[Schleim]

Hi alle.
Mein PC hat sich verlangsamt sehr stark in den letzten vier Wochen oder so. Es dauert fast 15 Minuten, nur um neu starten und wenn ich den PC über die Festplatte klingt unglaublich damit beschäftigt bin.
Ich benutze AVG Free Edition, S & D, Ad-Aware & SUPERAntiSpyware ziemlich regelmäßig.
Bitte haben Sie einen Blick, wenn Sie Zeit haben.
Ich lege die erforderlichen Protokolle für Sie,

1. SUPERAntiSpyware anmelden.
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 11/04/2008 at 03:20 PM
Application Version: 4.21.1004
Core Rules Database Version: 3622
Trace Rules Database Version: 1606
Scan type: Complete Scan
Total Scan Time: 01:30:19
Memory items scanned: 339
Memory Bedrohungen erkannt: 0
Registry items scanned: 6045
Registry Bedrohungen erkannt: 0
File items scanned: 58429
File threats detected: 27
Adware.Tracking Cookie
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@networksolutions.112.2o 7 [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@avgtechnologies.112.2o7 [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ burstnet [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ AdTech [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ @ DoubleClick Marke [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@admse013.adbureau [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ specificclick [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ @ Marke Dienst-sys [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ @ tribalfusion Marke [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@haynet.adbureau [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@media.adrevolver [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@ad.yieldmanager [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ revsci [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ @ Mediaplex Marke [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ adrevolver [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ adcentriconline [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@media.adrevolver [3]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@uk.sitestat [4]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ Werbung [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ apmebf [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@bs.serving-sys [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ 2o7 [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@uk.sitestat [3]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ AdECN [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark @ TACODA [1]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ @ atdmt Marke [2]. Txt
C: \ Dokumente und Einstellungen \ Mark \ Cookies \ mark@adopt.euroclick [1]. Txt


2. Malwarebytes 'Anti-Malware log.
Malwarebytes' Anti-Malware 1,30
Datenbank Version: 1363
Windows 5.1.2600 Service Pack 3
04/11/2008 18:31:42
mbam-log-2008-11-04 (18-31-42). txt
Scan type: Quick Scan
Objekte: 66723
Verstrichene Zeit: 13 Minute (n), 1 Sekunde (n)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Infizierte Dateien: 1
Memory Processes Infected:
(Keine bösartigen Objekte gefunden)
Memory Modules Infected:
(Keine bösartigen Objekte gefunden)
Registry Keys Infected:
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Ext \ Stats \ (3ba4271e-5c1e-48e2-B432-d8bf420dd31d) (Rogue.DeusCleaner) -> No action taken.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Ext \ Stats \ (1a26f07f-0d60-4835-91cf-1e1766a0ec56) (Trojan.Agent) -> No action taken.
Registry Values Infected:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ SharedDlls \ C: \ WINDOWS \ system32 \ _RegTLB. dll (Trojan.Agent) -> No action taken.
Registry Data Items Infected:
(Keine bösartigen Objekte gefunden)
Folders Infected:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
C: \ WINDOWS \ system32 \ _RegTLB.dll (Trojan.Agent) -> No action taken.

3. HijackThis-Log

Logfile von Trend Micro HijackThis V2.0.2
Scan saved at 18:56:10 am 05/11/2008
Plattform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot-Modus: Normal
Laufenden Prozesse:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Windows Defender \ MsMpEng.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe
C: \ WINDOWS \ system32 \ brsvc01a.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ WINDOWS \ system32 \ brss01a.exe
C: \ WINDOWS \ Explorer.EXE
C: \ PROGRA ~ 1 \ COMMON ~ 1 \ AOL \ ACS \ AOLacsd.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe
C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
C: \ WINDOWS \ system32 \ UStorSrv.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgrsx.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe
C: \ WINDOWS \ system32 \ VTTimer.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe
C: \ Program Files \ Windows Defender \ MSASCui.exe
C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe
C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ WINDOWS \ system32 \ wuauclt.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Window Title = Packard Bell
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll
O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll
O2 - BHO: Java (TM) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll
O2 - BHO: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL
O2 - BHO: Java (TM) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ deploy \ jqs \ dh \ jqs_plugin.dll
O3 - Toolbar: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL
O4 - HKLM \ .. \ Run: [VTTimer] VTTimer.exe
O4 - HKLM \ .. \ Run: [AVG8_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe
O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe"
O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKUS \ S-1-5-19 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS \ S-1-5-18 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'SYSTEM')
O4 - HKUS \. DEFAULT \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'Default User ")
O4 - Global Startup: Adobe Reader Speed Launch.lnk = "C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe
O8 - Extra Kontext Menüpunkt: E & Xport auf Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office11 \ EXCEL.EXE/3000
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office11 \ REFIEBAR.DLL
O9 - Extra button: Web Entry - (B4E30F61-16D9-11D3-85D1-005004229569) - C: \ WINDOWS \ system32 \ shdocvw.dll
O9 - Extra button: Real.com - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - C: \ WINDOWS \ system32 \ Shdocvw.dll
O9 - Extra Knopf: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll
O9 - Extra Knopf: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra-Taste: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL = file: / / C: \ APPS \ IE \ offline \ uk.htm
Ø15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) (SABScanProcesses Class) -- http://www.superadblocker.com/activex/sabspx.cab
O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1
O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1
O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1
O18 - Protocol: linkscanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG8 \ avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C: \ PROGRA ~ 1 \ COMMON ~ 1 \ AOL \ ACS \ AOLacsd.exe
O23 - Service: AVG Free8 E-Mail-Scanner (avg8emc) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe
O23 - Service: BrSplService (Brother XP spl Service) - Brother Industries Ltd - C: \ WINDOWS \ system32 \ brsvc01a.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Programme \ Gemeinsame Dateien \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
O23 - Service: SmartLinkService (SLService) - Unknown owner - slserv.exe (file missing)
O23 - Service: UStorage Server-Dienst - OTI - C: \ WINDOWS \ system32 \ UStorSrv.exe
--
End of file - 7014 bytes

Ich danke euch im Voraus,
Ich habe volles Vertrauen,

Slime.

[evilfantasy]

Führen Sie die Kaspersky Online Scanner

In Microsoft Windows Vista, Müssen Sie den Web-Browser mit der Führen Sie als Administrator Befehl. Von der rechten Maustaste auf das Desktop-Symbol öffnet den Browser und wählen Sie "Ausführen als Administrator.

• Klicken Sie auf Scan Now
• Klicken Sie auf Nehmen Sie.
• Das Programm wird dann beginnen Herunterladen der neuesten Definitionsdateien.
• Nachdem die Dateien heruntergeladen wurden Suchen Sie die Scan-Einstellungen und haben es Scan Mein Computer.
• Das Scan wird eine Weile dauern, also seien Sie geduldig und lassen Sie es beenden.

Wenn der Scan abgeschlossen ist, in der Scan abgeschlossen ist Fenster, die Infektion wird angezeigt.
Es gibt keine Möglichkeit zu reinigen / desinfizieren, aber wir müssen die Analyse der Informationen über den Bericht.

