Virus, google Schrift im Internetexplorer komisch

#0
16.08.2009, 17:09
Member

Beiträge: 108
#1 Hallo hab mal wieder ein Problem, ich hoffe ihr könnt mir da weiterhelfen.

Vor kurzem hat mir Antivir eine verdächtige Datei genannt, welche ich natürlich gelöscht habe.

Daraufhin gab es einige Fehler, so ist der Rechner einmal abgestürzt und normale DVD Rowlinge erkennt er nicht an. Obwohl die DVD unbeschrieben ist, wird eine Größe von 0Bytes angezeigt.
Die Schrift von der Googlehomepage sieht ziemlich komisch aus, anbei ein Bild im Anhang.

Hier kommen die Berichte von Antivir

In der Datei 'C:\Dokumente und Einstellungen\Roitzheim\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YBGP9B7H\doc1[1].pdf'
wurde ein Virus oder unerwünschtes Programm 'EXP/Pidief.pta' [exploit] gefunden.
Ausgeführte Aktion: Datei löschen

In der Datei 'C:\Dokumente und Einstellungen\Roitzheim\Lokale Einstellungen\temp\Acr2DD6.tmp'
wurde ein Virus oder unerwünschtes Programm 'EXP/Pidief.pta' [exploit] gefunden.
Ausgeführte Aktion: Datei löschen

In der Datei 'C:\Dokumente und Einstellungen\Roitzheim\Lokale Einstellungen\temp\UACf527.tmp'
wurde ein Virus oder unerwünschtes Programm 'TR/Patched.HB.3' [trojan] gefunden.
Ausgeführte Aktion: Datei löschen

Die Datei 'C:\Dokumente und Einstellungen\Roitzheim\Lokale Einstellungen\temp\Acr4445.tmp'
enthielt einen Virus oder unerwünschtes Programm 'EXP/Pidief.pta' [exploit].
Durchgeführte Aktion(en):
Die Datei wurde gelöscht.


habe soeben den Rechner neugestartet und hatte gehofft, dass ich mbam jetzt starten könnte, aber es ist scheinbar das einzige Programm, welches ich nicht ausführen kann durchs doppelklicken.


Hab nun alles versucht, aber Mbam kriege ich nicht ins laufen




Hier der Hijackthis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:27:53, on 16.08.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
C:\Programme\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\servises.exe
C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
C:\Programme\Home Cinema\PowerCinema\PCMService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\vsnpstd.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\servises.exe
C:\WINDOWS\system32\servises.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\phonostar\ps_timer.exe
C:\WINDOWS\system32\drivers\svchost.exe
C:\WINDOWS\system32\servises.exe
C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\Roitzheim\Desktop\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Keyboard Status] C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programme\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [servises] C:\WINDOWS\system32\servises.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PhonostarTimer] C:\Programme\phonostar\ps_timer.exe
O4 - HKCU\..\Run: [ICQ] "C:\Programme\ICQ6\ICQ.exe" silent
O4 - HKCU\..\Run: [SVCHOST.EXE] C:\WINDOWS\system32\drivers\svchost.exe
O4 - HKCU\..\Run: [servises] C:\WINDOWS\system32\servises.exe
O4 - HKLM\..\Policies\Explorer\Run: [servises] C:\WINDOWS\system32\servises.exe
O4 - HKCU\..\Policies\Explorer\Run: [servises] C:\WINDOWS\system32\servises.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Watch.lnk = C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BlueSoleil.lnk = C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: p6übersicht.lnk = C:\Programme\phase6\phase6\WinStart\WinStart.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/kavwebscan_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.de/scan_de/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136469868593
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols3/fscax.cab
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: lxcf_device - - C:\WINDOWS\system32\lxcfcoms.exe
O23 - Service: T-Online WLAN Adapter Steuerungsdienst (MZCCntrl) - Deutsche Telekom AG, Marmiko IT-Solutions GmbH - C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe (file missing)

--
End of file - 10700 bytes

Dieser Beitrag wurde am 16.08.2009 um 17:27 Uhr von Madn editiert.
Seitenanfang Seitenende
16.08.2009, 17:28
Moderator

Beiträge: 7805
#2 Nutz bitte einmal Combofix. Solltest du es noch von deinen letzten Bereinigungen installiert haben, gebe unter start/ausfuehren
combofix /u
ein und druecke Enter. Dann lade dir eine neue version und downloade sie als test.exe auf den Desktop. Den Rest kennst du noch, oder? ;)
http://board.protecus.de/t23188.htm#275370
__________
MfG Ralf
SEO-Spam Hunter
Seitenanfang Seitenende
16.08.2009, 17:43
Member

Themenstarter

Beiträge: 108
#3 bin grade dabei gmer laufen zu lassen, wenn ich Combofix ausführe muss der Rechner neugestartet werden richtig?
Weil sonst muss ich warten, bis gmer fertig ist.

Und naja glaub wenn ich die Prozedur noch ein paar mal machen muss, dann kenn ichs wirklich auswendig, aber so fallen mir die genauen Schritte mit test.exe etc beim Combofix nicht mehr ein.

Einschub: grad beim Schreiben ist mir der Rechner eingefroren und ich musste kalt ausschalten.
Zum Glück gibts ja sitzung wiederherstellen, so war mein Text noch da.

Aber gmer ist natürlich auch mit abgestürzt.

Soll ich jetzt gmer starten oder combofix?




edit. wollte jetzt einfach combofix starten, aber auch hier startet das Programm nicht durch Doppelklicken und combofix /u erzieht auch keine Wirkung
Dieser Beitrag wurde am 16.08.2009 um 17:51 Uhr von Madn editiert.
Seitenanfang Seitenende
16.08.2009, 17:49
Moderator

Beiträge: 7805
#4 Ja, nutz Combofix:

http://board.protecus.de/t23188.htm#275370
__________
MfG Ralf
SEO-Spam Hunter
Seitenanfang Seitenende
16.08.2009, 18:17
Member

Themenstarter

Beiträge: 108
#5 ComboFix 09-08-10.06 - Roitzheim 16.08.2009 18:04.7.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.49.1031.18.1023.572 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Roitzheim\Desktop\ComboFix..exe
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
* Neuer Wiederherstellungspunkt wurde erstellt
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Installer\WinRMSrv.msi
c:\windows\system32\_id.dat
c:\windows\system32\drivers\svchost.exe
c:\windows\system32\drivers\UACuwrrnqohmp.sys
c:\windows\system32\dzgtactx.dll
c:\windows\system32\mscomct2.dat
c:\windows\system32\uacinit.dll
c:\windows\system32\UACknaaxtllut.dll
c:\windows\system32\UACrogpxtjtdm.dat
c:\windows\system32\UACvvqjmysvsa.dll
c:\windows\Sysvxd.exe


.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_UACd.sys
-------\Legacy_UACd.sys


((((((((((((((((((((((( Dateien erstellt von 2009-07-16 bis 2009-08-16 ))))))))))))))))))))))))))))))
.

2009-08-12 19:47 . 2009-07-10 13:26 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-08-05 08:59 . 2009-08-05 08:59 206336 -c----w- c:\windows\system32\dllcache\mswebdvd.dll
2009-07-17 19:01 . 2009-07-17 19:01 58880 -c----w- c:\windows\system32\dllcache\atl.dll

