Trojaner-Board - Iexplore.exe und Firefox.exe selbst wenn Internetverbindung getrennt ist

So, also ist fertig.

OTL.txt:OTL Logfile:

Code:

OTL logfile created on: 20.01.2011 20:04:47 - Run 1

OTL by OldTimer - Version 3.2.20.3     Folder = C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\Downloads

Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.2180)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

446,00 Mb Total Physical Memory | 129,00 Mb Available Physical Memory | 29,00% Memory free

1,00 Gb Paging File | 1,00 Gb Available in Paging File | 72,00% Paging File free

Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 74,52 Gb Total Space | 27,10 Gb Free Space | 36,37% Space Free | Partition Type: NTFS

 

Computer Name: FAMILY-CLMX61RR | User Name: Kiddis | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools)

PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

PRC - C:\Programme\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)

PRC - C:\Programme\Winamp\winampa.exe (Nullsoft, Inc.)

PRC - C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)

PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)

PRC - C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)

PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)

PRC - C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)

PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

PRC - C:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin)

PRC - C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin)

PRC - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company)

PRC - C:\Programme\Multimedia Card Reader\shwicon2k.exe (Alcor Micro, Corp.)

PRC - C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

 

 
 ========== Modules (SafeList) ==========

 

MOD - C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools)

MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll (Microsoft Corporation)

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - (SSHNAS) --  File not found

SRV - (AppMgmt) --  File not found

SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe ()

SRV - (UserAccess7) SecuROM User Access Service (V7) -- C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)

SRV - (fsssvc) -- C:\Programme\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)

SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)

SRV - (SeaPort) -- C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)

SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)

SRV - (LVPrcSrv) -- C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)

SRV - (AVM WLAN Connection Service) -- C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin)

SRV - (LightScribeService) -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()

DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)

DRV - (fssfltr) -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)

DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)

DRV - (FilterService) -- C:\WINDOWS\system32\drivers\lvuvcflt.sys (Logitech Inc.)

DRV - (LVUVC) Logitech Webcam 200(UVC) -- C:\WINDOWS\system32\drivers\lvuvc.sys (Logitech Inc.)

DRV - (LVRS) -- C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)

DRV - (lvpopflt) -- C:\WINDOWS\system32\drivers\lvpopflt.sys (Logitech Inc.)

DRV - (LVPr2Mon) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys ()

DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)

DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)

DRV - (FWLANUSB) -- C:\WINDOWS\system32\drivers\fwlanusb.sys (AVM GmbH)

DRV - (avmeject) -- C:\WINDOWS\system32\drivers\avmeject.sys (AVM Berlin)

DRV - (SunkFilt) -- C:\WINDOWS\system32\drivers\Sunkfilt.sys (Alcor Micro Corp.)

DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)

DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology)

DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology)

DRV - (prohlp02) -- C:\WINDOWS\System32\drivers\prohlp02.sys (Protection Technology)

DRV - (prodrv06) -- C:\WINDOWS\System32\drivers\prodrv06.sys (Protection Technology)

DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)

DRV - (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\rtl8139.sys (Realtek Semiconductor Corporation)

DRV - (sfhlp01) -- C:\WINDOWS\System32\drivers\sfhlp01.sys (Protection Technology)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 

IE - HKLM\..\URLSearchHook:  - Reg Error: Key error. File not found

IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: Key error. File not found

IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\..\URLSearchHook:  - Reg Error: Key error. File not found

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: Key error. File not found

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\tbDVD0.dll (Conduit Ltd.)

IE - HKU\S-1-5-21-823518204-2000478354-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultenginename: "foxsearch"

FF - prefs.js..browser.search.defaultthis.engineName: "Search"

FF - prefs.js..browser.search.defaulturl: "hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q="

FF - prefs.js..browser.search.order.1: "foxsearch"

FF - prefs.js..browser.search.param.yahoo-fr: "chrf-ytbm"

FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm"

FF - prefs.js..browser.search.param.yahoo-type: "${8}"

FF - prefs.js..browser.search.selectedEngine: "foxsearch"

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "www.google.de"

FF - prefs.js..extensions.enabledItems: Hotbar@Hotbar.com:11.0.0.0

FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..keyword.URL: "hxxp://www.finduny.com?client=mozilla-firefox&cd=UTF-8&search=1&q="

 

FF - user.js..browser.search.selectedEngine: "foxsearch"

FF - user.js..browser.search.order.1: "foxsearch"

FF - user.js..browser.search.defaultenginename: "foxsearch"

FF - user.js..keyword.URL: "hxxp://www.finduny.com?client=mozilla-firefox&cd=UTF-8&search=1&q="

 

FF - HKLM\software\mozilla\Firefox\extensions\\Hotbar@Hotbar.com: C:\Programme\Hotbar\bin\11.0.78.0\firefox\extensions [2009.10.14 17:52:27 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.01.19 18:29:02 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.01.19 18:29:00 | 000,000,000 | ---D | M]

 

[2009.09.23 13:13:10 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Extensions

[2011.01.20 18:18:55 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\extensions

[2010.12.26 00:28:16 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}

[2010.07.24 21:38:20 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2010.03.26 16:52:37 | 000,002,080 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\bing.xml

[2010.11.09 19:55:01 | 000,000,873 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\conduit.xml

[2011.01.15 17:58:33 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-1.xml

[2010.10.21 18:45:55 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-10.xml

[2010.10.28 22:39:01 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-11.xml

[2010.11.09 20:57:36 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-12.xml

[2011.01.19 18:29:20 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-13.xml

[2010.03.10 07:30:51 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-2.xml

[2010.03.26 16:55:29 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-3.xml

[2010.06.23 12:45:56 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-4.xml

[2010.06.24 15:49:30 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-5.xml

[2010.07.07 08:42:46 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-6.xml

[2010.07.24 15:12:47 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-7.xml

[2010.07.30 17:35:08 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-8.xml

[2010.09.17 00:46:42 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin-9.xml

[2008.07.10 11:19:06 | 000,000,944 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\icqplugin.xml

[2010.03.26 16:52:37 | 000,002,060 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\kiwee-live-search.xml

[2011.01.18 18:04:03 | 000,005,401 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\searchcanvas.xml

[2010.03.10 07:37:31 | 000,003,915 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\sweetim.xml

[2010.07.07 09:24:37 | 000,001,196 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla\Firefox\Profiles\1rbyxroz.default\searchplugins\winamp-search.xml

[2011.01.20 18:18:55 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2011.01.20 18:11:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

