[Anthrax]

Hallo.

Ich habe das Problem das sich mein Browser (Opera 8.5) alle paar Sekunden selbstständig öffnet und mir mind. 1 Seite mit Werbung öffnet.

Mein Avast Antivirenprog sagt meine Platte wäre Clean.
Spybot, Adware und Adaware (Jeweils die neusten Versionen) finden auch nichts.

Was kann ich noch tun?

Bitte, es nervt tierisch, ausserdem traue ich mich nicht mehr an mein Mailkonto und Internet Banking heran (wegen keylogger oder ewentueller Trojaner)

[Graumagier]

Lass mal HijackThis durchlaufen und poste die Logdatei hier.

[andreas726]

Ich würde mal den CWS chredder drüber laufen lassen

[timmy]

wenn du mal einen richtigen rundumschlag wegen spyware machen willst, empfehle ich dir hitman pro (cws ist auch dabei).
http://www.winload.de/download/46986/Utili....Pro-2.2.1.html

ich habe das programm bei mir laufen und es ist faszinierend, dem treiben zuzuschauen. das programm installiert und updatet einige bekannte programme. die bereinigung passiert auf knopfdruck - einfach nur zuschauen.

[Anthrax]

hallo.

Also keines eurer genannten Programme konnten mir helfen. Sie haben zwar bei jedem Durchlauf etwas gefunden jedoch nicht beseitigt.

Ich poste hier mal den LOG von SpyBot:


--- Search result list ---


--- System information ---
Windows XP (Build: 2600) Service Pack 2
/ Windows XP / SP3: Windows XP-Hotfix - KB873333
/ Windows XP / SP3: Windows XP-Hotfix - KB873339
/ Windows XP / SP3: Windows XP-Hotfix - KB885250
/ Windows XP / SP3: Windows XP-Hotfix - KB885835
/ Windows XP / SP3: Windows XP-Hotfix - KB885836
/ Windows XP / SP3: Windows XP-Hotfix - KB886185
/ Windows XP / SP3: Windows XP-Hotfix - KB887742
/ Windows XP / SP3: Windows XP-Hotfix - KB888113
/ Windows XP / SP3: Windows XP-Hotfix - KB888302
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB890046)
/ Windows XP / SP3: Windows XP-Hotfix - KB890859
/ Windows XP / SP3: Windows XP-Hotfix - KB891781
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB893066)
/ Windows XP / SP3: Windows XP-Hotfix - KB893086
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB893756)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Update für Windows XP (KB894391)
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB896358)
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB896422)
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB896423)
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB896428)
/ Windows XP / SP3: Update für Windows XP (KB896727)
/ Windows XP / SP3: Update für Windows XP (KB898461)
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB899587)
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB899588)
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB899591)
/ Windows XP / SP3: Sicherheitsupdate für Windows XP (KB901214)


--- Startup entries list ---
Located: HK_LM:Run, \\Anja\EPSON Stylus DX3800 Series
command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P33 "\\Anja\EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
file: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
size: 98304
MD5: b9297016cbc59d2d5631cc982479cc96

Located: HK_LM:Run, avast!
command: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
file: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 98352
MD5: 7d81810f0d5aefa2b0fbc80539330c83

Located: HK_LM:Run, BluetoothAuthenticationAgent
command: rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
file: C:\WINDOWS\system32\rundll32.exe
size: 33792
MD5: 9082ad264d95541ddc7cb2ac6513dc0d

Located: HK_LM:Run, DAEMON Tools-1033
command: "C:\Programme\D-Tools\daemon.exe" -lang 1033
file: C:\Programme\D-Tools\daemon.exe
size: 81920
MD5: 804fbb66ec6ca862b840d173efc638a7

Located: HK_LM:Run, NeroFilterCheck
command: C:\WINDOWS\system32\NeroCheck.exe
file: C:\WINDOWS\system32\NeroCheck.exe
size: 155648
MD5: 3e4c03cefad8de135263236b61a49c90

Located: HK_LM:Run, Anti-Blaxx Manager (DISABLED)
command: C:\Programme\Anti-Blaxx\Anti-Blaxx.exe
file: C:\Programme\Anti-Blaxx\Anti-Blaxx.exe
size: 212992
MD5: 3433522ff9bac758620e0c87d38beb6b

Located: HK_LM:Run, SoundMan (DISABLED)
command: SOUNDMAN.EXE
file: C:\WINDOWS\SOUNDMAN.EXE
size: 77824
MD5: fbef9f9c97b6b93e2041e65d3cd81c9c

Located: HK_LM:Run, SunJavaUpdateSched (DISABLED)
command: C:\Programme\Java\jre1.5.0_04\bin\jusched.exe
file: C:\Programme\Java\jre1.5.0_04\bin\jusched.exe
size: 36975
MD5: d3e445a99a1142c35d8d3100b5564591

Located: HK_LM:Run, VC7Player (DISABLED)
command: C:\Programme\HHVcdV7Sys\VC7Play.exe
file: C:\Programme\HHVcdV7Sys\VC7Play.exe
size: 233472
MD5: 849a793655a83c1a4d9c86d2c85a9ca2

Located: HK_CU:Run, SAFEPRO2006
command: "C:\Programme\Steganos Safe Professional 2006\SAFEPRO2006.exe" -boot
file: C:\Programme\Steganos Safe Professional 2006\SAFEPRO2006.exe
size: 2195456
MD5: e97a6d16676fcbf13c97c5c643454c86

Located: HK_CU:Run, SpybotSD TeaTimer
command: C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
size: 1415824
MD5: 70496eee0ddbe485f658693826f44d38

Located: HK_CU:Run, Steam
command: "d:\spiele\steam\steam.exe" -silent
file: d:\spiele\steam\steam.exe
size: 1249280
MD5: cde5895db998d361a2d95647d1da4bbf

Located: Startup (allgemein), Adobe Reader - Schnellstart.lnk
command: C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
file: C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
size: 29696
MD5: 43362b96870ce8649f4f2ec893da93f0

Located: Startup (Benutzer), Steam.lnk
command: D:\Spiele\Steam\steam.exe
file: D:\Spiele\Steam\steam.exe
size: 1249280
MD5: cde5895db998d361a2d95647d1da4bbf

Located: Startup (Benutzer), Xfire.lnk
command: C:\Programme\Xfire\Xfire.exe
file: C:\Programme\Xfire\Xfire.exe
size: 3248776
MD5: b1c8cdd110fecfe233b4010f4653f216

Located: Startup (deaktiviert), WlanUtility (DISABLED)
command: C:\PROGRA~1\MICROS~2\WLANUT~1\WLANUT~1.EXE
file: C:\PROGRA~1\MICROS~2\WLANUT~1\WLANUT~1.EXE
size: 146944
MD5: 00170bf8fabd2fbaaa4c0c2b173db4ff

Located: Startup (deaktiviert), Adobe Gamma (DISABLED)
command: C:\PROGRA~1\GEMEIN~1\Adobe\CALIBR~1\ADOBEG~1.EXE
file: C:\PROGRA~1\GEMEIN~1\Adobe\CALIBR~1\ADOBEG~1.EXE
size: 113664
MD5: c2ff17734176cd15221c10044ef0ba1a

Located: Startup (deaktiviert), GM_DevUpdate (DISABLED)
command: C:\PROGRA~1\SPEED-~1\GM_DEV~1.EXE
file: C:\PROGRA~1\SPEED-~1\GM_DEV~1.EXE
size: 45056
MD5: 47cf4152d5ab57c19cbf816c19a56c9a

Located: WinLogon, SMDEn
command: C:\WINDOWS\system32\kt46l7hs1.dll
file: C:\WINDOWS\system32\kt46l7hs1.dll
size: 0
MD5: d41d8cd98f00b204e9800998ecf8427e ?



