Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   mit Verschlüsselten Trojaner geplagt (https://www.trojaner-board.de/127875-verschluesselten-trojaner-geplagt.html)

Nugg 05.12.2012 22:38
mit Verschlüsselten Trojaner geplagt
 
seit gestern hab ich auch die Bekannschaft mit ein Trojaner :kloppen:
ich habe wie hier empfohlen das OTL angewendet und konnte wieder auf mein PC wieder zugreifen . bein Virenscanner Microsoft Securtiy habe ich das gefunden:

Exploit:Java/CVE-0507,BHV
Exploit:Java/CVE-0507,BIB
Exploit:Java/CVE-0507,BHY

es wird empfohlen zu enfernen !
brauche hilfe da ich gelesen hab das man das nur in Karantäne stellen soll?
Ist mein PC wieder danach geschützt oder muss ich noch was machen

markusg 05.12.2012 22:46
Hi
was heißt, angewendet, OTL ist erst mal nur ein analyse Tool. wenn du also nur die Analyse genutzt hast, kann da nichts passiert sein was die Malware gelöscht hatt

Nugg 06.12.2012 07:47
> ich bin leider nicht sehr geschickt im beschreiben
> ich kam nach euren Anweiseungen wieder in PC rein die Zahlungsaufvorderung die den PC blockiert hat war weg...
> hab auch das gefunden:
> file:\User\fuad\App-Data\LocalLow\Sun\Java\Deployment\cache.\6.0\38\60ccfe6-3ab49eld<mac.class
>
> Ps. die Klammer vor mac ist anderesrum konnte ich leider nicht eingeben
>
> Danke nochmal für die Hilfe

booo....man Hilfffe bitte:confused:

gemer scan :
GMER Logfile:
Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-12-06 09:41:55
Windows 6.0.6000  Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 TOSHIBA_MK2035GSS rev.DK022A
Running: 2h4lzbcf.exe; Driver: C:\Users\Fuad\AppData\Local\Temp\kxtdypob.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwAssignProcessToJobObject [0x8D65D4B0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwCreateThread [0x8D65D7F0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwDebugActiveProcess [0x8D65DAB0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwDuplicateObject [0x8D65D5D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwLoadDriver [0x8D65D8B0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwOpenProcess [0x8D65D350]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwProtectVirtualMemory [0x8D65D570]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwQueueApcThread [0x8D65D630]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwSetContextThread [0x8D65D530]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwSetInformationThread [0x8D65D4F0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwSetSystemInformation [0x8D65D870]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwSuspendProcess [0x8D65D3B0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwSuspendThread [0x8D65D430]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwSystemDebugControl [0x8D65D830]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwTerminateProcess [0x8D65D370]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwTerminateThread [0x8D65D470]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                                      ZwWriteVirtualMemory [0x8D65D5F0]

---- Kernel code sections - GMER 1.0.15 ----

.text          ntkrnlpa.exe!ZwCallbackReturn + 73C                                                                                  81C80C48 4 Bytes  CALL E79D3CCE
.text          ntkrnlpa.exe!ZwCallbackReturn + 7AC                                                                                  81C80CB8 4 Bytes  CALL E7A07D3E
.text          ntkrnlpa.exe!ZwCallbackReturn + 7E0                                                                                  81C80CEC 12 Bytes  [B0, D3, 65, 8D, 30, D4, 65, ...]