[2009.10.14 17:52:27 | 000,000,000 | ---D | M] (Hotbar Component) -- C:\PROGRAMME\HOTBAR\BIN\11.0.78.0\FIREFOX\EXTENSIONS

[2011.01.20 18:10:24 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAMME\JAVA\JRE6\LIB\DEPLOY\JQS\FF

[2011.01.20 18:10:20 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll

[2010.03.19 08:23:30 | 000,686,592 | ---- | M] (Synatix GmbH) -- C:\Programme\Mozilla Firefox\plugins\npmieze.dll

[2010.01.13 23:46:00 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npwachk.dll

[2006.08.09 11:16:08 | 000,030,408 | ---- | M] ( ) -- C:\Programme\Mozilla Firefox\plugins\npWebLaunch.dll

[2009.10.26 14:45:36 | 000,102,400 | ---- | M] (Zylom) -- C:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll

[2010.12.03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml

[2010.09.07 14:11:20 | 000,002,226 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\babylon.xml

[2010.12.03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml

[2010.06.24 12:30:03 | 000,003,700 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\fast.png

[2010.06.24 12:30:03 | 000,001,963 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\fast.xml

[2010.07.30 17:44:50 | 000,000,143 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\foxsearch.src

[2010.12.03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml

[2010.12.03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml

[2010.12.03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2002.08.29 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.

O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (no name) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - No CLSID value found.

O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)

O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\tbDVD0.dll (Conduit Ltd.)

O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (no name) - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - No CLSID value found.

O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)

O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\tbDVD0.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (no name) - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Gutscheinmieze) - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Gutscheinmieze\toolbar.dll (Synatix GmbH)

O3 - HKLM\..\Toolbar: (no name) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - No CLSID value found.

O3 - HKU\S-1-5-21-823518204-2000478354-839522115-1004\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)

O3 - HKU\S-1-5-21-823518204-2000478354-839522115-1004\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\tbDVD0.dll (Conduit Ltd.)

O3 - HKU\S-1-5-21-823518204-2000478354-839522115-1004\..\Toolbar\WebBrowser: (Gutscheinmieze) - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Gutscheinmieze\toolbar.dll (Synatix GmbH)

O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [AVMWlanClient] C:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin)

O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

O4 - HKLM..\Run: [Sunkist2k] C:\Programme\Multimedia Card Reader\shwicon2k.exe (Alcor Micro, Corp.)

O4 - HKLM..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe (Nullsoft, Inc.)

O4 - HKU\S-1-5-21-823518204-2000478354-839522115-1004..\Run: [mstwain32]  File not found

O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\spynet\server.exe

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\spynet\server.exe

O8 - Extra context menu item: &Winamp Search - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()

O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubetomp3.htm ()

O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)

O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.)

O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.)

O15 - HKU\S-1-5-21-823518204-2000478354-839522115-1004\..Trusted Domains:   ([]msn in Arbeitsplatz)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O16 - DPF: CabBuilder hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab (Reg Error: Key error.)

O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)

O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Kiddis\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\PhotoScape\Wallpaper.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009.08.31 19:57:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O33 - MountPoints2\{aacfa592-9a1e-11de-96b5-0013d3dd5d53}\Shell - "" = AutoRun

O33 - MountPoints2\{aacfa592-9a1e-11de-96b5-0013d3dd5d53}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{aacfa592-9a1e-11de-96b5-0013d3dd5d53}\Shell\AutoRun\command - "" = E:\VFPcAssistant.exe

O33 - MountPoints2\{aacfa593-9a1e-11de-96b5-0013d3dd5d53}\Shell - "" = AutoRun

O33 - MountPoints2\{aacfa593-9a1e-11de-96b5-0013d3dd5d53}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{aacfa593-9a1e-11de-96b5-0013d3dd5d53}\Shell\AutoRun\command - "" = E:\VFPcAssistant.exe

O33 - MountPoints2\{dbd728c0-593c-11df-978e-0013d3dd5d53}\Shell - "" = AutoRun

O33 - MountPoints2\{dbd728c0-593c-11df-978e-0013d3dd5d53}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{dbd728c0-593c-11df-978e-0013d3dd5d53}\Shell\AutoRun\command - "" = E:\pushinst.exe

O33 - MountPoints2\{de564220-4ae7-11df-978c-0013d3dd5d53}\Shell - "" = AutoRun

O33 - MountPoints2\{de564220-4ae7-11df-978c-0013d3dd5d53}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{de564220-4ae7-11df-978c-0013d3dd5d53}\Shell\AutoRun\command - "" = E:\VFPcAssistant.exe

O34 - HKLM BootExecute: (autocheck autochk *) -  File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

NetSvcs: 6to4 -  File not found

NetSvcs: AppMgmt -  File not found

NetSvcs: Ias -  File not found

NetSvcs: Iprip -  File not found

NetSvcs: Irmon -  File not found

NetSvcs: NWCWorkstation -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: WmdmPmSp -  File not found

NetSvcs: SSHNAS -  File not found

 

MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^WinZip Quick Pick.lnk - C:\Programme\WinZip\WZQKPICK.EXE - (WinZip Computing, S.L.)

MsConfig - StartUpReg: ICQ - hkey= - key= - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.)

MsConfig - StartUpReg: msnmsgr - hkey= - key= - C:\Programme\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)

MsConfig - State: "system.ini" - 0

MsConfig - State: "win.ini" - 0

MsConfig - State: "bootini" - 0

MsConfig - State: "services" - 0

MsConfig - State: "startup" - 2

 

SafeBootMin: AppMgmt -  File not found

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: sermouse.sys - Driver

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vds - Service

SafeBootMin: vga.sys - Driver

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

 

SafeBootNet: AppMgmt -  File not found

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: sermouse.sys - Driver

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: UploadMgr - Service

SafeBootNet: vga.sys - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

 

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608555} - Internet Explorer Classes for Java

ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)

ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4

ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offlinebrowsingpaket

ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe

ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer-Hilfe

ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {4S52NM3Y-4LK7-0PDQ-27C2-B671I038T76O} - C:\WINDOWS\system32\spynet\server.exe

ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsererweiterungen

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Zugang zu MSN Site

ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

ActiveX: {8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML-Datenbindung

ActiveX: {9D71D88C-C598-4935-C5D1-43AA4DB90836} - C:\Programme\Bifrost\server.exe s

ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer-Hauptschriftarten

ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner

ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1

ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML-Hilfe

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

 

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)

Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (hxxp://www.mp3dev.org/)

Drivers32: msacm.lhacm - C:\WINDOWS\System32\lhacm.acm (Microsoft Corporation)

Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)

Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)

Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)

Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)

Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()

Drivers32: VIDC.HFYU - C:\WINDOWS\System32\huffyuv.dll (Disappearing Inc.)

