Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Keylogger ? (https://www.trojaner-board.de/92843-keylogger.html)

pauls-mami 14.11.2010 16:28
Keylogger ?
 
Hallo Ihr lieben, ich hab seit kurzem nen keylogger drauf der mir probleme bereitet, sprich mein wow account wurde gehackt und ich musste den nun freezen, was ja aber nur das geringste problem is. weder kaspersky noch sophos fanden was. Hab dann malwarebytes gezogen und der fand auch was, das ich direkt gekillt hab, glaub ich. Hier nun mal meine Logfiles und ich hoffe, ihr könnt mir helfen.
OTL logfile created on: 14.11.2010 15:31:57 - Run 2
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\***\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 66,00% Memory free
8,00 Gb Paging File | 7,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 596,17 Gb Total Space | 522,52 Gb Free Space | 87,65% Space Free | Partition Type: NTFS
Unable to calculate disk information.
Drive E: | 74,53 Gb Total Space | 74,36 Gb Free Space | 99,77% Space Free | Partition Type: NTFS

Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Programme\iTunesHelper.exe File not found
PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\dgdersvc.exe (Devguru Co., Ltd.)
PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe ()
PRC - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (Creative Technology Ltd)
PRC - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)
PRC - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
PRC - C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)


========== Modules (SafeList) ==========

MOD - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (dgdersvc) -- C:\Windows\SysWOW64\dgdersvc.exe (Devguru Co., Ltd.)
SRV - (AVP) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Creative Audio Engine Licensing Service) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe (Creative Labs)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (NMSAccess) -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe ()
SRV - (CTAudSvcService) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (Creative Technology Ltd)
SRV - (BCUService) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)
SRV - (GEST Service) -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe ()
SRV - (LBTServ) -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (MEMSWEEP2) -- C:\Windows\SysNative\8D19.tmp File not found
DRV:64bit: - (dgderdrv) -- C:\Windows\SysNative\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV:64bit: - (TFsExDisk) -- C:\Windows\SysNative\drivers\TFsExDisk.sys (Teruten Inc)
DRV:64bit: - (ssadmdm) -- C:\Windows\SysNative\drivers\ssadmdm.sys (MCCI Corporation)
DRV:64bit: - (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) -- C:\Windows\SysNative\drivers\ssadbus.sys (MCCI Corporation)
DRV:64bit: - (ssadmdfl) SAMSUNG Android USB Modem (Filter) -- C:\Windows\SysNative\drivers\ssadmdfl.sys (MCCI Corporation)
DRV:64bit: - (KLIF) -- C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab)
DRV:64bit: - (KLIM6) -- C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab)
DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)
DRV:64bit: - (KLBG) -- C:\Windows\SysNative\drivers\klbg.sys (Kaspersky Lab)
DRV:64bit: - (klmouflt) -- C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab)
DRV:64bit: - (kl1) -- C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (skfiltv) -- C:\Windows\SysNative\drivers\skfiltv.sys (Creative Technology Ltd.)
DRV - (gdrv) -- C:\Windows\gdrv.sys (Windows (R) Server 2003 DDK provider)

Weiter gehts

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 5111

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

14.11.2010 14:59:36
mbam-log-2010-11-14 (14-59-36).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Durchsuchte Objekte: 310652
Laufzeit: 1 Stunde(n), 31 Minute(n), 15 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 11

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
E:\Dokumente und Einstellungen\Bibs\Anwendungsdaten\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Quarantined and deleted successfully.
C:\Program Files (x86)\AthCopyHook.dll (Spyware.OnlineGames) -> Delete on reboot.
C:\Program Files (x86)\BPP.dll (Spyware.OnlineGames) -> Delete on reboot.
C:\Program Files (x86)\BTBIP.dll (Spyware.OnlineGames) -> Delete on reboot.
C:\Program Files (x86)\FolderViewImpl.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\Program Files (x86)\goep.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\Program Files (x86)\goep_bpp.dll (Spyware.OnlineGames) -> Delete on reboot.
C:\Program Files (x86)\goep_single.dll (Spyware.OnlineGames) -> Delete on reboot.
C:\Program Files (x86)\Handsfree.dll (Spyware.OnlineGames) -> Delete on reboot.
C:\Program Files (x86)\RfcommLib.dll (Spyware.OnlineGames) -> Delete on reboot.
C:\Program Files (x86)\Sync.dll (Spyware.OnlineGames) -> Delete on reboot.

MfG pausmami

markusg 14.11.2010 16:32
gibts nen grund dafür das wir nur n unvollständiges otl log bekommen?
otl wie folgt ausführen
ootl:
Systemscan mit OTL
download otl:
http://filepony.de/download-otl/

Doppelklick auf die OTL.exe
(user von Windows 7 und Vista: Rechtsklick als Administrator ausführen)
1. Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
2. Hake an "scan all users"
3. Unter "Extra Registry wähle:
"Use Safelist" "LOP Check" "Purity Check"
4. Kopiere in die Textbox:
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
5. Klicke "Scan"
6. 2 reporte werden erstellt:
OTL.Txt
Extras.Txt
beide posten.

pauls-mami 14.11.2010 16:35
sry <.< steh etwas neben mir grad....OTL Logfile:
Code:
OTL logfile created on: 14.11.2010 15:31:57 - Run 2
OTL by OldTimer - Version 3.2.17.3    Folder = C:\Users\***\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 66,00% Memory free
8,00 Gb Paging File | 7,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 596,17 Gb Total Space | 522,52 Gb Free Space | 87,65% Space Free | Partition Type: NTFS
Unable to calculate disk information.
Drive E: | 74,53 Gb Total Space | 74,36 Gb Free Space | 99,77% Space Free | Partition Type: NTFS
 