--- Browser helper object list ---


--- ActiveX list ---
{0DD4ADBE-E91D-48CC-9A04-87EA1674E385} (PerfTesAXDemo Control)
DPF name:
CLSID name: PerfTesAXDemo Control
Installer:
Codebase: http://gamer.ubicom.com/benchmarks/PerfTes...Xproj_aug23.cab
Path: C:\WINDOWS\DOWNLO~1\
Long name: PerfTestCliActiveXproj.ocx
Short name: PERFTE~1.OCX
Date (created): 23.08.2005 16:43:38
Date (last access): 29.10.2005 14:48:56
Date (last write): 23.08.2005 16:43:38
Filesize: 721920
Attributes: archive
MD5: 0982293E58F3E3F401D517D095D51739
CRC32: 83D818B9
Version: 1.0.97.0

{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.5.0_04)
DPF name:
CLSID name: Java Plug-in 1.5.0_04
Installer:
Codebase:
description: Sun Java
classification: Legitimate
known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
info link:
info source: Patrick M. Kolla
Path: C:\Programme\Java\jre1.5.0_04\bin\
Long name: NPJPI150_04.dll
Short name: NPJPI1~1.DLL
Date (created): 03.06.2005 03:52:58
Date (last access): 29.10.2005 14:48:56
Date (last write): 03.06.2005 04:09:54
Filesize: 69746
Attributes: archive
MD5: 8548FE98BD687F35AFD0AED9C2A2DEE3
CRC32: 4058FA1B
Version: 5.0.40.5



--- Process list ---
PID: 0 ( 0) [System]
PID: 632 ( 4) \SystemRoot\System32\smss.exe
PID: 736 ( 632) \?\C:\WINDOWS\system32\winlogon.exe
PID: 780 ( 736) C:\WINDOWS\system32\services.exe
size: 108544
MD5: EDB6B81761BD60F32F740BBC40AFB676
PID: 792 ( 736) C:\WINDOWS\system32\lsass.exe
size: 13312
MD5: 183805EB05BCA5A1E4AAAED4D2BE3690
PID: 944 ( 780) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 65A819B121EB6FDAB4400EA42BDFFE64
PID: 1140 ( 780) C:\WINDOWS\system32\svchost.exe
size: 14336
MD5: 65A819B121EB6FDAB4400EA42BDFFE64
PID: 1444 ( 780) C:\WINDOWS\system32\spoolsv.exe
size: 57856
MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
PID: 1712 (1692) C:\WINDOWS\Explorer.EXE
size: 1035264
MD5: 22FE1BE02EADDE1632E478E4125639E0
PID: 1940 ( 780) C:\WINDOWS\ASUSKBService.exe
size: 90112
MD5: D88499D10981DFB9E5226ED8CF27AB13
PID: 1984 ( 780) C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
size: 53248
MD5: 84FF20F4A9E56507A719F41C6370D2AD
PID: 2000 ( 780) C:\Programme\Alwil Software\Avast4\ashServ.exe
size: 98352
MD5: 0B73CCD8ADDAE2DB248B518D6FA34F3E
PID: 2036 (1712) C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
size: 98352
MD5: 7D81810F0D5AEFA2B0FBC80539330C83
PID: 184 (1712) C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
size: 98304
MD5: B9297016CBC59D2D5631CC982479CC96
PID: 484 ( 780) C:\WINDOWS\system32\E_S00RP1.EXE
size: 65536
MD5: 9B3ECBF38CC2B378373B7278D36432C6
PID: 648 ( 780) C:\WINDOWS\system32\oodag.exe
size: 225280
MD5: 2DD5A7C3EC4B83A41E266DDAA345EB18
PID: 1400 ( 780) C:\WINDOWS\system32\SLEE12.exe
size: 36864
MD5: B04CC97A839074539714EED80C18D652
PID: 1552 ( 780) C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
size: 217600
MD5: AB2B9349ADA4AC5EC74B622B8303FE23
PID: 1604 ( 780) C:\WINDOWS\system32\MsPMSPSv.exe
size: 53248
MD5: 668056D5C3C11AB7D266819A96B964E8
PID: 2220 ( 780) C:\Programme\Alwil Software\Avast4\ashMaiSv.exe
size: 241712
MD5: 0CFDB435AE2F690752C7573DA798E3F4
PID: 2424 ( 780) C:\Programme\Alwil Software\Avast4\ashWebSv.exe
size: 360496
MD5: F5B1A6CAD8A64E87E653D01B7F755D23
PID: 3536 (1140) C:\WINDOWS\system32\wuauclt.exe
size: 124696
MD5: F75C8C6EFAEC023FE61A6F1C4AD6BC99
PID: 284 ( 780) C:\Programme\Webroot\Spy Sweeper\WRSSSDK.exe
size: 1707008
MD5: DAEFAA7868E113F200A70C2C8378BC65
PID: 280 (1712) C:\Programme\Opera\Opera.exe
size: 78336
MD5: D41BB411F163527D72E9F1C9C9789E90
PID: 600 (1712) C:\Programme\Spybot - Search & Destroy\SpybotSD.exe
size: 4393096
MD5: 09CA174A605B480318731E691DC98539
PID: 4 ( 0) System
PID: 708 ( 632) csrss.exe
PID: 1040 ( 780) svchost.exe
PID: 1228 ( 780) svchost.exe
PID: 1320 ( 780) svchost.exe
PID: 436 ( 780) svchost.exe
PID: 2772 ( 780) alg.exe


--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 29.10.2005 14:55:22

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft...=ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://192.168.0.1/
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft...=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.winfuture.de
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://www.microsoft.com/isapi/redir.dll?p...er=6&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://www.microsoft...=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://ie.search.msn...st/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://ie.search.msn...st/srchcust.htm


--- Winsock Layered Service Provider list ---
Protocol 0: MSAFD Tcpip [TCP/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 1: MSAFD Tcpip [UDP/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 2: MSAFD Tcpip [RAW/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip [*]

