AntiVir, Zonealarm machen keine Updates mehr, Probleme mit Google, Malwarebytes

« 14.04.09, 11:55:36 »

Hallo,

also ich muss sagen jetzt mit der Zeit kommt mir das ganze ziemlich merkwürdig vor.

Alles fing an, dass bei Google - egal bei welcher Suchanfrage - Meldungen dieser Art kamen bzw immer noch kommen:

HTTP/1.1 200 OK Date: Tue, 14 Apr 2009 09:42:33 GMT Server: Apache/2.0.63 (FreeBSD) PHP/5.2.6 with Suhosin-Patch X-Powered-By: PHP/5.2.6 Set-Cookie: PHPSESSID=4872b1a449b4c08f53257cf31745e86b; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Connection: close Transfer-Encoding: chunked Content-Type: text/html 1f47

Erst dann werde ich zur Seite, die ich angeklickt habe, weitergeleitet.
Dann hab ich mir Malwarebytes runtergeladen und mein System überprüft, es wurden ein wenig Malware gefunden und gelöscht....nun wollte ich das logischerweise wiederholen weil das Problem bei Google immer noch besteht, musste aber feststellen, dass sich das Programm einfach nicht mehr starten lässt.
Kam mir schon alles bisschen komisch vor
Jetzt kommt aber noch dazu, dass seit Tagen Avira AntiVir und Zonealarm keine Verbindung zum Internet herstellen können bei Updates -.-

Außerdem merkwürdig und für mich unerklärlich:
Wenn ich auf Zonealarm gehen will kann Firefox keine Verbindung zum Server herstellen, außerdem wollte ich ein anderes Malwareprogramm installieren, ging auch nicht - Firefox konnte nicht verbinden.
hab das auch mit dem IE getestet, Problem besteht weiterhin.

Bin ganz schön ratlos, vor allem weil ZoneAlarm und AntiVir beim Spyware bzw Virentest nichts finden - das geht ja zum Glück noch.

« 14.04.09, 12:11:30 »

Was mir grad noch einfällt: Bei Google werden ich manchmal auch auf Ebay weitergeleitet und dann wird in Ebay nach exakt dem gesucht was ich in Google zuvor eingegeben habe.

« 14.04.09, 12:13:14 »

http://images.malwareremoval.com/random/RSIT.exe

* Lade Random's System Information Tool (RSIT) von random/random herunter,

* speichere es auf dem Desktop.

* Starte mit Doppelklick die RSIT.exe

* Klicke auf Continue, um die Nutzungsbedingungen zu akzeptieren.

* Wenn Du HijackThis nicht installiert hast, wird RSIT das für Dich herunterladen und installieren.

* In dem Fall bitte auch die Nutzungsbedingungen von Trend Micro für HJT akzeptieren: I accept.

* Wenn Deine Firewall fragt, bitte RSIT erlauben, ins Netz zu gehen.

* Der Scan startet automatisch, RSIT checkt nun einige wichtige System-Bereiche und produziert Logfiles als Analyse-Grundlage.

* Wenn der Scan beendet ist, werden zwei Logfiles erstellt und im Text-Editor geöffnet.

* Bitte poste den Inhalt von C:\rsit\log.txt und C:\rsit\info.txt (= minimiert) hier in den Thread.

« 14.04.09, 12:23:19 »

Teil 1 der log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jedi at 2009-04-14 12:21:35
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 70 GB (29%) free of 238 GB
Total RAM: 3327 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:21:40, on 14.04.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\ASTSRV.EXE
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Programme\Spyware Terminator\sp_rsser.exe
C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\SanDisk\Sansa Updater\SansaDispatch.exe
C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\Trust\GM-4200 Gamer Mouse Optical\Panel.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programme\Rockstar Games\Rockstar Games Social Club\1_1_3_0\RGSC.exe
C:\Programme\Spyware Terminator\SpywareTerminatorShield.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avscan.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\PROGRA~1\Crawler\CToolbar.exe
C:\Dokumente und Einstellungen\Jedi\Desktop\RSIT.exe
C:\Programme\Trend Micro\HijackThis\Jedi.exe

« 14.04.09, 12:23:59 »

Teil 2:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60076
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yodl.de
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60076
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Programme\Crawler\ctbr.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Programme\Crawler\ctbr.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Programme\Crawler\ctbr.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SansaDispatch] C:\Programme\SanDisk\Sansa Updater\SansaDispatch.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Programme\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Trust Gaming mouse] "C:\Programme\Trust\GM-4200 Gamer Mouse Optical\Panel.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Programme\Gemeinsame Dateien\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [TrayServer] C:\Programme\MAGIX\Filme_auf_DVD_8_Download-Version\TrayServer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Programme\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [RGSC] C:\Programme\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Programme\Xfire\Xfire.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O12 - Plugin for .spop: C:\Programme\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1238968272468
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F586F69-333D-4FC7-A3CB-A45E6EE296C6}: NameServer = 85.255.112.131,85.255.112.74
O17 - HKLM\System\CCS\Services\Tcpip\..\{6C1D28BE-F91B-40B7-8FF4-81ADC7630CBE}: NameServer = 85.255.112.131,85.255.112.74
O17 - HKLM\System\CS4\Services\Tcpip\Parameters: NameServer = 85.255.112.131,85.255.112.74
O17 - HKLM\System\CS5\Services\Tcpip\Parameters: NameServer = 85.255.112.131,85.255.112.74
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.131,85.255.112.74
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Programme\Crawler\ctbr.dll
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\WINDOWS\system32\ASTSRV.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Programme\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programme\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Programme\Spyware Terminator\sp_rsser.exe
O23 - Service: TuneUp Drive Defrag-Dienst (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 8911 bytes

« 14.04.09, 12:24:53 »

Nr.3

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Klick-Wartung.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\Programme\Crawler\ctbr.dll [2009-03-04 1196032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - []
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler Toolbar - C:\Programme\Crawler\ctbr.dll [2009-03-04 1196032]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-10-30 16269312]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avgnt"=C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-07-18 266497]
"SansaDispatch"=C:\Programme\SanDisk\Sansa Updater\SansaDispatch.exe [2007-10-22 75584]
"SpywareTerminator"=C:\Programme\Spyware Terminator\SpywareTerminatorShield.exe [2008-10-03 1783808]
"StartCCC"=C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-29 61440]
"ZoneAlarm Client"=C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe [2009-02-19 981384]
"SunJavaUpdateSched"=C:\Programme\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"Trust Gaming mouse"=C:\Programme\Trust\GM-4200 Gamer Mouse Optical\Panel.exe [2006-12-28 1232896]
"AdobeCS4ServiceManager"=C:\Programme\Gemeinsame Dateien\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"TrayServer"=C:\Programme\MAGIX\Filme_auf_DVD_8_Download-Version\TrayServer.exe [2008-01-17 90112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Programme\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
"RGSC"=C:\Programme\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [2009-01-30 306088]

C:\Dokumente und Einstellungen\Jedi\Startmenü\Programme\Autostart
Xfire.lnk - C:\Programme\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-09-24 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoRecentDocsNetHood"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonUS\NGM\NGM.exe"="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Nexon\Combat Arms\CombatArms.exe"="C:\Nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms\Engine.exe"="C:\Nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe"
"C:\Programme\EA GAMES\Battlefield 2\BF2.exe"="C:\Programme\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\Ubisoft\Far Cry 2\bin\FarCry2.exe"="C:\Programme\Ubisoft\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2"
"C:\Programme\Ubisoft\Far Cry 2\bin\FC2Launcher.exe"="C:\Programme\Ubisoft\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater"
"C:\Programme\Ubisoft\Far Cry 2\bin\FC2Editor.exe"="C:\Programme\Ubisoft\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor"
"C:\Programme\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Programme\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"C:\Programme\ICQ6.5\ICQ.exe"="C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonEU\NGM\NGM.exe"="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonEU\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
"C:\Nexon\Combat Arms EU\CombatArms.exe"="C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms EU\Engine.exe"="C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Programme\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe"="C:\Programme\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\Programme\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe"="C:\Programme\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Programme\Activision\Call of Duty - World at War\CoDWaW.exe"="C:\Programme\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\Programme\Activision\Call of Duty - World at War\CoDWaWmp.exe"="C:\Programme\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\Programme\Gemeinsame Dateien\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Programme\Gemeinsame Dateien\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Nexon\Combat Arms\CombatArms.exe"="C:\Nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms\Engine.exe"="C:\Nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Nexon\Combat Arms EU\CombatArms.exe"="C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms EU\Engine.exe"="C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{efe567c6-80b3-11dc-b53e-0019db48527d}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe ANDREAS-ULTSCH.vbs