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Programme\iTunesHelper.exe File not found
PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\dgdersvc.exe (Devguru Co., Ltd.)
PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe ()
PRC - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (Creative Technology Ltd)
PRC - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)
PRC - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
PRC - C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (dgdersvc) -- C:\Windows\SysWOW64\dgdersvc.exe (Devguru Co., Ltd.)
SRV - (AVP) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Creative Audio Engine Licensing Service) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe (Creative Labs)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (NMSAccess) -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe ()
SRV - (CTAudSvcService) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe (Creative Technology Ltd)
SRV - (BCUService) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)
SRV - (GEST Service) -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe ()
SRV - (LBTServ) -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (MEMSWEEP2) -- C:\Windows\SysNative\8D19.tmp File not found
DRV:64bit: - (dgderdrv) -- C:\Windows\SysNative\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV:64bit: - (TFsExDisk) -- C:\Windows\SysNative\drivers\TFsExDisk.sys (Teruten Inc)
DRV:64bit: - (ssadmdm) -- C:\Windows\SysNative\drivers\ssadmdm.sys (MCCI Corporation)
DRV:64bit: - (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) -- C:\Windows\SysNative\drivers\ssadbus.sys (MCCI Corporation)
DRV:64bit: - (ssadmdfl) SAMSUNG Android USB Modem (Filter) -- C:\Windows\SysNative\drivers\ssadmdfl.sys (MCCI Corporation)
DRV:64bit: - (KLIF) -- C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab)
DRV:64bit: - (KLIM6) -- C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab)
DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)
DRV:64bit: - (KLBG) -- C:\Windows\SysNative\drivers\klbg.sys (Kaspersky Lab)
DRV:64bit: - (klmouflt) -- C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab)
DRV:64bit: - (kl1) -- C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (skfiltv) -- C:\Windows\SysNative\drivers\skfiltv.sys (Creative Technology Ltd.)
DRV - (gdrv) -- C:\Windows\gdrv.sys (Windows (R) Server 2003 DDK provider)
DRV - (dgderdrv) -- C:\Windows\SysWOW64\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV - (TFsExDisk) -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys (Teruten Inc)
DRV - (StarOpen) -- C:\Windows\SysWow64\drivers\StarOpen.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = ICQ.com Suche
IE - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN, Messenger und Hotmail sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN
IE - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E6 15 BD 47 AF 5D CB 01  [binary data]
IE - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2010.02.19 21:24:57 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\ievkbd.dll (Kaspersky Lab)
O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Foxit Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O3 - HKLM\..\Toolbar: (Foxit Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Gutscheinmieze) - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - C:\Users\Bianca\AppData\Roaming\Gutscheinmieze\toolbar.dll (Synatix GmbH)
O3 - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\..\Toolbar\WebBrowser: (Foxit Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-3301580703-939605787-2858509600-1003\..\Toolbar\WebBrowser: (Gutscheinmieze) - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - C:\Users\***\AppData\Roaming\Gutscheinmieze\toolbar.dll (Synatix GmbH)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\BtvStack.exe ()
O4:64bit: - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Programme\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Skytel] C:\Programme\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [BCU] C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [GEKKOWBuch] C:\Program Files (x86)\tulox\WBuch.exe (GEKKO Software GmbH)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunesHelper.exe (Apple Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3301580703-939605787-2858509600-1003..\Run: [KiesTrayAgent]  File not found
O4 - HKU\S-1-5-21-3301580703-939605787-2858509600-1003..\Run: [RESTART_STICKY_NOTES] C:\Windows\SysWow64\StikyNot.exe File not found
O4 - HKU\S-1-5-21-3301580703-939605787-2858509600-1003..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Bianca\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8:64bit: - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O9:64bit: - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab)
O9:64bit: - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15112/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll (Kaspersky Lab)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll (Kaspersky Lab)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:64bit: - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.11.14 15:18:34 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2010.11.14 12:40:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Malwarebytes
[2010.11.14 12:39:39 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.11.14 12:39:38 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.11.14 12:39:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010.11.14 12:39:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.11.14 12:39:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip
[2010.11.14 12:38:20 | 000,000,000 | ---D | C] -- C:\Users\Public\Desktop\MFtools
[2010.11.14 11:21:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2010.11.14 11:21:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2010.11.14 11:19:29 | 016,406,410 | ---- | C] (Safer Networking Limited                                    ) -- C:\Users\***\Desktop\spybotsd162.exe
[2010.11.13 22:29:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sophos
[2010.11.11 20:27:30 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\aufhandy
[2010.11.11 20:18:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\System32
[2010.11.08 07:57:32 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\Samsung
[2010.11.08 07:55:53 | 000,159,208 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadmdm.sys
[2010.11.08 07:55:53 | 000,125,416 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadbus.sys
[2010.11.08 07:55:53 | 000,016,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadmdfl.sys
[2010.11.08 07:55:53 | 000,013,800 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadwhnt.sys
[2010.11.08 07:55:53 | 000,013,800 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadwh.sys
[2010.11.08 07:55:53 | 000,013,288 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadcmnt.sys
[2010.11.08 07:55:53 | 000,013,288 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadcm.sys
[2010.11.08 07:54:45 | 000,020,480 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\FsExService64.Exe
[2010.11.08 07:54:45 | 000,016,392 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\drivers\TFsExDisk.Sys
[2010.11.08 07:54:45 | 000,016,392 | ---- | C] (Teruten Inc) -- C:\Windows\SysNative\drivers\TFsExDisk.sys
[2010.11.08 07:53:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution
[2010.11.08 07:53:16 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Samsung
[2010.11.08 07:53:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2010.11.08 07:53:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MarkAny
[2010.11.08 07:51:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Samsung
[2010.11.08 07:51:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Samsung
[2010.11.01 15:25:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\tulox
[2010.10.28 06:50:38 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2010.10.27 16:10:19 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2010.10.27 16:10:19 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2010.10.27 16:10:19 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2010.10.27 16:10:19 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2010.10.27 16:10:19 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2010.10.27 16:10:19 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2010.10.27 16:10:19 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2010.10.27 16:10:14 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2010.10.26 20:15:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQ6Toolbar
[2010.10.26 20:15:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Mozilla
[2010.10.26 20:15:35 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2010.10.26 20:15:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\AOL
[2010.10.22 15:23:48 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\rezeptsammlung
[2010.09.24 01:10:56 | 000,573,736 | ---- | C] (Apple Inc.) -- C:\Programme\iTunesPhotoProcessor.exe
[2010.09.24 01:10:56 | 000,294,688 | ---- | C] (Apple Inc.) -- C:\Programme\iTunesOutlookAddIn.dll
[2010.09.24 01:10:52 | 000,421,160 | ---- | C] (Apple Inc.) -- C:\Programme\iTunesHelper.exe
[2010.09.24 01:10:52 | 000,387,368 | ---- | C] (Apple Inc.) -- C:\Programme\iTunesAdmin.dll
[2010.09.24 01:10:52 | 000,173,344 | ---- | C] (Apple Inc.) -- C:\Programme\iTunesHelper.dll
[2010.09.24 01:10:48 | 009,777,448 | ---- | C] (Apple Inc.) -- C:\Programme\iTunes.exe
[2010.09.24 01:10:42 | 018,710,816 | ---- | C] (Apple Inc.) -- C:\Programme\iTunes.dll
[2010.09.24 01:10:42 | 000,726,304 | ---- | C] (Gracenote, Inc.) -- C:\Programme\gnsdk_sdkmanager.dll
[2010.09.24 01:10:42 | 000,259,360 | ---- | C] (Gracenote, Inc.) -- C:\Programme\gnsdk_submit.dll
[2010.09.24 01:10:42 | 000,197,920 | ---- | C] (Gracenote, Inc.) -- C:\Programme\gnsdk_musicid.dll
[2010.09.24 01:10:42 | 000,111,912 | ---- | C] (Apple Inc.) -- C:\Programme\ITDetector.ocx
[2009.10.28 00:09:10 | 000,159,232 | ---- | C] (TODO: <Company name>) -- C:\Program Files (x86)\BtvAppExt.dll
[2009.10.28 00:08:18 | 000,258,560 | ---- | C] (Atheros) -- C:\Program Files (x86)\FileTransfer.dll
[2009.10.28 00:05:56 | 002,127,360 | ---- | C] (TODO: <Company name>) -- C:\Program Files (x86)\OutLookLib.dll
[2009.10.28 00:03:32 | 000,139,264 | ---- | C] (Atheros) -- C:\Program Files (x86)\SkypeAgent.dll
[2009.10.28 00:02:14 | 000,149,504 | ---- | C] (Atheros) -- C:\Program Files (x86)\BtObexFt.dll
[2009.10.28 00:02:04 | 000,180,224 | ---- | C] (Atheros) -- C:\Program Files (x86)\BtFileStore.dll
[2009.10.27 03:08:40 | 000,069,632 | ---- | C] (Atheros) -- C:\Program Files (x86)\mpst.dll
[2009.08.21 01:14:20 | 000,474,112 | ---- | C] (Atheros) -- C:\Program Files (x86)\nktwab.dll
 