Um den Bericht:
Klicken Sie auf: Speichern Als

• Weiter, in der Speichern unter Eingabeaufforderung Außer in Bereich, wählen Sie: Desktop.
• In der Dateiname Bereich Einsatz KScan, Oder etwas ähnliches.
• In Dateityp: Klicken Sie auf den Dropdown-Pfeil und wählen Sie: Text-Datei [*. txt]
• Klicken Sie dann auf: Sichern

Kopieren und Einfügen der Kaspersky Online Scanner Bericht in Ihrer nächsten Antwort.

Hinweis für Internet Explorer 7-Benutzer: Wenn Sie Probleme haben, nehmen Sie sich die Taste der Lizenz, klicken Sie auf das Zoom-Tool befindet sich auf der rechten unteren Ecke des IE-Fenster und stellen Sie den Zoom auf 75%. Nachdem die Lizenz akzeptiert wird, auf 100% zurückgesetzt.

[KanoakaVirus]

Nachdem EF hat Sie durch die Reinigung Ihres comp werfen Sie einen Blick hier geführte http://www.computer-juice.com/forums...-malware-9243/

[Schleim]

Hi evilfantasy & Vielen Dank für Ihre Zeit.
Wir haben ein Problem jedoch.
Kaspersky Online Scanner wird ein nicht vollständig zu scannen. Ich habe es laufen 3 mal die längste und es lief war 23 Minuten abgeschlossen und 7% der Scan!
Dateien gescannt .................................... 4817
Threat Namen ..................................... 2
Infizierte Objekte .................................. 1
Verdächtige Objekte ................................ 12
Dauer der Scan ........................... 00:23:31
Can't get ein Scan-Bericht entweder!

Jedes Mal wenn ich versuchte, jedoch bekam ich eine Java-Konsole Screen Pop in Sicht ist dies relevant?
Etwas anderes könnte ich versuchen?
Slime

[evilfantasy]

Herunterladen Random's System Information Tool (RSIT) von random / zufällig aus und speichern Sie sie auf Ihrem Desktop.

• Doppelklicken Sie auf RSIT.exe zu laufen.
• Klicken Sie auf Weiter auf den Haftungsausschluss Bildschirm.
• Sobald der Vorgang abgeschlossen ist, zwei Protokolle wird geöffnet.
• log.txt <wird maximiert und info.txt <wird minimiert
• Bitte senden Sie den Inhalt der beides Protokolle in der nächsten Antwort.

[Schleim]

Okay,
, die ein bisschen besser zu gehen schien.
Logs auf Anfrage;