« 14.04.09, 12:25:36 »

4:

======List of files/folders created in the last 1 months======

2009-04-14 12:15:20 ----D---- C:\rsit
2009-04-14 12:11:57 ----D---- C:\Programme\Trend Micro
2009-04-11 01:23:02 ----A---- C:\WINDOWS\system32\xfcodec.dll
2009-04-08 19:18:05 ----D---- C:\Programme\Gemeinsame Dateien\Adobe AIR
2009-04-08 01:33:42 ----D---- C:\Programme\mp3DirectCut
2009-04-07 16:04:03 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\FileZilla
2009-04-07 16:03:44 ----D---- C:\Programme\FileZilla FTP Client
2009-04-07 13:38:57 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\com.adobe.ExMan
2009-04-07 02:35:03 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\MAGIX
2009-04-07 02:34:12 ----D---- C:\Programme\Gemeinsame Dateien\MAGIX Shared
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\TTIC32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\TTI32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\STRING32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\MXRestore.exe
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\msxml4a.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\mgxcdr.txt
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLTPO32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLRES32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLRD32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLPTL32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLPRJ32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLPRF32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLPNT32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLMSC32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLIX.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLISO32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLIO32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLIMG32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLDRV32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLDIR32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLDEV32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLCPY32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLCDF32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLCDA32.dll
2009-04-07 02:34:09 ----A---- C:\WINDOWS\system32\DLLAV32.dll
2009-04-07 02:33:12 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
2009-04-07 02:32:53 ----D---- C:\Programme\MAGIX
2009-04-07 02:32:53 ----A---- C:\WINDOWS\system32\DLLDEV32i.dll
2009-04-07 02:32:13 ----D---- C:\WINDOWS\system32\MAGIX
2009-04-07 02:32:13 ----A---- C:\WINDOWS\system32\mgxoschk.dll
2009-04-07 02:32:13 ----A---- C:\WINDOWS\mgxoschk.ini
2009-04-07 02:14:21 ----D---- C:\Programme\Gemeinsame Dateien\SWF Studio
2009-04-06 22:54:28 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FLEXnet
2009-04-06 22:41:34 ----D---- C:\Programme\Adobe Media Player
2009-04-06 22:38:24 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe
2009-04-06 22:35:38 ----D---- C:\Programme\Gemeinsame Dateien\Macrovision Shared
2009-04-06 21:53:46 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Download Manager
2009-04-06 21:49:08 ----D---- C:\Programme\BestPlayer
2009-04-06 19:23:22 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-04-06 19:23:20 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-04-06 01:12:34 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-04-06 00:38:10 ----D---- C:\WINDOWS\SxsCaPendDel
2009-04-05 23:19:18 ----D---- C:\WINDOWS\system32\js
2009-04-05 23:19:18 ----D---- C:\WINDOWS\system32\images
2009-04-05 23:19:18 ----D---- C:\WINDOWS\system32\html
2009-04-05 23:19:18 ----D---- C:\WINDOWS\system32\css
2009-04-05 23:19:18 ----D---- C:\Programme\Business Objects
2009-04-05 23:13:24 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PreEmptive Solutions
2009-04-05 23:09:48 ----D---- C:\WINDOWS\symbols
2009-04-05 23:08:19 ----D---- C:\Programme\HTML Help Workshop
2009-04-05 23:08:19 ----D---- C:\Programme\Gemeinsame Dateien\Merge Modules
2009-04-05 23:08:18 ----D---- C:\Programme\CE Remote Tools
2009-04-05 22:19:08 ----A---- C:\WINDOWS\system32\d3dx9d_35.dll
2009-04-05 22:19:08 ----A---- C:\WINDOWS\system32\d3dx9d_33.dll
2009-04-05 22:19:08 ----A---- C:\WINDOWS\system32\d3dref9.dll
2009-04-05 22:19:08 ----A---- C:\WINDOWS\system32\d3dref8.dll
2009-04-05 22:19:08 ----A---- C:\WINDOWS\system32\d3dref.dll
2009-04-05 22:17:21 ----D---- C:\Programme\Microsoft DirectX SDK (August 2007)
2009-04-05 21:41:33 ----D---- C:\Programme\Microsoft Visual Studio .NET 2003
2009-04-05 15:40:20 ----D---- C:\Programme\MSXML 6.0
2009-04-05 15:38:13 ----D---- C:\Programme\Microsoft SQL Server
2009-04-05 15:37:43 ----D---- C:\Programme\Microsoft Device Emulator
2009-04-05 15:36:22 ----D---- C:\Programme\Windows Mobile 5.0 SDK R2
2009-04-05 15:35:39 ----D---- C:\Programme\Microsoft Synchronization Services
2009-04-05 15:35:39 ----D---- C:\Programme\Microsoft SQL Server Compact Edition
2009-04-05 15:23:17 ----D---- C:\Programme\Microsoft SDKs
2009-04-05 15:23:16 ----D---- C:\Programme\Microsoft.NET
2009-04-05 15:21:53 ----D---- C:\Programme\Microsoft Web Designer Tools
2009-04-05 15:21:37 ----RHD---- C:\MSOCache
2009-04-05 15:20:39 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2009-04-05 13:44:58 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\TeamViewer
2009-04-05 13:44:55 ----D---- C:\Programme\TeamViewer
2009-04-05 01:52:20 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Malwarebytes
2009-04-05 01:52:13 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2009-04-05 01:52:12 ----D---- C:\Programme\Malwarebytes' Anti-Malware
2009-04-04 13:46:07 ----RA---- C:\WINDOWS\system32\tmp4E.tmp
2009-04-04 13:46:07 ----RA---- C:\WINDOWS\system32\tmp4D.tmp
2009-04-03 22:55:16 ----D---- C:\Programme\Flash-SWF to AVI-GIF
2009-04-03 17:10:54 ----D---- C:\Programme\Vertus Play With Pictures
2009-04-02 21:25:52 ----D---- C:\Programme\Trust
2009-04-02 21:25:52 ----A---- C:\WINDOWS\system32\XWheel.dll
2009-04-02 21:25:52 ----A---- C:\WINDOWS\system32\XIndicator.dll
2009-04-02 21:25:52 ----A---- C:\WINDOWS\system32\MousePage.dll
2009-04-02 21:25:52 ----A---- C:\WINDOWS\system32\Hook.dll
2009-04-02 21:25:39 ----D---- C:\download
2009-04-01 17:04:54 ----A---- C:\WINDOWS\system32\ASTSRV.EXE
2009-03-31 18:13:09 ----A---- C:\WINDOWS\system32\javaws.exe
2009-03-31 18:13:09 ----A---- C:\WINDOWS\system32\javaw.exe
2009-03-31 18:13:09 ----A---- C:\WINDOWS\system32\java.exe
2009-03-30 16:21:54 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Help
2009-03-29 22:38:04 ----A---- C:\WINDOWS\AviSplitter.INI
2009-03-27 16:05:22 ----D---- C:\usermaps
2009-03-25 16:53:18 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Hamachi
2009-03-25 16:52:56 ----D---- C:\Programme\Hamachi
2009-03-25 14:54:34 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\MailFrontier
2009-03-25 14:54:01 ----A---- C:\WINDOWS\system32\zpeng25.dll
2009-03-24 17:12:35 ----D---- C:\Programme\Tropico
2009-03-24 11:44:28 ----A---- C:\WINDOWS\Editor.INI
2009-03-21 17:28:17 ----D---- C:\Programme\IVAO
2009-03-17 20:44:49 ----A---- C:\rollback.ini