---- User code sections - GMER 1.0.15 ----

.text          C:\Program Files\ESET\ESET Smart Security\ekrn.exe[544] kernel32.dll!SetUnhandledExceptionFilter                      771BD177 4 Bytes  [C2, 04, 00, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtClose                                        773FF354 5 Bytes  JMP 6C442C60 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtCreateFile                                    773FF414 5 Bytes  JMP 6C442AA0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtCreateFile + 6                                773FF41A 4 Bytes  [28, 80, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtCreateFile + B                                773FF41F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtFlushBuffersFile                              773FF914 5 Bytes  JMP 6C46D420 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtLockFile                                      773FFAE4 5 Bytes  JMP 6C46D510 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtMapViewOfSection + 6                          773FFB6A 4 Bytes  [28, 83, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtMapViewOfSection + B                          773FFB6F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenFile                                      773FFBF4 5 Bytes  JMP 6C442A10 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenFile + 6                                  773FFBFA 4 Bytes  [68, 80, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenFile + B                                  773FFBFF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenProcess + 6                              773FFC7A 4 Bytes  [A8, 81, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenProcess + B                              773FFC7F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenProcessToken + 6                          773FFC8A 4 Bytes  CALL 76404F10 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenProcessToken + B                          773FFC8F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenProcessTokenEx + 6                        773FFC9A 4 Bytes  [A8, 82, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenProcessTokenEx + B                        773FFC9F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenThread + 6                                773FFCEA 4 Bytes  [68, 81, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenThread + B                                773FFCEF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenThreadToken + 6                          773FFCFA 4 Bytes  [68, 82, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenThreadToken + B                          773FFCFF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenThreadTokenEx + 6                        773FFD0A 4 Bytes  CALL 76404F91 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtOpenThreadTokenEx + B                        773FFD0F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtQueryAttributesFile + 6                      773FFD9A 4 Bytes  [A8, 80, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtQueryAttributesFile + B                      773FFD9F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtQueryFullAttributesFile + 6                  773FFE4A 4 Bytes  CALL 764050CF C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtQueryFullAttributesFile + B                  773FFE4F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtQueryInformationFile                          773FFE64 5 Bytes  JMP 6C442CE0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtReadFile                                      77400074 5 Bytes  JMP 6C442B40 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtSetInformationFile                            77400364 5 Bytes  JMP 6C442D70 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtSetInformationFile + 6                        7740036A 4 Bytes  [28, 81, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtSetInformationFile + B                        7740036F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtSetInformationThread + 6                      774003BA 4 Bytes  [28, 82, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtSetInformationThread + B                      774003BF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtUnlockFile                                    77400634 5 Bytes  JMP 6C46D5A0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtUnmapViewOfSection + 6                        7740065A 4 Bytes  [68, 83, 52, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtUnmapViewOfSection + B                        7740065F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3372] ntdll.dll!NtWriteFile                                    774006C4 5 Bytes  JMP 6C442BD0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtClose                                        773FF354 5 Bytes  JMP 6C442C60 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtCreateFile                                    773FF414 5 Bytes  JMP 6C442AA0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtFlushBuffersFile                              773FF914 5 Bytes  JMP 6C46D420 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtLockFile                                      773FFAE4 5 Bytes  JMP 6C46D510 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtOpenFile                                      773FFBF4 5 Bytes  JMP 6C442A10 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtQueryInformationFile                          773FFE64 5 Bytes  JMP 6C442CE0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtReadFile                                      77400074 5 Bytes  JMP 6C442B40 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtSetInformationFile                            77400364 5 Bytes  JMP 6C442D70 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtUnlockFile                                    77400634 5 Bytes  JMP 6C46D5A0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3428] ntdll.dll!NtWriteFile                                    774006C4 5 Bytes  JMP 6C442BD0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtClose                                        773FF354 5 Bytes  JMP 6C46D620 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtCreateFile                                    773FF414 5 Bytes  JMP 6C46D2F0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtCreateFile + 6                                773FF41A 4 Bytes  [28, D0, D4, 00] {SUB AL, DL; AAM 0x0}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtCreateFile + B                                773FF41F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtFlushBuffersFile                              773FF914 5 Bytes  JMP 6C46D420 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtLockFile                                      773FFAE4 5 Bytes  JMP 6C46D510 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtMapViewOfSection + 6                          773FFB6A 4 Bytes  [28, D3, D4, 00] {SUB BL, DL; AAM 0x0}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtMapViewOfSection + B                          773FFB6F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenFile                                      773FFBF4 5 Bytes  JMP 6C46D270 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenFile + 6                                  773FFBFA 4 Bytes  [68, D0, D4, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenFile + B                                  773FFBFF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenProcess + 6                              773FFC7A 4 Bytes  [A8, D1, D4, 00] {TEST AL, 0xd1; AAM 0x0}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenProcess + B                              773FFC7F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenProcessToken + 6                          773FFC8A 4 Bytes  CALL 7640D160 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenProcessToken + B                          773FFC8F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenProcessTokenEx + 6                        773FFC9A 4 Bytes  [A8, D2, D4, 00] {TEST AL, 0xd2; AAM 0x0}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenProcessTokenEx + B                        773FFC9F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenThread + 6                                773FFCEA 4 Bytes  [68, D1, D4, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenThread + B                                773FFCEF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenThreadToken + 6                          773FFCFA 4 Bytes  [68, D2, D4, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenThreadToken + B                          773FFCFF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenThreadTokenEx + 6                        773FFD0A 4 Bytes  CALL 7640D1E1 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtOpenThreadTokenEx + B                        773FFD0F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtQueryAttributesFile + 6                      773FFD9A 4 Bytes  [A8, D0, D4, 00] {TEST AL, 0xd0; AAM 0x0}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtQueryAttributesFile + B                      773FFD9F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtQueryFullAttributesFile + 6                  773FFE4A 4 Bytes  CALL 7640D31F C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtQueryFullAttributesFile + B                  773FFE4F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtSetInformationFile                            77400364 5 Bytes  JMP 6C46D490 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtSetInformationFile + 6                        7740036A 4 Bytes  [28, D1, D4, 00] {SUB CL, DL; AAM 0x0}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtSetInformationFile + B                        7740036F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtSetInformationThread + 6                      774003BA 4 Bytes  [28, D2, D4, 00] {SUB DL, DL; AAM 0x0}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtSetInformationThread + B                      774003BF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtUnlockFile                                    77400634 5 Bytes  JMP 6C46D5A0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtUnmapViewOfSection + 6                        7740065A 4 Bytes  [68, D3, D4, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtUnmapViewOfSection + B                        7740065F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[3492] ntdll.dll!NtWriteFile                                    774006C4 5 Bytes  JMP 6C46D390 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtClose                                        773FF354 5 Bytes  JMP 6C442C60 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtCreateFile                                    773FF414 5 Bytes  JMP 6C442AA0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtCreateFile + 6                                773FF41A 4 Bytes  [28, 38, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtCreateFile + B                                773FF41F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtFlushBuffersFile                              773FF914 5 Bytes  JMP 6C46D420 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtLockFile                                      773FFAE4 5 Bytes  JMP 6C46D510 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtMapViewOfSection + 6                          773FFB6A 4 Bytes  [28, 3B, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtMapViewOfSection + B                          773FFB6F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenFile                                      773FFBF4 5 Bytes  JMP 6C442A10 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenFile + 6                                  773FFBFA 4 Bytes  [68, 38, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenFile + B                                  773FFBFF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenProcess + 6                              773FFC7A 4 Bytes  [A8, 39, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenProcess + B                              773FFC7F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenProcessToken + 6                          773FFC8A 4 Bytes  CALL 76407FC8 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenProcessToken + B                          773FFC8F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenProcessTokenEx + 6                        773FFC9A 4 Bytes  [A8, 3A, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenProcessTokenEx + B                        773FFC9F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenThread + 6                                773FFCEA 4 Bytes  [68, 39, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenThread + B                                773FFCEF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenThreadToken + 6                          773FFCFA 4 Bytes  [68, 3A, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenThreadToken + B                          773FFCFF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenThreadTokenEx + 6                        773FFD0A 4 Bytes  CALL 76408049 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtOpenThreadTokenEx + B                        773FFD0F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtQueryAttributesFile + 6                      773FFD9A 4 Bytes  [A8, 38, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtQueryAttributesFile + B                      773FFD9F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtQueryFullAttributesFile + 6                  773FFE4A 4 Bytes  CALL 76408187 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtQueryFullAttributesFile + B                  773FFE4F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtQueryInformationFile                          773FFE64 5 Bytes  JMP 6C442CE0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtReadFile                                      77400074 5 Bytes  JMP 6C442B40 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtSetInformationFile                            77400364 5 Bytes  JMP 6C442D70 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtSetInformationFile + 6                        7740036A 4 Bytes  [28, 39, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtSetInformationFile + B                        7740036F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtSetInformationThread + 6                      774003BA 4 Bytes  [28, 3A, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtSetInformationThread + B                      774003BF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtUnlockFile                                    77400634 5 Bytes  JMP 6C46D5A0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtUnmapViewOfSection + 6                        7740065A 4 Bytes  [68, 3B, 83, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtUnmapViewOfSection + B                        7740065F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[4204] ntdll.dll!NtWriteFile                                    774006C4 5 Bytes  JMP 6C442BD0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtClose                                        773FF354 5 Bytes  JMP 6C442C60 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtCreateFile                                    773FF414 5 Bytes  JMP 6C442AA0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtCreateFile + 6                                773FF41A 4 Bytes  [28, 08, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtCreateFile + B                                773FF41F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtFlushBuffersFile                              773FF914 5 Bytes  JMP 6C46D420 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtLockFile                                      773FFAE4 5 Bytes  JMP 6C46D510 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtMapViewOfSection + 6                          773FFB6A 4 Bytes  [28, 0B, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtMapViewOfSection + B                          773FFB6F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenFile                                      773FFBF4 5 Bytes  JMP 6C442A10 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenFile + 6                                  773FFBFA 4 Bytes  [68, 08, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenFile + B                                  773FFBFF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenProcess + 6                              773FFC7A 4 Bytes  [A8, 09, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenProcess + B                              773FFC7F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenProcessToken + 6                          773FFC8A 4 Bytes  CALL 76405C98 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenProcessToken + B                          773FFC8F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenProcessTokenEx + 6                        773FFC9A 4 Bytes  [A8, 0A, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenProcessTokenEx + B                        773FFC9F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenThread + 6                                773FFCEA 4 Bytes  [68, 09, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenThread + B                                773FFCEF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenThreadToken + 6                          773FFCFA 4 Bytes  [68, 0A, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenThreadToken + B                          773FFCFF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenThreadTokenEx + 6                        773FFD0A 4 Bytes  CALL 76405D19 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtOpenThreadTokenEx + B                        773FFD0F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtQueryAttributesFile + 6                      773FFD9A 4 Bytes  [A8, 08, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtQueryAttributesFile + B                      773FFD9F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtQueryFullAttributesFile + 6                  773FFE4A 4 Bytes  CALL 76405E57 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtQueryFullAttributesFile + B                  773FFE4F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtQueryInformationFile                          773FFE64 5 Bytes  JMP 6C442CE0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtReadFile                                      77400074 5 Bytes  JMP 6C442B40 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtSetInformationFile                            77400364 5 Bytes  JMP 6C442D70 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtSetInformationFile + 6                        7740036A 4 Bytes  [28, 09, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtSetInformationFile + B                        7740036F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtSetInformationThread + 6                      774003BA 4 Bytes  [28, 0A, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtSetInformationThread + B                      774003BF 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtUnlockFile                                    77400634 5 Bytes  JMP 6C46D5A0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtUnmapViewOfSection + 6                        7740065A 4 Bytes  [68, 0B, 60, 00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtUnmapViewOfSection + B                        7740065F 1 Byte  [E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5896] ntdll.dll!NtWriteFile                                    774006C4 5 Bytes  JMP 6C442BD0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtClose                                        773FF354 5 Bytes  JMP 6C442C60 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtCreateFile                                    773FF414 5 Bytes  JMP 6C442AA0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtCreateFile + 6                                773FF41A 2 Bytes  [28, C0] {SUB AL, AL}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtCreateFile + 9                                773FF41D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtCreateFile + 9                                773FF41D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtFlushBuffersFile                              773FF914 5 Bytes  JMP 6C46D420 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtLockFile                                      773FFAE4 5 Bytes  JMP 6C46D510 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtMapViewOfSection + 6                          773FFB6A 2 Bytes  [28, C3] {SUB BL, AL}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtMapViewOfSection + 9                          773FFB6D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtMapViewOfSection + 9                          773FFB6D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenFile                                      773FFBF4 5 Bytes  JMP 6C442A10 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenFile + 6                                  773FFBFA 2 Bytes  [68, C0]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenFile + 9                                  773FFBFD 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenFile + 9                                  773FFBFD 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcess + 6                              773FFC7A 2 Bytes  [A8, C1] {TEST AL, 0xc1}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcess + 9                              773FFC7D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcess + 9                              773FFC7D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcessToken + 6                          773FFC8A 2 Bytes  CALL 7640FB50 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcessToken + 9                          773FFC8D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcessToken + 9                          773FFC8D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcessTokenEx + 6                        773FFC9A 2 Bytes  [A8, C2] {TEST AL, 0xc2}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcessTokenEx + 9                        773FFC9D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenProcessTokenEx + 9                        773FFC9D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThread + 6                                773FFCEA 2 Bytes  [68, C1]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThread + 9                                773FFCED 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThread + 9                                773FFCED 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThreadToken + 6                          773FFCFA 2 Bytes  [68, C2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThreadToken + 9                          773FFCFD 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThreadToken + 9                          773FFCFD 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThreadTokenEx + 6                        773FFD0A 2 Bytes  CALL 7640FBD1 C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThreadTokenEx + 9                        773FFD0D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtOpenThreadTokenEx + 9                        773FFD0D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtQueryAttributesFile + 6                      773FFD9A 2 Bytes  [A8, C0] {TEST AL, 0xc0}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtQueryAttributesFile + 9                      773FFD9D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtQueryAttributesFile + 9                      773FFD9D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtQueryFullAttributesFile + 6                  773FFE4A 2 Bytes  CALL 7640FD0F C:\Windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtQueryFullAttributesFile + 9                  773FFE4D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtQueryFullAttributesFile + 9                  773FFE4D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtQueryInformationFile                          773FFE64 5 Bytes  JMP 6C442CE0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtReadFile                                      77400074 5 Bytes  JMP 6C442B40 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtSetInformationFile                            77400364 5 Bytes  JMP 6C442D70 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtSetInformationFile + 6                        7740036A 2 Bytes  [28, C1] {SUB CL, AL}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtSetInformationFile + 9                        7740036D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtSetInformationFile + 9                        7740036D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtSetInformationThread + 6                      774003BA 2 Bytes  [28, C2] {SUB DL, AL}
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtSetInformationThread + 9                      774003BD 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtSetInformationThread + 9                      774003BD 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtUnlockFile                                    77400634 5 Bytes  JMP 6C46D5A0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtUnmapViewOfSection + 6                        7740065A 2 Bytes  [68, C3]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtUnmapViewOfSection + 9                        7740065D 1 Byte  [00]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtUnmapViewOfSection + 9                        7740065D 3 Bytes  [00, FF, E2]
.text          C:\Program Files\Google\Chrome\Application\chrome.exe[5940] ntdll.dll!NtWriteFile                                    774006C4 5 Bytes  JMP 6C442BD0 C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll (Data Manager/Bandoo Media, inc)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                                symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy1                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy2                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy3                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy4                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy5                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy6                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy7                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy8                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy9                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\tdx \Device\Tcp                                                                                              epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy10                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy11                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy12                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy20                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy13                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy21                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy14                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy22                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy15                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy23                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy16                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\tdx \Device\Udp                                                                                              epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy24                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy17                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\tdx \Device\RawIp                                                                                            epfwtdi.sys (ESET Personal Firewall TDI filter/ESET)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy25                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy18                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy26                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy19                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\volsnap \Device\HarddiskVolumeShadowCopy27                                                                    symsnap.sys (StorageCraft Volume Snap-Shot/StorageCraft)