========== Files - Modified Within 30 Days ==========
 
[2010.11.14 15:18:36 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2010.11.14 15:09:38 | 000,018,336 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.11.14 15:09:38 | 000,018,336 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.11.14 15:08:43 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.11.14 15:08:43 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2010.11.14 15:08:43 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.11.14 15:08:43 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2010.11.14 15:08:43 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.11.14 15:02:11 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys
[2010.11.14 15:02:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.11.14 15:02:02 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2010.11.14 12:39:42 | 000,001,046 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.14 12:34:53 | 000,471,642 | ---- | M] () -- C:\Users\***\Desktop\Load.exe
[2010.11.14 11:21:09 | 000,001,295 | ---- | M] () -- C:\Users\***\Desktop\Spybot - Search & Destroy.lnk
[2010.11.14 11:19:57 | 016,406,410 | ---- | M] (Safer Networking Limited                                    ) -- C:\Users\Bianca\Desktop\spybotsd162.exe
[2010.11.12 18:41:21 | 000,000,592 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2010.11.11 19:55:23 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010.11.11 07:04:37 | 001,967,725 | ---- | M] () -- C:\Users\***\Desktop\GT-I5800_UM_Open_Ger_Rev.1.0_100716_cms.pdf
[2010.11.08 07:57:17 | 000,002,000 | ---- | M] () -- C:\Users\Public\Desktop\Samsung Kies.lnk
[2010.11.08 07:52:06 | 000,002,006 | ---- | M] () -- C:\aqua_bitmap.cpp
[2010.11.02 06:32:38 | 000,419,336 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.11.01 15:26:33 | 000,001,130 | ---- | M] () -- C:\Users\***\Desktop\tulox-Wörterbuch.lnk
[2010.11.01 15:26:33 | 000,001,102 | ---- | M] () -- C:\Users\***\Desktop\tulox.lnk
[2010.10.22 15:22:33 | 000,000,425 | ---- | M] () -- C:\Windows\BRWMARK.INI
[2010.10.22 15:22:33 | 000,000,027 | ---- | M] () -- C:\Windows\BRPP2KA.INI
[2010.10.20 20:56:45 | 000,001,892 | ---- | M] () -- C:\Users\***\Desktop\Maus- und Tastatureinstellungen.lnk
 
========== Files Created - No Company Name ==========
 
[2010.11.14 12:39:42 | 000,001,046 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.14 12:34:53 | 000,471,642 | ---- | C] () -- C:\Users\***\Desktop\Load.exe
[2010.11.14 11:21:09 | 000,001,295 | ---- | C] () -- C:\Users\***\Desktop\Spybot - Search & Destroy.lnk
[2010.11.11 19:55:23 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010.11.11 07:04:31 | 001,967,725 | ---- | C] () -- C:\Users\***\Desktop\GT-I5800_UM_Open_Ger_Rev.1.0_100716_cms.pdf
[2010.11.08 07:57:17 | 000,002,000 | ---- | C] () -- C:\Users\Public\Desktop\Samsung Kies.lnk
[2010.11.08 07:51:04 | 000,002,006 | ---- | C] () -- C:\aqua_bitmap.cpp
[2010.11.01 15:26:33 | 000,001,130 | ---- | C] () -- C:\Users\***\Desktop\tulox-Wörterbuch.lnk
[2010.11.01 15:26:33 | 000,001,102 | ---- | C] () -- C:\Users\***\Desktop\tulox.lnk
[2010.11.01 15:25:33 | 000,198,864 | ---- | C] () -- C:\Windows\SysWow64\Tahoma.ttf
[2010.11.01 15:25:33 | 000,195,956 | ---- | C] () -- C:\Windows\SysWow64\Tahomabd.ttf
[2010.10.22 15:22:33 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2010.10.22 15:22:33 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2010.10.16 22:18:01 | 000,001,892 | ---- | C] () -- C:\Users\***\Desktop\Maus- und Tastatureinstellungen.lnk
[2010.09.22 22:02:08 | 000,064,083 | ---- | C] () -- C:\Programme\Acknowledgements.rtf
[2010.09.15 09:41:54 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2010.09.15 09:41:54 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2010.09.15 09:41:54 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2010.09.15 09:41:54 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2010.09.10 08:55:42 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.07.30 19:00:52 | 000,128,512 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2010.07.30 19:00:52 | 000,069,120 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2010.07.18 18:16:57 | 000,004,608 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.04 10:14:17 | 000,007,168 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys
[2010.01.06 08:47:09 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2009.10.28 10:14:32 | 000,016,384 | ---- | C] () -- C:\Program Files (x86)\AdminTools.exe
[2009.10.28 00:09:44 | 000,388,608 | ---- | C] () -- C:\Program Files (x86)\BtvStack.exe
[2009.10.28 00:02:54 | 000,011,264 | ---- | C] () -- C:\Program Files (x86)\Imaging.dll
[2009.10.28 00:02:26 | 000,090,112 | ---- | C] () -- C:\Program Files (x86)\atheros Outlook Addin.dll
[2009.08.28 14:08:00 | 005,857,779 | ---- | C] () -- C:\Program Files (x86)\E4945_USB-BT211_manual_vista.pdf
[2009.08.21 01:14:04 | 000,009,484 | ---- | C] () -- C:\Program Files (x86)\FILECOPY.AVI
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.01.14 20:40:56 | 000,030,238 | ---- | C] () -- C:\Program Files (x86)\bluetooth.ico
[2008.09.19 02:49:26 | 000,001,209 | ---- | C] () -- C:\Windows\skSPcfg.ini
[2008.09.19 00:49:24 | 000,000,381 | ---- | C] () -- C:\Windows\skMCcfg.ini
 
========== LOP Check ==========
 
[2010.02.22 16:12:00 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Acreon
[2010.04.04 10:14:25 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Canneverbe Limited
[2010.07.26 16:02:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.07.29 22:06:02 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Foxit
[2010.07.29 22:06:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Foxit Software
[2010.09.26 21:19:43 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Gutscheinmieze
[2010.06.25 23:10:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\IrfanView
[2010.02.19 21:35:40 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech
[2010.02.19 20:59:47 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Opera
[2010.11.08 07:53:16 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Samsung
[2010.03.19 19:50:28 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TS3Client
[2010.08.24 12:41:10 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
--- --- ---

pauls-mami 14.11.2010 16:38
OTL EXTRAS Logfile:
Code:
OTL Extras logfile created on: 14.11.2010 15:31:57 - Run 2
OTL by OldTimer - Version 3.2.17.3    Folder = C:\Users\Bianca\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 66,00% Memory free
8,00 Gb Paging File | 7,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 596,17 Gb Total Space | 522,52 Gb Free Space | 87,65% Space Free | Partition Type: NTFS
Unable to calculate disk information.
Drive E: | 74,53 Gb Total Space | 74,36 Gb Free Space | 99,77% Space Free | Partition Type: NTFS
 
Computer Name: BIANCA-PC | User Name: Bianca | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- Reg Error: Key error. File not found
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-3301580703-939605787-2858509600-1003\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" File not found
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" File not found
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" =
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{104FB32A-7CE3-4C4B-B2AA-70C613FF9DFA}" = iTunes
"{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Bluetooth Suite (64)
"{33EB1061-ABF1-4470-A540-32E97A610536}" = Apple Mobile Device Support
"{55C09FC1-D2D8-495A-BD80-D6725F0DCA58}" = Logitech GamePanel Software 3.04.137
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{BD430C50-784F-32CD-87E7-A8C47EE6107F}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{F3F18612-7B5D-4C05-86C9-AB50F6F71727}" = KhalInstallWrapper
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{5B363E1D-8C36-4458-BAE4-D5081999E094}" = Browser Configuration Utility
"{5B4383F2-37EE-4E97-AD81-F5FF76F286DA}" = OutlookAddInNet3Setup
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7ED169D4-5053-4166-93DF-53B12AE6C539}" = Energy Saver Advance B9.0730.1
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{87CC8013-56D1-43E1-A0A5-AD406B4EBA95}" = Opera 10.63
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller  Driver
"{8A809006-C25A-4A3A-9DAB-94659BCDB107}" = NVIDIA PhysX
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9D8B0949-7C47-476F-9F06-F900D3B078EA}" = Kaspersky Internet Security 2010
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}" = Kies
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AudioCS" = Creative Audio-Systemsteuerung
"Foxit Reader" = Foxit Reader
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free Studio_is1" = Free Studio version 4.8
"Free YouTube Download_is1" = Free YouTube Download 2.3
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"Gutscheinmieze - Toolbar" = Gutscheinmieze - Toolbar
"Host OpenAL" = Host OpenAL
"InstallShield_{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}" = Kies
"InstallWIX_{9D8B0949-7C47-476F-9F06-F900D3B078EA}" = Kaspersky Internet Security 2010
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PROHYBRIDR" = 2007 Microsoft Office system
"Sophos-AntiRootkit" = Sophos Anti-Rootkit 1.5.4
"tulox" = tulox
"Uninstall_is1" = Uninstall 1.0.0.1
"World of Warcraft" = World of Warcraft
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-3301580703-939605787-2858509600-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 25.10.2010 09:51:11 | Computer Name = Bianca-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 25.10.2010 10:39:43 | Computer Name = Bianca-PC | Source = Bonjour Service | ID = 100
Description =
 