======List of files/folders modified in the last 1 months======

2009-04-14 12:19:05 ----D---- C:\WINDOWS\Internet Logs
2009-04-14 12:11:58 ----D---- C:\WINDOWS\Prefetch
2009-04-14 12:11:57 ----RD---- C:\Programme
2009-04-14 12:10:23 ----D---- C:\WINDOWS\Temp
2009-04-14 12:04:59 ----D---- C:\Programme\Crawler
2009-04-14 12:04:44 ----D---- C:\Programme\Mozilla Firefox
2009-04-14 11:13:41 ----D---- C:\Programme\Spyware Terminator
2009-04-14 11:13:41 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spyware Terminator
2009-04-14 11:11:49 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Spyware Terminator
2009-04-14 11:10:45 ----D---- C:\WINDOWS\system32\CatRoot2
2009-04-14 11:10:26 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Xfire
2009-04-14 11:00:25 ----D---- C:\Programme\Xfire
2009-04-14 04:08:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-04-13 23:28:29 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Azureus
2009-04-13 23:21:17 ----D---- C:\Downloads
2009-04-13 23:14:48 ----D---- C:\Programme\Steam
2009-04-13 22:02:28 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Adobe
2009-04-13 16:07:46 ----D---- C:\Programme\Azureus
2009-04-12 23:45:37 ----A---- C:\WINDOWS\NeroDigital.ini
2009-04-12 15:08:45 ----HD---- C:\LG3G
2009-04-09 12:54:31 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TrackMania
2009-04-09 11:24:33 ----AD---- C:\WINDOWS
2009-04-09 03:34:49 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Skype
2009-04-09 00:02:38 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\skypePM
2009-04-08 23:07:38 ----RSD---- C:\WINDOWS\assembly
2009-04-08 23:07:20 ----D---- C:\WINDOWS\system32\DirectX
2009-04-08 23:07:17 ----D---- C:\Programme\TmNationsForever
2009-04-08 19:18:11 ----SHD---- C:\WINDOWS\Installer
2009-04-08 19:18:05 ----D---- C:\Programme\Gemeinsame Dateien
2009-04-08 13:42:55 ----D---- C:\WINDOWS\system32
2009-04-08 13:41:26 ----D---- C:\WINDOWS\system32\drivers
2009-04-08 13:40:40 ----D---- C:\Programme\WarRock
2009-04-08 13:07:01 ----HD---- C:\WINDOWS\inf
2009-04-07 22:30:32 ----D---- C:\Programme\Gemeinsame Dateien\Adobe
2009-04-07 22:30:08 ----RSD---- C:\WINDOWS\Fonts
2009-04-07 15:19:32 ----D---- C:\Nexon
2009-04-07 13:57:48 ----D---- C:\Programme\Latte!
2009-04-07 13:53:03 ----D---- C:\Programme\Call of Duty 5
2009-04-07 11:48:38 ----D---- C:\Programme\Google
2009-04-07 02:42:29 ----SD---- C:\WINDOWS\Tasks
2009-04-06 22:43:01 ----D---- C:\Programme\Adobe
2009-04-06 17:39:37 ----D---- C:\DVDVideoSoft
2009-04-06 17:24:27 ----D---- C:\WINDOWS\system32\ZoneLabs
2009-04-06 16:33:12 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-04-06 12:07:07 ----D---- C:\WINDOWS\Microsoft.NET
2009-04-06 11:15:35 ----D---- C:\Programme\IrfanView
2009-04-06 01:12:44 ----D---- C:\WINDOWS\system32\CatRoot
2009-04-06 01:12:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-04-06 01:06:41 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-04-06 01:06:22 ----D---- C:\Programme\Gemeinsame Dateien\Microsoft Shared
2009-04-06 01:03:03 ----D---- C:\WINDOWS\Registration
2009-04-06 00:51:06 ----D---- C:\WINDOWS\WinSxS
2009-04-06 00:40:01 ----D---- C:\WINDOWS\system32\XPSViewer
2009-04-06 00:39:58 ----D---- C:\WINDOWS\system32\en-us
2009-04-05 23:51:22 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-04-05 23:27:28 ----D---- C:\WINDOWS\SoftwareDistribution
2009-04-05 23:19:52 ----A---- C:\WINDOWS\ODBC.INI
2009-04-05 23:10:58 ----D---- C:\Programme\Microsoft Office
2009-04-05 23:10:12 ----D---- C:\Programme\MSBuild
2009-04-05 23:09:35 ----D---- C:\WINDOWS\system32\1033
2009-04-05 15:32:56 ----SD---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\Microsoft
2009-04-05 15:32:56 ----SD---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft
2009-04-05 01:17:21 ----D---- C:\Dokumente und Einstellungen\Jedi\Anwendungsdaten\teamspeak2
2009-04-04 21:06:02 ----A---- C:\WINDOWS\vbaddin.ini
2009-04-04 13:46:07 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-04-04 13:46:07 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-04-03 16:30:24 ----HD---- C:\Programme\InstallShield Installation Information
2009-04-01 15:50:22 ----D---- C:\Programme\Magic Swf2Gif
2009-03-31 18:12:56 ----D---- C:\Programme\Java
2009-03-31 17:56:50 ----D---- C:\Programme\Euro Truck Simulator
2009-03-30 23:27:01 ----D---- C:\WINDOWS\system32\config
2009-03-30 16:21:54 ----D---- C:\WINDOWS\Help
2009-03-25 16:52:12 ----D---- C:\Temp
2009-03-21 22:46:37 ----D---- C:\Programme\Flight Simulator 9
2009-03-21 17:29:06 ----D---- C:\Programme\Teamspeak2_RC2
2009-03-18 23:13:57 ----D---- C:\Programme\TuneUp Utilities 2009

« 14.04.09, 12:26:18 »

5:

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-11-10 75072]
R1 InCDPass;InCDPass; C:\WINDOWS\System32\DRIVERS\InCDPass.sys [2005-07-08 29696]
R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\incdrm.sys [2006-11-02 28672]
R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 KLIF;KLIF; C:\WINDOWS\system32\DRIVERS\klif.sys [2008-12-11 148496]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-01-26 52224]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2008-04-15 21248]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-02-19 353672]
R2 ACEDRV05;ACEDRV05; \??\C:\WINDOWS\system32\drivers\ACEDRV05.sys []
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-09-24 3331072]
R3 avgntflt;avgntflt; \??\C:\Programme\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 GMFilter Filter;GMFilter Filter; C:\WINDOWS\System32\Drivers\GMFilter.sys [2006-12-29 27648]
R3 GMFilter Filter;GMFilter Filter; C:\WINDOWS\System32\Drivers\GMFilter.sys [2006-12-29 27648]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-25 25280]
R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-03 4394496]
R3 LVCap138;TV Card Capture Driver; C:\WINDOWS\system32\DRIVERS\tvcap.sys [2004-12-21 299776]
R3 lvtuner;TV Card WDM TV Tuner; C:\WINDOWS\system32\DRIVERS\tvtuner.sys [2004-12-21 19712]
R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-02-28 12288]
R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2002-09-27 9856]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-10-13 81664]
R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDfs.sys [2005-07-08 99584]
S3 a6u7i531;a6u7i531; C:\WINDOWS\system32\drivers\a6u7i531.sys []
S3 AR5211;MSI Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-12-21 470048]
S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cdiskdun;cdiskdun; \??\C:\DOKUME~1\Jedi\LOKALE~1\Temp\cdiskdun.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 IlvMoneyDRIVER53;IlvMoneyDRIVER53; \??\C:\Dokumente und Einstellungen\Jedi\Eigene Dateien\ICQ\293400608\ReceivedFiles\385257670 Chri$\MLE\IlvMoney1148.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XDva090;XDva090; \??\C:\WINDOWS\system32\XDva090.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirScheduler;AntiVir PersonalEdition Classic Planer; C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-23 68865]
R2 AntiVirService;AntiVir PersonalEdition Classic Guard; C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-23 151297]
R2 astcc;AST Service; C:\WINDOWS\system32\ASTSRV.EXE [2009-04-01 57344]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-09-24 581632]
R2 InCDsrv;InCD Helper; C:\Programme\Ahead\InCD\InCDsrv.exe [2005-07-08 871424]
R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-03-09 152984]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-11-24 29263712]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-03-10 75064]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2009-04-06 189472]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Programme\Spyware Terminator\sp_rsser.exe [2008-10-03 570880]
R2 SQLBrowser;SQL Server Browser; C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-24 239968]
R2 SQLWriter;SQL Server VSS Writer; C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2009-02-23 603904]
R2 UxTuneUp;TuneUp Designerweiterung; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-02-19 2402184]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-09-23 593920]
S3 aspnet_state;ASP.NET-Zustandsdienst; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Programme\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-04-06 655624]
S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag-Dienst; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-02-23 360192]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-10-24 920576]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-24 45408]
S4 msvsmon90;Visual Studio 2008 Remote Debugger; F:\Programme\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2007-11-07 3004416]
S4 NetTcpPortSharing;Net.Tcp-Portfreigabedienst; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