Drivers32: VIDC.I420 - C:\WINDOWS\System32\lvcodec2.dll (Logitech Inc.)

Drivers32: vidc.iv31 - C:\WINDOWS\system32\ir32_32.dll ()

Drivers32: vidc.iv32 - C:\WINDOWS\system32\ir32_32.dll ()

Drivers32: VIDC.IV41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)

Drivers32: vidc.iv50 - C:\WINDOWS\System32\Ir50_32.dll (Intel Corporation)

Drivers32: VIDC.VP70 - C:\WINDOWS\System32\vp7vfw.dll (On2.com)

Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()

Drivers32: VIDC.YV12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point (54901231209938944)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2011.01.20 18:12:08 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java

[2011.01.20 18:11:12 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe

[2011.01.20 18:11:12 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe

[2011.01.20 18:11:12 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe

[2011.01.20 18:11:12 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl

[2011.01.20 18:09:58 | 000,000,000 | ---D | C] -- C:\Programme\Java

[2011.01.20 00:41:40 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Kiddis\Recent

[2011.01.20 00:01:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan

[2011.01.20 00:01:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Security Task Manager

[2011.01.20 00:01:17 | 000,000,000 | ---D | C] -- C:\Programme\Security Task Manager

[2011.01.19 23:22:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Uniblue

[2011.01.19 23:21:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kiddis\Lokale Einstellungen\Anwendungsdaten\PackageAware

[2011.01.19 19:01:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss

[2011.01.19 18:29:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox

[2011.01.19 18:07:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kiddis\Lokale Einstellungen\Anwendungsdaten\ConduitEngine

[2011.01.19 18:07:12 | 000,000,000 | ---D | C] -- C:\Programme\ConduitEngine

[2011.01.19 14:25:46 | 000,000,000 | ---D | C] -- C:\Programme\Bifrost

[2010.12.29 03:51:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kiddis\Startmenü\Programme\thriXXX

[2010.12.29 02:56:07 | 000,000,000 | ---D | C] -- C:\Programme\thriXXX

[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2011.01.20 19:57:50 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat

[2011.01.20 19:53:49 | 000,000,286 | -H-- | M] () -- C:\WINDOWS\tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job

[2011.01.20 19:53:49 | 000,000,248 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

[2011.01.20 19:53:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011.01.20 18:10:15 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe

[2011.01.20 18:10:15 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe

[2011.01.20 18:10:15 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe

[2011.01.20 18:10:15 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl

[2011.01.20 18:10:13 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll

[2011.01.20 18:03:21 | 000,000,326 | RHS- | M] () -- C:\boot.ini

[2011.01.20 01:05:54 | 000,093,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe

[2011.01.20 00:46:32 | 000,040,960 | ---- | M] () -- C:\WINDOWS\ntdtcstp.dll

[2011.01.19 23:40:18 | 000,448,802 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat

[2011.01.19 23:40:18 | 000,432,670 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2011.01.19 23:40:18 | 000,080,258 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat

[2011.01.19 23:40:18 | 000,067,626 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2011.01.19 23:21:34 | 000,248,832 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.01.19 22:32:00 | 000,038,351 | -H-- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\logs.dat

[2011.01.19 18:29:03 | 000,001,566 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk

[2011.01.19 16:14:37 | 000,114,176 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2011.01.18 17:50:20 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2011.01.16 06:21:35 | 011,816,676 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\KnuddelsScreen1601.rtf

[2011.01.12 20:50:56 | 002,954,280 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\Daa.rtf

[2011.01.08 04:14:42 | 000,004,489 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\Schatz Mottos.rtf

[2011.01.02 01:15:15 | 008,862,540 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\BeweisMarcel.rtf

[2011.01.01 02:00:42 | 002,954,280 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\BeweisSasha2.rtf

[2010.12.30 22:59:22 | 002,954,280 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\BeweisNiveaforMen.rtf

[2010.12.29 03:07:14 | 002,954,280 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\SchatzScreen.rtf

[2010.12.28 00:51:10 | 000,695,795 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Desktop\IMG_0932.JPG

[2010.12.26 00:15:24 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf

[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2011.01.19 18:29:03 | 000,001,566 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk

[2011.01.19 13:56:33 | 000,040,960 | ---- | C] () -- C:\WINDOWS\ntdtcstp.dll

[2011.01.16 06:21:34 | 011,816,676 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\KnuddelsScreen1601.rtf

[2011.01.12 20:50:55 | 002,954,280 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\Daa.rtf

[2011.01.02 01:15:10 | 008,862,540 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\BeweisMarcel.rtf

[2011.01.01 02:00:42 | 002,954,280 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\BeweisSasha2.rtf

[2010.12.30 22:59:20 | 002,954,280 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\BeweisNiveaforMen.rtf

[2010.12.29 03:07:13 | 002,954,280 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\SchatzScreen.rtf

[2010.12.28 02:32:21 | 000,004,489 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\Schatz Mottos.rtf

[2010.12.28 01:54:47 | 000,695,795 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Desktop\IMG_0932.JPG

[2010.12.21 20:15:12 | 000,517,284 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Desktop\DSC02061.JPG

[2010.12.21 20:15:09 | 000,536,606 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Desktop\DSC02067.JPG

[2010.10.03 20:06:26 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys

[2010.09.21 22:25:28 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll

[2010.09.21 22:25:28 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll

[2010.07.09 23:20:00 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini

[2010.07.09 23:19:52 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2010.07.09 23:19:52 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2010.07.09 23:19:25 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2010.03.12 07:18:08 | 000,081,970 | ---- | C] () -- C:\WINDOWS\msacm32.drv

[2010.03.12 07:18:06 | 000,000,036 | ---- | C] () -- C:\WINDOWS\rasqervy.dll

[2010.03.12 07:17:14 | 000,000,008 | ---- | C] () -- C:\WINDOWS\sdfinacs.dll

[2010.03.12 07:17:13 | 000,000,005 | ---- | C] () -- C:\WINDOWS\sdfixwcs.dll

[2010.03.10 05:59:32 | 000,000,093 | ---- | C] () -- C:\WINDOWS\wuasirvy.dll

[2010.01.18 03:15:33 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI

[2009.12.03 19:04:33 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2009.09.26 01:21:22 | 000,339,968 | ---- | C] () -- C:\WINDOWS\System32\pythoncom25.dll

[2009.09.26 01:21:22 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\pywintypes25.dll

