DrNefarius | 27.06.2012 13:51 | Das Programm lief sauber durch und nahc dem Neustart blendete der Bildschirm auch nicht mehr aus. Super!
Combofix Logfile: Code:
ComboFix 12-06-26.02 - Der T-Punkt 27.06.2012 14:27:33.1.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.8169.5886 [GMT 2:00]
ausgeführt von:: c:\users\Der T-Punkt\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\_otl\MovedFiles\06272012_132840\C_Users\Der T-Punkt\AppData\Roaming\Oqnnea\ciypgnwtb.exe
c:\users\Der T-Punkt\AppData\Local\assembly\tmp
c:\users\Der T-Punkt\rkill.com
c:\windows\IsUn0407.exe
G:\Autorun.inf
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-05-27 bis 2012-06-27 ))))))))))))))))))))))))))))))
.
.
2012-06-27 12:34 . 2012-06-27 12:34 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-06-27 12:34 . 2012-06-27 12:34 -------- d-----w- c:\users\Mcx1-SPIELE-PC\AppData\Local\temp
2012-06-27 11:28 . 2012-06-27 11:34 -------- d-----w- C:\_OTL
2012-06-27 09:59 . 2012-05-31 04:04 9013136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CA9E1380-CA48-42CE-A40F-4E2C3A25E504}\mpengine.dll
2012-06-26 09:22 . 2012-05-31 04:04 9013136 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-06-25 19:17 . 2012-06-25 19:17 -------- d-----w- c:\users\Der T-Punkt\AppData\Roaming\Malwarebytes
2012-06-25 19:17 . 2012-06-25 19:17 -------- d-----w- c:\programdata\Malwarebytes
2012-06-25 19:17 . 2012-06-25 19:17 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-06-25 19:17 . 2012-04-04 13:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-25 14:51 . 2012-06-25 18:58 -------- d-----w- c:\windows\system32\%LOCALAPPDATA%
2012-06-21 13:22 . 2009-07-21 00:42 78872 ----a-w- c:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2012-06-21 13:22 . 2009-07-21 00:42 50200 ----a-w- c:\windows\SysWow64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2012-06-21 13:21 . 2009-07-21 00:42 79896 ----a-w- c:\windows\SysWow64\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2012-06-21 13:21 . 2009-07-21 00:42 111640 ----a-w- c:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2012-06-21 13:21 . 2012-06-21 13:21 -------- d-----w- c:\windows\system32\RsFx
2012-06-21 13:20 . 2012-06-21 13:20 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
2012-06-21 13:19 . 2012-06-21 13:19 -------- d-----w- c:\program files\Microsoft.NET
2012-06-21 13:15 . 2012-06-25 18:59 -------- d-----w- c:\program files\Microsoft SQL Server
2012-06-21 13:14 . 2012-06-25 18:59 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
2012-06-21 13:14 . 2012-06-21 13:14 -------- d-----w- c:\program files\Microsoft Sync Framework
2012-06-21 13:14 . 2012-06-21 13:14 -------- d-----w- c:\program files\Microsoft Synchronization Services
2012-06-21 13:14 . 2012-06-21 13:14 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2012-06-21 13:13 . 2012-06-21 13:13 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
2012-06-21 13:13 . 2012-06-21 13:13 791888 ----a-w- c:\program files\Common Files\Microsoft Shared\VSTO\10.0\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU\install.exe
2012-06-21 13:13 . 2012-06-21 13:13 53088 ----a-w- c:\program files\Common Files\Microsoft Shared\VSTO\10.0\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU\install.res.1031.dll
2012-06-21 13:12 . 2012-06-21 13:12 -------- d-----w- c:\programdata\PreEmptive Solutions
2012-06-21 13:07 . 2012-06-21 13:07 -------- d-----w- c:\program files (x86)\Microsoft ASP.NET
2012-06-21 13:07 . 2012-06-25 18:59 -------- d-----w- c:\program files (x86)\IIS
2012-06-21 13:07 . 2012-06-21 13:07 -------- d-----w- c:\program files\IIS
2012-06-21 13:01 . 2012-06-25 18:58 -------- d-----w- c:\windows\SysWow64\1031
2012-06-21 13:00 . 2012-06-25 21:49 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
2012-06-21 13:00 . 2012-06-25 18:59 -------- d-----w- c:\program files (x86)\Microsoft F#
2012-06-21 13:00 . 2012-06-25 18:59 -------- d-----w- c:\program files (x86)\HTML Help Workshop
2012-06-21 12:58 . 2012-06-25 18:59 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 9.0
2012-06-21 12:58 . 2012-06-25 18:58 -------- d-----w- c:\windows\system32\1031
2012-06-21 12:58 . 2012-06-25 18:58 -------- d-----w- c:\windows\symbols
2012-06-21 12:58 . 2012-06-25 18:59 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
2012-06-21 12:58 . 2012-06-21 13:14 -------- d-----w- c:\program files (x86)\Microsoft SDKs
2012-06-21 12:58 . 2012-06-21 12:58 -------- d-----w- c:\program files\Microsoft Help Viewer