Protocol 3: RSVP UDP Service Provider
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\rsvpsp.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 4: RSVP TCP Service Provider
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\rsvpsp.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 5: MSAFD RfComm [Bluetooth]
GUID: {9FC48064-7298-43E4-B7BD-181F2089792A}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Bluetooth
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD RfComm [Bluetooth]

Protocol 6: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BC32286D-2116-4FAD-8E3F-808C2503EAD6}] SEQPACKET 8
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 7: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BC32286D-2116-4FAD-8E3F-808C2503EAD6}] DATAGRAM 8
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 8: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8AE26CA6-2F9D-4873-B143-056A0F49162E}] SEQPACKET 3
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 9: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8AE26CA6-2F9D-4873-B143-056A0F49162E}] DATAGRAM 3
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 10: MSAFD NetBIOS [\Device\NetBT_Tcpip_{C15A789D-CB29-4B30-ADA7-1A43C9675CC7}] SEQPACKET 5
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 11: MSAFD NetBIOS [\Device\NetBT_Tcpip_{C15A789D-CB29-4B30-ADA7-1A43C9675CC7}] DATAGRAM 5
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 12: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8A34295A-2725-4E3B-97C4-CA8F4EB68CE7}] SEQPACKET 6
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 13: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8A34295A-2725-4E3B-97C4-CA8F4EB68CE7}] DATAGRAM 6
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 14: MSAFD NetBIOS [\Device\NetBT_Tcpip_{76EB3D61-827B-468B-93A3-F5DAD63C24E3}] SEQPACKET 4
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 15: MSAFD NetBIOS [\Device\NetBT_Tcpip_{76EB3D61-827B-468B-93A3-F5DAD63C24E3}] DATAGRAM 4
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 16: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2652AF7A-2278-415A-B6DD-AAD7DD77138F}] SEQPACKET 7
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 17: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2652AF7A-2278-415A-B6DD-AAD7DD77138F}] DATAGRAM 7
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 18: MSAFD NetBIOS [\Device\NetBT_Tcpip_{28B270B5-0764-4AF1-B4F0-7F58AB40DA6B}] SEQPACKET 0
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 19: MSAFD NetBIOS [\Device\NetBT_Tcpip_{28B270B5-0764-4AF1-B4F0-7F58AB40DA6B}] DATAGRAM 0
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 20: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3AFB9CAE-2B61-4FF8-9CD5-ED15BB4C80E0}] SEQPACKET 1
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 21: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3AFB9CAE-2B61-4FF8-9CD5-ED15BB4C80E0}] DATAGRAM 1
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 22: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9C12693B-2ECC-46B4-955A-53BE25A9801A}] SEQPACKET 2
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 23: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9C12693B-2ECC-46B4-955A-53BE25A9801A}] DATAGRAM 2
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Namespace Provider 0: TCP/IP
GUID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
Filename: %SystemRoot%\System32\mswsock.dll
Description: Microsoft Windows NT/2k/XP TCP/IP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: TCP/IP

Namespace Provider 1: NTDS
GUID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
Filename: %SystemRoot%\System32\winrnr.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\winrnr.dll
DB protocol: NTDS

Namespace Provider 2: NLA-Namespace
GUID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
Filename: %SystemRoot%\System32\mswsock.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: NLA-Namespace

Namespace Provider 3: Bluetooth-Namespace
GUID: {06AA63E0-7D60-41FF-AFB2-3EE6D2D9392D}
Filename: %SystemRoot%\system32\wshbth.dll
Description: Bluetooth
DB filename: %SystemRoot%\system32\wshbth.dll
DB protocol: Bluetooth-Namespace



--- Uninstall list ---
Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal)
uninstall cmd: C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
publisher: Lavasoft
help link: http://www.lavasoft.com

Adobe Photoshop CS2 9.0 (Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D})
version: 9
version (major): 9
install location: C:\Programme\Adobe\Adobe Photoshop CS2\
uninstall cmd: msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
publisher: Adobe Systems, Inc.
comments:
contact: Customer Support
help link: http://www.adobe.com/support/main.html
help telephone: 1-555-555-4505

ATI - Software Uninstall Utility 6.14.10.1013 (All ATI Software)
install location: C:\Programme\ATI Technologies\UninstallAll
uninstall cmd: C:\Programme\ATI Technologies\UninstallAll\AtiCimUn.exe

Anti-Blaxx 1.17 (Anti-Blaxx_is1)
install location: C:\Programme\Anti-Blaxx\
uninstall cmd: C:\Programme\Anti-Blaxx\unins000.exe
publisher: MB-Soft
help link: http://www.mb-lock.ch.vu

AnyDVD (AnyDVD)
install location: C:\Programme\SlySoft\AnyDVD
uninstall cmd: "C:\Programme\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Programme\SlySoft\AnyDVD"
publisher: SlySoft

ATI Display Driver 8.172-050830a1-026409C-ATI (ATI Display Driver)
uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@1
6 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

avast! Antivirus 4.6 (avast!)
version (major): 4
version (minor): 6
install location: C:\PROGRA~1\ALWILS~1\Avast4
install source: C:\PROGRA~1\ALWILS~1\Avast4\setup
uninstall cmd: rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
publisher: Alwil Software
help link: http://www.avast.at

BitComet 0.60 0.60 (BitComet)
uninstall cmd: C:\Programme\BitComet\uninst.exe
publisher: ~RnySmile~

BPS Spyware & Adware Remover 9.2.0.9 (BPS Spyware & Adware Remover_is1)
install location: C:\Programme\BulletProofSoft.com\BPS Spyware & Adware Remover\
uninstall cmd: "C:\Programme\BulletProofSoft.com\BPS Spyware & Adware Remover\unins000.exe"
publisher: BulletProofSoft.com
help link: http://www.BulletProofSoft.com

BPS Spyware-Adware Remover 8.2.0.2 (BPS Spyware-Adware Remover_is1)
uninstall cmd: C:\Programme\BulletProofSoft.com\SpywareRemover\unins000.exe
publisher: BulletProofSoft.com
help link: http://www.BulletProofSoft.com

(Branding)

CINEMA 4D Release 9 STUDIO-Bundle (CINEMA 4D Release 9 STUDIO-Bundle)
uninstall cmd: C:\WINDOWS\unvise32.exe C:\Programme\MAXON\CINEMA 4D R9\uninstal_C4D.log

CloneDVD2 (CloneDVD2)
install location: C:\Programme\Elaborate Bytes\CloneDVD2
uninstall cmd: "C:\Programme\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Programme\Elaborate Bytes\CloneDVD2"
publisher: Elaborate Bytes

(Connection Manager)

DC++ 0.674 0.674 (DC++)
install location: C:\Programme\DC++
uninstall cmd: "C:\Programme\DC++\uninstall.exe"
publisher: Jacek Sieka
help link: http://dcplusplus.so...orge.net/forum/

Firebird SQL Server (D) 1.5.2.4732 (Firebird SQL Server D)
install location: C:\Programme\MAGIX\Common\Database
uninstall cmd: C:\Programme\MAGIX\Common\Database\uninstall.exe

HijackThis 1.99.1 1.99.1 (HijackThis)
uninstall cmd: C:\Dokumente und Einstellungen\Der_Freak\Desktop\HijackThis.exe /uninstall
publisher: Soeperman Enterprises Ltd.