[2009.09.23 19:19:39 | 000,000,040 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Spin Chat Preferences

[2009.09.22 21:18:33 | 000,082,289 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini

[2009.09.13 17:59:45 | 000,000,089 | ---- | C] () -- C:\WINDOWS\DAVILEX.INI

[2009.09.07 17:41:08 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll

[2009.09.06 13:04:22 | 000,000,038 | ---- | C] () -- C:\WINDOWS\BTW.INI

[2009.09.06 08:58:19 | 000,020,992 | ---- | C] () -- C:\WINDOWS\jestertb.dll

[2009.09.04 12:06:21 | 000,157,184 | R--- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll

[2009.09.03 14:36:33 | 000,248,832 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009.09.02 18:29:23 | 000,000,232 | ---- | C] () -- C:\WINDOWS\SIERRA.INI

[2009.09.02 18:07:39 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD_Start.INI

[2009.09.02 17:54:04 | 000,000,429 | ---- | C] () -- C:\WINDOWS\cncscore.ini

[2009.09.01 16:53:48 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll

[2009.09.01 13:31:49 | 000,000,525 | ---- | C] () -- C:\WINDOWS\QIII.INI

[2009.08.31 20:48:39 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2009.05.08 09:13:04 | 000,013,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\iKeyLFT2.dll

[2009.04.30 15:00:12 | 000,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys

[2006.04.30 10:18:13 | 000,038,351 | -H-- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\logs.dat

[2002.11.02 10:56:52 | 000,285,696 | ---- | C] () -- C:\WINDOWS\System32\cncs232.dll

[2002.08.29 13:00:00 | 000,027,440 | R--- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys

[2002.08.29 13:00:00 | 000,024,707 | ---- | C] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\addons.dat

[1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll

 
 ========== LOP Check ==========

 

[2009.10.14 17:52:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\2ACA5CC3-0F83-453D-A079-1076FE1A8B65

[2009.12.13 18:13:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AGI

[2010.10.03 20:05:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite

[2009.12.13 15:46:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HotbarSA

[2010.07.30 17:47:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ

[2010.02.12 01:48:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus!

[2009.10.26 12:34:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MumboJumbo

[2009.10.25 15:39:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Oberon Media

[2011.01.20 00:21:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan

[2009.10.25 15:40:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SugarGames

[2009.10.26 12:34:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP

[2010.04.06 14:37:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WinZip

[2009.10.10 22:10:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom

[2009.12.13 18:13:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\agi

[2010.10.03 20:13:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\DAEMON Tools Lite

[2010.07.24 21:38:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\DVDVideoSoftIEHelpers

[2009.10.09 17:11:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\gtk-2.0

[2010.07.30 17:33:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Gutscheinmieze

[2009.10.16 22:05:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Hotbar

[2011.01.18 17:53:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\ICQ

[2009.09.22 21:19:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Leadertech

[2010.04.11 01:10:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Lingo4u

[2010.02.23 18:51:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\OCS

[2009.10.17 17:45:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\OpenCandy

[2010.02.23 18:52:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Opera

[2010.11.04 16:40:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\PhotoScape

[2009.10.08 23:25:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\PlayFirst

[2010.10.28 23:22:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Playrix Entertainment

[2009.10.07 12:13:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Pogo Games

[2011.01.20 18:14:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\PriceGong

[2010.01.27 00:46:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\TeamViewer

[2010.06.26 00:42:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\TS3Client

[2011.01.19 23:22:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Uniblue

[2010.03.05 01:33:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\VoipStunt

[2009.10.14 17:52:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\WeatherDPA

[2010.10.28 23:22:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Zylom

[2009.09.26 01:23:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\agi

[2011.01.20 19:53:49 | 000,000,248 | -H-- | M] () -- C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

[2011.01.20 19:53:49 | 000,000,286 | -H-- | M] () -- C:\WINDOWS\Tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 

 
 < %ALLUSERSPROFILE%\Application Data\*. >

 
 < %ALLUSERSPROFILE%\Application Data\*.exe /s >

 
 < %APPDATA%\*. >

[2010.03.10 05:58:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Adobe

[2009.09.22 17:30:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\AdobeUM

[2009.12.13 18:13:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\agi

[2009.12.04 21:30:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Ahead

[2010.10.03 20:13:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\DAEMON Tools Lite

[2010.02.13 00:09:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\DivX

[2010.06.19 17:56:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\dvdcss

[2010.07.24 21:38:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\DVDVideoSoftIEHelpers

[2009.10.09 17:11:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\gtk-2.0

[2010.07.30 17:33:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Gutscheinmieze

[2010.10.03 23:50:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Help

[2010.03.24 12:02:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Helper

[2009.10.16 22:05:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Hotbar

[2011.01.18 17:53:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\ICQ

[2010.10.28 23:22:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Identities

[2009.09.22 21:19:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Leadertech

[2010.04.11 01:10:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Lingo4u

[2009.12.25 23:07:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Macromedia

[2010.07.13 17:51:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Media Player Classic

[2010.05.26 00:10:51 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Microsoft

[2009.09.23 13:13:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Mozilla

[2010.04.19 19:51:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\MSN6

[2010.02.23 18:51:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\OCS

[2009.10.17 17:45:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\OpenCandy

[2010.02.23 18:52:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Opera

[2010.11.04 16:40:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\PhotoScape

[2009.10.08 23:25:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\PlayFirst

[2010.10.28 23:22:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Playrix Entertainment

[2009.10.07 12:13:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Pogo Games

[2011.01.20 18:14:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\PriceGong

[2009.09.01 17:43:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\SecuROM

[2010.11.22 01:35:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Skype

[2010.11.22 00:57:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\skypePM

[2009.09.22 19:06:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Sun

[2010.08.14 00:43:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\teamspeak2

[2010.01.27 00:46:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\TeamViewer

[2010.06.26 00:42:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\TS3Client

[2011.01.19 23:22:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Uniblue

[2010.06.25 21:37:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\vlc

[2010.03.05 01:33:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\VoipStunt

[2009.10.14 17:52:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\WeatherDPA

[2010.12.26 00:24:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Winamp

[2009.12.28 01:58:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\WinRAR

[2010.06.22 17:31:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Yahoo!

