Combofix Logfile: Code:
ComboFix 11-02-25.02 - eren 26.02.2011 16:10:05.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3959.2407 [GMT 1:00]
ausgeführt von:: c:\users\eren\Desktop\ComboFix.exe
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
((((((((((((((((((((((( Dateien erstellt von 2011-01-26 bis 2011-02-26 ))))))))))))))))))))))))))))))
.
2011-02-26 15:14 . 2011-02-26 15:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-26 14:15 . 2011-02-26 14:15 -------- d-----w- c:\users\eren\AppData\Roaming\Malwarebytes
2011-02-26 14:15 . 2010-12-20 17:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-02-26 14:15 . 2011-02-26 14:15 -------- d-----w- c:\programdata\Malwarebytes
2011-02-26 14:15 . 2011-02-26 14:15 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-02-26 14:15 . 2010-12-20 17:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-26 08:06 . 2011-02-26 08:06 -------- d-----w- c:\users\eren\AppData\Local\{FC480404-759B-4582-8CD2-C9B0A8E1BD49}
2011-02-25 21:55 . 2011-02-26 08:49 -------- d-----w- c:\users\eren\AppData\Local\Lexware
2011-02-25 21:35 . 2011-02-25 21:35 -------- d-----w- c:\users\eren\AppData\Local\Adobe
2011-02-25 21:19 . 2011-02-25 21:19 -------- d-----w- c:\program files (x86)\Smart Projects
2011-02-25 20:29 . 2011-02-25 20:29 -------- d-----w- c:\program files (x86)\MSXML 4.0
2011-02-25 12:18 . 2011-02-25 12:18 -------- d-----w- c:\users\eren\AppData\Local\{EDE2EBB6-0BFC-491D-9E6E-D43627E994CD}
2011-02-25 11:21 . 2011-02-25 11:21 -------- d-----w- c:\users\eren\AppData\Local\SoftGrid Client
2011-02-25 10:00 . 2011-02-25 10:00 -------- d-----w- c:\users\eren\AppData\Local\Nero
2011-02-25 01:53 . 2011-02-25 01:53 -------- d-----w- C:\_OTL
2011-02-25 00:34 . 2011-02-25 00:34 -------- d-----w- c:\users\eren\AppData\Roaming\Nero
2011-02-25 00:17 . 2011-02-25 00:18 -------- d-----w- c:\users\eren\AppData\Local\{26A6F3DA-946C-435F-B80B-371EACEA3A92}
2011-02-25 00:00 . 2011-02-25 10:01 -------- d-----w- c:\users\eren\AppData\Local\Ahead
2011-02-24 23:56 . 2011-02-24 23:58 -------- d-----w- c:\program files (x86)\Common Files\Nero
2011-02-24 23:56 . 2011-02-24 23:56 -------- d-----w- c:\programdata\Nero
2011-02-24 23:56 . 2011-02-24 23:56 -------- d-----w- c:\program files (x86)\Nero
2011-02-24 22:51 . 2011-02-24 22:51 -------- d-----w- c:\users\eren\AppData\Local\Windows Live Writer
2011-02-24 22:38 . 2011-02-24 22:38 -------- d-----w- c:\users\eren\AppData\Local\Diagnostics
2011-02-24 22:33 . 2011-02-24 22:33 -------- d-----w- c:\users\eren\AppData\Local\EgisTec IPS
2011-02-24 22:31 . 2011-02-25 00:30 -------- d-----w- c:\users\eren\AppData\Local\Google
2011-02-24 22:26 . 2011-02-24 22:26 65536 --sha-r- c:\windows\SysWow64\C_20285Z.dll
2011-02-24 22:19 . 2011-02-24 22:19 -------- d-----w- c:\users\eren\Impostazioni locali
2011-02-24 15:45 . 2011-02-24 15:45 -------- d-----w- c:\programdata\Microsoft Help
2011-02-23 14:30 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2011-02-23 14:30 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2011-02-23 09:57 . 2011-01-07 08:07 662528 ----a-w- c:\windows\system32\XpsPrint.dll
2011-02-23 09:57 . 2011-01-07 08:07 475648 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-23 09:57 . 2011-01-07 07:31 442880 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-02-23 09:57 . 2011-01-07 07:31 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-02-22 09:32 . 2011-01-13 10:20 7844688 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{369CB091-C2CB-4CDC-B1FA-F2872D723EA0}\mpengine.dll
2011-02-21 23:14 . 2011-02-24 21:15 -------- d-----w- c:\program files (x86)\JDownloader
2011-02-21 01:07 . 2011-02-21 01:07 -------- d-----w- c:\users\eren\AppData\Roaming\elsterformular
