Home » Spyware & Browser Hijacker Support Forum » Ich bekomme diese yyy.html Popups nicht weg » Themenansicht
Ich bekomme diese yyy.html Popups nicht weg |
||
|---|---|---|
| #0
| ||
|
17.03.2006, 17:28
Member
Beiträge: 20 |
||
 
|
|
|
|
18.03.2006, 00:47
Ehrenmitglied
 Beiträge: 29434 |
#2
Suga
stelle den CleanUp genauso ein, wie hier angegeben: http://virus-protect.org/cleanup.html Kopiere diese 4 Textdateien. Sie sind nach Datum geordnet. (kopiere nur die letzten 3 Monate ab) http://virus-protect.org/datfindbat.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
18.03.2006, 04:05
Member
Themenstarter Beiträge: 20 |
#3
das mit dem CleanUp hat funktioniert, aba ich finde auf meinem Computer nichts was ich da kkopieren könnte, die Verzeichnsse sind bei mir leer.
Bitte um weitere Instruktionen ;-) MfG Suga |
|
|
|
|
|
|
18.03.2006, 16:00
Ehrenmitglied
Beiträge: 29434 |
#4
Suga
l2mfix --> wende Option 2 an..poste nach neustart + scan --> de scanreport http://virus-protect.org/l2mfix.html Zitat die Verzeichnsse sind bei mir leer.die datfindbat zeigt an: 1.Log Verzeichnis von C:\WINDOWS\system32 2.Log Verzeichnis von C:\DOKUME~1\Username\LOKALE~1\Temp 3.Log Verzeichnis von C:\WINDOWS 4.Log Verzeichnis von C:\ wenn der texteditor leer bleiben wuerde, haettest du kein Windows............... __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
18.03.2006, 16:40
Member
Themenstarter Beiträge: 20 |
#5
L2MFIX find log 010406
These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Control Panel] "Asynchronous"=dword:00000000 "DllName"="C:\\WINDOWS\\system32\\mvnol9531.dll" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\ 6c,00,00,00 "Logoff"="ChainWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Logoff"="CryptnetWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] "DLLName"="cscdll.dll" "Logon"="WinlogonLogonEvent" "Logoff"="WinlogonLogoffEvent" "ScreenSaver"="WinlogonScreenSaverEvent" "Startup"="WinlogonStartupEvent" "Shutdown"="WinlogonShutdownEvent" "StartShell"="WinlogonStartShellEvent" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] "DLLName"="wlnotify.dll" "Logon"="SCardStartCertProp" "Logoff"="SCardStopCertProp" "Lock"="SCardSuspendCertProp" "Unlock"="SCardResumeCertProp" "Enabled"=dword:00000001 "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "StartShell"="SchedStartShell" "Logoff"="SchedEventLogOff" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] "Logoff"="WLEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] "DLLName"="WlNotify.dll" "Lock"="SensLockEvent" "Logon"="SensLogonEvent" "Logoff"="SensLogoffEvent" "Safe"=dword:00000001 "MaxWait"=dword:00000258 "StartScreenSaver"="SensStartScreenSaverEvent" "StopScreenSaver"="SensStopScreenSaverEvent" "Startup"="SensStartupEvent" "Shutdown"="SensShutdownEvent" "StartShell"="SensStartShellEvent" "PostShell"="SensPostShellEvent" "Disconnect"="SensDisconnectEvent" "Reconnect"="SensReconnectEvent" "Unlock"="SensUnlockEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "Logoff"="TSEventLogoff" "Logon"="TSEventLogon" "PostShell"="TSEventPostShell" "Shutdown"="TSEventShutdown" "StartShell"="TSEventStartShell" "Startup"="TSEventStartup" "MaxWait"=dword:00000258 "Reconnect"="TSEventReconnect" "Disconnect"="TSEventDisconnect" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] "DLLName"="wlnotify.dll" "Logon"="RegisterTicketExpiredNotificationEvent" "Logoff"="UnregisterTicketExpiredNotificationEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 ********************************************************************************** useragent: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "{C9D4A159-A7D4-920F-A4DA-AE3C0AC87715}"="" ********************************************************************************** Shell Extension key: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{00022613-0000-0000-C000-000000000046}"="Eigenschaften fr Multimediadatei" "{176d6597-26d3-11d1-b350-080036a75b03}"="ICM-Scannerverwaltung" "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="NTFS-Sicherheit" "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="OLE-Eigenschaftenseite fr Dokumente" "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Shellerweiterungen fr Freigaben" "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension" "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="CPL-Erweiterung fr Grafikkarten" "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="CPL-Erweiterung fr Bildschirme" "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="CPL-Erweiterung fr Anzeigeverschiebung" "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="DS-Sicherheit" "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Kompatibilit„tsseite" "{56117100-C0CD-101B-81E2-00AA004AE837}"="Shell-Datenauszughandler" "{59099400-57FF-11CE-BD94-0020AF85B590}"="Erweiterung fr Datentr„gerkopien" "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Shellerweiterungen fr Microsoft Windows-Netzwerkobjekte" "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="ICM-Monitorverwaltung" "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="ICM-Druckerverwaltung" "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Shellerweiterungen fr die Dateikomprimierung" "{77597368-7b15-11d0-a0c2-080036af3f03}"="Shellerweiterung fr Webdrucker" "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI" "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Kontextmen fr die Verschlsselung" "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Aktenkoffer" "{88895560-9AA2-1069-930E-00AA0030EBC8}"="Erweiterung fr HyperTerminal-Icons" "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Schriftarten" "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="ICC-Profil" "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Druckersicherheit" "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Shellerweiterungen fr Freigaben" "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension" "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Krypto-PKO-Erweiterung" "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Krypto-Sign-Erweiterung" "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Netzwerkverbindungen" "{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Netzwerkverbindungen" "{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="Scanner und Kameras" "{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="Scanner und Kameras" "{905667aa-acd6-11d2-8080-00805f6596d2}"="Scanner und Kameras" "{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="Scanner und Kameras" "{83bbcbf3-b28a-4919-a5aa-73027445d672}"="Scanner und Kameras" "{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension" "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Shellerweiterungen fr Windows Script Host" "{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Microsoft Datenverknpfung" "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler" "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension" "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Geplante Tasks" "{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"="Set Program Access and Defaults" "{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension" "{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Taskleiste und Startmen" "{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Suchen" "{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Hilfe und Support" "{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Hilfe und Support" "{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ausfhren..." "{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet" "{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="E-Mail" "{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Schriftarten" "{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Verwaltung" "{596AB062-B4D2-4215-9F74-E9109B0A8153}"="Eigenschaftenseite fr vorherige Versionen" "{9DB7A13C-F208-4981-8353-73CC61AE2783}"="Vorherige