Error - 25.10.2010 10:39:43 | Computer Name = Bianca-PC | Source = Bonjour Service | ID = 100
Description =
 
Error - 25.10.2010 10:39:43 | Computer Name = Bianca-PC | Source = Bonjour Service | ID = 100
Description =
 
Error - 26.10.2010 01:16:21 | Computer Name = Bianca-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 26.10.2010 01:16:21 | Computer Name = Bianca-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 26.10.2010 09:57:09 | Computer Name = Bianca-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 26.10.2010 09:57:09 | Computer Name = Bianca-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 27.10.2010 11:33:58 | Computer Name = Bianca-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 27.10.2010 11:33:58 | Computer Name = Bianca-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
[ System Events ]
Error - 18.10.2010 18:38:46 | Computer Name = Bianca-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?19.?10.?2010 um 00:37:22 unerwartet heruntergefahren.
 
Error - 19.10.2010 18:21:07 | Computer Name = Bianca-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?20.?10.?2010 um 00:19:12 unerwartet heruntergefahren.
 
Error - 20.10.2010 05:49:18 | Computer Name = Bianca-PC | Source = WMPNetworkSvc | ID = 866300
Description =
 
Error - 20.10.2010 08:35:18 | Computer Name = Bianca-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?20.?10.?2010 um 14:33:21 unerwartet heruntergefahren.
 
Error - 24.10.2010 07:44:10 | Computer Name = Bianca-PC | Source = WMPNetworkSvc | ID = 866300
Description =
 
Error - 26.10.2010 15:15:42 | Computer Name = Bianca-PC | Source = Service Control Manager | ID = 7030
Description = Der Dienst "ICQ Service" ist als interaktiver Dienst gekennzeichnet.
 Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich
 sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 
Error - 26.10.2010 15:15:44 | Computer Name = Bianca-PC | Source = Service Control Manager | ID = 7030
Description = Der Dienst "ICQ Service" ist als interaktiver Dienst gekennzeichnet.
 Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich
 sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 
Error - 27.10.2010 14:58:38 | Computer Name = Bianca-PC | Source = DCOM | ID = 10010
Description =
 
Error - 27.10.2010 14:58:38 | Computer Name = Bianca-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80080005 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme
 (KB2388210)
 
Error - 30.10.2010 11:22:29 | Computer Name = Bianca-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?30.?10.?2010 um 07:21:42 unerwartet heruntergefahren.
 
 
< End of report >
--- --- ---

markusg 14.11.2010 16:43
1. deinstaliere spybot, es stört die reinigung. pc neu starten.
2.
• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
:Files
:Commands
[purity]
[EMPTYFLASH]
[emptytemp]
[Reboot]

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort posten.


3. upgrade kaspersky 2010 auf 2011.
dann updaten und einen vollständigen scan machen, ergebniss posten

pauls-mami 14.11.2010 17:02
Vielen Dank schon mal für Ihre Mühe /bow

zu 2.


All processes killed
========== OTL ==========
========== FILES ==========
========== COMMANDS ==========

[EMPTYFLASH]

User: All Users

User: +
->Flash cache emptied: 0 bytes

User: Default

User: Default User

User: Public

User: test

Total Flash Files Cleaned = 0,00 mb


[EMPTYTEMP]

User: All Users

User: +
->Temp folder emptied: 3922416 bytes
->Temporary Internet Files folder emptied: 1651924 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: test

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 49632 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 32768 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 5,00 mb


OTL by OldTimer - Version 3.2.17.3 log created on 11142010_165359

Files\Folders moved on Reboot...
C:\Users\+\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\+\AppData\Local\Temp\~DF42FECF3628D5DC37.TMP not found!
File\Folder C:\Users\+\AppData\Local\Temp\~DF6EEF185245F7EC33.TMP not found!
File\Folder C:\Users\+\AppData\Local\Temp\~DF9AC8382C183078C2.TMP not found!
File\Folder C:\Users\+\AppData\Local\Temp\~DFA5DCA354D566EC46.TMP not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\announcement_old[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\arrow_lat_b[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\brand[1] not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\clear[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\collapse_thead[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\edit[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\ga[1].js not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\linkback_about[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\logo_main[1].jpg not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\mode_threaded[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\multiquote_off[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\paperclip[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\plagegeister-aller-art-und-deren-bekaempfung[1].htm not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\plagegeister-aller-art-und-deren-bekaempfung_ltr[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\post_new[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\quote[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\rating_4[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\search_1[1].js not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\search_index_1[1].css not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\select[1].js not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\sortasc[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\sticky[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\str[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\switchmode[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\user_online[1].gif not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\vbulletin_important[1].css not found!
File\Folder C:\Users\+\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0C9XVYU1\vbulletin_multi_quote[1].js not found!
C:\Users\Bianca\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ENMI7LRF\addons-tracker-v4[2].htm moved successfully.

Registry entries deleted on Reboot...