Logfile von Random's System Information Tool 1.04 (von random / random)
Run von Mark am 2008-11-06 17:05:19
Microsoft Windows XP Home Edition Service Pack 3
System-Laufwerk C: ist mit 60 GB (84%) free of 71 GB
Gesamt-RAM: 191 MB (16% frei)
Logfile von Trend Micro HijackThis V2.0.2
Scan saved at 17:06:26, vom Hotel 06/11/2008
Plattform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot-Modus: Normal
Laufenden Prozesse:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Windows Defender \ MsMpEng.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe
C: \ WINDOWS \ system32 \ brsvc01a.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ WINDOWS \ system32 \ brss01a.exe
C: \ WINDOWS \ Explorer.EXE
C: \ PROGRA ~ 1 \ COMMON ~ 1 \ AOL \ ACS \ AOLacsd.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe
C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
C: \ WINDOWS \ system32 \ UStorSrv.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgrsx.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe
C: \ WINDOWS \ system32 \ VTTimer.exe
C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe
C: \ Program Files \ Windows Defender \ MSASCui.exe
C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe
C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
c: \ Tagebücher \ Lotus Organizer 6 \ organisieren \ org6.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
c: \ Tagebücher \ Lotus Organizer 6 \ organisieren \ org6.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Dokumente und Einstellungen \ Mark \ Desktop \ RSIT.exe
C: \ Program Files \ Trend Micro \ HijackThis \ Mark.exe
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Window Title = Packard Bell
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll
O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll
O2 - BHO: Java (TM) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll
O2 - BHO: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL
O2 - BHO: Java (TM) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ deploy \ jqs \ dh \ jqs_plugin.dll
O3 - Toolbar: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL
O4 - HKLM \ .. \ Run: [VTTimer] VTTimer.exe
O4 - HKLM \ .. \ Run: [AVG8_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe
O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe"
O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKUS \ S-1-5-19 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS \ S-1-5-18 \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'SYSTEM')
O4 - HKUS \. DEFAULT \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ CTFMON.EXE (User 'Default User ")
O4 - Global Startup: Adobe Reader Speed Launch.lnk = "C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe
O8 - Extra Kontext Menüpunkt: E & Xport auf Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office11 \ EXCEL.EXE/3000
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office11 \ REFIEBAR.DLL
O9 - Extra button: Web Entry - (B4E30F61-16D9-11D3-85D1-005004229569) - C: \ WINDOWS \ system32 \ shdocvw.dll
O9 - Extra button: Real.com - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - C: \ WINDOWS \ system32 \ Shdocvw.dll
O9 - Extra Knopf: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll
O9 - Extra Knopf: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra-Taste: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL = file: / / C: \ APPS \ IE \ offline \ uk.htm
Ø15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) (SABScanProcesses Class) -- http://www.superadblocker.com/activex/sabspx.cab
O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1
O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1
O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1
O18 - Protocol: linkscanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG8 \ avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C: \ PROGRA ~ 1 \ COMMON ~ 1 \ AOL \ ACS \ AOLacsd.exe
O23 - Service: AVG Free8 E-Mail-Scanner (avg8emc) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe
O23 - Service: BrSplService (Brother XP spl Service) - Brother Industries Ltd - C: \ WINDOWS \ system32 \ brsvc01a.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Programme \ Gemeinsame Dateien \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe
O23 - Service: SmartLinkService (SLService) - Unknown owner - slserv.exe (file missing)
O23 - Service: UStorage Server-Dienst - OTI - C: \ WINDOWS \ system32 \ UStorSrv.exe
--
End of file - 7153 bytes
Ordner "Geplante Tasks" ====== ======
C: \ WINDOWS \ Tasks \ MP Scheduled Scan.job
Registry dump ====== ======
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3)]
Adobe PDF Reader Link Helper - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll [2006-12-18 59032]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0)]
AVG Safe Search - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll [2008-08-29 455960]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (53707962-6F74-2D53-2644-206D7942484F)]
Spybot-S & D IE Protection - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll [2008-09-15 1562960]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (761497BB-D6F0-462C-B6EB-D4DAF1D92D43)]
Java (tm) Plug-In SSV Helper - C: \ Program Files \ Java \ JRE6 \ bin \ ssv.dll [2008-11-04 320920]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (A057A204-BACC-4D26-9990-79A187E2698E)]
AVG Security Toolbar - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL [2008-07-18 2055960]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (DBC80044-A445-435b-BC74-9C25C1C588A9)]
Java (tm) Plug-In 2 SSV Helper - C: \ Program Files \ Java \ JRE6 \ bin \ jp2ssv.dll [2008-11-04 34816]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (E7E6F031-17CE-4C07-BC86-EABFE594F69C)]
JQSIEStartDetectorImpl Klasse - C: \ Program Files \ Java \ JRE6 \ lib \ deploy \ JQS \ dh \ jqs_plugin.dll [2008-11-04 73728]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar]
(A057A204-BACC-4D26-9990-79A187E2698E) - AVG Security Toolbar - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL [2008-07-18 2055960]
[HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Run]
"NvCplDaemon" = "C: \ WINDOWS \ system32 \ ALCMTR.EXE [2004-03-26 49152]
"AVG8_TRAY" = "C: \ PROGRA ~ 1 \ AVG \ AVG8 \ GrooveMonitor.exe [2008-09-30 1234712]
"Windows Defender" = "C: \ Program Files \ Windows Defender \ MSASCui.exe [2006-11-03 866584]
"SunJavaUpdateSched" = "C: \ Program Files \ Java \ JRE6 \ bin \ jusched.exe [2008-11-04 136600]
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Run]
"SUPERAntiSpyware" = "C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe [2008-09-03 1576176]
"ctfmon.exe" = "C: \ WINDOWS \ system32 \ ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ ctfmon.exe]
C: \ WINDOWS \ system32 \ ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ MSMSGS]
C: \ Program Files \ Messenger \ msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ NeroCheck]
C: \ WINDOWS \ system32 \ NeroCheck.exe [2001-07-09 155648]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ PCMService]
c: \ Apps \ Powercinema \ PCMService.exe [2004-10-08 81920]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ QuickTime Task]
C: \ Program Files \ iTunes \ iTunesHelper.exe [2006-06-01 282624]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ Soundman]
C: \ WINDOWS \ SOUNDMAN.EXE [2004-02-26 65024]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ TkBellExe]
C: \ Program Files \ Common Files \ AntiVir PersonalEdition Classic \ realsched.exe [2004-11-16 180269]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupfolder \ C: ^ Dokumente und Einstellungen ^ All Users ^ Startmenü ^ Programme ^ Autostart ^ Adobe Reader Speed Launch.lnk]
C: \ PROGRA ~ 1 \ Adobe \ ACROBA ~ 2.0 \ Reader \ READER ~ 1.EXE [2008-04-23 29696]
[HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Shared Tools \ msconfig \ startupfolder \ C: ^ Dokumente und Einstellungen Mark ^ ^ Start Menu ^ Programs ^ Startup ^ Lotus Organizer EasyClip.lnk]
C: \ Tagebücher \ LOTUSO ~ 1 \ organisieren \ EASYCL ~ 1.EXE [1999-09-15 229432]
C: \ Dokumente und Einstellungen \ All Users \ Startmenü \ Programme \ Autostart
Adobe Reader Speed Launch.lnk - C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Windows]
"AppInit_DLLs" = "avgrsstx.dll"
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ Notify \! SASWinLogon]
C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll [2008-07-23 352256]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ ShellServiceObjectDelayLoad]
WPDShServiceObj - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ ShellExecuteHooks]
"(091EB208-39DD-417D-A5DD-7E2C2D8FB9CB)" = "C: \ PROGRA ~ 1 \ WIFD1F ~ 1 \ MpShHook.dll [2006-11-03 83224]
"(5AE067D3-9AFB-48E0-853A-EBB7F4A000DA)" = "C: \ Program Files \ SUPERAntiSpyware \ SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ Lsa]
"Authentifizierung Pakete" = MSV1_0
C: \ WINDOWS \ system32 \ geebx.dll
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Minimal \ aawservice]
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Minimal \ WinDefend]
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ network \ aawservice]
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Network \ WinDefend]
[HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Policies \ System]
"dontdisplaylastusername" = 0
"LegalNoticeCaption" =
"LegalNoticeText" =
"shutdownwithoutlogon" = 1
"undockwithoutlogon" = 1
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Policies \ Explorer]
"NoDriveTypeAutoRun" = 145
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ servic es \ SharedAccess \ Parameters \ firewallpolicy \ standard profile \ authorizedapplications \ Liste]
"% windir% \ system32 \ Sessmgr.exe" = "% windir% \ system32 \ Sessmgr.exe: *: Enabled: @ Xpsp2res.dll, -22019"
"C: \ Program Files \ Abacast \ Abaclient.exe" = "C: \ Program Files \ Abacast \ Abaclient.exe: *: Enabled: Abaclient"
"C: \ Program Files \ Real \ RealPlayer \ realplay.exe" = "C: \ Program Files \ Real \ RealPlayer \ realplay.exe: *: Enabled: Realp Ebene"
"C: \ Program Files \ Internet Explorer \ iexplore.exe" = "C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE: *: Enabled: Internet Explorer"
"C: \ Program Files \ Mozilla Firefox \ firefox.exe" = "C: \ Program Files \ Mozilla Firefox \ firefox.exe: *: Enabled: Mozilla Firefox"
"C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ lsupdatemanager.exe" = "C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ lsupdatemanager.exe: *: Enabled: Ad-Aware Update-Manager"
"C: \ Program Files \ Grisoft \ AVG7 \ avginet.exe" = "C: \ Program Files \ Grisoft \ AVG7 \ avginet.exe: *: Enabled: avginet.e XE"
"C: \ Program Files \ Grisoft \ AVG7 \ avgamsvr.exe" = "C: \ Program Files \ Grisoft \ AVG7 \ avgamsvr.exe: *: Enabled: avgamsvr. Exe"
"C: \ Program Files \ Grisoft \ AVG7 \ avgcc.exe" = "C: \ Program Files \ Grisoft \ AVG7 \ avgcc.exe: *: Enabled: avgcc.exe"
"% windir% \ Network Diagnostic \ xpnetdiag.exe" = "% windir% \ Network Diagnostic \ xpnetdiag.exe: *: Enabled: @ xpsp3res.dll, -20000"
"C: \ Program Files \ NetMeeting \ conf.exe" = "C: \ Program Files \ NetMeeting \ conf.exe: *: Enabled: Windows ® NetMeeting ®"
"C: \ Program Files \ AVG \ AVG8 \ avgemc.exe" = "C: \ Program Files \ AVG \ AVG8 \ avgemc.exe: *: Enabled: avgemc.exe"
"C: \ Program Files \ AVG \ AVG8 \ avgupd.exe" = "C: \ Program Files \ AVG \ AVG8 \ avgupd.exe: *: Enabled: avgupd.exe"
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ servic es \ SharedAccess \ Parameters \ firewallpolicy \ domainpr ofil \ authorizedapplications \ Liste]
"% windir% \ system32 \ Sessmgr.exe" = "% windir% \ system32 \ Sessmgr.exe: *: Enabled: @ Xpsp2res.dll, -22019"
"% windir% \ Network Diagnostic \ xpnetdiag.exe" = "% windir% \ Network Diagnostic \ xpnetdiag.exe: *: Enabled: @ xpsp3res.dll, -20000"
====== ====== File Verbände
. js - open - "C: \ Program Files \ Macromedia \ Dreamweaver MX \ Dreamweaver.exe" "% 1"
====== Liste der Dateien / Ordner in den letzten 1 Monat ======
