Windows Vista: Windows security fenster öffnet sich automatisch

So.

Was für Viren werden gefunden?

Was sollst du runterladen?

Windows security fenster öffnet sich automatisch!

Sagt dann immer viren gefunden ich soll was runterladen


Ladezeit dauert länger!


Mein Computer-System:
   
Mein PC ist etwa 0-2 Jahre alt.

Als erstes meldet sich Anti Vira mit Trojana gefunden TR Cryptz.pack jedes mal wenn der computer Neu gestartet wurde und ich dann ins Internet will das Fenster öffnet sich immer zwei mal

Ja danach öffnet sich Windows security und da steht auf Englisch Viren gefunden aber ganz viele Viren dann öffnet sich ein Fenster wo Download steht immer unterschiedlich Programme.

Habe mir Spybot search and destroy heruntergeladen Der hat auch Viren gefunden und alle gelöscht!

Aber es kommt immer wieder 

• Installiere das Programm in den vorgegebenen Pfad.
• Denke daran, bei Vista das Programm als Admin zu starten, ansonsten per Doppelklick starten.
• Lasse es online updaten (Reiter Updates), sofern sich das Programm bereits auf dem Rechner befand.
• Aktiviere "Quick-Scan durchführen" => Scan.
• Wenn der Scan beendet ist, klicke auf "Ergebnisse anzeigen".
• Versichere Dich, dass alle Funde markiert sind und drücke "Löschen".
• Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  
• Nachträglich kannst du den Bericht unter "Scan-Berichte" finden.
• Berichte, wie der Rechner nun läuft.

• Lade Random's System Information Tool (RSIT) herunter,
• speichere es auf Deinem Desktop.
• Starte mit Doppelklick die RSIT.exe.
• Klicke auf Continue, um die Nutzungsbedingungen zu akzeptieren.
• Der Scan startet automatisch, RSIT checkt nun einige wichtige System-Bereiche und produziert Logfiles als Analyse-Grundlage.
• Wenn der Scan beendet ist, werden zwei Logfiles erstellt und in Deinem Editor geöffnet.
• Bitte poste den Inhalt von C:\rsit\log.txt und C:\rsit\info.txt

danke für die Antwort!

Werde es heute abend auf mein laptop ausprobieren da ich jetzt auf Arbeit bin dannach melde ich mich wieder!!

Gruß

Malwarebytes' Anti-Malware 1.41
Datenbank Version: 2775
Windows 6.0.6001 Service Pack 1

20.11.2009 18:20:47
mbam-log-2009-11-20 (18-20-47).txt

Scan-Methode: Quick-Scan
Durchsuchte Objekte: 86065
Laufzeit: 3 minute(s), 19 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 1
Infizierte Dateien: 2

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
C:\Users\David & Peggy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlayMP3z (Adware.PLayMP3z) -> Quarantined and deleted successfully.

Infizierte Dateien:
C:\Users\David & Peggy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlayMP3z\Run PlayMP3z.pif (Adware.PLayMP3z) -> Quarantined and deleted successfully.
C:\Windows\System32\faultrep32.dll (Worm.P2P) -> Quarantined and deleted successfully.

So habe schritt 1 gemacht bis jetzt kam nichts mehr!
3Viren wurden gefunden die sind jetzt in Quarantäne muß ich die da löschen??????

Und muß ich jetzt schritt 2 befolgen???

Mfg
 

Nein musst du nicht.

Ja schritt 2 und folgendes

Während dieser Scans soll(en):

• alle anderen Scanner gegen Viren, Spyware, usw. deaktiviert sein,
  
• keine Verbindung zu einem Netzwerk/Internet bestehen (WLAN nicht vergessen),
  
• nichts am Rechner getan werden,
  
• nach jedem Scan der Rechner neu gestartet werden.

• Gehe hierhin, scrolle runter und downloade RootRepeal.zip.
  
• Entpacke die Datei auf Deinen Desktop.
  
• Doppelklicke die RootRepeal.exe, um den Scanner zu starten.
  Vista User mit Rechtsklick "als Admin starten"
  
• Klicke auf den Reiter Report und dann auf den Button Scan.
  