Versionen" "{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler" "{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler" "{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler" "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler" "{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler" "{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor" "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Microsoft Internet Toolbar" "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="Download Status" "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Augmented Shell Folder" "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Augmented Shell Folder 2" "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy" "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Microsoft BrowserBand" "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Search Band" "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="In-pane search" "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Web Search" "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Registry Tree Options Utility" "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse" "{A08C11D2-A228-11d0-825B-00AA005B4383}"="Address EditBox" "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Microsoft AutoComplete" "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor" "{6756A641-DE71-11d0-831B-00AA005B4383}"="MRU AutoComplete List" "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Custom MRU AutoCompleted List" "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible" "{acf35015-526e-4230-9596-becbe19f0ac9}"="Track Popup Bar" "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Microsoft History AutoComplete List" "{03C036F1-A186-11D0-824A-00AA005B4383}"="Microsoft Shell Folder AutoComplete List" "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Microsoft Multiple AutoComplete List Container" "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Shell Band Site Menu" "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp" "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Shell DeskBar" "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite" "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="User Assist" "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="Global Folder Settings" "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band" "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service" "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer" "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture" "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut" "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft URL-Verlauf-Dienst" "{FF393560-C2A7-11CF-BFF4-444553540000}"="Verlauf" "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Sucheingriff" "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="IE4 Suite-Begráungsbildschirm" "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook" "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC" "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC" "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet" "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space" "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer-Band" "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{88C6C381-2E85-11D0-94DE-444553540000}"="ActiveX-Cacheordner" "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck" "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr" "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Subscription Folder" "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler" "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent" "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent" "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent" "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent" "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent" "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler" "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Shell Application Manager" "{0B124F8F-91F0-11D1-B8B5-006008059382}"="Installed Apps Enumerator" "{CFCCC7A0-A282-11D1-9082-006008059382}"="Darwin App Publisher" "{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs" "{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory" "{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}"="Autoplay for SlideShow" "{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="GDI+ Dateiminiaturansicht-Extrahierungsprogramm" "{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Zusammenfassungs-Miniaturansichthandler (DOCFILES)" "{EAB841A0-9550-11cf-8C16-00805F1408F3}"="HTML-Extrahierungsprogramm" "{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler" "{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Webpublishing-Assistent" "{add36aa8-751a-4579-a266-d66f5202ccbb}"="Bestellung von Abzgen ber das Internet" "{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Shellobjekt des Webpublishing-Assistenten" "{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Passport-Assistent" "{7A9D77BD-5403-11d2-8785-2E0420524153}"="Benutzerkonten" "{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler" "{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target" "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Channeldatei" "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Channelverknpfung" "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channelhandlerobjekt" "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu" "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties" "{692F0339-CBAA-47e6-B5B5-3B84DB604E87}"="Extensions Manager Folder" "{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview" "{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext" "{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control" "{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control" "{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control" "{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control" "{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control" "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI" "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object" "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find" "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find" "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI" "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs" "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook" "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target" "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties" "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu" "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options" "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Ordner 'Offlinedateien'" "{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler" "{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell" "{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%" "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler" "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer" "{32714800-2E5F-11d0-8B85-00AA0044F941}"="&Nach Personen..." "{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler" "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler" "{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler" "{A70C977A-BF00-412C-90B7-034C51DA2439}"="NvCpl DesktopContext Class" "{DEE12703-6333-4D4E-8F34-738C4DCC2E04}"="RecordNow! SendToExt" "{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache" "{1CDB2949-8F65-4355-8456-263E7C208A5D}"="Desktop Explorer" "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}"="Desktop Explorer Menu" "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}"="nView Desktop Context Menu" "{FFB699E0-306A-11d3-8BD1-00104B6F7516}"="Play on my TV helper" "{59850401-6664-101B-B21C-00AA004BA90B}"="Microsoft Office Binder Unbind" "{0006F045-0000-0000-C000-000000000046}"="Microsoft Outlook Custom Icon Handler" "{73B24247-042E-4EF5-ADC2-42F62E6FD654}"="ICQ Lite Shell Extension" "{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices" "{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu" "{21569614-B795-46b1-85F4-E737A8DC09AD}"="Shell Search