HLSW v1.0.0.45 (HLSW_is1)
install location: C:\Programme\HLSW\
uninstall cmd: "C:\Programme\HLSW\unins000.exe"
publisher: Timo Stripf
help link: http://www.hlsw.net

(InstallShield Uninstall Information)

ASUS Enhanced Display Driver 6.14.10.0111 (InstallShield_{315ACD04-BCEB-478B-9B1D-5431D0E6CB11})
version: 101580810
version (major): 6
version (minor): 14
estimated size: 1732
install date: 20051010
install source: F:\ASUSDISP\
uninstall cmd: C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}
publisher: ASUSTeK COMPUTER INC.
comments: N/A
contact: Customer Support Department
help link: http://www.asus.com
help telephone: 886-2-2890-7121

IrfanView (remove only) (IrfanView)
uninstall cmd: C:\Programme\IrfanView\iv_uninstall.exe

(KB884016)

(KB893803)

LimeWire PRO 4.9.23 4.9.23 (LimeWire)
uninstall cmd: "C:\Programme\LimeWire\uninstall.exe"
publisher: Lime Wire, LLC
help link: http://www.limewire.com/support

MAGIX Foto Manager 2006 (D) 3.0.1.80 (MAGIX Foto Manager 2006 D)
install location: C:\Programme\MAGIX\Foto_Manager_2006
uninstall cmd: C:\Programme\MAGIX\Foto_Manager_2006\instslct.exe
publisher: MAGIX AG

MAGIX music maker 2006 deLuxe 11.0.0.25 (MAGIX music maker 2006 deLuxe)
install location: C:\Programme\magix_2006_deLuxe
uninstall cmd: C:\Programme\magix_2006_deLuxe\instslct.exe
publisher: MAGIX AG

MAGIX Music Manager 1.1.1.692 (MAGIX Music Manager)
install location: C:\Programme\Music_Manager
uninstall cmd: C:\Programme\Music_Manager\instslct.exe
publisher: MAGIX AG

MAGIX Online Druck Service (MAGIX Online Druck Service)
uninstall cmd: C:\PROGRA~1\MAGIXO~1\\\UNWISE.EXE C:\PROGRA~1\MAGIXO~1\\\INSTALL.LOG
publisher: Silverwire Software GmbH

MAXON Sprach-Set 9.0 (MAXON Sprach-Set 9.0)
uninstall cmd: C:\WINDOWS\unvise32.exe C:\Programme\MAXON\CINEMA 4D R9\Language_90.log

mIRC (mIRC)
uninstall cmd: "C:\Programme\mIRC-NN\mirc.exe" -uninstall

(MSI30-Beta1)

(MSI30-Beta2)

(MSI30-KB884016)

(MSI30-RC1)

(MSI30-RC2)

(MSI30a-KB884016)

(MSI31-Beta)

(MSI31-RC1)

Nero 6 Ultra Edition (Nero - Burning Rom!UninstallKey)
uninstall cmd: C:\Programme\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL

NVIDIA Drivers (NVIDIA Drivers)
uninstall cmd: C:\WINDOWS\system32\NVUNINST.EXE UninstallGUI

Opera (Opera)
uninstall cmd: C:\PROGRA~1\Opera\uninst\unwise.exe C:\PROGRA~1\Opera\uninst\install.log

(PCHealth)
uninstall cmd: rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

Project Entropia (Project Entropia)
install location: d:\spiele\Project Entropia
install source: PE_Installer.exe
uninstall cmd: d:\spiele\Project Entropia\Uninstall.exe
publisher: MindArk PE

PSPad editor (PSPad editor_is1)
install location: C:\Programme\PSPad\
uninstall cmd: C:\Programme\PSPad\unins000.exe
publisher: Jan Fiala
help link: http://www.pspad.com

Serious Samurize (Serious Samurize)
uninstall cmd: "C:\Programme\Samurize\Uninstall.exe"

Serious Sam 2 (SeriousSam2)
uninstall cmd: d:\spiele\Serious Sam 2\Bin\Uninstall.exe

Speed-Link Vibration Joystick (Speed-Link Vibration Joystick)
uninstall cmd: C:\PROGRA~1\SPEED-~1\UNWISE.EXE C:\PROGRA~1\SPEED-~1\INSTALL.LOG

Spybot - Search & Destroy 1.4 1.4 (Spybot - Search & Destroy_is1)
install location: C:\Programme\Spybot - Search & Destroy\
uninstall cmd: "C:\Programme\Spybot - Search & Destroy\unins000.exe"
publisher: Safer Networking Limited

Spyware Doctor 3.2 3.2 (Spyware Doctor_is1)
install location: C:\Programme\Spyware Doctor\
uninstall cmd: "C:\Programme\Spyware Doctor\unins000.exe"
publisher: PC Tools
help link: http://www.pctools.c...doctor/support/

SpywareBlaster v3.4 3.4.0 (SpywareBlaster_is1)
install location: C:\Programme\SpywareBlaster\
uninstall cmd: "C:\Programme\SpywareBlaster\unins000.exe"
publisher: Javacool Software LLC

Steam™ (Steam™)
uninstall cmd: D:\Spiele\steam\UNWISE.EXE D:\Spiele\steam\INSTALL.LOG
publisher: Valve
help link: http://support.steampowered.com

TeamSpeak 2 RC2 2.0.32.60 (Teamspeak 2 RC2_is1)
uninstall cmd: C:\Programme\Teamspeak2_RC2\unins000.exe
publisher: Dominating Bytes Design
help link: http://www.teamspeak.org

Total Commander (Remove or Repair) (Totalcmd)
uninstall cmd: c:\programme\totalcmd\tcuninst.exe

TreeSize Professional 3.31 (TreeSize Professional_is1)
install location: C:\Programme\JAM Software\TreeSize Professional\
uninstall cmd: "C:\Programme\JAM Software\TreeSize Professional\unins000.exe"
publisher: JAM Software
help link: mailto:[email protected]

Trillian (Trillian)
uninstall cmd: C:\Programme\Trillian\trillian.exe /uninstall

VideoLAN VLC media player 0.8.2 0.8.2 (VLC media player)
uninstall cmd: C:\Programme\VideoLAN\VLC\uninstall.exe
publisher: VideoLAN Team