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-16 15:43 . 2005-01-27 08:31 17408 ----a-w- c:\windows\system32\drivers\USBCRFT.SYS
2009-08-16 15:23 . 2008-09-28 12:37 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware
2009-08-16 14:02 . 2007-01-20 13:41 -------- d-----w- c:\programme\Mozilla Thunderbird
2009-08-16 10:12 . 2005-04-02 16:10 -------- d-----w- c:\dokumente und einstellungen\Roitzheim\Anwendungsdaten\Skype
2009-08-16 10:11 . 2009-06-06 20:47 -------- d-----w- c:\dokumente und einstellungen\Roitzheim\Anwendungsdaten\skypePM
2009-08-16 07:53 . 2006-02-02 12:39 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic
2009-08-14 12:11 . 2006-02-14 19:29 -------- d-----w- c:\programme\Lx_cats
2009-08-10 19:28 . 2005-04-02 13:42 50130 ----a-w- c:\dokumente und einstellungen\Roitzheim\Anwendungsdaten\wklnhst.dat
2009-08-09 21:00 . 2009-03-22 22:19 -------- d-----w- c:\programme\Unlocker
2009-08-05 08:59 . 2004-08-04 12:00 206336 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-03 11:36 . 2008-09-28 12:37 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-03 11:36 . 2008-09-28 12:37 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-18 09:52 . 2009-05-23 08:38 -------- d-----w- c:\dokumente und einstellungen\Roitzheim\Anwendungsdaten\Move Networks
2009-07-17 19:01 . 2004-08-04 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 21:43 . 2004-08-04 12:00 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-07 10:48 . 2009-07-07 10:48 -------- d-----w- c:\programme\SESoftware
2009-07-04 07:31 . 2009-07-04 07:31 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
2009-07-04 07:31 . 2009-07-04 07:31 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2009-06-29 15:55 . 2004-08-04 12:00 827392 ----a-w- c:\windows\system32\wininet.dll
2009-06-29 15:55 . 2004-08-04 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-06-29 15:55 . 2004-08-04 12:00 17408 ----a-w- c:\windows\system32\corpol.dll
2009-06-25 16:39 . 2009-06-25 16:39 -------- d-----w- c:\programme\7-Zip
2009-06-19 23:48 . 2007-06-25 08:58 -------- d-----w- c:\dokumente und einstellungen\Roitzheim\Anwendungsdaten\Hamachi
2009-06-18 10:03 . 2009-06-18 09:57 -------- d-----w- c:\programme\ICQ6.5
2009-06-18 09:59 . 2008-02-13 14:14 -------- d-----w- c:\programme\ICQ6
2009-06-16 14:36 . 2004-08-04 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:36 . 2004-08-04 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 10:43 . 2004-08-04 12:00 78848 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 14:13 . 2004-08-04 12:00 85504 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 07:19 . 2005-01-26 20:08 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 06:14 . 2004-08-04 12:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-03 19:09 . 2004-08-04 12:00 1296896 ----a-w- c:\windows\system32\quartz.dll
2009-05-28 18:30 . 2007-04-23 11:36 75096 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-05-23 08:38 . 2009-05-23 08:38 34062 ----a-w- c:\dokumente und einstellungen\Roitzheim\Anwendungsdaten\Move Networks\ie_bin\Uninst.exe
2009-05-22 17:48 . 2005-06-15 18:06 21840 ----atw- c:\windows\system32\SIntfNT.dll
2009-05-22 17:48 . 2005-06-15 18:06 17212 ----atw- c:\windows\system32\SIntf32.dll
2009-05-22 17:48 . 2005-06-15 18:06 12067 ----atw- c:\windows\system32\SIntf16.dll
2009-05-22 15:05 . 2009-05-22 17:43 518 ----a-w- c:\windows\system32\grpconv.reg
2009-05-22 07:57 . 2009-05-22 07:57 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-05-22 07:56 . 2009-05-22 07:56 152576 ----a-w- c:\dokumente und einstellungen\Roitzheim\Anwendungsdaten\Sun\Java\jre1.6.0_13\lzma.dll
2005-02-21 15:07 . 2005-02-21 15:07 56 --sha-r- c:\windows\system32\41D12D28A0.sys
2005-02-06 13:08 . 2005-02-06 13:08 8 --sha-r- c:\windows\system32\D5D86239B1.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-05-26_20.52.37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-16 16:03 . 2009-08-16 16:03 16384 c:\windows\temp\Perflib_Perfdata_164.dat
- 2005-09-29 06:37 . 2008-07-09 07:37 26488 c:\windows\system32\spupdsvc.exe
+ 2005-09-29 06:37 . 2007-07-27 08:41 26488 c:\windows\system32\spupdsvc.exe
- 2007-01-28 14:19 . 2007-11-30 12:39 18808 c:\windows\system32\spmsg.dll
+ 2007-01-28 14:19 . 2008-07-08 13:00 18808 c:\windows\system32\spmsg.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 44544 c:\windows\system32\pngfilt.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 44544 c:\windows\system32\pngfilt.dll
+ 2008-05-02 08:58 . 2008-05-02 08:58 90624 c:\windows\system32\nmwcdcls.dll
- 2006-10-27 14:09 . 2009-02-20 16:49 52224 c:\windows\system32\msfeedsbs.dll
+ 2006-10-27 14:09 . 2009-06-29 15:55 52224 c:\windows\system32\msfeedsbs.dll
+ 2008-02-08 13:20 . 2009-06-21 23:11 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
- 2004-08-04 12:00 . 2009-02-20 16:49 27648 c:\windows\system32\jsproxy.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 27648 c:\windows\system32\jsproxy.dll
+ 2006-10-27 01:44 . 2009-06-29 11:07 13824 c:\windows\system32\ieudinit.exe
- 2006-10-27 01:44 . 2009-02-20 10:20 13824 c:\windows\system32\ieudinit.exe
+ 2004-08-04 12:00 . 2009-06-29 15:55 44544 c:\windows\system32\iernonce.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 44544 c:\windows\system32\iernonce.dll
+ 2004-08-04 12:00 . 2009-06-29 11:07 70656 c:\windows\system32\ie4uinit.exe
- 2004-08-04 12:00 . 2009-02-20 10:20 70656 c:\windows\system32\ie4uinit.exe
+ 2006-10-17 11:58 . 2009-06-29 15:55 63488 c:\windows\system32\icardie.dll
- 2006-10-17 11:58 . 2009-02-20 16:49 63488 c:\windows\system32\icardie.dll
+ 2006-11-02 05:22 . 2006-11-02 05:22 32224 c:\windows\system32\drivers\wdfldr.sys
+ 2009-07-04 07:37 . 2008-04-13 18:45 26112 c:\windows\system32\drivers\usbser.sys
- 2008-07-31 22:17 . 2008-07-31 22:17 43872 c:\windows\system32\drivers\pxhelp20.sys
+ 2008-11-20 19:19 . 2008-11-20 19:19 43872 c:\windows\system32\drivers\pxhelp20.sys
+ 2008-05-02 08:58 . 2008-05-02 08:58 20864 c:\windows\system32\drivers\ccdcmbo.sys
+ 2008-05-02 08:58 . 2008-05-02 08:58 17536 c:\windows\system32\drivers\ccdcmb.sys
+ 2009-07-04 07:37 . 2008-04-13 18:45 26112 c:\windows\system32\dllcache\usbser.sys
+ 2009-06-15 10:43 . 2009-06-15 10:43 78848 c:\windows\system32\dllcache\telnet.exe
+ 2004-08-04 12:00 . 2009-06-29 15:55 44544 c:\windows\system32\dllcache\pngfilt.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 44544 c:\windows\system32\dllcache\pngfilt.dll
+ 2007-05-10 06:56 . 2009-06-29 15:55 52224 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-05-10 06:56 . 2009-02-20 16:49 52224 c:\windows\system32\dllcache\msfeedsbs.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 27648 c:\windows\system32\dllcache\jsproxy.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 27648 c:\windows\system32\dllcache\jsproxy.dll
- 2007-05-10 06:56 . 2009-02-20 10:20 13824 c:\windows\system32\dllcache\ieudinit.exe
+ 2007-05-10 06:56 . 2009-06-29 11:07 13824 c:\windows\system32\dllcache\ieudinit.exe
+ 2004-08-04 12:00 . 2009-06-29 15:55 44544 c:\windows\system32\dllcache\iernonce.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2007-08-13 17:45 . 2009-06-29 15:55 78336 c:\windows\system32\dllcache\ieencode.dll
- 2007-08-13 17:45 . 2009-02-20 16:49 78336 c:\windows\system32\dllcache\ieencode.dll
- 2004-08-04 12:00 . 2009-02-20 10:20 70656 c:\windows\system32\dllcache\ie4uinit.exe
+ 2004-08-04 12:00 . 2009-06-29 11:07 70656 c:\windows\system32\dllcache\ie4uinit.exe
+ 2007-08-20 09:55 . 2009-06-29 15:55 63488 c:\windows\system32\dllcache\icardie.dll
- 2007-08-20 09:55 . 2009-02-20 16:49 63488 c:\windows\system32\dllcache\icardie.dll
+ 2009-06-16 14:36 . 2009-06-16 14:36 81920 c:\windows\system32\dllcache\fontsub.dll
+ 2007-08-13 17:42 . 2009-06-29 15:55 17408 c:\windows\system32\dllcache\corpol.dll
- 2007-08-13 17:42 . 2007-08-13 17:42 17408 c:\windows\system32\dllcache\corpol.dll
+ 2009-06-10 14:13 . 2009-06-10 14:13 85504 c:\windows\system32\dllcache\avifil32.dll
+ 2005-01-26 20:12 . 2009-08-16 15:42 32768 c:\windows\system32\config\systemprofile\Lokale Einstellungen\Verlauf\History.IE5\index.dat
- 2005-01-26 20:12 . 2009-05-21 18:02 32768 c:\windows\system32\config\systemprofile\Lokale Einstellungen\Verlauf\History.IE5\index.dat
+ 2005-01-26 20:12 . 2009-08-16 15:42 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2005-01-26 20:12 . 2009-05-21 18:02 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2006-01-05 14:10 . 2006-01-05 14:10 20480 c:\windows\Installer\b0abe.msi
+ 2008-10-11 22:33 . 2008-10-11 22:33 90624 c:\windows\Installer\29fb1f2.msi
+ 2005-01-27 15:42 . 2005-01-27 15:42 65024 c:\windows\Installer\28f24.msi
+ 2005-02-12 18:31 . 2009-06-11 10:39 45056 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\wordicon.exe
- 2005-02-12 18:31 . 2009-05-22 09:47 45056 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\wordicon.exe
+ 2005-02-12 18:31 . 2009-06-11 10:39 22528 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\unbndico.exe
- 2005-02-12 18:31 . 2009-05-22 09:47 22528 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\unbndico.exe
+ 2005-02-12 18:31 . 2009-06-11 10:39 16384 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\PEicons.exe
- 2005-02-12 18:31 . 2009-05-22 09:47 16384 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\PEicons.exe
+ 2005-02-12 18:31 . 2009-06-11 10:39 34304 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\misc.exe
- 2005-02-12 18:31 . 2009-05-22 09:47 34304 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\misc.exe
+ 2009-06-11 10:39 . 2009-06-11 10:39 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
- 2009-05-13 14:37 . 2009-05-13 14:37 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 69120 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\xlicons.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 69120 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\xlicons.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 35328 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\wordicon.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 35328 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\wordicon.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 30208 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\pptico.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 30208 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\pptico.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 11264 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\PEicons.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 11264 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\PEicons.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 28160 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\misc.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 28160 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\misc.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 73216 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\fpicon.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 73216 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\fpicon.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 22528 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\bindico.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 22528 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\bindico.exe
+ 2006-10-26 20:13 . 2006-10-26 20:13 72472 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.4518\XL12CNVP.DLL
+ 2009-07-29 13:01 . 2009-04-29 04:42 44544 c:\windows\ie7updates\KB972260-IE7\pngfilt.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 52224 c:\windows\ie7updates\KB972260-IE7\msfeedsbs.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 27648 c:\windows\ie7updates\KB972260-IE7\jsproxy.dll
+ 2009-07-29 13:01 . 2009-04-28 09:05 13824 c:\windows\ie7updates\KB972260-IE7\ieudinit.exe
+ 2009-07-29 13:01 . 2009-04-29 04:41 44544 c:\windows\ie7updates\KB972260-IE7\iernonce.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 78336 c:\windows\ie7updates\KB972260-IE7\ieencode.dll
+ 2009-07-29 13:01 . 2009-04-28 09:05 70656 c:\windows\ie7updates\KB972260-IE7\ie4uinit.exe
+ 2009-07-29 13:01 . 2009-04-29 04:41 63488 c:\windows\ie7updates\KB972260-IE7\icardie.dll
+ 2009-07-29 13:01 . 2008-04-14 02:22 35328 c:\windows\ie7updates\KB972260-IE7\corpol.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 44544 c:\windows\ie7updates\KB969897-IE7\pngfilt.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 52224 c:\windows\ie7updates\KB969897-IE7\msfeedsbs.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 27648 c:\windows\ie7updates\KB969897-IE7\jsproxy.dll
+ 2009-06-11 10:36 . 2009-02-20 10:20 13824 c:\windows\ie7updates\KB969897-IE7\ieudinit.exe
+ 2009-06-11 10:36 . 2009-02-20 16:49 44544 c:\windows\ie7updates\KB969897-IE7\iernonce.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 78336 c:\windows\ie7updates\KB969897-IE7\ieencode.dll
+ 2009-06-11 10:36 . 2009-02-20 10:20 70656 c:\windows\ie7updates\KB969897-IE7\ie4uinit.exe
+ 2009-06-11 10:36 . 2009-02-20 16:49 63488 c:\windows\ie7updates\KB969897-IE7\icardie.dll
+ 2005-01-27 03:59 . 2004-08-04 12:00 70656 c:\windows\I386\WINNT32.MSI
+ 2009-07-04 07:30 . 2006-11-02 05:22 51680 c:\windows\$NtUninstallWdf01005$\spuninst\Kmdfcustom.dll
+ 2009-07-15 17:36 . 2008-04-14 02:22 80896 c:\windows\$NtUninstallKB961371$\fontsub.dll
+ 2009-07-15 17:38 . 2008-07-08 13:00 26488 c:\windows\$hf_mig$\KB973346\update\spcustom.dll
+ 2009-07-15 17:38 . 2008-07-08 13:00 18808 c:\windows\$hf_mig$\KB973346\spmsg.dll
+ 2009-07-15 17:38 . 2008-07-08 13:00 26488 c:\windows\$hf_mig$\KB971633\update\spcustom.dll
+ 2009-07-15 17:38 . 2008-07-08 13:00 18808 c:\windows\$hf_mig$\KB971633\spmsg.dll
+ 2009-06-11 10:37 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB970238\update\spcustom.dll
+ 2009-06-11 10:37 . 2007-11-30 12:39 18808 c:\windows\$hf_mig$\KB970238\spmsg.dll
+ 2009-06-11 10:39 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB969898\update\spcustom.dll
+ 2009-06-11 10:39 . 2007-11-30 12:39 18808 c:\windows\$hf_mig$\KB969898\spmsg.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 26488 c:\windows\$hf_mig$\KB969897-IE7\update\spcustom.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 18808 c:\windows\$hf_mig$\KB969897-IE7\spmsg.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 44544 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\pngfilt.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 52224 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\msfeedsbs.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 27648 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\jsproxy.dll
+ 2009-04-28 09:55 . 2009-04-28 09:55 13824 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ieudinit.exe
+ 2009-04-29 04:34 . 2009-04-29 04:34 44544 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\iernonce.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 78336 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ieencode.dll
+ 2009-04-28 09:55 . 2009-04-28 09:55 70656 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ie4uinit.exe
+ 2009-04-29 04:34 . 2009-04-29 04:34 63488 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\icardie.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 26488 c:\windows\$hf_mig$\KB968537\update\spcustom.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 18808 c:\windows\$hf_mig$\KB968537\spmsg.dll
+ 2009-06-11 10:39 . 2008-07-09 07:37 26488 c:\windows\$hf_mig$\KB961501\update\spcustom.dll
+ 2009-06-11 10:39 . 2008-07-09 07:37 18808 c:\windows\$hf_mig$\KB961501\spmsg.dll
+ 2009-07-15 17:36 . 2008-07-08 13:00 26488 c:\windows\$hf_mig$\KB961371\update\spcustom.dll
+ 2009-07-15 17:36 . 2008-07-08 13:00 18808 c:\windows\$hf_mig$\KB961371\spmsg.dll
+ 2009-06-16 14:43 . 2009-06-16 14:43 81920 c:\windows\$hf_mig$\KB961371\SP3QFE\fontsub.dll
+ 2008-05-02 08:58 . 2008-05-02 08:58 8064 c:\windows\system32\drivers\usbser_lowerflt.sys
- 2005-02-12 18:31 . 2009-05-22 09:47 3584 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\opwicon.exe
+ 2005-02-12 18:31 . 2009-06-11 10:39 3584 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\opwicon.exe
+ 2005-02-12 18:31 . 2009-06-11 10:39 8192 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\mspicons.exe
- 2005-02-12 18:31 . 2009-05-22 09:47 8192 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\mspicons.exe
+ 2005-02-12 18:31 . 2009-06-11 10:39 2560 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\cagicon.exe
- 2005-02-12 18:31 . 2009-05-22 09:47 2560 c:\windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\cagicon.exe
- 2004-08-04 12:00 . 2009-02-20 16:49 233472 c:\windows\system32\webcheck.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 233472 c:\windows\system32\webcheck.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 105984 c:\windows\system32\url.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 105984 c:\windows\system32\url.dll
+ 2004-08-04 12:00 . 2009-04-15 14:51 585216 c:\windows\system32\rpcrt4.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 102912 c:\windows\system32\occache.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 102912 c:\windows\system32\occache.dll
+ 2008-05-02 08:58 . 2008-05-02 08:58 148992 c:\windows\system32\nsesetup.dll
+ 2008-05-02 08:58 . 2008-05-02 08:58 733696 c:\windows\system32\nmwcdcocls.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 671232 c:\windows\system32\mstime.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 671232 c:\windows\system32\mstime.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 193024 c:\windows\system32\msrating.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 193024 c:\windows\system32\msrating.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 477696 c:\windows\system32\mshtmled.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 477696 c:\windows\system32\mshtmled.dll
+ 2006-10-27 14:09 . 2009-06-29 15:55 459264 c:\windows\system32\msfeeds.dll
- 2006-10-27 14:09 . 2009-02-20 16:49 459264 c:\windows\system32\msfeeds.dll
+ 2009-02-03 02:15 . 2009-02-03 02:15 240544 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2004-08-04 12:00 . 2009-05-07 15:32 348160 c:\windows\system32\localspl.dll
- 2006-10-17 11:57 . 2009-02-20 16:49 268288 c:\windows\system32\iertutil.dll
+ 2006-10-17 11:57 . 2009-06-29 15:55 268288 c:\windows\system32\iertutil.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 385024 c:\windows\system32\iedkcs32.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 385024 c:\windows\system32\iedkcs32.dll
+ 2006-10-17 11:27 . 2009-06-29 15:55 380928 c:\windows\system32\ieapfltr.dll
- 2004-08-04 12:00 . 2009-02-20 05:14 161792 c:\windows\system32\ieakui.dll
+ 2004-08-04 12:00 . 2009-06-29 08:33 161792 c:\windows\system32\ieakui.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 230400 c:\windows\system32\ieaksie.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 230400 c:\windows\system32\ieaksie.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 153088 c:\windows\system32\ieakeng.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 153088 c:\windows\system32\ieakeng.dll
- 2005-12-27 13:10 . 2009-04-09 08:59 426208 c:\windows\system32\FNTCACHE.DAT
+ 2005-12-27 13:10 . 2009-06-11 10:41 426208 c:\windows\system32\FNTCACHE.DAT
+ 2004-08-04 12:00 . 2009-06-29 15:55 133120 c:\windows\system32\extmgr.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 133120 c:\windows\system32\extmgr.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 214528 c:\windows\system32\dxtrans.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 214528 c:\windows\system32\dxtrans.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 347136 c:\windows\system32\dxtmsft.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 347136 c:\windows\system32\dxtmsft.dll
+ 2006-11-02 05:22 . 2006-11-02 05:22 492000 c:\windows\system32\drivers\wdf01000.sys
+ 2004-08-04 12:00 . 2009-07-13 21:43 286208 c:\windows\system32\dllcache\wmpdxm.dll
+ 2009-06-10 06:14 . 2009-06-10 06:14 132096 c:\windows\system32\dllcache\wkssvc.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 827392 c:\windows\system32\dllcache\wininet.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 105984 c:\windows\system32\dllcache\url.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 105984 c:\windows\system32\dllcache\url.dll
+ 2009-06-16 14:36 . 2009-06-16 14:36 119808 c:\windows\system32\dllcache\t2embed.dll
+ 2009-04-15 14:51 . 2009-04-15 14:51 585216 c:\windows\system32\dllcache\rpcrt4.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 102912 c:\windows\system32\dllcache\occache.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 102912 c:\windows\system32\dllcache\occache.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 671232 c:\windows\system32\dllcache\mstime.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 671232 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 193024 c:\windows\system32\dllcache\msrating.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 193024 c:\windows\system32\dllcache\msrating.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 477696 c:\windows\system32\dllcache\mshtmled.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 477696 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-05-10 06:56 . 2009-06-29 15:55 459264 c:\windows\system32\dllcache\msfeeds.dll
- 2007-05-10 06:56 . 2009-02-20 16:49 459264 c:\windows\system32\dllcache\msfeeds.dll
+ 2009-05-07 15:32 . 2009-05-07 15:32 348160 c:\windows\system32\dllcache\localspl.dll
+ 2005-01-26 20:09 . 2009-06-29 08:35 634632 c:\windows\system32\dllcache\iexplore.exe
+ 2007-05-10 06:56 . 2009-06-29 15:55 268288 c:\windows\system32\dllcache\iertutil.dll
- 2007-05-10 06:56 . 2009-02-20 16:49 268288 c:\windows\system32\dllcache\iertutil.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 385024 c:\windows\system32\dllcache\iedkcs32.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 385024 c:\windows\system32\dllcache\iedkcs32.dll
+ 2007-05-10 06:56 . 2009-06-29 15:55 380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2004-08-04 12:00 . 2009-06-29 08:33 161792 c:\windows\system32\dllcache\ieakui.dll
- 2004-08-04 12:00 . 2009-02-20 05:14 161792 c:\windows\system32\dllcache\ieakui.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 133120 c:\windows\system32\dllcache\extmgr.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 133120 c:\windows\system32\dllcache\extmgr.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 214528 c:\windows\system32\dllcache\dxtrans.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 214528 c:\windows\system32\dllcache\dxtrans.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 347136 c:\windows\system32\dllcache\dxtmsft.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 347136 c:\windows\system32\dllcache\dxtmsft.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 124928 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 124928 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 124928 c:\windows\system32\advpack.dll
- 2004-08-04 12:00 . 2009-02-20 16:49 124928 c:\windows\system32\advpack.dll
+ 2008-10-22 10:59 . 2004-08-04 12:00 372224 c:\windows\ServicePackFiles\i386\digreqex.msi
+ 2008-10-22 10:59 . 2004-08-04 12:00 869376 c:\windows\ServicePackFiles\i386\digopt.msi
+ 2006-11-16 17:30 . 2006-11-16 17:30 428544 c:\windows\Installer\e84d25.msi
+ 2005-09-17 08:38 . 2005-09-17 08:38 584704 c:\windows\Installer\e6fd9f3.msi
+ 2008-05-07 14:40 . 2008-05-07 14:40 677888 c:\windows\Installer\b39919f.msp
+ 2007-05-27 17:11 . 2007-05-27 17:11 982528 c:\windows\Installer\a31046.msi
+ 2006-06-12 14:23 . 2006-06-12 14:23 324096 c:\windows\Installer\a01bd.msp
+ 2005-01-26 20:13 . 2005-01-26 20:13 264704 c:\windows\Installer\85b0.msi
+ 2007-03-14 14:23 . 2007-03-14 14:23 355840 c:\windows\Installer\563a4.msi
+ 2004-08-25 10:03 . 2004-08-25 10:03 135168 c:\windows\Installer\4eb5d.msp
+ 2004-03-11 09:59 . 2004-03-11 09:59 812544 c:\windows\Installer\4eb49.msp
+ 2009-04-20 13:16 . 2009-04-20 13:16 215040 c:\windows\Installer\4ab100.msp
+ 2005-02-12 18:39 . 2005-02-12 18:39 908288 c:\windows\Installer\3c4f3.msi
+ 2005-02-12 18:36 . 2005-02-12 18:36 716288 c:\windows\Installer\3c4e5.msi
+ 2005-02-12 18:27 . 2005-02-12 18:27 868864 c:\windows\Installer\3c4af.msi
+ 2006-06-20 11:17 . 2006-06-20 11:17 115712 c:\windows\Installer\3a7c3e0.msi
+ 2005-01-27 16:41 . 2005-01-27 16:41 912384 c:\windows\Installer\3902e8.msi
+ 2005-01-27 15:43 . 2005-01-27 15:43 261120 c:\windows\Installer\38824.msi
+ 2009-05-08 22:44 . 2009-05-08 22:44 409600 c:\windows\Installer\356ce4.msi
+ 2009-02-10 07:08 . 2009-02-10 07:08 537088 c:\windows\Installer\31c61d.msp
+ 2007-08-15 10:21 . 2007-08-15 10:21 431104 c:\windows\Installer\319a5f.msi
+ 2005-01-27 15:42 . 2005-01-27 15:42 292352 c:\windows\Installer\28f1d.msi
+ 2005-01-27 17:13 . 2005-01-27 17:13 227840 c:\windows\Installer\25ef7.msi
+ 2007-05-15 19:20 . 2007-05-15 19:20 906240 c:\windows\Installer\22ed0ba.msp
+ 2009-05-22 07:57 . 2009-05-22 07:57 598016 c:\windows\Installer\2043f06.msi
+ 2008-11-12 20:45 . 2008-11-12 20:45 451584 c:\windows\Installer\164d7907.msi
+ 2008-11-05 17:43 . 2008-11-05 17:43 723968 c:\windows\Installer\144b57dc.msi
+ 2006-02-09 15:45 . 2006-02-09 15:45 297984 c:\windows\Installer\119654.msi
+ 2009-08-16 15:24 . 2009-08-16 15:24 335872 c:\windows\Installer\{15803703-25FA-4C01-A062-3F4A59937E87}\ARPPRODUCTICON.exe
- 2009-05-26 15:03 . 2009-05-26 15:03 335872 c:\windows\Installer\{15803703-25FA-4C01-A062-3F4A59937E87}\ARPPRODUCTICON.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 104960 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\outicon.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 104960 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\outicon.exe
- 2005-04-02 14:14 . 2008-12-11 17:06 155136 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\accicons.exe
+ 2005-04-02 14:14 . 2009-06-25 17:56 155136 c:\windows\Installer\{00010407-78E1-11D2-B60F-006097C998E7}\accicons.exe
+ 2009-07-29 13:01 . 2009-04-29 04:42 827392 c:\windows\ie7updates\KB972260-IE7\wininet.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 233472 c:\windows\ie7updates\KB972260-IE7\webcheck.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 105984 c:\windows\ie7updates\KB972260-IE7\url.dll
+ 2009-07-29 13:01 . 2009-05-26 11:40 388984 c:\windows\ie7updates\KB972260-IE7\spuninst\updspapi.dll
+ 2009-07-29 13:01 . 2008-07-08 13:00 234872 c:\windows\ie7updates\KB972260-IE7\spuninst\spuninst.exe
+ 2009-07-29 13:01 . 2009-04-29 04:42 102912 c:\windows\ie7updates\KB972260-IE7\occache.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 671232 c:\windows\ie7updates\KB972260-IE7\mstime.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 193024 c:\windows\ie7updates\KB972260-IE7\msrating.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 477696 c:\windows\ie7updates\KB972260-IE7\mshtmled.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 459264 c:\windows\ie7updates\KB972260-IE7\msfeeds.dll
+ 2009-07-29 13:01 . 2009-04-25 05:27 636088 c:\windows\ie7updates\KB972260-IE7\iexplore.exe
+ 2009-07-29 13:01 . 2009-04-29 04:41 268288 c:\windows\ie7updates\KB972260-IE7\iertutil.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 385024 c:\windows\ie7updates\KB972260-IE7\iedkcs32.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 383488 c:\windows\ie7updates\KB972260-IE7\ieapfltr.dll
+ 2009-07-29 13:01 . 2009-04-25 05:26 161792 c:\windows\ie7updates\KB972260-IE7\ieakui.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 230400 c:\windows\ie7updates\KB972260-IE7\ieaksie.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 153088 c:\windows\ie7updates\KB972260-IE7\ieakeng.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 133120 c:\windows\ie7updates\KB972260-IE7\extmgr.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 214528 c:\windows\ie7updates\KB972260-IE7\dxtrans.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 347136 c:\windows\ie7updates\KB972260-IE7\dxtmsft.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 124928 c:\windows\ie7updates\KB972260-IE7\advpack.dll
+ 2009-06-11 10:36 . 2009-03-03 00:03 826368 c:\windows\ie7updates\KB969897-IE7\wininet.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 233472 c:\windows\ie7updates\KB969897-IE7\webcheck.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 105984 c:\windows\ie7updates\KB969897-IE7\url.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 388984 c:\windows\ie7updates\KB969897-IE7\spuninst\updspapi.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 234872 c:\windows\ie7updates\KB969897-IE7\spuninst\spuninst.exe
+ 2009-06-11 10:36 . 2009-02-20 16:49 102912 c:\windows\ie7updates\KB969897-IE7\occache.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 671232 c:\windows\ie7updates\KB969897-IE7\mstime.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 193024 c:\windows\ie7updates\KB969897-IE7\msrating.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 477696 c:\windows\ie7updates\KB969897-IE7\mshtmled.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 459264 c:\windows\ie7updates\KB969897-IE7\msfeeds.dll
+ 2009-06-11 10:36 . 2009-02-28 04:54 636072 c:\windows\ie7updates\KB969897-IE7\iexplore.exe
+ 2009-06-11 10:36 . 2009-02-20 16:49 268288 c:\windows\ie7updates\KB969897-IE7\iertutil.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 385024 c:\windows\ie7updates\KB969897-IE7\iedkcs32.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 383488 c:\windows\ie7updates\KB969897-IE7\ieapfltr.dll
+ 2009-06-11 10:36 . 2009-02-20 05:14 161792 c:\windows\ie7updates\KB969897-IE7\ieakui.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 230400 c:\windows\ie7updates\KB969897-IE7\ieaksie.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 153088 c:\windows\ie7updates\KB969897-IE7\ieakeng.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 133120 c:\windows\ie7updates\KB969897-IE7\extmgr.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 214528 c:\windows\ie7updates\KB969897-IE7\dxtrans.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 347136 c:\windows\ie7updates\KB969897-IE7\dxtmsft.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 124928 c:\windows\ie7updates\KB969897-IE7\advpack.dll
+ 2006-02-24 18:32 . 2006-02-24 18:32 802816 c:\windows\Downloaded Installations\DAEMON Tools 3.44\daemon.msi
+ 2009-07-04 07:30 . 2006-10-08 19:51 379184 c:\windows\$NtUninstallWdf01005$\spuninst\updspapi.dll
+ 2009-07-04 07:30 . 2006-10-08 19:51 221488 c:\windows\$NtUninstallWdf01005$\spuninst\spuninst.exe
+ 2009-07-15 17:38 . 2008-07-08 13:00 388984 c:\windows\$NtUninstallKB973346$\spuninst\updspapi.dll
+ 2009-07-15 17:38 . 2008-07-08 13:00 234872 c:\windows\$NtUninstallKB973346$\spuninst\spuninst.exe
+ 2009-07-15 17:38 . 2008-07-09 07:37 388984 c:\windows\$NtUninstallKB971633$\spuninst\updspapi.dll
+ 2009-07-15 17:38 . 2008-07-08 13:00 234872 c:\windows\$NtUninstallKB971633$\spuninst\spuninst.exe
+ 2009-06-11 10:37 . 2007-11-30 12:39 388984 c:\windows\$NtUninstallKB970238$\spuninst\updspapi.dll
+ 2009-06-11 10:37 . 2007-11-30 12:39 234872 c:\windows\$NtUninstallKB970238$\spuninst\spuninst.exe
+ 2009-06-11 10:37 . 2008-04-14 02:22 584704 c:\windows\$NtUninstallKB970238$\rpcrt4.dll
+ 2009-06-11 10:39 . 2007-11-30 12:39 388984 c:\windows\$NtUninstallKB969898$\spuninst\updspapi.dll
+ 2009-06-11 10:39 . 2007-11-30 12:39 234872 c:\windows\$NtUninstallKB969898$\spuninst\spuninst.exe
+ 2009-06-11 10:36 . 2008-07-09 07:37 388984 c:\windows\$NtUninstallKB968537$\spuninst\updspapi.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 234872 c:\windows\$NtUninstallKB968537$\spuninst\spuninst.exe
+ 2009-06-11 10:39 . 2008-07-09 07:37 388984 c:\windows\$NtUninstallKB961501$\spuninst\updspapi.dll
+ 2009-06-11 10:39 . 2008-07-09 07:37 234872 c:\windows\$NtUninstallKB961501$\spuninst\spuninst.exe
+ 2009-06-11 10:39 . 2008-04-14 02:22 345600 c:\windows\$NtUninstallKB961501$\localspl.dll
+ 2009-07-15 17:36 . 2008-04-14 02:22 117760 c:\windows\$NtUninstallKB961371$\t2embed.dll
+ 2009-07-15 17:36 . 2009-05-26 11:40 388984 c:\windows\$NtUninstallKB961371$\spuninst\updspapi.dll
+ 2009-07-15 17:36 . 2008-07-08 13:00 234872 c:\windows\$NtUninstallKB961371$\spuninst\spuninst.exe
+ 2009-07-15 17:38 . 2008-07-08 13:00 388984 c:\windows\$hf_mig$\KB973346\update\updspapi.dll
+ 2009-07-15 17:38 . 2008-07-08 13:00 765304 c:\windows\$hf_mig$\KB973346\update\update.exe
+ 2009-07-15 17:38 . 2008-07-08 13:00 234872 c:\windows\$hf_mig$\KB973346\spuninst.exe
+ 2009-07-15 17:38 . 2008-07-09 07:37 388984 c:\windows\$hf_mig$\KB971633\update\updspapi.dll
+ 2009-07-15 17:38 . 2008-07-09 07:37 765304 c:\windows\$hf_mig$\KB971633\update\update.exe
+ 2009-07-15 17:38 . 2008-07-08 13:00 234872 c:\windows\$hf_mig$\KB971633\spuninst.exe
+ 2009-06-11 10:37 . 2007-11-30 12:39 388984 c:\windows\$hf_mig$\KB970238\update\updspapi.dll
+ 2009-06-11 10:37 . 2007-11-30 12:39 765304 c:\windows\$hf_mig$\KB970238\update\update.exe
+ 2009-06-11 10:37 . 2007-11-30 12:39 234872 c:\windows\$hf_mig$\KB970238\spuninst.exe
+ 2009-04-15 15:24 . 2009-04-15 15:24 585216 c:\windows\$hf_mig$\KB970238\SP3QFE\rpcrt4.dll
+ 2009-06-11 10:39 . 2007-11-30 12:39 388984 c:\windows\$hf_mig$\KB969898\update\updspapi.dll
+ 2009-06-11 10:39 . 2007-11-30 12:39 765304 c:\windows\$hf_mig$\KB969898\update\update.exe
+ 2009-06-11 10:39 . 2007-11-30 12:39 234872 c:\windows\$hf_mig$\KB969898\spuninst.exe
+ 2009-06-11 10:36 . 2008-07-09 07:37 388984 c:\windows\$hf_mig$\KB969897-IE7\update\updspapi.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 765304 c:\windows\$hf_mig$\KB969897-IE7\update\update.exe
+ 2009-06-11 10:36 . 2008-07-09 07:37 234872 c:\windows\$hf_mig$\KB969897-IE7\spuninst.exe
+ 2009-04-29 04:34 . 2009-04-29 04:34 828928 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 233472 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\webcheck.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 105984 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\url.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 102912 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\occache.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 671232 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mstime.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 193024 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\msrating.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 477696 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtmled.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 459264 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\msfeeds.dll
+ 2009-04-25 05:27 . 2009-04-25 05:27 636088 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\iexplore.exe
+ 2009-04-29 04:34 . 2009-04-29 04:34 268288 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\iertutil.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 388608 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\iedkcs32.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 380928 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ieapfltr.dll
+ 2009-04-25 05:26 . 2009-04-25 05:26 161792 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ieakui.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 230400 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ieaksie.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 153088 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ieakeng.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 132608 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\extmgr.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 214528 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\dxtrans.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 347136 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\dxtmsft.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 124928 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\advpack.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 388984 c:\windows\$hf_mig$\KB968537\update\updspapi.dll
+ 2009-06-11 10:36 . 2008-07-09 07:37 765304 c:\windows\$hf_mig$\KB968537\update\update.exe
+ 2009-06-11 10:36 . 2008-07-09 07:37 234872 c:\windows\$hf_mig$\KB968537\spuninst.exe
+ 2009-06-11 10:39 . 2008-07-09 07:37 388984 c:\windows\$hf_mig$\KB961501\update\updspapi.dll
+ 2009-06-11 10:39 . 2008-07-09 07:37 765304 c:\windows\$hf_mig$\KB961501\update\update.exe
+ 2009-06-11 10:39 . 2008-07-09 07:37 234872 c:\windows\$hf_mig$\KB961501\spuninst.exe
+ 2009-05-07 15:15 . 2009-05-07 15:15 348672 c:\windows\$hf_mig$\KB961501\SP3QFE\localspl.dll
+ 2009-07-15 17:36 . 2009-05-26 11:40 388984 c:\windows\$hf_mig$\KB961371\update\updspapi.dll
+ 2009-07-15 17:36 . 2009-05-26 11:40 765304 c:\windows\$hf_mig$\KB961371\update\update.exe
+ 2009-07-15 17:36 . 2008-07-08 13:00 234872 c:\windows\$hf_mig$\KB961371\spuninst.exe
+ 2009-06-16 14:43 . 2009-06-16 14:43 119808 c:\windows\$hf_mig$\KB961371\SP3QFE\t2embed.dll
+ 2004-08-04 12:00 . 2009-04-19 19:46 1847296 c:\windows\system32\win32k.sys
+ 2004-08-04 12:00 . 2004-08-04 12:00 1356288 c:\windows\system32\webfldrs.msi
+ 2008-05-02 08:59 . 2008-05-02 08:59 1419232 c:\windows\system32\wdfcoinstaller01005.dll
+ 2004-08-04 12:00 . 2009-06-29 15:55 1159680 c:\windows\system32\urlmon.dll
+ 2004-08-04 12:00 . 2009-07-19 13:25 3597824 c:\windows\system32\mshtml.dll
+ 2009-02-03 02:15 . 2009-02-03 02:15 3771296 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2006-10-27 14:09 . 2009-07-19 13:25 6067200 c:\windows\system32\ieframe.dll
+ 2006-09-05 23:01 . 2009-06-29 08:33 2452872 c:\windows\system32\ieapfltr.dat
+ 2009-05-01 18:30 . 2009-05-01 18:30 3366912 c:\windows\system32\GPhotos.scr
+ 2008-10-15 18:45 . 2009-04-19 19:46 1847296 c:\windows\system32\dllcache\win32k.sys
+ 2004-08-04 12:00 . 2009-06-29 15:55 1159680 c:\windows\system32\dllcache\urlmon.dll
+ 2008-05-07 05:10 . 2009-06-03 19:09 1296896 c:\windows\system32\dllcache\quartz.dll
+ 2005-01-26 20:08 . 2009-06-10 07:19 2066432 c:\windows\system32\dllcache\mstscax.dll
+ 2004-08-04 12:00 . 2009-07-19 13:25 3597824 c:\windows\system32\dllcache\mshtml.dll
+ 2007-05-10 06:56 . 2009-07-19 13:25 6067200 c:\windows\system32\dllcache\ieframe.dll
+ 2007-05-10 06:56 . 2009-06-29 08:33 2452872 c:\windows\system32\dllcache\ieapfltr.dat
+ 2008-10-22 11:00 . 2004-08-04 12:00 1356288 c:\windows\ServicePackFiles\i386\webfldrs.msi
+ 2008-10-22 10:59 . 2004-08-04 12:00 5099520 c:\windows\ServicePackFiles\i386\msnmsgs.msi
+ 2007-05-25 10:08 . 2007-05-25 10:08 9609728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp
+ 2007-05-14 07:05 . 2007-05-14 07:05 6955520 c:\windows\Installer\eb7dbcb.msi
+ 2008-06-11 18:13 . 2008-06-11 18:13 7988224 c:\windows\Installer\b8fd6b.msp
+ 2008-06-19 16:28 . 2008-06-19 16:28 1573376 c:\windows\Installer\b3991aa.msp
+ 2006-08-14 15:54 . 2006-08-14 15:54 7709184 c:\windows\Installer\a01ab.msp
+ 2006-09-12 13:51 . 2006-09-12 13:51 7611392 c:\windows\Installer\a0199.msp
+ 2006-03-28 14:37 . 2006-03-28 14:37 6956032 c:\windows\Installer\a0188.msp
+ 2006-07-10 10:21 . 2006-07-10 10:21 4104192 c:\windows\Installer\a0177.msp
+ 2006-09-18 15:51 . 2006-09-18 15:51 8415744 c:\windows\Installer\a0166.msp
+ 2007-03-29 09:34 . 2007-03-29 09:34 8414208 c:\windows\Installer\9c08815.msp
+ 2007-03-30 20:21 . 2007-03-30 20:21 3886080 c:\windows\Installer\9c08804.msp
+ 2007-04-19 13:40 . 2007-04-19 13:40 7979008 c:\windows\Installer\9c087f9.msp
+ 2007-03-30 20:17 . 2007-03-30 20:17 9589248 c:\windows\Installer\9c087e8.msp
+ 2006-05-27 15:39 . 2006-05-27 15:39 1602560 c:\windows\Installer\730cb.msi
+ 2008-01-29 11:00 . 2008-01-29 11:00 7983104 c:\windows\Installer\7204f6.msp
+ 2008-10-28 14:59 . 2008-10-28 14:59 8413184 c:\windows\Installer\6d90356.msp
+ 2008-10-20 09:18 . 2008-10-20 09:18 6474240 c:\windows\Installer\6d90345.msp
+ 2008-09-04 13:52 . 2008-09-04 13:52 4337664 c:\windows\Installer\6a8e651.msp
+ 2008-10-31 16:34 . 2008-10-31 16:34 1773056 c:\windows\Installer\6293b30.msi
+ 2009-04-24 10:31 . 2009-04-24 10:31 1425920 c:\windows\Installer\61dd7b0.msp
+ 2007-09-17 11:33 . 2007-09-17 11:33 8415232 c:\windows\Installer\5d80e3.msp
+ 2008-09-15 12:04 . 2008-09-15 12:04 3261952 c:\windows\Installer\5bf26de.msi
+ 2007-06-01 13:54 . 2007-06-01 13:54 9626624 c:\windows\Installer\578f73f.msp
+ 2007-01-13 12:25 . 2007-01-13 12:25 1624576 c:\windows\Installer\550d9d4.msi
+ 2005-01-28 16:48 . 2005-01-28 16:48 4325888 c:\windows\Installer\4eb72.msp
+ 2005-01-26 16:43 . 2005-01-26 16:43 4187648 c:\windows\Installer\4eb26.msp
+ 2004-09-13 03:59 . 2004-09-13 03:59 1452544 c:\windows\Installer\4eb0f.msp
+ 2009-05-04 05:46 . 2009-05-04 05:46 8299008 c:\windows\Installer\4ab0ef.msp
+ 2009-04-24 10:30 . 2009-04-24 10:30 2583552 c:\windows\Installer\4ab0e4.msp
+ 2009-04-29 13:03 . 2009-04-29 13:03 8404992 c:\windows\Installer\4ab0d8.msp
+ 2006-12-09 15:46 . 2006-12-09 15:46 1122816 c:\windows\Installer\43e046.msi
+ 2007-01-19 10:01 . 2007-01-19 10:01 8410624 c:\windows\Installer\3e5cf.msp
+ 2007-01-08 12:31 . 2007-01-08 12:31 7611392 c:\windows\Installer\3e5be.msp
+ 2006-08-29 16:50 . 2006-08-29 16:50 3210240 c:\windows\Installer\3e5ad.msp
+ 2005-02-12 18:37 . 2005-02-12 18:37 1754112 c:\windows\Installer\3c4ec.msi
+ 2005-02-12 18:36 . 2005-02-12 18:36 3311616 c:\windows\Installer\3c4de.msi
+ 2005-02-12 18:32 . 2005-02-12 18:32 1014784 c:\windows\Installer\3c4d7.msi
+ 2004-08-06 11:39 . 2004-08-06 11:39 5742416 c:\windows\Installer\3c4cf.msp
+ 2005-02-12 18:31 . 2005-02-12 18:31 2190848 c:\windows\Installer\3c4bd.msi
+ 2005-02-12 18:30 . 2005-02-12 18:30 4744704 c:\windows\Installer\3c4b6.msi
+ 2005-01-27 16:41 . 2005-01-27 16:41 2263552 c:\windows\Installer\3902e0.msi
+ 2008-01-14 14:08 . 2008-01-14 14:08 8411136 c:\windows\Installer\33e691.msp
+ 2008-01-14 13:26 . 2008-01-14 13:26 4478464 c:\windows\Installer\33e680.msp
+ 2008-01-14 13:26 . 2008-01-14 13:26 8362496 c:\windows\Installer\33e66f.msp
+ 2007-07-21 11:26 . 2007-07-21 11:26 7574016 c:\windows\Installer\319a55.msp
+ 2005-01-27 15:42 . 2005-01-27 15:42 3451904 c:\windows\Installer\2b61e.msi
+ 2009-04-07 21:09 . 2009-04-07 21:09 3089408 c:\windows\Installer\295b8b.msi
+ 2008-06-30 12:34 . 2008-06-30 12:34 8416768 c:\windows\Installer\28348e2.msp
+ 2005-04-02 14:18 . 2005-04-02 14:18 2191360 c:\windows\Installer\27abd2.msi
+ 2005-04-02 14:14 . 2005-04-02 14:14 2362880 c:\windows\Installer\27ab00.msi
+ 2007-03-30 20:20 . 2007-03-30 20:20 5800960 c:\windows\Installer\22ed0cf.msp
+ 2007-05-15 19:21 . 2007-05-15 19:21 1042944 c:\windows\Installer\22ed0c5.msp
+ 2008-03-11 09:48 . 2008-03-11 09:48 1243648 c:\windows\Installer\1731e8.msi
+ 2005-02-12 19:21 . 2005-02-12 19:21 5864960 c:\windows\Installer\15a923.msp
+ 2008-04-07 13:32 . 2008-04-07 13:32 8415232 c:\windows\Installer\10f3aa73.msp
+ 2008-03-31 14:35 . 2008-03-31 14:35 8309760 c:\windows\Installer\10f3aa62.msp
+ 2008-04-18 12:56 . 2008-04-18 12:56 6215680 c:\windows\Installer\10f3aa51.msp
+ 2009-07-29 13:01 . 2009-04-29 04:42 1159680 c:\windows\ie7updates\KB972260-IE7\urlmon.dll
+ 2009-07-29 13:01 . 2009-04-29 04:42 3596288 c:\windows\ie7updates\KB972260-IE7\mshtml.dll
+ 2009-07-29 13:01 . 2009-04-29 04:41 6066176 c:\windows\ie7updates\KB972260-IE7\ieframe.dll
+ 2009-07-29 13:01 . 2008-07-09 14:25 2455488 c:\windows\ie7updates\KB972260-IE7\ieapfltr.dat
+ 2009-06-11 10:36 . 2009-02-20 16:49 1160192 c:\windows\ie7updates\KB969897-IE7\urlmon.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 3595264 c:\windows\ie7updates\KB969897-IE7\mshtml.dll
+ 2009-06-11 10:36 . 2009-02-20 16:49 6066176 c:\windows\ie7updates\KB969897-IE7\ieframe.dll
+ 2009-06-11 10:36 . 2008-07-09 14:25 2455488 c:\windows\ie7updates\KB969897-IE7\ieapfltr.dat
+ 2006-01-05 13:49 . 2006-06-20 11:23 6170112 c:\windows\Downloaded Installations\{C0FA7138-477B-4FEC-8F23-640C21C2287B}\Microsoft AntiSpyware.msi
+ 2005-01-27 16:41 . 2005-01-27 16:41 1863168 c:\windows\Downloaded Installations\{A83A4336-DD2E-492C-B70A-899AB6F69381}\HMTCDWizard.msi
+ 2008-10-31 16:33 . 2008-10-31 16:33 8581120 c:\windows\Downloaded Installations\{3E547985-AA94-4B1B-8ADD-21E060E5E31F}\Adobe Photoshop Album 3.2 SE.msi
+ 2009-07-15 17:38 . 2008-12-20 22:13 1293824 c:\windows\$NtUninstallKB971633$\quartz.dll
+ 2009-06-11 10:36 . 2009-02-09 14:04 1846912 c:\windows\$NtUninstallKB968537$\win32k.sys
+ 2009-06-03 19:11 . 2009-06-03 19:11 1296896 c:\windows\$hf_mig$\KB971633\SP3QFE\quartz.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 1163264 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\urlmon.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 3598336 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
+ 2009-04-29 04:34 . 2009-04-29 04:34 6069248 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ieframe.dll
+ 2009-06-11 09:22 . 2008-07-09 14:25 2455488 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\ieapfltr.dat
+ 2009-04-19 19:39 . 2009-04-19 19:39 1847936 c:\windows\$hf_mig$\KB968537\SP3QFE\win32k.sys
+ 2004-08-04 12:00 . 2009-07-13 21:43 10841088 c:\windows\system32\wmp.dll
+ 2005-09-29 14:27 . 2009-07-30 00:49 24281536 c:\windows\system32\MRT.exe
+ 2004-08-04 12:00 . 2009-07-13 21:43 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2005-04-02 13:08 . 2005-02-06 12:55 11156480 c:\windows\system32\config\systemprofile\Lokale Einstellungen\Anwendungsdaten\{3248F0A6-6813-11D6-A77B-00B0D0150010}\J2SE Runtime Environment 5.0 Update 1.msi
+ 2007-09-16 12:22 . 2007-01-19 11:21 16747520 c:\windows\Installer\MSN Messenger 8.1.0178\MsnMsgs.Msi
+ 2006-11-24 15:06 . 2006-07-29 19:39 15645696 c:\windows\Installer\MSN Messenger 8.0.0812\MsnMsgs.Msi
+ 2008-08-11 09:51 . 2008-08-11 09:51 15916544 c:\windows\Installer\b8fd7f.msp
+ 2008-08-11 09:49 . 2008-08-11 09:49 22457344 c:\windows\Installer\b8fd75.msp
+ 2007-04-21 18:16 . 2007-04-21 18:16 12490752 c:\windows\Installer\9c0881f.msp
+ 2008-02-25 14:07 . 2008-02-25 14:07 11772416 c:\windows\Installer\720500.msp
+ 2008-10-20 09:22 . 2008-10-20 09:22 11758592 c:\windows\Installer\6d90360.msp
+ 2008-07-29 21:20 . 2008-07-29 21:20 11767296 c:\windows\Installer\6a8e641.msp
+ 2007-07-11 16:36 . 2007-07-11 16:36 15256576 c:\windows\Installer\578f759.msp
+ 2004-02-20 21:35 . 2004-02-20 21:35 60732224 c:\windows\Installer\4eabe.msp
+ 2005-01-27 16:42 . 2005-01-27 16:42 19210240 c:\windows\Installer\390334.msp
+ 2009-02-25 17:07 . 2009-02-25 17:07 11646464 c:\windows\Installer\31c609.msp
+ 2008-07-03 09:37 . 2008-07-03 09:37 11759104 c:\windows\Installer\28348d1.msp
+ 2008-09-24 11:05 . 2008-09-24 11:05 16381440 c:\windows\Installer\164d7910.msp
+ 2007-10-14 21:33 . 2007-10-14 21:33 26646016 c:\windows\Installer\14c3c4ac.msp
+ 2008-03-13 09:27 . 2008-03-13 09:27 13625856 c:\windows\Downloaded Installations\{310310A5-0EAF-4C57-9297-238DF1179025}\veoh.msi
+ 2009-04-07 21:03 . 2009-04-07 21:07 171547136 c:\windows\Downloaded Installations\{7005D09A-4004-4760-9E40-2D2F1EA705DB}\PhotoImpact X3.msi
.
-- Snapshot auf jetziges Datum zurückgesetzt --
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9F9D-3BEFCFBE6E86}]
2007-10-16 18:58 1923584 ----a-w- c:\programme\photoposcomtbr\photoposcomtbr.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{A057A204-BACC-4D26-9F9D-3BEFCFBE6E86}"= "c:\programme\photoposcomtbr\photoposcomtbr.dll" [2007-10-16 1923584]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9f9d-3befcfbe6e86}]
[HKEY_CLASSES_ROOT\photoposcomtbr.PHOTOPOSCOMTBR]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{A057A204-BACC-4D26-9F9D-3BEFCFBE6E86}"= "c:\programme\photoposcomtbr\photoposcomtbr.dll" [2007-10-16 1923584]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9f9d-3befcfbe6e86}]
[HKEY_CLASSES_ROOT\photoposcomtbr.PHOTOPOSCOMTBR]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PhonostarTimer"="c:\programme\phonostar\ps_timer.exe" [2008-07-14 126976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\programme\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-01-12 344064]
"Keyboard Status"="c:\progra~1\Medion\KeyStat\KeyStat.exe" [2005-01-25 411648]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"PCMService"="c:\programme\Home Cinema\PowerCinema\PCMService.exe" [2005-02-21 118926]
"snpstd"="c:\windows\vsnpstd.exe" [2004-06-10 286720]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2005-02-06 98304]
"avgnt"="c:\programme\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-27 266497]
"LXCFCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll" [2005-07-20 73728]
"RemoteControl"="c:\programme\CyberLink\PowerDVD\PDVDServ.exe" [2005-12-07 30208]
"LanguageShortcut"="c:\programme\CyberLink\PowerDVD\Language\Language.exe" [2006-04-13 49152]
"Adobe Photo Downloader"="c:\programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 63712]
"Ulead AutoDetector v2"="c:\programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe" [2007-08-02 95504]
"SunJavaUpdateSched"="c:\programme\Java\jre6\bin\jusched.exe" [2009-05-22 148888]
"Dit"="Dit.exe" - c:\windows\Dit.exe [2004-07-20 90112]
"AGRSMMSG"="AGRSMMSG.exe" - c:\windows\AGRSMMSG.exe [2005-03-04 88209]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\dokumente und einstellungen\Roitzheim\Startmen\Programme\Autostart\
Watch.lnk - c:\windows\twain_32\A4CIS600\WATCH.exe [2005-4-2 371200]