2011-02-21 01:05 . 2011-02-21 01:05 -------- d-----w- c:\programdata\elsterformular
2011-02-21 01:05 . 2011-02-21 01:08 -------- d-----w- c:\program files (x86)\ElsterFormular
2011-02-15 05:23 . 2011-02-15 05:23 -------- d-----w- c:\users\eren\AppData\Roaming\GameRanger
2011-02-09 10:42 . 2011-01-26 06:31 144384 ----a-w- c:\windows\system32\cdd.dll
2011-02-07 21:44 . 2010-12-08 10:53 169656 ----a-w- c:\windows\system32\drivers\ESLWireACD.sys
2011-02-07 21:44 . 2010-12-08 10:53 25528 ----a-w- c:\windows\system32\drivers\ESLvnic.sys
2011-01-30 19:02 . 2011-01-30 19:02 -------- d-----w- c:\program files (x86)\VS Revo Group
2011-01-30 18:41 . 2011-01-30 18:41 -------- d-----w- c:\program files (x86)\Common Files\DivX Shared
2011-01-30 13:57 . 2011-01-30 13:57 103864 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-05 08:43 . 2010-12-05 08:43 2560 ----a-w- c:\windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui
2010-12-05 08:43 . 2010-12-05 08:43 2560 ----a-w- c:\windows\SysWow64\drivers\de-DE\scfilter.sys.mui
2010-12-05 08:43 . 2010-12-05 08:43 5632 ----a-w- c:\windows\SysWow64\drivers\de-DE\ndiscap.sys.mui
2010-12-05 08:43 . 2010-12-05 08:43 51712 ----a-w- c:\windows\SysWow64\drivers\de-DE\tcpip.sys.mui
2010-12-05 08:43 . 2010-12-05 08:43 29696 ----a-w- c:\windows\SysWow64\drivers\de-DE\bfe.dll.mui
2010-12-05 08:43 . 2010-12-05 08:43 16896 ----a-w- c:\windows\SysWow64\drivers\de-DE\pacer.sys.mui
2010-12-05 08:23 . 2010-12-05 08:22 83120 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-12-05 00:12 . 2010-12-05 00:12 505128 ----a-w- c:\windows\SysWow64\msvcp71.dll
2010-12-05 00:12 . 2010-12-05 00:12 353576 ----a-w- c:\windows\SysWow64\msvcr71.dll
2010-12-05 00:12 . 2010-12-05 00:12 29480 ----a-w- c:\windows\SysWow64\msxml3a.dll
2010-12-04 23:58 . 2010-12-04 23:58 3 ----a-w- c:\windows\system32\PLD_Framework.cmd
.
((((((((((((((((((((((((((((( SnapShot@2011-02-25_09.25.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-10-19 14:34 . 2010-10-19 14:34 69632 c:\windows\SysWOW64\PXTTool80VC8.dll
+ 1996-10-09 16:25 . 1996-10-09 16:25 80896 c:\windows\SysWOW64\PXTREE32.DLL
+ 2010-10-19 14:34 . 2010-10-19 14:34 27648 c:\windows\SysWOW64\LXTPSW20VC8.dll
+ 2011-02-26 15:14 . 2011-02-26 15:14 13585 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
- 2011-02-25 09:23 . 2011-02-25 09:23 13585 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
- 2009-07-14 04:54 . 2011-02-25 09:24 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-02-26 15:15 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-02-26 15:15 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-02-25 09:24 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-02-26 15:15 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-02-25 09:24 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-07-13 11:21 . 2011-02-26 13:17 63008 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-02-26 13:17 32664 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2010-12-05 00:30 . 2011-02-24 11:18 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-12-05 00:30 . 2011-02-26 09:17 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-02-25 11:24 . 2011-02-26 09:17 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-02-24 11:18 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-02-26 09:17 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-12-05 00:53 . 2011-02-26 15:17 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-12-05 00:53 . 2011-02-25 09:25 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:46 . 2011-02-26 12:17 80352 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2010-12-05 00:53 . 