pauls-mami 14.11.2010 20:30
so ich hoffe das funktioniert so:
Datum: Heute (192)
14.11.2010 17:39:42 WMI x64 Helper Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:39:43 Kaspersky Internet Security Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:39:44 WMI x64 Helper Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:39:50 Kaspersky Internet Security Update Aufgabe wurde gestartet Update
14.11.2010 17:40:52 WebToolBar component Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:41:06 Internet Explorer Anti-Banner Verboten: hxxp://panther1.cpxinteractive.com/mz/SEDO_000001a.js hxxp://panther1.cpxinteractive.com/mz/SEDO_000001a.js Datenbanken
14.11.2010 17:41:07 Internet Explorer Anti-Banner Verboten: hxxp://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-sedo-08_xml&domain_name=opra.de&hl=de&channel=tmplt-retro-green%2C058824&s=opra.de&kw=Opera%20browser%2CSoftware&num_radlinks=10&dt=1289752867026&u_tz=60&u_his=3&u_h=1050&u_w=1680&frm=0 hxxp://googleads.g.doubleclick.net/apps/domainpark/domainpark.cgi?callback=_google_json_callback&output=js&client=ca-dp-sedo-08_xml&domain_name=opra.de&hl=de&channel=tmplt-retro-green%2C058824&s=opra.de&kw=Opera%20browser%2CSoftware&num_radlinks=10&dt=1289752867026&u_tz=60&u_his=3&u_h=1050&u_w=1680&frm=0 Datenbanken
14.11.2010 17:42:34 Internet Explorer Web-Anti-Virus Gepackt: UPX hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/OPERA_DLL_FILE_ID
14.11.2010 17:42:37 Internet Explorer Web-Anti-Virus Gepackt: UPX hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/OUNIANSI_DLL_FILE_ID
14.11.2010 17:42:37 Internet Explorer Web-Anti-Virus Gepackt: ASPack hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/NETSCAPE_EXE_FILE_ID
14.11.2010 17:42:41 Internet Explorer Web-Anti-Virus Gepackt: Swf2Swc hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/MessageProxy.swf
14.11.2010 17:42:41 Internet Explorer Web-Anti-Virus Gepackt: Swf2Swc hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2.swf
14.11.2010 17:42:41 Internet Explorer Web-Anti-Virus Gepackt: Swf2Swc hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2wii.swf
14.11.2010 17:42:41 Internet Explorer Web-Anti-Virus Gepackt: Swf2Swc hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2_flash9.swf
14.11.2010 17:42:55 7z Setup SFX Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:43:04 OPERA INSTALLER.EXE Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:43:27 Windows® installer Selbstschutz Verboten Öffnen C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
14.11.2010 17:43:45 Host Process for Windows Tasks Datei-Anti-Virus Gepackt: UPX C:\USERS\BIANCA\desktop\load.exe
14.11.2010 17:43:45 Host Process for Windows Tasks Datei-Anti-Virus Gepackt: PE_Patch.PECompact C:\USERS\BIANCA\desktop\otl.exe
14.11.2010 17:43:45 Host Process for Windows Tasks Datei-Anti-Virus Gepackt: PecBundle C:\USERS\BIANCA\desktop\OTL.exe/PE_Patch.PECompact
14.11.2010 17:43:45 Host Process for Windows Tasks Datei-Anti-Virus Gepackt: PECompact C:\USERS\BIANCA\desktop\OTL.exe/PE_Patch.PECompact/PecBundle
14.11.2010 17:43:52 OPERA INSTALLER.EXE Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:44:08 Windows® installer Selbstschutz Verboten Öffnen C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
14.11.2010 17:44:41 Host Process for Windows Services Datei-Anti-Virus Gepackt: PE_Patch C:\spiele\wow\BATTLE.NET.DLL
14.11.2010 17:44:48 Host Process for Windows Services Datei-Anti-Virus Gepackt: UPX C:\Program Files (x86)\irfanview\i_view32.exe
14.11.2010 17:44:52 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=60105.84217340096 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=60105.84217340096 Datenbanken
14.11.2010 17:44:53 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=25367036727590203012345678910a hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=25367036727590203012345678910a Datenbanken
14.11.2010 17:44:53 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=34119.55131220697 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=34119.55131220697 Datenbanken
14.11.2010 17:44:53 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=25367036727590203012345678910a hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=25367036727590203012345678910a Datenbanken
14.11.2010 17:44:53 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2536703672 7590203012345678910a hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2536703672 7590203012345678910a Datenbanken
14.11.2010 17:44:53 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=25367036727590203012345678910a hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=25367036727590203012345678910a Datenbanken
14.11.2010 17:44:53 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=25367036727590203012345678910a hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=25367036727590203012345678910a Datenbanken
14.11.2010 17:44:53 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=25367036727590203012345678910a hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=25367036727590203012345678910a Datenbanken
14.11.2010 17:44:53 Internet Explorer Anti-Banner Verboten: hxxp://creativeproxy.uimserv.net/?site=webde&section=webde/homepage/start/&LogoutAdProxy.service=promobox&special=promobox&pageview=ng_outer%2Cwebdehp%2Cvi_repeated hxxp://creativeproxy.uimserv.net/?site=webde&section=webde/homepage/start/&LogoutAdProxy.service=promobox&special=promobox&pageview=ng_outer%2Cwebdehp%2Cvi_repeated Datenbanken
14.11.2010 17:44:56 Internet Explorer Anti-Banner Verboten: hxxp://fips.uimserv.net/ngvar.js hxxp://fips.uimserv.net/ngvar.js Datenbanken
14.11.2010 17:45:35 Host Process for Windows Services Datei-Anti-Virus Gepackt: UPX C:\spiele\wow\Scan.dll
14.11.2010 17:45:52 Host Process for Windows Services Datei-Anti-Virus Gepackt: PE_Patch.PECompact C:\USERS\public\desktop\mftools\tfc.exe
14.11.2010 17:45:52 Host Process for Windows Services Datei-Anti-Virus Gepackt: PecBundle C:\USERS\public\desktop\mftools\TFC.exe/PE_Patch.PECompact
14.11.2010 17:45:53 Host Process for Windows Services Datei-Anti-Virus Gepackt: PECompact C:\USERS\public\desktop\mftools\TFC.exe/PE_Patch.PECompact/PecBundle
14.11.2010 17:46:26 Host Process for Windows Services Datei-Anti-Virus Gepackt: UPX C:\programdata\BLIZZARD ENTERTAINMENT\Battle.net\Cache\36\b2\36B27CD911B33C61730A8B82C8B2495FD16E8024FC3B2DDE08861C77A852941C.AUTH
14.11.2010 17:48:08 Kaspersky Internet Security Update Aufgabe wurde abgeschlossen Update
14.11.2010 17:48:25 Internet Explorer Anti-Banner Verboten: WEB.DE Logout WEB.DE Logout Datenbanken
14.11.2010 17:48:25 Internet Explorer Anti-Banner Verboten: hxxp://logout.webde.uimserv.net/favicon.ico hxxp://logout.webde.uimserv.net/favicon.ico Datenbanken
14.11.2010 17:48:35 Internet Explorer Anti-Banner Verboten: hxxp://g-ecx.images-amazon.com/images/G/03/gateway/iab/advertisement-sm-head._V192569391_.gif hxxp://g-ecx.images-amazon.com/images/G/03/gateway/iab/advertisement-sm-head._V192569391_.gif Datenbanken
14.11.2010 17:48:37 Internet Explorer Anti-Banner Verboten: hxxp://ad.de.doubleclick.net/adj/amzn.de.gw.atf;sz=300x250;bn=301128;u=253df0b7fe03438f8f4568b72bca1c08;ord=0ND302MBBST35XJWH1DH;s=i1;s=i2;s=i3;s=i4;s=i5;s=i6;s=i7;s=i8;s=i9;s=20;s=60 2;s=388;s=389;s=m1;s=u17;s=m4;s=u5;s=u9;s=u7;z=1;tile=1? hxxp://ad.de.doubleclick.net/adj/amzn.de.gw.atf;sz=300x250;bn=301128;u=253df0b7fe03438f8f4568b72bca1c08;ord=0ND302MBBST35XJWH1DH;s=i1;s=i2;s=i3;s=i4;s=i5;s=i6;s=i7;s=i8;s=i9;s=20;s=60 2;s=388;s=389;s=m1;s=u17;s=m4;s=u5;s=u9;s=u7;z=1;tile=1? Datenbanken
14.11.2010 17:48:37 Internet Explorer Anti-Banner Verboten: hxxp://ad.de.doubleclick.net/adj/amzn.de.gw.btf;sz=300x250;bn=301128;u=982c8ae36d884a0a95497a23406a8bac;ord=0ND302MBBST35XJWH1DH;s=i1;s=i2;s=i3;s=i4;s=i5;s=i6;s=i7;s=i8;s=i9;s=20;s=60 2;s=388;s=389;s=m4;s=u9;s=u7;s=m1;s=u5;s=u17;z=2;tile=3? hxxp://ad.de.doubleclick.net/adj/amzn.de.gw.btf;sz=300x250;bn=301128;u=982c8ae36d884a0a95497a23406a8bac;ord=0ND302MBBST35XJWH1DH;s=i1;s=i2;s=i3;s=i4;s=i5;s=i6;s=i7;s=i8;s=i9;s=20;s=60 2;s=388;s=389;s=m4;s=u9;s=u7;s=m1;s=u5;s=u17;z=2;tile=3? Datenbanken
14.11.2010 17:49:44 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=31464.80412187696 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=31464.80412187696 Datenbanken
14.11.2010 17:49:44 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=97018.14971731334 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=97018.14971731334 Datenbanken
14.11.2010 17:49:44 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936097665012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936097665012345678910ab Datenbanken
14.11.2010 17:49:44 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936097665012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936097665012345678910ab Datenbanken
14.11.2010 17:49:44 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936 097665012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936 097665012345678910ab Datenbanken
14.11.2010 17:49:44 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936097665012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936097665012345678910ab Datenbanken
14.11.2010 17:49:44 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=1064757936097665012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=1064757936097665012345678910ab Datenbanken
14.11.2010 17:49:44 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936097665012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=1064757936097665012345678910ab Datenbanken
14.11.2010 17:50:02 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=55712.715783525324 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=55712.715783525324 Datenbanken
14.11.2010 17:50:02 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=44309.06015313836 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=44309.06015313836 Datenbanken
14.11.2010 17:50:02 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=5295481810283422012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=5295481810283422012345678910ab Datenbanken
14.11.2010 17:50:02 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=5295481810283422012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=5295481810283422012345678910ab Datenbanken
14.11.2010 17:50:02 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=52954818 10283422012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=52954818 10283422012345678910ab Datenbanken
14.11.2010 17:50:02 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=5295481810283422012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=5295481810283422012345678910ab Datenbanken
14.11.2010 17:50:03 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=5295481810283422012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=5295481810283422012345678910ab Datenbanken
