref("CT2843456.backendstorage./9b5ba==9cjag", "3B677070404343427A4275474A48794B497D214C7A");
Gefunden : user_pref("CT2843456.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6E6E6C6F746F717570757A");
Gefunden : user_pref("CT2843456.backendstorage./9b9643g3/9e", "6A");
Gefunden : user_pref("CT2843456.backendstorage./9b<:222h64<", "393F352F3E");
Gefunden : user_pref("CT2843456.backendstorage./9b=+03eh8h8j?:", "4443");
Gefunden : user_pref("CT2843456.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Gefunden : user_pref("CT2843456.backendstorage./9b?b0d:8aj62<h", "6D");
Gefunden : user_pref("CT2843456.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Gefunden : user_pref("CT2843456.backendstorage.shoppingapp.gk.exipres", "4D6F6E2041707220323320323031322031343A[...]
Gefunden : user_pref("CT2843456.backendstorage.shoppingapp.gk.geolocation", "6765726D616E79");
Gefunden : user_pref("CT2843456.components.1000082", false);
Gefunden : user_pref("CT2843456.components.1000234", true);
Gefunden : user_pref("CT2843456.components.1001", true);
Gefunden : user_pref("CT2843456.components.129343781516544078", true);
Gefunden : user_pref("CT2843456.components.129363610551587824", false);
Gefunden : user_pref("CT2843456.components.129408511414388383", true);
Gefunden : user_pref("CT2843456.components.1334739430000", false);
Gefunden : user_pref("CT2843456.counterAppsRemoved", 2);
Gefunden : user_pref("CT2843456.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Gefunden : user_pref("CT2843456.globalFirstTimeInfoLastCheckTime", "Sun Oct 28 2012 18:10:15 GMT+0100");
Gefunden : user_pref("CT2843456.homepageProtectorEnableByLogin", true);
Gefunden : user_pref("CT2843456.initDone", true);
Gefunden : user_pref("CT2843456.isAppTrackingManagerOn", false);
Gefunden : user_pref("CT2843456.isFirstRadioInstallation", false);
Gefunden : user_pref("CT2843456.myStuffEnabled", true);
Gefunden : user_pref("CT2843456.myStuffPublihserMinWidth", 400);
Gefunden : user_pref("CT2843456.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Gefunden : user_pref("CT2843456.myStuffServiceIntervalMM", 1440);
Gefunden : user_pref("CT2843456.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Gefunden : user_pref("CT2843456.oldAppsList", "129343781516075326,129343781516387827,111,129343781516544078,129[...]
Gefunden : user_pref("CT2843456.revertSettingsEnabled", true);
Gefunden : user_pref("CT2843456.searchProtectorDialogDelayInSec", 10);
Gefunden : user_pref("CT2843456.searchProtectorEnableByLogin", true);
Gefunden : user_pref("CT2843456.testingCtid", "");
Gefunden : user_pref("CT2843456.toolbarAppMetaDataLastCheckTime", "Mon Oct 29 2012 22:56:07 GMT+0100");
Gefunden : user_pref("CT2843456.toolbarContextMenuLastCheckTime", "Thu Oct 18 2012 09:18:30 GMT+0200");
Gefunden : user_pref("CT2843456.usageEnabled", false);
Gefunden : user_pref("CT2843456.usagesFlag", 2);
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2843456/CT2843456[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1235508/1231181/DE", "\"0\"[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1381201/1376860/DE", "\"0\"[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1391936/1387595/DE", "\"0\"[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/897678/893476/DE", "\"0\"")[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2843456", [...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2843456",[...]
Gefunden : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de-de", "\"[...]
Gefunden : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\DAHLMANN\\AppData\\Roaming\\Mozilla[...]
Gefunden : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
Gefunden : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://radiotuna.com/CompactRadio/Conduit", "320x700[...]
Gefunden : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Gefunden : user_pref("CommunityToolbar.ToolbarsList", "CT2843456");
Gefunden : user_pref("CommunityToolbar.ToolbarsList2", "CT2843456");
Gefunden : user_pref("CommunityToolbar.ToolbarsList4", "CT2843456");
Gefunden : user_pref("CommunityToolbar.globalUserId", "4b0aa286-9804-48cc-8e32-d1dc43d37d22");
Gefunden : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Gefunden : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Gefunden : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Oct 24 2012 09:59:5[...]
Gefunden : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Gefunden : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Gefunden : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Oct 30 2012 09:20:29 GMT+010[...]
Gefunden : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Gefunden : user_pref("CommunityToolbar.notifications.locale", "en");
Gefunden : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Gefunden : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Oct 29 2012 19:15:31 GMT+0100");
Gefunden : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Gefunden : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Gefunden : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Gefunden : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Gefunden : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Gefunden : user_pref("CommunityToolbar.notifications.userId", "9a2ed00e-3502-47a3-a71a-22627db345f6");
Gefunden : user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Gefunden : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]
Gefunden : user_pref("extensions.incredibar_i.aflt", "orgnl");
Gefunden : user_pref("extensions.incredibar_i.dfltLng", "");
Gefunden : user_pref("extensions.incredibar_i.did", "10665");
Gefunden : user_pref("extensions.incredibar_i.excTlbr", false);
Gefunden : user_pref("extensions.incredibar_i.id", "580bf321000000000000000000000000");
Gefunden : user_pref("extensions.incredibar_i.installerproductid", "26");
Gefunden : user_pref("extensions.incredibar_i.instlDay", "15504");
Gefunden : user_pref("extensions.incredibar_i.instlRef", "");
Gefunden : user_pref("extensions.incredibar_i.ms_url_id", "");
Gefunden : user_pref("extensions.incredibar_i.newTab", false);
Gefunden : user_pref("extensions.incredibar_i.ppd", "");
Gefunden : user_pref("extensions.incredibar_i.prdct", "incredibar");
Gefunden : user_pref("extensions.incredibar_i.productid", "26");
Gefunden : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Gefunden : user_pref("extensions.incredibar_i.smplGrp", "none");
Gefunden : user_pref("extensions.incredibar_i.tlbrId", "base");
Gefunden : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8vUSfg15&loc=IB[...]
Gefunden : user_pref("extensions.incredibar_i.upn2", "6R8vUSfg15");
Gefunden : user_pref("extensions.incredibar_i.upn2n", "92824530702730795");
Gefunden : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Gefunden : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.140:54:05");
Gefunden : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
*************************
AdwCleaner[R1].txt - [23837 octets] - [30/10/2012 13:45:03]
########## EOF - C:\AdwCleaner[R1].txt - [23898 octets] ##########
Soweit läuft der PC gut. Auf der externen HDD sind die ominösen Verknüpfungen weg. Die Speicherplatzbelegung ist die gleiche wie vor den Problemen, meine Daten sehe ich aber leider nicht. Ich hoffe da kann man noch was machen. |