2012-06-19 08:46 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-19 08:46 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2012-06-19 08:46 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-19 08:46 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2012-06-19 08:46 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2012-06-19 08:46 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2012-06-19 08:46 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2012-06-19 08:45 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-19 08:45 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2012-06-13 17:47 . 2012-04-26 05:41 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-06-13 17:47 . 2012-04-26 05:41 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-06-13 17:47 . 2012-04-26 05:34 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-06-13 17:47 . 2012-02-10 20:40 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{85CE1559-F4EF-434C-9066-BA2A49A2D815}\gapaengine.dll
2012-06-13 17:47 . 2012-05-01 05:40 209920 ----a-w- c:\windows\system32\profsvc.dll
2012-06-13 17:47 . 2012-05-04 11:06 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-06-13 17:47 . 2012-05-04 10:03 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-06-13 17:47 . 2012-05-04 10:03 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-06-13 17:47 . 2012-05-15 01:32 3146752 ----a-w- c:\windows\system32\win32k.sys
2012-06-13 17:47 . 2012-04-24 05:37 1462272 ----a-w- c:\windows\system32\crypt32.dll
2012-06-13 17:47 . 2012-04-24 04:36 1158656 ----a-w- c:\windows\SysWow64\crypt32.dll
2012-06-13 17:46 . 2012-04-24 05:37 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2012-06-13 17:46 . 2012-04-24 05:37 140288 ----a-w- c:\windows\system32\cryptnet.dll
2012-06-13 17:46 . 2012-04-24 04:36 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2012-06-13 17:46 . 2012-04-24 04:36 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2012-06-13 17:46 . 2012-04-07 12:31 3216384 ----a-w- c:\windows\system32\msi.dll
2012-06-13 17:46 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\SysWow64\msi.dll
2012-06-13 17:46 . 2012-04-28 03:55 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-13 11:28 . 2012-06-13 11:28 -------- d-----w- c:\users\Der T-Punkt\AppData\Roaming\Day 1 Studios
2012-06-11 18:58 . 2012-06-11 18:58 -------- d-----w- c:\users\Der T-Punkt\AppData\Local\Macromedia
2012-06-08 17:06 . 2012-06-08 17:06 -------- d-----w- c:\users\Der T-Punkt\AppData\Local\Chromium
2012-06-07 10:53 . 2012-06-25 14:27 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-07 10:42 . 2012-06-07 10:42 -------- d-----w- c:\users\Der T-Punkt\AppData\Local\Ubisoft
2012-06-06 17:40 . 2002-12-18 09:23 115016 ----a-w- c:\windows\SysWow64\MSINET.OCX
2012-06-06 17:40 . 2012-06-06 17:40 -------- d-----w- c:\program files (x86)\Ubi Soft
2012-06-06 17:40 . 2002-12-18 22:20 26096 ----a-w- c:\windows\SysWow64\xmlinst.exe
2012-06-06 17:40 . 2002-12-18 09:23 89360 ----a-w- c:\windows\SysWow64\VB5DB.DLL
2012-06-06 17:40 . 2002-12-18 09:23 69632 ----a-w- c:\windows\SysWow64\xmltok.dll
2012-06-06 17:40 . 2002-12-18 09:23 36864 ----a-w- c:\windows\SysWow64\xmlparse.dll
2012-06-06 17:40 . 2002-12-18 09:23 28432 ----a-w- c:\windows\SysWow64\msxmlr.dll
2012-06-06 17:40 . 2002-12-18 09:23 24576 ----a-w- c:\windows\SysWow64\msxml3a.dll
2012-06-06 17:40 . 2002-12-18 09:23 35840 ----a-w- c:\windows\SysWow64\comdlg32.oca
2012-06-06 17:40 . 2002-12-18 09:23 29184 ----a-w- c:\windows\SysWow64\MSINET.oca
2012-06-06 17:36 . 2003-02-27 14:12 696320 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2012-06-06 17:36 . 2002-12-05 12:10 155648 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2012-06-06 17:36 . 2002-12-02 13:22 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2012-06-06 17:36 . 2002-12-02 11:33 57344 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2012-06-06 17:36 . 2002-12-02 11:33 237568 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2012-06-06 17:36 . 2012-06-06 17:36 282756 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2012-06-06 17:36 . 2012-06-06 17:36 163972 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2012-06-05 21:48 . 2012-06-05 21:48 -------- d-----w- c:\programdata\Ice-Pick Lodge
2012-05-31 13:58 . 2012-05-31 13:58 -------- d-----w- c:\users\Der T-Punkt\AppData\Local\Risen2
2012-05-31 11:47 . 2012-05-31 11:47 -------- d-----w- c:\users\Der T-Punkt\AppData\Local\BigHugeEngine