« 14.04.09, 12:28:49 »

info.txt logfile of random's system information tool 1.06 2009-04-14 12:15:29

======Uninstall list======

Sansa Media Converter-->"C:\Programme\InstallShield Installation Information\{FC053571-8507-44E4-8B6D-AACEAB8CA57C}\setup.exe" --u:{FC053571-8507-44E4-8B6D-AACEAB8CA57C}
-->C:\Programme\DivX\DivXConverterUninstall.exe /CONVERTER
-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {FAD8A83E-9BAC-4179-9268-A35948034D85}
2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {FAD8A83E-9BAC-4179-9268-A35948034D85}
Active Camera 2004 2.1 for FS 2004 (updated to 9.1)-->C:\Programme\Microsoft Games\Flight Simulator 9\Active Camera 2004 2_1_for_FS9_1 uninstal.exe
Adobe Acrobat 5.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Programme\Gemeinsame Dateien\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Programme\Gemeinsame Dateien\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe AIR-->c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Anchor Service CS4-->MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Bridge CS4-->MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
Adobe CMaps CS4-->MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color - Photoshop Specific CS4-->MsiExec.exe /I{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Adobe Color EU Recommended Settings CS4-->MsiExec.exe /I{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}
Adobe Color JA Extra Settings CS4-->MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
Adobe Color NA Extra Settings CS4-->MsiExec.exe /I{098A2A49-7CF3-4F08-A38D-FB879117152A}
Adobe Color Video Profiles CS CS4-->MsiExec.exe /I{63C24A08-70F3-4C8E-B9FB-9F21A903801D}
Adobe CSI CS4-->MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
Adobe Default Language CS4-->MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Device Central CS4-->MsiExec.exe /I{67F0E67A-8E93-4C2C-B29D-47C48262738A}
Adobe Drive CS4-->MsiExec.exe /I{16E16F01-2E2D-4248-A42F-76261C147B6C}
Adobe Dynamiclink Support-->MsiExec.exe /I{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}
Adobe ExtendScript Toolkit CS4-->MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Extension Manager CS4-->MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
Adobe Flash CS4 Extension - Flash Lite STI others-->MsiExec.exe /I{47C6F987-685A-41AE-B092-E75B277AEE39}
Adobe Flash CS4 Professional-->C:\Programme\Gemeinsame Dateien\Adobe\Installers\a68eec966ce913ddaa63251dc82ed31\Setup.exe --uninstall=1
Adobe Flash CS4 STI-other-->MsiExec.exe /I{BD3374D3-C2E6-42B7-A80B-E850B6886246}
Adobe Flash CS4-->MsiExec.exe /I{F6E99614-F042-4459-82B7-8B38B2601356}
Adobe Flash Player 10 ActiveX-->MsiExec.exe /X{3A6829EF-0791-4FDD-9382-C690DD0821B9}
Adobe Flash Player 10 Plugin-->MsiExec.exe /X{03DEEAD2-F3B7-45BF-9006-A25D015F00D2}
Adobe Fonts All-->MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Linguistics CS4-->MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
Adobe Media Encoder CS4 Importer-->MsiExec.exe /I{8186FF34-D389-4B7E-9A2F-C197585BCFBD}
Adobe Media Encoder CS4-->MsiExec.exe /I{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}
Adobe Media Player-->msiexec /qb /x {39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Media Player-->MsiExec.exe /I{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Output Module-->MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4-->MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS4 Support-->MsiExec.exe /I{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
Adobe Photoshop CS4-->C:\Programme\Gemeinsame Dateien\Adobe\Installers\faf656ef605427ee2f42989c3ad31b8\Setup.exe --uninstall=1
Adobe Photoshop CS4-->MsiExec.exe /I{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
Adobe Photoshop CS4-->MsiExec.exe /I{E4848436-0345-47E2-B648-8B522FCDA623}
Adobe Search for Help-->MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
Adobe Service Manager Extension-->MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
Adobe Setup-->MsiExec.exe /I{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
Adobe Setup-->MsiExec.exe /I{EED50C97-C79E-4149-BD82-7C5A22437708}
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Adobe Type Support CS4-->MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS4-->MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
Adobe XMP Panels CS4-->MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetCMYK-->MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
AdobeColorCommonSetRGB-->MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
aerosoft's - AES-Base&&AirportPack - FS2004-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{20A96613-3802-436C-842E-653C62FABA0D}\Setup.exe" -uninst
aerosoft's - Budapest 2007 - FS2004-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{0976C02C-0F73-447D-9657-5318C0C45A05}\Setup.exe" -uninst
aerosoft's - German Airports 2 - Dortmund-->C:\Programme\InstallShield Installation Information\{3ABDFABB-FA48-4BCA-9ECC-3EFC1E5143D2}\setup.exe -runfromtemp -l0x0007 -uninst -removeonly
aerosoft's - German Airports 3 - Hamburg-->C:\Programme\InstallShield Installation Information\{D234EAC0-7D49-492F-97EC-8FA09FD7C1C4}\setup.exe -runfromtemp -l0x0007 -removeonly
aerosoft's - German Football Stadiums - FS2004-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{3CDBA499-FB8B-4FFC-A374-F5AA59AB534D}\Setup.exe" -uninst
aerosoft's - London Heathrow 2008-->C:\Programme\InstallShield Installation Information\{C0A6901F-C919-47A3-A4D9-E2056314086B}\setup.exe -runfromtemp -l0x0007 -uninst -removeonly
aerosoft's - Mega Airport Frankfurt - FS2004-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{D4E22434-1BCE-4C91-A1E4-FC352DFD4B3B}\Setup.exe" -uninst
AFPL Ghostscript Fonts-->C:\gs\uninstgs.exe "C:\gs\fonts\uninstal.txt"
ANSTOSS 3-->"C:\Programme\ASCARON Entertainment\Anstoss 3\unins000.exe"
Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
ATI - Software Uninstall Utility-->C:\Programme\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI AVIVO Codecs-->MsiExec.exe /I{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x5c32
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
Avira AntiVir Personal - Free Antivirus-->C:\Programme\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
AVIVO Codecs-->MsiExec.exe /X{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}
Battlefield 2(TM)-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x7 -removeonly
BestPlayer-->"C:\Programme\BestPlayer\Uninstall.exe"
Burn4Free CD and DVD-->"C:\Programme\Burn4Free\uninstall.exe"
Bus-Simulator 2008 Bonus-Pack 1 (inkl. Patch 1+2)-->"C:\Programme\Bus-Simulator 2008\unins001.exe"
Bus-Simulator 2008-->"C:\Programme\Bus-Simulator 2008\unins000.exe"
Call of Duty(R) - World at War(TM) 1.2 Patch-->C:\Programme\InstallShield Installation Information\{2BF0AE92-C3BC-4112-9066-1546342B1FAE}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) - World at War(TM) 1.3 Patch-->C:\Programme\InstallShield Installation Information\{149464D9-B06F-4505-9968-FD1206F67AD3}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) - World at War(TM)-->C:\Programme\InstallShield Installation Information\{D80A6A73-E58A-4673-AFF5-F12D7110661F}\setup.exe -runfromtemp -l0x0407
Call of Duty(R) 2-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374}
Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch-->C:\Programme\InstallShield Installation Information\{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch-->C:\Programme\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch-->C:\Programme\InstallShield Installation Information\{8503C901-85D7-4262-88D2-8D8B2A7B08B8}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch-->C:\Programme\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch-->C:\Programme\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Programme\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0407
Carenado C 152 II-->C:\Program Files\Microsoft Games\Flight Simulator 9\Uninstal.exe
Cartoonist 1.3-->"C:\Programme\Cartoonist\unins000.exe"
Catalyst Control Center - Branding-->MsiExec.exe /I{FA3A247D-437A-455E-A88F-7EB6E5F9E799}
CLS A340-500/600 FS9-->C:\Programme\Microsoft Games\Flight Simulator 9\CLS_A3456_FS9_remove
Collab-->C:\Programme\Image-Line\Collab\uninstall.exe
Combi Livery Pack-->C:\Programme\Microsoft Games\Flight Simulator 9\Uninstal.exe
Connect-->MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
Crawler Toolbar with Web Security Guard-->C:\Programme\Crawler\CToolbar.exe uninst
Crayon Physics Deluxe - release 51-->"C:\Programme\Crayon Physics Deluxe\unins000.exe"
Crystal Reports Basic for Visual Studio 2008-->MsiExec.exe /X{AA467959-A1D6-4F45-90CD-11DC57733F32}
Day of Defeat-->"C:\Programme\Steam\steam.exe" steam://uninstall/30
Die Gilde 2 - Back to the Roots Patch v1.2-->"C:\Programme\Die Gilde 2 - Gold Edition\unins000.exe"
Die Gilde 2 - Gold Edition-->C:\Programme\Die Gilde 2 - Gold Edition\uninstall.exe
DivX Codec-->C:\Programme\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Programme\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Programme\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Programme\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Programme\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DriverAgent by TouchStone Software-->RunDll32.exe advpack.dll,LaunchINFSection driveragent_exe.inf,TVICHW32Remove
DVD Solution-->C:\Programme\Uninstall_CDS.exe
DyynoPlayer 0.8.6f.2-->C:\Programme\Dyyno\Dyyno Player\uninstall.exe