2011-02-25 09:25 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-12-05 00:53 . 2011-02-26 15:17 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-12-05 00:53 . 2011-02-25 09:25 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-12-05 00:53 . 2011-02-26 15:17 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-12-05 00:53 . 2011-02-25 09:25 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-12-05 00:53 . 2011-02-26 15:17 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-12-05 00:53 . 2011-02-26 15:17 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-12-05 00:53 . 2011-02-25 09:25 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-02-25 20:29 . 2011-02-25 20:29 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
+ 2011-02-25 21:57 . 2011-02-25 21:57 10134 c:\windows\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
+ 2011-02-25 20:29 . 2011-02-25 20:29 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 57344 c:\windows\Installer\{6BCC7669-A863-4C24-804B-9C811C102F71}\NewShortcut2.C5C62008_87C8_4C2F_ABF4_46914027DD45.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 45056 c:\windows\Installer\{6BCC7669-A863-4C24-804B-9C811C102F71}\NewShortcut2.C3689185_4222_4F18_9E97_15FEFA5BB00F.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 57344 c:\windows\Installer\{6BCC7669-A863-4C24-804B-9C811C102F71}\NewShortcut2.306E0A24_77CC_4859_BD8E_90EF2434B1E8.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 18510 c:\windows\Installer\{6BCC7669-A863-4C24-804B-9C811C102F71}\ARPPRODUCTICON.exe
+ 2011-02-25 21:58 . 2011-02-25 21:58 81920 c:\windows\Installer\{406A89D6-09E6-4550-B370-8D376DDB56BE}\ARPPRODUCTICON.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 73728 c:\windows\Installer\{15B2BC56-D179-4450-84B9-7A8D7F4CE1B9}\NewShortcut1.E478996E_1F9C_4900_988E_F8A470FEA557.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 10134 c:\windows\Installer\{15B2BC56-D179-4450-84B9-7A8D7F4CE1B9}\ARPPRODUCTICON.exe
+ 2010-12-06 14:08 . 2011-02-25 10:07 4674 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2010-12-05 00:33 . 2011-02-26 13:17 8588 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-811191228-598741415-1951419527-1000_UserData.bin
+ 2011-02-26 15:15 . 2011-02-26 15:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-02-25 09:24 . 2011-02-25 09:24 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-02-25 09:24 . 2011-02-25 09:24 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-02-26 15:15 . 2011-02-26 15:15 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-09-21 17:01 . 2010-09-21 17:01 557056 c:\windows\SysWOW64\zvkonline80VC8.dll
+ 2010-08-29 15:42 . 2010-08-29 15:42 552960 c:\windows\SysWOW64\zvkonline70VC8.dll
+ 2010-08-31 09:19 . 2010-08-31 09:19 552960 c:\windows\SysWOW64\zvkonline65VC8.dll
+ 2010-08-31 09:44 . 2010-08-31 09:44 548864 c:\windows\SysWOW64\zvkonline60VC8.dll
+ 2001-09-06 14:34 . 2001-09-06 14:34 252328 c:\windows\SysWOW64\Olch2d32.dll
+ 2011-02-25 21:58 . 2011-02-25 21:58 232912 c:\windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe
+ 2011-02-25 21:58 . 2011-02-25 21:58 311760 c:\windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.dll
+ 2010-10-19 14:34 . 2010-10-19 14:34 110592 c:\windows\SysWOW64\LxUISettings20Native.dll
+ 2010-10-19 14:34 . 2010-10-19 14:34 135168 c:\windows\SysWOW64\LxMail30VC8.dll
+ 2010-10-19 14:34 . 2010-10-19 14:34 196608 c:\windows\SysWOW64\LxBasics91VC8.dll
+ 2006-04-21 09:08 . 2006-04-21 09:08 253952 c:\windows\SysWOW64\HtmlHelp.dll
+ 2007-05-09 15:16 . 2007-05-09 15:16 176128 c:\windows\SysWOW64\DZIP32.DLL
+ 2007-05-09 15:16 . 2007-05-09 15:16 315392 c:\windows\SysWOW64\dzactx.dll
+ 2007-05-09 15:16 . 2007-05-09 15:16 278528 c:\windows\SysWOW64\duzactx.dll