Winamp (remove only) (Winamp)
uninstall cmd: "C:\Programme\Winamp\UninstWA.exe"

WinRAR Archivierer (WinRAR archiver)
uninstall cmd: C:\Programme\WinRAR\uninstall.exe

Xfire (remove only) (Xfire)
uninstall cmd: "C:\Programme\Xfire\uninst.exe"

XoftSpy (XoftSpy)
uninstall cmd: C:\Programme\XoftSpy\uninstall.exe

Steganos Safe Professional 2006 8.0.5 ({00000000-5736-4205-1000-1C16B5FB63D5})
version: 134217733
version (major): 8
estimated size: 20697
install date: 20050927
install location: C:\Programme\Steganos Safe Professional 2006\
install source: C:\Programme\Steganos Safe Professional 2006 Admin\client\
uninstall cmd: MsiExec.exe /I{00000000-5736-4205-1000-1C16B5FB63D5}
publisher: Steganos GmbH

Battlefield 2™ ({04858915-9F49-4B2A-AED4-DC49A7DE6A7B})
version: 16777216
install date: 20050824
install location: d:\spiele\Battlefield 2
install source: F:\
uninstall cmd: RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x7 -removeonly

ATI Control Panel 6.14.10.5166 ({0BEDBD4E-2D34-47B5-9973-57E62B29307C})
uninstall cmd: RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"

Adobe Photoshop CS2 9.0 ({236BB7C4-4419-42FD-0409-1E257A25E34D})
version: 150994944
version (major): 9
estimated size: 812052
install date: 20051025
install location: C:\Programme\Adobe\Adobe Photoshop CS2\
install source: G:\Adobe® Photoshop® CS2\
publisher: Adobe Systems, Inc.
comments:
contact: Customer Support
help link: http://www.adobe.com/support/main.html
help telephone: 1-555-555-4505

BOINC 4.45.0000 ({2D671126-CF09-4B0A-9F9C-DE3617C2DF46})
version: 70057984
version (major): 4
version (minor): 45
estimated size: 4693
install date: 20050922
install location: C:\Programme\BOINC\
install source: C:\WINDOWS\Downloaded Installations\{5B7B52CF-9DBD-43B0-B04E-A4B989284EB7}\
uninstall cmd: MsiExec.exe /I{2D671126-CF09-4B0A-9F9C-DE3617C2DF46}
publisher: Space Sciences Laboratory, U.C. Berkeley
comments: Berkeley Open Infrastructure for Network Computing (BOINC)
help link: http://boinc.berkeley.edu/

ASUS Enhanced Display Driver 6.14.10.0111 ({315ACD04-BCEB-478B-9B1D-5431D0E6CB11})
version: 101580810
version (major): 6
version (minor): 14
estimated size: 1732
install date: 20051010
install source: F:\ASUSDISP\
publisher: ASUSTeK COMPUTER INC.
comments: N/A
contact: Customer Support Department
help link: http://www.asus.com
help telephone: 886-2-2890-7121

J2SE Runtime Environment 5.0 Update 4 1.5.0.40 ({3248F0A8-6813-11D6-A77B-00B0D0150040})
version: 17104896
version (major): 1
version (minor): 5
estimated size: 121261
install date: 20050916
install source: http://java.sun.com/webapps/download/GetFi...5/windows-i586/
uninstall cmd: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
publisher: Sun Microsystems, Inc.
contact: http://java.com
help link: http://java.com
readme: C:\Programme\Java\jre1.5.0_04\README.txt

WebFldrs XP 9.50.7523 ({350C97B3-3D7C-4EE8-BAA9-00BCB3D54227})
version: 154279267
version (major): 9
version (minor): 50
estimated size: 2584
install date: 20050823
install source: C:\WINDOWS\system32\
publisher: Microsoft Corporation
help link: http://www.microsoft.com/windows

DAEMON Tools 3.47.0 ({3DED3A72-61A8-4B87-98A5-EF0BC8038AA0})
version: 53411840
version (major): 3
version (minor): 47
estimated size: 821
install date: 20050920
install source: C:\WINDOWS\Downloaded Installations\DAEMON Tools 3.47\
uninstall cmd: MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}
publisher: DAEMON'S HOME
contact: DAEMON'S HOME
help link: [email protected]

O&O Defrag Professional Edition 8.0.1398 ({53480370-6CA2-47EC-BC05-02B4B9271C31})
version: 134219126
version (major): 8
estimated size: 8710
install date: 20051027
install location: C:\Programme\OO Software\Defrag Professional\
install source: C:\DOKUME~1\DER_FR~1\LOKALE~1\Temp\O&O Defrag Professional\
uninstall cmd: MsiExec.exe /I{53480370-6CA2-47EC-BC05-02B4B9271C31}
publisher: O&O Software GmbH
comments: Windows NT/2000/XP/2003 Defragmentierungssoftware
contact: [email protected]
help link: http://www.oo-software.de
help telephone: +49 - (030) 4303 4300
readme: C:\Programme\OO Software\Defrag Professional\Readme.txt

Spy Sweeper 4.0 ({5AE68DC3-F16E-457D-947A-092D614C7ABD}_is1)
install location: C:\Programme\Webroot\Spy Sweeper\
uninstall cmd: "C:\Programme\Webroot\Spy Sweeper\unins000.exe"
publisher: Webroot Software, Inc.

Windows Genuine Advantage v1.3.0254.0 1.3.0254.0 ({63569CE9-FA00-469C-AF5C-E5D4D93ACF91})
version: 16974078
version (major): 1
version (minor): 3
estimated size: 519
install date: 20050824
install source: C:\DOKUME~1\DER_FR~1\LOKALE~1\Temp\IXP000.TMP\
uninstall cmd: MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
publisher: Microsoft
comments: Your Comments
contact: Customer Support Department
help link: http://www.microsoft.com/genuine/downloads...idate.aspx/help
help telephone: 1-425.882.8080

DivX Converter 1.0.2 ({7585478E9D9B42108671C12F8714CEFE})
install location: C:\Programme\DivX
uninstall cmd: C:\Programme\DivX\ConverterUninstall.exe /CONVERTER
publisher: DivXNetworks, Inc.

Adobe Stock Photos 1.0 1.0.1 ({786C5747-0C40-4930-9AFE-113BCE553101})
version: 16777217
version (major): 1
estimated size: 5829
install date: 20050923
install location: C:\Programme\Adobe\Adobe Stock Photos\
install source: G:\Adobe® Photoshop® CS2\Stock Photography\
uninstall cmd: MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101}
publisher: Adobe Systems
comments: Your Comments
contact: Customer Support Department
help link: http://www.adobe.com
help telephone: 1-555-555-4505

Text-To-Speech-Runtime 1.0.0.0 ({7B3F0113-E63C-4D6D-AF19-111A3165CCA2})
version: 16777216
version (major): 1
estimated size: 258
install date: 20051015
install source: C:\DOKUME~1\DER_FR~1\LOKALE~1\Temp\tts\
uninstall cmd: MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
publisher: Magix Development GmbH

DivX 6.0 ({7B63B2922B174135AFC0E1377DD81EC2})
install location: C:\Programme\DivX
uninstall cmd: C:\Programme\DivX\DivXCodecUninstall.exe /CODEC
publisher: DivXNetworks, Inc.