---- Files - GMER 1.0.15 ----

File            C:\Users\ole\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3U9PF7HV\background_gradient[1]    0 bytes
File            C:\Users\ole\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3U9PF7HV\dnserrordiagoff_webOC[1]  0 bytes
File            C:\Users\ole\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8LA91ETG\bullet[1]                0 bytes
File            C:\Users\ole\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8LA91ETG\httpErrorPagesScripts[1]  0 bytes
File            C:\Users\ole\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IRBLFIUH\ErrorPageTemplate[1]      0 bytes
File            C:\Users\ole\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IRBLFIUH\info_48[1]                0 bytes

---- EOF - GMER 1.0.15 ----
--- --- ---

markusg 06.12.2012 17:14
Nach was für einer beschreibung, du musst dir schon mühe geben...
Was hast du bisher gemacht.

Nugg 06.12.2012 20:24
http://www.trojaner-board.de/69886-a...-beachten.html
die Schritte habe ich befolgt..

markusg 06.12.2012 20:47
Kann nicht sein, sonst währen in diesem Thema mehr Logfiles zu sehen

Nugg 06.12.2012 22:19
OTL Logfile:
Code:
OTL logfile created on: 06.12.2012 21:53:02 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\ole\Downloads
Windows Vista Home Premium Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,93 Gb Available Physical Memory | 46,81% Memory free
4,19 Gb Paging File | 2,89 Gb Available in Paging File | 68,83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 179,07 Gb Total Space | 127,29 Gb Free Space | 71,08% Space Free | Partition Type: NTFS
Drive F: | 1,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: ole-PC | User Name: ole| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.12.06 21:52:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\ole\Downloads\OTL.exe
PRC - [2012.10.18 12:43:51 | 001,898,936 | ---- | M] (Bandoo Media, inc) -- C:\Programme\Searchqu Toolbar\Datamngr\datamngrUI.exe
PRC - [2012.09.12 16:25:22 | 000,280,088 | ---- | M] (Microsoft Corporation) -- c:\Programme\Microsoft Security Client\MpCmdRun.exe
PRC - [2012.09.12 16:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) -- c:\Programme\Microsoft Security Client\MsMpEng.exe
PRC - [2012.09.12 16:19:44 | 000,947,176 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Security Client\msseces.exe
PRC - [2012.09.06 18:29:41 | 023,031,200 | ---- | M] (SmartVoip) -- C:\Programme\SmartVoip.com\SmartVoip\smartvoip.exe
PRC - [2012.08.16 16:26:15 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2012.03.07 15:40:34 | 000,913,144 | ---- | M] (ESET) -- C:\Programme\ESET\ESET Smart Security\ekrn.exe
PRC - [2012.03.07 15:40:28 | 003,117,344 | ---- | M] (ESET) -- C:\Programme\ESET\ESET Smart Security\egui.exe
PRC - [2012.01.17 10:36:08 | 001,015,912 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\VAIO Update 5\VAIOUpdt.exe
PRC - [2012.01.13 09:53:48 | 000,939,624 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\VAIO Update Common\VUAgent.exe
PRC - [2008.11.05 07:32:40 | 000,262,144 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\Network Utility\LANUtil.exe
PRC - [2008.11.03 15:01:44 | 000,299,008 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\Network Utility\NSUService.exe
PRC - [2008.01.29 16:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Programme\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
PRC - [2007.08.28 15:27:12 | 000,131,072 | ---- | M] (Sony Corporation) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
PRC - [2007.08.28 15:27:10 | 000,192,512 | ---- | M] (Sony Corporation) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
PRC - [2007.07.24 18:26:38 | 000,182,392 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\VAIO Event Service\VESMgr.exe
PRC - [2007.07.24 18:26:38 | 000,100,472 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\VAIO Event Service\VESMgrSub.exe
PRC - [2007.06.28 07:52:48 | 000,274,432 | ---- | M] (Sony Corporation) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
PRC - [2007.06.14 07:40:46 | 000,921,600 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\VAIO Power Management\SPMgr.exe
PRC - [2007.06.11 17:27:14 | 000,317,560 | ---- | M] (Sony Corporation) -- C:\Programme\Sony\ISB Utility\ISBMgr.exe
PRC - [2007.06.10 01:12:18 | 000,118,784 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Programme\Apoint\Apoint.exe
PRC - [2007.06.10 01:12:18 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Programme\Apoint\ApntEx.exe
PRC - [2007.06.10 01:12:16 | 000,050,736 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Programme\Apoint\ApMsgFwd.exe
PRC - [2006.11.02 10:45:59 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe
PRC - [2006.11.02 10:44:59 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.08.27 21:33:32 | 000,087,912 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012.08.27 21:33:08 | 001,242,512 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2007.06.30 02:07:01 | 000,249,856 | ---- | M] () -- C:\Windows\System32\igfxTMM.dll
 
 
========== Services (SafeList) ==========
 
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe -- (VcmXmlIfHelper)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon -- (LiveUpdate Notice Ex)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon -- (CLTNetCnService)
SRV - [2012.12.03 06:37:15 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.09.12 16:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012.03.07 15:40:34 | 000,913,144 | ---- | M] (ESET) [Auto | Running] -- C:\Programme\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2012.01.13 09:53:48 | 000,939,624 | ---- | M] (Sony Corporation) [On_Demand | Running] -- C:\Programme\Sony\VAIO Update Common\VUAgent.exe -- (VUAgent)
SRV - [2008.11.03 15:01:44 | 000,299,008 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Programme\Sony\Network Utility\NSUService.exe -- (NSUService)
SRV - [2008.01.29 16:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2007.09.26 09:53:56 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Programme\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2007.08.28 15:27:12 | 000,131,072 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe -- (VzFw)
SRV - [2007.08.28 15:27:10 | 000,192,512 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe -- (VzCdbSvc)
SRV - [2007.08.03 14:24:11 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.07.24 18:26:38 | 000,182,392 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Programme\Sony\VAIO Event Service\VESMgr.exe -- (VAIO Event Service)
SRV - [2007.07.05 18:12:52 | 000,292,152 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe -- (VcmIAlzMgr)
SRV - [2007.06.28 07:53:04 | 000,073,728 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe -- (VAIO Entertainment TV Device Arbitration Service)
SRV - [2007.06.28 07:52:48 | 000,274,432 | ---- | M] (Sony Corporation) [On_Demand | Running] -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe -- (Vcsw)
SRV - [2007.06.20 14:35:06 | 002,523,136 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VAIO Media Integrated Server\VMISrv.exe -- (VAIOMediaPlatform-IntegratedServer-AppServer)
SRV - [2007.06.20 14:34:52 | 000,499,712 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe -- (VAIOMediaPlatform-Mobile-Gateway)
SRV - [2007.06.20 14:34:50 | 001,089,536 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe -- (VAIOMediaPlatform-UCLS-UPnP)
SRV - [2007.06.20 14:34:50 | 001,089,536 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe -- (VAIOMediaPlatform-IntegratedServer-UPnP)
SRV - [2007.06.20 14:34:50 | 000,397,312 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe -- (VAIOMediaPlatform-UCLS-HTTP)
SRV - [2007.06.20 14:34:50 | 000,397,312 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe -- (VAIOMediaPlatform-IntegratedServer-HTTP)
SRV - [2007.02.13 17:57:06 | 002,655,848 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Programme\Norton Save and Restore\Agent\VProSvc.exe -- (Norton Save and Restore)
SRV - [2007.01.10 15:51:06 | 000,745,472 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VAIO Media Integrated Server\UCLS.exe -- (VAIOMediaPlatform-UCLS-AppServer)
SRV - [2006.12.14 01:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2006.12.14 01:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2006.12.14 00:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Programme\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2006.11.02 13:36:04 | 000,895,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2006.11.02 10:46:13 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2006.11.02 10:46:12 | 000,167,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2006.10.26 18:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006.10.26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | Disabled | Stopped] -- system32\DRIVERS\UIUSYS.SYS -- (UIUSys)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2012.03.14 08:40:04 | 000,148,504 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
DRV - [2012.03.14 08:40:04 | 000,061,936 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2012.03.14 08:40:02 | 000,169,080 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm)
DRV - [2012.03.14 08:40:02 | 000,120,152 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2012.03.14 08:40:02 | 000,033,656 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV - [2007.06.30 12:04:34 | 002,222,080 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32)
DRV - [2007.06.27 18:29:58 | 000,010,216 | ---- | M] (Sony Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\DMICall.sys -- (DMICall)
DRV - [2007.06.15 01:28:09 | 000,705,024 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2007.06.10 01:12:18 | 000,140,800 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2007.06.06 01:00:39 | 000,812,544 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ti21sony.sys -- (ti21sony)
DRV - [2007.05.08 01:01:44 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007.02.13 18:06:36 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr)
DRV - [2007.02.13 17:33:06 | 000,131,944 | ---- | M] (StorageCraft) [File_System | Boot | Running] -- C:\Windows\System32\drivers\symsnap.sys -- (symsnap)
DRV - [2007.02.13 17:33:04 | 000,037,864 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\v2imount.sys -- (v2imount)
DRV - [2007.02.13 17:30:28 | 000,014,072 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vproeventmonitor.sys -- (VProEventMonitor)
DRV - [2006.11.06 09:29:32 | 000,027,520 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SonyNC.sys -- (SNC)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=110&systemid=102&sr=0&q={searchTerms}
IE - HKLM\..\SearchScopes\{E5EA0B27-AF39-4A9A-B2E2-0942A67A3F3D}: "URL" = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta=
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://partnerpage.google.com/eu.sony.com/de [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.searchnu.com/102
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=D887C843-455C-45FD-A5EC-FB27B2289E74&apn_sauid=AD0287A8-E031-4B11-AAC0-6A24B6589A32
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}: "URL" = hxxp://dts.search-results.com/sr?src=ieb&appid=110&systemid=102&sr=0&q={searchTerms}
IE - HKCU\..\SearchScopes\{E5EA0B27-AF39-4A9A-B2E2-0942A67A3F3D}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SNYK_deDE497
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012.12.05 16:26:10 | 000,000,000 | ---D | M]
 