14.11.2010 17:50:03 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=5295481810283422012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_first_time&tile=5295481810283422012345678910ab Datenbanken
14.11.2010 17:50:03 Internet Explorer Anti-Banner Verboten: hxxp://creativeproxy.uimserv.net/?site=webde&section=webde/homepage/start/&LogoutAdProxy.service=promobox&special=promobox&pageview=ng_outer%2Cwebdehp%2Cvi_first_time hxxp://creativeproxy.uimserv.net/?site=webde&section=webde/homepage/start/&LogoutAdProxy.service=promobox&special=promobox&pageview=ng_outer%2Cwebdehp%2Cvi_first_time Datenbanken
14.11.2010 17:50:13 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=18298.569638926172 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=18298.569638926172 Datenbanken
14.11.2010 17:50:13 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=17049.390739634247 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=17049.390739634247 Datenbanken
14.11.2010 17:50:13 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784600402012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784600402012345678910ab Datenbanken
14.11.2010 17:50:13 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784600402012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784600402012345678910ab Datenbanken
14.11.2010 17:50:13 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784 600402012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784 600402012345678910ab Datenbanken
14.11.2010 17:50:13 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=0966383784600402012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=0966383784600402012345678910ab Datenbanken
14.11.2010 17:50:13 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784600402012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784600402012345678910ab Datenbanken
14.11.2010 17:50:13 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784600402012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0966383784600402012345678910ab Datenbanken
14.11.2010 17:50:23 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=39718.95545937992 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=39718.95545937992 Datenbanken
14.11.2010 17:50:23 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=95758.76354561824 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=95758.76354561824 Datenbanken
14.11.2010 17:50:24 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439985519012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439985519012345678910ab Datenbanken
14.11.2010 17:50:24 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439985519012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439985519012345678910ab Datenbanken
14.11.2010 17:50:24 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439 985519012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439 985519012345678910ab Datenbanken
14.11.2010 17:50:24 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=8463335439985519012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=8463335439985519012345678910ab Datenbanken
14.11.2010 17:50:24 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439985519012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439985519012345678910ab Datenbanken
14.11.2010 17:50:24 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439985519012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=8463335439985519012345678910ab Datenbanken
14.11.2010 17:50:26 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=97309.38344263793 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=97309.38344263793 Datenbanken
14.11.2010 17:50:26 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=10297.800940254253 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=10297.800940254253 Datenbanken
14.11.2010 17:50:26 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098921043012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098921043012345678910ab Datenbanken
14.11.2010 17:50:27 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098921043012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098921043012345678910ab Datenbanken
14.11.2010 17:50:27 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098 921043012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098 921043012345678910ab Datenbanken
14.11.2010 17:50:27 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=2426389098921043012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=2426389098921043012345678910ab Datenbanken
14.11.2010 17:50:27 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098921043012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098921043012345678910ab Datenbanken
14.11.2010 17:50:27 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098921043012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=2426389098921043012345678910ab Datenbanken
14.11.2010 17:50:39 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=1016.6555238035057 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=1016.6555238035057 Datenbanken
14.11.2010 17:50:39 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=78895.30759189387 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=78895.30759189387 Datenbanken
14.11.2010 17:50:39 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923567632012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923567632012345678910ab Datenbanken
14.11.2010 17:50:39 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923567632012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923567632012345678910ab Datenbanken
14.11.2010 17:50:39 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923 567632012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923 567632012345678910ab Datenbanken
14.11.2010 17:50:40 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=4253104923567632012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=4253104923567632012345678910ab Datenbanken
14.11.2010 17:50:40 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923567632012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923567632012345678910ab Datenbanken
14.11.2010 17:50:40 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923567632012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=4253104923567632012345678910ab Datenbanken
14.11.2010 17:51:01 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=18720.56305762791 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=18720.56305762791 Datenbanken
14.11.2010 17:51:01 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=69863.62837965712 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=69863.62837965712 Datenbanken
14.11.2010 17:51:01 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=007147364422803004012345678910 hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=007147364422803004012345678910 Datenbanken
14.11.2010 17:51:01 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=007147364422803004012345678910 hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=007147364422803004012345678910 Datenbanken
14.11.2010 17:51:01 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0071473644 22803004012345678910 hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=0071473644 22803004012345678910 Datenbanken
14.11.2010 17:51:01 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=007147364422803004012345678910 hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=007147364422803004012345678910 Datenbanken
14.11.2010 17:51:01 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=007147364422803004012345678910 hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=007147364422803004012345678910 Datenbanken
14.11.2010 17:51:01 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=007147364422803004012345678910 hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=007147364422803004012345678910 Datenbanken
14.11.2010 17:51:18 Internet Explorer Anti-Banner Verboten: hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=32332.351733964726 hxxp://pixelbox.uimserv.net/cgi-bin/webde/CP/264_PH;sc%3Dwebde/homepage?r=&d=32332.351733964726 Datenbanken
14.11.2010 17:51:18 Internet Explorer Anti-Banner Verboten: hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=64129.13202162629 hxxp://webdessl.ivwbox.de/cgi-bin/ivw/CP/264_PH;sc%3Dwebde/homepage?r=&d=64129.13202162629 Datenbanken
14.11.2010 17:51:18 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727404782012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=790x15&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727404782012345678910ab Datenbanken
14.11.2010 17:51:18 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727404782012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=hp_onsite&adsize=470x60&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727404782012345678910ab Datenbanken
14.11.2010 17:51:18 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727 404782012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=300x600&adsize=300x250&adsize=310x120&adsize=310x170&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727 404782012345678910ab Datenbanken
14.11.2010 17:51:18 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727404782012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&special=rectangle&adsize=310x250&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727404782012345678910ab Datenbanken
14.11.2010 17:51:18 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=9238663727404782012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&pageview=oms/&special=rectangle&adsize=310x120&params.styles=hp_promobox_html%2Chp_promobox_img&tile=9238663727404782012345678910ab Datenbanken
14.11.2010 17:51:18 Internet Explorer Anti-Banner Verboten: hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727404782012345678910ab hxxp://adclient.uimserv.net/js.ng/site=webde&section=webde/homepage/start/&category=homepage&special=popup&pageview=ng_outer&pageview=webdehp&pageview=vi_repeated&tile=9238663727404782012345678910ab Datenbanken
14.11.2010 17:52:22 Host Process for Windows Services Anti-Banner Erlaubt: hxxp://mscrl.microsoft.com/pki/mscorp/crl/mswww(4).crl hxxp://mscrl.microsoft.com/pki/mscorp/crl/mswww(4).crl Datenbanken
14.11.2010 17:52:22 Host Process for Windows Services Anti-Banner Erlaubt: hxxp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(5).crl hxxp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(5).crl Datenbanken
14.11.2010 17:54:46 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde gestartet Autostart-Objekte untersuchen
14.11.2010 17:54:47 GSVR.EXE Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:54:47 HD Audio Control Panel Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:55:07 NMSACCESSU.EXE Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:55:39 Internet Explorer Anti-Banner Verboten: WEB.DE Logout WEB.DE Logout Datenbanken