« 14.04.09, 12:29:54 »

Easy Video Downloader v. 2.0-->"C:\Programme\Easy Video Downloader\unins000.exe"
Euro Truck Simulator-->C:\Programme\Euro Truck Simulator\Uninstal_EuroTruckSimulator.exe
EVEREST Home Edition v2.20-->"C:\Programme\Lavalys\EVEREST Home Edition\unins000.exe"
Fallout 3-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{974C4B12-4D02-4879-85E0-61C95CC63E9E}\setup.exe" -l0x7 -removeonly
Far Cry 2-->"C:\Programme\InstallShield Installation Information\{F2835483-37F2-4123-B4FE-0E77D58447F2}\setup.exe" -runfromtemp -l0x0007 -removeonly
Fast Image-Map 2-->C:\WINDOWS\unin0407.exe -f"C:\Programme\CL-Soft\Fast Image-Map 2\DeIsL1.isu" -c"C:\Programme\CL-Soft\Fast Image-Map 2\_ISREG32.DLL"
FileZilla Client 3.2.0-->C:\Programme\FileZilla FTP Client\uninstall.exe
Firebird SQL Server - MAGIX Edition-->C:\Programme\MAGIX\Common\Database\unwise.exe
FL Studio 8-->C:\Programme\Image-Line\FL Studio 8\uninstall.exe
FLV Player 2.0, build 23-->C:\Programme\FLV Player\uninst.exe
Free FLV to AVI Video Converter v. 1.0-->"C:\Programme\Free FLV to AVI Video Converter\unins000.exe"
Free YouTube to Mp3 Converter version 3.1-->"C:\Programme\DVDVideoSoft\Free YouTube to Mp3 Converter\unins000.exe"
GM-4200 Gamer Mouse Optical-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{235C3A50-559F-4CAA-BAC3-4CC9ABF51976}\setup.exe" -l0x9 -removeonly
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
Grand Theft Auto IV-->"C:\Programme\InstallShield Installation Information\{579BA58C-F33D-4970-9953-B94B43768AC3}\setup.exe" -runfromtemp -l0x0007 -removeonly
Grand Theft Auto San Andreas-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{086BADF8-9B1F-4E89-B207-2EDA520972D6}\setup.exe" -l0x7 -removeonly
GTA2-->C:\WINDOWS\IsUn0407.exe -fC:\Programme\GTA2\Uninst.isu
Guild 2 Patch-->MsiExec.exe /I{E9E09EAA-0FF8-42A1-ACAB-67F2A691E50F}
Half-Life 2: Deathmatch-->"C:\Programme\Steam\steam.exe" steam://uninstall/320
Half-Life 2: Episode One-->"C:\Programme\Steam\steam.exe" steam://uninstall/380
Half-Life 2: Lost Coast-->"C:\Programme\Steam\steam.exe" steam://uninstall/340
Half-Life Deathmatch: Source-->"C:\Programme\Steam\steam.exe" steam://uninstall/360
Hamachi 1.0.3.0-->C:\Programme\Hamachi\uninstall.exe
HD Tune 2.55-->"C:\Programme\HD Tune\unins000.exe"
Hex Workshop v5-->MsiExec.exe /I{26A373DB-162B-4B6E-A488-0BED0F0FB227}
High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"C:\Programme\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix für Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
HyperCam 2-->C:\Programme\HyCam2\UnHyCam2.exe
ICQ Toolbar-->regsvr32 /u /s "C:\PROGRA~1\ICQTOO~1\toolbaru.dll"
ICQ6.5-->"C:\Programme\InstallShield Installation Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe" -runfromtemp -l0x0009 -removeonly
IL Download Manager-->C:\Programme\Image-Line\Downloader\uninstall.exe
InCD-->C:\WINDOWS\NuNInst.exe /UNINSTALL
InterVideo WinDVR 3-->"C:\Programme\InstallShield Installation Information\{6BF4613C-0A46-43AA-8FA8-0CB9F2C1A548}\setup.exe" REMOVEALL
IsoBuster 2.3-->"C:\Programme\Smart Projects\IsoBuster\Uninst\unins000.exe"
IvAp v1.3.8 (b2150)-->"C:\Programme\IVAO\IvAp\unins000.exe"
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
kuler-->MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
LG ODD Auto Firmware Update-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{6179550A-3E7C-499E-BCC9-9E8113E0A285}\setup.exe"
LG PC Suite-->C:\Programme\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x0007 -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x7 LG -removeonly
LifeView 713X WDM Driver-->C:\WINDOWS\system32\Setup.exe
MAGIX Filme auf DVD 8 Download-Version 8.0.0.11 (D)-->C:\Programme\MAGIX\Filme_auf_DVD_8_Download-Version\unwise.exe
MAGIX Screenshare 4.3.6.1987 (D)-->C:\Programme\MAGIX\PCVisit\unwise.exe
MAIET entertainment - Gunz-->C:\Programme\MAIET\Gunz\Uninstall.exe
Malwarebytes' Anti-Malware-->"C:\Programme\Malwarebytes' Anti-Malware\unins000.exe"
McLoad Preinstaller-->C:\\Dokumente und Einstellungen\\Jedi\\Anwendungsdaten\\McLoad\\Uninstall-Mcload.exe
Microsoft .NET Framework 2.0 Language Pack - DEU-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - DEU\install.exe
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 German Language Pack-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 German Language Pack\setup.exe
Microsoft .NET Framework 3.0 German Language Pack-->MsiExec.exe /X{F2A7F421-1679-48D5-B918-96999014ED53}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Device Emulator version 3.0 - ENU-->MsiExec.exe /X{B32E7732-B2FB-3FD0-81AC-6025B1104C66}
Microsoft DirectX SDK (August 2007)-->MsiExec.exe /I{F0A4913F-46A5-48F2-BC73-EE41A6C81EB3}
Microsoft Document Explorer 2008-->C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help 9\Microsoft Document Explorer 2008\install.exe
Microsoft Document Explorer 2008-->MsiExec.exe /X{6753B40C-0FBD-3BED-8A9D-0ACAC2DCD85D}
Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{FD052FB9-FE90-4438-B355-15EDC89D8FB1}
Microsoft Office 2000 Premium-->MsiExec.exe /I{00000407-78E1-11D2-B60F-006097C998E7}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Visual Web Developer 2007-->MsiExec.exe /X{90120000-0021-0000-0000-0000000FF1CE}
Microsoft Office Visual Web Developer MUI (English) 2007-->MsiExec.exe /X{90120000-0021-0409-0000-0000000FF1CE}
Microsoft Platform SDK (3790.1830)-->MsiExec.exe /I{BA96A695-E9CE-4B2A-919A-540B73E7A78E}
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)-->MsiExec.exe /I{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}
Microsoft SQL Server 2005 Tools Express Edition-->MsiExec.exe /I{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}
Microsoft SQL Server 2005-->"C:\Programme\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove
Microsoft SQL Server Compact 3.5 Design Tools ENU-->MsiExec.exe /X{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}
Microsoft SQL Server Compact 3.5 ENU-->MsiExec.exe /I{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}
Microsoft SQL Server Compact 3.5 for Devices ENU-->MsiExec.exe /I{241F2BF7-69EB-42A4-9156-96B2426C7504}
Microsoft SQL Server Database Publishing Wizard 1.2-->MsiExec.exe /X{9A33B83D-FFC4-44CF-BEEF-632DECEF2FCD}
Microsoft SQL Server Native Client-->MsiExec.exe /I{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}
Microsoft SQL Server Setup Support Files (English)-->MsiExec.exe /X{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}
Microsoft SQL Server VSS Writer-->MsiExec.exe /I{56B4002F-671C-49F4-984C-C760FE3806B5}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual Studio 2005 Tools for Office Runtime-->MsiExec.exe /X{388E4B09-3E71-4649-8921-F44A3A2954A7}
Microsoft Visual Studio 2008 Professional Edition - ENU-->F:\Programme\Microsoft Visual Studio 9.0\Microsoft Visual Studio 2008 Professional Edition - ENU\setup.exe
Microsoft Visual Studio 6.0 Enterprise Edition-->"C:\Programme\Microsoft Visual Studio\Common\Setup\1033\Setup.exe"
Microsoft Visual Studio Web Authoring Component-->"C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall VISUALWEBDEVELOPER /dll OSETUP.DLL
Microsoft Web Publishing Wizard 1.53-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie3x86.inf,WebPostUninstall
Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools-->MsiExec.exe /X{05EC21B8-4593-3037-A781-A6B5AFFCB19D}
Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries-->MsiExec.exe /X{842FAF7C-50EF-4463-9B8F-6222E1384D7D}
Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense-->MsiExec.exe /X{64c5b887-b5ee-42b8-8596-78905a6b5f1f}
Microsoft Windows SDK for Visual Studio 2008 Tools-->MsiExec.exe /X{CAA376AF-0DE8-4FCA-942E-C6AC579B94B3}
Microsoft Windows SDK for Visual Studio 2008 Win32 Tools-->MsiExec.exe /X{B268E9A1-04A9-40D0-9866-846BE2B74BA7}
Mobipocket Reader 6.2-->MsiExec.exe /I{342126E1-173C-4585-BFBE-3EBDD20E3E9E}