 
========== Chrome  ==========
 
CHR - homepage: hxxp://www.searchnu.com/102
CHR - default_search_provider: Search Results (Enabled)
CHR - default_search_provider: search_url = hxxp://dts.search-results.com/sr?src=crb&appid=110&systemid=102&sr=0&q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage: hxxp://www.searchnu.com/102
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.95\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U37 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll
CHR - plugin: Java Deployment Toolkit 6.0.370.6 (Enabled) = C:\Windows\system32\npdeployJava1.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Users\ole\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\ole\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\ole\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Google Mail = C:\Users\ole\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: ::1            localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Programme\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O2 - BHO: (DataMngr) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Programme\Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programme\Google BAE\BAE.dll (Your Company Name)
O2 - BHO: (ChromeFrame BHO) - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Programme\Google\Chrome\Application\23.0.1271.95\npchrome_frame.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Programme\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [Apoint] C:\Programme\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [DATAMNGR] C:\Programme\Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Norton Save and Restore 2.0] C:\Program Files\Norton Save and Restore\Agent\VProTray.exe (Symantec Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKCU..\Run: [NSUFloatingUI] C:\Program Files\Sony\Network Utility\LANUtil.exe (Sony Corporation)
O4 - HKCU..\Run: [SmartVoip] C:\Program Files\SmartVoip.com\SmartVoip\smartvoip.exe (SmartVoip)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{09ADC90C-C679-4B6D-AF31-353B70749C6E}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\gcf {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Programme\Google\Chrome\Application\23.0.1271.95\npchrome_frame.dll (Google Inc.)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll) - C:\Programme\Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll) - C:\Programme\Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\Fuad\Pictures\2012-09-18\663.jpg
O24 - Desktop BackupWallPaper: C:\Users\Fuad\Pictures\2012-09-18\663.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2012.02.10 10:19:13 | 000,000,039 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.12.06 09:48:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2012.12.06 09:48:49 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2012.12.05 23:33:00 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012.12.05 23:33:00 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.12.05 23:02:29 | 000,000,000 | ---D | C] -- C:\Users\ole\AppData\Local\jZip
[2012.12.05 23:02:18 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2012.12.05 23:02:17 | 000,000,000 | ---D | C] -- C:\Program Files\Searchqu Toolbar
[2012.12.05 16:35:16 | 000,000,000 | ---D | C] -- C:\Users\ole\AppData\Roaming\ESET
[2012.12.05 16:35:16 | 000,000,000 | ---D | C] -- C:\Users\ole\AppData\Local\ESET
[2012.12.05 16:25:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2012.12.05 16:25:20 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2012.12.05 16:25:20 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012.12.05 12:17:53 | 000,297,472 | ---- | C] (Borland Software Corporation) -- C:\Windows\System32\midas.dll
[2012.12.05 11:20:17 | 000,000,000 | ---D | C] -- C:\Program Files\jZip
[2012.12.04 20:14:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012.11.16 16:28:34 | 000,000,000 | ---D | C] -- C:\DRIVERS
[2012.11.08 16:39:36 | 000,000,000 | ---D | C] -- C:\Users\ole\AppData\Local\Microsoft Games
 
========== Files - Modified Within 30 Days ==========
 
[2012.12.06 21:50:25 | 000,000,000 | ---- | M] () -- C:\Users\ole\defogger_reenable
[2012.12.06 21:42:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.12.06 21:33:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.12.06 21:17:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.12.06 21:14:39 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.12.06 21:14:39 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.12.06 20:17:00 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.12.06 13:45:03 | 000,641,344 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.12.06 13:45:03 | 000,610,142 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.12.06 13:45:03 | 000,116,706 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.12.06 13:45:03 | 000,103,924 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.12.05 23:02:40 | 000,000,780 | ---- | M] () -- C:\Users\ole\Desktop\jZip.lnk
[2012.12.05 14:24:40 | 000,355,584 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.12.05 14:22:24 | 095,023,320 | ---- | M] () -- C:\ProgramData\netdislw.pad
[2012.12.05 12:24:38 | 000,000,680 | ---- | M] () --
C:\Users\ole\AppData\Local\d3d9caps.dat
[2012.12.05 11:39:33 | 000,002,243 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012.12.03 06:37:14 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.12.03 06:37:14 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.11.25 14:05:46 | 000,036,006 | ---- | M] () -- C:\Users\ole\Documents\kfz-kaufvertrag.pdf
 
========== Files Created - No Company Name ==========
 
[2012.12.05 23:02:40 | 000,000,810 | ---- | C] () -- C:\Users\ole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jZip.lnk
[2012.12.05 23:02:40 | 000,000,780 | ---- | C] () -- C:\Users\ole\Desktop\jZip.lnk
[2012.12.05 13:45:05 | 000,000,000 | ---- | C] () -- C:\Users\ole\defogger_reenable
[2012.12.05 00:12:36 | 095,023,320 | ---- | C] () -- C:\ProgramData\netdislw.pad
[2012.12.04 13:39:33 | 000,001,094 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.12.04 13:39:31 | 000,001,090 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.25 14:05:44 | 000,036,006 | ---- | C] () -- C:\Users\ole\Documents\kfz-kaufvertrag.pdf
[2012.10.27 06:51:41 | 000,002,985 | ---- | C] () -- C:\ProgramData\LUUnInstall.LiveUpdate
[2012.10.11 14:51:38 | 000,000,790 | ---- | C] () -- C:\Windows\wiso.ini
[2012.08.16 12:36:24 | 000,000,000 | ---- | C] () -- C:\Windows\WinInit.ini
[2012.08.16 11:54:31 | 000,026,112 | ---- | C] () -- C:\Users\ole\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.08.16 11:54:28 | 000,000,680 | ---- | C] () -- C:\Users\ole\AppData\Local\d3d9caps.dat
[2012.08.16 11:18:33 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI
[2012.08.16 11:11:44 | 000,019,968 | ---- | C] () -- C:\Windows\System32\Cpuinf32.dll
[2012.08.16 11:03:16 | 000,344,064 | ---- | C] () -- C:\Windows\System32\SSMSIppCustom.dll
 
========== ZeroAccess Check ==========
 
[2006.11.02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.08.16 16:29:08 | 011,315,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012.08.16 16:19:59 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2006.11.02 10:46:13 | 000,348,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >
--- --- ---

markusg 06.12.2012 22:24
Warum hat dein Windows noch nie Updates gesehen?
Poste mal eset fundmeldungen