c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\
Adobe Reader - Schnellstart.lnk - c:\programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
BlueSoleil.lnk - c:\programme\IVT Corporation\BlueSoleil\BlueSoleil.exe [2005-2-21 1048576]
Microsoft Office.lnk - c:\programme\Microsoft Office\Office\OSA9.EXE [2002-12-19 65588]
p6bersicht.lnk - c:\programme\phase6\phase6\WinStart\WinStart.exe [2003-10-9 40960]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"EditLevel"= 0 (0x0)
"NoCommonGroups"= 0 (0x0)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"d:\\Programme\\rise of Nations gold\\thrones.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\MSN Messenger\\msnmsgr.exe"=
"c:\\Programme\\MSN Messenger\\livecall.exe"=
"c:\\Dokumente und Einstellungen\\Roitzheim\\temp\\TeamViewer\\Version4\\TeamViewer.exe"=
"c:\\Programme\\BitTorrent\\bittorrent.exe"=
"d:\\Programme\\Alle LemmingballZ Versionen\\Lemmingball Z aktuelle Version mit Exe\\LemmingballZ aktuelle Version\\lbz3d\\tmp\\co_real.exe"=
"d:\\Programme\\Alle LemmingballZ Versionen\\LEMINGG_BALL_Z\\LEMINGG BALL Z\\lbzwin\\Lbzwin.exe"=
"d:\\Programme\\Alle LemmingballZ Versionen\\Lemmingball Z Modversion mit Mods\\lemmingball Z 3D\\lemmingball Z 3D\\lbz3d\\tmp\\co_real.exe"=
"c:\\Programme\\ICQ6.5\\ICQ.exe"=
"c:\\LBZ3D\\LBZ8473alpha1\\LBZ\\tmp\\co_real.exe"=
"c:\\Programme\\LittleFighter2\\LF2_v1.9c\\lf2.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"135:TCP"= 135:TCP:TCP Port 135