• Mache einen Haken bei den folgenden Elementen und klicke Ok.

• Im Anschluss wirst Du gefragt, welche Laufwerke gescannt werden sollen.
• Wähle C:\ und klicke wieder Ok.
• Der Suchlauf beginnt automatisch, es wird eine Weile dauern, bitte Geduld.
• Wenn der Suchlauf beendet ist, klicke auf Save Report.
  
• Speichere das Logfile als RootRepeal.txt auf dem Desktop.
  
• Kopiere den Inhalt hier in den Thread.

ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time:      2009/11/20 20:37
Program Version:      Version 1.3.5.0
Windows Version:      Windows Vista SP1
==================================================

Drivers
-------------------
Name: dump_iaStor.sys
Image Path: C:\Windows\System32\Drivers\dump_iaStor.sys
Address: 0x8D80D000   Size: 897024   File Visible: No   Signed: -
Status: -

Name: rootrepeal.sys
Image Path: C:\Windows\system32\drivers\rootrepeal.sys
Address: 0xAD635000   Size: 49152   File Visible: No   Signed: -
Status: -

Processes
-------------------
Path: System
PID: 4   Status: Locked to the Windows API!

Path: C:\Windows\System32\audiodg.exe
PID: 1336   Status: Locked to the Windows API!

SSDT
-------------------
#: 078   Function Name: NtCreateThread
Status: Hooked by "<unknown>" at address 0x8c74696c

#: 194   Function Name: NtOpenProcess
Status: Hooked by "<unknown>" at address 0x8c746958

#: 201   Function Name: NtOpenThread
Status: Hooked by "<unknown>" at address 0x8c74695d

#: 334   Function Name: NtTerminateProcess
Status: Hooked by "<unknown>" at address 0x8c746967

==EOF==

Logfile of random's system information tool 1.06 (written by random/random)
Run by David & Peggy at 2009-11-20 20:25:26
Microsoft® Windows Vista™ Home Premium  Service Pack 1
System drive C: has 159 GB (69%) free of 228 GB
Total RAM: 3000 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:25:27, on 20.11.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\David & Peggy\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\David & Peggy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0509&m=aspire_5738
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0509&m=aspire_5738
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=0509&m=aspire_5738
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Frostbar-DE Toolbar - {cd2781da-3685-4520-96ff-81ae5ee7ec30} - C:\Program Files\Frostbar-DE\tbFros.dll
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {0F5B8AE9-6E7C-4D7F-AEDE-3D3509CE65F3} - C:\Windows\System32\EAPQEC32.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Frostbar-DE Toolbar - {cd2781da-3685-4520-96ff-81ae5ee7ec30} - C:\Program Files\Frostbar-DE\tbFros.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Frostbar-DE Toolbar - {cd2781da-3685-4520-96ff-81ae5ee7ec30} - C:\Program Files\Frostbar-DE\tbFros.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [InfoCockpit] C:\Program Files\T-Online\T-Online_Software_6\Info-Cockpit\IC_START.EXE /nosplash (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [InfoCockpit] C:\Program Files\T-Online\T-Online_Software_6\Info-Cockpit\IC_START.EXE /nosplash (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [InfoCockpit] C:\Program Files\T-Online\T-Online_Software_6\Info-Cockpit\IC_START.EXE /nosplash (User 'Default user')
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,C:\Windows\System32\E_FLBCAE32.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