2008-11-06 17:05:19 ---- D ---- C: \ rsit
2008-11-05 13:07:01 ---- D ---- C: \ Program Files \ Trend Micro
2008-11-04 18:45:20 ---- A ---- C: \ WINDOWS \ system32 \ deploytk.dll
2008-11-04 18:45:19 ---- A ---- C: \ WINDOWS \ system32 \ javaws.exe
2008-11-04 18:45:18 ---- A ---- C: \ WINDOWS \ system32 \ javaw.exe
2008-11-04 18:45:16 ---- A ---- C: \ WINDOWS \ system32 \ java.exe
2008-11-04 18:43:23 ---- D ---- C: \ Program Files \ Java
2008-11-04 16:13:33 ---- D ---- C: \ Dokumente und Einstellungen \ Mark \ Anwendungsdaten \ Malwarebytes
2008-11-04 16:13:00 ---- D ---- C: \ Program Files \ Malwarebytes 'Anti-Malware
2008-11-04 16:13:00 ---- D ---- C: \ Dokumente und Einstellungen \ All Users \ Application Data \ Malwarebytes
2008-10-24 02:01:55 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB958644 $
2008-10-15 02:12:03 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB956803 $
2008-10-15 02:11:57 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB956391 $
2008-10-15 02:11:47 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB957095 $
2008-10-15 02:07:21 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB954211 $
2008-10-15 02:05:57 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB956841 $
2008-10-10 02:01:15 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB951978 $
2008-10-09 02:08:22 ---- D ---- C: \ WINDOWS \ Prefetch
2008-10-08 18:20:46 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB952954 $
2008-10-08 18:20:38 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB952287 $
2008-10-08 18:20:03 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB951748 $
2008-10-08 18:18:50 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB951698 $
2008-10-08 18:17:30 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB951376-v2 $
2008-10-08 18:16:20 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB951376 $
2008-10-08 18:15:35 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB951066 $
2008-10-08 18:15:14 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB950974 $
2008-10-08 18:15:02 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB950762 $
2008-10-08 18:14:49 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB946648 $
2008-10-08 18:14:34 ---- HDC ---- C: \ WINDOWS \ $ NtUninstallKB938464 $
2008-10-08 18:04:31 ---- D ---- C: \ WINDOWS \ system32 \ Scripting
2008-10-08 18:04:30 ---- D ---- C: \ WINDOWS \ l2schemas
2008-10-08 18:04:28 ---- D ---- C: \ WINDOWS \ system32 \ de
2008-10-08 18:04:28 ---- D ---- C: \ WINDOWS \ System32 \ Bits
2008-10-08 17:59:16 ---- D ---- C: \ WINDOWS \ ServicePackFiles
2008-10-08 17:48:52 ---- HDC ---- C: \ WINDOWS \ $ NtServicePackUninstall $
2008-10-08 17:48:40 ---- D ---- C: \ WINDOWS \ eHome
====== Liste der Dateien / Ordner verändert in den letzten 1 Monat ======
2008-11-06 17:06:25 ---- D ---- C: \ WINDOWS \ Temp
2008-11-06 15:44:29 ---- D ---- C: \ WINDOWS
2008-11-05 18:48:26 ---- SD ---- C: \ WINDOWS \ Tasks
2008-11-05 18:43:04 ---- A ---- C: \ WINDOWS \ SchedLgU.txt
2008-11-05 18:10:11 ---- D ---- C: \ Program Files \ Sage Payroll07-08
2008-11-05 18:10:11 ---- A ---- C: \ WINDOWS \ Payroll.INI
2008-11-05 18:08:47 ---- A ---- C: \ WINDOWS \ SGREP32.INI
2008-11-05 13:38:52 ---- HD ---- C: \ $ $ AVG8.VAULT
2008-11-05 13:07:01 ---- AD ---- C: \ Program Files
2008-11-05 12:48:10 ---- D ---- C: \ Dokumente und Einstellungen \ All Users \ Anwendungsdaten \ Spybot - Search & Destroy
2008-11-05 12:47:38 ---- D ---- C: \ WINDOWS \ Debug
2008-11-04 18:46:40 ---- SHD ---- C: \ WINDOWS \ Installer
2008-11-04 18:46:24 ---- SHD ---- C: \ Config.Msi
2008-11-04 18:45:22 ---- D ---- C: \ WINDOWS \ system32
2008-11-04 16:13:04 ---- D ---- C: \ WINDOWS \ system32 \ drivers
2008-11-04 13:50:38 ---- D ---- C: \ WINDOWS \ system32 \ CatRoot2
2008-11-03 14:00:33 ---- A ---- C: \ WINDOWS \ system32 \ PerfStringBackup.INI
2008-10-31 18:42:10 ---- A ---- C: \ WINDOWS \ nero.INI
2008-10-30 12:10:38 ---- D ---- C: \ Program Files \ Mozilla Firefox
2008-10-24 02:02:42 ---- HD ---- C: \ WINDOWS \ inf
2008-10-24 02:02:02 RSHD ---- ---- C: \ WINDOWS \ system32 \ drivers
2008-10-24 02:00:45 ---- D ---- C: \ WINDOWS \ $ hf_mig $
2008-10-17 16:57:24 ---- A ---- C: \ WINDOWS \ BRWMARK.INI
2008-10-15 16:34:24 ---- A ---- C: \ WINDOWS \ system32 \ netapi32.dll
2008-10-15 02:18:58 ---- D ---- C: \ Program Files \ Internet Explorer
2008-10-09 02:07:07 ---- D ---- C: \ WINDOWS \ system32 \ Setup
2008-10-09 02:07:07 ---- D ---- C: \ WINDOWS \ AppPatch
2008-10-09 02:07:06 ---- D ---- C: \ WINDOWS \ system32 \ wbem
2008-10-09 02:07:05 ---- RSD ---- C: \ WINDOWS \ Fonts
2008-10-09 02:06:20 ---- D ---- C: \ WINDOWS \ security
2008-10-08 18:21:26 ---- D ---- C: \ WINDOWS \ system32 \ CatRoot
2008-10-08 18:14:52 ---- D ---- C: \ Program Files \ Messenger
2008-10-08 18:05:20 ---- D ---- C: \ WINDOWS \ WinSxS
2008-10-08 18:05:00 ---- D ---- C: \ WINDOWS \ network diagnostic
2008-10-08 18:05:00 ---- D ---- C: \ WINDOWS \ ime
2008-10-08 18:04:59 ---- D ---- C: \ WINDOWS \ Help
2008-10-08 18:04:33 ---- D ---- C: \ WINDOWS \ system32 \ USMT
2008-10-08 18:04:33 ---- D ---- C: \ WINDOWS \ system32 \ en-US
2008-10-08 18:04:28 ---- D ---- C: \ WINDOWS \ Peernet
2008-10-08 18:04:27 ---- D ---- C: \ Program Files \ Movie Maker
2008-10-08 17:59:09 ---- D ---- C: \ WINDOWS \ system32 \ Restore
2008-10-08 17:59:09 ---- D ---- C: \ WINDOWS \ system32 \ npp
2008-10-08 17:59:06 ---- D ---- C: \ WINDOWS \ msagent
2008-10-08 17:59:03 ---- D ---- C: \ WINDOWS \ srchasst
2008-10-08 17:58:57 ---- D ---- C: \ Programme \ NetMeeting
2008-10-08 17:58:55 ---- D ---- C: \ WINDOWS \ system32 \ Com
2008-10-08 17:58:52 ---- D ---- C: \ Program Files \ Windows Media Player
2008-10-08 17:58:51 ---- D ---- C: \ Program Files \ Windows NT
2008-10-08 17:58:50 ---- D ---- C: \ Program Files \ Outlook Express
2008-10-08 17:58:46 ---- D ---- C: \ Programme \ Gemeinsame Dateien \ System
2008-10-08 17:58:28 ---- D ---- C: \ WINDOWS \ system32 \ oobe