2012-05-29 06:52 . 2012-05-31 19:26 -------- d-----w- c:\users\Der T-Punkt\AppData\Roaming\Audacity
2012-05-29 06:52 . 2012-05-29 06:52 -------- d-----w- c:\program files (x86)\Audacity
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2055-09-28 22:33 . 2011-04-22 09:59 228 ----a-w- c:\users\Der T-Punkt\shell.reg
2012-06-25 14:27 . 2011-05-16 13:28 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-21 13:26 . 2012-06-21 13:06 2389184 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1031\ResourceCache.dll
2012-06-20 09:08 . 2011-10-30 13:24 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-06-20 09:08 . 2011-03-06 16:09 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-05-15 10:48 . 2012-02-21 16:21 949056 ----a-w- c:\windows\system32\nvumdshimx.dll
2012-05-15 10:48 . 2012-02-21 16:21 68928 ----a-w- c:\windows\system32\OpenCL.dll
2012-05-15 10:48 . 2012-02-21 16:21 61248 ----a-w- c:\windows\SysWow64\OpenCL.dll
2012-05-15 10:48 . 2011-10-25 19:52 18044224 ----a-w- c:\windows\system32\nvd3dumx.dll
2012-05-15 10:48 . 2011-09-04 18:12 2368832 ----a-w- c:\windows\SysWow64\nvapi.dll
2012-05-15 10:48 . 2011-09-04 18:12 1738048 ----a-w- c:\windows\system32\nvdispco64.dll
2012-05-15 10:48 . 2011-09-04 18:12 1468224 ----a-w- c:\windows\system32\nvgenco64.dll
2012-05-15 10:48 . 2011-06-12 17:46 8105280 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2012-05-15 10:48 . 2010-10-18 19:13 15322432 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2012-05-15 10:48 . 2010-04-02 16:49 2741568 ----a-w- c:\windows\system32\nvapi64.dll
2012-05-15 10:48 . 2010-04-02 16:49 10194752 ----a-w- c:\windows\system32\nvwgf2umx.dll
2012-05-15 09:29 . 2011-01-07 19:49 889664 ----a-w- c:\windows\system32\nvvsvc.exe
2012-05-15 09:29 . 2011-01-07 19:49 118080 ----a-w- c:\windows\system32\nvmctray.dll
2012-05-15 09:29 . 2011-01-07 19:49 2561856 ----a-w- c:\windows\system32\nvsvcr.dll
2012-05-15 09:29 . 2010-04-02 10:50 63296 ----a-w- c:\windows\system32\nvshext.dll
2012-05-15 09:29 . 2012-02-21 16:22 2621723 ----a-w- c:\windows\system32\nvcoproc.bin
2012-05-15 09:29 . 2011-01-07 19:49 3149632 ----a-w- c:\windows\system32\nvsvc64.dll
2012-05-15 09:28 . 2011-01-07 19:50 6151488 ----a-w- c:\windows\system32\nvcpl.dll
2012-05-15 00:21 . 2012-05-15 00:21 423744 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2012-05-14 12:53 . 2012-05-26 15:12 1350656 ----a-w- c:\windows\system32\ac3filter64.acm
2012-05-14 12:51 . 2012-05-26 15:12 1103872 ----a-w- c:\windows\SysWow64\ac3filter.acm
2012-04-26 11:47 . 2012-04-26 11:47 71680 ----a-w- c:\windows\system32\frapsv64.dll
2012-04-26 11:47 . 2012-04-26 11:47 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
2012-04-18 17:08 . 2012-02-21 16:21 1451840 ----a-w- c:\windows\system32\nvhdagenco6420103.dll
2012-03-30 11:35 . 2012-05-09 19:53 1918320 ----a-w- c:\windows\system32\drivers\tcpip.sys
2006-05-03 10:06 163328 --sha-r- c:\windows\SysWOW64\flvDX.dll
2007-02-21 11:47 31232 --sha-r- c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30 216064 --sha-r- c:\windows\SysWOW64\nbDX.dll
2010-01-06 22:00 107520 --sha-r- c:\windows\SysWOW64\TAKDSDecoder.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-17 14:54 175912 ----a-w- c:\program files (x86)\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
2011-01-17 14:54 175912 ----a-w- c:\program files (x86)\Softonic-Eng7\prxtbSof0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}"= "c:\program files (x86)\Softonic-Eng7\prxtbSof0.dll" [2011-01-17 175912]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="g:\steam\steam.exe" [2012-01-14 1242448]
"BitTorrent DNA"="c:\program files (x86)\DNA\btdna.exe" [2010-10-06 323392]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Xvid"="c:\program files (x86)\Xvid\CheckUpdate.exe" [2011-01-17 8192]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-06-07 17425072]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVMWlanClient"="c:\program files (x86)\avmwlanstick\wlangui.exe" [2006-12-27 1454080]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-11-07 281768]
"VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-06-07 421160]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" [2011-01-12 1523360]
"SSDMonitor"="c:\program files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2011-10-25 103896]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"TrayServer"="c:\program files (x86)\MAGIX\Video_deluxe_MX_Plus_Download-Version\TrayServer_de.exe" [2008-08-07 90112]
.