14.11.2010 17:55:40 Device Error Recovery SDK(x86) Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 17:56:19 Kaspersky Internet Security Update Aufgabe wurde gestartet Update
14.11.2010 17:57:14 Kaspersky Internet Security Update Aufgabe wurde abgeschlossen Update Keine Updates verfügbar
14.11.2010 18:00:22 COM Surrogate Datei-Anti-Virus Gepackt: WiseSFXDropper C:\Program Files (x86)\icq6toolbar\icquntoolbar.exe
14.11.2010 18:00:22 UNINSTALL.EXE Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 18:00:22 AU_.EXE Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 18:01:44 Kaspersky Internet Security Schutz-Center Der Schutz funktioniert nicht
14.11.2010 18:01:44 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde beendet Autostart-Objekte untersuchen
14.11.2010 18:03:27 Kaspersky Internet Security Anti-Banner Aufgabe wurde gestartet Anti-Banner
14.11.2010 18:03:27 Kaspersky Internet Security Firewall Aufgabe wurde gestartet Firewall
14.11.2010 18:03:27 Kaspersky Internet Security Programmkontrolle Aufgabe wurde gestartet Programmkontrolle
14.11.2010 18:03:27 Kaspersky Internet Security Datei-Anti-Virus Aufgabe wurde gestartet Datei-Anti-Virus
14.11.2010 18:03:27 Kaspersky Internet Security IM-Anti-Virus Aufgabe wurde gestartet IM-Anti-Virus
14.11.2010 18:03:27 Kaspersky Internet Security Proaktiver Schutz Aufgabe wurde gestartet Proaktiver Schutz
14.11.2010 18:03:27 Kaspersky Internet Security Web-Anti-Virus Aufgabe wurde gestartet Web-Anti-Virus
14.11.2010 18:03:27 Kaspersky Internet Security Mail-Anti-Virus Aufgabe wurde gestartet Mail-Anti-Virus
14.11.2010 18:03:27 Kaspersky Internet Security Schutz vor Netzwerkangriffen Aufgabe wurde gestartet Schutz vor Netzwerkangriffen
14.11.2010 18:03:27 Kaspersky Internet Security Anti-Spam Aufgabe wurde gestartet Anti-Spam
14.11.2010 18:04:16 Kaspersky Internet Security Schutz-Center Ihr Computer ist geschützt
14.11.2010 18:04:18 Windows Explorer Datei-Anti-Virus Gepackt: UPX C:\Program Files (x86)\irfanview\i_view32.exe
14.11.2010 18:05:01 Logitech G-series Profiler Selbstschutz Verboten Öffnen C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
14.11.2010 18:05:03 Curse Client Anti-Banner Verboten: hxxp://pixel.quantserve.com/pixel;r=254567241;fpan=0;fpa=P0-1646416450-1289752757487;ns=0;url=http%3A%2F%2Fwww.curse.com%2Faddons-tracker-v4.html;ref=;ce=1;je=1;sr=1680x1050x32;enc=n;ogl=;dst=1;et=1289754303665;tzo=-60;a=p-d2K9aGgyU-tIA hxxp://pixel.quantserve.com/pixel;r=254567241;fpan=0;fpa=P0-1646416450-1289752757487;ns=0;url=http%3A%2F%2Fwww.curse.com%2Faddons-tracker-v4.html;ref=;ce=1;je=1;sr=1680x1050x32;enc=n;ogl=;dst=1;et=1289754303665;tzo=-60;a=p-d2K9aGgyU-tIA Datenbanken
14.11.2010 18:05:04 Curse Client Anti-Banner Verboten: hxxp://b.scorecardresearch.com/b?c1=2&c2=6035118&rn=0.5136526065268632&c7=http%3A%2F%2Fwww.curse.com%2Faddons-tracker-v4.html&c3=&c4=&c5=&c6=&c10=&c15=&c16=&c8=Curse%20Client%20v4&c9=&cv=1.9 hxxp://b.scorecardresearch.com/b?c1=2&c2=6035118&rn=0.5136526065268632&c7=http%3A%2F%2Fwww.curse.com%2Faddons-tracker-v4.html&c3=&c4=&c5=&c6=&c10=&c15=&c16=&c8=Curse%20Client%20v4&c9=&cv=1.9 Datenbanken
14.11.2010 18:05:08 Kaspersky Internet Security Update Aufgabe wurde gestartet Update
14.11.2010 18:06:06 Kaspersky Internet Security Update Aufgabe wurde abgeschlossen Update Keine Updates verfügbar
14.11.2010 18:06:50 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde gestartet Vollständige Untersuchung
14.11.2010 18:10:19 Windows Explorer Datei-Anti-Virus Gepackt: PE_Patch.PECompact C:\USERS\BIANCA\desktop\otl.exe
14.11.2010 18:10:19 Windows Explorer Datei-Anti-Virus Gepackt: PecBundle C:\USERS\BIANCA\desktop\OTL.exe/PE_Patch.PECompact
14.11.2010 18:10:19 Windows Explorer Datei-Anti-Virus Gepackt: PECompact C:\USERS\BIANCA\desktop\OTL.exe/PE_Patch.PECompact/PecBundle
14.11.2010 18:10:19 Windows Explorer Datei-Anti-Virus Gepackt: UPX C:\USERS\BIANCA\desktop\load.exe
14.11.2010 18:10:19 Windows Explorer Datei-Anti-Virus Gepackt: UPX C:\USERS\BIANCA\desktop\load.exe
14.11.2010 18:11:36 Internet Explorer Anti-Banner Verboten: hxxp://partner.googleadservices.com/gampad/google_service.js hxxp://partner.googleadservices.com/gampad/google_service.js Datenbanken
14.11.2010 18:11:39 Internet Explorer Anti-Banner Verboten: hxxp://pagead2.googlesyndication.com/pagead/show_ads.js hxxp://pagead2.googlesyndication.com/pagead/show_ads.js Datenbanken
14.11.2010 18:14:08 Internet Explorer Anti-Banner Verboten: hxxp://partner.googleadservices.com/gampad/google_service.js hxxp://partner.googleadservices.com/gampad/google_service.js Datenbanken
14.11.2010 18:14:10 Internet Explorer Anti-Banner Verboten: hxxp://pagead2.googlesyndication.com/pagead/show_ads.js hxxp://pagead2.googlesyndication.com/pagead/show_ads.js Datenbanken
14.11.2010 18:14:15 Host Process for Windows Services Datei-Anti-Virus Gepackt: PE_Patch C:\spiele\wow\BATTLE.NET.DLL
14.11.2010 18:17:17 Windows Explorer Datei-Anti-Virus Gepackt: UPX C:\USERS\BIANCA\desktop\load.exe
14.11.2010 18:18:45 Realtek Voice Manager Programmkontrolle Programm wurde verschoben in Gruppe Vertrauenswürdig Bekannt aus der Datenbank für weit verbreitete Software
14.11.2010 18:23:25 Internet Explorer Web-Anti-Virus Gepackt: UPX hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/OPERA_DLL_FILE_ID
14.11.2010 18:23:26 Internet Explorer Web-Anti-Virus Gepackt: UPX hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/OUNIANSI_DLL_FILE_ID
14.11.2010 18:23:26 Internet Explorer Web-Anti-Virus Gepackt: ASPack hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/NETSCAPE_EXE_FILE_ID
14.11.2010 18:23:33 Internet Explorer Web-Anti-Virus Gepackt: Swf2Swc hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/MessageProxy.swf
14.11.2010 18:23:33 Internet Explorer Web-Anti-Virus Gepackt: Swf2Swc hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2.swf
14.11.2010 18:23:33 Internet Explorer Web-Anti-Virus Gepackt: Swf2Swc hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2wii.swf
14.11.2010 18:23:33 Internet Explorer Web-Anti-Virus Gepackt: Swf2Swc hxxp://get8.opera.com/pub/opera/win/1063/int/Opera_1063_int_Setup.exe//Opera installer.exe//Opera installer.msi//Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2_flash9.swf
14.11.2010 18:28:38 Windows Explorer Datei-Anti-Virus Gepackt: UPX C:\USERS\BIANCA\desktop\Opera_1063_int_Setup.exe/Opera installer.exe/Opera installer.msi/Data1.cab/OPERA_DLL_FILE_ID
14.11.2010 18:28:39 Windows Explorer Datei-Anti-Virus Gepackt: UPX C:\USERS\BIANCA\desktop\Opera_1063_int_Setup.exe/Opera installer.exe/Opera installer.msi/Data1.cab/OUNIANSI_DLL_FILE_ID
14.11.2010 18:28:39 Windows Explorer Datei-Anti-Virus Gepackt: ASPack C:\USERS\BIANCA\desktop\Opera_1063_int_Setup.exe/Opera installer.exe/Opera installer.msi/Data1.cab/NETSCAPE_EXE_FILE_ID
14.11.2010 18:28:44 Windows Explorer Datei-Anti-Virus Gepackt: Swf2Swc C:\USERS\BIANCA\desktop\Opera_1063_int_Setup.exe/Opera installer.exe/Opera installer.msi/Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/MessageProxy.swf
14.11.2010 18:28:45 Windows Explorer Datei-Anti-Virus Gepackt: Swf2Swc C:\USERS\BIANCA\desktop\Opera_1063_int_Setup.exe/Opera installer.exe/Opera installer.msi/Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2.swf
14.11.2010 18:28:45 Windows Explorer Datei-Anti-Virus Gepackt: Swf2Swc C:\USERS\BIANCA\desktop\Opera_1063_int_Setup.exe/Opera installer.exe/Opera installer.msi/Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2wii.swf
14.11.2010 18:28:45 Windows Explorer Datei-Anti-Virus Gepackt: Swf2Swc C:\USERS\BIANCA\desktop\Opera_1063_int_Setup.exe/Opera installer.exe/Opera installer.msi/Data1.cab/MEDIAPLAYER_UA_FILE_ID/public_html/soundmanager2_flash9.swf
14.11.2010 18:50:54 Host Process for Windows Services Datei-Anti-Virus Gepackt: PE_Patch.PECompact C:\USERS\public\desktop\mftools\tfc.exe
14.11.2010 18:50:54 Host Process for Windows Services Datei-Anti-Virus Gepackt: PecBundle C:\USERS\public\desktop\mftools\TFC.exe/PE_Patch.PECompact
14.11.2010 18:50:54 Host Process for Windows Services Datei-Anti-Virus Gepackt: PECompact C:\USERS\public\desktop\mftools\TFC.exe/PE_Patch.PECompact/PecBundle
14.11.2010 18:55:43 Host Process for Windows Services Datei-Anti-Virus Gepackt: UPX C:\programdata\BLIZZARD ENTERTAINMENT\Battle.net\Cache\36\b2\36B27CD911B33C61730A8B82C8B2495FD16E8024FC3B2DDE08861C77A852941C.AUTH
14.11.2010 18:56:12 Host Process for Windows Services Datei-Anti-Virus Gepackt: UPX C:\spiele\wow\Scan.dll
14.11.2010 18:59:38 Kaspersky Internet Security Update Aufgabe wurde gestartet Update
14.11.2010 19:05:49 Host Process for Windows Services Anti-Banner Erlaubt: hxxp://mscrl.microsoft.com/pki/mscorp/crl/mswww(4).crl hxxp://mscrl.microsoft.com/pki/mscorp/crl/mswww(4).crl Datenbanken
14.11.2010 19:05:50 Host Process for Windows Services Anti-Banner Erlaubt: hxxp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(5).crl hxxp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority(5).crl Datenbanken
14.11.2010 19:09:53 Kaspersky Internet Security Update Aufgabe wurde abgeschlossen Update
14.11.2010 19:09:53 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde gestartet Untersuchung bei Computerleerlauf
14.11.2010 19:15:04 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde abgeschlossen Vollständige Untersuchung
14.11.2010 19:59:09 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde beendet Untersuchung bei Computerleerlauf
14.11.2010 19:59:27 Windows Explorer Selbstschutz Verboten Öffnen C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
14.11.2010 20:02:19 Internet Explorer Anti-Banner Verboten: hxxp://partner.googleadservices.com/gampad/google_service.js hxxp://partner.googleadservices.com/gampad/google_service.js Datenbanken
14.11.2010 20:08:53 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde gestartet Autostart-Objekte untersuchen
14.11.2010 20:15:31 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde abgeschlossen Autostart-Objekte untersuchen
14.11.2010 20:18:23 Kaspersky Internet Security Update Aufgabe wurde gestartet Update
14.11.2010 20:19:26 Kaspersky Internet Security Update Aufgabe wurde abgeschlossen Update
14.11.2010 20:19:27 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde gestartet Untersuchung bei Computerleerlauf
14.11.2010 20:28:08 Kaspersky Internet Security Untersuchung von Objekten Aufgabe wurde beendet Untersuchung bei Computerleerlauf
14.11.2010 20:28:15 Internet Explorer Anti-Banner Verboten: hxxp://partner.googleadservices.com/gampad/google_service.js hxxp://partner.googleadservices.com/gampad/google_service.js Datenbanken
14.11.2010 20:28:31 Internet Explorer Anti-Banner Verboten: hxxp://pagead2.googlesyndication.com/pagead/show_ads.js hxxp://pagead2.googlesyndication.com/pagead/show_ads.js Datenbanken