--
End of file - 7273 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F5B8AE9-6E7C-4D7F-AEDE-3D3509CE65F3}]
C:\Windows\System32\EAPQEC32.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-08 279944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Anmelde-Hilfsprogramm - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-14 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-10-15 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-07-14 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cd2781da-3685-4520-96ff-81ae5ee7ec30}]
Frostbar-DE Toolbar - C:\Program Files\Frostbar-DE\tbFros.dll [2009-07-02 2215960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-08 279944]
{cd2781da-3685-4520-96ff-81ae5ee7ec30} - Frostbar-DE Toolbar - C:\Program Files\Frostbar-DE\tbFros.dll [2009-07-02 2215960]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-14 256112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePower Management]
C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2009-04-15 440864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcadeDeluxeAgent]
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2009-01-21 156968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2009-04-11 249600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [2009-01-21 202024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files\Electronic Arts\EADM\Core.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus DX4400 Series]
C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-07-14 30192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\Windows\system32\hkcmd.exe [2009-01-09 178712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\Windows\system32\igfxtray.exe [2009-01-09 150040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
C:\Program Files\IncrediMail\bin\IncMail.exe [2009-06-07 251264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\Program Files\Launch Manager\LManager.exe [2009-02-19 866824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Transfer Monitor]
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [2008-09-30 485208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\Windows\system32\igfxpers.exe [2009-01-09 154136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe [2008-12-26 173288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2007-12-11 286720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-02-19 6793760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]
C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-02-19 1833504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-14 68856]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-12-05 1410344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\T-Online_Software_6]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^David & Peggy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk]
C:\PROGRA~1\MICROS~3\Office12\ONENOTEM.EXE [2008-10-25 98696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,C:\Windows\System32\E_FLBCAE32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-12-23 221184]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2009-11-20 20:20:18 ----D---- C:\rsit
2009-11-20 19:58:35 ----D---- C:\Windows\pss
2009-11-20 19:37:28 ----A---- C:\Windows\ntbtlog.txt
2009-11-20 18:15:36 ----D---- C:\Users\David & Peggy\AppData\Roaming\Malwarebytes
2009-11-20 18:15:28 ----D---- C:\ProgramData\Malwarebytes
2009-11-20 18:15:28 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-11-19 22:52:07 ----A---- C:\Windows\system32\tmp.txt
2009-11-19 22:51:17 ----A---- C:\rapport.txt
2009-11-19 22:50:36 ----A---- C:\Windows\system32\WS2Fix.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\VCCLSID.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\VACFix.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\swxcacls.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\o4Patch.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\IEDFix.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\IEDFix.C.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\dumphive.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\Agent.OMZ.Fix.exe