R0 avgntmgr;avgntmgr;c:\windows\system32\drivers\avgntmgr.sys [02.02.2006 14:42 14848]
R1 avgntdd;avgntdd;c:\windows\system32\drivers\avgntdd.sys [02.02.2006 14:42 40000]
R1 hwinterface;hwinterface;c:\windows\system32\drivers\hwinterface.sys [27.06.2008 18:48 3026]
R2 auwmac;Auerswald ISDN WAN Driver (Ver. %V_VERSION%);c:\windows\system32\drivers\auwmac.sys [02.04.2005 17:20 65587]
R2 MZCCntrl;T-Online WLAN Adapter Steuerungsdienst;c:\programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe [20.01.2007 15:49 61440]
R2 Oscapi;Auerswald CAPI2.0 Treiber;c:\windows\system32\drivers\Oscapi20.sys [02.04.2005 17:20 164930]
R2 WinDefend;Windows Defender;c:\programme\Windows Defender\MsMpEng.exe [03.11.2006 19:19 13592]
R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [14.02.2005 20:51 666368]
R3 cmudax;C-Media High Definition Audio Interface;c:\windows\system32\drivers\cmudax.sys [27.01.2005 08:37 1272000]
R3 wbscr;Winbond Smartcard Reader for I/O;c:\windows\system32\drivers\wbscr.sys [27.01.2005 10:37 19928]
S2 oldfhfg;oldfhfg;c:\windows\system32\drivers\sxpuuwi.sys --> c:\windows\system32\drivers\sxpuuwi.sys [?]
S3 auusb;Auerswald USB Treiber;c:\windows\system32\drivers\auusb.sys [02.04.2005 17:18 200573]
S3 CardReaderFilter;Card Reader Filter;c:\windows\system32\drivers\USBCRFT.SYS [27.01.2005 10:31 17408]
S3 cdrmkaun;cdrmkaun;\??\c:\dokume~1\ROITZH~1\LOKALE~1\Temp\cdrmkaun.sys --> c:\dokume~1\ROITZH~1\LOKALE~1\Temp\cdrmkaun.sys [?]
S3 FXDRV;FXDRV;\??\c:\dokumente und einstellungen\Roitzheim\Eigene Dateien\ICQ\329532205\ReceivedFiles\195597078 MichaelN\SuperUtility\Fxdrv.sys --> c:\dokumente und einstellungen\Roitzheim\Eigene Dateien\ICQ\329532205\ReceivedFiles\195597078 MichaelN\SuperUtility\Fxdrv.sys [?]
S3 MACNDIS5;MACNDIS5 NDIS Protocol Driver;c:\progra~1\GEMEIN~1\MARMIK~1\MACNDIS5.SYS [20.01.2007 15:49 17280]
S3 MIINPazX;MIINPazX NDIS Protocol Driver;c:\progra~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [20.01.2007 15:49 17152]
S3 MTOnlPktAlyX;MTOnlPktAlyX NDIS Protocol Driver;c:\progra~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [20.01.2007 15:49 17536]
S3 SFC4;SFC4;c:\windows\system32\drivers\SFC4.SYS [02.04.2005 15:26 41472]
S3 tausb;Auerswald USB CAPI transport Treiber;c:\windows\system32\drivers\tausb.sys [02.04.2005 17:18 193421]
.
Inhalt des "geplante Tasks" Ordners