+ 2007-05-09 15:16 . 2007-05-09 15:16 143360 c:\windows\SysWOW64\DUNZIP32.DLL
+ 2011-02-25 21:58 . 2011-02-25 21:58 181760 c:\windows\system32\javaws.exe
+ 2011-02-25 21:58 . 2011-02-25 21:58 165888 c:\windows\system32\javaw.exe
+ 2011-02-25 21:58 . 2011-02-25 21:58 165888 c:\windows\system32\java.exe
+ 2011-02-25 21:58 . 2011-02-25 21:58 455680 c:\windows\system32\deploytk.dll
+ 2009-07-14 05:01 . 2011-02-26 15:14 236180 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2011-02-25 09:23 236180 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-02-25 22:14 . 2011-02-25 22:14 180224 c:\windows\Installer\{6BCC7669-A863-4C24-804B-9C811C102F71}\NewShortcut4.01E7A585_A263_4AC2_B65E_52C6640FDFB7.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 180224 c:\windows\Installer\{6BCC7669-A863-4C24-804B-9C811C102F71}\NewShortcut3.01E7A585_A263_4AC2_B65E_52C6640FDFB7.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 180224 c:\windows\Installer\{6BCC7669-A863-4C24-804B-9C811C102F71}\NewShortcut14.01E7A585_A263_4AC2_B65E_52C6640FDFB7.exe
+ 2011-02-25 22:14 . 2011-02-25 22:14 180224 c:\windows\Installer\{6BCC7669-A863-4C24-804B-9C811C102F71}\NewShortcut13.01E7A585_A263_4AC2_B65E_52C6640FDFB7.exe
+ 2011-02-25 21:57 . 2011-02-25 21:57 884736 c:\windows\assembly\GAC_MSIL\Microsoft.Web.Services3\3.0.0.0__31bf3856ad364e35\Microsoft.Web.Services3.dll
+ 2009-07-20 23:05 . 2009-07-20 23:05 1348432 c:\windows\SysWOW64\msxml4.dll
+ 2010-10-19 14:34 . 2010-10-19 14:34 4648960 c:\windows\SysWOW64\LxXtreme70VC8.dll
+ 2010-10-19 14:34 . 2010-10-19 14:34 1335296 c:\windows\SysWOW64\LXTool91VC8.dll
+ 2010-09-21 17:01 . 2010-09-21 17:01 1347584 c:\windows\SysWOW64\LXTool80VC8.dll
+ 2010-08-29 15:41 . 2010-08-29 15:41 1245184 c:\windows\SysWOW64\LXTool70VC8.dll
+ 2010-08-29 15:39 . 2010-08-29 15:39 1257472 c:\windows\SysWOW64\LXTool70NSVC8.dll
+ 2010-08-29 16:16 . 2010-08-29 16:16 1196032 c:\windows\SysWOW64\LxTool65VC8.dll
+ 2010-08-29 16:14 . 2010-08-29 16:14 1204224 c:\windows\SysWOW64\LxTool65NSVC8.dll
+ 2010-08-29 17:54 . 2010-08-29 17:54 1130496 c:\windows\SysWOW64\LxTool60VC8.dll
+ 2010-08-29 17:51 . 2010-08-29 17:51 1138688 c:\windows\SysWOW64\LXtool60NSVC8.dll
+ 2009-07-14 04:45 . 2011-02-25 21:05 3801160 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-07-14 04:45 . 2011-02-25 01:58 3801160 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2010-12-05 20:58 . 2011-02-25 01:54 5241540 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-811191228-598741415-1951419527-1000-8192.dat
+ 2010-12-05 20:58 . 2011-02-26 15:14 5241540 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-811191228-598741415-1951419527-1000-8192.dat
+ 2011-02-25 22:14 . 2010-09-15 09:58 6037504 c:\windows\Installer\LxCache\{600FFA15-9871-44B9-B1E0-6522D83E7AB8}\LEXWAREINFOSERVICE.MSI
+ 2009-07-20 23:29 . 2009-07-20 23:29 6057984 c:\windows\Installer\836c6.msi
+ 2008-09-30 20:07 . 2008-09-30 20:07 6042112 c:\windows\Installer\836bf.msi
+ 2010-09-15 09:58 . 2010-09-15 09:58 6037504 c:\windows\Installer\32d0dc.msi
+ 2010-08-16 09:39 . 2010-08-16 09:39 3882496 c:\windows\Installer\32d0ca.msi
+ 2009-06-02 12:59 . 2009-06-02 12:59 1647104 c:\windows\Installer\32d0c3.msi
+ 2009-06-18 10:46 . 2009-06-18 10:46 1305600 c:\windows\Installer\32d0bd.msi
+ 2009-07-14 02:34 . 2011-02-26 12:27 10223616 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
- 2009-07-14 02:34 . 2011-02-25 09:19 10223616 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
+ 2011-02-25 22:11 . 2010-11-02 14:53 169475584 c:\windows\Installer\LxCache\{D91AD5C4-5A00-4668-B323-0CFDEDDA45B8}\QUICKSTEUER_DELUXE.MSI
+ 2010-11-02 14:53 . 2010-11-02 14:53 169475584 c:\windows\Installer\32d0d6.msi
.