[2010.10.28 23:22:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Zylom

 
 < %APPDATA%\*.exe /s >

[2010.06.10 13:19:22 | 000,825,856 | ---- | M] (Synatix GmbH) -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\Gutscheinmieze\uninstall.exe

[2010.02.23 18:51:25 | 000,106,496 | ---- | M] (OCS) -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\OCS\SM\SearchAnonymizer.exe

[2010.02.23 18:51:25 | 000,040,960 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe

[2009.10.17 17:45:47 | 004,402,373 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\OpenCandy\IE8-WindowsXP-x86-DEU.exe

[2009.10.17 17:45:01 | 000,262,949 | ---- | M] () -- C:\Dokumente und Einstellungen\Kiddis\Anwendungsdaten\OpenCandy\IE8_Setup.exe

 
 < %SYSTEMDRIVE%\*.exe >

 

 
 < MD5 for: AGP440.SYS  >

[2004.08.04 00:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys

[2004.08.04 00:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys

[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\agp440.sys

[2004.08.03 22:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys

[2004.08.03 22:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\system32\drivers\agp440.sys

 
 < MD5 for: ATAPI.SYS  >

[2002.08.29 13:00:00 | 010,180,476 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys

[2004.08.04 00:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys

[2004.08.04 00:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys

[2002.08.29 13:00:00 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\atapi.sys

[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys

[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\drivers\atapi.sys

 
 < MD5 for: EVENTLOG.DLL  >

[2008.04.14 03:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\eventlog.dll

[2004.08.03 23:57:20 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll

[2004.08.03 23:57:20 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- C:\WINDOWS\system32\eventlog.dll

[2002.08.29 13:00:00 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=B9358A1FB66CF656328FD8B792B2CCC4 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

 
 < MD5 for: EXPLORER.EXE  >

[2002.08.29 13:00:00 | 001,007,104 | ---- | M] (Microsoft Corporation) MD5=22B0A56E6C5847292437078B484EC61B -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

[2004.08.03 23:57:54 | 001,035,264 | ---- | M] (Microsoft Corporation) MD5=22FE1BE02EADDE1632E478E4125639E0 -- C:\WINDOWS\explorer.exe

[2004.08.03 23:57:54 | 001,035,264 | ---- | M] (Microsoft Corporation) MD5=22FE1BE02EADDE1632E478E4125639E0 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe

[2008.04.14 03:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\explorer.exe

 
 < MD5 for: NETLOGON.DLL  >

[2008.04.14 03:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\netlogon.dll

[2002.08.29 13:00:00 | 000,399,360 | ---- | M] (Microsoft Corporation) MD5=BCA549B21E651111CE7BAD0FC8C45F4B -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll

[2004.08.03 23:57:32 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll

[2004.08.03 23:57:32 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- C:\WINDOWS\system32\netlogon.dll

[2009.02.06 19:46:10 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=ED4BBAD725A21632FB205452749FC8F5 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll

[2009.02.06 19:46:10 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=ED4BBAD725A21632FB205452749FC8F5 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll

 
 < MD5 for: SCECLI.DLL  >

[2008.04.14 03:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\scecli.dll

[2004.08.03 23:57:34 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll

[2004.08.03 23:57:34 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- C:\WINDOWS\system32\scecli.dll

[2002.08.29 13:00:00 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=ADD49C10F5DADFA81912D124FE1C9A99 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2004.08.03 23:57:38 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=56785FD5236D7B22CF471A6DA9DB46D8 -- C:\WINDOWS\ServicePackFiles\i386\user32.dll

[2004.08.03 23:57:38 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=56785FD5236D7B22CF471A6DA9DB46D8 -- C:\WINDOWS\system32\user32.dll

[2008.04.14 03:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\user32.dll

[2002.08.29 13:00:00 | 000,561,664 | ---- | M] (Microsoft Corporation) MD5=E3DAFFDB1C86C1AEAC1B205F6CF67009 -- C:\WINDOWS\$NtServicePackUninstall$\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2008.04.14 03:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\userinit.exe

[2002.08.29 13:00:00 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=BEBD3F08461F9A88E5ABCE0CB9707000 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

[2004.08.03 23:58:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe

[2004.08.03 23:58:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- C:\WINDOWS\system32\userinit.exe

 
 < MD5 for: WINLOGON.EXE  >

[2004.08.03 23:58:20 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe

[2004.08.03 23:58:20 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- C:\WINDOWS\system32\winlogon.exe

[2002.08.29 13:00:00 | 000,521,728 | ---- | M] (Microsoft Corporation) MD5=616896B708286DA98D6A099293F181D7 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe

[2008.04.14 03:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2002.08.29 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys

[2002.08.29 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

[2010.10.03 20:06:27 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys

 
 < %systemroot%\System32\config\*.sav >

[2009.08.31 21:46:08 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav

[2009.08.31 21:46:08 | 000,606,208 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav

[2009.08.31 21:46:08 | 000,425,984 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

 
 < %systemroot%\*. /mp /s >

 
 < %systemroot%\system32\*.dll /lockedfiles >

[7 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

 
 ========== Alternate Data Streams ==========

 

@Alternate Data Stream - 145 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:C46995DA

@Alternate Data Stream - 145 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:B623B5B8

@Alternate Data Stream - 141 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:9AB56A06

@Alternate Data Stream - 138 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:9B7E8561

@Alternate Data Stream - 138 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:2A8A3140

@Alternate Data Stream - 136 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:981884E7

@Alternate Data Stream - 134 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:48CB5C15

@Alternate Data Stream - 134 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:45FE2B4E

@Alternate Data Stream - 133 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:4BB26BE9

@Alternate Data Stream - 131 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:07FFC655

@Alternate Data Stream - 122 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:588B60C7

@Alternate Data Stream - 119 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:CF5C4195

@Alternate Data Stream - 116 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A42A9F39
 

< End of report >

--- --- ---

Extras.txt:OTL Logfile:

Code:

OTL Extras logfile created on: 20.01.2011 20:04:47 - Run 1

OTL by OldTimer - Version 3.2.20.3     Folder = C:\Dokumente und Einstellungen\Kiddis\Eigene Dateien\Downloads

Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.2180)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

446,00 Mb Total Physical Memory | 129,00 Mb Available Physical Memory | 29,00% Memory free

1,00 Gb Paging File | 1,00 Gb Available in Paging File | 72,00% Paging File free

Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 74,52 Gb Total Space | 27,10 Gb Free Space | 36,37% Space Free | Partition Type: NTFS

 

Computer Name: FAMILY-CLMX61RR | User Name: Kiddis | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 

[HKEY_USERS\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

htmlfile [edit] -- Reg Error: Key error.

http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)

https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Programme\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"AntiVirusDisableNotify" = 1

"FirewallDisableNotify" = 0

"UpdatesDisableNotify" = 1

"AntiVirusOverride" = 1

"FirewallOverride" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 
 ========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