TuneUp Utilities 2006 5.0.2327 ({868D7896-99D4-4513-BC62-2B3AD3E24926})
version: 83888407
version (major): 5
estimated size: 19212
install date: 20050915
install source: C:\Programme\Gemeinsame Dateien\Wise Installation Wizard\
uninstall cmd: MsiExec.exe /I{868D7896-99D4-4513-BC62-2B3AD3E24926}
publisher: TuneUp Software
help link: www.tuneup.de

SpeechRedist 1.0.0 ({8795CBED-55E2-4693-9F14-84EC446935BE})
version: 16777216
version (major): 1
estimated size: 60209
install date: 20050908
install source: G:\CD6\Speech\Redist\
uninstall cmd: MsiExec.exe /X{8795CBED-55E2-4693-9F14-84EC446935BE}
publisher: Epic Games Inc.
contact: Epic Games Inc.

DivX Player 6.0 ({8ADFC4160D694100B5B8A22DE9DCABD9})
install location: C:\Programme\DivX
uninstall cmd: C:\Programme\DivX\DivXPlayerUninstall.exe /PLAYER
publisher: DivXNetworks, Inc.

Adobe Common File Installer 1.00.001 ({8EDBA74D-0686-4C99-BFDD-F894678E5101})
version: 16777217
version (major): 1
estimated size: 136557
install date: 20050923
install location: C:\Programme\Gemeinsame Dateien\Adobe\
install source: G:\Adobe® Photoshop® CS2\commonfilesinstaller\
uninstall cmd: MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5101}
publisher: Adobe System Incorporated
comments: Your Comments
contact: Customer Support Department
help link: http://www.adobe.com/help
help telephone: 1-555-555-4505

IEEE802.11a/b/g Wireless LAN Software 2.1.2.11 ({902C0D79-8D7F-4956-9DCB-A223D5BF55B3})
version: 33619970
version (major): 2
version (minor): 1
estimated size: 13831
install date: 20050925
install source: C:\Dokumente und Einstellungen\Der_Freak\Desktop\Software\msi_wlan_4.1.19.29\MSI_WLAN_Software4.1.19.29\
uninstall cmd: MsiExec.exe /I{902C0D79-8D7F-4956-9DCB-A223D5BF55B3}
publisher: MICRO-STAR
comments: http://www.msi.com.tw/
contact: Abteilung für Technischen Support
help link: http://www.msi.com.tw/
help telephone: 886-32345599

Hitman Pro ({9B77AF57-F7B2-488F-8B75-1DDDCC447545}_is1)
install location: C:\Programme\Hitman Pro\
uninstall cmd: "C:\Programme\Hitman Pro\unins000.exe"
publisher: SurfRight
contact: [email protected]
help link: http://www.hitmanpro.com/

Adobe Reader 7.0.5 - Deutsch 7.0.5 ({AC76BA86-7AD7-1031-7B44-A70500000002})
version: 117440517
version (major): 7
estimated size: 78769
install date: 20051026
install location: C:\Programme\Adobe\Acrobat 7.0\Reader\
install source: C:\Programme\Adobe\Acrobat 7.0\Setup Files\RdrBig705\DEU\
uninstall cmd: MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A70500000002}
publisher: Adobe Systems Incorporated
comments:
contact:
help link: http://www.adobe.de/support/main.html
help telephone:
readme: C:\Programme\Adobe\Acrobat 7.0\Reader\Readme.htm

DivX Converter 1.0.2 ({B13A7C41581B411290FBC0395694E2A9})
install location: C:\Programme\DivX
uninstall cmd: C:\Programme\DivX\ConverterUninstall.exe /CONVERTER
publisher: DivXNetworks, Inc.

Adobe Bridge 1.0 001.000.001 ({B74D4E10-6884-0000-0000-000000000101})
version: 16777217
version (major): 1
estimated size: 82601
install date: 20050923
install location: C:\Programme\Adobe\Adobe Bridge\
install source: G:\Adobe® Photoshop® CS2\Bridge\
uninstall cmd: MsiExec.exe /I{B74D4E10-6884-0000-0000-000000000101}
publisher: Adobe Systems
comments: Your Comments
contact: Customer Support Department
help link: http://www.adobe.com/support/main.html
help telephone: 1-555-555-4505

Athlon 64 Processor Driver 1.1.0.18 ({C151CE54-E7EA-4804-854B-F515368B0798})
version: 16842752
install location: C:\Programme\AMD\Athlon 64 Processor Driver
uninstall cmd: RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x7

Microsoft XML Parser 8.0.7820.0 ({C7340571-7773-4A8C-9EBC-4E4243B38C76})
version: 134225548
version (major): 8
estimated size: 784
install date: 20051015
install source: C:\DOKUME~1\DER_FR~1\LOKALE~1\Temp\msxmlwr\
publisher: Microsoft Corporation

Virtual CD v7 7.10.0 ({D026E10A-798A-4E54-8471-1016B968AEBB})
version: 118095872
install date: 20050917
install location: C:\Programme\Virtual CD v7
install source: C:\DOKUME~1\DER_FR~1\LOKALE~1\Temp\bye7EC.tmp\Disk1\
uninstall cmd: RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{D026E10A-798A-4E54-8471-1016B968AEBB}\setup.exe" -l0x7 -removeonly
publisher: H+H Software GmbH
comments: 0
contact: H+H Software GmbH, Maschmühlenweg 8-10 D-37073 Göttingen
help link: www.virtual-cd.com
help telephone: +49-(0)551 / 5 22 08 - 0
readme: 0

KnightOnline ({DF3E37E0-06D5-4A1B-A264-BD2B7E30B458})
uninstall cmd: RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{DF3E37E0-06D5-4A1B-A264-BD2B7E30B458}\Setup.exe"

Adobe Help Center 1.0 1.0.1 ({E9787678-119F-4D52-B551-6739B2B22101})
version: 16777217
version (major): 1
estimated size: 23098
install date: 20050923
install location: C:\Programme\Adobe\Adobe Help Center\
install source: G:\Adobe® Photoshop® CS2\Help Center\
uninstall cmd: MsiExec.exe /I{E9787678-119F-4D52-B551-6739B2B22101}
publisher: Adobe Systems
comments: Your Comments
contact: Customer Support Department
help link: http://www.adobe.com
help telephone: 1-555-555-4505

1.9.5.3105 ({E9F81423-211E-46B6-9AE0-38568BC5CF6F})
version: 17367045
version (major): 1
version (minor): 9
estimated size: 4143
install date: 20051021
install source: C:\DOKUME~1\DER_FR~1\LOKALE~1\Temp\IXP000.TMP\
uninstall cmd: MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}
comments: Patch files integrated by Nostradamus
help link: [email protected]

Realtek AC'97 Audio 5.12 ({FB08F381-6533-4108-B7DD-039E11FBC27E})
version: 84672512
install date: 20050824
install location: C:\Programme\Realtek AC97\
install source: C:\DOKUME~1\DER_FR~1\LOKALE~1\Temp\pft2A6~tmp\
uninstall cmd: RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x7 -removeonly
publisher: Realtek Semiconductor Corp.