Band" "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension" "{A5110426-177D-4e08-AB3F-785F10B4439C}"="Eigene Telefone" "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"="Shell Extension for Malware scanning" "{293BF244-E2B2-4B6C-9A16-CCB0E6705DB7}"="" "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}"="AVG7 Shell Extension" "{9F97547E-460A-42C5-AE0C-81C61FFAEBC3}"="AVG7 Find Extension" "{34E8D927-0844-4341-97DE-77B51D662492}"="" "{55D6C78A-6759-4190-9EDB-7FB5A565B23C}"="" "{F91F440B-3742-4991-9BDE-4593BE175DC7}"="" "{D250F4B8-774A-421F-907A-81A1FDC38515}"="" "{33A3AFA1-D894-4864-BCC8-1729310E6C43}"="" "{8BBECB05-8782-4053-9F1B-8288E2D1D69C}"="" "{27034623-5A7D-4FD2-B940-141CFB13FE94}"="" "{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}"="Shell Extensions for RealOne Player" "{692C4615-BD3C-435D-A836-17A7397B5D61}"="" "{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}"="" "{A5D56EAE-2281-4669-99D2-328BA0F4F768}"="" "{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}"="" ********************************************************************************** HKEY ROOT CLASSIDS: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}] @="" [HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}\InprocServer32] @="C:\\WINDOWS\\system32\\psh.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}] @="" [HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}\InprocServer32] @="C:\\WINDOWS\\system32\\dlser.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}] @="" [HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}\InprocServer32] @="C:\\WINDOWS\\system32\\didskmgr.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}] @="" [HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}] @="" [HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}\InprocServer32] @="C:\\WINDOWS\\system32\\aympvcno.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}] @="" [HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}\InprocServer32] @="C:\\WINDOWS\\system32\\ueloader.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}] @="" [HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}\InprocServer32] @="C:\\WINDOWS\\system32\\anmfd.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}] @="" [HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}\InprocServer32] @="C:\\WINDOWS\\system32\\GPFSPidGen.DLL" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}\InprocServer32] @="C:\\WINDOWS\\system32\\MLC42DEU.DLL" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}] @="" [HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}\InprocServer32] @="C:\\WINDOWS\\system32\\iyn4l55q1.dll" "ThreadingModel"="Apartment" ********************************************************************************** Files Found are not all bad files: C:\WINDOWS\SYSTEM32\ gdi32.dll Thu 29 Dec 2005 3:54:38 A.... 280.064 273,50 K i8nm0i~1.dll Sat 18 Mar 2006 4:13:36 ..S.R 233.960 228,48 K legitc~1.dll Tue 14 Feb 2006 9:20:14 A.... 550.120 537,23 K mlc42deu.dll Sat 18 Mar 2006 15:36:32 ..S.R 233.786 228,30 K mvnol9~1.dll Sat 18 Mar 2006 3:44:48 ..S.R 233.786 228,30 K pncrt.dll Sat 18 Feb 2006 15:06:36 A.... 278.528 272,00 K pndx5016.dll Sat 18 Feb 2006 15:06:36 A.... 6.656 6,50 K pndx5032.dll Sat 18 Feb 2006 15:06:36 A.... 5.632 5,50 K rmoc3260.dll Sat 18 Feb 2006 15:06:46 A.... 176.167 172,04 K rpkaddon.dll Thu 16 Feb 2006 20:34:36 A.... 24.576 24,00 K spmsg.dll Mon 13 Feb 2006 19:03:38 ..... 8.632 8,43 K webclnt.dll Wed 4 Jan 2006 4:35:02 A.... 68.096 66,50 K 12 items found: 12 files (3 H/S), 0 directories. Total of file sizes: 2.100.003 bytes 2,00 M Locate .tmp files: No matches found. ********************************************************************************** Directory Listing of system files: Datentr„ger in Laufwerk C: ist BOOT Volumeseriennummer: 08A3-163F Verzeichnis von C:\WINDOWS\System32 18.03.2006 15:36 233.786 MLC42DEU.DLL 18.03.2006 04:13 233.960 i8nm0i51e8.dll 18.03.2006 03:44 233.786 mvnol9531.dll 02.03.2006 16:50 405.504 r?gsvr32.exe 14.02.2006 20:19 <DIR> dllcache 02.10.2004 13:18 <DIR> Microsoft 30.09.2004 22:28 8.192 Thumbs.db 5 Datei(en) 1.115.228 Bytes 2 Verzeichnis(se), 17.630.580.736 Bytes frei L2mfix 010406 Creating Account. Der Befehl wurde erfolgreich ausgefhrt. Adding Administrative privleges. Checking for L2MFix account(0=no 1=yes): 1 Granting SeDebugPrivilege to L2MFIX ... successful Running From: C:\WINDOWS\system32 Killing Processes! Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03 Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org Killing PID 596 'smss.exe' Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03 Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org Killing PID 692 'winlogon.exe' Killing PID 692 'winlogon.exe' Killing PID 692 'winlogon.exe' |
|
|
|
|
|
|
18.03.2006, 16:57
Ehrenmitglied
Beiträge: 29434 |
#6
Poste nun den Rest
 ..damit ich alles sehen kann Start > Ausfuehren --> reinschreiben --> cmd.exe und ok. kopiere rein und poste alles, was im Texteditor erscheint Zitat dir /s /a "r?gsvr32*.*" > c:\find.txt & start notepad c:\find.txt** __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
18.03.2006, 17:40
Member
Themenstarter Beiträge: 20 |
#7
Killing PID 692 'winlogon.exe'
Killing PID 692 'winlogon.exe' Killing PID 692 'winlogon.exe' Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03 Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org Killing PID 1916 'explorer.exe' Killing PID 1916 'explorer.exe' Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03 Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org Killing PID 1672 'rundll32.exe' Killing PID 244 'rundll32.exe' Restoring Sedebugprivilege: Granting SeDebugPrivilege to Administratoren ... successful Scanning First Pass. Please Wait! First Pass Completed Second Pass Scanning Second pass Completed! 1 Datei(en) kopiert. 1 Datei(en) kopiert. 1 Datei(en) kopiert. Deleting: C:\WINDOWS\system32\i8nm0i51e8.dll Successfully Deleted: C:\WINDOWS\system32\i8nm0i51e8.dll Deleting: C:\WINDOWS\system32\MLC42DEU.DLL Successfully Deleted: C:\WINDOWS\system32\MLC42DEU.DLL Deleting: C:\WINDOWS\system32\mvnol9531.dll Successfully Deleted: C:\WINDOWS\system32\mvnol9531.dll msg11?.dll 0 Datei(en) kopiert. Restoring Windows Update Certificates.: The following Is the Current Export of the Winlogon notify key: **************************************************************************** Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Control Panel] "Asynchronous"=dword:00000000 "DllName"="C:\\WINDOWS\\system32\\mvnol9531.dll" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\ 6c,00,00,00 "Logoff"="ChainWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Logoff"="CryptnetWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] "DLLName"="cscdll.dll" "Logon"="WinlogonLogonEvent" "Logoff"="WinlogonLogoffEvent" "ScreenSaver"="WinlogonScreenSaverEvent" "Startup"="WinlogonStartupEvent" "Shutdown"="WinlogonShutdownEvent" "StartShell"="WinlogonStartShellEvent" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] "DLLName"="wlnotify.dll" "Logon"="SCardStartCertProp" "Logoff"="SCardStopCertProp" "Lock"="SCardSuspendCertProp" "Unlock"="SCardResumeCertProp" "Enabled"=dword:00000001 "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "StartShell"="SchedStartShell" "Logoff"="SchedEventLogOff" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] "Logoff"="WLEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] "DLLName"="WlNotify.dll" "Lock"="SensLockEvent" "Logon"="SensLogonEvent" "Logoff"="SensLogoffEvent" "Safe"=dword:00000001 "MaxWait"=dword:00000258 "StartScreenSaver"="SensStartScreenSaverEvent" "StopScreenSaver"="SensStopScreenSaverEvent" "Startup"="SensStartupEvent" "Shutdown"="SensShutdownEvent" "StartShell"="SensStartShellEvent" "PostShell"="SensPostShellEvent" "Disconnect"="SensDisconnectEvent" "Reconnect"="SensReconnectEvent" "Unlock"="SensUnlockEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "Logoff"="TSEventLogoff" "Logon"="TSEventLogon" "PostShell"="TSEventPostShell" "Shutdown"="TSEventShutdown" "StartShell"="TSEventStartShell" "Startup"="TSEventStartup" "MaxWait"=dword:00000258 "Reconnect"="TSEventReconnect" "Disconnect"="TSEventDisconnect" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] "DLLName"="wlnotify.dll" "Logon"="RegisterTicketExpiredNotificationEvent" "Logoff"="UnregisterTicketExpiredNotificationEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 The following are the files found: **************************************************************************** C:\WINDOWS\system32\i8nm0i51e8.dll C:\WINDOWS\system32\MLC42DEU.DLL C:\WINDOWS\system32\mvnol9531.dll Registry Entries that were Deleted: Please verify that the listing looks ok. If there was something deleted wrongly there are backups in the backreg folder. **************************************************************************** Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}] @="" [HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}\InprocServer32] @="C:\\WINDOWS\\system32\\psh.