"Start" = 2

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007

"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"C:\Programme\ICQ7.0\ICQ.exe" = C:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7

"C:\Programme\ICQ7.0\aolload.exe" = C:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe

"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe

"C:\Programme\ICQ7.2\ICQ.exe" = C:\Programme\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)

"C:\Programme\ICQ7.2\aolload.exe" = C:\Programme\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ

"C:\Programme\TeamViewer\Version5\TeamViewer.exe" = C:\Programme\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application

"C:\Programme\ICQ7.0\ICQ.exe" = C:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7

"C:\Programme\ICQ7.0\aolload.exe" = C:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe

"C:\Programme\Veoh Networks\Veoh\VeohClient.exe" = C:\Programme\Veoh Networks\Veoh\VeohClient.exe:*:Enabled:Veoh Client

"C:\Programme\VoipStunt.com\VoipStunt\VoipStunt.exe" = C:\Programme\VoipStunt.com\VoipStunt\VoipStunt.exe:*:Enabled:VoipStunt

"C:\Programme\Yahoo!\Messenger\YahooMessenger.exe" = C:\Programme\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger

"C:\WINDOWS\Explorer.EXE" = C:\WINDOWS\Explorer.EXE:*:Enabled:enable -- (Microsoft Corporation)

"C:\Programme\ICQ7.2\ICQ.exe" = C:\Programme\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)

"C:\Programme\ICQ7.2\aolload.exe" = C:\Programme\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)

"C:\Programme\Logitech\Logitech Vid\Vid.exe" = C:\Programme\Logitech\Logitech Vid\Vid.exe:*:Enabled:Logitech Vid -- (Logitech Inc.)

"C:\Programme\Metin2\metin2.bin" = C:\Programme\Metin2\metin2.bin:*:Enabled:metin2

 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

"{01501EBA-EC35-4F9F-8889-3BE346E5DA13}" = MSXML4 Parser

"{07B02BD4-E799-4945-B240-166CA9A9BE2D}" = Multimedia Card Reader

"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool

"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT

"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23

"{2792F12C-3515-4D69-8083-B557AF35F06F}" = LightScribe  1.4.89.1

"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie

"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack

"{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}" = Logitech Vid

"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent

"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053

"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call

"{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar

"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2

"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable

"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{994223F3-A99B-4DDD-9E1D-0190A17C6860}" = Windows Live Family Safety

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{AC76BA86-7AD7-1031-7B44-A70000000000}" = Adobe Reader 7.0 - Deutsch

"{AC96671C-2001-432C-9826-5266D84EF1DC}" = Logitech Webcam Software

"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail

"{CD95F661-A5C4-44F5-A6AA-ECDD91C240BB}" = WinZip 14.0

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2

"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer

"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update

"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard

"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials

"3DSexVilla2-058.002" = thriXXX 3DSexVilla2-058.002

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 11.5

"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus

"AVMWLANCLI" = AVM FRITZ!WLAN

"CCleaner" = CCleaner

"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar

"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4

"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8

"ICQToolbar" = ICQ Toolbar

"InstallShield_{07B02BD4-E799-4945-B240-166CA9A9BE2D}" = Multimedia Card Reader

"KLiteCodecPack_is1" = K-Lite Codec Pack 6.1.0 (Full)

"lvdrivers_12.0" = Logitech Webcam Software-Treiberpaket

"Messenger Plus! Live" = Messenger Plus! Live

"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)

"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP

"PhotoScape" = PhotoScape

"Security Task Manager" = Security Task Manager 1.8c

"Spin Upload" = Spin Upload 1.0

"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2

"thriXXX WebLaunch" = thriXXX WebLaunch

"TUGZip_is1" = TUGZip 3.5

"Uninstall_is1" = Uninstall 1.0.0.1

"WIC" = Windows Imaging Component

"Winamp" = Winamp

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"Windows Media Player" = Windows Media Player 11

"Windows XP Service Pack" = Windows XP Service Pack 2

"WinLiveSuite_Wave3" = Windows Live Essentials

"WinRAR archiver" = WinRAR

"WMFDist11" = Windows Media Format 11 runtime

"wmp11" = Windows Media Player 11

"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

 
 ========== HKEY_USERS Uninstall List ==========

 

[HKEY_USERS\S-1-5-21-823518204-2000478354-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"TeamSpeak 3 Client" = TeamSpeak 3 Client

"Winamp Detect" = Winamp Erkennungs-Plug-in

 
 ========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 19.01.2011 14:10:47 | Computer Name = FAMILY-CLMX61RR | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3989, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x24017c1e.

 

Error - 19.01.2011 14:10:47 | Computer Name = FAMILY-CLMX61RR | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3989, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x24017c1e.

 

Error - 19.01.2011 14:10:47 | Computer Name = FAMILY-CLMX61RR | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3989, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x24087c1e.

 

Error - 19.01.2011 14:10:47 | Computer Name = FAMILY-CLMX61RR | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3989, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x24017c1e.

 

Error - 19.01.2011 14:12:15 | Computer Name = FAMILY-CLMX61RR | Source = Application Hang | ID = 1002

Description = Stillstehende Anwendung ICQ.exe, Version 7.2.0.3525, Stillstandmodul

 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

 

Error - 19.01.2011 14:12:15 | Computer Name = FAMILY-CLMX61RR | Source = Application Hang | ID = 1002

Description = Stillstehende Anwendung ICQ.exe, Version 7.2.0.3525, Stillstandmodul

 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

 

Error - 19.01.2011 14:12:42 | Computer Name = FAMILY-CLMX61RR | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3989, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x24017c1e.

 

Error - 19.01.2011 14:12:42 | Computer Name = FAMILY-CLMX61RR | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3989, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x24017c1e.

 

Error - 19.01.2011 14:12:42 | Computer Name = FAMILY-CLMX61RR | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3989, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x24017c1e.

 

Error - 19.01.2011 19:48:36 | Computer Name = FAMILY-CLMX61RR | Source = Application Hang | ID = 1002

Description = Stillstehende Anwendung registrybooster.exe, Version 5.0.0.14, Stillstandmodul

 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

 

[ System Events ]

Error - 19.01.2011 19:17:43 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7034

Description = Dienst "ICQ Service" wurde unerwartet beendet. Dies ist bereits 1 

Mal passiert.

 

Error - 19.01.2011 19:46:16 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7023

Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet:   %%126

 

Error - 19.01.2011 19:48:07 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7034

Description = Dienst "ICQ Service" wurde unerwartet beendet. Dies ist bereits 1 

Mal passiert.