--- System Services ---
Service (registry key): Aavmker4
Display name: avast! Asynchronous Virus Monitor
Start: 1
Type: 1
Error Control: 1

Service (registry key): Abiosdsk
Start: 4
Type: 1
Error Control: 0

Service (registry key): abp480n5
Start: 4
Type: 1
Error Control: 1

Service (registry key): acap2000
Start: 0
Type: 0
Error Control: 0

Service (registry key): ACEDRV05
Display name: ACEDRV05
Image path: \?\C:\WINDOWS\system32\drivers\ACEDRV05.sys
Image size: 97792
Image MD5: 0A1E97197609F92D2425B67DA0BB0A7F
Start: 1
Type: 1
Error Control: 0

Service (registry key): ACPI
Display name: Microsoft ACPI-Treiber
Image path: system32\DRIVERS\ACPI.sys
Image size: 188800
Image MD5: 94B4741D2CF9ED38140B831293D1601A
Start: 0
Type: 1
Error Control: 1

Service (registry key): ACPIEC
Start: 4
Type: 1
Error Control: 1

Service (registry key): Adobe LM Service
Display name: Adobe LM Service
Description: AdobeLM Service
Object name: LocalSystem
Image path: "C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"
Image size: 72704
Image MD5: 8B46D5A1D3EF08232C04D0EAFB871FB2
Start: 3
Type: 16
Error Control: 1

Service (registry key): adpu160m
Start: 4
Type: 1
Error Control: 1

Service (registry key): aec
Display name: Microsoft Kernel-Echounterdrückung
Image path: system32\drivers\aec.sys
Image size: 142464
Image MD5: 841F385C6CFAF66B58FBD898722BB4F0
Start: 3
Type: 1
Error Control: 1

Service (registry key): AFD
Display name: AFD
Description: Umgebung für AFD-Netzwerkunterstützung
Image path: \SystemRoot\System32\drivers\afd.sys
Start: 1
Type: 1
Error Control: 1

Service (registry key): Aha154x
Start: 4
Type: 1
Error Control: 1

Service (registry key): aic78u2
Start: 4
Type: 1
Error Control: 1

Service (registry key): aic78xx
Start: 4
Type: 1
Error Control: 1

Service (registry key): ALCXWDM
Display name: Service for Realtek AC97 Audio (WDM)
Image path: system32\drivers\ALCXWDM.SYS
Image size: 2324480
Image MD5: 35045A23957A71BA649740741E69408C
Start: 3
Type: 1
Error Control: 1

Service (registry key): Alerter
Display name: Warndienst
Description: Benachrichtigt bestimmte Benutzer und Computer bezüglich administrativer Warnungen. Falls der Dienst beendet wird, können Programme, die administrative Warnungen verwenden, diese Warnungen nicht mehr empfangen. Falls dieser Dienst deaktiviert wird, können die Dienste, die von diesem Dienst ausschließlich abhängig sind, nicht mehr gestartet werden.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\system32\svchost.exe -k LocalService
Image size: 14336
Image MD5: 65A819B121EB6FDAB4400EA42BDFFE64
Start: 4
Type: 32
Error Control: 1
Depends On services: LanmanWorkstation

Service (registry key): ALG
Display name: Gatewaydienst auf Anwendungsebene
Description: Bietet Unterstützung für Protokoll-Plug-Ins von Drittanbietern für die gemeinsame Nutzung der Internetverbindung und den Windows-Firewall.
Object name: NT AUTHORITY\LocalService
Image path: %SystemRoot%\System32\alg.exe
Image size: 44544
Image MD5: 6596DD260FFDE1BDC994C1DF236307BB
Start: 3
Type: 16
Error Control: 1

Service (registry key): AliIde
Start: 4
Type: 1
Error Control: 1

Service (registry key): AmdK8
Display name: AMD-Prozessortreiber
Image path: system32\DRIVERS\AmdK8.sys
Image size: 43520
Image MD5: 9BA1213AAB7FF12AF30AE9DF2E0B4701
Start: 1
Type: 1
Error Control: 1

Service (registry key): amsint
Start: 4
Type: 1
Error Control: 1

Service (registry key): AnyDVD
Display name: AnyDVD
Image path: System32\Drivers\AnyDVD.sys
Image size: 19200
Image MD5: FD2E727817881732E109976BEC9F1340
Start: 3
Type: 1
Error Control: 1

Service (registry key): AppMgmt
Display name: Anwendungsverwaltung
Description: Bietet Softwareinstallationsdienste wie Zuweisung, Veröffentlichung, und Deinstallation.
Object name: LocalSystem
Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
Image size: 14336
Image MD5: 65A819B121EB6FDAB4400EA42BDFFE64
Start: 3
Type: 32
Error Control: 1

Service (registry key): Arp1394
Display name: 1394-ARP-Clientprotokoll
Description: 1394-ARP-Clientprotokoll
Image path: system32\DRIVERS\arp1394.sys
Image size: 60800
Image MD5: F0D692B0BFFB46E30EB3CEA168BBC49F
Start: 3
Type: 1
Error Control: 1
Depends On services: Tcpip

Service (registry key): asc
Start: 4
Type: 1
Error Control: 1

Service (registry key): asc3350p
Start: 4
Type: 1
Error Control: 1

Service (registry key): asc3550
Start: 4
Type: 1
Error Control: 1

Service (registry key): asuskbnt
Display name: Asus Display Driver Helper Service
Image path: system32\drivers\asuskbnt.sys
Image size: 20992
Image MD5: 96B3170A74D8BBAE3C897AB9D4DBC885
Start: 1
Type: 1
Error Control: 1

Service (registry key): ASUSKeyboardService
Display name: ASUS Keyboard Service
Object name: LocalSystem
Image path: C:\WINDOWS\ASUSKBService.exe
Image size: 90112
Image MD5: D88499D10981DFB9E5226ED8CF27AB13
Start: 2
Type: 272
Error Control: 1

Service (registry key): aswMon2
Display name: avast! Standard Shield Support
Start: 2
Type: 2
Error Control: 1

Service (registry key): aswRdr
Display name: aswRdr
Start: 3
Type: 1
Error Control: 1
Depends On services: tcpip