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}] @="" [HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}\InprocServer32] @="C:\\WINDOWS\\system32\\dlser.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}] @="" [HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}\InprocServer32] @="C:\\WINDOWS\\system32\\didskmgr.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}] @="" [HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}] @="" [HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}\InprocServer32] @="C:\\WINDOWS\\system32\\aympvcno.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}] @="" [HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}\InprocServer32] @="C:\\WINDOWS\\system32\\ueloader.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}] @="" [HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}\InprocServer32] @="C:\\WINDOWS\\system32\\anmfd.dll" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}] @="" [HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}\InprocServer32] @="C:\\WINDOWS\\system32\\GPFSPidGen.DLL" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}\InprocServer32] @="C:\\WINDOWS\\system32\\MLC42DEU.DLL" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}] @="" [HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}\InprocServer32] @="C:\\WINDOWS\\system32\\iyn4l55q1.dll" "ThreadingModel"="Apartment" REGEDIT4 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{293BF244-E2B2-4B6C-9A16-CCB0E6705DB7}"=- "{34E8D927-0844-4341-97DE-77B51D662492}"=- "{55D6C78A-6759-4190-9EDB-7FB5A565B23C}"=- "{F91F440B-3742-4991-9BDE-4593BE175DC7}"=- "{D250F4B8-774A-421F-907A-81A1FDC38515}"=- "{33A3AFA1-D894-4864-BCC8-1729310E6C43}"=- "{8BBECB05-8782-4053-9F1B-8288E2D1D69C}"=- "{27034623-5A7D-4FD2-B940-141CFB13FE94}"=- "{692C4615-BD3C-435D-A836-17A7397B5D61}"=- "{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}"=- "{A5D56EAE-2281-4669-99D2-328BA0F4F768}"=- "{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}"=- [-HKEY_CLASSES_ROOT\CLSID\{293BF244-E2B2-4B6C-9A16-CCB0E6705DB7}] [-HKEY_CLASSES_ROOT\CLSID\{34E8D927-0844-4341-97DE-77B51D662492}] [-HKEY_CLASSES_ROOT\CLSID\{55D6C78A-6759-4190-9EDB-7FB5A565B23C}] [-HKEY_CLASSES_ROOT\CLSID\{F91F440B-3742-4991-9BDE-4593BE175DC7}] [-HKEY_CLASSES_ROOT\CLSID\{D250F4B8-774A-421F-907A-81A1FDC38515}] [-HKEY_CLASSES_ROOT\CLSID\{33A3AFA1-D894-4864-BCC8-1729310E6C43}] [-HKEY_CLASSES_ROOT\CLSID\{8BBECB05-8782-4053-9F1B-8288E2D1D69C}] [-HKEY_CLASSES_ROOT\CLSID\{27034623-5A7D-4FD2-B940-141CFB13FE94}] [-HKEY_CLASSES_ROOT\CLSID\{692C4615-BD3C-435D-A836-17A7397B5D61}] [-HKEY_CLASSES_ROOT\CLSID\{5D353EA4-A93B-4C92-B877-5C8DBF332BBD}] [-HKEY_CLASSES_ROOT\CLSID\{A5D56EAE-2281-4669-99D2-328BA0F4F768}] [-HKEY_CLASSES_ROOT\CLSID\{CAAE01E0-11C2-47C4-B3B9-D000C1C67895}] REGEDIT4 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "SV1"="" **************************************************************************** Desktop.ini Contents: **************************************************************************** **************************************************************************** Checking for L2MFix account(0=no 1=yes): 0 Zipping up files for submission: adding: dlls/i8nm0i51e8.dll (164 bytes security) (deflated 4%) adding: dlls/MLC42DEU.DLL (164 bytes security) (deflated 4%) adding: dlls/mvnol9531.dll (164 bytes security) (deflated 4%) adding: backregs/27034623-5A7D-4FD2-B940-141CFB13FE94.reg (188 bytes security) (deflated 70%) adding: backregs/33A3AFA1-D894-4864-BCC8-1729310E6C43.reg (188 bytes security) (deflated 70%) adding: backregs/34E8D927-0844-4341-97DE-77B51D662492.reg (188 bytes security) (deflated 70%) adding: backregs/5D353EA4-A93B-4C92-B877-5C8DBF332BBD.reg (188 bytes security) (deflated 70%) adding: backregs/692C4615-BD3C-435D-A836-17A7397B5D61.reg (188 bytes security) (deflated 70%) adding: backregs/8BBECB05-8782-4053-9F1B-8288E2D1D69C.reg (188 bytes security) (deflated 70%) adding: backregs/A5D56EAE-2281-4669-99D2-328BA0F4F768.reg (188 bytes security) (deflated 70%) adding: backregs/CAAE01E0-11C2-47C4-B3B9-D000C1C67895.reg (188 bytes security) (deflated 70%) adding: backregs/D250F4B8-774A-421F-907A-81A1FDC38515.reg (188 bytes security) (deflated 70%) adding: backregs/F91F440B-3742-4991-9BDE-4593BE175DC7.reg (188 bytes security) (deflated 70%) adding: backregs/notibac.reg (164 bytes security) (deflated 87%) adding: backregs/shell.reg (164 bytes security) (deflated 73%) Logfile of HijackThis v1.99.1 Scan saved at 16:38:03, on 18.03.2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.EXE C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe C:\HP\KBD\KBD.EXE C:\WINDOWS\Dit.exe C:\WINDOWS\system32\RunDll32.exe C:\Programme\Home Cinema\PowerCinema\PCMService.exe C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis1\ToADiMon.exe C:\Programme\pspvideo9\pspVideo9.exe C:\Programme\Java\jre1.5.0_06\bin\jusched.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe D:\Patrick\Eigene Dateien\Eigene Daten\Trillian\trillian.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\WINDOWS\system32\nvsvc32.exe C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe C:\WINDOWS\system32\wuauclt.exe C:\Programme\Internet Explorer\iexplore.exe D:\Patrick\Eigene Dateien\Eigene Daten\Programme\Hijack This\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=Q404&bd=pavilion&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ednetz.de/login/index.html?ednetzid=76fa848a515f1651baed4186ecd93d8e R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=Q404&bd=pavilion&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DE_DE&c=Q404&bd=pavilion&pf=desktop R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll (file missing) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe O4 - HKLM\..\Run: [UpdateManager] "C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Dit] Dit.exe O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\printray.exe O4 - HKLM\..\Run: [ToADiMon.exe] C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis1\ToADiMon.exe -TOnlineAutodialStart O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [PSPVideo9] C:\Programme\pspvideo9\pspVideo9.exe -t O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [Internet] C:\WINDOWS\system32\drivers\helpsys\internet.exe O4 - Startup: Trillian.lnk = D:\Patrick\Eigene Dateien\Eigene Daten\Trillian\trillian.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1138199782078 O20 - Winlogon Notify: Control Panel - C:\WINDOWS\system32\mvnol9531.dll (file missing) O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe |
|
|
|
|
|
|
18.03.2006, 17:43
Ehrenmitglied
Beiträge: 29434 |
#8
Start > Ausfuehren --> reinschreiben --> cmd.exe
und ok. kopiere rein und poste alles, was im Texteditor erscheint Zitat dir /s /a "r?gsvr32*.*" > c:\find.txt & start notepad c:\find.txt+ arbeite das ab und poste es dann als Anhang (siehe unten) http://virus-protect.org/completbat.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
18.03.2006, 17:44
Member
Themenstarter Beiträge: 20 |
#9
Datentr„ger in Laufwerk C: ist BOOT
Volumeseriennummer: 08A3-163F |
|
|
|
|
|
|
18.03.2006, 17:45
Ehrenmitglied
Beiträge: 29434 |
#10
ich hab was veraendert..............