2009-08-16 c:\windows\Tasks\MP Scheduled Scan.job
- c:\programme\Windows Defender\MpCmdRun.exe [2006-11-03 17:20]
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

HKCU-Run-ICQ - c:\programme\ICQ6\ICQ.exe


.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.aol.de/
uInternet Settings,ProxyOverride = <local>
IE: &ICQ Toolbar Search - c:\programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.de/scan_de/scan8/oscan8.cab
FF - ProfilePath - c:\dokumente und einstellungen\Roitzheim\Anwendungsdaten\Mozilla\Firefox\Profiles\t6aoxmrl.default\
FF - plugin: c:\programme\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\programme\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-16 18:14
Windows 5.1.2600 Service Pack 3 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG08.00.00.01WORKSTATION"="17081B02B3D7422C39A094EE706F06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"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'winlogon.exe'(804)
c:\windows\system32\Ati2evxx.dll
.
Zeit der Fertigstellung: 2009-08-16 18:17
ComboFix-quarantined-files.txt 2009-08-16 16:17
ComboFix2.txt 2009-05-26 20:55
ComboFix3.txt 2009-05-21 22:42

Vor Suchlauf: 20 Verzeichnis(se), 32.613.040.128 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 32.730.038.272 Bytes frei

1010 --- E O F --- 2009-08-16 15:45













Zu beginn ließ sich Combofix auch nicht starten, als ich dann umbenannt habe in "Combofix." konnte ich es starten

Combofix hat wohl rootkidaktivitäten erkannt



übrigens ist die Schrift vom Google jetzt wieder normal
Dieser Beitrag wurde am 16.08.2009 um 18:22 Uhr von Madn editiert.
Seitenanfang Seitenende
16.08.2009, 18:39
Moderator

Beiträge: 7805
#6 Lasse bitte Mbam updaten und mache einen scan, mache das ebenfalls mit Antivir.

Erstelle ein neues Hijackthis log.
__________
MfG Ralf
SEO-Spam Hunter
Seitenanfang Seitenende
16.08.2009, 20:10
Member

Themenstarter

Beiträge: 108
#7 so hier der Bericht von Mbam

Malwarebytes' Anti-Malware 1.40
Datenbank Version: 2635
Windows 5.1.2600 Service Pack 3

16.08.2009 20:11:32
mbam-log-2009-08-16 (20-11-32).txt

Scan-Methode: Vollständiger Scan (C:\|D:\|E:\|)
Durchsuchte Objekte: 324278
Laufzeit: 1 hour(s), 24 minute(s), 36 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 2

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\System Volume Information\_restore{52DFAB03-4BF1-4DFE-A55B-7F2CCDD8D2DE}\RP105\A0014733.dll (Rogue.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{52DFAB03-4BF1-4DFE-A55B-7F2CCDD8D2DE}\RP106\A0014762.exe (Trojan.Buzus) -> Quarantined and deleted successfully.
Seitenanfang Seitenende
16.08.2009, 21:18
Moderator

Beiträge: 7805
#8 Dann bitte noch das Hijackthis log und gebe unter start/ausfuehren
combofix /u
ein und druecke Enter.
__________
MfG Ralf
SEO-Spam Hunter
Seitenanfang Seitenende
16.08.2009, 21:31
Member

Themenstarter

Beiträge: 108
#9 Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:32:53, on 16.08.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
C:\Programme\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\Dit.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
C:\Programme\Home Cinema\PowerCinema\PCMService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\vsnpstd.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\phonostar\ps_timer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Dokumente und Einstellungen\Roitzheim\Desktop\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Keyboard Status] C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programme\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [PhonostarTimer] C:\Programme\phonostar\ps_timer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Watch.lnk = C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BlueSoleil.lnk = C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: p6übersicht.lnk = C:\Programme\phase6\phase6\WinStart\WinStart.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/kavwebscan_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.de/scan_de/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136469868593
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols3/fscax.cab
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: lxcf_device - - C:\WINDOWS\system32\lxcfcoms.exe
O23 - Service: T-Online WLAN Adapter Steuerungsdienst (MZCCntrl) - Deutsche Telekom AG, Marmiko IT-Solutions GmbH - C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe (file missing)

--
End of file - 10069 bytes


hab Combofix deinstalliert
Seitenanfang Seitenende
16.08.2009, 21:43
Moderator

Beiträge: 7805
#10 Dann fang mal an dein Windows auf den neusten stand zu bringen. Am besten mit www.windowsupdate.com
__________
MfG Ralf
SEO-Spam Hunter
Seitenanfang Seitenende
16.08.2009, 22:07
Member

Themenstarter

Beiträge: 108
#11 Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:10:22, on 16.08.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
C:\Programme\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\Dit.exe
C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programme\Home Cinema\PowerCinema\PCMService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\vsnpstd.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\phonostar\ps_timer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\Roitzheim\Desktop\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Keyboard Status] C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programme\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [PhonostarTimer] C:\Programme\phonostar\ps_timer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Watch.lnk = C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BlueSoleil.lnk = C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: p6übersicht.lnk = C:\Programme\phase6\phase6\WinStart\WinStart.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/kavwebscan_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.de/scan_de/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136469868593
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols3/fscax.cab
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: lxcf_device - - C:\WINDOWS\system32\lxcfcoms.exe
O23 - Service: T-Online WLAN Adapter Steuerungsdienst (MZCCntrl) - Deutsche Telekom AG, Marmiko IT-Solutions GmbH - C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe (file missing)

--
End of file - 10237 bytes



so alles aktualisiert und nun?
Seitenanfang Seitenende
15.09.2009, 19:15
Member

Themenstarter

Beiträge: 108
#12 so ich würde das thema gerne aktualisieren, hatte die letzten Wochen gar keine Zeit online zu kommen.
Hab jetzt nochmal neu gescannt um euch den aktuellen Stand zu zeigen.