2008-10-08 17:58:22 ---- D ---- C: \ WINDOWS \ system
2008-10-08 17:53:47 ---- D ---- C: \ WINDOWS \ system32 \ ReinstallBackups
2008-10-08 17:17:41 ---- RASH ---- C: \ BOOT.INI
2008-10-08 17:17:40 ---- A ---- C: \ WINDOWS \ win.ini
2008-10-08 17:17:39 ---- A ---- C: \ WINDOWS \ SYSTEM.INI
2008-10-07 19:19:40 ---- A ---- C: \ WINDOWS \ system32 \ MRT.exe
====== Liste der Treiber (R = Running, S = Stopped, 0 = Boot, 1 = System, 2 = Auto, 3 = Demand, 4 = Disabled )======
R1 AmdK7; AMD K7 Processor Driver C: \ WINDOWS \ system32 \ drivers \ Amdk7.sys [2008-04-13 37760]
R1 AvgLdx86; AVG Free AVI Loader Driver x86; C: \ WINDOWS \ System32 \ Drivers \ avgldx86.sys [2008-08-29 97928]
R1 AvgMfx86; AVG Free On-Access-Scanner Minifilter Driver x86; C: \ WINDOWS \ System32 \ Drivers \ avgmfx86.sys [2008-07-18 26824]
R1 SASDIFSV; SASDIFSV; \?? \ C: \ Program Files \ SUPERAntiSpyware \ SASDIFSV.SYS []
R1 SASKUTIL; SASKUTIL; \?? \ C: \ Program Files \ SUPERAntiSpyware \ SASKUTIL.sys []
R2 AvgTdiX; free8 AVG Network Redirector; C: \ WINDOWS \ System32 \ Drivers \ avgtdix.sys [2008-07-18 76040]
R2 BrPar; BrPar C: \ WINDOWS \ System32 \ drivers \ BrPar.sys [2000-07-24 19537]
R3 ALCXSENS; Service für WDM 3D Audio Driver C: \ WINDOWS \ system32 \ drivers \ ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM; Service für Realtek AC97 Audio (WDM); C: \ WINDOWS \ system32 \ drivers \ ALCXWDM.SYS [2004-02-27 611820]
R3 RTL8139; Realtek RTL8139 (A / B / C)-basierter PCI-Fast Ethernet Adapter NT Driver; C: \ WINDOWS \ system32 \ drivers \ rtl8139.sys [2004-08-03 20992]
R3 SASENUM; SASENUM; \?? \ C: \ Program Files \ SUPERAntiSpyware \ SASENUM.SYS []
R3 usbehci; Microsoft USB 2.0 Enhanced Host Controller Miniport Driver, C: \ WINDOWS \ system32 \ drivers \ Usbehci.sys [2008-04-13 30208]
R3 usbhub; USB2 Enabled Hub; C: \ WINDOWS \ system32 \ drivers \ Usbhub.sys [2008-04-13 59520]
R3 usbuhci; Microsoft USB Universal Host Controller Miniport Driver, C: \ WINDOWS \ system32 \ drivers \ Usbuhci.sys [2008-04-13 20608]
R3 viagfx; viagfx C: \ WINDOWS \ system32 \ drivers \ vtmini.sys [2004-05-05 142976]
R3 wanatw; WAN Miniport (ATW), C: \ WINDOWS \ system32 \ drivers \ wanatw4.sys [2003-01-10 33588]
S1 kbdhid; Tastatur-HID-Treiber; C: \ WINDOWS \ system32 \ drivers \ kbdhid.sys [2008-04-13 14592]
S3 FETND5BV; VIA Rhine-Family Fast Ethernet Adapter Driver Service; C: \ WINDOWS \ system32 \ drivers \ fetnd5bv.sys [2004-12-16 42496]
S3 FETNDISB; VIA Rhine Family Fast Ethernet Adapter Driver Service; C: \ WINDOWS \ system32 \ drivers \ fetnd5b.sys [2003-11-11 41984]
S3 HidUsb; Microsoft HID Class-Treiber; C: \ WINDOWS \ system32 \ drivers \ Hidusb.sys [2008-04-13 10368]
S3 MODEMCSA; Unimodem Streaming Device Filter, C: \ WINDOWS \ system32 \ drivers \ MODEMCSA.sys [2001-08-17 16128]
S3 mouhid; Maus-HID-Treiber; C: \ WINDOWS \ system32 \ drivers \ mouhid.sys [2001-08-17 12160]
S3 Mtlmnt5; Mtlmnt5 C: \ WINDOWS \ system32 \ drivers \ Mtlmnt5.sys [2003-02-16 210128]
S3 Mtlstrm; Mtlstrm C: \ WINDOWS \ system32 \ drivers \ Mtlstrm.sys [2003-02-16 1293192]
S3 NtMtlFax; NtMtlFax C: \ WINDOWS \ system32 \ drivers \ NtMtlFax.sys [2003-02-05 162136]
S3 SABProcEnum; SABProcEnum; \?? \ C: \ Program Files \ Internet Explorer \ SABProcEnum.sys []
S3 Slntamr; SmartLink AMR_PCI Driver C: \ WINDOWS \ system32 \ drivers \ slntamr.sys [2003-02-16 516616]
S3 SlNtHal; SlNtHal C: \ WINDOWS \ system32 \ drivers \ Slnthal.sys [2003-02-16 85520]
S3 SlWdmSup; SlWdmSup C: \ WINDOWS \ system32 \ drivers \ SlWdmSup.sys [2003-01-17 39348]
S3 usbccgp; Microsoft USB Generic Parent Driver, C: \ WINDOWS \ system32 \ drivers \ Usbccgp.sys [2008-04-13 32128]
S3 usbohci; Microsoft USB Open Host Controller Miniport Driver, C: \ WINDOWS \ system32 \ drivers \ Usbohci.sys [2008-04-13 17152]
S3 USBSTOR; USB Mass Storage Driver, C: \ WINDOWS \ system32 \ drivers \ Usbstor.sys [2008-04-13 26368]
S3 WudfPf; Windows Driver Foundation - User-Mode Driver Framework Platform Driver, C: \ WINDOWS \ system32 \ drivers \ WudfPf.sys [2006-09-28 77568]
S3 WudfRd; Windows Driver Foundation - User-Mode Driver Framework Reflector; C: \ WINDOWS \ system32 \ drivers \ wudfrd.sys [2006-09-28 82944]
====== Liste der Dienste (R = Running, S = Stopped, 0 = Boot, 1 = System, 2 = Auto, 3 = Demand, 4 = Disabled )======
R2 aawservice; Lavasoft Ad-Aware Service; C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe [2008-07-07 611664]
R2 AOL ACS; AOL Connectivity Service C: \ PROGRA ~ 1 \ COMMON ~ 1 \ AOL \ ACS \ AOLacsd.exe [2004-02-25 1123440]
R2 avg8emc; AVG Free8 E-Mail-Scanner, C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe [2008-08-29 875288]
R2 avg8wd; AVG Free8 WatchDog; C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe [2008-08-29 231704]
R2 Brother XP spl Service; BrSplService C: \ WINDOWS \ system32 \ BRSVC01A.EXE [2003-08-28 57344]
R2 JavaQuickStarterService; Java Quick Starter; C: \ Program Files \ Java \ JRE6 \ bin \ jqs.exe [2008-11-04 152984]
R2 UStorage Server Service; UStorage Server Service; C: \ WINDOWS \ system32 \ UStorSrv.exe [2006-02-17 139264]
R2 WinDefend; Windows Defender, C: \ Program Files \ Windows Defender \ MsMpEng.exe [2006-11-03 13592]
S2 Fax, Fax, C: \ WINDOWS \ system32 \ fxssvc.exe [2008-04-14 267776]
S2 SLService; SmartLinkService; slserv.exe []
S3 aspnet_state; ASP.NET State Service; C: \ WINDOWS \ Microsoft.NET \ Framework \ v1.1.4322 \ aspne t_state.exe [2004-07-15 32768]
S3 IDriverT; InstallDriver Table Manager; C: \ Programme \ Gemeinsame Dateien \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe [2005-04-03 69632]
S3 ose; Office Source Engine, C: \ Program Files \ Common Files \ Microsoft Shared \ Source Engine \ "Ose.exe [2003-07-28 89136]
S3 WMPNetworkSvc; Windows Media Player Network Sharing Service; C: \ Program Files \ Windows Media Player \ WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc; Windows Driver Foundation - User-Mode Driver Framework, C: \ WINDOWS \ system32 \ svchost.exe [2008-04-14 14336]
----------------- ----------------- EOF