dir /s /a "c:\r?gsvr32*.*" > c:\find.txt & start notepad c:\find.txt arbeite das ab und poste es dann als Anhang (siehe unten) http://virus-protect.org/completbat.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
18.03.2006, 17:56
Member
Themenstarter Beiträge: 20 |
#11
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp. C:\Dokumente und Einstellungen\Patrick>dir /s /a "c:\r?gsvr32*.*" Datenträger in Laufwerk C: ist BOOT Volumeseriennummer: 08A3-163F Verzeichnis von c:\Programme\GXTranscoder v2 03.08.2004 23:58 12.288 regsvr32.exe 1 Datei(en) 12.288 Bytes Verzeichnis von c:\WINDOWS\I386 04.08.2004 13:00 5.425 REGSVR32.EX_ 1 Datei(en) 5.425 Bytes Verzeichnis von c:\WINDOWS\system32 04.08.2004 13:00 12.288 regsvr32.exe 02.03.2006 16:50 405.504 r?gsvr32.exe 2 Datei(en) 417.792 Bytes Verzeichnis von c:\WINDOWS\system32\dllcache 04.08.2004 13:00 12.288 regsvr32.exe 1 Datei(en) 12.288 Bytes Anzahl der angezeigten Dateien: 5 Datei(en) 447.793 Bytes 0 Verzeichnis(se), 17.617.920.000 Bytes frei C:\Dokumente und Einstellungen\Patrick>c:\find.txt & start notepad c:\find.txt C:\Dokumente und Einstellungen\Patrick> C:\Dokumente und Einstellungen\Patrick> Datentr„ger in Laufwerk C: ist BOOT Volumeseriennummer: 08A3-163F |
|
|
|
|
|
|
18.03.2006, 18:01
Ehrenmitglied
Beiträge: 29434 |
#12
arbeite das ab und poste es dann als Anhang (siehe unten)
http://virus-protect.org/completbat.html __________ auf dem System scheint noch ein PurityScan zu sein............ __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
19.03.2006, 15:18
Member
Themenstarter Beiträge: 20 |
#13
http://rapidshare.de/files/15893401/123.txt.html
anders konnte ich es nicht hochladen Zitat Verzeichnis von C:\ |
|
|
|
|
|
|
19.03.2006, 16:21
Ehrenmitglied
Beiträge: 29434 |
#14
poste mir folgende logs:
dir /s /a "c:\M?crosoft*.*" > c:\find.txt & start notepad c:\find.txt dir /s /a "c:\?icrosoft*.*" > c:\find.txt & start notepad c:\find.txt __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
19.03.2006, 16:30
Member
Themenstarter Beiträge: 20 |
#15
1 Datei(en) 25.412 Bytes
Verzeichnis von c:\Dokumente und Einstellungen\Silvia\Desktop 25.01.2006 17:07 2.477 Microsoft Word.lnk 1 Datei(en) 2.477 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Silvia\Lokale Einstellungen\Anwe ndungsdaten 01.09.2005 09:52 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Anwendungsdaten 11.12.2005 16:02 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Anwendungsdaten\Microsoft\ Internet Explorer\Quick Launch 25.08.2005 22:19 764 Microsoft Outlook starten.lnk 1 Datei(en) 764 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Anwendungsdaten\Microsoft\ Outlook 25.08.2005 22:22 40.527 Microsoft Outlook Internet Settings.FAV 15.03.2006 19:35 0 Microsoft Outlook Internet Settings.NICK 2 Datei(en) 40.527 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Desktop 18.03.2006 18:12 2.583 Microsoft Outlook.lnk 1 Datei(en) 2.583 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Lokale Einstellungen\Anwen dungsdaten 25.08.2005 19:56 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Lokale Einstellungen\Anwen dungsdaten\Identities\{EE699FE5-31C6-44C6-A3B6-D5B02CD18877} 07.12.2005 13:36 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Programme 25.08.2005 14:07 <DIR> microsoft frontpage 24.08.2005 22:12 <DIR> Microsoft Office 24.08.2005 22:13 <DIR> Microsoft Visual Studio 02.10.2004 15:33 <DIR> Microsoft Works 14.03.2006 18:46 <DIR> M?crosoft.NET 0 Datei(en) 0 Bytes Verzeichnis von c:\Programme\Gemeinsame Dateien 24.08.2005 22:13 <DIR> Microsoft Shared 0 Datei(en) 0 Bytes Verzeichnis von c:\Programme\Gemeinsame Dateien\SpeechEngines 02.10.2004 14:08 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Programme\Microsoft Office\Office\Queries 22.09.1998 06:01 286 Microsoft Investor Aktienkurse.iqy 08.05.1998 19:52 230 Microsoft Investor Umrechnungskurse.iqy 11.05.1998 22:15 244 Microsoft Investor Wichtigste Indizes.iqy 3 Datei(en) 760 Bytes Verzeichnis von c:\Programme\Microsoft Office\Office\Shortcut Bar\Office 24.08.2005 22:13 1.868 Microsoft Access.lnk 24.08.2005 22:13 1.864 Microsoft Excel.lnk 24.08.2005 22:13 1.868 Microsoft Outlook.lnk 24.08.2005 22:13 1.872 Microsoft PowerPoint.lnk 24.08.2005 22:13 1.876 Microsoft Sammelmappe.lnk 24.08.2005 22:13 1.864 Microsoft Word.lnk 6 Datei(en) 11.212 Bytes Verzeichnis von c:\Programme\pspvideo9 05.01.2002 16:46 8.007.680 Microsoft.mshtml.dll 1 Datei(en) 8.007.680 Bytes Verzeichnis von c:\WINDOWS 19.11.2005 19:21 <DIR> Microsoft.NET 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC 19.11.2005 19:21 <DIR> Microsoft.DirectX 19.11.2005 19:21 <DIR> Microsoft.DirectX.AudioVideoPlayback 19.11.2005 19:21 <DIR> Microsoft.DirectX.Diagnostics 19.11.2005 19:21 <DIR> Microsoft.DirectX.Direct3D 19.11.2005 19:21 <DIR> Microsoft.DirectX.Direct3DX 19.11.2005 19:21 <DIR> Microsoft.DirectX.DirectDraw 19.11.2005 19:21 <DIR> Microsoft.DirectX.DirectInput 19.11.2005 19:21 <DIR> Microsoft.DirectX.DirectPlay 19.11.2005 19:21 <DIR> Microsoft.DirectX.DirectSound 16.03.2006 16:28 <DIR> Microsoft.JScript 02.10.2004 16:06 <DIR> Microsoft.JScript.resources 16.03.2006 16:28 <DIR> Microsoft.VisualBasic 02.10.2004 16:06 <DIR> Microsoft.VisualBasic.resources 02.10.2004 16:05 <DIR> Microsoft.VisualBasic.Vsa 02.10.2004 16:05 <DIR> Microsoft.VisualC 02.10.2004 16:05 <DIR> Microsoft.Vsa 02.10.2004 16:05 <DIR> Microsoft.Vsa.Vb.CodeDOMProcessor 02.10.2004 16:05 <DIR> Microsoft_VsaVb 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856a d364e35 19.11.2005 19:21 223.232 Microsoft.DirectX.dll 1 Datei(en) 223.232 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1. 