Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Aus Sicherheitsgründen wurde ihr Windowssystem blockiert (https://www.trojaner-board.de/105429-sicherheitsgruenden-wurde-windowssystem-blockiert.html)

dieFackel 25.11.2011 19:55
Aus Sicherheitsgründen wurde ihr Windowssystem blockiert
 
Hallo liebe Helfer,
seit 2 Tagen habe ich ein unschönes Problem. Mit jedem Start erscheint ein schwarzer Bildschirm, mit den Worten "Aus Sicherheitsgründen wurde ihr Windowssystem blockiert" und einem Button "Bezahlen und Runterladen". 'Nun habe ich Avira laufen lassen, doch wurde nichts gefunden. Im Abgesicherten Modus nutze ich dann immer Malwarebytes und dieser findet 3 Bedrohungen. Nachdem diese entfernt werden, habe ich auch erstmal meine Ruhe. Aber das Problem taucht immer wieder auf und Malwarebytes finden wohl immer wieder die gleichen, oder ähnlichen Bedrohungen. Ich brauche dringend eure Hilfe.

LG dieFackel

cosinus 26.11.2011 14:05
Zitat:
Im Abgesicherten Modus nutze ich dann immer Malwarebytes und dieser findet 3 Bedrohungen.
Warum kannst du gleich die Logs von MBAM und AntiVir posten?

dieFackel 26.11.2011 16:04
Tut mir leid, ich kenne mich da nicht so aus.

Hier der MBAM Log:


Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8239

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

26.11.2011 14:44:05
mbam-log-2011-11-26 (14-44-05).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 188229
Laufzeit: 2 Minute(n), 3 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
und der Avira Log:

Code:

Avira Free Antivirus
Erstellungsdatum der Reportdatei: Samstag, 26. November 2011  14:47

Es wird nach 3476797 Virenstämmen gesucht.

Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer  : Avira AntiVir Personal - Free Antivirus
Seriennummer  : 0000149996-ADJIE-0000001
Plattform      : Windows 7 x64
Windowsversion : (plain)  [6.1.7600]
Boot Modus    : Normal gebootet
Benutzername  : SYSTEM
Computername  : LANER-PC

Versionsinformationen:
BUILD.DAT      : 12.0.0.861    41826 Bytes  19.10.2011 18:18:00
AVSCAN.EXE    : 12.1.0.18    490448 Bytes  19.10.2011 15:55:49
AVSCAN.DLL    : 12.1.0.17      65744 Bytes  19.10.2011 15:56:10
LUKE.DLL      : 12.1.0.17      68304 Bytes  19.10.2011 15:55:59
AVSCPLR.DLL    : 12.1.0.19      99536 Bytes  19.10.2011 15:55:49
AVREG.DLL      : 12.1.0.22    226512 Bytes  19.10.2011 15:55:48
VBASE000.VDF  : 7.10.0.0    19875328 Bytes  06.11.2009 19:18:34
VBASE001.VDF  : 7.11.0.0    13342208 Bytes  14.12.2010 10:07:39
VBASE002.VDF  : 7.11.3.0    1950720 Bytes  09.02.2011 16:08:51
VBASE003.VDF  : 7.11.5.225  1980416 Bytes  07.04.2011 11:00:55
VBASE004.VDF  : 7.11.8.178  2354176 Bytes  31.05.2011 11:18:22
VBASE005.VDF  : 7.11.10.251  1788416 Bytes  07.07.2011 13:12:53
VBASE006.VDF  : 7.11.13.60  6411776 Bytes  16.08.2011 08:26:09
VBASE007.VDF  : 7.11.15.106  2389504 Bytes  05.10.2011 15:56:05
VBASE008.VDF  : 7.11.18.32  2132992 Bytes  24.11.2011 18:23:13
VBASE009.VDF  : 7.11.18.33      2048 Bytes  24.11.2011 18:23:13
VBASE010.VDF  : 7.11.18.34      2048 Bytes  24.11.2011 18:23:14
VBASE011.VDF  : 7.11.18.35      2048 Bytes  24.11.2011 18:23:14
VBASE012.VDF  : 7.11.18.36      2048 Bytes  24.11.2011 18:23:14
VBASE013.VDF  : 7.11.18.37      2048 Bytes  24.11.2011 18:23:14
VBASE014.VDF  : 7.11.18.38      2048 Bytes  24.11.2011 18:23:15
VBASE015.VDF  : 7.11.18.39      2048 Bytes  24.11.2011 18:23:15
VBASE016.VDF  : 7.11.18.40      2048 Bytes  24.11.2011 18:23:15
VBASE017.VDF  : 7.11.18.41      2048 Bytes  24.11.2011 18:23:15
VBASE018.VDF  : 7.11.18.42      2048 Bytes  24.11.2011 18:23:16
VBASE019.VDF  : 7.11.18.43      2048 Bytes  24.11.2011 18:23:16
VBASE020.VDF  : 7.11.18.44      2048 Bytes  24.11.2011 18:23:16
VBASE021.VDF  : 7.11.18.45      2048 Bytes  24.11.2011 18:23:16
VBASE022.VDF  : 7.11.18.46      2048 Bytes  24.11.2011 18:23:16
VBASE023.VDF  : 7.11.18.47      2048 Bytes  24.11.2011 18:23:16
VBASE024.VDF  : 7.11.18.48      2048 Bytes  24.11.2011 18:23:16
VBASE025.VDF  : 7.11.18.49      2048 Bytes  24.11.2011 18:23:16
VBASE026.VDF  : 7.11.18.50      2048 Bytes  24.11.2011 18:23:16
VBASE027.VDF  : 7.11.18.51      2048 Bytes  24.11.2011 18:23:16
VBASE028.VDF  : 7.11.18.52      2048 Bytes  24.11.2011 18:23:16
VBASE029.VDF  : 7.11.18.53      2048 Bytes  24.11.2011 18:23:16
VBASE030.VDF  : 7.11.18.54      2048 Bytes  24.11.2011 18:23:16
VBASE031.VDF  : 7.11.18.78    83456 Bytes  25.11.2011 18:23:19
Engineversion  : 8.2.6.120
AEVDF.DLL      : 8.1.2.2      106868 Bytes  25.11.2011 18:26:30
AESCRIPT.DLL  : 8.1.3.87      475516 Bytes  25.11.2011 18:26:20
AESCN.DLL      : 8.1.7.2      127349 Bytes  01.09.2011 22:46:02
AESBX.DLL      : 8.2.1.34      323957 Bytes  01.09.2011 22:46:02
AERDL.DLL      : 8.1.9.15      639348 Bytes  08.09.2011 22:16:06
AEPACK.DLL    : 8.2.13.4      684406 Bytes  25.11.2011 18:26:02
AEOFFICE.DLL  : 8.1.2.20      201083 Bytes  25.11.2011 18:25:22
AEHEUR.DLL    : 8.1.2.193    3850617 Bytes  25.11.2011 18:25:16
AEHELP.DLL    : 8.1.18.0      254327 Bytes  25.11.2011 18:23:47
AEGEN.DLL      : 8.1.5.14      405877 Bytes  25.11.2011 18:23:41
AEEMU.DLL      : 8.1.3.0      393589 Bytes  01.09.2011 22:46:01
AECORE.DLL    : 8.1.24.0      196983 Bytes  25.11.2011 18:23:31
AEBB.DLL      : 8.1.1.0        53618 Bytes  01.09.2011 22:46:01
AVWINLL.DLL    : 12.1.0.17      27344 Bytes  19.10.2011 15:55:51
AVPREF.DLL    : 12.1.0.17      51920 Bytes  19.10.2011 15:55:48
AVREP.DLL      : 12.1.0.17    179408 Bytes  19.10.2011 15:55:49
AVARKT.DLL    : 12.1.0.17    223184 Bytes  19.10.2011 15:55:46
AVEVTLOG.DLL  : 12.1.0.17    169168 Bytes  19.10.2011 15:55:47
SQLITE3.DLL    : 3.7.0.0      398288 Bytes  19.10.2011 15:56:03
AVSMTP.DLL    : 12.1.0.17      62928 Bytes  19.10.2011 15:55:50
NETNT.DLL      : 12.1.0.17      17104 Bytes  19.10.2011 15:55:59
RCIMAGE.DLL    : 12.1.0.17    4447952 Bytes  19.10.2011 15:56:14
RCTEXT.DLL    : 12.1.0.16      98512 Bytes  19.10.2011 15:56:14

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\program files (x86)\avira\antivir desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: interaktiv
Sekundäre Aktion......................: ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Datei Suchmodus.......................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Samstag, 26. November 2011  14:47

Der Suchlauf über die Masterbootsektoren wird begonnen:
Masterbootsektor HD0
    [INFO]      Es wurde kein Virus gefunden!
Masterbootsektor HD1
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'C:\'
    [INFO]      Es wurde kein Virus gefunden!
Bootsektor 'D:\'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.
HKEY_LOCAL_MACHINE\Software\Microsoft\DevDiv\VC\Servicing\8.0\sp
  [HINWEIS]  Der Registrierungseintrag ist nicht sichtbar.
HKEY_LOCAL_MACHINE\Software\Microsoft\DevDiv\VC\Servicing\8.0\sp
HKEY_USERS\S-1-5-21-128432448-2284216070-1018584416-1000\Software\SecuROM\License information\datasecu
  [HINWEIS]  Der Registrierungseintrag ist nicht sichtbar.
HKEY_USERS\S-1-5-21-128432448-2284216070-1018584416-1000\Software\SecuROM\License information\rkeysecu
  [HINWEIS]  Der Registrierungseintrag ist nicht sichtbar.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'avscan.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '83' Modul(e) wurden durchsucht
Durchsuche Prozess 'plugin-container.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '146' Modul(e) wurden durchsucht
Durchsuche Prozess 'daemonu.exe' - '39' Modul(e) wurden durchsucht
Durchsuche Prozess 'SetPoint32.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'SteamService.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'IMBooster.exe' - '98' Modul(e) wurden durchsucht
Durchsuche Prozess 'Updater.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'DivXUpdate.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'jusched.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'nusb3mon.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'BCU.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'Origin.exe' - '113' Modul(e) wurden durchsucht
Durchsuche Prozess 'Skype.exe' - '113' Modul(e) wurden durchsucht
Durchsuche Prozess 'ManyCam.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'BitTorrent.exe' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'DTLite.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'steam.exe' - '123' Modul(e) wurden durchsucht
Durchsuche Prozess 'PnkBstrA.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'XSrvSetup.exe' - '42' Modul(e) wurden durchsucht
Durchsuche Prozess 'ICQ Service.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'ESSVR.EXE' - '20' Modul(e) wurden durchsucht
Durchsuche Prozess 'BCUService.exe' - '22' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '70' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '41' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvSCPAPISvr.exe' - '30' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '1397' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
C:\Users\Laner\AppData\Local\Temp\jar_cache2178312445139186393.tmp
  [0] Archivtyp: ZIP
  --> google/gijupo.class
      [FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/Small.AH
  --> google/jora.class
      [FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/Small.AG
  --> google/maria.class
      [FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/Small.AI
  --> google/opeltur.class
      [FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/Small.AJ
Beginne mit der Suche in 'D:\'

Beginne mit der Desinfektion:
C:\Users\Laner\AppData\Local\Temp\jar_cache2178312445139186393.tmp
  [FUND]      Enthält Erkennungsmuster des Java-Virus JAVA/Small.AJ
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '48535e69.qua' verschoben!


Ende des Suchlaufs: Samstag, 26. November 2011  15:55
Benötigte Zeit:  1:06:20 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  43346 Verzeichnisse wurden überprüft
 777757 Dateien wurden geprüft
      4 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      1 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 777753 Dateien ohne Befall
  28268 Archive wurden durchsucht
      0 Warnungen
      4 Hinweise
 486422 Objekte wurden beim Rootkitscan durchsucht
      4 Versteckte Objekte wurden gefunden
und zusätzlich habe ich nochmal OTL durchlaufen lassen, dachte das könntest du auch brauchen.

Code:
OTL logfile created on: 26.11.2011 15:57:20 - Run 2
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\Laner\Downloads
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 1,72 Gb Available Physical Memory | 43,07% Memory free
7,99 Gb Paging File | 5,30 Gb Available in Paging File | 66,29% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 199,90 Gb Total Space | 18,35 Gb Free Space | 9,18% Space Free | Partition Type: NTFS
Drive D: | 731,51 Gb Total Space | 731,04 Gb Free Space | 99,94% Space Free | Partition Type: NTFS
 