info.txt logfile von Random's System Information Tool 1,04 2008-11-06 17:06:34
====== ====== Uninstall-Liste
-> "C: \ Program Files \ Common Files \ aolshare \ Coach \ AolCInUn.exe"-lang = "en-de"
-> C: \ PROGRA ~ 1 \ COMMON ~ 1 \ AOL \ ACS \ AcsUninstall.exe / c
-> C: \ PROGRA ~ 1 \ COMMON ~ 1 \ AOL \ AOLSPY ~ 1 \ UNWISE.EXE C: \ PROGRA ~ 1 \ COMMON ~ 1 \ AOL \ AOLSPY ~ 1 \ INSTALL.LOG
-> C: \ PROGRA ~ 1 \ S3 \ S3 \ s3setvga.exe-s-fc: \ PROGRA ~ 1 \ S3 \ S3 \ S3.uns
-> C: \ Program Files \ Common Files \ AOL \ Screensaver \ uninst_ygpss.exe
-> C: \ Program Files \ Common Files \ aolshare \ Aolunins_uk.exe
-> C: \ Program Files \ Common Files \ Real \ Update_OB \ r1puninst.exe RealNetworks | RealPlayer | 6.0
-> C: \ Program Files \ Common Files \ Real \ Update_OB \ r1puninst.exe RealNetworks | RealPlayer | 6.0
-> C: \ Program Files \ Learn2.com \ StRunner \ stuninst.exe
-> C: \ Program Files \ Viewpoint \ Viewpoint Experience Technology \ mtsAxInstaller.exe / u
-> C: \ WINDOWS \ IsUninst.exe-f "C: \ Program Files \ Sage \ Sage Payroll E-Einreichungen Update \ Uninst.isu"
-> C: \ WINDOWS \ IsUninst.exe-fc: \ WINDOWS \ orun32.isu
-> C: \ WINDOWS \ system32 \ \ msiexec.exe / x (9541FED0-327F-4df0-8B96-EF57EF622F19)
-> C: \ WINDOWS \ system32 \ Macromed \ SHOCKW ~ 1 \ UNWISE.EX EG: \ WINDOWS \ system32 \ Macromed \ SHOCKW ~ 1 \ install.log
-> RunDll32 C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ engine \ 6 \ INTEL3 ~ 1 \ Ct or.dll, LaunchSetup "C: \ Programme \ Gemeinsame Dateien \ InstallShield Installation Information \ (2637C347-9DAD-11D6 -9EA2-00055D0CA761) \ Setup.exe "-uninstall
-> RunDll32 C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ engine \ 6 \ INTEL3 ~ 1 \ ct or.dll, LaunchSetup "C: \ Programme \ Gemeinsame Dateien \ InstallShield Installation Information \ (FB08F381-6533-4108 -b7dd-039E11FBC27E) \ setup.exe "REMOVE
-> rundll32.exe Setupapi.dll, InstallHinfSection DefaultUninstall 132 C: \ WINDOWS \ INF \ PCHealth.inf
-> vtuninst.exe-reg 5 'HKLM \ Software \ S3 \ VT \ S3Uninst \ S3Display "
-> vtuninst.exe-reg 5 'HKLM \ Software \ S3 \ VT \ S3Uninst \ S3Gamma2 "
-> vtuninst.exe-reg 5 'HKLM \ Software \ S3 \ VT \ S3Uninst \ S3Info2 "
-> vtuninst.exe-reg 5 'HKLM \ Software \ S3 \ VT \ S3Uninst \ S3Overlay "
Abacast Client -> C: \ PROGRA ~ 1 \ Abacast \ UNWISE.EXE C: \ PROGRA ~ 1 \ Abacast \ client.log
Ad-Aware -> msiexec.exe / I (DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF)
Adobe Flash Player 10 ActiveX -> C: \ WINDOWS \ system32 \ Macromed \ Flash \ uninstall_acti veX.exe
Adobe Reader 7.1.0 -> msiexec.exe / I (AC76BA86-7AD7-1033-7B44-A71000000002)
Ahead Nero Burning ROM -> C: \ Program Files \ Ahead \ Nero \ uninstall \ UNNERO.exe / Deinstallieren
AVG Free 8.0 -> C: \ Program Files \ AVG \ AVG8 \ setup.exe / UNINSTALL
Aztech CNR2900 V.90 Modem -> C: \ WINDOWS \ modio \ SLAMR2KO \ Setup.exe / Remove
Brother HL-5040 -> "C: \ Program Files \ Brother \ BRHL5040 \ IsUninst.exe"-f "C: \ Program Files \ Brother \ BRHL5040 \ DeIsL1.isu"-cbruninst.dll
Brother HL-6050 -> "C: \ Program Files \ Brother \ BRHL6050 \ IsUninst.exe"-f "C: \ Program Files \ Brother \ BRHL6050 \ DeIsL1.isu"-cbruninst.dll
CCleaner (nur entfernen )-->" C: \ Program Files \ CCleaner \ uninst.exe "
ESET Online Scanner -> C: \ WINDOWS \ system32 \ OnlineScannerUninstaller.ex e
HijackThis 2.0.2 -> "C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe" / uninstall
Hotfix für Windows Internet Explorer 7 (KB947864 )-->" C: \ WINDOWS \ ie7updates \ KB947864-IE7 \ spuninst \ spuninst.exe "
Hotfix für Windows Media Format 11 SDK (KB929399 )-->" C: \ WINDOWS \ $ NtUninstallKB929399 $ \ spuninst \ spunin st.exe "
Hotfix für Windows Media Player 11 (KB939683 )-->" C: \ WINDOWS \ $ NtUninstallKB939683 $ \ spuninst \ spunin st.exe "
Hotfix für Windows XP (KB952287 )-->" C: \ WINDOWS \ $ NtUninstallKB952287 $ \ spuninst \ spunin st.exe "
Imation Disk Manager V a Service -> C: \ DOKUME ~ 1 \ Mark \ LOKALE ~ 1 \ Temp \ Imation Disk Manager V a.exe-u
Java (TM) 6 Update 10 -> msiexec.exe / X (26A24AE4-039D-4CA4-87B4-2F83216010FF)
Lotus Organizer 6.0 -> C: \ WINDOWS \ ounin11.exe / T Organizer / 99,1 V / I "c: \ Lotus \ organisieren \ orgnode.inf" / C "c: \ Lotus \ Organisieren \ cinstnod.ini" / O c: \ uninst.log / L DE / U Organizer User
Macromedia Dreamweaver MX -> RunDll32 C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ engine \ 6 \ INTEL3 ~ 1 \ Ct or.dll, LaunchSetup "C: \ Programme \ Gemeinsame Dateien \ InstallShield Installation Information \ (8B4AB829 - DFD3-436D-B808-D9733D76C590) \ Setup.exe "-l0x9 mmUninstall
Macromedia Extension Manager -> RunDll32 C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ engine \ 6 \ INTEL3 ~ 1 \ Ct or.dll, LaunchSetup "C: \ Programme \ Gemeinsame Dateien \ InstallShield Installation Information \ (A5BA14E0 - 7384-11D4-BAE7-00409631A2C8) \ setup.exe "-l0x9 mmUninstall
Macromedia Shockwave Player -> C: \ WINDOWS \ system32 \ Macromed \ SHOCKW ~ 2 \ UNWISE.EX EG: \ WINDOWS \ system32 \ Macromed \ SHOCKW ~ 2 \ Install.log
Malwarebytes' Anti-Malware -> "C: \ Program Files \ Malwarebytes' Anti-Malware \ unins000.exe"
Microsoft. NET Framework 1.1 Hotfix (KB928366 )-->" C: \ WINDOWS \ Microsoft.NET \ Framework \ v1.1.4322 \ Upd ATES \ Hotfix.exe "" C: \ WINDOWS \ Microsoft.NET \ Framework \ v1.1.4322 \ upda tes \ M928366 \ M928366Uninstall.msp "
Microsoft. NET Framework 1.1 -> msiexec.exe / X (CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1)
Microsoft. NET Framework 1.1 -> msiexec.exe / X (CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1)
Microsoft Compression Client Pack 1.0 für Windows XP -> "C: \ WINDOWS \ $ NtUninstallMSCompPackV1 $ \ spuninst \ sp uninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs -> "C: \ WINDOWS \ $ NtServicePackUninstallIDNMitigationA PIs $ \ spuninst \ spuninst.exe"
Microsoft National Language Support Vorgänger-APIs -> "C: \ WINDOWS \ $ NtServicePackUninstallNLSDownlevelMa pping $ \ spuninst \ spuninst.exe"
Microsoft Office Standard Edition 2003 -> msiexec.exe / I (91120409-6000-11D3-8CFE-0150048383C9)
Microsoft User-Mode Driver Framework Feature Pack 1.0 -> "C: \ WINDOWS \ $ NtUninstallWudf01000 $ \ spuninst \ spuni nst.exe"
Microsoft Visual C + + 2005 Redistributable -> msiexec.exe / X (7299052b-02a4-4627-81f2-1818da5d550d)
Microsoft Works 7.0 -> msiexec.exe / I (764D06D8-D8DE-411E-A1C8-D9E9380F8A84)
Microsoft WSE 2.0 SP3 Runtime -> MsiExec.exe / X (F3CA9611-CD42-4562-ADAB-A554CF8E17F1)
Mozilla Firefox (3.0.1) -> C: \ Program Files \ Mozilla Firefox \ uninstall \ helper.exe
MSXML 4.0 SP2 (KB936181) -> msiexec.exe / I (C04E32E0-0416-434D-AFB9-6969D703A9EF)
MSXML 6.0 Parser (KB933579) -> msiexec.exe / I (0A869A65-8C94-4F7C-A5C7-972D3C8CED9E)
Packard Bell InfoCenter -> RunDll32 C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ engine \ 6 \ INTEL3 ~ 1 \ ct or.dll, LaunchSetup "C: \ Programme \ Gemeinsame Dateien \ InstallShield Installation Information \ (B04AC0A3 - 7A0F-4E38-9DE7-FD1E4CE47D8C) \ setup.exe "
Packard Bell Toolbar 1.0 -> "C: \ Program Files \ Dynamic Toolbar \ unins000.exe"
QuickTime -> C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ Driver \ 11 \ INTEL3 ~ 1 \ IDriver.exe / M (C21D5524-A970-42FA-AC8A-59B8C7CDCA31) / L1033
Sage 50 Lohn-und Gehaltsabrechnung -> RunDll32 C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ PROFES ~ 1 \ RunTime \ 10 \ 50 \ Intel32 \ Ctor.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ (AE4B057E-41EF-4DBA-A387-CC6A7666C5CD) \ Setup.exe "-l0x9-removeonly uninst -