0.2902.0__31bf3856ad364e35 19.11.2005 19:21 53.248 Microsoft.DirectX.AudioVideoPlayback.dll 1 Datei(en) 53.248 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902. 0__31bf3856ad364e35 19.11.2005 19:21 12.800 Microsoft.DirectX.Diagnostics.dll 1 Datei(en) 12.800 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__ 31bf3856ad364e35 19.11.2005 19:21 473.600 Microsoft.DirectX.Direct3D.dll 1 Datei(en) 473.600 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0_ _31bf3856ad364e35 19.11.2005 19:21 576.000 Microsoft.DirectX.Direct3DX.dll 1 Datei(en) 576.000 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0 __31bf3856ad364e35 19.11.2005 19:21 145.920 Microsoft.DirectX.DirectDraw.dll 1 Datei(en) 145.920 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902. 0__31bf3856ad364e35 19.11.2005 19:21 159.232 Microsoft.DirectX.DirectInput.dll 1 Datei(en) 159.232 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0 __31bf3856ad364e35 19.11.2005 19:21 364.544 Microsoft.DirectX.DirectPlay.dll 1 Datei(en) 364.544 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902. 0__31bf3856ad364e35 19.11.2005 19:21 178.176 Microsoft.DirectX.DirectSound.dll 1 Datei(en) 178.176 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f1 1d50a3a 16.03.2006 16:28 720.896 Microsoft.JScript.dll 1 Datei(en) 720.896 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.JScript.resources\7.0.5000.0_ de_b03f5f7f11d50a3a 02.10.2004 16:06 45.056 Microsoft.Jscript.Resources.dll 1 Datei(en) 45.056 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5 f7f11d50a3a 16.03.2006 16:28 299.008 Microsoft.VisualBasic.dll 1 Datei(en) 299.008 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.resources\7.0.500 0.0_de_b03f5f7f11d50a3a 02.10.2004 16:06 36.864 Microsoft.VisualBasic.Resources.dll 1 Datei(en) 36.864 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b 03f5f7f11d50a3a 02.10.2004 16:04 28.672 Microsoft.VisualBasic.Vsa.dll 1 Datei(en) 28.672 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f1 1d50a3a 02.10.2004 16:04 6.144 Microsoft.VisualC.dll 1 Datei(en) 6.144 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50 a3a 02.10.2004 16:04 32.768 Microsoft.Vsa.dll 1 Datei(en) 32.768 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5 000.0__b03f5f7f11d50a3a 02.10.2004 16:04 11.264 Microsoft.Vsa.Vb.CodeDOMProcessor.dll 1 Datei(en) 11.264 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d 50a3a 02.10.2004 16:04 6.656 Microsoft_VsaVb.dll 1 Datei(en) 6.656 Bytes Verzeichnis von c:\WINDOWS\Media 24.08.2005 22:12 <DIR> Microsoft Office 2000 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0 18.03.2005 17:23 53.248 Microsoft.DirectX.AudioVideoPlayback.dll 20.05.2005 00:04 33.914 Microsoft.DirectX.AudioVideoPlayback.xml 18.03.2005 17:23 12.800 Microsoft.DirectX.Diagnostics.dll 20.05.2005 00:04 10.439 Microsoft.DirectX.Diagnostics.xml 18.03.2005 17:23 473.600 Microsoft.DirectX.Direct3D.dll 20.05.2005 00:04 849.122 Microsoft.DirectX.Direct3D.xml 18.03.2005 17:23 145.920 Microsoft.DirectX.DirectDraw.dll 20.05.2005 00:04 755.962 Microsoft.DirectX.DirectDraw.xml 18.03.2005 17:23 159.232 Microsoft.DirectX.DirectInput.dll 20.05.2005 00:04 345.509 Microsoft.DirectX.DirectInput.xml 18.03.2005 17:23 364.544 Microsoft.DirectX.DirectPlay.dll 20.05.2005 00:04 1.252.798 Microsoft.DirectX.DirectPlay.xml 18.03.2005 17:23 178.176 Microsoft.DirectX.DirectSound.dll 20.05.2005 00:04 348.085 Microsoft.DirectX.DirectSound.xml 18.03.2005 17:23 223.232 Microsoft.DirectX.dll 20.05.2005 00:04 265.390 Microsoft.DirectX.xml 16 Datei(en) 5.471.971 Bytes Verzeichnis von c:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2906.0 26.05.2005 15:15 576.000 Microsoft.DirectX.Direct3DX.dll 20.05.2005 00:04 1.437.695 Microsoft.DirectX.Direct3DX.xml 2 Datei(en) 2.013.695 Bytes Verzeichnis von c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322 15.07.2004 14:28 720.896 Microsoft.JScript.dll 21.02.2003 00:25 49.152 Microsoft.JScript.tlb 15.07.2004 14:28 299.008 Microsoft.VisualBasic.dll 21.02.2003 06:24 28.672 Microsoft.VisualBasic.Vsa.dll 21.02.2003 06:25 6.144 Microsoft.VisualC.Dll 21.02.2003 06:24 32.768 Microsoft.Vsa.dll 21.02.2003 00:44 22.528 Microsoft.Vsa.tlb 21.02.2003 06:25 11.264 Microsoft.Vsa.Vb.CodeDOMProcessor.dll 21.02.2003 04:03 6.144 Microsoft.Vsa.Vb.CodeDOMProcessor.tlb 21.02.2003 06:25 6.656 Microsoft_VsaVb.dll 10 Datei(en) 1.183.232 Bytes Verzeichnis von c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\DE 24.02.2003 20:11 45.056 Microsoft.JScript.Resources.dll 24.02.2003 20:11 36.864 Microsoft.VisualBasic.resources.dll 2 Datei(en) 81.920 Bytes Verzeichnis von c:\WINDOWS\system32 02.10.2004 13:18 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\system32\config\systemprofile\Anwendungsdaten 02.10.2004 13:29 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\system32\config\systemprofile\Lokale Einstellungen\A nwendungsdaten 03.10.2004 12:10 <DIR> Microsoft 0 Datei(en) 0 Bytes Anzahl der angezeigten Dateien: 90 Datei(en) 20.311.605 Bytes 54 Verzeichnis(se), 17.589.927.936 Bytes frei C:\Dokumente und Einstellungen\Patrick>c:\find.txt & start notepad