markusg 14.11.2010 20:34
hast du auch nen kompletten scan laufen lassen?

pauls-mami 14.11.2010 20:48
jap hab ne vollständige untersuchung ausgeführt, ca 56 minuten lief der

markusg 14.11.2010 20:51
und was gefunden? das ist nicht das log der untersuchung, sondern das allgemeine denke ich, das ereigniss log.

pauls-mami 14.11.2010 20:56
schädliche objekte 0
adware und andere programme 0
Banner 98

markusg 14.11.2010 20:57
ok, da spybot evtl. die vernünftige reinigung geblockt hatt, mache mal nen update und erneut nen komplett scan. log posten.

pauls-mami 14.11.2010 21:22
also du meinst jetzt n update für malwarebytes + scan oder den kaspersky?

markusg 14.11.2010 21:27
nein, malwarebytes update und dann scan.

pauls-mami 14.11.2010 22:01
so dann hätt ich das hier :)

Malwarebytes' Anti-Malware 1.46
Malwarebytes

Datenbank Version: 5115

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

14.11.2010 21:58:49
mbam-log-2010-11-14 (21-58-49).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Durchsuchte Objekte: 246748
Laufzeit: 33 Minute(n), 0 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


Alle Zeitangaben in WEZ +1. Es ist jetzt 06:31 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131