c:\_otl\MovedFiles\06272012_132840\C_Users\Der T-Punkt\AppData\Roaming\Oqnnea\
CurseClientStartup.ccip [2012-6-25 0]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-9-6 1207312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google ?????? ???? (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-08 136176]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-06-07 160944]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-25 250056]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [2006-12-27 14120]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2011-04-26 2702848]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-08 136176]
R3 KoneFltr;ROCCAT Kone;c:\windows\system32\drivers\Kone.sys [2008-12-11 15488]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-26 113120]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TridVid;USB TV Tuner;c:\windows\system32\DRIVERS\tridvid6010.sys [2011-01-21 411648]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 X6va007;X6va007;c:\users\DERT-P~1\AppData\Local\Temp\0073834.tmp [x]
R4 MSSQLServerADHelper100;SQL Server Hilfsdienst für Active Directory;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-21 61976]
R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]
R4 SQLAgent$SQLEXPRESS;SQL Server-Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2011-11-29 55856]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-05-01 136360]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2010-08-31 90112]
S2 DTSAudioService;DTSAudioService;c:\program files\Realtek\Audio\HDA\DTSAudioService64.exe [2011-05-31 210024]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-05-24 1840128]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-05-25 2275720]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-10-25 793048]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
S3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [2006-12-27 460800]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2009-11-23 22408]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2009-11-23 16008]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-06-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-07 14:27]
.
2012-06-27 c:\windows\Tasks\DLL-files.com Fixer_UPDATES.job
- c:\program files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2011-12-15 16:09]
.
2012-06-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-08 11:35]
.
2012-06-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-08 11:35]
.
2012-06-19 c:\windows\Tasks\Norton Security Scan for Der T-Punkt.job
- c:\progra~2\NORTON~2\Engine\351~1.8\Nss.exe [2011-10-30 23:02]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]
"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2010-08-03 415816]
"Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2010-08-03 2412616]
"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2010-08-03 4725320]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-10-17 13307496]
"RtHDVBg_DTS"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-10-14 2278504]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-03-15 499608]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 1271168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
FF - ProfilePath - c:\users\Der T-Punkt\AppData\Roaming\Mozilla\Firefox\Profiles\ck54zr00.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.letsplayforum.de/index.php?page=Index
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&q=
FF - prefs.js: network.proxy.type - 2
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-RDReminder - (no file)
Wow6432Node-HKCU-Run-PlayNC Launcher - (no file)
WebBrowser-{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - (no file)
AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe
AddRemove-BrickForce - c:\brickforce\uninst.exe
AddRemove-DarkLoader_is1 - c:\games\DarkLoader\unins000.exe
AddRemove-DungeonSiege 1.0 - c:\program files (x86)\Microsoft Games\Dungeon Siege\UNINSTAL.EXE
AddRemove-Fraps - c:\fraps\uninstall.exe
AddRemove-Get a Life_is1 - c:\program files (x86)\Steam\steamapps\SourceMods\Get_A_Life\unins000.exe
AddRemove-LEGO Rock Raiders - c:\windows\IsUn0407.exe
AddRemove-MAGIX Foto Manager - c:\magix\Foto_Manager\instslct.exe
AddRemove-MAGIX Music Manager - c:\magix\Music_Manager\instslct.exe
AddRemove-MAGIX Video deLuxe 2005 2006 - c:\magix\Video_deLuxe_2005_2006\instslct.exe
AddRemove-MCI Screensaver - c:\windows\system32\\MCI_Screensaver_Uninstall.exe
AddRemove-Microsoft Visual Studio 2010 Professional - DEU - g:\microsoft visual studio 10.0\Microsoft Visual Studio 2010 Professional - DEU\setup.exe
AddRemove-Steam App 105600 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 11450 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 12210 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 12220 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 12640 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 12710 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 12810 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 12840 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 12910 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 15100 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 15120 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 15130 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 15740 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 16450 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 17300 