Computer Name: LANER-PC | User Name: Laner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.11.25 19:44:01 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Laner\Downloads\OTL.exe
PRC - [2011.11.19 20:02:30 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.11.13 15:07:17 | 000,419,624 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2011.11.07 20:27:02 | 028,846,216 | ---- | M] (Electronic Arts) -- C:\Program Files (x86)\Origin\Origin.exe
PRC - [2011.10.19 16:56:01 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011.10.19 16:55:48 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.10.19 16:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.10.15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.08.23 21:20:18 | 000,887,976 | ---- | M] (Ask) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe
PRC - [2011.08.04 17:56:07 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\steam.exe
PRC - [2011.05.27 08:33:12 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011.03.30 15:44:58 | 001,324,008 | ---- | M] (Iminent) -- C:\Program Files (x86)\Iminent\IMBooster\IMBooster.exe
PRC - [2011.03.21 19:56:16 | 001,230,704 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.03.21 10:32:02 | 001,752,136 | ---- | M] (ManyCam LLC) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
PRC - [2011.01.20 10:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2010.12.29 16:18:50 | 000,397,688 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe
PRC - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
PRC - [2010.01.19 03:31:26 | 000,072,304 | R--- | M] () -- C:\Windows\SysWOW64\XSrvSetup.exe
PRC - [2009.11.20 12:17:54 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
PRC - [2009.10.15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
PRC - [2009.10.15 14:06:42 | 000,375,000 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
PRC - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
PRC - [2008.05.02 04:00:00 | 000,077,824 | ---- | M] () -- C:\Programme\Logitech\SetPoint\x86\SetPoint32.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2011.11.13 15:07:16 | 014,410,024 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
MOD - [2011.11.13 15:07:11 | 000,914,216 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-52.dll
MOD - [2011.11.13 15:07:11 | 000,194,344 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.DLL
MOD - [2011.11.13 15:07:11 | 000,155,432 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-52.dll
MOD - [2011.11.13 15:07:11 | 000,091,432 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-50.dll
MOD - [2011.11.12 03:39:43 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\7fb80e48899821b64471f8e7ac2d08b7\System.Web.Services.ni.dll
MOD - [2011.11.12 03:39:41 | 011,807,744 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\5a95ba97100404e2ab26b5a9ab9ef965\System.Web.ni.dll
MOD - [2011.11.12 03:39:18 | 012,431,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d76221993c2fdfb991b8c12ae50a30eb\System.Windows.Forms.ni.dll
MOD - [2011.11.12 03:39:13 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e245eb9c1067cabd5673fe832d28613\System.Drawing.ni.dll
MOD - [2011.11.12 03:39:00 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll
MOD - [2011.11.12 03:38:57 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll
MOD - [2011.11.12 03:38:57 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll
MOD - [2011.11.12 03:38:53 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll
MOD - [2011.11.07 12:09:40 | 000,077,312 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\components\RadioWMPCoreGecko6.dll
MOD - [2011.11.07 12:09:40 | 000,076,800 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\components\RadioWMPCoreGecko8.dll
MOD - [2011.11.07 12:09:40 | 000,076,800 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\components\RadioWMPCoreGecko7.dll
MOD - [2011.11.07 12:09:40 | 000,076,288 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\components\RadioWMPCoreGecko5.dll
MOD - [2011.11.04 23:39:00 | 016,827,392 | R--- | M] () -- C:\Program Files (x86)\Origin\QtWebKit4.dll
MOD - [2011.11.04 23:18:14 | 000,312,320 | R--- | M] () -- C:\Program Files (x86)\Origin\imageformats\qtiff4.dll
MOD - [2011.11.04 23:18:14 | 000,264,192 | R--- | M] () -- C:\Program Files (x86)\Origin\imageformats\qmng4.dll
MOD - [2011.11.04 23:18:14 | 000,211,456 | R--- | M] () -- C:\Program Files (x86)\Origin\imageformats\qjpeg4.dll
MOD - [2011.11.04 23:18:12 | 000,172,544 | R--- | M] () -- C:\Program Files (x86)\Origin\codecs\qjpcodecs4.dll
MOD - [2011.11.04 23:18:12 | 000,158,208 | R--- | M] () -- C:\Program Files (x86)\Origin\codecs\qtwcodecs4.dll
MOD - [2011.11.04 23:18:12 | 000,143,872 | R--- | M] () -- C:\Program Files (x86)\Origin\codecs\qcncodecs4.dll
MOD - [2011.11.04 23:18:12 | 000,079,872 | R--- | M] () -- C:\Program Files (x86)\Origin\codecs\qkrcodecs4.dll
MOD - [2011.11.04 23:18:12 | 000,032,256 | R--- | M] () -- C:\Program Files (x86)\Origin\imageformats\qico4.dll
MOD - [2011.11.04 23:18:12 | 000,028,672 | R--- | M] () -- C:\Program Files (x86)\Origin\imageformats\qgif4.dll
MOD - [2011.11.04 23:16:30 | 000,327,680 | R--- | M] () -- C:\Program Files (x86)\Origin\phonon4.dll
MOD - [2011.11.04 23:16:26 | 000,413,184 | R--- | M] () -- C:\Program Files (x86)\Origin\QtXml4.dll
MOD - [2011.11.04 23:16:24 | 001,152,512 | R--- | M] () -- C:\Program Files (x86)\Origin\QtNetwork4.dll
MOD - [2011.11.04 23:16:22 | 009,440,256 | R--- | M] () -- C:\Program Files (x86)\Origin\QtGui4.dll
MOD - [2011.11.04 23:16:20 | 002,694,144 | R--- | M] () -- C:\Program Files (x86)\Origin\QtCore4.dll
MOD - [2011.10.15 00:54:26 | 000,265,536 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2011.08.10 01:33:44 | 000,081,408 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\extensions\webbooster@iminent.com\components_20\Iminent.WebBooster.XPCOM.50.dll
MOD - [2011.06.24 13:21:41 | 006,271,136 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
MOD - [2011.05.27 08:33:13 | 001,874,904 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2011.05.17 13:34:56 | 000,083,968 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\extensions\webbooster@iminent.com\components_20\Iminent.WebBooster.XPCOM.20.dll
MOD - [2011.04.21 13:55:20 | 001,131,840 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF4.dll
MOD - [2011.03.30 15:45:12 | 000,016,360 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\de\Iminent.Booster.UI.resources.dll
MOD - [2011.03.30 15:45:06 | 000,236,520 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Windows.dll
MOD - [2011.03.30 15:45:06 | 000,218,600 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Workflow.dll
MOD - [2011.03.30 15:45:04 | 001,869,288 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Services.dll
MOD - [2011.03.30 15:45:02 | 000,041,960 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Business.TinyUrl.dll
MOD - [2011.03.30 15:45:00 | 000,337,896 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Booster.UI.dll
MOD - [2011.03.21 19:57:34 | 000,096,112 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011.03.21 19:56:16 | 001,230,704 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
MOD - [2011.03.21 10:32:08 | 000,498,760 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\cximagecrt.dll
MOD - [2011.03.21 10:32:06 | 000,123,976 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\CrashRpt.dll
MOD - [2011.03.13 15:30:30 | 000,097,280 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com\components\RadioWMPCore.dll
MOD - [2011.02.02 21:39:56 | 000,008,192 | ---- | M] () -- C:\Program Files (x86)\Java\jre6\bin\jp2native.dll
MOD - [2009.07.14 18:58:12 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009.06.27 10:11:12 | 000,503,202 | ---- | M] () -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\sqlite3.dll
MOD - [2008.05.02 04:00:00 | 000,077,824 | ---- | M] () -- C:\Programme\Logitech\SetPoint\x86\SetPoint32.exe
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV - [2011.11.19 20:02:30 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011.11.13 15:07:17 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.10.19 16:56:01 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.10.19 16:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.10.15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010.12.21 06:38:22 | 000,350,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.19 03:31:26 | 000,072,304 | R--- | M] () [Auto | Running] -- C:\Windows\SysWOW64\XSrvSetup.exe -- (JMB36X)
SRV - [2009.10.15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService)
SRV - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.05.02 02:49:54 | 000,160,272 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2005.03.09 20:50:18 | 000,018,944 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Auto | Stopped] -- C:\Windows\SysWOW64\libusbd-nt.exe -- (libusbd)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.10.19 16:56:15 | 000,130,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2011.10.19 16:56:15 | 000,097,312 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2011.10.19 16:56:15 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011.07.08 00:21:28 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011.05.18 22:24:39 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2010.05.28 12:24:56 | 000,037,392 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hotcore3.sys -- (hotcore3)
DRV:64bit: - [2010.04.27 11:56:38 | 000,021,544 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2010.03.22 10:57:20 | 000,347,680 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.01.27 09:58:38 | 000,115,312 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)
DRV:64bit: - [2009.12.22 02:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009.11.20 12:16:02 | 000,177,152 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2009.11.20 12:15:58 | 000,075,776 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2009.10.07 11:13:34 | 000,070,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.10.07 11:13:34 | 000,028,728 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.05 02:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV:64bit: - [2009.03.18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2008.02.29 03:16:52 | 000,057,360 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2008.02.29 03:16:44 | 000,054,800 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2008.02.29 03:16:20 | 000,035,344 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2011.11.26 13:19:37 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2005.03.09 20:50:16 | 000,033,792 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\libusb0.sys -- (libusb0)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.iminent.com/?appId=5ed22dba-04f5-4512-a058-e77e9a879393&ref=homepage
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 80 03 9E 08 67 A7 CB 01  [binary data]
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\URLSearchHook: {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "Funload.de Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://search.iminent.com/?appId=5ed22dba-04f5-4512-a058-e77e9a879393&ref=homepage"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.1.20080801
FF - prefs.js..extensions.enabledItems: {7BDB48D1-CD94-4B99-A5A4-E418B9EE6532}:1.1
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.3
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.1.1
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {0f369707-379f-46df-a5c5-d04390f3459b}:3.2.2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.7.0190
FF - prefs.js..keyword.URL: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=MYC-ST&o=102869&locale=de_DE&apn_uid=12d67ad8-68d7-45f6-8667-6b496b09c3a5&apn_ptnrs=5J&apn_sauid=9E79BFAC-AB4A-4701-8895-925B3F975BDB&apn_dtid=YYYYYYYYDE&&q="
FF - prefs.js..network.proxy.type: 0
 
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0: C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.07.03 03:45:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.27 08:33:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.27 08:33:15 | 000,000,000 | ---D | M]
 
[2010.12.29 15:50:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Laner\AppData\Roaming\mozilla\Extensions
[2011.11.24 21:27:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions
[2011.11.12 00:42:46 | 000,000,000 | ---D | M] (Funload.de Community Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}
[2011.11.12 00:42:51 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011.11.12 00:42:54 | 000,000,000 | ---D | M] (BittorrentBar_DE Community Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}
[2011.11.12 00:43:07 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.30 10:57:21 | 000,000,000 | ---D | M] (Softonic Deutsch Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}
[2011.11.12 00:43:12 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.07.04 14:54:25 | 000,000,000 | ---D | M] (IMinent Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
[2011.11.12 00:43:16 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.05.18 22:24:36 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com
[2011.05.28 14:16:08 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com
[2011.11.14 05:51:19 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com
[2011.11.25 18:56:15 | 000,002,405 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\askcom.xml
[2010.10.27 15:22:38 | 000,000,923 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\conduit.xml
[2011.05.18 22:24:29 | 000,002,055 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\daemon-search.xml
[2010.12.30 11:07:33 | 000,002,342 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icq-search.xml
[2011.05.01 17:23:31 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-1.xml
[2011.05.03 16:45:27 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-2.xml
[2011.07.11 11:34:54 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-3.xml
[2011.08.18 12:22:18 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-4.xml
[2011.08.19 21:08:37 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-5.xml
[2011.11.13 08:02:05 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-6.xml
[2011.03.30 14:14:34 | 000,001,042 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin.xml
[2011.11.21 17:10:43 | 000,002,230 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\SearchTheWeb.xml
[2011.08.26 15:58:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.11.16 15:25:19 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.01.20 16:12:04 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.02.17 19:28:59 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011.01.18 17:43:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\KavAntiBanner@Kaspersky.ru-trash
[2011.01.18 17:43:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru-trash
[2011.08.26 15:58:10 | 000,000,000 | ---D | M] (Iminent WebBooster) -- C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com
[2011.07.03 03:45:47 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 <video>) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
() (No name found) -- C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\EXTENSIONS\{7BDB48D1-CD94-4B99-A5A4-E418B9EE6532}.XPI
() (No name found) -- C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\EXTENSIONS\{C50CA3C4-5656-43C2-A061-13E717F73FC8}.XPI
() (No name found) -- C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\EXTENSIONS\DIVXWEBPLAYER@DIVX.COM.XPI
[2011.05.27 08:33:12 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.02.02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011.05.27 08:33:13 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.05.27 08:33:13 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.05.27 08:33:13 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.05.27 08:33:13 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.08.21 23:09:52 | 000,002,157 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\SearchTheWeb.xml
[2011.05.27 08:33:13 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.05.27 08:33:13 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\Laner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Funload.de Toolbar) - {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (TBSB01620 Class) - {58124A0B-DC32-4180-9BFF-E0E21AE34026} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O2 - BHO: (BittorrentBar_DE Toolbar) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found.
O2 - BHO: (IMinent WebBooster (BHO)) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\IMBooster4Web\Iminent.WebBooster.dll (Iminent)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (Funload.de Toolbar) - {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (BittorrentBar_DE Toolbar) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Funload.de Toolbar) - {0F369707-379F-46DF-A5C5-D04390F3459B} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (BittorrentBar_DE Toolbar) - {64EAD72B-FFD4-4E01-AA3A-4C71665D73E4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4:64bit: - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\SysNative\spool\drivers\x64\3\EKIJ5000MUI.exe (Eastman Kodak Company)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BCU] C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe File not found
O4 - HKLM..\Run: [IMBooster] C:\Program Files (x86)\Iminent\IMBooster\imbooster.exe (Iminent)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
O4 - HKCU..\Run: [BitTorrent] C:\Program Files (x86)\BitTorrent\BitTorrent.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [ManyCam] C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe (ManyCam LLC)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10t_Plugin.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E028D1B-F7D1-4162-81F5-A59E7E2D3304}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - Explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29:64bit: - HKLM SecurityProviders - (credssp.dll) -credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) -credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{76247229-8130-11e0-aae8-1c6f6582f360}\Shell - "" = AutoRun
O33 - MountPoints2\{76247229-8130-11e0-aae8-1c6f6582f360}\Shell\AutoRun\command - "" = G:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.11.25 19:41:01 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Roaming\Avira
[2011.11.25 19:20:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2011.11.25 19:20:44 | 000,130,760 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2011.11.25 19:20:44 | 000,097,312 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2011.11.25 19:20:44 | 000,027,760 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2011.11.25 19:20:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011.11.25 19:20:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2011.11.25 19:20:17 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.11.24 18:50:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2011.11.24 18:43:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2011.11.24 18:43:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2011.11.24 18:16:59 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Roaming\Malwarebytes
[2011.11.24 18:16:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.11.24 18:16:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.11.24 18:16:45 | 000,025,416 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.11.24 18:16:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.11.20 14:23:20 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\ESN Sonar
[2011.11.19 22:28:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2011.11.19 22:28:20 | 000,837,952 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\easyupdatusapiu64.dll
[2011.11.19 22:27:33 | 001,452,648 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco6420102.dll
[2011.11.19 22:27:33 | 000,174,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2011.11.19 22:27:33 | 000,029,288 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2011.11.19 22:27:27 | 024,742,720 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2011.11.19 22:27:27 | 018,871,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2011.11.19 22:27:27 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011.11.19 22:27:27 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2011.11.19 22:27:26 | 024,796,992 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2011.11.19 22:27:26 | 017,248,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2011.11.19 22:27:26 | 015,693,120 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2011.11.19 22:27:26 | 007,581,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2011.11.19 22:27:26 | 005,578,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2011.11.19 22:27:26 | 002,542,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2011.11.19 22:27:26 | 002,401,088 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2011.11.19 22:27:26 | 002,232,128 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2011.11.19 22:27:26 | 002,099,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2011.11.19 22:27:26 | 001,533,248 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco64.dll
[2011.11.19 22:27:26 | 001,454,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco64.dll
[2011.11.19 20:29:32 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\PunkBuster
[2011.11.19 20:28:17 | 000,000,000 | ---D | C] -- C:\Users\Laner\Documents\Battlefield 3
[2011.11.19 20:27:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlelog Web Plugins
[2011.11.19 19:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
[2011.11.19 19:50:59 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\EAInstaller
[2011.11.19 18:38:00 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Roaming\Origin
[2011.11.19 18:37:58 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\Origin
[2011.11.19 18:37:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
[2011.11.19 18:37:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin Games
[2011.11.19 18:37:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
[2011.11.19 18:37:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin
[2011.11.17 19:09:05 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\CrashDumps
[2011.11.17 18:22:27 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\NPE
[2011.11.17 18:22:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2011.11.15 17:35:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011.11.12 01:04:43 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\Skyrim
[2011.11.11 21:31:32 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.11.11 21:31:31 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.11.11 21:31:31 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.11.11 21:31:31 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.11.11 21:31:30 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.11.11 21:31:30 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.11.11 21:31:30 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.11.11 21:31:30 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.11.11 21:31:30 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.11.11 21:31:29 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.11.11 21:31:29 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.11.11 21:31:29 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2011.11.11 21:31:29 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2011.11.11 21:31:29 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.11.11 21:31:29 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.11.11 20:49:27 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll
[2011.11.11 20:49:27 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll
[2011.11.11 20:49:27 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2011.11.11 20:49:27 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2011.11.11 20:49:27 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax
[2011.11.11 20:49:27 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax
[2011.11.11 20:49:27 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax
[2011.11.11 20:49:27 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax
[2011.11.11 20:49:27 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax
[2011.11.11 20:49:27 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax
[2011.11.11 20:42:41 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2011.11.11 20:42:41 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011.11.26 15:34:04 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.11.26 13:27:26 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.11.26 13:27:26 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.11.26 13:21:20 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.11.26 13:19:37 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys
[2011.11.26 13:19:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.11.26 13:19:26 | 3218,497,536 | -HS- | M] () -- C:\hiberfil.sys
[2011.11.25 19:20:51 | 000,002,066 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2011.11.25 19:20:32 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011.11.25 19:20:22 | 000,707,300 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.11.25 19:20:22 | 000,660,918 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.11.25 19:20:22 | 000,152,892 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.11.25 19:20:22 | 000,125,108 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.11.25 19:08:41 | 001,648,796 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.11.25 00:46:13 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2011.11.25 00:46:13 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.11.25 00:19:18 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2011.11.24 18:43:07 | 001,309,375 | ---- | M] () -- C:\Users\Laner\Desktop\tdsskiller_2.5.5.0.zip
[2011.11.24 18:16:49 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.11.20 18:11:32 | 000,000,220 | ---- | M] () -- C:\Users\Laner\Desktop\Battlelog.url
[2011.11.19 20:02:47 | 000,001,170 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
[2011.11.19 20:02:30 | 000,075,136 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.11.19 18:41:08 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
[2011.11.17 18:54:36 | 000,000,710 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\SMRResults210.dat
[2011.11.17 15:37:23 | 000,000,221 | ---- | M] () -- C:\Users\Laner\Desktop\The Elder Scrolls V Skyrim.url
[2011.11.17 15:34:37 | 013,511,712 | ---- | M] () -- C:\Users\Laner\Desktop\Elder Scrolls Skyrim Theme by VikiTech.zip
[2011.11.12 03:34:38 | 000,373,352 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.11.12 03:16:55 | 001,625,754 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011.11.25 19:20:51 | 000,002,066 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2011.11.24 18:43:05 | 001,309,375 | ---- | C] () -- C:\Users\Laner\Desktop\tdsskiller_2.5.5.0.zip
[2011.11.24 18:16:49 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.11.19 20:29:36 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2011.11.19 20:24:24 | 000,000,220 | ---- | C] () -- C:\Users\Laner\Desktop\Battlelog.url
[2011.11.19 19:51:03 | 000,001,170 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
[2011.11.19 19:50:24 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.11.19 19:50:24 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2011.11.19 19:50:22 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.11.19 18:37:49 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
[2011.11.17 18:54:31 | 000,000,710 | ---- | C] () -- C:\Users\Laner\AppData\Roaming\SMRResults210.dat
[2011.11.17 15:37:23 | 000,000,221 | ---- | C] () -- C:\Users\Laner\Desktop\The Elder Scrolls V Skyrim.url
[2011.11.17 15:33:36 | 013,511,712 | ---- | C] () -- C:\Users\Laner\Desktop\Elder Scrolls Skyrim Theme by VikiTech.zip
[2011.10.15 00:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.09.30 17:15:16 | 000,000,017 | ---- | C] () -- C:\Users\Laner\AppData\Local\resmon.resmoncfg
[2011.01.20 16:45:49 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2011.01.01 05:50:04 | 000,033,792 | ---- | C] () -- C:\Windows\SysWow64\drivers\libusb0.sys
[2010.12.30 17:28:22 | 000,000,093 | ---- | C] () -- C:\Users\Laner\AppData\Local\fusioncache.dat
[2010.12.30 16:41:49 | 000,000,760 | ---- | C] () -- C:\Users\Laner\AppData\Roaming\setup_ldm.iss
[2010.12.30 13:56:48 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2010.12.29 15:54:07 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.12.29 15:49:15 | 001,625,754 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.12.28 11:17:24 | 000,072,304 | R--- | C] () -- C:\Windows\SysWow64\XSrvSetup.exe
[2010.12.28 11:13:18 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2009.08.27 08:04:12 | 000,207,400 | R--- | C] () -- C:\Windows\GSetup.exe
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

< End of report >
Ich hoffe, dass ist richtig so.