Malwarebytes' Anti-Malware 1.40
Datenbank Version: 2682
Windows 5.1.2600 Service Pack 3

15.09.2009 18:57:39
mbam-log-2009-09-15 (18-57-35).txt

Scan-Methode: Vollständiger Scan (C:\|D:\|E:\|)
Durchsuchte Objekte: 346022
Laufzeit: 2 hour(s), 41 minute(s), 7 second(s)

Infizierte Speicherprozesse: 1
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 2

Infizierte Speicherprozesse:
C:\WINDOWS\system32\drivers\svchost.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost.exe (Trojan.Agent) -> No action taken.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\WINDOWS\Sysvxd.exe (Trojan.FakeAlert) -> No action taken.
C:\WINDOWS\system32\drivers\svchost.exe (Trojan.Agent) -> No action taken.




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:13:19, on 15.09.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
C:\Programme\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\Dit.exe
C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
C:\Programme\Home Cinema\PowerCinema\PCMService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\vsnpstd.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\phonostar\ps_timer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programme\Mozilla Firefox\firefox.exe
D:\Programme\Alle LemmingballZ Versionen\Lemmingball Z aktuelle Version mit Exe\LemmingballZ aktuelle Version\lbz3d\tmp\co_real.exe
C:\Programme\Java\jre6\bin\jucheck.exe
C:\Dokumente und Einstellungen\Roitzheim\Desktop\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Keyboard Status] C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programme\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [PhonostarTimer] C:\Programme\phonostar\ps_timer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Watch.lnk = C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BlueSoleil.lnk = C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: p6übersicht.lnk = C:\Programme\phase6\phase6\WinStart\WinStart.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/kavwebscan_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.de/scan_de/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136469868593
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols3/fscax.cab
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: lxcf_device - - C:\WINDOWS\system32\lxcfcoms.exe
O23 - Service: T-Online WLAN Adapter Steuerungsdienst (MZCCntrl) - Deutsche Telekom AG, Marmiko IT-Solutions GmbH - C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe (file missing)

--
End of file - 10130 bytes


ich brauche Hilfe, denn Windows laggt häufig
Seitenanfang Seitenende
15.09.2009, 20:10
Moderator

Beiträge: 5694
#13 >>
Wende CCleaner an.

>>
Lasse folgende Datei bei www.VIRUSTOTAL.com/de prüfen und poste das Ergebnis:

D:\Programme\Alle LemmingballZ Versionen\Lemmingball Z aktuelle Version mit Exe\LemmingballZ aktuelle Version\lbz3d\tmp\co_real.exe

Auf Durchsuchen klicken --> Datei aussuchen (oder gleich die Datei mit korrektem Pfad einkopieren mit Strg V) --> Klick auf die zu prüfende Datei und öffnen--> klick auf "Senden der Datei"... jetzt abwarten - dann mit der rechten Maustaste den Text markieren -> hier kopieren

>>
Wann hast du mt F-Secure Online Scanner 3.0 gescannt? Wurde was gefunden?

>>
Erstelle ein Log mit GMER (Rootkitscan):
http://virus-protect.org/artikel/tools/gmer.html

>>
wende bitte RSIT an + poste die zwei Logs
http://virus-protect.org/artikel/tools/random.html

Gruss Swiss
Seitenanfang Seitenende
15.09.2009, 20:37
Member

Themenstarter

Beiträge: 108
#14 Logfile of random's system information tool 1.06 (written by random/random)
Run by Roitzheim at 2009-09-15 20:33:11
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 30 GB (21%) free of 143 GB
Total RAM: 1023 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:33:15, on 15.09.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
C:\Programme\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\Dit.exe
C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
C:\Programme\Home Cinema\PowerCinema\PCMService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\vsnpstd.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\phonostar\ps_timer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Java\jre6\bin\jucheck.exe
C:\Dokumente und Einstellungen\Roitzheim\Desktop\RSIT.exe
C:\Dokumente und Einstellungen\Roitzheim\Desktop\HiJackThis\Roitzheim.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: PhotoPos Pro Toolbar - {A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - C:\Programme\photoposcomtbr\photoposcomtbr.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Keyboard Status] C:\PROGRA~1\Medion\KeyStat\KeyStat.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programme\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [PhonostarTimer] C:\Programme\phonostar\ps_timer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Watch.lnk = C:\WINDOWS\twain_32\A4CIS600\WATCH.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BlueSoleil.lnk = C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: p6übersicht.lnk = C:\Programme\phase6\phase6\WinStart\WinStart.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/kavwebscan_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.de/scan_de/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136469868593
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols3/fscax.cab
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: lxcf_device - - C:\WINDOWS\system32\lxcfcoms.exe
O23 - Service: T-Online WLAN Adapter Steuerungsdienst (MZCCntrl) - Deutsche Telekom AG, Marmiko IT-Solutions GmbH - C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe (file missing)

--
End of file - 10055 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\MP Scheduled Scan.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll [2006-09-29 440384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9F9D-3BEFCFBE6E86}]
PhotoPos Pro Toolbar - C:\Programme\photoposcomtbr\photoposcomtbr.dll [2007-10-16 1923584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-05-22 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-22 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll [2006-09-29 440384]
{A057A204-BACC-4D26-9F9D-3BEFCFBE6E86} - PhotoPos Pro Toolbar - C:\Programme\photoposcomtbr\photoposcomtbr.dll [2007-10-16 1923584]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"=C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-01-12 344064]
"Dit"=C:\WINDOWS\Dit.exe [2004-07-20 90112]
"Keyboard Status"=C:\PROGRA~1\Medion\KeyStat\KeyStat.exe [2005-01-25 411648]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"PCMService"=C:\Programme\Home Cinema\PowerCinema\PCMService.exe [2005-02-21 118926]
"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2005-03-04 88209]
"snpstd"=C:\WINDOWS\vsnpstd.exe [2004-06-10 286720]
"QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2005-02-06 98304]
"LXCFCATS"=rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16 []
"RemoteControl"=C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [2005-12-07 30208]
"LanguageShortcut"=C:\Programme\CyberLink\PowerDVD\Language\Language.exe [2006-04-13 49152]
"Adobe Photo Downloader"=C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe [2007-03-09 63712]
"Ulead AutoDetector v2"=C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe [2007-08-02 95504]
"SunJavaUpdateSched"=C:\Programme\Java\jre6\bin\jusched.exe [2009-05-22 148888]
"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PhonostarTimer"=C:\Programme\phonostar\ps_timer.exe [2008-07-14 126976]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
Adobe Reader - Schnellstart.lnk - C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
BlueSoleil.lnk - C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe
Microsoft Office.lnk - C:\Programme\Microsoft Office\Office\OSA9.EXE
p6übersicht.lnk - C:\Programme\phase6\phase6\WinStart\WinStart.exe

C:\Dokumente und Einstellungen\Roitzheim\Startmenü\Programme\Autostart
Watch.lnk - C:\WINDOWS\twain_32\A4CIS600\WATCH.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-01-12 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"EditLevel"=0
"NoCommonGroups"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=
"NoDriveAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Programme\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"D:\Programme\rise of Nations gold\thrones.exe"="D:\Programme\rise of Nations gold\thrones.exe:*:Enabled:Rise of Nations"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\MSN Messenger\msnmsgr.exe"="C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Dokumente und Einstellungen\Roitzheim\temp\TeamViewer\Version4\TeamViewer.exe"="C:\Dokumente und Einstellungen\Roitzheim\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"C:\Programme\BitTorrent\bittorrent.exe"="C:\Programme\BitTorrent\bittorrent.exe:*:Enabled:bittorrent"
"D:\Programme\Alle LemmingballZ Versionen\Lemmingball Z aktuelle Version mit Exe\LemmingballZ aktuelle Version\lbz3d\tmp\co_real.exe"="D:\Programme\Alle LemmingballZ Versionen\Lemmingball Z aktuelle Version mit Exe\LemmingballZ aktuelle Version\lbz3d\tmp\co_real.exe:*:Enabled:co_real"
"D:\Programme\Alle LemmingballZ Versionen\LEMINGG_BALL_Z\LEMINGG BALL Z\lbzwin\Lbzwin.exe"="D:\Programme\Alle LemmingballZ Versionen\LEMINGG_BALL_Z\LEMINGG BALL Z\lbzwin\Lbzwin.exe:*:Enabled:Lbzwin"
"D:\Programme\Alle LemmingballZ Versionen\Lemmingball Z Modversion mit Mods\lemmingball Z 3D\lemmingball Z 3D\lbz3d\tmp\co_real.exe"="D:\Programme\Alle LemmingballZ Versionen\Lemmingball Z Modversion mit Mods\lemmingball Z 3D\lemmingball Z 3D\lbz3d\tmp\co_real.exe:*:Enabled:co_real"
"C:\Programme\ICQ6.5\ICQ.exe"="C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\LBZ3D\LBZ8473alpha1\LBZ\tmp\co_real.exe"="C:\LBZ3D\LBZ8473alpha1\LBZ\tmp\co_real.exe:*:Enabled:co_real"
"C:\Programme\LittleFighter2\LF2_v1.9c\lf2.exe"="C:\Programme\LittleFighter2\LF2_v1.9c\lf2.exe:*:Enabled:lf2"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC"
"C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\MSN Messenger\msnmsgr.exe"="C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"

======List of files/folders created in the last 1 months======

2009-09-15 20:33:11 ----D---- C:\rsit
2009-09-09 22:23:47 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-09-09 22:23:43 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-08-26 20:19:45 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-08-26 16:01:46 ----D---- C:\Programme\Avira
2009-08-26 16:01:46 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
2009-08-23 11:09:28 ----SHD---- C:\RECYCLER
2009-08-23 11:07:55 ----A---- C:\ComboFix.txt
2009-08-23 10:51:42 ----A---- C:\WINDOWS\zip.exe
2009-08-23 10:51:42 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-08-23 10:51:42 ----A---- C:\WINDOWS\SWSC.exe
2009-08-23 10:51:42 ----A---- C:\WINDOWS\SWREG.exe
2009-08-23 10:51:42 ----A---- C:\WINDOWS\sed.exe
2009-08-23 10:51:42 ----A---- C:\WINDOWS\PEV.exe
2009-08-23 10:51:42 ----A---- C:\WINDOWS\NIRCMD.exe
2009-08-23 10:51:42 ----A---- C:\WINDOWS\grep.exe
2009-08-23 10:51:25 ----SD---- C:\ComboFix.-
2009-08-23 10:51:06 ----D---- C:\Qoobox
2009-08-16 22:01:53 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-08-16 22:00:22 ----D---- C:\WINDOWS\ie8updates
2009-08-16 21:57:32 ----HDC---- C:\WINDOWS\ie8
2009-08-16 21:33:58 ----SD---- C:\ComboFix