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 18400 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 18420 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 18450 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 18460 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 19900 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 20820 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 2100 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 2130 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 215 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 21980 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 220 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 22000 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 22370 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 22380 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 26800 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 31700 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 33680 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 340 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 35140 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 35460 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 35700 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 3590 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 37600 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 38700 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 38720 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 39120 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 39190 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 39200 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 400 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 40800 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 41210 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 41500 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 420 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 43110 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 440 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 49600 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 50000 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 50130 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 550 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 57210 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 57300 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 57800 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 57900 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 629 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 63700 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 70 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 70300 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 7670 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 8190 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 8400 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 8850 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 8980 - c:\program files (x86)\Steam\steam.exe
AddRemove-Steam App 91600 - c:\program files (x86)\Steam\steam.exe
AddRemove-Thief22DeinstallKey - c:\windows\IsUn0407.exe
AddRemove-ThiefDeinstallKey - c:\windows\IsUn0407.exe
AddRemove-VP3 Codec for Video for Windows - c:\windows\system32\Uninstal.exe
AddRemove-WE Unlimited_is1 - c:\program files (x86)\WE Unlimited\unins000.exe
AddRemove-{C9EAEE6B-741F-421D-B9CE-9FA300DA92AD}_is1 - g:\smbx\unins000.exe
AddRemove-UnityWebPlayer - c:\users\Der T-Punkt\AppData\Local\Unity\WebPlayer\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va007]
"ImagePath"="\??\c:\users\DERT-P~1\AppData\Local\Temp\0073834.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1302544855-1183209686-1117354618-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:d2,eb,1c,1f,23,d6,fc,6e,e6,7c,a6,d4,d9,62,9f,4b,c2,50,09,ae,85,cb,59,
7d,90,9c,80,bd,eb,77,1d,7d,d5,8c,be,24,45,0f,cf,3f,e6,7d,16,78,a5,d5,c5,16,\
"??"=hex:69,6f,5c,46,6a,89,f9,ee,2d,48,e0,10,87,42,1e,12
.
[HKEY_USERS\S-1-5-21-1302544855-1183209686-1117354618-1000\Software\SecuROM\License information*]
"datasecu"=hex:e0,9f,e7,79,5a,ff,d9,96,a5,87,6f,0a,6e,2c,6f,f6,a6,e7,92,cb,43,
3b,fe,99,94,aa,7b,ea,43,b1,25,1d,ae,70,0e,56,bb,4c,3b,9f,c9,71,7e,e9,0d,45,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BEB3C0C7-B648-4257-96D9-B5D024816E27}\Version*Version]
"Version"=hex:e5,5d,5e,15,5a,73,e2,43,0e,91,25,43,7d,cc,c8,71,ba,de,f1,f3,68,
b0,96,ae,b9,ed,bc,f8,14,03,89,fa,eb,32,df,8b,86,bb,63,7d,0f,23,6d,9c,86,f5,\
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Minnetonka Audio Software\SurCode Dolby Digital Premiere\Version*Version]
"Version"=hex:e5,5d,5e,15,5a,73,e2,43,0e,91,25,43,7d,cc,c8,71,ba,de,f1,f3,68,
b0,96,ae,b9,ed,bc,f8,14,03,89,fa,eb,32,df,8b,86,bb,63,7d,0f,23,6d,9c,86,f5,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\avmwlanstick\WlanNetService.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Google\Update\1.3.21.111\GoogleCrashHandler.exe
c:\program files\Logitech\SetPoint\x86\SetPoint32.exe
c:\program files (x86)\Mozilla Firefox 4.0 Beta 11\firefox.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-06-27 14:44:42 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2012-06-27 12:44
.
Vor Suchlauf: 20 Verzeichnis(se), 113.776.541.696 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 117.479.981.056 Bytes frei
.
- - End Of File - - 48A030EB1353DC70B7C55236099075F8 --- --- --- |