c:\find.txt Der Befehl "c:\find.txt" ist entweder falsch geschrieben oder konnte nicht gefunden werden. C:\Dokumente und Einstellungen\Patrick> 01.09.2005 09:53 25.412 Microsoft Outlook Internet Settings.FAV 1 Datei(en) 25.412 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Silvia\Desktop 25.01.2006 17:07 2.477 Microsoft Word.lnk 1 Datei(en) 2.477 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Silvia\Lokale Einstellungen\Anwe ndungsdaten 01.09.2005 09:52 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Anwendungsdaten 11.12.2005 16:02 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Anwendungsdaten\Microsoft\ Internet Explorer\Quick Launch 25.08.2005 22:19 764 Microsoft Outlook starten.lnk 1 Datei(en) 764 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Anwendungsdaten\Microsoft\ Outlook 25.08.2005 22:22 40.527 Microsoft Outlook Internet Settings.FAV 15.03.2006 19:35 0 Microsoft Outlook Internet Settings.NICK 2 Datei(en) 40.527 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Desktop 18.03.2006 18:12 2.583 Microsoft Outlook.lnk 1 Datei(en) 2.583 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Lokale Einstellungen\Anwen dungsdaten 25.08.2005 19:56 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Dokumente und Einstellungen\Wolly\Lokale Einstellungen\Anwen dungsdaten\Identities\{EE699FE5-31C6-44C6-A3B6-D5B02CD18877} 07.12.2005 13:36 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Programme 25.08.2005 14:07 <DIR> microsoft frontpage 24.08.2005 22:12 <DIR> Microsoft Office 24.08.2005 22:13 <DIR> Microsoft Visual Studio 02.10.2004 15:33 <DIR> Microsoft Works 0 Datei(en) 0 Bytes Verzeichnis von c:\Programme\Gemeinsame Dateien 24.08.2005 22:13 <DIR> Microsoft Shared 0 Datei(en) 0 Bytes Verzeichnis von c:\Programme\Gemeinsame Dateien\SpeechEngines 02.10.2004 14:08 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\Programme\Microsoft Office\Office\Queries 22.09.1998 06:01 286 Microsoft Investor Aktienkurse.iqy 08.05.1998 19:52 230 Microsoft Investor Umrechnungskurse.iqy 11.05.1998 22:15 244 Microsoft Investor Wichtigste Indizes.iqy 3 Datei(en) 760 Bytes Verzeichnis von c:\Programme\Microsoft Office\Office\Shortcut Bar\Office 24.08.2005 22:13 1.868 Microsoft Access.lnk 24.08.2005 22:13 1.864 Microsoft Excel.lnk 24.08.2005 22:13 1.868 Microsoft Outlook.lnk 24.08.2005 22:13 1.872 Microsoft PowerPoint.lnk 24.08.2005 22:13 1.876 Microsoft Sammelmappe.lnk 24.08.2005 22:13 1.864 Microsoft Word.lnk 6 Datei(en) 11.212 Bytes Verzeichnis von c:\Programme\pspvideo9 05.01.2002 16:46 8.007.680 Microsoft.mshtml.dll 1 Datei(en) 8.007.680 Bytes Verzeichnis von c:\WINDOWS 19.11.2005 19:21 <DIR> Microsoft.NET 14.03.2006 18:45 <DIR> ?icrosoft 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC 19.11.2005 19:21 <DIR> Microsoft.DirectX 19.11.2005 19:21 <DIR> Microsoft.DirectX.AudioVideoPlayback 19.11.2005 19:21 <DIR> Microsoft.DirectX.Diagnostics 19.11.2005 19:21 <DIR> Microsoft.DirectX.Direct3D 19.11.2005 19:21 <DIR> Microsoft.DirectX.Direct3DX 19.11.2005 19:21 <DIR> Microsoft.DirectX.DirectDraw 19.11.2005 19:21 <DIR> Microsoft.DirectX.DirectInput 19.11.2005 19:21 <DIR> Microsoft.DirectX.DirectPlay 19.11.2005 19:21 <DIR> Microsoft.DirectX.DirectSound 16.03.2006 16:28 <DIR> Microsoft.JScript 02.10.2004 16:06 <DIR> Microsoft.JScript.resources 16.03.2006 16:28 <DIR> Microsoft.VisualBasic 02.10.2004 16:06 <DIR> Microsoft.VisualBasic.resources 02.10.2004 16:05 <DIR> Microsoft.VisualBasic.Vsa 02.10.2004 16:05 <DIR> Microsoft.VisualC 02.10.2004 16:05 <DIR> Microsoft.Vsa 02.10.2004 16:05 <DIR> Microsoft.Vsa.Vb.CodeDOMProcessor 02.10.2004 16:05 <DIR> Microsoft_VsaVb 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856a d364e35 19.11.2005 19:21 223.232 Microsoft.DirectX.dll 1 Datei(en) 223.232 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1. 0.2902.0__31bf3856ad364e35 19.11.2005 19:21 53.248 Microsoft.DirectX.AudioVideoPlayback.dll 1 Datei(en) 53.248 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902. 0__31bf3856ad364e35 19.11.2005 19:21 12.800 Microsoft.DirectX.Diagnostics.dll 1 Datei(en) 12.800 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__ 31bf3856ad364e35 19.11.2005 19:21 473.600 Microsoft.DirectX.Direct3D.dll 1 Datei(en) 473.600 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0_ _31bf3856ad364e35 19.11.2005 19:21 576.000 Microsoft.DirectX.Direct3DX.dll 1 Datei(en) 576.000 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0 __31bf3856ad364e35 19.11.2005 19:21 145.920 Microsoft.DirectX.DirectDraw.dll 1 Datei(en) 145.920 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902. 0__31bf3856ad364e35 19.11.2005 19:21 159.232 Microsoft.DirectX.DirectInput.dll 1 Datei(en) 159.232 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0 __31bf3856ad364e35 19.11.2005 19:21 364.544 Microsoft.DirectX.DirectPlay.dll 1 Datei(en) 364.544 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902. 