Sage V11.00-Konten -> C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ Driver \ 7 \ INTEL3 ~ 1 \ I driver.exe / M (9B4F367E-94AD-40A4-8060-460CE4A98C45)
Sage MIS 3.01 -> C: \ WINDOWS \ IsUninst.exe-f "C: \ Program Files \ Informer50 \ Uninst.isu"
Sage Payroll 07-08 -> RunDll32 C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ PROFES ~ 1 \ RunTime \ 10 \ 50 \ Intel32 \ Ctor.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ (CD9BCE06-1BB1-4d6f-AFDC-E2E50FA99543) \ Setup.exe "-l0x9-removeonly uninst -
Sage Lohn-und Gehaltsabrechnung -> C: \ WINDOWS \ IsUninst.exe-f "C: \ Program Files \ Sage Payroll \ UNINST80.ISU"
Sage Lohn-und Gehaltsabrechnung -> RunDll32 C: \ PROGRA ~ 1 \ COMMON ~ 1 \ INSTAL ~ 1 \ PROFES ~ 1 \ RunTime \ 10 \ 50 \ Intel32 \ Ctor.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ ( 09998BA7-A8D3-441C-8D35-D156C831D444) \ Setup.exe "-l0x9-removeonly uninst -
Sicherheitsupdate für Schritt für Schritt Interactive Training (KB898458 )-->" C: \ WINDOWS \ $ NtUninstallKB898458 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Schritt für Schritt Interactive Training (KB923723 )-->" C: \ WINDOWS \ $ NtUninstallKB923723 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows Internet Explorer 7 (KB938127 )-->" C: \ WINDOWS \ ie7updates \ KB938127-IE7 \ spuninst \ spuninst.exe "
Sicherheitsupdate für Windows Internet Explorer 7 (KB942615 )-->" C: \ WINDOWS \ ie7updates \ KB942615-IE7 \ spuninst \ spuninst.exe "
Sicherheitsupdate für Windows Internet Explorer 7 (KB944533 )-->" C: \ WINDOWS \ ie7updates \ KB944533-IE7 \ spuninst \ spuninst.exe "
Sicherheitsupdate für Windows Internet Explorer 7 (KB950759 )-->" C: \ WINDOWS \ ie7updates \ KB950759-IE7 \ spuninst \ spuninst.exe "
Sicherheitsupdate für Windows Internet Explorer 7 (KB953838 )-->" C: \ WINDOWS \ ie7updates \ KB953838-IE7 \ spuninst \ spuninst.exe "
Sicherheitsupdate für Windows Internet Explorer 7 (KB956390 )-->" C: \ WINDOWS \ ie7updates \ KB956390-IE7 \ spuninst \ spuninst.exe "
Sicherheitsupdate für Windows Media Player 11 (KB936782 )-->" C: \ WINDOWS \ $ NtUninstallKB936782_WMP11 $ \ spuninst \ spuninst.exe "
Sicherheitsupdate für Windows Media Player 11 (KB954154 )-->" C: \ WINDOWS \ $ NtUninstallKB954154_WM11 $ \ spuninst \ n puninst.exe "
Sicherheitsupdate für Windows XP (KB938464 )-->" C: \ WINDOWS \ $ NtUninstallKB938464 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB941569 )-->" C: \ WINDOWS \ $ NtUninstallKB941569 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB946648 )-->" C: \ WINDOWS \ $ NtUninstallKB946648 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB950760 )-->" C: \ WINDOWS \ $ NtUninstallKB950760 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB950762 )-->" C: \ WINDOWS \ $ NtUninstallKB950762 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB950974 )-->" C: \ WINDOWS \ $ NtUninstallKB950974 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB951066 )-->" C: \ WINDOWS \ $ NtUninstallKB951066 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB951376 )-->" C: \ WINDOWS \ $ NtUninstallKB951376 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB951376-v2 )-->" C: \ WINDOWS \ $ NtUninstallKB951376-v2 $ \ spuninst \ spuninst.exe "
Sicherheitsupdate für Windows XP (KB951698 )-->" C: \ WINDOWS \ $ NtUninstallKB951698 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB951748 )-->" C: \ WINDOWS \ $ NtUninstallKB951748 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB952954 )-->" C: \ WINDOWS \ $ NtUninstallKB952954 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB953839 )-->" C: \ WINDOWS \ $ NtUninstallKB953839 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB954211 )-->" C: \ WINDOWS \ $ NtUninstallKB954211 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB956391 )-->" C: \ WINDOWS \ $ NtUninstallKB956391 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB956803 )-->" C: \ WINDOWS \ $ NtUninstallKB956803 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB956841 )-->" C: \ WINDOWS \ $ NtUninstallKB956841 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB957095 )-->" C: \ WINDOWS \ $ NtUninstallKB957095 $ \ spuninst \ spunin st.exe "
Sicherheitsupdate für Windows XP (KB958644 )-->" C: \ WINDOWS \ $ NtUninstallKB958644 $ \ spuninst \ spunin st.exe "
Sonic MyDVD -> MsiExec.exe / I (21657574-BD54-48A2-9450-EB03B2C7FC29)
Sonic RecordNow! -> Msiexec.exe / I (9541FED0-327F-4DF0-8B96-EF57EF622F19)
Spybot - Search & Destroy 1.5.2.20 -> "C: \ WINDOWS \ unins000.exe"
Spybot - Search & Destroy -> "C: \ Program Files \ Spybot - Search & Destroy \ unins001.exe"
SUPERAntiSpyware Free Edition -> msiexec.exe / X (CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA)
Update für Windows XP (KB951072-v2 )-->" C: \ WINDOWS \ $ NtUninstallKB951072-v2 $ \ spuninst \ spuninst.exe "
Update für Windows XP (KB951978 )-->" C: \ WINDOWS \ $ NtUninstallKB951978 $ \ spuninst \ spunin st.exe "
VIA Rhine-Family Fast-Ethernet-Adapter -> Rundll32.exe vuins32.dll, Rhein vuins32Ex $ $ VIA
Visual C + + CRT 8.0 -> MsiExec.exe / I (B2395631-54D5-481E-B9A8-74B269546F40)
Windows Defender Signatures -> MsiExec.exe / I (A5CC2A09-E9D3-49EC-923D-03874BBD4C2C)
Windows Defender -> MsiExec.exe / I (A06275F4-324B-4E85-95E6-87B2CD729401)
Windows Media Format 11 runtime -> "C: \ Program Files \ Windows Media Player \ wmsetsdk.exe" / UninstallAll
Windows Media Format 11 runtime -> "C: \ WINDOWS \ $ NtUninstallWMFDist11 $ \ spuninst \ spuni nst.exe"
Windows Media Player 11 -> "C: \ Program Files \ Windows Media Player \ Setup_wm.exe" / Uninstall
Windows Media Player 11 -> "C: \ WINDOWS \ $ NtUninstallwmp11 $ \ spuninst \ spuninst. Exe"
Windows XP Service Pack 3 -> "C: \ WINDOWS \ $ NtServicePackUninstall $ \ spuninst \ spu ninst.exe"
Sicherheits-Center Informationen ====== ======
AV: AVG Anti-Virus Free
====== ====== Umgebungsvariablen
"ComSpec" =% SystemRoot% \ system32 \ cmd.exe
"Path" = "% SystemRoot% \ system32;% SystemRoot%;% SystemR oot% \ System32 \ Wbem; C: \ PROGRA ~ 1 \ COMMON ~ 1 \ SONICS ~ 1 \ C: \ Programme \ Gemeinsame Dateien \ Sage SBD C: \ Programme \ Adobe \ QTSystem \ C: \ Programme \ Gemeinsame Dateien \ Sage SBD \
"windir" =% SystemRoot%
"FP_NO_HOST_CHECK" = NO
"OS" = Windows_NT
"PROCESSOR_ARCHITECTURE" = x86
"PROCESSOR_LEVEL" = 6
"PROCESSOR_IDENTIFIER" = x86 Family 6 Modell 8 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION" = 0801
"NUMBER_OF_PROCESSORS" = 1
"PATHEXT" =. COM;. EXE,. BAT,. CMD,. VBS,. VBE;. JS;. JSE;. WSF;. WSH
"TEMP" = "% SystemRoot% \ TEMP
"TMP" = "% SystemRoot% \ TEMP
"CLASSPATH" =.; C: \ Program Files \ QuickTime \ QTSystem \ QTJava.zip
"QTJAVA" = "C: \ Program Files \ QuickTime \ QTSystem \ QTJava.zip
----------------- ----------------- EOF


In Erwartung,
Slime.

[evilfantasy]

Mozilla Firefox (3.0.1) Wir sind auf 3.0.3. Need zu aktualisieren.

Deinstallieren Sie Spybot - Search & Destroy 1.5.2.20. Lassen Sie die anderen Spybot - Search & Destroy.

----------

Haben Sie die AVG vor Beginn der Kaspersky-Scan?

[Schleim]

Hi,

Mozilla Firefox (3.0.1) Wir sind auf 3.0.3. Need zu aktualisieren. Getan!
Deinstallieren Sie Spybot - Search & Destroy 1.5.2.20. Getan!
Haben Sie die AVG vor Beginn der Kaspersky-Scan? Nein!

Sorry, das war dumm von mir.
Der Versuch, die Kaspersky Scan wieder, wird wieder repoert asap.

Slime

[evilfantasy]

Ich hoffe, dass wir sie fortsetzen und abschließen wird. Nur nicht alles downloaden, während Ihr AV ausgeschaltet ist oder öffnen Sie eine beliebige Email-Anhänge.

[Schleim]

Hi,
kann dumm hier, aber ich kann nicht scheinen wiederum AVG off!!
Irgendwelche Tipps?

Slime.