Nugg 06.12.2012 22:30
OTL EXTRAS Logfile:
Code:
OTL Extras logfile created on: 06.12.2012 21:53:04 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\ole\Downloads
Windows Vista Home Premium Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 0,93 Gb Available Physical Memory | 46,81% Memory free
4,19 Gb Paging File | 2,89 Gb Available in Paging File | 68,83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 179,07 Gb Total Space | 127,29 Gb Free Space | 71,08% Space Free | Partition Type: NTFS
Drive F: | 1,17 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: ole-PC | User Name: ole | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{2AE5C5BA-487A-4F81-8B40-259504C21223}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{585BD56C-B140-45B1-A0CB-2649A9DEA74A}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0229F668-3981-4739-B406-F8DF6402A9A0}" = protocol=17 | dir=in | app=c:\program files\smartvoip.com\smartvoip\smartvoip.exe |
"{424D8231-FD36-48E8-892C-22BE8A6C6C6F}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{7CB83CDA-A6AE-4420-B646-674C03BEE75C}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{7DD5B61A-1D39-4833-83E5-5E0478A7041A}" = protocol=6 | dir=in | app=c:\program files\searchqu toolbar\datamngr\toolbar\dtuser.exe |
"{8760788C-E55C-4362-9CBD-1A6AA4DC1768}" = protocol=17 | dir=in | app=c:\program files\searchqu toolbar\datamngr\toolbar\dtuser.exe |
"{8E635A77-4D88-452D-A9CB-34F09B757654}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{97F9A59A-745C-4987-8417-D5312C694D4B}" = protocol=6 | dir=in | app=c:\program files\google\google talk\googletalk.exe |
"{CEE05501-E197-4D36-B5F3-9959563AFA47}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{D873570C-8E3D-42C7-A967-6D2ACE205879}" = protocol=6 | dir=in | app=c:\program files\smartvoip.com\smartvoip\smartvoip.exe |
"{ECD9D5EB-C038-4852-AD61-E4273E6E9191}" = protocol=17 | dir=in | app=c:\program files\google\google talk\googletalk.exe |
"{F1593094-AD4C-4CE4-B4B7-AEA744C3E4DE}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{F73A1C7B-C154-4851-8E5A-25FD8E0AED4D}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"TCP Query User{23F3E7B2-2C11-47BA-ADA2-A10C57D1A090}C:\program files\smartvoip.com\smartvoip\smartvoip.exe" = protocol=6 | dir=in | app=c:\program files\smartvoip.com\smartvoip\smartvoip.exe |
"TCP Query User{C3F575D9-5F45-439F-A84E-0EEBE18FE2C3}C:\users\ole\appdata\local\temp\rarsfx0\medionfinder.exe" = protocol=6 | dir=in | app=c:\users\ole\appdata\local\temp\rarsfx0\medionfinder.exe |
"TCP Query User{EC73860F-40C4-47C7-84A5-5EAE8AE87632}C:\program files\supervoip\supervoipwinclienthtml.exe" = protocol=6 | dir=in | app=c:\program files\supervoip\supervoipwinclienthtml.exe |
"UDP Query User{8ADE9682-EF59-4F6C-BBE6-992F09FE799E}C:\users\ole\appdata\local\temp\rarsfx0\medionfinder.exe" = protocol=17 | dir=in | app=c:\users\ole\appdata\local\temp\rarsfx0\medionfinder.exe |
"UDP Query User{BE8A8FD4-69A7-41B2-B3B5-E55D40915A49}C:\program files\smartvoip.com\smartvoip\smartvoip.exe" = protocol=17 | dir=in | app=c:\program files\smartvoip.com\smartvoip\smartvoip.exe |
"UDP Query User{D55C5BFD-6326-4CAE-9B6D-C0FAD494633E}C:\program files\supervoip\supervoipwinclienthtml.exe" = protocol=17 | dir=in | app=c:\program files\supervoip\supervoipwinclienthtml.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}" = Sony Video Shared Library
"{0F6F6876-6334-4977-B5DD-CFC12E193420}" = iTunes
"{12D0BE8D-538C-4AB1-86DE-C540308F50DA}" = VAIO Content Metadata Manager Settings
"{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
"{18510937-0146-417B-95D8-14706649C384}" = VAIO Content Metadata Manager Settings
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1D33BCF7-B5B6-4148-B888-9CC2EC208556}" = Konz 2012
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{2063C2E8-3812-4BBD-9998-6610F80C1DD4}" = VAIO Media AC3 Decoder 1.0
"{206FD69B-F9FE-4164-81BD-D52552BC9C23}" = GearDrvs
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{23825B69-36DF-4DAD-9CFD-118D11D80F16}" = VAIO Content Folder Setting
"{26A24AE4-039D-4CA4-87B4-2F83216035FF}" = Java(TM) 6 Update 37
"{29262C96-A8B9-467B-ADA9-592974677D6E}" = VAIO Content Metadata XML Interface Library
"{2A2FF7F5-6F0E-4A5D-A881-39365E718BD6}" = VAIO Cozy Orange Wallpaper
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{374F03BB-9C09-4DB3-9C9B-C71E63292950}" = Google Earth
"{3B659FAD-E772-44A3-B7E7-560FF084669F}" = VAIO Smart Network
"{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}" = Skype Plugin Manager
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{4785CED6-73B3-45FA-AFE6-EDEDFDE67842}" = Steuer 2011
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works
"{4EA55D20-27FB-45D7-8726-147E8A5F6C62}" = VAIO MusicBox
"{500162A0-4DD5-460A-BAFD-895AAE48C532}" = VAIO Media Content Collection 6.0
"{560F6B2E-F0DF-44E5-8190-A4A161F0E205}" = VAIO Media 6.0
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5855C127-1F20-404D-B7FB-1FD84D7EAB5E}" = VAIO Media Redistribution 6.0
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5F12E9D1-402C-4672-86D7-52E86A3A1411}" = VAIO Content Importer  VAIO Content Exporter
"{6110F38A-5BE6-4199-AC96-D2DD6B4A3ADE}" = VAIO Content Metadata Intelligent Analyzing Manager
"{6332AFF1-9D9A-429C-AA03-F82749FA4F49}" = SonicStage Mastering Studio
"{63A6E9A9-A190-46D4-9430-2DB28654AFD8}" = Norton 360
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = VAIO Content Importer / VAIO Content Exporter
"{6B1F20F2-6321-4669-A58C-33DF8E7517FF}" = VAIO Entertainment Platform
"{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}" = VAIO Movie Story Template Data
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{785EB1D4-ECEC-4195-99B4-73C47E187721}" = VAIO Media Integrated Server 6.1
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7C404084-C5A6-42FF-B731-0BAC79A6E134}" = VAIO Original Funktion Einstellungen
"{802889F8-6AF5-45A5-9764-CA5B999E50FC}" = VAIO Power Management
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{934A3213-1CB6-4264-84A2-EE080C017BCA}" = VAIO Tender Green Wallpaper
"{95229EF6-F4A1-413A-BA50-668311FAFE19}" = VAIO Original Function Settings
"{97BCD719-6ECB-458F-97D6-F38D2E07375E}" = VAIO Aqua Breeze Wallpaper
"{98EABC7F-B1A1-43A5-B505-5B4EC3908DCD}" = Microsoft Security Client
"{98FC7A64-774B-49B5-B046-4B4EBC053FA9}" = VAIO MusicBox Sample Music
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C1C8A04-F8CA-4472-A92D-4288CE32DE86}" = SonicStage Mastering Studio Plugins
"{9E407618-D9CD-4F39-9490-9ED45294073D}" = Click to DVD 2.0.05 Menu Data
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Alps Pointing-device for VAIO
"{9FA8B5F5-4BDC-4CF4-9202-AA97FF79AE98}" = VAIO Media
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A81000000003}" = Adobe Reader 8.1.0 - Deutsch
"{AF9A04EB-7D8E-41DE-9EDE-4AB9BB2B71B6}" = VAIO Media Registration Tool 6.0
"{AFBA0609-EB70-43CB-B11C-294EDADFA101}" =
"{B0255743-165B-4BD5-8DA8-37DFB993B201}" = Norton Save and Restore
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}" = VAIO Movie Story
"{B5E2DF30-1061-4DB4-AF28-08996C8E5680}" = VAIO Content Metadata XML Interface Library
"{B7FB0C86-41A4-4402-9A33-912C462042A0}" = Roxio Easy Media Creator Home
"{B9934B1B-CA61-4971-8CC2-F3E00FF4FABC}" = SuperVoip
"{C90B0A63-978E-406C-A2E0-CFACE9C13B87}" = ESET Smart Security
"{CB84F0F2-927B-458D-9DC5-87832E3DC653}" = GearDrvs
"{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2D23D08-D10E-43D6-883C-78E0B2AC9CC6}" = VU5x86
"{D4DDFAA1-EC37-4529-AD5B-A433ADE68662}" = Apple Mobile Device Support
"{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}" = LiveUpdate Notice (Symantec Corporation)
"{DF7DB916-90E5-40F2-9010-B8125EB5FD6F}" = SonicStage Mastering Studio Audio Filter
"{E4715C25-7114-4F40-A915-C1951D4D7520}" = VAIO Update Merge Module x86
"{E4D96ABB-E0D8-4CA4-856E-A2703F5490F0}" = VAIO Content Metadata Intelligent Analyzing Manager
"{E66BB7B9-EC7B-45A6-B479-AD43A9B32AA0}" = SonicStage Mastering Studio
"{E809063C-51A3-4269-8984-D1EB742F2151}" = Click to DVD 2.6.00
"{E89D31F3-7F6C-47A3-8669-0A8DDE27B664}" = VAIO Media Registration Tool
"{EBE55E74-AF94-47BB-849B-C79F236C65F4}" = VAIO Movie Story
"{EC37A846-53AC-4DA7-98FA-76A4E74AA900}" = Benutzerdefinierte Voreinstellungen für SonicStage Mastering Studio Audio Filter
"{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}" = VAIO Event Service
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" =
"{FAA6B94E-78A7-489C-B2DB-050D9FEBFADA}" = VAIO Content Metadata Intelligent Analyzing Manager
"7-Zip" = 7-Zip 9.20
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"dt icon module" =
"eBay HTML" =
"Google Chrome" = Google Chrome
"Google Chrome Frame" = Google Chrome Frame
"gtfirstboot Setting Request" =
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{1D33BCF7-B5B6-4148-B888-9CC2EC208556}" = Konz 2012
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"LiveUpdate" = LiveUpdate 3.2 (Symantec Corporation)
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Client" = Microsoft Security Essentials
"OpenMG HotFix4.7-07-13-22-01" = OpenMG Limited Patch 4.7-07-15-19-01
"Picasa2" = Picasa 2
"Searchqu Toolbar" = Searchqu Toolbar
"Skype_is1" = Skype 3.2
"SmartVoip_is1" = SmartVoip
"VAIO Help and Support" =
"VAIO MFU Module" =
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"jZip" = jZip
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 06.12.2012 15:36:25 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1061
 