LG dieFackel

cosinus 26.11.2011 16:21
Malwarebytes hat drei Bedrohungen gefunden aber du postest das Log ohne Funde. Sehr sinnvoll...

dieFackel 26.11.2011 16:30
Welche Funde? Ich sehe nur 0 infizierte Dateien...

Ich lass es jetzt nochmal durchlaufen.

dieFackel 26.11.2011 16:40
Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8239

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

26.11.2011 16:31:28
mbam-log-2011-11-26 (16-31-28).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 188296
Laufzeit: 2 Minute(n), 8 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
Dazu schreibt er noch, es wurden keine infizierten Objekte gefunden.

Oder was genau meinst du? Bin da leider nicht so begabt drin wie du :)

EDIT: Ach jetzt versteh ich dich! Die 3 Funde hab ich schon entfernen lassen, bevor ich hier rein geschrieben hab. Im Moment findet er nix... Wär ja schön wenns damit gelöst wäre.
Dass ich sie gelöscht habe war wohl zu voreilig, oder? Dachte aber damit hätte sichs.

LG dieFackel

cosinus 27.11.2011 00:49
Zitat:
EDIT: Ach jetzt versteh ich dich! Die 3 Funde hab ich schon entfernen lassen, bevor ich hier rein geschrieben hab. Im Moment findet er nix... Wär ja schön wenns damit gelöst wäre.
Ist dieser Reiter Logdateien bei Malwarebytes denn so unscheinbar, dass man ihn übersieht? :(
Ich will doch nur das Log sehen damit ich weiß was gefunden und entferntn wurde

dieFackel 27.11.2011 12:52
Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8233

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

25.11.2011 16:50:16
mbam-log-2011-11-25 (16-50-16).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 188816
Laufzeit: 3 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 2

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{31F3E4A5-1269-11E0-B367-806E6F6E6963} (Backdoor.Agent) -> Value: {31F3E4A5-1269-11E0-B367-806E6F6E6963} -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\Laner\AppData\Roaming\microsoft\svhcost.exe (Backdoor.Agent) -> Quarantined and deleted successfully.
c:\Users\Laner\AppData\Local\Temp\0.5391846337054553.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
Glaube das ist sie. Wusste nicht, dass er sie auch speichert... sowas musst du sagen^^

LG dieFackel

cosinus 27.11.2011 12:58
Bitte nun routinemäßig einen Vollscan mit malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


dieFackel 27.11.2011 16:00
Hier der log von ESET:

Code:
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=340f105c26d1524eb8853574bb1feee3
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-27 02:54:32
# local_time=2011-11-27 03:54:32 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=1280 16777215 100 0 0 0 0 0
# compatibility_mode=1792 16777215 100 0 159321 159321 0 0
# compatibility_mode=5893 16776573 100 94 12669 74806635 0 0
# compatibility_mode=8192 67108863 100 0 247512 247512 0 0
# scanned=225121
# found=2
# cleaned=0
# scan_time=4750
C:\Users\Laner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\7ed88b0b-2abbea11        Java/TrojanDownloader.OpenStream.NBW trojan (unable to clean)        00000000000000000000000000000000        I
C:\Users\Laner\Downloads\SoftonicDownloader_fuer_kaspersky-tdsskiller.exe        Win32/SoftonicDownloader application (unable to clean)        00000000000000000000000000000000        I
und hier der vom Vollscan durch MBAM:

Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8233

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

24.11.2011 18:18:41
mbam-log-2011-11-24 (18-18-41).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|G:\|)
Durchsuchte Objekte: 29890
Laufzeit: 48 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
und hier noch ein älterer MBAM log mit Funden:

Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8233

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

25.11.2011 19:02:34
mbam-log-2011-11-25 (19-02-34).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 188893
Laufzeit: 2 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 2

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{31F3E4A5-1269-11E0-B367-806E6F6E6963} (Backdoor.Agent) -> Value: {31F3E4A5-1269-11E0-B367-806E6F6E6963} -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Users\Laner\AppData\Roaming\microsoft\svhcost.exe (Backdoor.Agent) -> Quarantined and deleted successfully.
c:\Users\Laner\AppData\Local\Temp\0.6805978283553654.exe (Exploit.Drop.2) -> Quarantined and deleted successfully.
Hoffe das hilft :)

LG dieFackel

cosinus 28.11.2011 10:56
Zitat:
Datenbank Version: 8233
Du hast Malwarebytes vorher nicht aktualisiert. Bitte updaten und einen Vollscan machen.

dieFackel 28.11.2011 14:53
Hm, bin mir sehr sicher das ich geupdated habe, aber macht ja nix... log kommt dann bald.

dieFackel 28.11.2011 15:56
Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8256

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

28.11.2011 15:50:44
mbam-log-2011-11-28 (15-50-44).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 394749
Laufzeit: 58 Minute(n), 16 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
nochmal der Vollscan.

LG dieFackel

cosinus 28.11.2011 16:10
CustomScan mit OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
wininit.exe
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT

dieFackel 28.11.2011 17:10
Hier der Log :)

Code:
OTL logfile created on: 28.11.2011 16:53:06 - Run 3
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\Laner\Downloads
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,65 Gb Available Physical Memory | 66,36% Memory free
7,99 Gb Paging File | 6,41 Gb Available in Paging File | 80,22% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 199,90 Gb Total Space | 17,30 Gb Free Space | 8,65% Space Free | Partition Type: NTFS
Drive D: | 731,51 Gb Total Space | 731,04 Gb Free Space | 99,94% Space Free | Partition Type: NTFS
 
Computer Name: LANER-PC | User Name: Laner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.11.25 19:44:01 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Laner\Downloads\OTL.exe
PRC - [2011.11.19 20:02:30 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.10.19 16:56:01 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011.10.19 16:55:48 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.10.19 16:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.10.15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.08.23 21:20:18 | 000,887,976 | ---- | M] (Ask) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe
PRC - [2011.03.30 15:44:58 | 001,324,008 | ---- | M] (Iminent) -- C:\Program Files (x86)\Iminent\IMBooster\IMBooster.exe
PRC - [2011.03.21 19:56:16 | 001,230,704 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2010.12.29 16:18:50 | 000,397,688 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\BitTorrent\BitTorrent.exe
PRC - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
PRC - [2010.01.19 03:31:26 | 000,072,304 | R--- | M] () -- C:\Windows\SysWOW64\XSrvSetup.exe
PRC - [2009.11.20 12:17:54 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
PRC - [2009.10.15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
PRC - [2009.10.15 14:06:42 | 000,375,000 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
PRC - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
PRC - [2008.05.02 04:00:00 | 000,077,824 | ---- | M] () -- C:\Programme\Logitech\SetPoint\x86\SetPoint32.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2011.11.12 03:39:43 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\7fb80e48899821b64471f8e7ac2d08b7\System.Web.Services.ni.dll
MOD - [2011.11.12 03:39:41 | 011,807,744 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\5a95ba97100404e2ab26b5a9ab9ef965\System.Web.ni.dll
MOD - [2011.11.12 03:39:18 | 012,431,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d76221993c2fdfb991b8c12ae50a30eb\System.Windows.Forms.ni.dll
MOD - [2011.11.12 03:39:13 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e245eb9c1067cabd5673fe832d28613\System.Drawing.ni.dll
MOD - [2011.11.12 03:39:00 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll
MOD - [2011.11.12 03:38:57 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll
MOD - [2011.11.12 03:38:57 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll
MOD - [2011.11.12 03:38:53 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll
MOD - [2011.03.30 15:45:12 | 000,016,360 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\de\Iminent.Booster.UI.resources.dll
MOD - [2011.03.30 15:45:06 | 000,236,520 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Windows.dll
MOD - [2011.03.30 15:45:06 | 000,218,600 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Workflow.dll
MOD - [2011.03.30 15:45:04 | 001,869,288 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Services.dll
MOD - [2011.03.30 15:45:02 | 000,041,960 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Business.TinyUrl.dll
MOD - [2011.03.30 15:45:00 | 000,337,896 | ---- | M] () -- C:\Program Files (x86)\Iminent\IMBooster\Iminent.Booster.UI.dll
MOD - [2011.03.21 19:57:34 | 000,096,112 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011.03.21 19:56:16 | 001,230,704 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
MOD - [2009.07.14 18:58:12 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009.06.27 10:11:12 | 000,503,202 | ---- | M] () -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\sqlite3.dll
MOD - [2008.05.02 04:00:00 | 000,077,824 | ---- | M] () -- C:\Programme\Logitech\SetPoint\x86\SetPoint32.exe
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV - [2011.11.19 20:02:30 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011.11.13 15:07:17 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.10.19 16:56:01 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.10.19 16:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.10.15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010.12.21 06:38:22 | 000,350,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.19 03:31:26 | 000,072,304 | R--- | M] () [Auto | Running] -- C:\Windows\SysWOW64\XSrvSetup.exe -- (JMB36X)
SRV - [2009.10.15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService)
SRV - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.05.02 02:49:54 | 000,160,272 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2005.03.09 20:50:18 | 000,018,944 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Auto | Stopped] -- C:\Windows\SysWOW64\libusbd-nt.exe -- (libusbd)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.10.19 16:56:15 | 000,130,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2011.10.19 16:56:15 | 000,097,312 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2011.10.19 16:56:15 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011.07.08 00:21:28 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011.05.18 22:24:39 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2010.05.28 12:24:56 | 000,037,392 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hotcore3.sys -- (hotcore3)
DRV:64bit: - [2010.04.27 11:56:38 | 000,021,544 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2010.03.22 10:57:20 | 000,347,680 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.01.27 09:58:38 | 000,115,312 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)
DRV:64bit: - [2009.12.22 02:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009.11.20 12:16:02 | 000,177,152 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2009.11.20 12:15:58 | 000,075,776 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2009.10.07 11:13:34 | 000,070,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.10.07 11:13:34 | 000,028,728 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.05 02:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV:64bit: - [2009.03.18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2008.02.29 03:16:52 | 000,057,360 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2008.02.29 03:16:44 | 000,054,800 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2008.02.29 03:16:20 | 000,035,344 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2011.11.28 14:46:39 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2005.03.09 20:50:16 | 000,033,792 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\libusb0.sys -- (libusb0)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.iminent.com/?appId=5ed22dba-04f5-4512-a058-e77e9a879393&ref=homepage
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 80 03 9E 08 67 A7 CB 01  [binary data]
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\URLSearchHook: {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "Funload.de Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://search.iminent.com/?appId=5ed22dba-04f5-4512-a058-e77e9a879393&ref=homepage"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.1.20080801
FF - prefs.js..extensions.enabledItems: {7BDB48D1-CD94-4B99-A5A4-E418B9EE6532}:1.1
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.3
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.1.1
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {0f369707-379f-46df-a5c5-d04390f3459b}:3.2.2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.7.0190
FF - prefs.js..keyword.URL: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=MYC-ST&o=102869&locale=de_DE&apn_uid=12d67ad8-68d7-45f6-8667-6b496b09c3a5&apn_ptnrs=5J&apn_sauid=9E79BFAC-AB4A-4701-8895-925B3F975BDB&apn_dtid=YYYYYYYYDE&&q="
FF - prefs.js..network.proxy.type: 0
 
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0: C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.07.03 03:45:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.05.27 08:33:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.05.27 08:33:15 | 000,000,000 | ---D | M]
 
[2010.12.29 15:50:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Laner\AppData\Roaming\mozilla\Extensions
[2011.11.24 21:27:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions
[2011.11.12 00:42:46 | 000,000,000 | ---D | M] (Funload.de Community Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}
[2011.11.12 00:42:51 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011.11.12 00:42:54 | 000,000,000 | ---D | M] (BittorrentBar_DE Community Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}
[2011.11.12 00:43:07 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.30 10:57:21 | 000,000,000 | ---D | M] (Softonic Deutsch Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}
[2011.11.12 00:43:12 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.07.04 14:54:25 | 000,000,000 | ---D | M] (IMinent Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
[2011.11.12 00:43:16 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.05.18 22:24:36 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com
[2011.05.28 14:16:08 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com
[2011.11.14 05:51:19 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com
[2011.11.27 19:21:07 | 000,002,405 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\askcom.xml
[2010.10.27 15:22:38 | 000,000,923 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\conduit.xml
[2011.05.18 22:24:29 | 000,002,055 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\daemon-search.xml
[2010.12.30 11:07:33 | 000,002,342 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icq-search.xml
[2011.05.01 17:23:31 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-1.xml
[2011.05.03 16:45:27 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-2.xml
[2011.07.11 11:34:54 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-3.xml
[2011.08.18 12:22:18 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-4.xml
[2011.08.19 21:08:37 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-5.xml
[2011.11.13 08:02:05 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-6.xml
[2011.03.30 14:14:34 | 000,001,042 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin.xml
[2011.11.21 17:10:43 | 000,002,230 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\SearchTheWeb.xml
[2011.08.26 15:58:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.11.16 15:25:19 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.01.20 16:12:04 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.02.17 19:28:59 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011.01.18 17:43:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\KavAntiBanner@Kaspersky.ru-trash
[2011.01.18 17:43:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru-trash
[2011.08.26 15:58:10 | 000,000,000 | ---D | M] (Iminent WebBooster) -- C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com
[2011.07.03 03:45:47 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 &lt;video&gt;) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
() (No name found) -- C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\EXTENSIONS\{7BDB48D1-CD94-4B99-A5A4-E418B9EE6532}.XPI
() (No name found) -- C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\EXTENSIONS\{C50CA3C4-5656-43C2-A061-13E717F73FC8}.XPI
() (No name found) -- C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\EXTENSIONS\DIVXWEBPLAYER@DIVX.COM.XPI
[2011.05.27 08:33:12 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.02.02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011.05.27 08:33:13 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.05.27 08:33:13 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.05.27 08:33:13 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.05.27 08:33:13 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.08.21 23:09:52 | 000,002,157 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\SearchTheWeb.xml
[2011.05.27 08:33:13 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.05.27 08:33:13 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\Laner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Funload.de Toolbar) - {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (TBSB01620 Class) - {58124A0B-DC32-4180-9BFF-E0E21AE34026} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O2 - BHO: (BittorrentBar_DE Toolbar) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found.
O2 - BHO: (IMinent WebBooster (BHO)) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\IMBooster4Web\Iminent.WebBooster.dll (Iminent)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (Funload.de Toolbar) - {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (BittorrentBar_DE Toolbar) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Funload.de Toolbar) - {0F369707-379F-46DF-A5C5-D04390F3459B} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (BittorrentBar_DE Toolbar) - {64EAD72B-FFD4-4E01-AA3A-4C71665D73E4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4:64bit: - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\SysNative\spool\drivers\x64\3\EKIJ5000MUI.exe (Eastman Kodak Company)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BCU] C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe File not found
O4 - HKLM..\Run: [IMBooster] C:\Program Files (x86)\Iminent\IMBooster\imbooster.exe (Iminent)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
O4 - HKCU..\Run: [BitTorrent] C:\Program Files (x86)\BitTorrent\BitTorrent.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [ManyCam] C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe (ManyCam LLC)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E028D1B-F7D1-4162-81F5-A59E7E2D3304}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - Explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29:64bit: - HKLM SecurityProviders - (credssp.dll) -credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) -credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{76247229-8130-11e0-aae8-1c6f6582f360}\Shell - "" = AutoRun
O33 - MountPoints2\{76247229-8130-11e0-aae8-1c6f6582f360}\Shell\AutoRun\command - "" = G:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
 
MsConfig:64bit - StartUpReg: BitTorrent - hkey= - key= - C:\Program Files (x86)\BitTorrent\BitTorrent.exe (BitTorrent, Inc.)
MsConfig:64bit - StartUpReg: EADM - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: EKIJ5000StatusMonitor - hkey= - key= - C:\Windows\SysNative\spool\drivers\x64\3\EKIJ5000MUI.exe (Eastman Kodak Company)
MsConfig:64bit - StartUpReg: ICQ - hkey= - key= - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
MsConfig:64bit - StartUpReg: LogMeIn Hamachi Ui - hkey= - key= -  File not found
MsConfig:64bit - State: "startup" - Reg Error: Key error.
 