« 14.04.09, 12:30:22 »

Mozilla Firefox (3.0.-->C:\Programme\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
MSXML 6.0 Parser-->MsiExec.exe /I{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}
Multimedia Launcher-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
Nero OEM-->C:\Programme\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Network Stumbler 0.4.0 (remove only)-->"C:\Programme\Network Stumbler\uninst.exe"
NSIS vgif-->"C:\Programme\vgif\uninstall.exe"
NVIDIA GAME System Software 2.8.1-->MsiExec.exe /I{4F0C7CCF-5666-474B-B02E-AC514A95EC93}
OpenAL-->"C:\Programme\OpenAL\OpenALwEAX.exe" /U
OpenOffice.org 3.0-->MsiExec.exe /I{04B45310-A5FE-4425-BFCA-1A6D8920DE74}
oZone3D.Net FurMark v1.6.4-->"C:\Programme\oZone3D\Benchmarks\FurMark_v1.6.4\unins000.exe"
PDF Settings CS4-->MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
Pdf995-->C:\Programme\pdf995\setup.exe uninstall
Photoshop Camera Raw-->MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
Pixel Bender Toolkit-->MsiExec.exe /I{43509E18-076E-40FE-AF38-CA5ED400A5A9}
PMDG747_400 Queen of the Skies-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{97679567-0095-464E-B5F2-E218A1CF3421}\setup.exe" -l0x9 -removeonly
PMDG747_400F-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{164360E5-0AAD-48AD-8A36-3F8A859FAB6F}\setup.exe" -l0x9 -removeonly
PoiZone-->C:\Programme\Image-Line\PoiZone\uninstall.exe
PowerDVD-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PowerProducer-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
RealSpeak Solo fur Deutsch - Steffi-->MsiExec.exe /I{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x7 -removeonly
Remove UK2000 Gatwick FREE files-->C:\WINDOWS\iun506.exe C:\Programme\Microsoft Games\Flight Simulator 9\UK2000 scenery\UK2000 Gatwick FREE\irunin.ini
Rockstar Games Social Club-->"C:\Programme\InstallShield Installation Information\{08B3869E-D282-424C-9AFC-870E04A4BA14}\setup.exe" -runfromtemp -l0x0007 -removeonly
Sansa Updater-->C:\Programme\InstallShield Installation Information\{E2D7E05E-C8C7-45F4-8D89-D6696075E0B7}\setup.exe -runfromtemp -l0x0009 -removeonly
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Sicherheitsupdate für Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Spyware Terminator-->"C:\Programme\Spyware Terminator\unins000.exe"
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Suite Shared Configuration CS4-->MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
System Requirements Lab-->C:\Programme\SystemRequirementsLab\Uninstall.exe
TeamSpeak 2 RC2-->C:\Programme\Teamspeak2_RC2\unins000.exe
TeamViewer 4-->C:\Programme\TeamViewer\Version4\uninstall.exe
TmNationsForever-->"C:\Programme\TmNationsForever\unins000.exe"
Toxic Biohazard-->C:\Programme\Image-Line\Toxic Biohazard\uninstall.exe
Tropico-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{818FB39B-1A57-4F1B-A54D-391C33D6C596}\setup.exe" -l0x7
TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
Uninstall 1.0.0.1-->"C:\Programme\Gemeinsame Dateien\DVDVideoSoft\unins000.exe"
Unity Web Player-->C:\Programme\Unity\WebPlayer\Uninstall.exe
Update for Office 2007 (KB946691)-->msiexec /package {90120000-0021-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update für Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update für Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update für Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Update für Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
VC 9.0 Runtime-->MsiExec.exe /I{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Vertus Play With Pictures 1.0.3-->"C:\Programme\Vertus Play With Pictures\Uninstall.exe"
Visual Studio 2005 Tools for Office Second Edition Runtime-->C:\Programme\Gemeinsame Dateien\Microsoft Shared\VSTO\8.0\Microsoft Visual Studio 2005 Tools for Office Runtime\install.exe
Visual Studio Tools for the Office system 3.0 Runtime-->C:\Programme\Gemeinsame Dateien\Microsoft Shared\VSTO\9.0\Visual Studio Tools for the Office system 3.0 Runtime\install.exe
Visual Studio Tools for the Office system 3.0 Runtime-->MsiExec.exe /X{8FB53850-246A-3507-8ADE-0060093FFEA6}
WarRock-->C:\Programme\InstallShield Installation Information\{00D15456-F679-4AD4-8BD2-56450D4C3F72}\setup.exe -runfromtemp -l0x0009 -removeonly
Wichtiges Update für Windows Media Player 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Windows Essentials Media Codec Pack 1.0-->C:\Programme\Essentials Codec Pack\uninst.exe
Windows Media Format 11 runtime-->"C:\Programme\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Programme\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Mobile 5.0 SDK R2 for Pocket PC-->MsiExec.exe /I{6C9F6D23-E9AD-43C9-B43A-011562AAF876}
Windows Mobile 5.0 SDK R2 for Smartphone-->MsiExec.exe /I{9656F3AC-6BA9-43F0-ABED-F214B5DAB27B}
Windows Presentation Foundation Language Pack (DEU)-->MsiExec.exe /X{92DF2F1B-F63C-4D9A-B3E1-B2D11AE29790}
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation DE Language Pack-->MsiExec.exe /I{7228FD8C-3B9E-4204-AE36-8A466107685B}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR-->C:\Programme\WinRAR\uninstall.exe
Xfire (remove only)-->"C:\Programme\Xfire\uninst.exe"
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XP Codec Pack-->C:\Programme\XP Codec Pack\Uninstall.exe
YouTube FLV to AVI converter Pro 2.2.5-->"C:\Programme\Easiestutils\YouTube FLV to AVI converter Pro\unins000.exe"
ZoneAlarm Security Suite-->C:\Programme\Zone Labs\ZoneAlarm\zauninst.exe

« 14.04.09, 12:31:06 »

======Hosts File======

127.0.0.1 activate.adobe.com

======Security center information======

AV: ZoneAlarm Security Suite Antivirus (outdated)
AV: Avira AntiVir PersonalEdition (outdated)
FW: ZoneAlarm Security Suite Firewall