0__31bf3856ad364e35 19.11.2005 19:21 178.176 Microsoft.DirectX.DirectSound.dll 1 Datei(en) 178.176 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f1 1d50a3a 16.03.2006 16:28 720.896 Microsoft.JScript.dll 1 Datei(en) 720.896 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.JScript.resources\7.0.5000.0_ de_b03f5f7f11d50a3a 02.10.2004 16:06 45.056 Microsoft.Jscript.Resources.dll 1 Datei(en) 45.056 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5 f7f11d50a3a 16.03.2006 16:28 299.008 Microsoft.VisualBasic.dll 1 Datei(en) 299.008 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.resources\7.0.500 0.0_de_b03f5f7f11d50a3a 02.10.2004 16:06 36.864 Microsoft.VisualBasic.Resources.dll 1 Datei(en) 36.864 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b 03f5f7f11d50a3a 02.10.2004 16:04 28.672 Microsoft.VisualBasic.Vsa.dll 1 Datei(en) 28.672 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f1 1d50a3a 02.10.2004 16:04 6.144 Microsoft.VisualC.dll 1 Datei(en) 6.144 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50 a3a 02.10.2004 16:04 32.768 Microsoft.Vsa.dll 1 Datei(en) 32.768 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5 000.0__b03f5f7f11d50a3a 02.10.2004 16:04 11.264 Microsoft.Vsa.Vb.CodeDOMProcessor.dll 1 Datei(en) 11.264 Bytes Verzeichnis von c:\WINDOWS\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d 50a3a 02.10.2004 16:04 6.656 Microsoft_VsaVb.dll 1 Datei(en) 6.656 Bytes Verzeichnis von c:\WINDOWS\Media 24.08.2005 22:12 <DIR> Microsoft Office 2000 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2902.0 18.03.2005 17:23 53.248 Microsoft.DirectX.AudioVideoPlayback.dll 20.05.2005 00:04 33.914 Microsoft.DirectX.AudioVideoPlayback.xml 18.03.2005 17:23 12.800 Microsoft.DirectX.Diagnostics.dll 20.05.2005 00:04 10.439 Microsoft.DirectX.Diagnostics.xml 18.03.2005 17:23 473.600 Microsoft.DirectX.Direct3D.dll 20.05.2005 00:04 849.122 Microsoft.DirectX.Direct3D.xml 18.03.2005 17:23 145.920 Microsoft.DirectX.DirectDraw.dll 20.05.2005 00:04 755.962 Microsoft.DirectX.DirectDraw.xml 18.03.2005 17:23 159.232 Microsoft.DirectX.DirectInput.dll 20.05.2005 00:04 345.509 Microsoft.DirectX.DirectInput.xml 18.03.2005 17:23 364.544 Microsoft.DirectX.DirectPlay.dll 20.05.2005 00:04 1.252.798 Microsoft.DirectX.DirectPlay.xml 18.03.2005 17:23 178.176 Microsoft.DirectX.DirectSound.dll 20.05.2005 00:04 348.085 Microsoft.DirectX.DirectSound.xml 18.03.2005 17:23 223.232 Microsoft.DirectX.dll 20.05.2005 00:04 265.390 Microsoft.DirectX.xml 16 Datei(en) 5.471.971 Bytes Verzeichnis von c:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2906.0 26.05.2005 15:15 576.000 Microsoft.DirectX.Direct3DX.dll 20.05.2005 00:04 1.437.695 Microsoft.DirectX.Direct3DX.xml 2 Datei(en) 2.013.695 Bytes Verzeichnis von c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322 15.07.2004 14:28 720.896 Microsoft.JScript.dll 21.02.2003 00:25 49.152 Microsoft.JScript.tlb 15.07.2004 14:28 299.008 Microsoft.VisualBasic.dll 21.02.2003 06:24 28.672 Microsoft.VisualBasic.Vsa.dll 21.02.2003 06:25 6.144 Microsoft.VisualC.Dll 21.02.2003 06:24 32.768 Microsoft.Vsa.dll 21.02.2003 00:44 22.528 Microsoft.Vsa.tlb 21.02.2003 06:25 11.264 Microsoft.Vsa.Vb.CodeDOMProcessor.dll 21.02.2003 04:03 6.144 Microsoft.Vsa.Vb.CodeDOMProcessor.tlb 21.02.2003 06:25 6.656 Microsoft_VsaVb.dll 10 Datei(en) 1.183.232 Bytes Verzeichnis von c:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\DE 24.02.2003 20:11 45.056 Microsoft.JScript.Resources.dll 24.02.2003 20:11 36.864 Microsoft.VisualBasic.resources.dll 2 Datei(en) 81.920 Bytes Verzeichnis von c:\WINDOWS\system32 02.10.2004 13:18 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\system32\config\systemprofile\Anwendungsdaten 02.10.2004 13:29 <DIR> Microsoft 0 Datei(en) 0 Bytes Verzeichnis von c:\WINDOWS\system32\config\systemprofile\Lokale Einstellungen\A nwendungsdaten 03.10.2004 12:10 <DIR> Microsoft 0 Datei(en) 0 Bytes Anzahl der angezeigten Dateien: 90 Datei(en) 20.311.605 Bytes 54 Verzeichnis(se), 17.589.805.056 Bytes frei C:\Dokumente und Einstellungen\Patrick>c:\find.txt & start notepad c:\find.txt C:\Dokumente und Einstellungen\Patrick> |
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
Hier mein Hijackthis Log:
Logfile of HijackThis v1.99.1
Scan saved at 17:25:55, on 17.03.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\Explorer.EXE
C:\HP\KBD\KBD.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Programme\Home Cinema\PowerCinema\PCMService.exe
C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis1\ToADiMon.exe
C:\Programme\pspvideo9\pspVideo9.exe
C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
D:\Patrick\Eigene Dateien\Eigene Daten\Trillian\trillian.exe
C:\PROGRAMME\INTERNET EXPLORER\IEXPLORE.EXE
C:\Programme\Internet Explorer\IEXPLORE.EXE
D:\Patrick\Eigene Dateien\Eigene Daten\Programme\Hijack This\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=Q404&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ednetz.de/login/index.html?ednetzid=76fa848a515f1651baed4186ecd93d8e
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=Q404&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DE_DE&c=Q404&bd=pavilion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll (file missing)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\printray.exe
O4 - HKLM\..\Run: [ToADiMon.exe] C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis1\ToADiMon.exe -TOnlineAutodialStart
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PSPVideo9] C:\Programme\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - Startup: Trillian.lnk = D:\Patrick\Eigene Dateien\Eigene Daten\Trillian\trillian.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1138199782078
O20 - Winlogon Notify: H323TSP - C:\WINDOWS\system32\ir2ul5f91.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
Schonmal ein Danke im Vorraus ;-)