2009-11-19 22:50:36 ----A---- C:\Windows\system32\404Fix.exe
2009-11-19 22:50:35 ----A---- C:\Windows\system32\swsc.exe
2009-11-19 22:50:35 ----A---- C:\Windows\system32\swreg.exe
2009-11-19 22:50:35 ----A---- C:\Windows\system32\SrchSTS.exe
2009-11-19 22:50:35 ----A---- C:\Windows\system32\Process.exe
2009-11-17 23:13:25 ----N---- C:\Windows\system32\MpSigStub.exe
2009-11-17 18:39:06 ----D---- C:\Program Files\Trend Micro
2009-11-17 12:29:56 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-11-17 12:29:56 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-11-17 08:20:25 ----A---- C:\Windows\system32\mshtml.dll
2009-11-17 08:19:49 ----A---- C:\Windows\system32\jscript.dll
2009-11-16 13:57:51 ----D---- C:\Windows\system32\EventProviders
2009-11-16 11:11:05 ----A---- C:\Windows\system32\occache.dll
2009-11-16 11:11:05 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-11-16 11:11:05 ----A---- C:\Windows\system32\msfeeds.dll
2009-11-16 11:11:05 ----A---- C:\Windows\system32\jsproxy.dll
2009-11-16 11:11:05 ----A---- C:\Windows\system32\iepeers.dll
2009-11-16 11:11:04 ----A---- C:\Windows\system32\wininet.dll
2009-11-16 11:11:04 ----A---- C:\Windows\system32\ieui.dll
2009-11-16 11:11:04 ----A---- C:\Windows\system32\iesetup.dll
2009-11-16 11:11:04 ----A---- C:\Windows\system32\iernonce.dll
2009-11-16 11:11:03 ----A---- C:\Windows\system32\urlmon.dll
2009-11-16 11:11:03 ----A---- C:\Windows\system32\msfeedssync.exe
2009-11-16 11:11:03 ----A---- C:\Windows\system32\ieUnatt.exe
2009-11-16 11:11:03 ----A---- C:\Windows\system32\iesysprep.dll
2009-11-16 11:11:03 ----A---- C:\Windows\system32\iertutil.dll
2009-11-16 11:11:03 ----A---- C:\Windows\system32\iedkcs32.dll
2009-11-16 11:11:03 ----A---- C:\Windows\system32\ie4uinit.exe
2009-11-16 11:11:02 ----A---- C:\Windows\system32\ieframe.dll
2009-11-16 11:09:11 ----A---- C:\Windows\system32\mshtmled.dll
2009-11-16 11:09:11 ----A---- C:\Windows\system32\icardie.dll
2009-11-16 11:09:10 ----A---- C:\Windows\system32\msls31.dll
2009-11-16 11:09:10 ----A---- C:\Windows\system32\mshtmler.dll
2009-11-16 11:09:10 ----A---- C:\Windows\system32\admparse.dll
2009-11-16 11:09:09 ----A---- C:\Windows\system32\imgutil.dll
2009-11-16 11:09:09 ----A---- C:\Windows\system32\ieakeng.dll
2009-11-16 11:09:09 ----A---- C:\Windows\system32\dxtrans.dll
2009-11-16 11:09:09 ----A---- C:\Windows\system32\dxtmsft.dll
2009-11-16 11:09:09 ----A---- C:\Windows\system32\corpol.dll
2009-11-16 11:09:08 ----A---- C:\Windows\system32\msrating.dll
2009-11-16 11:09:08 ----A---- C:\Windows\system32\licmgr10.dll
2009-11-16 11:09:08 ----A---- C:\Windows\system32\inseng.dll
2009-11-16 11:09:08 ----A---- C:\Windows\system32\ieaksie.dll
2009-11-16 11:09:07 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-11-16 11:09:07 ----A---- C:\Windows\system32\wextract.exe
2009-11-16 11:09:07 ----A---- C:\Windows\system32\webcheck.dll
2009-11-16 11:09:07 ----A---- C:\Windows\system32\pngfilt.dll
2009-11-16 11:09:07 ----A---- C:\Windows\system32\mstime.dll
2009-11-16 11:09:07 ----A---- C:\Windows\system32\ieakui.dll
2009-11-16 11:09:07 ----A---- C:\Windows\system32\advpack.dll
2009-11-16 11:09:06 ----A---- C:\Windows\system32\vbscript.dll
2009-11-16 11:09:06 ----A---- C:\Windows\system32\url.dll
2009-11-16 11:09:06 ----A---- C:\Windows\system32\ieapfltr.dll
2009-11-16 11:09:04 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-11-16 11:09:04 ----A---- C:\Windows\system32\SetDepNx.exe
2009-11-16 11:09:04 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-11-16 11:09:04 ----A---- C:\Windows\system32\PDMSetup.exe
2009-11-16 11:09:04 ----A---- C:\Windows\system32\mshta.exe
2009-11-16 11:09:04 ----A---- C:\Windows\system32\iexpress.exe
2009-11-16 08:34:45 ----A---- C:\Windows\system32\7TYrPWc.vbs
2009-11-16 08:34:23 ----A---- C:\Windows\system32\8I0IvrX.vbs
2009-11-16 08:33:53 ----A---- C:\Windows\system32\mcJ1RctEP13aHaB.vbs
2009-11-16 08:33:53 ----A---- C:\Windows\system32\E_FLBCAE32.dll
2009-11-13 12:30:02 ----D---- C:\Users\David & Peggy\AppData\Roaming\EPSON
2009-11-11 09:05:01 ----A---- C:\Windows\system32\WSDApi.dll