======System event log======

Computer Name: FABIAN
Event Code: 62486
Message: Invalid parameters

Record Number: 29608
Source Name: ati2mtag
Time Written: 20090403184516.000000+120
Event Type: Informationen
User:

Computer Name: FABIAN
Event Code: 62486
Message: Invalid parameters

Record Number: 29607
Source Name: ati2mtag
Time Written: 20090403184516.000000+120
Event Type: Informationen
User:

Computer Name: FABIAN
Event Code: 62486
Message: Invalid parameters

Record Number: 29606
Source Name: ati2mtag
Time Written: 20090403184516.000000+120
Event Type: Informationen
User:

Computer Name: FABIAN
Event Code: 62486
Message: Invalid parameters

Record Number: 29605
Source Name: ati2mtag
Time Written: 20090403184516.000000+120
Event Type: Informationen
User:

Computer Name: FABIAN
Event Code: 62486
Message: Invalid parameters

Record Number: 29604
Source Name: ati2mtag
Time Written: 20090403184516.000000+120
Event Type: Informationen
User:

=====Application event log=====

Computer Name: FABIAN
Event Code: 4096
Message:
Record Number: 7504
Source Name: Avira AntiVir
Time Written: 20090317165118.000000+060
Event Type: Informationen
User: NT-AUTORITÄT\SYSTEM

Computer Name: FABIAN
Event Code: 4097
Message:
Record Number: 7503
Source Name: Avira AntiVir
Time Written: 20090317165110.000000+060
Event Type: Informationen
User: NT-AUTORITÄT\SYSTEM

Computer Name: FABIAN
Event Code: 1800
Message: Der Windows-Sicherheitscenterdienst wurde gestartet.

Record Number: 7502
Source Name: SecurityCenter
Time Written: 20090317155745.000000+060
Event Type: Informationen
User:

Computer Name: FABIAN
Event Code: 100
Message:
Record Number: 7501
Source Name: MySQL
Time Written: 20090317155728.000000+060
Event Type: Informationen
User:

Computer Name: FABIAN
Event Code: 100
Message:
Record Number: 7500
Source Name: MySQL
Time Written: 20090317155728.000000+060
Event Type: Informationen
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Programme\Microsoft DirectX SDK (August 2007)\Utilities\Bin\x86;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Programme\Smart Projects\IsoBuster;C:\Programme\ATI Technologies\ATI.ACE\Core-Static;C:\Programme\QuickTime\QTSystem\;C:\Programme\Microsoft SQL Server\90\Tools\binn\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Programme\Java\jre1.6.0_05\lib\ext\QTJava.zip
"QTJAVA"=C:\Programme\Java\jre1.6.0_05\lib\ext\QTJava.zip
"RGSCLauncher"=C:\Programme\Rockstar Games\Rockstar Games Social Club
"RGSC"=C:\Programme\Rockstar Games\Rockstar Games Social Club\1_0_0_0
"tvdumpflags"=8
"DXSDK_DIR"=C:\Programme\Microsoft DirectX SDK (August 2007)\
"VS90COMNTOOLS"=F:\Programme\Microsoft Visual Studio 9.0\Common7\Tools\

-----------------EOF-----------------

« 14.04.09, 12:40:02 »

Okay schuld an den weiterleitungen ist der Trojan.DNS Changer. Ladt dir bitte Combofix runter und wende es an wie auf dieser Seite steht:

http://virus-protect.org/artikel/tools/combofix.html

Logfile posten!!!

« 14.04.09, 13:20:14 »

ComboFix 09-04-14.08 - Jedi 14.04.2009 12:58.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.49.1031.18.3327.2730 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Jedi\Desktop\ComboFix.exe
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Outdated)
AV: ZoneAlarm Security Suite Antivirus *On-access scanning disabled* (Outdated)
FW: ZoneAlarm Security Suite Firewall *disabled*
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\BReWErS.dll
c:\windows\system32\drivers\gaopdxdcsqxfwwinvrfixkguefmaudcxoqrinf.sys
c:\windows\system32\gaopdxcounter
c:\windows\system32\gaopdxijhsmkhfkdreajuyhymedemaoukpwjuj.dll

.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_ILVMONEYDRIVER53
-------\Legacy_XPROTECTOR
-------\Service_IlvMoneyDRIVER53

((((((((((((((((((((((( Dateien erstellt von 2009-03-14 bis 2009-04-14 ))))))))))))))))))))))))))))))
.

« 14.04.09, 13:20:41 »