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: SMR210 - Service
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: vsmon - Service
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SMR210 - Service
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: vsmon - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32:64bit: aux - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midimapper - midimap.dll (Microsoft Corporation)
Drivers32:64bit: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:64bit: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.iyuv - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.uyvy - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: vidc.yuy2 - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: vidc.yvu9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:64bit: vidc.yvyu - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: wave - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave2 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave3 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave4 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: aux - wdmaud.drv (Microsoft Corporation)
Drivers32: midi - wdmaud.drv (Microsoft Corporation)
Drivers32: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32: midi2 - wdmaud.drv (Microsoft Corporation)
Drivers32: midi3 - wdmaud.drv (Microsoft Corporation)
Drivers32: midi4 - wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - midimap.dll (Microsoft Corporation)
Drivers32: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer2 - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer3 - wdmaud.drv (Microsoft Corporation)
Drivers32: mixer4 - wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32: vidc.cvid - iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - DivX.dll (DivX, Inc.)
Drivers32: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.iv50 - ir50_32.dll (Intel Corporation)
Drivers32: vidc.iyuv - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yv12 - DivX.dll (DivX, Inc.)
Drivers32: vidc.yvu9 - tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - msyuv.dll (Microsoft Corporation)
Drivers32: wave - wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32: wave2 - wdmaud.drv (Microsoft Corporation)
Drivers32: wave3 - wdmaud.drv (Microsoft Corporation)
Drivers32: wave4 - wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - msacm32.drv (Microsoft Corporation)
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.11.28 00:57:20 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Simple Port Forwarding
[2011.11.28 00:57:19 | 000,000,000 | ---D | C] -- C:\Windows\Simple Port Forwarding
[2011.11.28 00:57:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Simple Port Forwarding
[2011.11.25 19:41:01 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Roaming\Avira
[2011.11.25 19:20:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2011.11.25 19:20:44 | 000,130,760 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2011.11.25 19:20:44 | 000,097,312 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2011.11.25 19:20:44 | 000,027,760 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2011.11.25 19:20:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011.11.25 19:20:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2011.11.25 19:20:17 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.11.24 18:50:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2011.11.24 18:43:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2011.11.24 18:43:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2011.11.24 18:16:59 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Roaming\Malwarebytes
[2011.11.24 18:16:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.11.24 18:16:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.11.24 18:16:45 | 000,025,416 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.11.24 18:16:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.11.20 14:23:20 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\ESN Sonar
[2011.11.19 22:28:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2011.11.19 22:27:27 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011.11.19 22:27:27 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2011.11.19 20:29:32 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\PunkBuster
[2011.11.19 20:28:17 | 000,000,000 | ---D | C] -- C:\Users\Laner\Documents\Battlefield 3
[2011.11.19 20:27:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlelog Web Plugins
[2011.11.19 19:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
[2011.11.19 19:50:59 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\EAInstaller
[2011.11.19 18:38:00 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Roaming\Origin
[2011.11.19 18:37:58 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\Origin
[2011.11.19 18:37:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
[2011.11.19 18:37:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin Games
[2011.11.19 18:37:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
[2011.11.19 18:37:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin
[2011.11.17 19:09:05 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\CrashDumps
[2011.11.17 18:22:27 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\NPE
[2011.11.17 18:22:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2011.11.15 17:35:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011.11.12 01:04:43 | 000,000,000 | ---D | C] -- C:\Users\Laner\AppData\Local\Skyrim
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011.11.28 16:34:00 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.11.28 16:11:08 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2011.11.28 16:11:08 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.11.28 14:54:09 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.11.28 14:54:09 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.11.28 14:46:58 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.11.28 14:46:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.11.28 14:46:29 | 3218,497,536 | -HS- | M] () -- C:\hiberfil.sys
[2011.11.28 01:31:41 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2011.11.28 00:57:20 | 000,001,970 | ---- | M] () -- C:\Users\Laner\Desktop\Simple Port Forwarding.lnk
[2011.11.25 19:20:51 | 000,002,066 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2011.11.25 19:20:32 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011.11.25 19:20:22 | 000,707,300 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.11.25 19:20:22 | 000,660,918 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.11.25 19:20:22 | 000,152,892 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.11.25 19:20:22 | 000,125,108 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.11.25 19:08:41 | 001,648,796 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.11.24 18:43:07 | 001,309,375 | ---- | M] () -- C:\Users\Laner\Desktop\tdsskiller_2.5.5.0.zip
[2011.11.24 18:16:49 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.11.20 18:11:32 | 000,000,220 | ---- | M] () -- C:\Users\Laner\Desktop\Battlelog.url
[2011.11.19 20:02:47 | 000,001,170 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
[2011.11.19 20:02:30 | 000,075,136 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.11.19 18:41:08 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
[2011.11.17 18:54:36 | 000,000,710 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\SMRResults210.dat
[2011.11.17 15:37:23 | 000,000,221 | ---- | M] () -- C:\Users\Laner\Desktop\The Elder Scrolls V Skyrim.url
[2011.11.17 15:34:37 | 013,511,712 | ---- | M] () -- C:\Users\Laner\Desktop\Elder Scrolls Skyrim Theme by VikiTech.zip
[2011.11.12 03:34:38 | 000,373,352 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.11.12 03:16:55 | 001,625,754 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011.11.28 00:57:20 | 000,001,970 | ---- | C] () -- C:\Users\Laner\Desktop\Simple Port Forwarding.lnk
[2011.11.25 19:20:51 | 000,002,066 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2011.11.24 18:43:05 | 001,309,375 | ---- | C] () -- C:\Users\Laner\Desktop\tdsskiller_2.5.5.0.zip
[2011.11.24 18:16:49 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.11.19 20:29:36 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2011.11.19 20:24:24 | 000,000,220 | ---- | C] () -- C:\Users\Laner\Desktop\Battlelog.url
[2011.11.19 19:51:03 | 000,001,170 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
[2011.11.19 19:50:24 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.11.19 19:50:24 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2011.11.19 19:50:22 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.11.19 18:37:49 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
[2011.11.17 18:54:31 | 000,000,710 | ---- | C] () -- C:\Users\Laner\AppData\Roaming\SMRResults210.dat
[2011.11.17 15:37:23 | 000,000,221 | ---- | C] () -- C:\Users\Laner\Desktop\The Elder Scrolls V Skyrim.url
[2011.11.17 15:33:36 | 013,511,712 | ---- | C] () -- C:\Users\Laner\Desktop\Elder Scrolls Skyrim Theme by VikiTech.zip
[2011.10.15 00:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.09.30 17:15:16 | 000,000,017 | ---- | C] () -- C:\Users\Laner\AppData\Local\resmon.resmoncfg
[2011.01.20 16:45:49 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2011.01.01 05:50:04 | 000,033,792 | ---- | C] () -- C:\Windows\SysWow64\drivers\libusb0.sys
[2010.12.30 17:28:22 | 000,000,093 | ---- | C] () -- C:\Users\Laner\AppData\Local\fusioncache.dat
[2010.12.30 16:41:49 | 000,000,760 | ---- | C] () -- C:\Users\Laner\AppData\Roaming\setup_ldm.iss
[2010.12.30 13:56:48 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2010.12.29 15:54:07 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.12.29 15:49:15 | 001,625,754 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.12.28 11:17:24 | 000,072,304 | R--- | C] () -- C:\Windows\SysWow64\XSrvSetup.exe
[2010.12.28 11:13:18 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2009.08.27 08:04:12 | 000,207,400 | R--- | C] () -- C:\Windows\GSetup.exe
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
 
========== LOP Check ==========
 
[2011.05.26 20:14:01 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\.minecraft
[2011.11.28 16:57:45 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\BitTorrent
[2011.01.18 17:43:31 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\CheckPoint
[2011.05.18 22:30:55 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\DAEMON Tools Lite
[2011.02.04 21:56:27 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\GetRightToGo
[2011.07.01 23:05:52 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\go
[2011.05.19 17:23:23 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\gtk-2.0
[2011.05.12 01:24:41 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\ICQ
[2011.02.05 02:31:07 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Kalypso Media
[2010.12.30 16:41:54 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Leadertech
[2011.01.23 09:21:00 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\LolClient
[2011.07.11 02:16:49 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\ManyCam
[2011.01.04 15:36:22 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\OpenOffice.org
[2011.11.19 18:46:25 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Origin
[2011.07.11 18:57:16 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\The Creative Assembly
[2011.09.06 16:48:10 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\TS3Client
[2011.01.20 15:08:27 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Tunngle
[2011.07.11 11:19:04 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %ALLUSERSPROFILE%\Application Data\*. >
 
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
 
< %APPDATA%\*. >
[2011.05.26 20:14:01 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\.minecraft
[2010.12.30 12:08:56 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Adobe
[2011.11.25 19:41:01 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Avira
[2011.11.28 16:57:45 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\BitTorrent
[2011.01.18 17:43:31 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\CheckPoint
[2011.05.18 22:30:55 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\DAEMON Tools Lite
[2011.07.03 22:47:14 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\DivX
[2011.02.04 21:56:27 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\GetRightToGo
[2011.07.01 23:05:52 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\go
[2011.05.19 17:23:23 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\gtk-2.0
[2011.05.12 01:24:41 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\ICQ
[2010.12.28 11:10:03 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Identities
[2010.12.30 16:33:02 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\InstallShield
[2011.02.05 02:31:07 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Kalypso Media
[2010.12.30 16:41:54 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Leadertech
[2010.12.30 16:42:24 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Logitech
[2011.01.23 09:21:00 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\LolClient
[2010.12.30 12:08:56 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Macromedia
[2011.11.24 18:16:59 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Malwarebytes
[2011.07.11 02:16:49 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\ManyCam
[2009.07.14 19:18:18 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Media Center Programs
[2011.02.26 07:23:14 | 000,000,000 | --SD | M] -- C:\Users\Laner\AppData\Roaming\Microsoft
[2011.01.05 15:07:50 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Mozilla
[2011.02.11 13:04:13 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\NVIDIA
[2011.01.04 15:36:22 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\OpenOffice.org
[2011.11.19 18:46:25 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Origin
[2011.01.10 19:47:15 | 000,000,000 | RH-D | M] -- C:\Users\Laner\AppData\Roaming\SecuROM
[2011.11.28 16:52:50 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Skype
[2011.05.28 23:42:49 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\skypePM
[2011.07.11 18:57:16 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\The Creative Assembly
[2011.09.06 16:48:10 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\TS3Client
[2011.01.20 15:08:27 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\Tunngle
[2011.01.01 05:48:54 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\WinRAR
 
< %APPDATA%\*.exe /s >
[2010.12.30 16:41:53 | 000,053,248 | R--- | M] (Acresso Software Inc.) -- C:\Users\Laner\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
[2011.08.26 15:57:32 | 000,009,326 | R--- | M] () -- C:\Users\Laner\AppData\Roaming\Microsoft\Installer\{C3C9DAEE-6E0C-4A00-9EBE-B237DB5EAD14}\_6C5545F7C7DD6EB70AEE61.exe
[2011.08.26 15:57:32 | 000,009,326 | R--- | M] () -- C:\Users\Laner\AppData\Roaming\Microsoft\Installer\{C3C9DAEE-6E0C-4A00-9EBE-B237DB5EAD14}\_6FEFF9B68218417F98F549.exe
[2011.08.26 15:57:32 | 000,009,326 | R--- | M] () -- C:\Users\Laner\AppData\Roaming\Microsoft\Installer\{C3C9DAEE-6E0C-4A00-9EBE-B237DB5EAD14}\_B43909EE3B8CE8B56EEDD3.exe
[2011.01.23 09:11:34 | 000,801,792 | ---- | M] (Acresso Software Inc.                                        ) -- C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\League Of Legends\setup.exe
[2010.03.05 16:49:50 | 000,197,632 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\chrome\content\id_imbooster4web_v6\TbHelper2.exe
[2010.03.12 17:45:00 | 000,042,496 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\chrome\content\id_imbooster4web_v6\uninstall.exe
[2010.03.12 17:45:00 | 000,056,832 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\chrome\content\id_imbooster4web_v6\update.exe
[2010.03.19 12:04:44 | 000,152,664 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\components\setup_widget_serv.exe
[2011.11.13 03:18:25 | 003,623,592 | ---- | M] (Ask) -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\temp\askToolbar.exe
 
< %SYSTEMDRIVE%\*.exe >
 
 
< MD5 for: AGP440.SYS  >
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: IASTORV.SYS  >
[2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0033117673c16921\iaStorV.sys
[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\SysNative\netlogon.dll
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_38e464dbe521cc7f\nvstor.sys
[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\SysNative\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.20 13:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\SysNative\user32.dll
[2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\SysWOW64\user32.dll
[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
[2010.11.20 14:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.dll /lockedfiles >
[2011.08.20 05:35:00 | 010,990,080 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\system32\ieframe.dll

< End of report >

cosinus 28.11.2011 18:37
Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:
:OTL
PRC - [2011.08.23 21:20:18 | 000,887,976 | ---- | M] (Ask) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe
PRC - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.iminent.com/?appId=5ed22dba-04f5-4512-a058-e77e9a879393&ref=homepage
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 80 03 9E 08 67 A7 CB 01  [binary data]
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\URLSearchHook: {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "Funload.de Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://search.iminent.com/?appId=5ed22dba-04f5-4512-a058-e77e9a879393&ref=homepage"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.7.0190
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=MYC-ST&o=102869&locale=de_DE&apn_uid=12d67ad8-68d7-45f6-8667-6b496b09c3a5&apn_ptnrs=5J&apn_sauid=9E79BFAC-AB4A-4701-8895-925B3F975BDB&apn_dtid=YYYYYYYYDE&&q="
FF - prefs.js..network.proxy.type: 0
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll File not found
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
[2011.11.12 00:42:46 | 000,000,000 | ---D | M] (Funload.de Community Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}
[2011.11.12 00:42:51 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011.11.12 00:42:54 | 000,000,000 | ---D | M] (BittorrentBar_DE Community Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}
[2011.11.12 00:43:07 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.30 10:57:21 | 000,000,000 | ---D | M] (Softonic Deutsch Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}
[2011.07.04 14:54:25 | 000,000,000 | ---D | M] (IMinent Toolbar) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
[2011.05.18 22:24:36 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com
[2011.05.28 14:16:08 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com
[2011.11.14 05:51:19 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com
[2011.11.27 19:21:07 | 000,002,405 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\askcom.xml
[2010.10.27 15:22:38 | 000,000,923 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\conduit.xml
[2011.05.18 22:24:29 | 000,002,055 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\daemon-search.xml
[2010.12.30 11:07:33 | 000,002,342 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icq-search.xml
[2011.05.01 17:23:31 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-1.xml
[2011.05.03 16:45:27 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-2.xml
[2011.07.11 11:34:54 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-3.xml
[2011.08.18 12:22:18 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-4.xml
[2011.08.19 21:08:37 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-5.xml
[2011.11.13 08:02:05 | 000,000,950 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-6.xml
[2011.03.30 14:14:34 | 000,001,042 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin.xml
[2011.11.21 17:10:43 | 000,002,230 | ---- | M] () -- C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\SearchTheWeb.xml
[2011.08.26 15:58:10 | 000,000,000 | ---D | M] (Iminent WebBooster) -- C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com
[2011.08.21 23:09:52 | 000,002,157 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\SearchTheWeb.xml
O2 - BHO: (Funload.de Toolbar) - {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (TBSB01620 Class) - {58124A0B-DC32-4180-9BFF-E0E21AE34026} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O2 - BHO: (BittorrentBar_DE Toolbar) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found.
O2 - BHO: (IMinent WebBooster (BHO)) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\IMBooster4Web\Iminent.WebBooster.dll (Iminent)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (Funload.de Toolbar) - {0f369707-379f-46df-a5c5-d04390f3459b} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (BittorrentBar_DE Toolbar) - {64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Funload.de Toolbar) - {0F369707-379F-46DF-A5C5-D04390F3459B} - C:\Program Files (x86)\Funload.de\prxtbFun0.dll (Conduit Ltd.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (BittorrentBar_DE Toolbar) - {64EAD72B-FFD4-4E01-AA3A-4C71665D73E4} - C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe File not found
O4 - HKLM..\Run: [IMBooster] C:\Program Files (x86)\Iminent\IMBooster\imbooster.exe (Iminent)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{76247229-8130-11e0-aae8-1c6f6582f360}\Shell - "" = AutoRun
O33 - MountPoints2\{76247229-8130-11e0-aae8-1c6f6582f360}\Shell\AutoRun\command - "" = G:\setup.exe
MsConfig:64bit - StartUpReg: LogMeIn Hamachi Ui - hkey= - key= -  File not found
[2011.01.18 17:43:31 | 000,000,000 | ---D | M] -- C:\Users\Laner\AppData\Roaming\CheckPoint
:Files
C:\Program Files\CheckPoint
C:\Program Files (x86)\Ask.com
C:\Program Files (x86)\ICQ6Toolbar
:Commands
[emptytemp]
[resethosts]
Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

dieFackel 29.11.2011 19:45
Hab alles gemacht, hier der Log:

Code:
All processes killed
========== OTL ==========
No active process named Updater.exe was found!
Process ICQ Service.exe killed successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{0f369707-379f-46df-a5c5-d04390f3459b} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f369707-379f-46df-a5c5-d04390f3459b}\ deleted successfully.
C:\Program Files (x86)\Funload.de\prxtbFun0.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\ deleted successfully.
C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ deleted successfully.
C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll moved successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache AcceptLangs| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ deleted successfully.
C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll moved successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{0f369707-379f-46df-a5c5-d04390f3459b} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f369707-379f-46df-a5c5-d04390f3459b}\ not found.
File C:\Program Files (x86)\Funload.de\prxtbFun0.dll not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\ not found.
File C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
File C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A}\ deleted successfully.
C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll moved successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Funload.de Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q=" removed from browser.search.defaulturl
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "hxxp://search.iminent.com/?appId=5ed22dba-04f5-4512-a058-e77e9a879393&ref=homepage" removed from browser.startup.homepage
Prefs.js: engine@conduit.com:3.2.5.2 removed from extensions.enabledItems
Prefs.js: DTToolbar@toolbarnet.com:1.1.7.0190 removed from extensions.enabledItems
Prefs.js: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=MYC-ST&o=102869&locale=de_DE&apn_uid=12d67ad8-68d7-45f6-8667-6b496b09c3a5&apn_ptnrs=5J&apn_sauid=9E79BFAC-AB4A-4701-8895-925B3F975BDB&apn_dtid=YYYYYYYYDE&&q=" removed from keyword.URL
Prefs.js: 0 removed from network.proxy.type
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@checkpoint.com/FFApi\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin\ deleted successfully.
C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\searchplugin folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\modules folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\META-INF folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\defaults folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\components folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b}\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{0f369707-379f-46df-a5c5-d04390f3459b} folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\META-INF folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\defaults\preferences folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\defaults folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\searchplugin folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\modules folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\META-INF folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\defaults folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\components folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4} folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}\searchplugin folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}\META-INF folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}\lib folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}\defaults folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}\components folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c}\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{8dbb6d8e-e4a6-4e3b-9753-af78b226441c} folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\components folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\chrome\content\id_imbooster4web_v6 folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\chrome\content folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com\components\Resources folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com\components folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com\chrome\content folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\DTToolbar@toolbarnet.com folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com\searchplugin folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com\META-INF folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com\lib folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com\DualPackage folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com\defaults folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com\components folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\engine@conduit.com folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\searchplugins folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\logs folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\defaults\preferences folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\defaults folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\datastore folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-16-Nov-2011-16-09-52-GMT folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Tue-06-Sep-2011-09-08-17-GMT folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-04-Aug-2011-16-58-50-GMT folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Sun-13-Nov-2011-04-28-27-GMT folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Mon-11-Jul-2011-10-35-01-GMT folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Fri-11-Nov-2011-21-00-08-GMT folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\temp folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\skin folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome\content folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com\chrome folder moved successfully.
C:\Users\Laner\AppData\Roaming\mozilla\Firefox\Profiles\mq82ssea.default\extensions\toolbar@ask.com folder moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\askcom.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\conduit.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\daemon-search.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icq-search.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-3.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-4.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-5.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin-6.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\icqplugin.xml moved successfully.
C:\Users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\searchplugins\SearchTheWeb.xml moved successfully.
C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com\defaults\preferences folder moved successfully.
C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com\defaults folder moved successfully.
C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com\components_20 folder moved successfully.
C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com\components folder moved successfully.
C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com\chrome\content folder moved successfully.
C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com\chrome folder moved successfully.
C:\Program Files (x86)\mozilla firefox\extensions\webbooster@iminent.com folder moved successfully.
C:\Program Files (x86)\mozilla firefox\searchplugins\SearchTheWeb.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0f369707-379f-46df-a5c5-d04390f3459b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f369707-379f-46df-a5c5-d04390f3459b}\ not found.
File C:\Program Files (x86)\Funload.de\prxtbFun0.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58124A0B-DC32-4180-9BFF-E0E21AE34026}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026}\ deleted successfully.
C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\ not found.
File C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}\ deleted successfully.
C:\Program Files (x86)\Iminent\IMBooster4Web\Iminent.WebBooster.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully.
C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0f369707-379f-46df-a5c5-d04390f3459b} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f369707-379f-46df-a5c5-d04390f3459b}\ not found.
File C:\Program Files (x86)\Funload.de\prxtbFun0.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.
File C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ deleted successfully.
C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64ead72b-ffd4-4e01-aa3a-4c71665d73e4}\ not found.
File C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
File C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}\ deleted successfully.
File C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0F369707-379F-46DF-A5C5-D04390F3459B} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F369707-379F-46DF-A5C5-D04390F3459B}\ not found.
File C:\Program Files (x86)\Funload.de\prxtbFun0.dll not found.
64bit-Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
File C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
File C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{64EAD72B-FFD4-4E01-AA3A-4C71665D73E4} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64EAD72B-FFD4-4E01-AA3A-4C71665D73E4}\ not found.
File C:\Program Files (x86)\BittorrentBar_DE\tbBitt.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ApnUpdater deleted successfully.
C:\Program Files (x86)\Ask.com\Updater\Updater.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\EKIJ5000StatusMonitor deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\IMBooster deleted successfully.
C:\Program Files (x86)\Iminent\IMBooster\imbooster.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Pando Media Booster deleted successfully.
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe moved successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{76247229-8130-11e0-aae8-1c6f6582f360}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{76247229-8130-11e0-aae8-1c6f6582f360}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{76247229-8130-11e0-aae8-1c6f6582f360}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{76247229-8130-11e0-aae8-1c6f6582f360}\ not found.
File G:\setup.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpReg\LogMeIn Hamachi Ui\ not found.
C:\Users\Laner\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\TrustChecker folder moved successfully.
C:\Users\Laner\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE folder moved successfully.
C:\Users\Laner\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar folder moved successfully.
C:\Users\Laner\AppData\Roaming\CheckPoint folder moved successfully.
========== FILES ==========
C:\Program Files\CheckPoint\ZAForceField folder moved successfully.
C:\Program Files\CheckPoint folder moved successfully.
C:\Program Files (x86)\Ask.com\Updater folder moved successfully.
C:\Program Files (x86)\Ask.com\assets\oobe folder moved successfully.
C:\Program Files (x86)\Ask.com\assets folder moved successfully.
C:\Program Files (x86)\Ask.com folder moved successfully.
C:\Program Files (x86)\ICQ6Toolbar folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: AppData
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Laner
->Temp folder emptied: 4530621349 bytes
->Temporary Internet Files folder emptied: 75069634 bytes
->Java cache emptied: 12115719 bytes
->FireFox cache emptied: 101094654 bytes
->Google Chrome cache emptied: 6301159 bytes
->Flash cache emptied: 246323 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 401408 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 224066698 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67832 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 749 bytes
RecycleBin emptied: 327427296 bytes
 
Total Files Cleaned = 5.033,00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.31.0 log created on 11292011_192505

Files\Folders moved on Reboot...
C:\Users\Laner\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

cosinus 29.11.2011 20:23
Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg


Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
http://www.trojaner-board.de/images/icons/icon4.gif Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen! http://www.trojaner-board.de/images/icons/icon4.gif

dieFackel 30.11.2011 12:08
Auf meine Dokumente und Eigene Dateien kann ich noch ohne Probleme zugreifen.

TDSSKiller Log:

Code:
11:42:15.0329 2244        TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:44
11:42:15.0579 2244        ============================================================
11:42:15.0579 2244        Current date / time: 2011/11/30 11:42:15.0579
11:42:15.0579 2244        SystemInfo:
11:42:15.0579 2244       
11:42:15.0579 2244        OS Version: 6.1.7600 ServicePack: 0.0
11:42:15.0579 2244        Product type: Workstation
11:42:15.0579 2244        ComputerName: LANER-PC
11:42:15.0579 2244        UserName: Laner
11:42:15.0579 2244        Windows directory: C:\Windows
11:42:15.0579 2244        System windows directory: C:\Windows
11:42:15.0579 2244        Running under WOW64
11:42:15.0579 2244        Processor architecture: Intel x64
11:42:15.0579 2244        Number of processors: 4
11:42:15.0579 2244        Page size: 0x1000
11:42:15.0579 2244        Boot type: Normal boot
11:42:15.0579 2244        ============================================================
11:42:18.0230 2244        Initialize success
11:42:39.0462 3968        ============================================================
11:42:39.0462 3968        Scan started
11:42:39.0462 3968        Mode: Manual; SigCheck; TDLFS;
11:42:39.0462 3968        ============================================================
11:42:43.0462 3968        1394ohci        (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
11:42:43.0507 3968        1394ohci - ok
11:42:43.0534 3968        ACPI            (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
11:42:43.0545 3968        ACPI - ok
11:42:43.0568 3968        AcpiPmi        (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
11:42:43.0588 3968        AcpiPmi - ok
11:42:43.0615 3968        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
11:42:43.0633 3968        adp94xx - ok
11:42:43.0652 3968        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
11:42:43.0668 3968        adpahci - ok
11:42:43.0692 3968        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
11:42:43.0705 3968        adpu320 - ok
11:42:43.0744 3968        AFD            (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys
11:42:43.0777 3968        AFD - ok
11:42:43.0789 3968        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
11:42:43.0799 3968        agp440 - ok
11:42:43.0816 3968        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
11:42:43.0825 3968        aliide - ok
11:42:43.0836 3968        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
11:42:43.0844 3968        amdide - ok
11:42:43.0862 3968        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
11:42:43.0897 3968        AmdK8 - ok
11:42:43.0924 3968        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
11:42:43.0959 3968        AmdPPM - ok
11:42:43.0973 3968        amdsata        (53d8d46d51d390abdb54eca623165cb7) C:\Windows\system32\DRIVERS\amdsata.sys
11:42:44.0000 3968        amdsata - ok
11:42:44.0019 3968        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
11:42:44.0031 3968        amdsbs - ok
11:42:44.0048 3968        amdxata        (75c51148154e34eb3d7bb84749a758d5) C:\Windows\system32\DRIVERS\amdxata.sys
11:42:44.0055 3968        amdxata - ok
11:42:44.0112 3968        AppID          (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
11:42:44.0146 3968        AppID - ok
11:42:44.0202 3968        AppleCharger    (301aa64f9643bc453d90a66c4c0e7204) C:\Windows\system32\DRIVERS\AppleCharger.sys
11:42:44.0209 3968        AppleCharger - ok
11:42:44.0224 3968        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
11:42:44.0235 3968        arc - ok
11:42:44.0248 3968        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
11:42:44.0260 3968        arcsas - ok
11:42:44.0298 3968        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
11:42:44.0334 3968        AsyncMac - ok
11:42:44.0361 3968        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
11:42:44.0370 3968        atapi - ok
11:42:44.0389 3968        AtiPcie        (7c5d273e29dcc5505469b299c6f29163) C:\Windows\system32\DRIVERS\AtiPcie.sys
11:42:44.0395 3968        AtiPcie - ok
11:42:44.0433 3968        avgntflt        (aa8f79a1bdfc03b3bc70c44ab00589b4) C:\Windows\system32\DRIVERS\avgntflt.sys
11:42:44.0443 3968        avgntflt - ok
11:42:44.0462 3968        avipbb          (d959309ececca73fc79f8ef8521346b2) C:\Windows\system32\DRIVERS\avipbb.sys
11:42:44.0473 3968        avipbb - ok
11:42:44.0489 3968        avkmgr          (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
11:42:44.0497 3968        avkmgr - ok
11:42:44.0530 3968        b06bdrv        (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
11:42:44.0560 3968        b06bdrv - ok
11:42:44.0576 3968        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
11:42:44.0601 3968        b57nd60a - ok
11:42:44.0630 3968        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
11:42:44.0662 3968        Beep - ok
11:42:44.0689 3968        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
11:42:44.0708 3968        blbdrive - ok
11:42:44.0751 3968        bowser          (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
11:42:44.0779 3968        bowser - ok
11:42:44.0795 3968        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
11:42:44.0815 3968        BrFiltLo - ok
11:42:44.0826 3968        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
11:42:44.0836 3968        BrFiltUp - ok
11:42:44.0858 3968        Brserid        (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
11:42:44.0879 3968        Brserid - ok
11:42:44.0898 3968        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
11:42:44.0919 3968        BrSerWdm - ok
11:42:44.0939 3968        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
11:42:44.0969 3968        BrUsbMdm - ok
11:42:44.0981 3968        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
11:42:44.0991 3968        BrUsbSer - ok
11:42:45.0014 3968        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
11:42:45.0029 3968        BTHMODEM - ok
11:42:45.0051 3968        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
11:42:45.0116 3968        cdfs - ok
11:42:45.0164 3968        cdrom          (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
11:42:45.0178 3968        cdrom - ok
11:42:45.0192 3968        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
11:42:45.0211 3968        circlass - ok
11:42:45.0237 3968        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
11:42:45.0248 3968        CLFS - ok
11:42:45.0287 3968        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
11:42:45.0305 3968        CmBatt - ok
11:42:45.0317 3968        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
11:42:45.0326 3968        cmdide - ok
11:42:45.0343 3968        CNG            (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
11:42:45.0365 3968        CNG - ok
11:42:45.0382 3968        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
11:42:45.0391 3968        Compbatt - ok
11:42:45.0414 3968        CompositeBus    (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
11:42:45.0440 3968        CompositeBus - ok
11:42:45.0455 3968        crcdisk        (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
11:42:45.0464 3968        crcdisk - ok
11:42:45.0512 3968        DfsC            (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
11:42:45.0535 3968        DfsC - ok
11:42:45.0555 3968        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
11:42:45.0580 3968        discache - ok
11:42:45.0597 3968        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
11:42:45.0607 3968        Disk - ok
11:42:45.0646 3968        drmkaud        (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
11:42:45.0670 3968        drmkaud - ok
11:42:45.0720 3968        dtsoftbus01    (fb9bef3401ee5ecc2603311b9c64f44a) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
11:42:45.0737 3968        dtsoftbus01 - ok
11:42:45.0774 3968        DXGKrnl        (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
11:42:45.0803 3968        DXGKrnl - ok
11:42:45.0863 3968        ebdrv          (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
11:42:45.0936 3968        ebdrv - ok
11:42:45.0966 3968        elxstor        (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
11:42:45.0983 3968        elxstor - ok
11:42:45.0993 3968        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
11:42:46.0022 3968        ErrDev - ok
11:42:46.0055 3968        exfat          (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
11:42:46.0092 3968        exfat - ok
11:42:46.0107 3968        fastfat        (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
11:42:46.0150 3968        fastfat - ok
11:42:46.0165 3968        fdc            (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
11:42:46.0182 3968        fdc - ok
11:42:46.0206 3968        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
11:42:46.0216 3968        FileInfo - ok
11:42:46.0229 3968        Filetrace      (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
11:42:46.0265 3968        Filetrace - ok
11:42:46.0279 3968        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
11:42:46.0289 3968        flpydisk - ok
11:42:46.0314 3968        FltMgr          (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
11:42:46.0329 3968        FltMgr - ok
11:42:46.0347 3968        FsDepends      (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
11:42:46.0358 3968        FsDepends - ok
11:42:46.0372 3968        Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
11:42:46.0380 3968        Fs_Rec - ok
11:42:46.0409 3968        fvevol          (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
11:42:46.0419 3968        fvevol - ok
11:42:46.0438 3968        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
11:42:46.0448 3968        gagp30kx - ok
11:42:46.0465 3968        gdrv            (7907e14f9bcf3a4689c9a74a1a873cb6) C:\Windows\gdrv.sys
11:42:46.0472 3968        gdrv - ok
11:42:46.0536 3968        hamachi        (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
11:42:46.0544 3968        hamachi - ok
11:42:46.0569 3968        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
11:42:46.0584 3968        hcw85cir - ok
11:42:46.0616 3968        HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
11:42:46.0646 3968        HdAudAddService - ok
11:42:46.0675 3968        HDAudBus        (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
11:42:46.0696 3968        HDAudBus - ok
11:42:46.0707 3968        HidBatt        (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
11:42:46.0724 3968        HidBatt - ok
11:42:46.0738 3968        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
11:42:46.0765 3968        HidBth - ok
11:42:46.0783 3968        HidIr          (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
11:42:46.0801 3968        HidIr - ok
11:42:46.0825 3968        HidUsb          (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
11:42:46.0849 3968        HidUsb - ok
11:42:46.0901 3968        hotcore3        (c227dfcf703d02ead4d7e44b0ba7c181) C:\Windows\system32\DRIVERS\hotcore3.sys
11:42:46.0909 3968        hotcore3 - ok
11:42:46.0928 3968        HpSAMD          (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
11:42:46.0939 3968        HpSAMD - ok
11:42:46.0960 3968        HTTP            (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
11:42:47.0005 3968        HTTP - ok
11:42:47.0023 3968        hwpolicy        (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
11:42:47.0029 3968        hwpolicy - ok
11:42:47.0046 3968        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
11:42:47.0059 3968        i8042prt - ok
11:42:47.0089 3968        iaStorV        (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
11:42:47.0106 3968        iaStorV - ok
11:42:47.0125 3968        iirsp          (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
11:42:47.0134 3968        iirsp - ok
11:42:47.0210 3968        IntcAzAudAddService (0adf714079ae174a39d69036143e4c50) C:\Windows\system32\drivers\RTKVHD64.sys
11:42:47.0245 3968        IntcAzAudAddService - ok
11:42:47.0257 3968        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
11:42:47.0265 3968        intelide - ok
11:42:47.0284 3968        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
11:42:47.0302 3968        intelppm - ok
11:42:47.0323 3968        IpFilterDriver  (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:42:47.0372 3968        IpFilterDriver - ok
11:42:47.0391 3968        IPMIDRV        (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
11:42:47.0410 3968        IPMIDRV - ok
11:42:47.0424 3968        IPNAT          (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
11:42:47.0457 3968        IPNAT - ok
11:42:47.0487 3968        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
11:42:47.0500 3968        IRENUM - ok
11:42:47.0512 3968        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
11:42:47.0522 3968        isapnp - ok
11:42:47.0545 3968        iScsiPrt        (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
11:42:47.0559 3968        iScsiPrt - ok
11:42:47.0600 3968        JRAID          (1c368c1a2733dcc5b8e15420aa2b0f6d) C:\Windows\system32\DRIVERS\jraid.sys
11:42:47.0611 3968        JRAID - ok
11:42:47.0639 3968        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
11:42:47.0648 3968        kbdclass - ok
11:42:47.0659 3968        kbdhid          (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
11:42:47.0678 3968        kbdhid - ok
11:42:47.0698 3968        KSecDD          (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
11:42:47.0709 3968        KSecDD - ok
11:42:47.0733 3968        KSecPkg        (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
11:42:47.0746 3968        KSecPkg - ok
11:42:47.0759 3968        ksthunk        (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
11:42:47.0799 3968        ksthunk - ok
11:42:47.0875 3968        L8042Kbd        (bbd9bbed0de036b2297e6434b26d1ae9) C:\Windows\system32\DRIVERS\L8042Kbd.sys
11:42:47.0893 3968        L8042Kbd - ok
11:42:47.0977 3968        LHidFilt        (aa3d903c5a7538803f2400a8391f1881) C:\Windows\system32\DRIVERS\LHidFilt.Sys
11:42:47.0985 3968        LHidFilt - ok
11:42:48.0024 3968        libusb0 - ok
11:42:48.0053 3968        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
11:42:48.0100 3968        lltdio - ok
11:42:48.0125 3968        LMouFilt        (90b4b2b0b5f05abb9fb365405a7b825b) C:\Windows\system32\DRIVERS\LMouFilt.Sys
11:42:48.0133 3968        LMouFilt - ok
11:42:48.0157 3968        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
11:42:48.0179 3968        LSI_FC - ok
11:42:48.0194 3968        LSI_SAS        (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
11:42:48.0205 3968        LSI_SAS - ok
11:42:48.0229 3968        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
11:42:48.0239 3968        LSI_SAS2 - ok
11:42:48.0259 3968        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
11:42:48.0278 3968        LSI_SCSI - ok
11:42:48.0316 3968        luafv          (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
11:42:48.0355 3968        luafv - ok
11:42:48.0372 3968        megasas        (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
11:42:48.0387 3968        megasas - ok
11:42:48.0445 3968        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
11:42:48.0499 3968        MegaSR - ok
11:42:48.0519 3968        Modem          (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
11:42:48.0566 3968        Modem - ok
11:42:48.0608 3968        monitor        (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
11:42:48.0640 3968        monitor - ok
11:42:48.0661 3968        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
11:42:48.0670 3968        mouclass - ok
11:42:48.0724 3968        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
11:42:48.0743 3968        mouhid - ok
11:42:48.0759 3968        mountmgr        (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
11:42:48.0766 3968        mountmgr - ok
11:42:48.0806 3968        mpio            (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
11:42:48.0830 3968        mpio - ok
11:42:48.0849 3968        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
11:42:48.0899 3968        mpsdrv - ok
11:42:48.0916 3968        MRxDAV          (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
11:42:48.0974 3968        MRxDAV - ok
11:42:49.0007 3968        mrxsmb          (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
11:42:49.0020 3968        mrxsmb - ok
11:42:49.0107 3968        mrxsmb10        (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:42:49.0139 3968        mrxsmb10 - ok
11:42:49.0158 3968        mrxsmb20        (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:42:49.0183 3968        mrxsmb20 - ok
11:42:49.0194 3968        msahci          (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
11:42:49.0203 3968        msahci - ok
11:42:49.0220 3968        msdsm          (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
11:42:49.0232 3968        msdsm - ok
11:42:49.0254 3968        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
11:42:49.0280 3968        Msfs - ok
11:42:49.0286 3968        mshidkmdf      (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
11:42:49.0321 3968        mshidkmdf - ok
11:42:49.0341 3968        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
11:42:49.0350 3968        msisadrv - ok
11:42:49.0393 3968        MSKSSRV        (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
11:42:49.0430 3968        MSKSSRV - ok
11:42:49.0450 3968        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
11:42:49.0495 3968        MSPCLOCK - ok
11:42:49.0511 3968        MSPQM          (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
11:42:49.0546 3968        MSPQM - ok
11:42:49.0568 3968        MsRPC          (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
11:42:49.0583 3968        MsRPC - ok
11:42:49.0597 3968        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
11:42:49.0604 3968        mssmbios - ok
11:42:49.0615 3968        MSTEE          (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
11:42:49.0651 3968        MSTEE - ok
11:42:49.0666 3968        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
11:42:49.0686 3968        MTConfig - ok
11:42:49.0707 3968        Mup            (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
11:42:49.0717 3968        Mup - ok
11:42:49.0742 3968        NativeWifiP    (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
11:42:49.0779 3968        NativeWifiP - ok
11:42:49.0855 3968        NDIS            (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
11:42:49.0889 3968        NDIS - ok
11:42:49.0908 3968        NdisCap        (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
11:42:49.0944 3968        NdisCap - ok
11:42:49.0979 3968        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
11:42:50.0017 3968        NdisTapi - ok
11:42:50.0034 3968        Ndisuio        (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
11:42:50.0074 3968        Ndisuio - ok
11:42:50.0094 3968        NdisWan        (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
11:42:50.0123 3968        NdisWan - ok
11:42:50.0131 3968        NDProxy        (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
11:42:50.0170 3968        NDProxy - ok
11:42:50.0195 3968        NetBIOS        (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
11:42:50.0234 3968        NetBIOS - ok
11:42:50.0280 3968        NetBT          (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
11:42:50.0307 3968        NetBT - ok
11:42:50.0344 3968        nfrd960        (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
11:42:50.0354 3968        nfrd960 - ok
11:42:50.0367 3968        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
11:42:50.0394 3968        Npfs - ok
11:42:50.0415 3968        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
11:42:50.0462 3968        nsiproxy - ok
11:42:50.0515 3968        Ntfs            (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
11:42:50.0565 3968        Ntfs - ok
11:42:50.0582 3968        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
11:42:50.0609 3968        Null - ok
11:42:50.0655 3968        nusb3hub        (785298579b5f9b4032152dfbb992fdb6) C:\Windows\system32\DRIVERS\nusb3hub.sys
11:42:50.0666 3968        nusb3hub - ok
11:42:50.0708 3968        nusb3xhc        (df2750481b4964814467c974f2b0eef1) C:\Windows\system32\DRIVERS\nusb3xhc.sys
11:42:50.0720 3968        nusb3xhc - ok
11:42:50.0776 3968        NVHDA          (10204955027011e08a9dc27737a48a54) C:\Windows\system32\drivers\nvhda64v.sys
11:42:50.0807 3968        NVHDA - ok
11:42:51.0005 3968        nvlddmkm        (b15258b1f45f9571758ac6bb2f043b01) C:\Windows\system32\DRIVERS\nvlddmkm.sys
11:42:51.0164 3968        nvlddmkm - ok
11:42:51.0213 3968        nvraid          (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
11:42:51.0226 3968        nvraid - ok
11:42:51.0244 3968        nvstor          (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
11:42:51.0256 3968        nvstor - ok
11:42:51.0308 3968        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
11:42:51.0320 3968        nv_agp - ok
11:42:51.0332 3968        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
11:42:51.0363 3968        ohci1394 - ok
11:42:51.0383 3968        Parport        (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
11:42:51.0396 3968        Parport - ok
11:42:51.0412 3968        partmgr        (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
11:42:51.0423 3968        partmgr - ok
11:42:51.0476 3968        pci            (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
11:42:51.0515 3968        pci - ok
11:42:51.0533 3968        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
11:42:51.0542 3968        pciide - ok
11:42:51.0579 3968        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
11:42:51.0593 3968        pcmcia - ok
11:42:51.0634 3968        pcw            (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
11:42:51.0644 3968        pcw - ok
11:42:51.0788 3968        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
11:42:51.0845 3968        PEAUTH - ok
11:42:51.0930 3968        PptpMiniport    (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
11:42:51.0971 3968        PptpMiniport - ok
11:42:52.0415 3968        Processor      (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
11:42:52.0488 3968        Processor - ok
11:42:52.0654 3968        Psched          (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
11:42:52.0704 3968        Psched - ok
11:42:52.0813 3968        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
11:42:52.0882 3968        ql2300 - ok
11:42:52.0923 3968        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
11:42:52.0974 3968        ql40xx - ok
11:42:53.0035 3968        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
11:42:53.0090 3968        QWAVEdrv - ok
11:42:53.0160 3968        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
11:42:53.0209 3968        RasAcd - ok
11:42:53.0269 3968        RasAgileVpn    (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
11:42:53.0371 3968        RasAgileVpn - ok
11:42:53.0432 3968        Rasl2tp        (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
11:42:53.0513 3968        Rasl2tp - ok
11:42:53.0642 3968        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
11:42:53.0699 3968        RasPppoe - ok
11:42:53.0749 3968        RasSstp        (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
11:42:53.0804 3968        RasSstp - ok
11:42:53.0871 3968        rdbss          (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
11:42:53.0977 3968        rdbss - ok
11:42:54.0020 3968        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
11:42:54.0046 3968        rdpbus - ok
11:42:54.0090 3968        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
11:42:54.0127 3968        RDPCDD - ok
11:42:54.0169 3968        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
11:42:54.0216 3968        RDPENCDD - ok
11:42:54.0244 3968        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
11:42:54.0269 3968        RDPREFMP - ok
11:42:54.0298 3968        RDPWD          (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
11:42:54.0359 3968        RDPWD - ok
11:42:54.0574 3968        rdyboost        (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
11:42:54.0644 3968        rdyboost - ok
11:42:54.0700 3968        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
11:42:54.0764 3968        rspndr - ok
11:42:54.0857 3968        RTL8167        (4fbda07ef0a3097ce14c5cabf723b278) C:\Windows\system32\DRIVERS\Rt64win7.sys
11:42:54.0868 3968        RTL8167 - ok
11:42:54.0918 3968        sbp2port        (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
11:42:54.0929 3968        sbp2port - ok
11:42:54.0971 3968        scfilter        (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
11:42:55.0022 3968        scfilter - ok
11:42:55.0072 3968        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
11:42:55.0119 3968        secdrv - ok
11:42:55.0190 3968        Serenum        (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
11:42:55.0211 3968        Serenum - ok
11:42:55.0288 3968        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
11:42:55.0329 3968        Serial - ok
11:42:55.0381 3968        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
11:42:55.0418 3968        sermouse - ok
11:42:55.0470 3968        sffdisk        (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
11:42:55.0504 3968        sffdisk - ok
11:42:55.0558 3968        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
11:42:55.0591 3968        sffp_mmc - ok
11:42:55.0640 3968        sffp_sd        (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
11:42:55.0688 3968        sffp_sd - ok
11:42:55.0731 3968        sfloppy        (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
11:42:55.0786 3968        sfloppy - ok
11:42:55.0833 3968        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
11:42:55.0865 3968        SiSRaid2 - ok
11:42:55.0929 3968        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
11:42:55.0968 3968        SiSRaid4 - ok
11:42:56.0002 3968        Smb            (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
11:42:56.0064 3968        Smb - ok
11:42:56.0131 3968        spldr          (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
11:42:56.0140 3968        spldr - ok
11:42:56.0208 3968        srv            (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
11:42:56.0249 3968        srv - ok
11:42:56.0371 3968        srv2            (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
11:42:56.0453 3968        srv2 - ok
11:42:56.0523 3968        srvnet          (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
11:42:56.0598 3968        srvnet - ok
11:42:56.0723 3968        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
11:42:56.0743 3968        stexstor - ok
11:42:56.0799 3968        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
11:42:56.0811 3968        swenum - ok
11:42:57.0047 3968        Tcpip          (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
11:42:57.0190 3968        Tcpip - ok
11:42:57.0300 3968        TCPIP6          (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
11:42:57.0344 3968        TCPIP6 - ok
11:42:57.0388 3968        tcpipreg        (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
11:42:57.0426 3968        tcpipreg - ok
11:42:57.0479 3968        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
11:42:57.0527 3968        TDPIPE - ok
11:42:57.0570 3968        TDTCP          (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
11:42:57.0643 3968        TDTCP - ok
11:42:57.0690 3968        tdx            (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
11:42:57.0729 3968        tdx - ok
11:42:57.0773 3968        TermDD          (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
11:42:57.0798 3968        TermDD - ok
11:42:57.0850 3968        tssecsrv        (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
11:42:57.0907 3968        tssecsrv - ok
11:42:57.0989 3968        tunnel          (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
11:42:58.0063 3968        tunnel - ok
11:42:58.0099 3968        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
11:42:58.0110 3968        uagp35 - ok
11:42:58.0160 3968        udfs            (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
11:42:58.0227 3968        udfs - ok
11:42:58.0284 3968        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
11:42:58.0320 3968        uliagpkx - ok
11:42:58.0386 3968        umbus          (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
11:42:58.0421 3968        umbus - ok
11:42:58.0466 3968        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
11:42:58.0503 3968        UmPass - ok
11:42:58.0599 3968        usbccgp        (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys
11:42:58.0639 3968        usbccgp - ok
11:42:58.0818 3968        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
11:42:58.0865 3968        usbcir - ok
11:42:58.0901 3968        usbehci        (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\DRIVERS\usbehci.sys
11:42:58.0926 3968        usbehci - ok
11:42:59.0000 3968        usbfilter      (2c780746dc44a28fe67004dc58173f05) C:\Windows\system32\DRIVERS\usbfilter.sys
11:42:59.0023 3968        usbfilter - ok
11:42:59.0086 3968        usbhub          (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys
11:42:59.0160 3968        usbhub - ok
11:42:59.0208 3968        usbohci        (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\DRIVERS\usbohci.sys
11:42:59.0254 3968        usbohci - ok
11:42:59.0314 3968        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
11:42:59.0357 3968        usbprint - ok
11:42:59.0422 3968        usbscan        (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
11:42:59.0449 3968        usbscan - ok
11:42:59.0495 3968        USBSTOR        (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:42:59.0535 3968        USBSTOR - ok
11:42:59.0563 3968        usbuhci        (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\drivers\usbuhci.sys
11:42:59.0601 3968        usbuhci - ok
11:42:59.0637 3968        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
11:42:59.0653 3968        vdrvroot - ok
11:42:59.0694 3968        vga            (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
11:42:59.0727 3968        vga - ok
11:42:59.0776 3968        VgaSave        (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
11:42:59.0816 3968        VgaSave - ok
11:42:59.0845 3968        vhdmp          (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
11:42:59.0859 3968        vhdmp - ok
11:42:59.0892 3968        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
11:42:59.0901 3968        viaide - ok
11:42:59.0913 3968        volmgr          (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
11:42:59.0929 3968        volmgr - ok
11:42:59.0949 3968        volmgrx        (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
11:42:59.0960 3968        volmgrx - ok
11:42:59.0983 3968        volsnap        (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
11:42:59.0999 3968        volsnap - ok
11:43:00.0031 3968        vsmraid        (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
11:43:00.0044 3968        vsmraid - ok
11:43:00.0068 3968        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
11:43:00.0081 3968        vwifibus - ok
11:43:00.0106 3968        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
11:43:00.0123 3968        WacomPen - ok
11:43:00.0155 3968        WANARP          (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
11:43:00.0211 3968        WANARP - ok
11:43:00.0215 3968        Wanarpv6        (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
11:43:00.0240 3968        Wanarpv6 - ok
11:43:00.0288 3968        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
11:43:00.0306 3968        Wd - ok
11:43:00.0336 3968        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
11:43:00.0356 3968        Wdf01000 - ok
11:43:00.0415 3968        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
11:43:00.0448 3968        WfpLwf - ok
11:43:00.0468 3968        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
11:43:00.0487 3968        WIMMount - ok
11:43:00.0549 3968        WmiAcpi        (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
11:43:00.0583 3968        WmiAcpi - ok
11:43:00.0636 3968        ws2ifsl        (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
11:43:00.0700 3968        ws2ifsl - ok
11:43:00.0723 3968        WudfPf          (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
11:43:00.0766 3968        WudfPf - ok
11:43:00.0799 3968        WUDFRd          (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
11:43:00.0829 3968        WUDFRd - ok
11:43:00.0864 3968        MBR (0x1B8)    (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
11:43:01.0010 3968        \Device\Harddisk0\DR0 - ok
11:43:01.0037 3968        Boot (0x1200)  (492f91f8c7593c3e4bb6b1f3efe974ee) \Device\Harddisk0\DR0\Partition0
11:43:01.0038 3968        \Device\Harddisk0\DR0\Partition0 - ok
11:43:01.0055 3968        Boot (0x1200)  (da8a73c2472fe7a29521139fd8cfd323) \Device\Harddisk0\DR0\Partition1
11:43:01.0068 3968        \Device\Harddisk0\DR0\Partition1 - ok
11:43:01.0083 3968        Boot (0x1200)  (591f7815221627b07fef288d83fa4614) \Device\Harddisk0\DR0\Partition2
11:43:01.0098 3968        \Device\Harddisk0\DR0\Partition2 - ok
11:43:01.0099 3968        ============================================================
11:43:01.0099 3968        Scan finished
11:43:01.0099 3968        ============================================================
11:43:01.0110 2384        Detected object count: 0
11:43:01.0110 2384        Actual detected object count: 0