======List of files/folders modified in the last 1 months======

2009-09-15 20:33:06 ----D---- C:\WINDOWS\Prefetch
2009-09-15 19:25:07 ----D---- C:\Programme\Mozilla Thunderbird
2009-09-15 19:18:11 ----D---- C:\WINDOWS\temp
2009-09-15 19:04:53 ----SD---- C:\WINDOWS\Tasks
2009-09-15 19:03:29 ----D---- C:\Programme\Mozilla Firefox
2009-09-15 19:02:30 ----D---- C:\WINDOWS\system32\CatRoot2
2009-09-15 19:02:14 ----A---- C:\WINDOWS\ModemLog_Bluetooth DUN Modem.txt
2009-09-15 19:02:08 ----A---- C:\WINDOWS\ModemLog_Agere Systems PCI Soft Modem.txt
2009-09-15 19:01:13 ----D---- C:\WINDOWS\system32\drivers
2009-09-15 19:01:13 ----D---- C:\WINDOWS
2009-09-15 19:00:39 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-09-15 16:53:44 ----D---- C:\Programme\Lx_cats
2009-09-14 17:36:49 ----A---- C:\WINDOWS\NeroDigital.ini
2009-09-13 12:04:29 ----D---- C:\WINDOWS\Help
2009-09-12 14:29:54 ----D---- C:\Dokumente und Einstellungen\Roitzheim\Anwendungsdaten\Skype
2009-09-10 16:08:47 ----D---- C:\Dokumente und Einstellungen\Roitzheim\Anwendungsdaten\skypePM
2009-09-10 12:58:00 ----D---- C:\WINDOWS\system32
2009-09-09 22:23:52 ----HD---- C:\WINDOWS\inf
2009-09-09 22:23:51 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-09-09 22:23:45 ----A---- C:\WINDOWS\imsins.BAK
2009-09-09 22:23:41 ----HD---- C:\WINDOWS\$hf_mig$
2009-09-04 20:53:09 ----A---- C:\WINDOWS\scummvm.ini
2009-09-03 15:26:38 ----D---- C:\Dokumente und Einstellungen\Roitzheim\Anwendungsdaten\gtk-2.0
2009-09-03 15:21:24 ----D---- C:\Programme\GIMP-2.0
2009-08-28 23:38:20 ----A---- C:\WINDOWS\system32\MRT.exe
2009-08-27 20:06:53 ----SHD---- C:\WINDOWS\Installer
2009-08-27 20:06:53 ----SHD---- C:\Config.Msi
2009-08-27 20:06:53 ----D---- C:\WINDOWS\WinSxS
2009-08-26 21:49:20 ----RD---- C:\Programme
2009-08-26 16:00:04 ----D---- C:\Programme\Gemeinsame Dateien\Microsoft Shared
2009-08-23 11:04:46 ----A---- C:\WINDOWS\system.ini
2009-08-23 11:02:18 ----D---- C:\WINDOWS\AppPatch
2009-08-23 11:02:10 ----D---- C:\Programme\Gemeinsame Dateien
2009-08-23 10:51:26 ----D---- C:\WINDOWS\erdnt
2009-08-16 22:04:53 ----D---- C:\WINDOWS\system32\de-de
2009-08-16 22:04:53 ----D---- C:\WINDOWS\Media
2009-08-16 22:04:53 ----D---- C:\Programme\Internet Explorer
2009-08-16 21:47:16 ----SHD---- C:\System Volume Information
2009-08-16 21:47:16 ----D---- C:\WINDOWS\system32\Restore
2009-08-16 17:23:43 ----D---- C:\Programme\Malwarebytes' Anti-Malware
2009-08-16 10:40:49 ----D---- C:\WINDOWS\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 hwinterface;hwinterface; C:\WINDOWS\System32\Drivers\hwinterface.sys [2008-06-27 3026]
R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.0.0.5; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2005-01-27 15939]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2007-11-06 271360]
R2 auwmac;Auerswald ISDN WAN Driver (Ver. %V_VERSION%); C:\WINDOWS\system32\DRIVERS\auwmac.sys [2004-01-27 65587]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-07-28 55656]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2007-11-06 18048]
R2 Oscapi;Auerswald CAPI2.0 Treiber; C:\WINDOWS\system32\DRIVERS\Oscapi20.sys [2002-02-21 164930]
R2 STEC3;STEC3; \??\C:\WINDOWS\system32\STEC3.sys []
R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-02-09 666368]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2005-03-04 1066278]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-01-12 915968]
R3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2004-12-01 22488]
R3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-01-13 12500]
R3 cmudax;C-Media High Definition Audio Interface; C:\WINDOWS\system32\drivers\cmudax.sys [2004-10-01 1272000]
R3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2006-05-27 223128]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-04-15 42496]
R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-04 12288]
R3 MxlW2k;MxlW2k; C:\WINDOWS\system32\drivers\MxlW2k.sys [2005-02-14 28352]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-04 5888]
R3 SFC4;SFC4; C:\WINDOWS\System32\drivers\SFC4.sys [1998-08-14 41472]
R3 snpstd;USB PC Camera (SN9C102); C:\WINDOWS\system32\DRIVERS\snpstd.sys [2004-10-15 345728]
R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2004-11-05 82148]
R3 wbscr;Winbond Smartcard Reader for I/O; C:\WINDOWS\system32\drivers\wbscr.sys [2002-04-24 19928]
S2 oldfhfg;oldfhfg; C:\WINDOWS\system32\drivers\sxpuuwi.sys []
S3 61883;61883-Einheitsgerät; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 auusb;Auerswald USB Treiber; C:\WINDOWS\System32\Drivers\auusb.sys [2004-01-27 200573]
S3 Avc;AVC-Gerät; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2004-10-19 20096]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2004-09-21 10804]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\WINDOWS\system32\drivers\BTNetFilter.sys []
S3 CardReaderFilter;Card Reader Filter; \??\C:\WINDOWS\system32\Drivers\USBCRFT.SYS []
S3 catchme;catchme; \??\C:\DOKUME~1\ROITZH~1\LOKALE~1\Temp\catchme.sys []
S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cdrmkaun;cdrmkaun; \??\C:\DOKUME~1\ROITZH~1\LOKALE~1\Temp\cdrmkaun.sys []
S3 FXDRV;FXDRV; \??\C:\Dokumente und Einstellungen\Roitzheim\Eigene Dateien\ICQ\329532205\ReceivedFiles\195597078 MichaelN\SuperUtility\Fxdrv.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-06-12 17480]
S3 HdAudAddService;Microsoft UAA-Funktionstreiber für den High Definition Audio-Dienst; C:\WINDOWS\system32\drivers\HdAudio.sys [2004-03-17 113664]
S3 MACNDIS5;MACNDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\GEMEIN~1\MARMIK~1\MACNDIS5.SYS []
S3 MIINPazX;MIINPazX NDIS Protocol Driver; \??\C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS []
S3 MODEMCSA;Unimodem-Datenstromfiltergerät; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 MPE;BDA MPE-Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 MTOnlPktAlyX;MTOnlPktAlyX NDIS Protocol Driver; \??\C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS []
S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nm;Netzwerkmonitortreiber; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-02 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-02 20864]
S3 NTSIM;NTSIM; \??\C:\WINDOWS\system32\ntsim.sys []
S3 RT2500USB;RT2500 USB Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\rt2500usb.sys [2004-12-03 140544]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 sony_ssm.sys;sony_ssm.sys; \??\C:\DOKUME~1\ROITZH~1\LOKALE~1\Temp\sony_ssm.sys []
S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tausb;Auerswald USB CAPI transport Treiber; C:\WINDOWS\System32\Drivers\tausb.sys [2004-01-27 193421]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-05-02 8064]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XUIF;X10 USB Wireless Transceiver; C:\WINDOWS\System32\Drivers\x10ufx2.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-01-12 425984]
R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe [2004-12-24 106496]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe [2005-02-21 184399]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe [2005-02-21 110669]
R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [2005-02-21 61440]
R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-05-22 152984]
R2 MDM;Machine Debug Manager; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [2003-06-20 322120]
R2 MZCCntrl;T-Online WLAN Adapter Steuerungsdienst; C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe [2006-10-04 61440]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Programme\CyberLink\Shared Files\RichVideo.exe [2005-08-08 167936]
R2 UserAccess7;SecuROM User Access Service (V7); C:\WINDOWS\system32\UAService7.exe [2009-01-08 122880]
R2 WinDefend;Windows Defender; C:\Programme\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R2 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S3 aspnet_state;ASP.NET-Statusdienst; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 gusvc;Google Updater Service; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-04 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 lxcf_device;lxcf_device; C:\WINDOWS\system32\lxcfcoms.exe [2005-07-25 491520]
S3 usnjsvc;Messenger USN Journal Reader-Service für freigegebene Ordner; C:\Programme\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S3 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe []

-----------------EOF-----------------




info.txt logfile of random's system information tool 1.06 2009-09-15 20:33:19

======Uninstall list======

-->C:\Programme\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\Programme\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\WINDOWS\IsUn0407.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNNMP.exe /UNINSTALL
-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{2638924D-DC58-4C40-BB1C-48C2B24B7B1B}\Setup.exe" -L0x7
-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{52739387-B81C-4C55-9593-EB7A1044A657}\Setup.exe" -L0x7
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
7-Zip 4.65-->"C:\Programme\7-Zip\Uninstall.exe"
ABC Amber Audio Converter-->C:\PROGRA~1\ABCAMB~1\UNWISE.EXE C:\PROGRA~1\ABCAMB~1\INSTALL.LOG
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 7.1.0 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A71000000002}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Adobe® Photoshop® Album Starter Edition 3.2-->MsiExec.exe /I{A654A805-41D9-40C7-AA46-4AF04F044D61}
Age of Empires III-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}
Age of Mythology-->"D:\Programme\Microsoft Games\Age of Mythology\UNINSTAL.EXE" /runtemp /addremove
Age of Wonders-->C:\WINDOWS\IsUn0407.exe -f"C:\Programme\Triumph Studios\Age of Wonders\Uninst.isu"
ArcSoft PhotoImpression-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{35B8CC58-F128-4169-82EB-0E6CB0C3AFE6}\setup.exe" -l0x7 -uninst
ArcSoft VideoImpression 1.6-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{DEF2E5A3-0317-4822-B930-8B721EB483E4}\setup.exe" -l0x7 -uninst
ATI - Dienstprogramm zur Deinstallation der Software-->C:\Programme\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class;)ISPLAY -clean
Audacity 1.2.6-->"C:\Programme\Audacity\unins000.exe"
Auerswald CAPI 2.0 Treiber-->rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\inf\osrecapi.inf,DefaultInstall,12
Auerswald CAPI Protector 1.0.6-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{41D4281A-9763-4B8C-A30B-3F34B816F00A}\setup.exe"
Auerswald COMlist 2.4.33-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{1E71911C-F82B-4E57-82B8-B0A06EEF4445}\setup.exe" -l0x7
Auerswald COMpact 2104 Tools 3.2.2-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{9AD907B6-A9AE-41C5-9556-BE74B19D333C}\setup.exe" -l0x7
Auerswald ISDN WANTreiber-->rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\inf\aurendis.inf,DefaultInstall,12
AusLogics Disk Defrag-->"C:\Programme\Auslogics\AusLogics Disk Defrag\unins000.exe"
Avira AntiVir Personal - Free Antivirus-->C:\Programme\Avira\AntiVir Desktop\setup.exe /REMOVE
Blip Blop (remove only)-->"C:\Programme\Blip Blop\uninstall.exe"
Blobby Volley 2.0 Alpha 6-->"C:\Programme\Blobby Volley 2.0 Alpha 6\unins000.exe"
BlueSoleil-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{B9F499B8-D1F0-42FC-84BE-CC552123CCCB}\setup.exe" -l0x7
BMW M3 Challenge-->"C:\BMW M3 Challenge\Support\unins000.exe"
Bobble Puzzle 0.87-->"C:\Programme\Bobble Puzzle\unins000.exe"
Bubble Shooter Premium-->"C:\Programme\Absolutist.de\Bubble Shooter Premium\unins000.exe"
Capture The Dude (remove only)-->"C:\Programme\CTD\uninstall.exe"
CCleaner (remove only)-->"C:\Programme\CCleaner\uninst.exe"
CleanUp!-->C:\Programme\CleanUp!\uninstall.exe
ClearProg 1.4.1 Final-->C:\Programme\ClearProg\Uninstall.exe
Clusterball 1.003 Base Version-->C:\WINDOWS\unvise32.exe C:\Programme\Clusterball\clusterball1003baseversion.log
C-Media High Definition Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
C-S 1.6 Erweiterungssystem-->C:\Programme\Valve\Uninstall_Erweiterung.exe
Das Latein-Wörterbuch 2.1-->C:\Programme\Latein-Wörterbuch\unins000.exe
DeepBurner v1.8.0.224-->"C:\Programme\Astonsoft\DeepBurner\Uninstall.exe" "C:\Programme\Astonsoft\DeepBurner\install.log"
DIE SIEDLER - Das Erbe der Könige-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{8FDC1610-3FB5-4EF2-A0D0-CEDC3A525A25}\setup.exe" -l0x7 -removeonly
Digitale Bibliothek 4-->"C:\Programme\Digitale Bibliothek 4\uninstall.exe"
DivX Codec-->C:\Programme\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Programme\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Programme\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Programme\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DynaGeo 3.0f-->"C:\Programme\DynaGeo\unins000.exe"
EE-ZDE-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{B49C924C-A651-4378-94F6-5D9BF44A959F}\Setup.exe" -l0x7
Empire Earth-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{2447500B-22D7-47BD-9B13-1A927F43A267}\Setup.exe"
Flachbett Scanner v1.3-->C:\WINDOWS\twain_32\A4CIS600\UNINST.EXE
Flexio/Exercitio-->C:\PROGRA~1\ROMeo\FlexExer\UNWISE.EXE C:\PROGRA~1\ROMeo\FlexExer\INSTALL.LOG
Fraps (remove only)-->"C:\Fraps\uninstall.exe"
Free YouTube to Mp3 Converter version 3.1-->"C:\Programme\DVDVideoSoft\Free YouTube to Mp3 Converter\unins000.exe"
FreeMind-->"C:\Programme\FreeMind\unins000.exe"
Freewar Karten Editor-->C:\WINDOWS\system32\javaws.exe -uninstall "http://213.239.200.71/~miro/map-editor/freewar.jnlp"
Funny Furries 2 Xmas-->C:\Games\Funny Furries 2 Xmas\Uninstal.exe
GameJack 5-->MsiExec.exe /I{7739C506-74AE-48CF-991B-AB5E35A927FC}
Generic USB CardReader 2.0-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{EA1CB7AC-E221-4822-A789-0ADB051DC498}\Setup.exe" -l0x9 -wUninst
GeoGebra-->"C:\Programme\GeoGebra\uninstaller\Uninstall GeoGebra.exe"
GIMP 2.6.7-->"C:\Programme\GIMP-2.0\setup\unins001.exe"
Google Earth-->MsiExec.exe /I{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}
HighMAT-Erweiterung für den Microsoft Windows XP-Assistenten zum Schreiben von CDs-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
Hijack This 2.0.2-->"C:\Programme\Hijack This\unins000.exe"
HijackThis 2.0.2-->"C:\Programme\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix für Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Hotfix für Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
ICQ6.5-->"C:\Programme\InstallShield Installation Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe" -runfromtemp -l0x0009 -removeonly
Informationen über Ihren PC-->MsiExec.exe /I{3D1A6B70-3E02-49BC-88B0-916C80274632}
iPhoto Plus 4-->C:\WINDOWS\unin0407.exe -f"C:\Programme\iPhoto Plus 4\DeIsL2.isu"
IPIX ActiveX Viewer-->C:\WINDOWS\Unwise.exe /a C:\WINDOWS\occache\IPIXActX.log
IPIX Netscape Plugin Viewer-->C:\WINDOWS\Unwise.exe /a C:\WINDOWS\IPIXNets.log
IPIX Viewer-->C:\WINDOWS\Unwise.exe /a C:\PROGRA~2\IPIX\IPIXVI~1\IPIXVwr.log
J2SE Runtime Environment 5.0 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150010}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Joakim Asplund's Ultra FlexBall 2000-->C:\WINDOWS\IsUninst.exe -f"C:\Programme\Ultra FlexBall 2000\Uninst.isu"
JRE 1.1.8-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{1823F044-BF5D-471E-A732-7C1D4C79E8CC}\setup.exe" -l0x7
JRE 1.3.1-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{76C508CD-4B1D-45B2-A9CF-B44F18D0FD0D}\setup.exe"
JRE 1.4.2-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{48AB06FF-059D-43DE-ACC1-15920D5A7FF2}\setup.exe" -l0x7
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
LBZ8473alpha1 -->C:\LBZ3D\LBZ8473alpha1\LBZ\Uninstall.exe
Learn2 Player (Uninstall Only)-->C:\Programme\Learn2.com\StRunner\stuninst.exe
LetsTrade Komponenten-->C:\WINDOWS\fpuninst.exe -uninstall:"C:\Programme\LetsTrade\uninst\uninst.ini"
Lexmark 730 Series-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxcfUNST.EXE -NOLICENSE
Little Fighter 2 1.9c-->C:\Programme\LittleFighter2\LF2_v1.9c\uninst.exe
LucasArts' Curse of Monkey Island-->C:\WINDOWS\unin0407.exe -fC:\Programme\LucasArts\Curse\DeIsL1.isu
Malwarebytes' Anti-Malware-->"C:\Programme\Malwarebytes' Anti-Malware\unins000.exe"
MediaShow 3.0-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{D5A9B7C0-8751-11D8-9D75-000129760D75}\setup.exe" -uninstall
Mega-Quiz-->C:\PROGRA~1\NEWMED~1\UNWISE.EXE C:\PROGRA~1\NEWMED~1\INSTALL.LOG
Microsoft .NET Framework 1.1 German Language Pack-->MsiExec.exe /X{E78BFA60-5393-4C38-82AB-E8019E464EB4}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Age of Empires Gold-->"C:\Programme\Microsoft Games\Age of EmpiresErweiterung\UNINSTAL.EXE" /runtemp
Microsoft Age of Empires II: The Conquerors Expansion-->"C:\Programme\Microsoft Games\Age of Empires II\UNINSTALX.EXE" /runtemp /addremove
Microsoft Age of Empires II-->"C:\Programme\Microsoft Games\Age of Empires II\UNINSTAL.EXE" /runtemp /uninstall
Microsoft AppLocale-->MsiExec.exe /I{394BE3D9-7F57-4638-A8D1-1D88671913B7}
Microsoft AutoRoute 2005-->MsiExec.exe /I{67E4EE98-59F4-4220-89A6-A20AF5BEC689}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Encarta Enzyklopädie 2005-->MsiExec.exe /I{05440044-64A6-4248-A026-9745C1E9E159}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office 2000 SR-1 Disc 2-->MsiExec.exe /I{00040407-78E1-11D2-B60F-006097C998E7}
Microsoft Office 2000 SR-1 Professional-->MsiExec.exe /I{00010407-78E1-11D2-B60F-006097C998E7}
Microsoft Picture It! Foto Premium 10-->"C:\Programme\Gemeinsame Dateien\Microsoft Shared\Picture It!\RmvSuite.exe" ADDREMOVE=1 SKU=PREM
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual J# .NET Redistributable Package 1.1-->MsiExec.exe /X{1A655D51-1423-48A3-B748-8F5A0BE294C8}
Microsoft Windows Application Compatibility Database-->C:\WINDOWS\system32\sdbinst.exe -u "C:\WINDOWS\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb"
Microsoft Windows-Journal-Viewer-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
Microsoft Word 2002-->MsiExec.exe /I{911B0407-6000-11D3-8CFE-0050048383C9}
Microsoft Works Suite-Add-Ins für Microsoft Word-->MsiExec.exe /I{C6A12D9B-D86A-4ee6-B980-95E4B26A2E13}
Microsoft Works-->MsiExec.exe /I{B26E3B0D-C2FA-4370-B068-7C476766F029}
Microsoft Zoo Tycoon-->"C:\Programme\Microsoft Games\Zoo Tycoon\UNINSTAL.EXE" /runtemp /addremove
mIRC-->"C:\Program Files\mIRC\mirc.exe" -uninstall
Mozilla Firefox (3.0.14)-->C:\Programme\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.23)-->C:\Programme\Mozilla Thunderbird\uninstall\helper.exe
MSN-->C:\Programme\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML4 Parser-->MsiExec.exe /I{01501EBA-EC35-4F9F-8889-3BE346E5DA13}
Musicmatch® Jukebox-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{8EF1122E-E90C-4EE9-AB0C-7FDE2BA42C26}\setup.exe" -l0x7 -uninst
Need for Speed Underground 2-->C:\Programme\EA GAMES\Need for Speed Underground 2\EAUninstall.exe
Need for Speed™ Most Wanted-->D:\Programme\EA GAMES\Need for Speed Most Wanted\EAUninstall.exe
Nero Suite-->C:\Programme\Gemeinsame Dateien\Ahead\Uninstall\setup.exe /uninstall ExtraUninstallID=""
Nokia Connectivity Cable Driver-->RUNDLL32.EXE nsesetup.dll,DoNTUninst
Oblivion-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x7 -removeonly
phase5-->"C:\Programme\phase5\uninstall.exe"
phase6-->MsiExec.exe /X{50367982-D17D-4DE1-8A9F-7BFC411C09F0}
phonostar-Player Version 2.01.0-->"C:\Programme\phonostar\unins000.exe"
PhotoNow! 1.0-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\setup.exe" -uninstall
PhotoPos Pro Toolbar-->C:\Programme\photoposcomtbr\uninstall.exe
PhotoScape-->"C:\Programme\PhotoScape\uninstall.exe"
Picasa 3-->"C:\Programme\Google\Picasa3\Uninstall.exe"
Pos Free Photo Editor-->"C:\WINDOWS\Pos Free Photo Editor Uninstaller.exe"
PowerCinema 4.0-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
PowerDirector-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" -uninstall
PowerDVD-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
PowerProducer-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
Prince of Persia The Sands of Time-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{8C453F13-6877-4D34-8816-009ABDE306DB}\setup.exe" -l0x7
PrintMusic! 2004 Demo-->C:\WINDOWS\unvise32.exe C:\Programme\PrintMusic! 2004 Demo\uninstal.log
QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
Real&Motyca: BrmBrm...-->"C:\Programme\BrmBrm\uninstall.exe"
RollerCoaster Tycoon 3-->"D:\Programme\RollerCoaster Tycoon 3\uninst\unins000.exe"
RPG Maker XP Deutsch V1.01 -->C:\WINDOWS\uninstall\RPG Maker XP Deutsch\setup.exe
RT2500 USB Wireless LAN Card-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{5490B6EF-5A48-40B7-A9E0-D3B886D17A29}\setup.exe" -l0x7 -removeonly
Rumble Box Tournament Edition-->C:\Programme\Rumble Box\uninst.exe
Schmidt Interaktivspaß Doppelkopf-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{BA947C14-9B71-484D-B66C-055E2E6CA7B1}\Setup.exe" -l0x7 -uninst
ScummVM 0.8.2-->"D:\Programme\ScummVM\unins000.exe"
Setup-Start von Microsoft Works 2005-->C:\Programme\Microsoft Works Suite 2005\Setup\Launcher.exe /ARP F:\
Shockwave-->C:\WINDOWS\system32\Macromed\SHOCKW~2\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~2\Install.log
Sicherheitsupdate für Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Skype™ 3.6-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Smart Manager-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{1E02403C-C469-4937-9B94-7DF9F78888FA}\Setup.exe" -l0x7
Snoopy 1.0-->C:\Programme\Snoopy\unins000.exe
Sony Ericsson Themes Creator 3.29-->C:\Programme\Sony Ericsson\Themes Creator\Uninstall.exe
Spybot - Search & Destroy-->"C:\Programme\Spybot - Search & Destroy\unins000.exe"
Star Wars Battlefront II-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{3D374523-CFDE-461A-827E-2A102E2AB365}\Setup.exe" -l0x7 -removeonly
Star Wars Empire at War-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}\Setup.exe" -l0x7 -removeonly
StarTron-->C:\WINDOWS\IsUn0407.exe -f"c:\dokumente und einstellungen\roitzheim\desktop\spiele\minispiele\Uninst.isu"
Stronghold 2-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{16D2C649-CBA8-44EE-B730-12584667D487}\setup.exe" -l0x7 -removeonly
TeamSpeak 2 RC2-->C:\Programme\Teamspeak2_RC2\unins000.exe
TextBridge Classic-->"C:\PROGRA~2\TEXTBR~1\bin\setup.exe" -funinstal.ins
The KMPlayer (remove only)-->"C:\Programme\The KMPlayer\uninstall.exe"
Theme Creator Pro 3.1.260 SR-1-->"C:\Programme\SESoftware\Theme Creator Pro 3G\unins000.exe"
T-Online 6.0-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{B1275E23-717A-4D52-997A-1AD1E24BC7F3}\setup.exe" CPAS
T-Online WLAN-Access Finder-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}\Setup.exe" -L0x7
Ulead COOL 3D 3.0-->C:\WINDOWS\Ulead.dat\uninstall\setup.exe
Ulead PhotoImpact X3-->C:\Programme\InstallShield Installation Information\{15803703-25FA-4C01-A062-3F4A59937E87}\setup.exe -runfromtemp -l0x0407
Uninstall 1.0.0.1-->"C:\Programme\Gemeinsame Dateien\DVDVideoSoft\unins000.exe"
Uninstall Abenteuer auf dem Reiterhof 2-->C:\WINDOWS\IsUn0407.exe -f"C:\Programme\UbiSoft\Abenteuer auf dem Reiterhof 2\Uninst.isu"
Unlocker 1.8.7-->C:\Programme\Unlocker\uninst.exe
Update für Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
Update für Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update für Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
USB PC Camera (SN9C102)-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{57383270-6F61-4DC8-A9B8-C1745FC29F38}\Setup.exe" -l0x9
VideoLAN VLC media player 0.8.4a-->C:\Programme\VideoLAN\VLC\uninstall.exe
videon-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{261D0486-9127-4071-BA1D-FE784310752E}\Setup.exe" -l0x7
Viewpoint Media Player-->C:\Programme\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
W83L518D-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{CD815603-AB71-4CFB-B3AC-522298037ACC}\Setup.exe" -l0x7
WinAce Archiver-->C:\Programme\WinAce\SXUNINST.EXE C:\Programme\WinAce\SXUNINST.INI
Windows Defender Signatures-->MsiExec.exe /I{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}
Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Messenger-->MsiExec.exe /I{279DB581-239C-4E13-97F8-0F48E40BE75C}
Windows Media Format 11 runtime-->"C:\Programme\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Programme\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Windows-Sicherungsprogramm-->MsiExec.exe /I{76EFFC7C-17A6-479D-9E47-8E658C1695AE}
WinUHA 2.0 RC1 (2005.02.27)-->C:\Programme\WinUHA\unins000.exe
WISO Mein Geld 5-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{8CD9282B-A8F4-4A6D-A11C-6B9738975B00}\Setup.exe"
World of Warcraft-->C:\Programme\Gemeinsame Dateien\Blizzard Entertainment\WORLD OF WARCRAFT\Uninstall.exe
XDream Command Center-->MsiExec.exe /I{F1AF0731-AA7A-4F7A-B34B-DA3E8A319C34}
XnView 1.91.6-->C:\Programme\XnView\unins000.exe
Yahoo! Toolbar mit Pop-Up-Blocker-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Security center information======

AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz (disabled)
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz (disabled)
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz (outdated)
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz (disabled)
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz (disabled)
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir Desktop
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz (disabled)
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz (disabled)
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz
AV: AntiVir PersonalEdition Classic Virenschutz

======System event log======

Computer Name: ROITZHEIM1-
Event Code: 18
Message: Installationsbereit: Die folgenden Updates wurden heruntergeladen und können installiert werden. Diese Updates sollen laut Zeitplan am Mittwoch, 5. August 2009 um 03:00 auf diesem Computer installiert werden:
- Definition Update for Windows Defender - KB915597 (Definition 1.63.812.0)

Record Number: 17046
Source Name: Windows Update Agent
Time Written: 20090804162234.000000+120
Event Type: Informationen
User:

Computer Name: ROITZHEIM1-
Event Code: 7036
Message: Dienst "Intelligenter Hintergrundübertragungsdienst" befindet sich jetzt im Status "Ausgeführt".

Record Number: 17045
Source Name: Service Control Manager
Time Written: 20090804162152.000000+120
Event Type: Informationen
User:

Computer Name: ROITZHEIM1-
Event Code: 7035
Message: Der Steuerbefehl "starten" wurde erfolgreich an den Dienst "Intelligenter Hintergrundübertragungsdienst" gesendet.

Record Number: 17044
Source Name: Service Control Manager
Time Written: 20090804162151.000000+120
Event Type: Informationen
User: NT-AUTORITÄT\SYSTEM

Computer Name: ROITZHEIM1-
Event Code: 7036
Message: Dienst "Windows-Bilderfassung (WIA)" befindet sich jetzt im Status "Ausgeführt".

Record Number: 17043
Source Name: Service Control Manager
Time Written: 20090804161924.000000+120
Event Type: Informationen
User:

Computer Name: ROITZHEIM1-
Event Code: 8033
Message: Der Suchdienst hat eine Wahl auf dem Netzwerk "\Device\NetBT_Tcpip_{86F58EC0-34C5-4C5C-A343-06D2AA5B5B85}" erzwungen, da der Hauptsuchdienst beendet wurde.

Record Number: 17042
Source Name: BROWSER
Time Written: 20090804161922.000000+120
Event Type: Informationen
User:

=====Application event log=====

Computer Name: ROITZHEIM1-
Event Code: 1004
Message: Erkennung von Produkt "{F1AF0731-AA7A-4F7A-B34B-DA3E8A319C34}", Funktion "_MainFeature" und Komponente "{B74AD7D0-AB8A-4CA9-90BA-D0BFA2854CA8}" fehlgeschlagen. Die Ressource "HKEY_LOCAL_MACHINE\SOFTWARE\Home\" ist nicht vorhanden.

Record Number: 17781
Source Name: MsiInstaller
Time Written: 20090526121201.000000+120
Event Type: Warnung
User: ROITZHEIM1-\Roitzheim

Computer Name: ROITZHEIM1-
Event Code: 11729
Message: Product: XDream Command Center -- Die Konfiguration ist fehlgeschlagen.

Record Number: 17780
Source Name: MsiInstaller
Time Written: 20090526121201.000000+120
Event Type: Informationen
User: ROITZHEIM1-\Roitzheim

Computer Name: ROITZHEIM1-
Event Code: 1001
Message: Erkennung von Produkt "{F1AF0731-AA7A-4F7A-B34B-DA3E8A319C34}" und Funktion "_MainFeature" fehlgeschlagen beim Anfordern von Komponente "{22056900-C842-11D1-A0DD-00A0C9054277}".

Record Number: 17779
Source Name: MsiInstaller
Time Written: 20090526121201.000000+120
Event Type: Warnung
User: ROITZHEIM1-\Roitzheim

Computer Name: ROITZHEIM1-
Event Code: 1004
Message: Erkennung von Produkt "{F1AF0731-AA7A-4F7A-B34B-DA3E8A319C34}", Funktion "_MainFeature" und Komponente "{B74AD7D0-AB8A-4CA9-90BA-D0BFA2854CA8}" fehlgeschlagen. Die Ressource "HKEY_LOCAL_MACHINE\SOFTWARE\Home\" ist nicht vorhanden.

Record Number: 17778
Source Name: MsiInstaller
Time Written: 20090526121201.000000+120
Event Type: Warnung
User: ROITZHEIM1-\Roitzheim

Computer Name: ROITZHEIM1-
Event Code: 11729
Message: Product: XDream Command Center -- Die Konfiguration ist fehlgeschlagen.

Record Number: 17777
Source Name: MsiInstaller
Time Written: 20090526121201.000000+120
Event Type: Informationen
User: ROITZHEIM1-\Roitzheim

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Programme\ATI Technologies\ATI Control Panel
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
"PROCESSOR_REVISION"=0403
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"AUER_JRE_HOME_1_4_2"=C:\Programme\Auerswald\JRE 1.4.2

-----------------EOF-----------------


virus total hat nix besonderes gefunden
F-Secure Online Scanner 3.0 habe ich noch nicht verwendet.


Momentan lasse ich diesen aber mal durchlaufen.
Seitenanfang Seitenende
15.09.2009, 21:03
Ehrenmitglied
Avatar Argus

Beiträge: 6028
#15 Poste auch ein Log von Gmer.Punkt 4 http://board.protecus.de/t23187.htm
Stelle GMER so ein wie auf dem Bild


__________
MfG Argus
Seitenanfang Seitenende