Error - 06.12.2012 15:36:26 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 06.12.2012 15:36:26 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2090
 
Error - 06.12.2012 15:36:26 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2090
 
Error - 06.12.2012 16:19:43 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 06.12.2012 16:19:43 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1029
 
Error - 06.12.2012 16:19:43 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1029
 
Error - 06.12.2012 16:19:44 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 06.12.2012 16:19:44 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2028
 
Error - 06.12.2012 16:19:44 | Computer Name = ole-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2028
 
[ System Events ]
Error - 06.10.2012 03:41:15 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7001
Description =
 
Error - 06.10.2012 03:41:15 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7001
Description =
 
Error - 06.10.2012 03:41:15 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7001
Description =
 
Error - 06.10.2012 03:41:15 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7001
Description =
 
Error - 06.10.2012 03:41:15 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7001
Description =
 
Error - 06.10.2012 03:41:15 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7026
Description =
 
Error - 06.10.2012 03:47:02 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7000
Description =
 
Error - 06.10.2012 18:32:11 | Computer Name = ole-PC | Source = DCOM | ID = 10010
Description =
 
Error - 07.10.2012 04:04:53 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7000
Description =
 
Error - 07.10.2012 04:04:53 | Computer Name = ole-PC | Source = Service Control Manager | ID = 7022
Description =
 
 
< End of report >
--- --- ---

markusg 06.12.2012 22:36
Hatte noch nen post geschrieben, bitte Beantworten, wir haben uns da überschnitten