 

Error - 19.01.2011 19:50:36 | Computer Name = FAMILY-CLMX61RR | Source = Windows Update Agent | ID = 20

Description = Installationsfehler: Die Installation des folgenden Updates ist mit

 Fehler 0x80070643 fehlgeschlagen: Internet Explorer*8 für Windows*XP

 

Error - 20.01.2011 12:54:04 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7023

Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet:   %%126

 

Error - 20.01.2011 13:00:18 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7034

Description = Dienst "Java Quick Starter" wurde unerwartet beendet. Dies ist bereits

 1 Mal passiert.

 

Error - 20.01.2011 13:01:59 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7034

Description = Dienst "ICQ Service" wurde unerwartet beendet. Dies ist bereits 1 

Mal passiert.

 

Error - 20.01.2011 13:49:33 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7034

Description = Dienst "AVM WLAN Connection Service" wurde unerwartet beendet. Dies

 ist bereits 1 Mal passiert.

 

Error - 20.01.2011 14:53:54 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7023

Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet:   %%126

 

Error - 20.01.2011 15:00:16 | Computer Name = FAMILY-CLMX61RR | Source = Service Control Manager | ID = 7034

Description = Dienst "ICQ Service" wurde unerwartet beendet. Dies ist bereits 1 

Mal passiert.

 

 

< End of report >

--- --- ---

Hier einmal die Logdaten:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 5561

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

20.01.2011 22:46:48
mbam-log-2011-01-20 (22-46-48).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 193002
Laufzeit: 45 Minute(n), 52 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 88
Infizierte Registrierungswerte: 7
Infizierte Dateiobjekte der Registrierung: 2
Infizierte Verzeichnisse: 32
Infizierte Dateien: 373

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{7025E484-D4B0-441a-9F0B-69063BD679CE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{A89256AD-EC17-4a83-BEF5-4B8BC4F39306} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{2F9AD413-2E0B-4a85-BB2A-CF961238262A} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8C788AA2-7530-43BE-97B7-4D491F13BEA3} (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{03D7FF6E-9781-40B5-BB7F-94291A361604} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3CEB04AB-08AF-45F4-81B4-70D13C1F7B85} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{0729F461-8054-47DC-8D39-A31B61CC0119} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{40CA90F3-4098-4877-AE87-23EB612B18C7} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{148E1447-C728-48FD-BEEC-A7D06C5FFF58} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{8EE46F55-1CE1-4DB9-811A-68938EC7F3DD} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{1D4DB7D0-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1D4DB7D1-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{76D54105-99EB-4ECB-95B2-A944F50CC566} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{8292078F-F6E9-412B-8EB1-360C05C5ECE5} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2447E305-5E90-42A8-BD1E-0BC333B807E1} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{A57470DE-14C7-4FCD-9D4C-E5711F24F0ED} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2557DD3F-23A0-477C-BCD8-90FD0AECC4B8} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{C62A9E79-2B52-439B-AF57-2E60BB06E86C} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{15FD8424-D12A-4C51-8C6C-D5D57B80F781} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{CDC73256-A88D-4642-844E-A8F20B76789C} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{D1063603-F045-475F-AFBC-8CBA7D5797FB} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\{9D71D88C-C598-4935-C5D1-43AA4DB90836} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9D71D88C-C598-4935-C5D1-43AA4DB90836} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EDDBB5EE-BB64-4bfc-9DBE-E7C85941335B} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A3E67DAA-DA01-4da5-98BE-3088B554A11E} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D95C7240-0282-4c01-93F5-673BCA03DA86} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CntntCntr.CntntDic (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CntntCntr.CntntDic.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CntntCntr.CntntDisp (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CntntCntr.CntntDisp.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CoreSrv.CoreServices (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CoreSrv.CoreServices.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CoreSrv.LfgAx (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CoreSrv.LfgAx.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProductsInstaller.Start (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProductsInstaller.Start.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HbCoreSrv.DynamicProp (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HbCoreSrv.DynamicProp.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HBMain.CommBand (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HBMain.CommBand.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbr.HbMain (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\hbr.HbMain.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HostIE.Bho (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HostIE.Bho.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HostOL.MailAnim (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HostOL.MailAnim.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HostOL.WebmailSend (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HostOL.WebmailSend.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HotbarAx.Info (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HotbarAx.Info.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HotbarAX.UserProfiles (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HotbarAX.UserProfiles.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HotbarWeather.WeatherController (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\HotbarWeather.WeatherController.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShopperReports.Reporter (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShopperReports.Reporter.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Srv.CoreServices (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Srv.CoreServices.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Toolbar.HtmlMenuUI (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Toolbar.HtmlMenuUI.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Toolbar.ToolbarCtl (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Toolbar.ToolbarCtl.1 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Bifrost (Bifrose.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\EBUNWVLUMV (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\V71IQL7HI7 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\hotbarsa (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Bifrost (Bifrose.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\HostOL.MailAnim (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\HostOL.MailAnim (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> Value: (default) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\SRS_IT_E8790272B776545731AA97 (Malware.Trace) -> Value: SRS_IT_E8790272B776545731AA97 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\Hotbar@Hotbar.com (Adware.Hotbar) -> Value: Hotbar@Hotbar.com -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
c:\dokumente und einstellungen\all users\anwendungsdaten\2aca5cc3-0f83-453d-a079-1076fe1a8b65 (Adware.Seekmo) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\IESkins (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\HostOI (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\HostOI\dynamic (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\HostOL (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\HostOL\dynamic (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\ustat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weatherdpa (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weatherdpa\weather_xml (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weather_xml (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\anwendungsdaten\HotbarSA (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\weatherdpa (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\programme\funwebproducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\programme\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\firefox (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\firefox\extensions (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\firefox\extensions\components (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\firefox\extensions\plugins (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\startmenü\programme\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.