-- Snapshot auf jetziges Datum zurückgesetzt --
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-07-13 39408]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-06-22 968272]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 281768]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"LexwareInfoService"="c:\program files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe" [2010-09-15 339312]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-05 135664]
R3 ESLvnic1;ESLvnic Virtual Network 64 Bit;c:\windows\system32\DRIVERS\ESLvnic.sys [2010-12-08 25528]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-06-17 246376]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-09 834544]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2010-08-02 135336]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\McSACore.exe [2010-11-24 101048]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-04-24 483688]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-05-15 384040]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2010-06-21 131688]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-24 721768]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-24 269672]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-24 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-24 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-24 209768]
.
Inhalt des "geplante Tasks" Ordners
2011-02-26 c:\windows\Tasks\Acer Registration - Reminder Recall task.job
- c:\program files (x86)\Acer\Registration\GREG.exe [2010-04-28 02:47]
2011-02-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-05 01:07]
2011-02-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-05 01:07]
.
--------- x86-64 -----------
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"ETDWare"="%ProgramFiles%\Elantech\ETDCtrl.exe" [BU]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2011-02-25 170496]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://start.facemoods.com/?a=ddr
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_5742g&r=273612109925l0454z145v47j22903
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
FF - ProfilePath - c:\users\eren\AppData\Roaming\Mozilla\Firefox\Profiles\.default\
FF - prefs.js: browser.search.selectedEngine - Facemoods Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - prefs.js: keyword.URL - hxxp://www.google.de/search?ie=UTF-8&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: German Dictionary: de-DE@dictionaries.addons.mozilla.org - %profile%\extensions\de-DE@dictionaries.addons.mozilla.org
FF - Ext: Element Hiding Helper for Adblock Plus: elemhidehelper@adblockplus.org - %profile%\extensions\elemhidehelper@adblockplus.org
FF - Ext: FireGestures: firegestures@xuldev.org - %profile%\extensions\firegestures@xuldev.org
FF - Ext: gTranslator: jyboy.yy@gmail.com - %profile%\extensions\jyboy.yy@gmail.com
FF - Ext: FastestFox: smarterwiki@wikiatic.com - %profile%\extensions\smarterwiki@wikiatic.com
FF - Ext: Smart Stop/Reload: stop-reload@design-noir.de - %profile%\extensions\stop-reload@design-noir.de
FF - Ext: All-in-One Sidebar: {097d3191-e6fa-4728-9826-b533d755359d} - %profile%\extensions\{097d3191-e6fa-4728-9826-b533d755359d}
FF - Ext: Flagfox: {1018e4d6-728f-4b20-ad56-37578a4de76b} - %profile%\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
FF - Ext: Linkification: {35106bca-6c78-48c7-ac28-56df30b51d2a} - %profile%\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}
FF - Ext: PDF Download: {37E4D8EA-8BDA-4831-8EA1-89053939A250} - %profile%\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250}
FF - Ext: CuteMenus - Crystal SVG: {63df8e21-711c-4074-a257-b065cadc28d8} - %profile%\extensions\{63df8e21-711c-4074-a257-b065cadc28d8}
FF - Ext: Web Developer: {c45c406e-ab73-11d8-be73-000a95be3b12} - %profile%\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Download Statusbar: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} - %profile%\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
FF - Ext: Tab Mix Plus: {dc572301-7619-498c-a57d-39143191b318} - %profile%\extensions\{dc572301-7619-498c-a57d-39143191b318}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Menu Editor: {EDA7B1D7-F793-4e03-B074-E6F303317FB0} - %profile%\extensions\{EDA7B1D7-F793-4e03-B074-E6F303317FB0}
FF - Ext: SearchPreview: {EF522540-89F5-46b9-B6FE-1829E2B572C6} - %profile%\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
FF - Ext: McAfee SiteAdvisor: {B7082FAA-CB62-4872-9106-E42DD88EDE45} - c:\program files (x86)\McAfee\SiteAdvisor
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
Toolbar-Locked - (no file)
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
[HKEY_USERS\S-1-5-21-811191228-598741415-1951419527-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
[HKEY_USERS\S-1-5-21-811191228-598741415-1951419527-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx"
"ThreadingModel"="Apartment"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx"
"ThreadingModel"="Apartment"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\SysWOW64\rundll32.exe
c:\windows\SysWOW64\IoctlSvc.exe
c:\program files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
c:\program files (x86)\Launch Manager\LMworker.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2011-02-26 16:21:25 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2011-02-26 15:21
ComboFix2.txt 2011-02-25 09:30
Vor Suchlauf: 15 Verzeichnis(se), 418.929.287.168 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 418.897.100.800 Bytes frei
- - End Of File - - 30A8156336BD8CA960CD77F4F3649235
--- --- ---
Ein problem konnte die Spyware und Antvir nicht beenden :;( habs aber deaktiviert weil ich nicht wusste wie das ging |