cosinus 30.11.2011 12:18
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

dieFackel 30.11.2011 16:00
Da ist er auch schon:
Code:
ComboFix 11-11-30.01 - Laner 30.11.2011  15:49:03.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7600.0.1252.49.1031.18.4093.2728 [GMT 1:00]
ausgeführt von:: c:\users\Laner\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Funload.de
c:\program files (x86)\Funload.de\Funload.deToolbarHelper.exe
c:\program files (x86)\Funload.de\Funload.deToolbarHelper1.exe
c:\program files (x86)\Funload.de\GottenAppsContextMenu.xml
c:\program files (x86)\Funload.de\INSTALL.LOG
c:\program files (x86)\Funload.de\OtherAppsContextMenu.xml
c:\program files (x86)\Funload.de\SharedAppsContextMenu.xml
c:\program files (x86)\Funload.de\tbFun0.dll
c:\program files (x86)\Funload.de\tbFun1.dll
c:\program files (x86)\Funload.de\tbFunl.dll
c:\program files (x86)\Funload.de\toolbar.cfg
c:\program files (x86)\Funload.de\ToolbarContextMenu.xml
c:\program files (x86)\Funload.de\uninstall.exe
c:\program files (x86)\Funload.de\UNWISE.EXE
c:\program files (x86)\Funload.de\UNWISE.INI
c:\users\Laner\AppData\Roaming\Microsoft\Windows\Recent\Total War SHOGUN 2 (2).url
c:\users\Laner\AppData\Roaming\Microsoft\Windows\Recent\Total War SHOGUN 2.url
c:\users\Laner\Documents\Downloads\Integrated_CT2629906.exe
D:\install.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2011-10-28 bis 2011-11-30  ))))))))))))))))))))))))))))))
.
.
2011-11-30 14:53 . 2011-11-30 14:53        --------        d-----w-        c:\users\Default\AppData\Local\temp
2011-11-29 18:25 . 2011-11-29 18:25        --------        d-----w-        C:\_OTL
2011-11-29 13:18 . 2011-10-18 00:27        8570192        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{FDC35495-4AF9-4C9E-8646-A0F4D15E437A}\mpengine.dll
2011-11-27 23:57 . 2011-11-28 00:26        --------        d-----w-        c:\program files (x86)\Simple Port Forwarding
2011-11-27 23:57 . 2011-11-27 23:57        --------        d-----w-        c:\windows\Simple Port Forwarding
2011-11-25 18:41 . 2011-11-25 18:41        --------        d-----w-        c:\users\Laner\AppData\Roaming\Avira
2011-11-25 18:20 . 2011-10-19 15:56        97312        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2011-11-25 18:20 . 2011-10-19 15:56        27760        ----a-w-        c:\windows\system32\drivers\avkmgr.sys
2011-11-25 18:20 . 2011-10-19 15:56        130760        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2011-11-25 18:20 . 2011-11-25 18:20        --------        d-----w-        c:\programdata\Avira
2011-11-25 18:20 . 2011-11-25 18:20        --------        d-----w-        c:\program files (x86)\Avira
2011-11-24 17:50 . 2011-11-24 17:50        --------        d-----w-        c:\program files (x86)\ESET
2011-11-24 17:43 . 2011-11-25 18:18        --------        d-----w-        c:\programdata\Spybot - Search & Destroy
2011-11-24 17:43 . 2011-11-25 18:18        --------        d-----w-        c:\program files (x86)\Spybot - Search & Destroy
2011-11-24 17:16 . 2011-11-24 17:16        --------        d-----w-        c:\users\Laner\AppData\Roaming\Malwarebytes
2011-11-24 17:16 . 2011-11-24 17:16        --------        d-----w-        c:\programdata\Malwarebytes
2011-11-24 17:16 . 2011-11-24 17:16        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2011-11-24 17:16 . 2011-08-31 16:00        25416        ----a-w-        c:\windows\system32\drivers\mbam.sys
2011-11-20 13:23 . 2011-11-20 18:29        --------        d-----w-        c:\users\Laner\AppData\Local\ESN Sonar
2011-11-19 21:29 . 2011-11-20 13:15        --------        d-----w-        c:\users\UpdatusUser
2011-11-19 21:28 . 2011-10-15 08:53        837952        ----a-w-        c:\windows\system32\easyupdatusapiu64.dll
2011-11-19 19:29 . 2011-11-29 22:34        280904        ----a-w-        c:\windows\SysWow64\PnkBstrB.xtr
2011-11-19 19:29 . 2011-11-19 19:29        --------        d-----w-        c:\users\Laner\AppData\Local\PunkBuster
2011-11-19 19:27 . 2011-11-19 19:27        --------        d-----w-        c:\program files (x86)\Battlelog Web Plugins
2011-11-19 18:50 . 2011-11-19 18:50        --------        d--h--w-        c:\program files (x86)\Common Files\EAInstaller
2011-11-19 18:50 . 2011-11-29 22:34        280904        ----a-w-        c:\windows\SysWow64\PnkBstrB.exe
2011-11-19 18:50 . 2011-11-29 20:39        280904        ----a-w-        c:\windows\SysWow64\PnkBstrB.ex0
2011-11-19 18:50 . 2011-11-19 19:02        75136        ----a-w-        c:\windows\SysWow64\PnkBstrA.exe
2011-11-19 17:38 . 2011-11-19 17:46        --------        d-----w-        c:\users\Laner\AppData\Roaming\Origin
2011-11-19 17:37 . 2011-11-19 17:37        --------        d-----w-        c:\users\Laner\AppData\Local\Origin
2011-11-19 17:37 . 2011-11-19 19:25        --------        d-----w-        c:\programdata\Origin
2011-11-19 17:37 . 2011-11-19 18:18        --------        d-----w-        c:\program files (x86)\Origin Games
2011-11-19 17:37 . 2011-11-19 17:41        --------        d-----w-        c:\program files (x86)\Origin
2011-11-17 18:09 . 2011-11-28 23:05        --------        d-----w-        c:\users\Laner\AppData\Local\CrashDumps
2011-11-17 17:22 . 2011-11-18 01:19        --------        d-----w-        c:\users\Laner\AppData\Local\NPE
2011-11-17 17:22 . 2011-11-17 17:23        --------        d-----w-        c:\programdata\Norton
2011-11-12 00:04 . 2011-11-12 00:04        --------        d-----w-        c:\users\Laner\AppData\Local\Skyrim
2011-11-11 20:08 . 2011-10-01 05:28        886784        ----a-w-        c:\program files\Common Files\System\wab32.dll
2011-11-11 20:08 . 2011-10-01 04:43        708608        ----a-w-        c:\program files (x86)\Common Files\System\wab32.dll
2011-11-11 19:52 . 2011-09-29 04:09        3141120        ----a-w-        c:\windows\system32\win32k.sys
2011-11-11 19:49 . 2011-08-17 05:32        613888        ----a-w-        c:\windows\system32\psisdecd.dll
2011-11-11 19:49 . 2011-08-17 05:27        75776        ----a-w-        c:\windows\system32\MSDvbNP.ax
2011-11-11 19:49 . 2011-08-17 05:27        288256        ----a-w-        c:\windows\system32\MSNP.ax
2011-11-11 19:49 . 2011-08-17 05:27        108032        ----a-w-        c:\windows\system32\psisrndr.ax
2011-11-11 19:49 . 2011-08-17 05:27        104960        ----a-w-        c:\windows\system32\Mpeg2Data.ax
2011-11-11 19:49 . 2011-08-17 04:26        465408        ----a-w-        c:\windows\SysWow64\psisdecd.dll
2011-11-11 19:49 . 2011-08-17 04:22        75776        ----a-w-        c:\windows\SysWow64\psisrndr.ax
2011-11-11 19:49 . 2011-08-17 04:22        72704        ----a-w-        c:\windows\SysWow64\Mpeg2Data.ax
2011-11-11 19:49 . 2011-08-17 04:22        59904        ----a-w-        c:\windows\SysWow64\MSDvbNP.ax
2011-11-11 19:49 . 2011-08-17 04:22        204288        ----a-w-        c:\windows\SysWow64\MSNP.ax
2011-11-11 19:47 . 2011-08-15 05:08        6144        ----a-w-        c:\program files\Internet Explorer\iecompat.dll
2011-11-11 19:47 . 2011-08-15 04:25        6144        ----a-w-        c:\program files (x86)\Internet Explorer\iecompat.dll
2011-11-11 19:42 . 2011-08-27 05:40        861184        ----a-w-        c:\windows\system32\oleaut32.dll
2011-11-11 19:42 . 2011-08-27 05:40        331776        ----a-w-        c:\windows\system32\oleacc.dll
2011-11-11 19:42 . 2011-08-27 04:43        571904        ----a-w-        c:\windows\SysWow64\oleaut32.dll
2011-11-11 19:42 . 2011-08-27 04:43        233472        ----a-w-        c:\windows\SysWow64\oleacc.dll
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-30 14:54 . 2010-12-28 10:27        25640        ----a-w-        c:\windows\gdrv.sys
2011-10-15 08:53 . 2010-12-28 10:24        8791360        ----a-w-        c:\windows\system32\nvwgf2umx.dll
2011-10-15 08:53 . 2010-12-28 10:24        7041856        ----a-w-        c:\windows\SysWow64\nvwgf2um.dll
2011-10-15 08:53 . 2010-12-28 10:24        2808128        ----a-w-        c:\windows\system32\nvapi64.dll
2011-10-15 08:53 . 2010-12-28 10:24        2458432        ----a-w-        c:\windows\SysWow64\nvapi.dll
2011-10-15 08:53 . 2010-12-28 10:24        13205312        ----a-w-        c:\windows\SysWow64\nvd3dum.dll
2011-10-15 08:53 . 2010-10-16 12:13        10406208        ----a-w-        c:\windows\system32\nvcpl.dll
2011-10-15 08:53 . 2010-10-16 12:13        5067584        ----a-w-        c:\windows\system32\nvsvc64.dll
2011-10-15 08:53 . 2010-10-16 12:13        222528        ----a-w-        c:\windows\system32\nvmctray.dll
2011-10-15 08:53 . 2010-10-16 12:13        3074368        ----a-w-        c:\windows\system32\nvsvcr.dll
2011-10-15 08:53 . 2010-10-16 12:13        1640768        ----a-w-        c:\windows\system32\nvvsvc.exe
2011-10-15 08:53 . 2010-10-16 12:13        137536        ----a-w-        c:\windows\system32\nvshext.dll
2011-10-14 23:54 . 2011-10-14 23:54        321856        ----a-w-        c:\windows\SysWow64\nvStreaming.exe
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-08-04 1242448]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"BitTorrent"="c:\program files (x86)\BitTorrent\BitTorrent.exe" [2010-12-29 397688]
"ManyCam"="c:\program files (x86)\ManyCam\Bin\ManyCam.exe" [2011-03-21 1752136]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2011-11-07 28846216]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCU"="c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" [2009-10-15 375000]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-01-19 43632]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2009-11-20 106496]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-10-19 258512]
"EKIJ5000StatusMonitor"="c:\windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe" [2010-09-02 2045440]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-12-31 1196048]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-26 136176]
R2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [x]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-26 136176]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 hotcore3;hc3ServiceName;c:\windows\system32\DRIVERS\hotcore3.sys [x]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-10-19 86224]
S2 BCUService;Browser Configuration Utility Service;c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-10-15 223464]
S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
S2 JMB36X;JMB36X;c:\windows\SysWOW64\XSrvSetup.exe [2010-01-19 72304]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2011-11-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-26 09:31]
.
2011-11-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-26 09:31]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-06 10144288]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 242192]
"EKIJ5000StatusMonitor"="c:\windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe" [2010-09-02 2045440]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page =
mLocal Page =
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files (x86)\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Laner\AppData\Roaming\Mozilla\Firefox\Profiles\mq82ssea.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - Google
pref('extensions.shownSelectionUI',true); pref('extensions.autoDisableScopes',0);
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-Funload.de Toolbar - c:\program files (x86)\Funload.de\uninstall.exe
AddRemove-ICQToolbar - c:\program files (x86)\ICQ6Toolbar\ICQUnToolbar.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-128432448-2284216070-1018584416-1000\Software\SecuROM\License information*]
"datasecu"=hex:d3,af,df,c7,41,bb,30,8f,b0,c4,91,d6,e2,92,ba,44,08,39,7a,99,29,
  63,18,7e,ad,89,2d,d4,50,63,7b,2b,0c,73,13,bf,d0,42,be,52,4c,4d,d7,ca,b3,8e,\
"rkeysecu"=hex:35,1c,4f,ee,99,72,0d,b8,74,7a,68,8b,8e,ae,85,49
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10o_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10o_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10o.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10o.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10o.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10o.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{6EF568F4-D437-4466-AA63-A3645136D93E}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files\Logitech\SetPoint\x86\SetPoint32.exe
c:\program files (x86)\Common Files\Steam\SteamService.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-11-30  15:59:18 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2011-11-30 14:59
.
Vor Suchlauf: 11 Verzeichnis(se), 20.602.621.952 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 20.487.979.008 Bytes frei
.
- - End Of File - - 5AE2FA5B3C4E5AD550E6AFD03D8B3556
LG dieFackel

cosinus 30.11.2011 16:03
Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe Vista und Win7 User aswMBR per Rechtsklick "als Administrator ausführen"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

dieFackel 30.11.2011 16:25
Code:
aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-11-30 16:11:04
-----------------------------
16:11:04.901    OS Version: Windows x64 6.1.7600
16:11:04.901    Number of processors: 4 586 0x403
16:11:04.902    ComputerName: LANER-PC  UserName: Laner
16:11:05.200    Initialize success
16:12:50.079    AVAST engine defs: 11113000
16:13:08.444    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000058
16:13:08.450    Disk 0 Vendor: SAMSUNG_ 1AJ1 Size: 953869MB BusType: 11
16:13:10.461    Disk 0 MBR read successfully
16:13:10.468    Disk 0 MBR scan
16:13:10.475    Disk 0 Windows 7 default MBR code
16:13:10.478    Service scanning
16:13:11.699    Modules scanning
16:13:11.707    Disk 0 trace - called modules:
16:13:11.717    ntoskrnl.exe CLASSPNP.SYS disk.sys amdxata.sys ACPI.sys storport.sys hal.dll amdsata.sys
16:13:11.725    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80039fb790]
16:13:11.733    3 CLASSPNP.SYS[fffff8800180143f] -> nt!IofCallDriver -> [0xfffffa80039fa6a0]
16:13:11.736    5 amdxata.sys[fffff880011337a8] -> nt!IofCallDriver -> [0xfffffa800458bbc0]
16:13:11.740    7 ACPI.sys[fffff88000e35781] -> nt!IofCallDriver -> \Device\00000058[0xfffffa800458e9c0]
16:13:12.085    AVAST engine scan C:\Windows
16:13:15.561    AVAST engine scan C:\Windows\system32
16:14:47.278    AVAST engine scan C:\Windows\system32\drivers
16:14:55.226    AVAST engine scan C:\Users\Laner
16:19:32.480    AVAST engine scan C:\ProgramData
16:21:37.276    Scan finished successfully
16:24:37.966    Disk 0 MBR has been saved successfully to "C:\Users\Laner\Desktop\MBR.dat"
16:24:37.971    The log file has been saved successfully to "C:\Users\Laner\Desktop\aswMBR.txt"
LG dieFackel

cosinus 30.11.2011 16:30
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!


Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


dieFackel 30.11.2011 19:54
Hier der SuperAntiSpyware Log:

Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 11/30/2011 at 05:30 PM

Application Version : 5.0.1136

Core Rules Database Version : 7997
Trace Rules Database Version: 5809

Scan type      : Complete Scan
Total Scan Time : 00:54:03

Operating System Information
Windows 7 Home Premium 64-bit (Build 6.01.7600)
UAC On - Administrator

Memory items scanned      : 661
Memory threats detected  : 0
Registry items scanned    : 74705
Registry threats detected : 4
File items scanned        : 61198
File threats detected    : 539

Browser Hijacker.Deskbar
        (x86) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
        (x86) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}\ProxyStubClsid32
        (x86) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}\TypeLib
        (x86) HKCR\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}\TypeLib#Version

Adware.Tracking Cookie
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\laner@ads.intergi[2].txt [ /ads.intergi ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\laner@paypal.112.2o7[1].txt [ /paypal.112.2o7 ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\laner@server.cpmstar[2].txt [ /server.cpmstar ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\laner@stats.paypal[2].txt [ /stats.paypal ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\laner@youporn[1].txt [ /youporn ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\J8FYUI8U.txt [ /imrworldwide.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\KQOAKQ10.txt [ /ad2.adfarm1.adition.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\HR7E3SIS.txt [ /zanox.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\9UY2I7MJ.txt [ /zanox-affiliate.de ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\BLAUCMWQ.txt [ /im.banner.t-online.de ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\3JAZD4IB.txt [ /traffictrack.de ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\9IG1ZGMT.txt [ /eas.apm.emediate.eu ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\5ORUFDEV.txt [ /xiti.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\KG1E4X7P.txt [ /webmasterplan.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\ARJWY9Z4.txt [ /invitemedia.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\9Y6Z3C3Q.txt [ /adx.chip.de ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\392F3N06.txt [ /ad.zanox.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\TWC9EJF3.txt [ /doubleclick.net ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\BTTC1CA6.txt [ /adfarm1.adition.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\UWP02TZY.txt [ /tracking.quisma.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\AC46ED52.txt [ /adtech.de ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\G3X3YAED.txt [ /serving-sys.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\M792DIEZ.txt [ /ad3.adfarm1.adition.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\NB60WZML.txt [ /ad.ad-srv.net ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\5WD1D5AP.txt [ /ad.360yield.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\00TDSGSS.txt [ /smartadserver.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\6XMPEHCD.txt [ /ad4.adfarm1.adition.com ]
        C:\Users\Laner\AppData\Roaming\Microsoft\Windows\Cookies\Q27FLCR0.txt [ /atdmt.com ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@ads.youporn[2].txt [ Cookie:laner@ads.youporn.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@msnportal.112.2o7[1].txt [ Cookie:laner@msnportal.112.2o7.net/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@zanox[1].txt [ Cookie:laner@zanox.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\169QP61M.txt [ Cookie:laner@ad.yieldmanager.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@content.yieldmanager[1].txt [ Cookie:laner@content.yieldmanager.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@bs.serving-sys[2].txt [ Cookie:laner@bs.serving-sys.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@traffictrack[1].txt [ Cookie:laner@traffictrack.de/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@tracking.mindshare[1].txt [ Cookie:laner@tracking.mindshare.de/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@myaccount.turbine[1].txt [ Cookie:laner@myaccount.turbine.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\85D9OXU0.txt [ Cookie:laner@invitemedia.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@webmasterplan[2].txt [ Cookie:laner@webmasterplan.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@adx.chip[1].txt [ Cookie:laner@adx.chip.de/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\LGNECUR6.txt [ Cookie:laner@www.burstnet.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@yadro[2].txt [ Cookie:laner@yadro.ru/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\LGCXBTTY.txt [ Cookie:laner@collective-media.net/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\3KOMELLN.txt [ Cookie:laner@doubleclick.net/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@fastclick[1].txt [ Cookie:laner@fastclick.net/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@adfarm1.adition[2].txt [ Cookie:laner@adfarm1.adition.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@ero-advertising[1].txt [ Cookie:laner@ero-advertising.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@serving-sys[1].txt [ Cookie:laner@serving-sys.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@adultfriendfinder[2].txt [ Cookie:laner@adultfriendfinder.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\laner@youporn[1].txt [ Cookie:laner@youporn.com/ ]
        C:\USERS\LANER\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q8WVNOMV.txt [ Cookie:laner@mediaplex.com/ ]
        C:\USERS\LANER\Cookies\KQOAKQ10.txt [ Cookie:laner@ad2.adfarm1.adition.com/ ]
        C:\USERS\LANER\Cookies\laner@server.cpmstar[2].txt [ Cookie:laner@server.cpmstar.com/ ]
        C:\USERS\LANER\Cookies\HR7E3SIS.txt [ Cookie:laner@zanox.com/ ]
        C:\USERS\LANER\Cookies\9UY2I7MJ.txt [ Cookie:laner@zanox-affiliate.de/ ]
        C:\USERS\LANER\Cookies\BLAUCMWQ.txt [ Cookie:laner@im.banner.t-online.de/ ]
        C:\USERS\LANER\Cookies\3JAZD4IB.txt [ Cookie:laner@traffictrack.de/ ]
        C:\USERS\LANER\Cookies\9IG1ZGMT.txt [ Cookie:laner@eas.apm.emediate.eu/ ]
        C:\USERS\LANER\Cookies\5ORUFDEV.txt [ Cookie:laner@xiti.com/ ]
        C:\USERS\LANER\Cookies\KG1E4X7P.txt [ Cookie:laner@webmasterplan.com/ ]
        C:\USERS\LANER\Cookies\ARJWY9Z4.txt [ Cookie:laner@invitemedia.com/ ]
        C:\USERS\LANER\Cookies\9Y6Z3C3Q.txt [ Cookie:laner@adx.chip.de/ ]
        C:\USERS\LANER\Cookies\392F3N06.txt [ Cookie:laner@ad.zanox.com/ ]
        C:\USERS\LANER\Cookies\TWC9EJF3.txt [ Cookie:laner@doubleclick.net/ ]
        C:\USERS\LANER\Cookies\BTTC1CA6.txt [ Cookie:laner@adfarm1.adition.com/ ]
        C:\USERS\LANER\Cookies\AC46ED52.txt [ Cookie:laner@adtech.de/ ]
        C:\USERS\LANER\Cookies\laner@paypal.112.2o7[1].txt [ Cookie:laner@paypal.112.2o7.net/ ]
        C:\USERS\LANER\Cookies\G3X3YAED.txt [ Cookie:laner@serving-sys.com/ ]
        C:\USERS\LANER\Cookies\laner@youporn[1].txt [ Cookie:laner@youporn.com/ ]
        C:\USERS\LANER\Cookies\laner@stats.paypal[2].txt [ Cookie:laner@stats.paypal.com/ ]
        C:\USERS\LANER\Cookies\6XMPEHCD.txt [ Cookie:laner@ad4.adfarm1.adition.com/ ]
        media.mtvnservices.com [ C:\USERS\LANER\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\AC7Z5YB2 ]
        secure-us.imrworldwide.com [ C:\USERS\LANER\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\AC7Z5YB2 ]
        .tracking.percentmobile.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .hotlog.ru [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .girlsteachsex.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        dc.tremormedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.crakmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.crakmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultswim.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.adultswim.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultswim.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.adultswim.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        tracking.sim-technik.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tto2.traffictrack.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .track.bannedcelebs.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .track.bannedcelebs.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .pro-market.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .pro-market.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www9.addfreestats.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .rambler.ru [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .traffichaus.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        fl01.ct2.comclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adv.arubamediamarketing.it [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        tracking.oe24.at [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .pubads.g.doubleclick.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .pubads.g.doubleclick.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .chrisonemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        imagevenue.advertserve.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        imagevenue.advertserve.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .indieclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .optimize.indieclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .optimize.indieclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        optimize.indieclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        optimize.indieclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .cracked.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .cracked.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .cracked.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .cracked.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .cracked.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .cracked.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .cracked.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.adserver01.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        wstat.wibiya.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .stats.complex.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .stats.complex.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .mm.chitika.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.audience2media.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .audience2media.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.audience2media.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .yieldmanager.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .dmtracker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        media.gan-online.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .gostats.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .toplist.cz [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .viacom.adbureau.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .viacom.adbureau.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adinterax.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adinterax.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adserver1.mokono.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.trafficjunky.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .lucidmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ero-advertising.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adultadincome.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ads.pointroll.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .harrenmedianetwork.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        tomtailor.dyntracker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adserver.sevenload.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .estat.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.sexkiste.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .sexkiste.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .sexkiste.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .myroitracking.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        auth.breakmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .a.revenuemax.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .gametracker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adxpose.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adserver.twitpic.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .a1.interclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.tldadserv.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .yadro.ru [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adserver.adtechus.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .burstnet.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .www.burstnet.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .eaeacom.112.2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .guj.122.2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .hearstugo.112.2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .mtvn.112.2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .hearstmagazines.112.2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.zeusclicks.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        spielerstats.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.statshow.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.statshow.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.statshow.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.statshow.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.statshow.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.statshow.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.statshow.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.statshow.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .de.partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .partypoker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .enoratraffic.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.crakmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .youporn.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adxpansion.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .eset.122.2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .account.swtor.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.faktmedia.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.jdtracker.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adsrv1.admediate.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ads.247activemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adlegend.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.elitepvpers.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.elitepvpers.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.elitepvpers.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .elitepvpers.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .elitepvpers.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .elitepvpers.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .eyewonder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .getclicky.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .static.getclicky.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        in.getclicky.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .casalemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .lfstmedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tracking.mindshare.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .medialeopard.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        s0.2mdn.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .hightraffic.hugoboss.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .hightraffic.hugoboss.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .hightraffic.hugoboss.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.usenext.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .viewablemedia.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .legolas-media.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adultfriendfinder.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        stats.computecmedia.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adviva.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        stats.computecmedia.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .2o7.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .server.cpmstar.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\LANER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\MQ82SSEA.DEFAULT\COOKIES.SQLITE ]
Malwarebites:

Code:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8279

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

30.11.2011 17:41:49
mbam-log-2011-11-30 (17-41-49).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 385229
Laufzeit: 1 Stunde(n), 9 Minute(n), 54 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
Eset:

Code:
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=340f105c26d1524eb8853574bb1feee3
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-27 02:54:32
# local_time=2011-11-27 03:54:32 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=1280 16777215 100 0 0 0 0 0
# compatibility_mode=1792 16777215 100 0 159321 159321 0 0
# compatibility_mode=5893 16776573 100 94 12669 74806635 0 0
# compatibility_mode=8192 67108863 100 0 247512 247512 0 0
# scanned=225121
# found=2
# cleaned=0
# scan_time=4750
C:\Users\Laner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\7ed88b0b-2abbea11        Java/TrojanDownloader.OpenStream.NBW trojan (unable to clean)        00000000000000000000000000000000        I
C:\Users\Laner\Downloads\SoftonicDownloader_fuer_kaspersky-tdsskiller.exe        Win32/SoftonicDownloader application (unable to clean)        00000000000000000000000000000000        I
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=340f105c26d1524eb8853574bb1feee3
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-30 06:48:28
# local_time=2011-11-30 07:48:28 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=1280 16777215 100 0 0 0 0 0
# compatibility_mode=1792 16777215 100 0 429905 429905 0 0
# compatibility_mode=5893 16776573 100 94 10071 75077219 0 0
# compatibility_mode=8192 67108863 100 0 518096 518096 0 0
# scanned=210137
# found=1
# cleaned=0
# scan_time=7360
C:\Users\Laner\Downloads\SoftonicDownloader_fuer_kaspersky-tdsskiller.exe        Win32/SoftonicDownloader application (unable to clean)        00000000000000000000000000000000        I
Und ich habe noch eine Frage. Ist Brain.exe zuverlässig und würdest du es empfehlen?

LG dieFackel

cosinus 30.11.2011 21:54
Nur ein paar Überreste und Cookies. Kann alles weg.

Zitat:
Ist Brain.exe zuverlässig und würdest du es empfehlen?
Ist die Frage echt dein Ernst? :balla:
Beschreib mal kurz was du unter brain.exe verstehst.

dieFackel 30.11.2011 22:08
hxxp://brain.yubb.de/

undorial hat das in seiner Signatur...

Mit welchem Programm soll ich die sachen nun löschen?

cosinus 30.11.2011 22:12
Zitat:
hxxp://brain.yubb.de/

undorial hat das in seiner Signatur...
:rofl:

Vllt solltest du da mal RICHTIG lesen ;)

Zitat:
Mit welchem Programm soll ich die sachen nun löschen?
Vllt mit dem Programm mit dem das gefunden wurde? Superantispyware

dieFackel 01.12.2011 13:07
:killpc: Hätte ich tatsächlich nicht nur überfliegen sollen, geschieht mir aber recht^^

Habs jetzt entfernt, haben wir damit mein Problem gelöst?

cosinus 02.12.2011 11:26
Ja ist der Rechner denn nun wieder ok?

Wenn ja wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt.
Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink:

Mozilla und andere Browser => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

dieFackel 02.12.2011 12:51
Gerade ist leider ein ähnliches Problem aufgetreten. Beim Start hat sich der Bundespolizei Trojaner geöffnet. Hab im abgesicherten Modus Malwarebites gestartet und die beiden dateien die er gefundfn hat entfernt, damit ich erstmal weiterarbeiten kann, leider finde ich die log datei nicht, hab mir aber namen und pfad der viren aufgeschrieben.

Trojan.Zbot.CBCGen c\users\laner\appdata\local\temp\0.3426449844587389.exe

Backdoor.Agent

c\users\laner\appdata\roaming\microsoft\windows\start menu\programs\startup\0.3426449844587389


Hängen die beiden Probleme zusammen?

cosinus 02.12.2011 12:59
Oje, hast du zwischendurch wieder gesurft? Ich vermute da hat wieder etwas Sicherheitslücken in alter Software bei dir ausgenutzt...

dieFackel 02.12.2011 13:00
Ja hab ich, und wohl auch ne echte Glücksträhne?! :(

cosinus 02.12.2011 13:01
Ist die Datei denn nun weg?
Wird Rechner nun erneut blockiert?

dieFackel 02.12.2011 13:05
Kann sie aufjedenfall nicht finden und er wird auch nicht mehr geblockt.

cosinus 02.12.2011 13:07
Nagut, dann mach mal UMGEHEND jetzt alles Updates.
Wenn du damit durch bist kannst du gerne nochmal zur Kontrolle Vollscans machen.

dieFackel 02.12.2011 19:27
Hab nun alle Updates durchgeführt und Scans gemacht, aber nichtmehrs gefunden. Wollte jetztt evtl Bitdefender installieren, da er im rating ja sehr hoch steht. Oder meinst du, ich sollte die freie Avira Version behalten?

cosinus 02.12.2011 20:08
Die Frage - welcher Virenscanner oder ob der installierte reicht - taucht ständig auf.
Der Virenscanner - egal welcher - kann und wird niemals 100% Schutz bieten können. Neue/unbekannte Schädlinge können immer durch die Lappen gehen. Bleib bei dem Scanner oder nimm Microsoft Security Essentials.
Abgesehen davon nutzen verschiedene Virenscanner unterschiedliche Signaturen und Techniken, das führt dazu, dass zB Scanner1 Schädling X entdeckt, aber Schädling Y übersieht. Scanner2 erkennt Schädling Y, dafür aber Schädling X nicht...
Wichtiger ist, dass du dich an Regeln hälst. Der beste Virenscanner bringt nichts, wenn du dich falsch verhälst und fahrlässig/unvorsichtig bist. Airbag und Sicherheitsgurt im Auto sind ja auch keine Gründe dafür auf die Verkehrsregeln zu pfeifen.

Halte Dich am besten grob an diese Regeln:
  1. Sei misstrauisch im Internet und v.a. bei unbekannten E-Mails, sei vorsichtig bei der Herausgabe persönlicher Daten!!
  2. Halte Windows und alle verwendeten Programme immer aktuell - unterstützen kann dich dabei Secunia PSI
  3. Führe regelmäßig Backups auf externe Medien durch
  4. Arbeite mit eingeschränkten Rechten
  5. Nutze sichere Programme wie zB Opera oder Firefox zum Surfen statt den IE, zum Mailen Thunderbird statt Outlook Express - E-Mails nur als reinen text anzeigen lassen
  6. automatische Wiedergabe von allen Laufwerken komplett deaktivieren, denn das ist ein unnötiges Sicherheitsrisiko
  7. Bei der Installation von Software möglichst darauf achten, dass die Setups aus offiziellen Quellen stammen und du bei der Installation nach Möglichkeit die benutzerdefinierte Methode wählst - dann hast du die Möglichkeit etwaigen Schrott (wie Toolbars oder sowas wie RegistryBooster) abzuwählen, welcher sonst einfach mitinstalliert wird.
  8. Bösartige bzw. ungewollte Sites von vornherein blockieren lassen mit Hilfe der MVPS Hosts File => Blocking Unwanted Parasites with a Hosts File


Alles noch genauer erklärt steht hier => Kompromittierung unvermeidbar?

dieFackel 02.12.2011 20:18
Vielen Dank für deine Hilfe! Ich hoffe, das jetzt erstmal nichts wieder auftaucht, ansonsten wende ich mich wieder an dich, oder erstelle ein neues Thema, falls dieses geschlössen wird. :)

LG dieFackel


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:40 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132