2009-04-14 10:43 . 2009-04-14 10:43   --------   d-----w   c:\programme\CleanUp!
2009-04-14 10:15 . 2009-04-14 10:15   --------   d-----w   C:\rsit
2009-04-14 10:11 . 2009-04-14 10:11   --------   d-----w   c:\programme\Trend Micro
2009-04-10 23:23 . 2009-04-10 23:23   41808   ----a-w   c:\windows\system32\xfcodec.dll
2009-04-08 17:18 . 2009-04-08 17:18   --------   d-----w   c:\programme\Gemeinsame Dateien\Adobe AIR
2009-04-08 11:42 . 2009-04-08 11:42   --------   d-----w   c:\dokumente und einstellungen\Jedi\Lokale Einstellungen\Anwendungsdaten\WarRockDF
2009-04-07 23:33 . 2009-04-07 23:34   --------   d-----w   c:\programme\mp3DirectCut
2009-04-07 14:04 . 2009-04-07 23:11   --------   d-----w   c:\dokumente und einstellungen\Jedi\Anwendungsdaten\FileZilla
2009-04-07 14:03 . 2009-04-07 14:03   --------   d-----w   c:\programme\FileZilla FTP Client
2009-04-07 11:38 . 2009-04-07 11:38   --------   d-----w   c:\dokumente und einstellungen\Jedi\Library
2009-04-07 11:38 . 2009-04-07 11:38   --------   d-----w   c:\dokumente und einstellungen\Jedi\Anwendungsdaten\com.adobe.ExMan
2009-04-07 00:35 . 2009-04-07 00:35   --------   d-----w   c:\dokumente und einstellungen\Jedi\Anwendungsdaten\MAGIX
2009-04-07 00:32 . 2007-04-27 07:43   120200   ----a-w   c:\windows\system32\DLLDEV32i.dll
2009-04-07 00:32 . 2009-04-07 00:34   --------   d-----w   c:\windows\system32\MAGIX
2009-04-07 00:32 . 2009-04-07 00:34   7119   ----a-w   c:\windows\mgxoschk.ini
2009-04-07 00:32 . 2008-04-15 13:14   700416   ----a-w   c:\windows\system32\mgxoschk.dll
2009-04-07 00:14 . 2009-04-07 00:14   --------   d-----w   c:\programme\Gemeinsame Dateien\SWF Studio
2009-04-06 20:54 . 2009-04-06 21:19   --------   d-----w   c:\dokumente und einstellungen\All Users\Anwendungsdaten\FLEXnet
2009-04-06 20:41 . 2009-04-06 20:41   --------   d-----w   c:\programme\Adobe Media Player
2009-04-06 20:35 . 2009-04-06 20:35   --------   d-----w   c:\programme\Gemeinsame Dateien\Macrovision Shared
2009-04-06 19:53 . 2009-04-07 20:13   --------   d-----w   c:\dokumente und einstellungen\Jedi\Anwendungsdaten\Download Manager
2009-04-06 19:49 . 2009-04-06 19:49   --------   d-----w   c:\programme\BestPlayer
2009-04-06 19:48 . 2009-04-06 19:48   24576   ----a-w   c:\dokumente und einstellungen\Jedi\Lokale Einstellungen\Anwendungsdaten\cp_setup_assist.exe
2009-04-06 17:23 . 2008-10-16 12:06   27496   ----a-w   c:\windows\system32\mucltui.dll.mui
2009-04-06 17:23 . 2008-10-16 12:06   268648   ----a-w   c:\windows\system32\mucltui.dll
2009-04-05 23:06 . 2009-01-09 19:19   1089883   -c----w   c:\windows\system32\dllcache\ntprint.cat
2009-04-05 22:56 . 2009-04-14 11:04   827984   ----a-w   c:\dokumente und einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
2009-04-05 22:38 . 2009-04-05 22:44   --------   d-----w   c:\windows\SxsCaPendDel
2009-04-05 21:27 . 2009-04-05 21:27   --------   d-s---w   c:\dokumente und einstellungen\Jedi\UserData
2009-04-05 21:19 . 2009-04-05 21:19   --------   d-----w   c:\windows\system32\js
2009-04-05 21:19 . 2009-04-05 21:19   --------   d-----w   c:\windows\system32\html
2009-04-05 21:19 . 2009-04-05 21:19   --------   d-----w   c:\windows\system32\css
2009-04-05 21:19 . 2009-04-05 21:19   --------   d-----w   c:\windows\system32\images
2009-04-05 21:19 . 2009-04-05 21:19   --------   d-----w   c:\programme\Business Objects
2009-04-05 21:13 . 2009-04-05 21:13   --------   d-----w   c:\dokumente und einstellungen\All Users\Anwendungsdaten\PreEmptive Solutions
2009-04-05 21:09 . 2009-04-05 21:09   --------   d-----w   c:\windows\symbols
2009-04-05 21:08 . 2009-04-05 21:13   --------   d-----w   c:\programme\Gemeinsame Dateien\Merge Modules
2009-04-05 21:08 . 2009-04-05 21:10   --------   d-----w   c:\programme\HTML Help Workshop
2009-04-05 21:08 . 2009-04-05 21:08   --------   d-----w   c:\programme\CE Remote Tools
2009-04-05 20:19 . 2007-07-19 16:14   3886440   ----a-w   c:\windows\system32\d3dx9d_35.dll
2009-04-05 20:19 . 2007-07-02 10:00   106696   ----a-w   c:\windows\system32\d3dref.dll
2009-04-05 20:19 . 2007-07-02 10:00   3799400   ----a-w   c:\windows\system32\d3dx9d_33.dll
2009-04-05 20:19 . 2007-07-02 10:00   349416   ----a-w   c:\windows\system32\d3dref9.dll
2009-04-05 20:19 . 2007-07-02 10:00   248008   ----a-w   c:\windows\system32\d3dref8.dll
2009-04-05 20:17 . 2009-04-05 20:19   --------   d-----w   c:\programme\Microsoft DirectX SDK (August 2007)
2009-04-05 19:41 . 2009-04-05 19:41   --------   d-----w   c:\programme\Microsoft Visual Studio .NET 2003
2009-04-05 13:40 . 2009-04-05 13:40   --------   d-----w   c:\programme\MSXML 6.0
2009-04-05 13:38 . 2009-04-05 23:10   --------   d-----w   c:\programme\Microsoft SQL Server
2009-04-05 13:37 . 2009-04-05 13:37   --------   d-----w   c:\programme\Microsoft Device Emulator
2009-04-05 13:36 . 2009-04-05 13:37   --------   d-----w   c:\programme\Windows Mobile 5.0 SDK R2
2009-04-05 13:35 . 2009-04-05 13:35   --------   d-----w   c:\programme\Microsoft Synchronization Services
2009-04-05 13:35 . 2009-04-05 13:35   --------   d-----w   c:\programme\Microsoft SQL Server Compact Edition
2009-04-05 13:23 . 2009-04-05 13:23   --------   d-----w   c:\programme\Microsoft SDKs
2009-04-05 13:23 . 2009-04-05 21:08   --------   d-----w   c:\programme\Microsoft.NET
2009-04-05 13:21 . 2009-04-05 13:22   --------   d-----w   c:\programme\Microsoft Web Designer Tools
2009-04-05 13:21 . 2009-04-05 13:21   --------   d--h--r   C:\MSOCache
2009-04-05 13:20 . 2009-04-05 13:20   --------   d-----w   c:\dokumente und einstellungen\Jedi\Lokale Einstellungen\Anwendungsdaten\Microsoft Help
2009-04-05 13:20 . 2009-04-05 22:30   --------   d-----w   c:\dokumente und einstellungen\All Users\Anwendungsdaten\Microsoft Help
2009-04-05 11:44 . 2009-04-05 11:44   --------   d-----w   c:\dokumente und einstellungen\Jedi\Anwendungsdaten\TeamViewer
2009-04-05 11:44 . 2009-04-05 11:44   --------   d-----w   c:\programme\TeamViewer
2009-04-05 11:44 . 2009-04-05 11:44   --------   d-----w   c:\dokumente und einstellungen\Jedi\temp
2009-04-04 23:52 . 2009-04-04 23:52   --------   d-----w   c:\dokumente und einstellungen\Jedi\Anwendungsdaten\Malwarebytes
2009-04-04 23:52 . 2009-01-04 16:38   15504   ----a-w   c:\windows\system32\drivers\mbam.sys
2009-04-04 23:52 . 2009-01-04 16:38   38496   ----a-w   c:\windows\system32\drivers\mbamswissarmy.sys
2009-04-04 23:52 . 2009-04-04 23:52   --------   d-----w   c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2009-04-04 23:52 . 2009-04-04 23:52   --------   d-----w   c:\programme\Malwarebytes' Anti-Malware
2009-04-04 11:46 . 2007-09-11 17:30   782336   ----a-r   c:\windows\system32\tmp4E.tmp
2009-04-04 11:46 . 2007-09-11 17:30   782336   ----a-r   c:\windows\system32\tmp4D.tmp
2009-04-03 20:55 . 2009-04-03 21:09   --------   d-----w   c:\programme\Flash-SWF to AVI-GIF
2009-04-03 15:10 . 2009-04-03 15:10   --------   d-----w   c:\programme\Vertus Play With Pictures
2009-04-02 19:25 . 2006-12-29 14:49   27648   ----a-w   c:\windows\system32\drivers\GMFilter.sys
2009-04-02 19:25 . 2009-04-02 19:25   --------   d-----w   c:\programme\Trust
2009-04-02 19:25 . 2006-12-27 16:44   1146880   ----a-w   c:\windows\system32\MousePage.dll
2009-04-02 19:25 . 2006-12-27 11:05   229376   ----a-w   c:\windows\system32\Hook.dll
2009-04-02 19:25 . 2006-12-26 15:53   679936   ----a-w   c:\windows\system32\XIndicator.dll
2009-04-02 19:25 . 2006-12-26 15:53   2637824   ----a-w   c:\windows\system32\XWheel.dll
2009-04-02 19:25 . 2009-04-02 19:25   --------   d-----w   C:\download
2009-04-01 15:04 . 2009-04-01 15:04   57344   ----a-w   c:\windows\system32\ASTSRV.EXE
2009-03-30 14:21 . 2009-03-30 14:21   --------   d-----w   c:\dokumente und einstellungen\Jedi\Lokale Einstellungen\Anwendungsdaten\Help
2009-03-29 20:38 . 2009-03-29 20:38   38   ----a-w   c:\windows\AviSplitter.INI
2009-03-27 14:05 . 2009-03-27 15:47   --------   d-----w   C:\usermaps
2009-03-25 14:53 . 2009-03-29 00:05   --------   d-----w   c:\dokumente und einstellungen\Jedi\Anwendungsdaten\Hamachi
2009-03-25 14:52 . 2009-03-25 14:52   25280   ----a-w   c:\windows\system32\drivers\hamachi.sys
2009-03-25 14:52 . 2009-03-25 14:53   --------   d-----w   c:\programme\Hamachi
2009-03-25 12:54 . 2009-03-25 12:54   --------   d-----w   c:\dokumente und einstellungen\Jedi\Anwendungsdaten\MailFrontier
2009-03-25 12:54 . 2009-02-18 22:10   1221512   ----a-w   c:\windows\system32\zpeng25.dll
2009-03-24 15:12 . 2009-03-24 19:33   --------   d-----w   c:\programme\Tropico
2009-03-24 09:44 . 2009-03-24 09:44   0   ----a-w   c:\windows\Editor.INI
2009-03-21 15:28 . 2009-03-21 15:28   --------   d-----w   c:\programme\IVAO
2009-03-17 18:44 . 2009-04-06 18:25   1430   ----a-w   C:\rollback.ini

« Virus im system32 Ordner -.-		avp.exe - komponente nicht gefunden/wuauclt.exe hat ein problem festgestellt »

AntiVir, Zonealarm machen keine Updates mehr, Probleme mit Google, Malwarebytes

Antworten zu AntiVir, Zonealarm machen keine Updates mehr, Probleme mit Google, Malwarebytes: