Home » Spyware & Browser Hijacker Support Forum » QualityCodec eingefangen » Themenansicht

QualityCodec eingefangen
#0
10.11.2006, 18:40
markus342
...neu hier

Beiträge: 4
#1 Ich eröffne mal ein neues Topic zur besseren übersicht:


meine hijackthis log

Zitat

Logfile of HijackThis v1.99.1
Scan saved at 17:35:44, on 10.11.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\FileZilla Server\FileZilla Server.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\1&1\1&1 SoftPhone\IPPHONE.EXE
C:\Programme\QualityCodec\isamonitor.exe
C:\Programme\QualityCodec\pmsngr.exe
C:\Programme\QualityCodec\pmmon.exe
C:\Programme\QualityCodec\isamini.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\WScript.exe
C:\Programme\Windows NT\Zubehör\WORDPAD.EXE
C:\avenger.exe
C:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\ADMINI~1\LOKALE~1\Temp\Rar$EX00.812\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.0.100/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {192c5b4a-3efd-40c7-9f99-c472deb8efc0} - C:\Programme\QualityCodec\isaddon.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Protection Bar - {bf1ced2c-4b3f-4079-a330-864eda5a4cff} - C:\Programme\QualityCodec\iesplugin.dll (file missing)
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Programme\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\RunOnce: [1&1_1&1 SoftPhone] "C:\Programme\1&1\1&1 SoftPhone\IPPHONE.EXE" /hide
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O18 - Protocol: bw+0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {8E3A3C98-304B-455C-8A5C-926FE1F0D885} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O21 - SSODL: bonspells - {11853d5f-f894-4cc7-bbc3-fc7a9dcfd896} - C:\WINDOWS\system32\okkmtv.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Programme\FileZilla Server\FileZilla Server.exe
O23 - Service: NBService - Nero AG - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StyleXPService - Unknown owner - C:\Programme\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

ComboFix log


Zitat

Administrator - 06-11-10 17:18:22,51 Service Pack 2
ComboFix 06.11.9 - Running from: "C:\Programme\Mozilla Firefox"

((((((((((((((((((((((((((((((( Files Created from 2006-10-10 to 2006-11-10 ))))))))))))))))))))))))))))))))))


2006-11-10 17:11 3,254 --a------ C:\RegSrch.vbs
2006-11-10 16:52 34,308 --a------ C:\WINDOWS\system32\BASSMOD.dll
2006-11-06 22:40 634,438 --a------ C:\DVD Shrink 3.2 (CSS-Free).exe
2006-10-31 17:39 16,508,560 --a------ C:\jre-1_5_0_09-windows-i586-p-s.exe
2006-10-26 18:05 268,048 --a------ C:\WINDOWS\system32\dxtmeta2.dll
2006-10-21 19:19 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2006-10-21 19:19 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2006-10-15 13:34 118,784 -r------- C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe
2006-10-15 10:27 611,064 --a------ C:\WINDOWS\system32\drivers\sptd.sys


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-10 17:18 -------- d-------- C:\Programme\Mozilla Firefox
2006-11-10 17:12 -------- d-------- C:\Programme\QualityCodec
2006-11-10 16:41 -------- d-------- C:\Programme\eMule.de 0.46c v17
2006-11-08 19:33 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\AdobeUM
2006-11-07 16:22 -------- d-------- C:\Programme\ICQLite
2006-11-06 22:57 -------- d-------- C:\Programme\Lavalys
2006-11-05 15:46 21304 --a------ C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2006-11-01 17:54 -------- d-------- C:\Programme\Microsoft Visual Studio
2006-11-01 17:54 -------- d-------- C:\Programme\Microsoft Office
2006-11-01 17:54 -------- d-------- C:\Programme\Gemeinsame Dateien\Microsoft Shared
2006-11-01 15:20 -------- d-------- C:\Programme\BHV
2006-10-31 21:48 -------- d-------- C:\Programme\GeoGebra
2006-10-31 20:58 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Help
2006-10-31 20:46 -------- d-------- C:\Programme\TI Education
2006-10-31 19:00 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Sun
2006-10-31 17:55 -------- d-------- C:\Programme\Java
2006-10-31 17:54 -------- d-------- C:\Programme\Gemeinsame Dateien\Java
2006-10-31 17:54 -------- d-------- C:\Programme\Gemeinsame Dateien
2006-10-29 21:10 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Adobe
2006-10-29 15:21 -------- d---s---- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft
2006-10-29 13:15 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\dvdcss
2006-10-29 12:54 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\dvdisaster
2006-10-29 12:46 -------- d-------- C:\Programme\dvdisaster
2006-10-26 13:10 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Google
2006-10-26 13:09 -------- d--h----- C:\Programme\InstallShield Installation Information
2006-10-26 13:09 -------- d-------- C:\Programme\Google
2006-10-20 17:01 -------- d-------- C:\Programme\PartyGaming
2006-10-15 20:42 -------- d-------- C:\Programme\Rockstar Games
2006-10-15 20:03 -------- d-------- C:\Programme\RegCleaner
2006-10-15 18:29 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Ahead
2006-10-15 18:06 -------- d-------- C:\Programme\Gemeinsame Dateien\Ahead
2006-10-15 18:00 -------- d-------- C:\Programme\Nero
2006-10-15 17:57 -------- d-------- C:\Programme\Yahoo!
2006-10-15 12:57 -------- d-------- C:\Programme\SlySoft
2006-10-15 12:55 -------- d-------- C:\Programme\Elaborate Bytes
2006-10-12 14:14 -------- d-------- C:\Programme\Adobe
2006-10-12 14:08 -------- d-------- C:\Programme\Gemeinsame Dateien\Adobe
2006-10-12 14:07 -------- d-------- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared
2006-10-11 15:57 -------- d-------- C:\Programme\Teamspeak2_RC2
2006-10-11 15:57 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\teamspeak2
2006-10-11 15:25 -------- d-------- C:\Programme\FileZilla Server
2006-10-10 05:58 -------- d-------- C:\Programme\Outlook Express
2006-10-10 05:58 -------- d-------- C:\Programme\Gemeinsame Dateien\System
2006-10-09 19:08 -------- d-------- C:\Programme\Messenger
2006-10-09 18:04 -------- d-------- C:\Programme\Windows Media Player
2006-10-09 18:04 -------- d-------- C:\Programme\Internet Explorer
2006-10-08 21:00 -------- d-------- C:\Programme\Winamp
2006-10-08 08:29 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\ICQLite
2006-10-07 16:09 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Macromedia
2006-10-07 13:00 -------- d-------- C:\Programme\Tweak-XP Pro
2006-10-07 13:00 -------- d-------- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2006-10-07 12:49 -------- d-------- C:\Programme\TGTSoft
2006-10-07 12:44 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\vlc
2006-10-07 12:19 -------- d-------- C:\Programme\Gemeinsame Dateien\Designer
2006-10-07 12:04 -------- d--h----- C:\Programme\WindowsUpdate
2006-10-07 12:01 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla
2006-10-07 12:00 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Logitech
2006-10-07 11:56 118784 -r------- C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
2006-10-07 11:56 -------- d-------- C:\Programme\Logitech
2006-10-07 11:55 -------- d-------- C:\Programme\Gemeinsame Dateien\Logitech
2006-10-07 11:54 -------- d-------- C:\Programme\VIA
2006-10-07 11:54 -------- d-------- C:\Programme\Gemeinsame Dateien\InstallShield
2006-10-07 11:53 -------- d-------- C:\Programme\C-Media 3D Audio
2006-10-07 11:52 62 --ahs---- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\desktop.ini
2006-10-07 11:52 -------- d-------- C:\Programme\Gemeinsame Dateien\SpeechEngines
2006-10-07 11:52 -------- d-------- C:\Programme\Gemeinsame Dateien\ODBC
2006-10-07 11:44 -------- d-------- C:\Programme\Zone Labs
2006-10-07 11:41 -------- d-------- C:\Programme\WinRAR
2006-10-07 11:41 -------- d-------- C:\Programme\AntiVir PersonalEdition Classic
2006-10-07 11:40 -------- d-------- C:\Programme\VideoLAN
2006-10-07 11:24 -------- d-------- C:\Programme\Movie Maker
2006-10-07 11:21 -------- d-------- C:\Programme\Windows NT
2006-10-07 11:21 -------- d-------- C:\Programme\NetMeeting
2006-10-07 11:08 -------- d--h----- C:\Programme\Uninstall Information
2006-10-07 11:08 -------- d-------- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Identities
2006-10-07 11:03 -------- d-------- C:\Programme\xerox
2006-10-07 11:03 -------- d-------- C:\Programme\microsoft frontpage
2006-10-07 11:02 0 -rahs---- C:\MSDOS.SYS
2006-10-07 11:02 0 -rahs---- C:\IO.SYS
2006-10-07 11:02 0 --a------ C:\CONFIG.SYS
2006-10-07 11:02 0 --a------ C:\AUTOEXEC.BAT
2006-10-07 11:00 -------- d-------- C:\Programme\Online-Dienste
2006-10-07 10:59 -------- d-------- C:\Programme\Gemeinsame Dateien\MSSoap
2006-10-07 10:59 -------- d-------- C:\Programme\Gemeinsame Dateien\Dienste
2006-10-07 10:58 -------- d-------- C:\Programme\Online Services
2006-10-07 10:58 -------- d-------- C:\Programme\MSN Gaming Zone
2006-10-07 10:58 -------- d-------- C:\Programme\MSN
2006-10-07 10:58 -------- d-------- C:\Programme\ComPlus Applications
2006-09-13 06:02 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-09-07 11:54 57384 --a------ C:\WINDOWS\system32\avsda.dll
2006-08-25 16:46 617472 --a------ C:\WINDOWS\system32\comctl32.dll
2006-08-25 04:47 129784 --------- C:\WINDOWS\system32\pxafs.dll
2006-08-25 04:47 115880 --------- C:\WINDOWS\system32\pxinsi64.exe
2006-08-21 13:26 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 10:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-08-16 12:58 100352 --a------ C:\WINDOWS\system32\6to4svc.dll
2006-08-11 20:45 888832 --a------ C:\WINDOWS\system32\nvmobls.dll
2006-08-11 20:45 581632 --a------ C:\WINDOWS\system32\nvhwvid.dll
2006-08-11 20:45 5611520 --a------ C:\WINDOWS\system32\nvdisps.dll
2006-08-11 20:45 5251072 --a------ C:\WINDOWS\system32\nvdispsr.dll
2006-08-11 20:45 458752 --a------ C:\WINDOWS\system32\nvmccssr.dll
2006-08-11 20:45 45056 --a------ C:\WINDOWS\system32\nvmccsrs.dll
2006-08-11 20:45 3039232 --a------ C:\WINDOWS\system32\nvgames.dll
2006-08-11 20:45 2953216 --a------ C:\WINDOWS\system32\nvvitvsr.dll
2006-08-11 20:45 2928640 --a------ C:\WINDOWS\system32\nvgamesr.dll
2006-08-11 20:45 2904064 --a------ C:\WINDOWS\system32\nvvitvs.dll
2006-08-11 20:45 2859008 --a------ C:\WINDOWS\system32\nvmoblsr.dll
2006-08-11 20:45 266240 --a------ C:\WINDOWS\system32\nvrsesm.dll
2006-08-11 20:45 258048 --a------ C:\WINDOWS\system32\nvrsko.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrssl.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrssk.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrshu.dll
2006-08-11 20:45 229376 --a------ C:\WINDOWS\system32\nvmccs.dll
2006-08-11 20:45 188416 --a------ C:\WINDOWS\system32\nvmccss.dll
2006-08-11 20:45 1732608 --a------ C:\WINDOWS\system32\nvwssr.dll
2006-08-11 20:45 1236992 --a------ C:\WINDOWS\system32\nvwss.dll
2006-08-11 20:44 323584 --a------ C:\WINDOWS\system32\nvrshe.dll
2006-08-11 20:44 323584 --a------ C:\WINDOWS\system32\nvrsar.dll
2006-08-11 20:44 274432 --a------ C:\WINDOWS\system32\nvrses.dll
2006-08-11 20:44 274432 --a------ C:\WINDOWS\system32\nvrsel.dll
2006-08-11 20:44 266240 --a------ C:\WINDOWS\system32\nvrspt.dll
2006-08-11 20:44 262144 --a------ C:\WINDOWS\system32\nvrsja.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrstr.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrspl.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrsno.dll
2006-08-11 20:44 241664 --a------ C:\WINDOWS\system32\nvrscs.dll
2006-08-11 20:44 147456 --a------ C:\WINDOWS\system32\nvcolor.exe
2006-08-11 20:43 86016 --a------ C:\WINDOWS\system32\nvmctray.dll
2006-08-11 20:43 81920 --a------ C:\WINDOWS\system32\nvwddi.dll
2006-08-11 20:43 794624 --a------ C:\WINDOWS\system32\nvcplui.exe
2006-08-11 20:43 7630848 --a------ C:\WINDOWS\system32\nvcpl.dll
2006-08-11 20:43 466944 --a------ C:\WINDOWS\system32\nvshell.dll
2006-08-11 20:43 442368 --a------ C:\WINDOWS\system32\nvappbar.exe
2006-08-11 20:43 425984 --a------ C:\WINDOWS\system32\keystone.exe
2006-08-11 20:43 335872 --a------ C:\WINDOWS\system32\nvwrses.dll
2006-08-11 20:43 335872 --a------ C:\WINDOWS\system32\nvwrsel.dll
2006-08-11 20:43 327680 --a------ C:\WINDOWS\system32\nvwrsfr.dll
2006-08-11 20:43 327680 --a------ C:\WINDOWS\system32\nvwrsesm.dll
2006-08-11 20:43 323584 --a------ C:\WINDOWS\system32\nvwrspt.dll
2006-08-11 20:43 323584 --a------ C:\WINDOWS\system32\nvwrsit.dll
2006-08-11 20:43 319488 --a------ C:\WINDOWS\system32\nvwrsptb.dll
2006-08-11 20:43 319488 --a------ C:\WINDOWS\system32\nvwrsnl.dll
2006-08-11 20:43 315392 --a------ C:\WINDOWS\system32\nvwrsru.dll
2006-08-11 20:43 315392 --a------ C:\WINDOWS\system32\nvwrshu.dll
2006-08-11 20:43 311296 --a------ C:\WINDOWS\system32\nvwrsde.dll
2006-08-11 20:43 311296 --a------ C:\WINDOWS\system32\nvexpbar.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrstr.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrssl.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrsfi.dll
2006-08-11 20:43 299008 --a------ C:\WINDOWS\system32\nvwrssk.dll
2006-08-11 20:43 299008 --a------ C:\WINDOWS\system32\nvwrsno.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrssv.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrspl.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrsda.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvwrseng.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvwrscs.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll
2006-08-11 20:43 282624 --a------ C:\WINDOWS\system32\nvwrsar.dll
2006-08-11 20:43 278528 --a------ C:\WINDOWS\system32\nvwrshe.dll
2006-08-11 20:43 278528 --a------ C:\WINDOWS\system32\nvrsfr.dll
2006-08-11 20:43 274432 --a------ C:\WINDOWS\system32\nvrsit.dll
2006-08-11 20:43 270336 --a------ C:\WINDOWS\system32\nvrsde.dll
2006-08-11 20:43 266240 --a------ C:\WINDOWS\system32\nvrsnl.dll
2006-08-11 20:43 262144 --a------ C:\WINDOWS\system32\nvrsru.dll
2006-08-11 20:43 262144 --a------ C:\WINDOWS\system32\nvrsptb.dll
2006-08-11 20:43 245760 --a------ C:\WINDOWS\system32\nvrssv.dll
2006-08-11 20:43 245760 --a------ C:\WINDOWS\system32\nvrsda.dll
2006-08-11 20:43 241664 --a------ C:\WINDOWS\system32\nvrsfi.dll
2006-08-11 20:43 241664 --a------ C:\WINDOWS\system32\nvrseng.dll
2006-08-11 20:43 221184 --a------ C:\WINDOWS\system32\nvrszhc.dll
2006-08-11 20:43 212992 --a------ C:\WINDOWS\system32\nvwrsja.dll
2006-08-11 20:43 196608 --a------ C:\WINDOWS\system32\nvwrsko.dll
2006-08-11 20:43 196608 --a------ C:\WINDOWS\system32\nvapi.dll
2006-08-11 20:43 167936 --a------ C:\WINDOWS\system32\nvwrszht.dll
2006-08-11 20:43 1662976 --a------ C:\WINDOWS\system32\nvwdmcpl.dll
2006-08-11 20:43 163840 --a------ C:\WINDOWS\system32\nvwrszhc.dll
2006-08-11 20:43 1519616 --a------ C:\WINDOWS\system32\nwiz.exe
2006-08-11 20:43 1470464 --a------ C:\WINDOWS\system32\nview.dll
2006-08-11 20:43 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe
2006-08-11 20:43 122880 --a------ C:\WINDOWS\system32\nvrszht.dll
2006-08-11 20:43 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll
2006-08-11 20:43 1011712 --a------ C:\WINDOWS\system32\nvcpluir.dll
2006-08-11 20:42 5636096 --a------ C:\WINDOWS\system32\nvoglnt.dll
2006-08-11 20:42 4496128 --a------ C:\WINDOWS\system32\nv4_disp.dll
2006-08-11 20:42 35840 --a------ C:\WINDOWS\system32\nvcodins.dll
2006-08-11 20:42 35840 --a------ C:\WINDOWS\system32\nvcod.dll
2006-08-11 20:42 155715 --a------ C:\WINDOWS\system32\nvsvc32.exe


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"STYLEXP"="C:\\Programme\\TGTSoft\\StyleXP\\StyleXP.exe -Hide"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce]
"1&1_1&1 SoftPhone"="\"C:\\Programme\\1&1\\1&1 SoftPhone\\IPPHONE.EXE\" /hide"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"avgnt"="\"C:\\Programme\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"
"Zone Labs Client"="\"C:\\Programme\\Zone Labs\\ZoneAlarm\\zlclient.exe\""
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000005

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Die derzeitige Homepage"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,a0,00,00,00,00,00,00,00,80,02,00,00,3a,02,\
00,00,04,00,00,40
"RestoredStateInfo"=hex:18,00,00,00,a0,00,00,00,00,00,00,00,80,02,00,00,3a,02,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
"{11853d5f-f894-4cc7-bbc3-fc7a9dcfd896}"="bonspells"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]
"isamonitor.exe"="C:\\Programme\\QualityCodec\\isamonitor.exe"
"pmsngr.exe"="C:\\Programme\\QualityCodec\\pmsngr.exe"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
"bonspells"="{11853d5f-f894-4cc7-bbc3-fc7a9dcfd896}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

Completion time: 06-11-10 17:19:11.73
C:\ComboFix.txt ... 06-11-10 17:19
RegSrch.vbs log




Zitat

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "QualityCodec" 10.11.2006 17:28:16

; NOTE: This file will be deleted when you close WordPad.
; You must manually save this file to a new location if you want to refer to it again later.
; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{192c5b4a-3efd-40c7-9f99-c472deb8efc0}\InprocServer32]
@="C:\\Programme\\QualityCodec\\isaddon.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bf1ced2c-4b3f-4079-a330-864eda5a4cff}\InprocServer32]
@="C:\\Programme\\QualityCodec\\iesplugin.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run]
"isamonitor.exe"="C:\\Programme\\QualityCodec\\isamonitor.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run]
"pmsngr.exe"="C:\\Programme\\QualityCodec\\pmsngr.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Security Plugin 2006]
"UninstallString"="\"C:\\Programme\\QualityCodec\\iesuninst.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Public Messenger ver 2.03]
"UninstallString"="\"C:\\Programme\\QualityCodec\\pmuninst.exe\""

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Internet Security]
"Path"="C:\\Programme\\QualityCodec"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"b"="C:\\Programme\\QualityCodec\\isamini.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"c"="C:\\Programme\\QualityCodec\\pmmon.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"d"="C:\\Programme\\QualityCodec\\isauninst.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"e"="C:\\Programme\\QualityCodec\\isamonitor.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"f"="C:\\Programme\\QualityCodec\\pmsngr.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\exe]
"b"="C:\\Programme\\QualityCodec\\pmmon.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\exe]
"c"="C:\\Programme\\QualityCodec\\isamini.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\exe]
"d"="C:\\Programme\\QualityCodec\\isauninst.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\exe]
"e"="C:\\Programme\\QualityCodec\\isamonitor.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\exe]
"f"="C:\\Programme\\QualityCodec\\pmsngr.exe"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Programme\\QualityCodec\\isamonitor.exe"="isamonitor"

[HKEY_USERS\S-1-5-21-1229272821-2111687655-839522115-500\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Programme\\QualityCodec\\pmsngr.exe"="pmsngr"
bei hqvideocodec hat er bei mir auch nichts gefunden.
Seitenanfang Seitenende
11.11.2006, 01:00
Sabina
Ehrenmitglied
Avatar Sabina

Beiträge: 29434
#2 warum Doppeltposting ??? deshalb wird auch nicht schneller geholfen ;)
die Reinigung findest du in dem anderen Thread.
__________
MfG Sabina

rund um die PC-Sicherheit
Seitenanfang Seitenende
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!

Folgende Themen könnten Dich auch interessieren:
Seite(n): 1