Infizierte Dateien:
c:\programme\thriXXX\3d sexvilla 2 - everlust\Binaries\fc3dsexvilla.dll (Trojan.Agent) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125473.dll (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125474.dll (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125475.scr (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125478.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125479.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125480.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125481.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125482.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125484.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125485.SCR (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125486.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125487.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125488.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125489.EXE (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125490.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125491.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125492.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125493.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125494.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125495.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125496.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125497.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125498.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125499.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125500.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125501.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125502.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125503.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125504.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125505.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125506.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125507.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125508.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125515.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP431\A0125483.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP432\A0126399.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP432\A0126400.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP432\A0126401.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP432\A0126402.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP432\A0126403.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP432\A0126404.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP432\A0126405.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{5cb7a019-54a9-462f-a9fe-cde4643f19cb}\RP433\A0126458.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\addons.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
c:\WINDOWS\msacm32.drv (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\ntdtcstp.dll (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Tasks\{8c3fdd81-7ae0-4605-a46a-2488b179f2a3}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\WINDOWS\wuasirvy.dll (Trojan.Banker) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\1.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\1049381.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\11959.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\1388489.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\1396708.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\1404310.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\1414175.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\1918391.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\2091978.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\2894097.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\2899625.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\3251993.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\3781317.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\3783086.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\3814772.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\3852296.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\705177.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\745696.sdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\domains.txt (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\23928 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000017874 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000018028 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000018120 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000018577 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000018848 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000019817 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000021436 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000021442 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000021463 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000021548 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000021569 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000021579 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000021757 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000021771 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000025522 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\24996 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\266291 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\29115 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\31306 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\324832 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\361427 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\389687 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\456080 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\477779 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\481176 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\5358 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\630460 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\698265 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\708385 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\708669 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\709493 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\711856 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\711946 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\752446 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\753064 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\753576 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\753597 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\80663 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\81293 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\82011 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\82262 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\82292 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\92717 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\94975 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\95774 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000049477 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1000049486 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\1491 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\17025 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\213908 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\tooltipxml\23923 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\dynamic\ustat\38fe.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\ads.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\btntrans.idx (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\btntrans1.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\business_promo.htm (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\buttondir.txt (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\components.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\cursors.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz12.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz13.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz14.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz15.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz16.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz17.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz18.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz19.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz2.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz20.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz3.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz4.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz5.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz6.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz7.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz8.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_categorize.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_comparison.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_em_profl_ca_flow_b_ieb.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_explorer-mails.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_explorer-people.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_favorites.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_games.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_hide.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_hotbarcom.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_hotmail.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_hsskin.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_jemster.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_jemsterie.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_jemsteruk.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_jobsearch.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_511745-514279.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz1.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz10.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_new.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_premium.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_reun.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_ringtones.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_searchboxtrapper.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_searchfor.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_searchgo.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_weather.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_yellowpages.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_1000.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_2000.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_3000.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_bar.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_bbar1.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_logos.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\d_icons_buttons_other.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\d_icons_weather.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\editblbuttons.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\email-def-511724-548964.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz11.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_bidz9.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\default_mails.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\email-def-511724-9595.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\ie_games_icon.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\email-t1-bg.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\gamesmenu.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\gamesmenu.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\hb_ie_menu.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\hotbar-premium-hotbar-premium.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\hotbar-premium.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\hotbar_promo.htm (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\icons2.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\ie_video.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\keywords.idx (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\keywords1.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\layout.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\linkpathlegal.txt (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\more.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\new_games.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\progress.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\sales_buttons.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\sdfmodifier.xml (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\s_icons_buttons.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\t2_bg.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\theweb.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\top7.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\top7_theweb.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\tsd_bg.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\1\weathericon.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\ads.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\btntrans.idx (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\btntrans1.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\business_promo.htm (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\buttondir.txt (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\components.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\cursors.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz12.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz13.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz14.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz15.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz16.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz17.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz18.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz19.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz2.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz20.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz3.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz4.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz5.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz6.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz7.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz8.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_categorize.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_comparison.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_em_profl_ca_flow_b_ieb.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_explorer-mails.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_explorer-people.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_favorites.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_games.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_hide.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_hotbarcom.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_hotmail.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_hsskin.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_jemster.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_jemsterie.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_jemsteruk.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_jobsearch.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_511745-514279.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz1.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz10.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_new.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_premium.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_reun.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_ringtones.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_searchboxtrapper.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_searchfor.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_searchgo.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_weather.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_yellowpages.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_1000.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_2000.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_3000.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bar.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_bbar1.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_logos.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\d_icons_buttons_other.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\d_icons_weather.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\editblbuttons.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\email-def-511724-548964.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz11.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_bidz9.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\default_mails.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\email-def-511724-9595.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\ie_games_icon.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\email-t1-bg.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\gamesmenu.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\gamesmenu.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\hb_ie_menu.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\hotbar-premium.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\hotbar_promo.htm (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\icons2.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\ie_video.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\keywords.idx (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\keywords1.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\layout.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\linkpathlegal.txt (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\more.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\new_games.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\progress.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\sales_buttons.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\sdfmodifier.xml (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\s_icons_buttons.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\t2_bg.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\theweb.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\top7.cdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\top7_theweb.mnu (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\tsd_bg.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\2\weathericon.res (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\ads.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\BtnTrans.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\btntrans1.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\business_promo.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\editblbuttons.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\email-t1-bg.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\progress.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\sales_buttons.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.txt (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\sdfmodifier.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\s_icons_buttons.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\t2_bg.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\top7.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\tsd_bg.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\weathericon.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_2000.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_3000.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bar.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_logos.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_other.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\ie_video.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\keywords.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\keywords1.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\layout.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\linkpathlegal.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\default.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\cursors.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_buttons_1000.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\d_icons_weather.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\ie_games_icon.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\more.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\gamesmenu.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\hb_ie_menu.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar-premium.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\hotbar_promo.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\v3.5\Hotbar\static\DownLoad\icons2.xip (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\history (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weatherstartup.xml (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weatherdpa\Links (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weatherdpa\weatherpreferences (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weatherdpa\weather_xml\Display (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weatherdpa\weather_xml\Loading (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weatherdpa\weather_xml\screen2 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weather_xml\Default (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weather_xml\Genera1 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\Kiddis\anwendungsdaten\Hotbar\Weather\weather_xml\General (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\anwendungsdaten\HotbarSA\HotbarSA.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\anwendungsdaten\HotbarSA\hotbarsaabout.mht (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\anwendungsdaten\HotbarSA\hotbarsaau.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\anwendungsdaten\HotbarSA\hotbarsaeula.mht (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\anwendungsdaten\HotbarSA\hotbarsa_kyf.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\funwebproducts\Shared\15EBD267.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\arrow.ico (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\copyright.txt (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\firefox\extensions\chrome.manifest (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\firefox\extensions\install.rdf (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\programme\Hotbar\bin\11.0.78.0\firefox\extensions\components\npclntax.xpt (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\startmenü\programme\Hotbar\about hotbar.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\startmenü\programme\Hotbar\hotbar customer support center.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\startmenü\programme\Hotbar\hotbar games!.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\startmenü\programme\Hotbar\hotbar uninstall instructions.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\startmenü\programme\Hotbar\hotbar videos!.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\startmenü\programme\Hotbar\reset cursor.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\all users\startmenü\programme\Hotbar\Weather.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.