Service (registry key): aswTdi
Display name: avast! Network Shield Support
Start: 1
Type: 1
Error Control: 1
Depends On services: tcpip

Service (registry key): aswUpdSv
Display name: avast! iAVS4 Control Service
Description: Bietet das automatische Update für avast! Antivirus.
Object name: LocalSystem
Image path: "C:\Programme\Alwil Software\Avast4\aswUpdSv.exe"
Image size: 53248
Image MD5: 84FF20F4A9E56507A719F41C6370D2AD
Start: 2
Type: 272
Error Control: 1

Service (registry key): AsyncMac
Display name: Asynchroner RAS -Medientreiber
Description: Asynchroner RAS -Medientreiber
Image path: system32\DRIVERS\asyncmac.sys
Image size: 14336
Image MD5: 02000ABF34AF4C218C35D257024807D6
Start: 3
Type: 1
Error Control: 1

Service (registry key): atapi
Display name: Standard-IDE/ESDI-Festplattencontroller
Image path: system32\DRIVERS\atapi.sys
Image size: 95360
Image MD5: CDFE4411A69C224BD1D11B2DA92DAC51
Start: 0
Type: 1
Error Control: 1

Service (registry key): Atdisk
Start: 4
Type: 1
Error Control: 0

Service (registry key): Ati HotKey Poller
Object name: LocalSystem
Image path: %SystemRoot%\system32\Ati2evxx.exe
Image size: 376832
Image MD5: 60D2D92BD2390C50BCE4106113F8B83B
Start: 4
Type: 272
Error Control: 1

Service (registry key): ATI Smart
Display name: ATI Smart
Object name: LocalSystem
Image path: C:\WINDOWS\system32\ati2sgag.exe
Image size: 516096
Image MD5: DA05C02074349AFE712042F52FEC3436
Start: 4
Type: 272
Error Control: 1

Service (registry key): ati2mtag
Image path: system32\DRIVERS\ati2mtag.sys
Image size: 1333760
Image MD5: 1BC00580219007683339B3A78B8F2232
Start: 3
Type: 1
Error Control: 0

Service (registry key): Atierecord
Start: 0
Type: 0
Error Control: 0

Service (registry key): atinrvxx
Display name: ATI WDM Rage Theater Video
Image path: system32\DRIVERS\atinrvxx.sys
Image size: 105984
Image MD5: 74E104ADA8A304774713E


Und hier ist die auswe

Dieser Beitrag wurde von Anthrax bearbeitet: 29. Oktober 2005 - 14:18

[Rika]

Zitat

Located: WinLogon, SMDEn
command: C:\WINDOWS\system32\kt46l7hs1.dll

Ziemlich böse.

PID: 484 ( 780) C:\WINDOWS\system32\E_S00RP1.EXE
PID: 1400 ( 780) C:\WINDOWS\system32\SLEE12.exe

Merkwürdig.

Zitat

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://192.168.0.1/

WTF?


Gefährliches Gesocks wie Daemon Tools, Alcohol 120% und Steganos Safe solltest du auch mal entsorgen.

Dieser Beitrag wurde von Rika bearbeitet: 29. Oktober 2005 - 15:28

[The Dog]

Alcohol 120%? Warum gefährlich?

[Anthrax]

Das mit der DLL Datei werde ich mir mal ansehen. Aber die Prozesse sind okay. SLEE12 ist Steganos.
E_SOORP1 kenne ich zwar nicht, habe sie aber an McAffee gesendet und ein Okay zurück bekommen.

Wie lautet nochmal der Befehl zum unregistrieren von dlldateien?

Mein Internet Explorer hat die startseite 192.168.0.1 welche auf meinen Router geht. Surfen tu ich aber mit Opera

Dieser Beitrag wurde von Anthrax bearbeitet: 29. Oktober 2005 - 15:41

[algra]

hi,
einfachst und schnellste Lösung-> Opera löschen!! = ein wunderbarer Trojaner!!! die div. Foren lesen....
BS neu installieren unter c:\ (Format)

[stefanra]

Zitat

Wie lautet nochmal der Befehl zum unregistrieren von dlldateien?

regsvr32 -u [DLL]

[Anthrax]

Zitat (algra: 29.10.2005, 16:39)

hi,
einfachst und schnellste Lösung-> Opera löschen!! = ein wunderbarer Trojaner!!! die div. Foren lesen....
BS neu installieren unter c:\ (Format)

Guter Witz. Du hast echt Ahnung!

BTW: Ich kann die Datei nicht Unregistrieren da die Datei verwendet wird. Ich kann auch keine Prozesse schliessen "Der Prozess kann nicht beendet werden! Zugriff verweigert!"

Dieser Beitrag wurde von Anthrax bearbeitet: 29. Oktober 2005 - 15:47

[The Dog]

Zitat (algra: 29.10.2005, 16:39)

hi,
einfachst und schnellste Lösung-> Opera löschen!! = ein wunderbarer Trojaner!!! die div. Foren lesen....
BS neu installieren unter c:\ (Format)

Also ich bin absolut kein Operafan, aber das höre ich jetzt zum ersten mal. Hast du mal Links?

[mighty]

Zitat

Gefährliches Gesocks wie Daemon Tools, Alcohol 120% solltest du auch mal entsorgen.

Inwieweit sind diese Programme zu entsorgen? Welche Gründe sprechen dafür?.
Nicht das ihre Funktionalität meist für illegale Aktivitäten missbraucht wird, das lassen wir gleich mal vorweg .
Und halt dem Codeklau aus anderen diversen tools.

Dieser Beitrag wurde von mighty bearbeitet: 29. Oktober 2005 - 16:09

[Rika]

Letzteres ist das Problem. Alcohol 120% klaut Code aus den Daemon Tools, die wiederum sind seit jeher mit dubiosen Funktionen ausgestattet (Kopierschutzfunktionen werden nicht durch Emulation der Datenträgereigeschaften und -inhalte umgangen, sondern durch Scannen nach Programmfunktionen und Patchem im Prozessspeicher - ganz typisches Cracker-Tool).

Gegen Steganos Safe spricht, daß die Firma betrügerisch (der Anonyme-Proxy-Dienst ist eine reine Farce) und inkompetent ist, was Kryptosoftware angeht - und natürlich nicht-quelloffene Kryptosoftware ein Oxymoron für sich ist, da dort die Qualität der Implementierung die obere Grenze für die Sicherheit angibt.

[JollyRoger2408]

Zitat (algra: 29.10.2005, 16:39)

hi,
einfachst und schnellste Lösung-> Opera löschen!! = ein wunderbarer Trojaner!!! die div. Foren lesen....
BS neu installieren unter c:\ (Format)

Hää, ich bin auch kein Opera-Fan, aber DAFÜR hätte ich auch gerne ein paar Links!!