2009-11-01 14:18:42 ----D---- C:\Users\David & Peggy\AppData\Roaming\SCHLECKERFotobuch
2009-11-01 14:17:51 ----D---- C:\Program Files\SCHLECKERFotobuch
2009-10-28 09:15:24 ----A---- C:\Windows\system32\wmp.dll
2009-10-28 09:15:23 ----A---- C:\Windows\system32\unregmp2.exe
2009-10-28 09:15:22 ----A---- C:\Windows\system32\wmploc.DLL
2009-10-26 12:49:37 ----HD---- C:\Windows\PIF
2009-10-26 12:49:37 ----D---- C:\Program Files\EvenMoreMegaSwellAdsForYou
2009-10-23 12:40:24 ----D---- C:\ProgramData\hps
2009-10-23 12:29:19 ----D---- C:\Program Files\real
2009-10-15 09:12:28 ----A---- C:\Windows\system32\msv1_0.dll
2009-10-15 09:12:12 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-10-15 09:12:11 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-10-15 09:12:01 ----A---- C:\Windows\system32\EncDec.dll
2009-10-15 09:11:59 ----A---- C:\Windows\system32\psisdecd.dll
2009-10-15 09:04:48 ----A---- C:\Windows\system32\msasn1.dll
2009-10-15 09:04:42 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-10-02 08:53:19 ----A---- C:\Windows\system32\wups2.dll
2009-10-02 08:53:18 ----A---- C:\Windows\system32\wucltux.dll
2009-10-02 08:53:18 ----A---- C:\Windows\system32\wuaueng.dll
2009-10-02 08:53:18 ----A---- C:\Windows\system32\wuauclt.exe
2009-10-02 08:53:00 ----A---- C:\Windows\system32\wups.dll
2009-10-02 08:53:00 ----A---- C:\Windows\system32\wudriver.dll
2009-10-02 08:53:00 ----A---- C:\Windows\system32\wuapi.dll
2009-10-02 08:52:53 ----A---- C:\Windows\system32\wuwebv.dll
2009-10-02 08:52:53 ----A---- C:\Windows\system32\wuapp.exe
2009-09-09 10:11:43 ----A---- C:\Windows\system32\TCPSVCS.EXE
2009-09-09 10:11:43 ----A---- C:\Windows\system32\ROUTE.EXE
2009-09-09 10:11:43 ----A---- C:\Windows\system32\NETSTAT.EXE
2009-09-09 10:11:43 ----A---- C:\Windows\system32\netiohlp.dll
2009-09-09 10:11:43 ----A---- C:\Windows\system32\MRINFO.EXE
2009-09-09 10:11:43 ----A---- C:\Windows\system32\HOSTNAME.EXE
2009-09-09 10:11:43 ----A---- C:\Windows\system32\finger.exe
2009-09-09 10:11:43 ----A---- C:\Windows\system32\ARP.EXE
2009-09-09 10:11:42 ----A---- C:\Windows\system32\netevent.dll
2009-09-09 10:11:23 ----A---- C:\Windows\system32\wlansvc.dll
2009-09-09 10:11:23 ----A---- C:\Windows\system32\wlansec.dll
2009-09-09 10:11:23 ----A---- C:\Windows\system32\wlanmsm.dll
2009-09-09 10:11:23 ----A---- C:\Windows\system32\L2SecHC.dll
2009-09-09 10:11:21 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-09-09 10:11:21 ----A---- C:\Windows\system32\mf.dll
2009-09-03 09:06:27 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-09-03 09:06:26 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-09-01 09:47:22 ----D---- C:\ProgramData\UDL
2009-09-01 09:42:38 ----A---- C:\Windows\system32\PICSDK2.dll
2009-09-01 09:42:38 ----A---- C:\Windows\system32\PICSDK.ini
2009-09-01 09:42:38 ----A---- C:\Windows\system32\PICSDK.dll
2009-09-01 09:42:38 ----A---- C:\Windows\system32\PICEntry.dll
2009-09-01 09:42:38 ----A---- C:\Windows\system32\EpPicPrt.dll
2009-09-01 09:42:38 ----A---- C:\Windows\system32\EPPicMgr.dll
2009-09-01 09:41:38 ----D---- C:\Program Files\epson
2009-09-01 09:41:38 ----A---- C:\Windows\system32\eswiaml.dll
2009-09-01 09:41:38 ----A---- C:\Windows\system32\eswia7e.dll
2009-09-01 09:41:38 ----A---- C:\Windows\system32\esint7e.dll
2009-09-01 09:41:24 ----A---- C:\Windows\CDE DX4400DEFGIPS.ini
2009-09-01 09:31:30 ----D---- C:\ProgramData\EPSON
2009-09-01 09:30:52 ----A---- C:\Windows\system32\E_DCINST.DLL
2009-09-01 09:30:48 ----A---- C:\Windows\system32\E_FLBCAE.DLL
2009-09-01 09:30:46 ----A---- C:\Windows\system32\E_FD4BCAE.DLL
2009-08-30 12:03:08 ----D---- C:\Users\David & Peggy\AppData\Roaming\WinRAR
2009-08-30 12:02:49 ----D---- C:\Program Files\WinRAR
2009-08-30 12:02:39 ----A---- C:\Windows\system32\wdigest.dll
2009-08-30 12:02:39 ----A---- C:\Windows\system32\kerberos.dll
2009-08-30 12:02:38 ----A---- C:\Windows\system32\secur32.dll
2009-08-30 12:02:38 ----A---- C:\Windows\system32\schannel.dll
2009-08-30 12:02:38 ----A---- C:\Windows\system32\lsass.exe
2009-08-30 12:02:38 ----A---- C:\Windows\system32\lsasrv.dll
2009-08-27 09:17:27 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 3 months======