Nugg 06.12.2012 22:37
Log
Version der Signaturdatenbank: 7086 (20120425)
Datum: 06.12.2012 Uhrzeit: 10:22:24
Geprüfte Laufwerke, Ordner und Dateien: Arbeitsspeicher;C:\Bootsektor;C:\
Bootsektor von Laufwerk C: - Fehler beim Öffnen [4]
C:\pagefile.sys - Fehler beim Öffnen [4]
C:\Program Files\InstallShield Installation Information\{2063C2E8-3812-4BBD-9998-6610F80C1DD4}\setup.ilg - Fehler beim Öffnen [4]
C:\Program Files\Picasa2\buttons\{376B3C36-5E42-4947-9A4C-7A5E3ACFCE10}.pbz - Fehler beim Öffnen [4]
C:\Program Files\Picasa2\buttons\{C6C2F6F8-6701-4544-9776-9E60F8FE8642}.pbz - Fehler beim Öffnen [4]
C:\Program Files\Picasa2\buttons\{DA2A6F7F-4715-4429-88E1-069A163406AA}.pbz - Fehler beim Öffnen [4]
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Engine/loading.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/BackContent.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/BackContent.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/BackList.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/BackList.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/Close_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/Close_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/Close_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/Close_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/frame/Bottom.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/frame/frame.ads - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/frame/Left.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/frame/Right.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/frame/Top.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/Titlebar.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = Help/Titlebar.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/back.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/back.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt/back.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt/back.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt/file.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt/folder_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt/folder_1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt_c1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt_h1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Inhalt_n1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Lesezeichen_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Lesezeichen_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Lesezeichen_c1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Lesezeichen_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Lesezeichen_h1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Lesezeichen_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Lesezeichen_n1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/LZ/AlleLoeschen_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/LZ/AlleLoeschen_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/LZ/AlleLoeschen_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/LZ/AlleLoeschen_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/LZ/back.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/LZ/back.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen/back.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen/back.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen/Los_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen/Los_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen/Los_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen/Los_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen_c1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen_h1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Left/Suchen_n1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/back.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/back.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Help_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Help_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Help_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Help_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/LZ_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/LZ_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/LZ_c1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/LZ_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/LZ_h1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/LZ_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/LZ_n1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Move_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Move_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Move_c1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Move_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Move_h1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Move_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Move_n1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/PageNext_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/PageNext_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/PageNext_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/PageNext_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/PagePrev_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/PagePrev_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/PagePrev_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/PagePrev_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Print_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Print_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Print_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Print_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectPict_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectPict_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectPict_c1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectPict_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectPict_h1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectPict_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectPict_n1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectText_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectText_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectText_c1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectText_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectText_h1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectText_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/SelectText_n1.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Zoom_0.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Zoom_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Zoom_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/PDF/Zoom_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysClose_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysClose_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysClose_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysMax_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysMax_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysMax_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysMin_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysMin_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysMin_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysRest_c.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysRest_h.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Titlebar/SysRest_n.bmp - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Top.asi - Fehler - Datei ist passwortgeschützt
C:\Program Files\USM\Konz 2012\Data\UI.aim = ZIP = MainWnd/Top.bmp - Fehler - Datei ist passwortgeschützt
C:\Users\Fuad\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000095 = GZIP = f_000095 - Archiv beschädigt
C:\Users\Fuad\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0005e0 = CWS = file.swf - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Users\Fuad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\5ZDXVTOW\7ed8c543-5e8b-404b-9669-6d988eb580bc[1].swf = CWS = file.swf - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Users\ole\AppData\Local\Microsoft\Windows Mail\Local Folders\Inbox\397609FE-00000001.eml = MIME - - OK (eingebettete Archive NICHT geprüft)
C:\Users\ole\AppData\Local\Temp\wlsidten.dll - Variante von Win32/Kryptik.APXP Trojaner - Gesäubert durch Löschen - in Quarantäne kopiert [1]
C:\Users\ole\AppData\Local\Temp\nsxF788.tmp\nscF93F.tmp\pack.exe = 7ZIP = - Fehler beim Lesen des Archivs
C:\Users\ole\AppData\Local\Temp\{CEB77ED5-6922-41F6-AD53-0456EA411AC4}\GoogleUpdateHelper.msi = MSI = required.cab = CAB - Fehler beim Lesen des Archivs
C:\Users\ole\AppData\Local\Temp\{ECA92AA8-6123-4F44-ADFC-7D187A503494}\GoogleUpdateHelper.msi = MSI = required.cab = CAB - Fehler beim Lesen des Archivs
C:\Users\ole\Documents\Unterlagen\Duplex Scanning in Vascular Disorders, 3rd ed_078172631X.chm = CHM = ::DataSpace/Storage/MSCompressed/Content - Fehler beim Lesen des Archivs
C:\Users\ole\Downloads\attachment = MIME - - OK (eingebettete Archive NICHT geprüft)
C:\Users\ole\Downloads\attachment (1) = MIME - - OK (eingebettete Archive NICHT geprüft)
C:\Windows\Logs\CBS\CBS.log - Fehler beim Öffnen [4]
C:\Windows\Logs\CBS\CBS.persist.log - Fehler beim Öffnen [4]
C:\Windows\Logs\DPX\setupact.log - Fehler beim Öffnen [4]
C:\Windows\Logs\DPX\setuperr.log - Fehler beim Öffnen [4]
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.config - Fehler beim Öffnen [4]
C:\Windows\Panther\UnattendGC\diagerr.xml - Fehler beim Öffnen [4]
C:\Windows\Panther\UnattendGC\diagwrn.xml - Fehler beim Öffnen [4]
C:\Windows\Panther\UnattendGC\setupact.log - Fehler beim Öffnen [4]
C:\Windows\Panther\UnattendGC\setuperr.log - Fehler beim Öffnen [4]
C:\Windows\security\database\secedit.sdb - Fehler beim Öffnen [4]
C:\Windows\SoftwareDistribution\Download\02e8388e8f4a3293701cabf02ba53a72\BIT9BFB.tmp = CAB = powerpointhelp-de-de.msp - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\0aa3ef2f0c8b6eedf450a9dff1fe028e\BITB88.tmp = CAB = mainwwsp3.msp - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\0aa3ef2f0c8b6eedf450a9dff1fe028e\BITB88.tmp = CAB = mainwwsp3.xml - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\68ca58b6d38ec3344e7640ce64c218bb\BIT972A.tmp = CAB = wordhelp-de-de.msp - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\7212c7d6ad735769090ead613d22747c\BIT8E8.tmp = CAB = mainmuisp3-de-de.msp - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\8fdc1e23a8119907ddfd448e11e03863\BIT5FB.tmp = CAB = clientsharedmuisp3-de-de.msp - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\a85dcdc930a22102c245c4ee1e7ac95a\BITEF3.tmp = CAB = proofsp3-de-de.msp - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\a85dcdc930a22102c245c4ee1e7ac95a\BITEF3.tmp = CAB = proofsp3-de-de.xml - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\b5b917bd0413d0c148733046281a854c\BIT1183.tmp = CAB = proofsp3-en-us.msp - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\SoftwareDistribution\Download\c2bc17054aa3f23e666aa3ca587df0cf\BIT9352.tmp = CAB = excelhelp-de-de.msp - Archiv beschädigt - Datei kann nicht extrahiert werden
C:\Windows\System32\restore\MachineGuid.txt - Fehler beim Öffnen [4]
C:\Windows\System32\sysprep\Panther\diagerr.xml - Fehler beim Öffnen [4]
C:\Windows\System32\sysprep\Panther\diagwrn.xml - Fehler beim Öffnen [4]
C:\Windows\System32\sysprep\Panther\setupact.log - Fehler beim Öffnen [4]
C:\Windows\System32\sysprep\Panther\setuperr.log - Fehler beim Öffnen [4]
C:\Windows\System32\wbem\AutoRecover\3460B7617E0429A960E481B197F238A3.mof - Fehler beim Öffnen [4]
C:\Windows\System32\wbem\AutoRecover\75054C3771DF289038069A9BB1C1FB6E.mof - Fehler beim Öffnen [4]
C:\Windows\System32\wbem\AutoRecover\7BDE76979585395D59B5DA1D62E63C50.mof - Fehler beim Öffnen [4]
C:\Windows\System32\wbem\AutoRecover\DFB9AD54AC2D3B8122567AAD3BF3EB7F.mof - Fehler beim Öffnen [4]
C:\Windows\System32\wbem\AutoRecover\E478A5DB75C9721E744C05D78DBACFD3.mof - Fehler beim Öffnen [4]
C:\Windows\System32\wbem\AutoRecover\F644552872028BB5127A6F0E7B587070.mof - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Application.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\DFS Replication.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\HardwareEvents.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Internet Explorer.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Key Management Service.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Media Center.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PLA%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-DriverFrameworks-UserMode%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Help%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Leak-Diagnostic%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\ODiag.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\OSession.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Security.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\Setup.evtx - Fehler beim Öffnen [4]
C:\Windows\System32\winevt\Logs\System.evtx - Fehler beim Öffnen [4]
C:\Windows\Tasks\Adobe Flash Player Updater.job - Fehler beim Öffnen [4]
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job - Fehler beim Öffnen [4]
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job - Fehler beim Öffnen [4]
C:\Windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.16386_none_cef7ceb03914a67f\dnary.xsd - Fehler beim Öffnen [4]
Geprüfte Objekte: 343624
Erkannte Bedrohungen: 1
Anzahl gesäuberter Objekte: 1
Abgeschlossen: 11:50:34 Benötigte Zeit: 5290 Sek. (01:28:10)

Hinweise:
[1] Objekt wurde gelöscht. Es enthielt ausschließlich Viruscode.
[4] Objekt kann nicht geöffnet werden. Möglicherweise in Benutzung durch eine andere Anwendung oder das Betriebssystem.

markusg 06.12.2012 22:42
versuch mal die reperatur anleitungen
http://www.trojaner-board.de/115551-...e-version.html


Alle Zeitangaben in WEZ +1. Es ist jetzt 02:29 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131