2009-11-20 20:24:57 ----D---- C:\Windows\Temp
2009-11-20 20:05:53 ----D---- C:\Windows\System32
2009-11-20 20:05:53 ----D---- C:\Windows\inf
2009-11-20 20:05:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-11-20 19:58:35 ----D---- C:\Windows
2009-11-20 18:15:30 ----D---- C:\Windows\system32\drivers
2009-11-20 18:15:28 ----RD---- C:\Program Files
2009-11-20 18:15:28 ----HD---- C:\ProgramData
2009-11-19 22:50:28 ----D---- C:\Program Files\Mozilla Firefox
2009-11-19 09:30:01 ----D---- C:\Windows\system32\catroot2
2009-11-18 19:23:33 ----D---- C:\Windows\system32\wbem
2009-11-18 19:23:00 ----D---- C:\Windows\Tasks
2009-11-18 19:23:00 ----D---- C:\Windows\system32\spool
2009-11-18 19:23:00 ----D---- C:\Windows\rescache
2009-11-18 19:22:59 ----D---- C:\Windows\registration
2009-11-18 19:22:59 ----D---- C:\Program Files\Internet Explorer
2009-11-18 19:19:48 ----SHD---- C:\System Volume Information
2009-11-18 09:26:46 ----D---- C:\Windows\winsxs
2009-11-18 09:22:10 ----D---- C:\Program Files\Common Files
2009-11-18 00:16:45 ----AD---- C:\ProgramData\Temp
2009-11-17 23:07:58 ----SD---- C:\ProgramData\Microsoft
2009-11-17 21:03:25 ----SHD---- C:\Windows\Installer
2009-11-17 20:31:47 ----SD---- C:\Windows\Downloaded Program Files
2009-11-17 20:31:47 ----RD---- C:\Windows\Offline Web Pages
2009-11-17 20:31:47 ----D---- C:\Windows\system32\migration
2009-11-17 20:31:47 ----D---- C:\Windows\system32\de-DE
2009-11-17 20:31:47 ----D---- C:\Windows\system32\CodeIntegrity
2009-11-17 20:31:47 ----D---- C:\Program Files\Windows Mail
2009-11-17 18:44:52 ----SD---- C:\Users\David & Peggy\AppData\Roaming\Microsoft
2009-11-17 08:19:45 ----D---- C:\Windows\system32\catroot
2009-11-16 11:17:08 ----D---- C:\Windows\system32\en-US
2009-11-16 11:17:08 ----D---- C:\Windows\PolicyDefinitions
2009-11-16 11:16:30 ----D---- C:\Users\David & Peggy\AppData\Roaming\FrostWire
2009-11-16 11:11:53 ----D---- C:\Windows\Debug
2009-11-12 10:04:06 ----D---- C:\ProgramData\Microsoft Help
2009-11-05 09:36:22 ----A---- C:\Windows\system32\mrt.exe
2009-10-30 15:16:24 ----D---- C:\Windows\system32\LogFiles
2009-10-29 11:06:58 ----D---- C:\Program Files\Windows Media Player
2009-10-16 14:46:56 ----D---- C:\Windows\Microsoft.NET
2009-10-16 14:46:55 ----RSD---- C:\Windows\assembly
2009-10-16 08:36:33 ----D---- C:\Windows\ehome
2009-09-26 20:23:45 ----D---- C:\Windows\Prefetch
2009-09-04 10:21:09 ----D---- C:\Windows\AppPatch
2009-09-01 09:52:06 ----HD---- C:\Program Files\InstallShield Installation Information
2009-09-01 09:49:32 ----D---- C:\Program Files\Common Files\InstallShield
2009-09-01 09:41:38 ----D---- C:\Windows\twain_32

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-08-15 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-15 55656]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2008-01-21 95744]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-01 1202560]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-12-29 952832]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-03 21264]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-12-23 2476032]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-02-19 2323680]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2008-09-22 112128]
R3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60x.sys [2008-09-04 223232]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\Drivers\NTIDrvr.sys [2009-03-26 15360]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-12-05 204976]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-01-21 179712]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 MTOnlPktAlyX;MTOnlPktAlyX NDIS Protocol Driver; \??\C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [2006-10-09 17536]
S3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-01-21 30720]
S3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2008-12-02 62976]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840]
S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632]
S3 usbscan;USB-Scannertreiber; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2008-03-18 13312]
R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-08-15 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-15 185089]
R2 CLHNService;CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2008-12-18 75048]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2009-04-15 703008]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-04-11 61184]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-09-23 144632]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 aspnet_state;ASP.NET-Zustandsdienst; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-27 34312]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-07-14 30192]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-14 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-09-23 50424]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------
 

So ich hoffe ich habe alles Richtig gemacht!!!

Gruß

 

Mir fehlt noch die info.txt
Gespeichert unter C:\RSIT

Und bitte den inhalt von C:\rapport.txt

Wo wurde Dir Smitfraud Fix empfohlen?

info.txt logfile of random's system information tool 1.06 2009-11-20 20:20:22

======Uninstall list======

-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2638924D-DC58-4C40-BB1C-48C2B24B7B1B}\Setup.exe" -L0x7
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{52739387-B81C-4C55-9593-EB7A1044A657}\Setup.exe" -L0x7
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\Setup.exe"  -uninstall
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\Setup.exe"  -uninstall
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Arcade Deluxe-->"C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" /z-uninstall
Acer Backup Manager-->C:\Program Files\InstallShield Installation Information\{72B776E5-4530-4C4B-9453-751DF87D9D93}\setup.exe -runfromtemp -l0x0407
Acer eRecovery Management-->"C:\Program Files\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe" -runfromtemp -l0x0007 -removeonly
Acer GridVista-->C:\Windows\GVUni.exe GridV.UNI
Acer PowerSmart Manager-->"C:\Program Files\InstallShield Installation Information\{3DB0448D-AD82-4923-B305-D001E521A964}\setup.exe" -runfromtemp -l0x0007 -removeonly
Acer Product Registration-->"C:\Program Files\InstallShield Installation Information\{DA20E1A8-07CB-4EE7-9B72-A7E28C953F0E}\setup.exe" -runfromtemp -l0x0007 -removeonly
Acer ScreenSaver-->C:\Windows\Screensavers\Acer\Uninstall.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 9 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A90000000001}
Agere Systems HDA Modem-->agrsmdel
Airport Mania First Flight-->"C:\Program Files\Acer GameZone\Airport Mania First Flight\Uninstall.exe" "C:\Program Files\Acer GameZone\Airport Mania First Flight\install.log"
ArcSoft Panorama Maker 4-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D45E8C45-B601-4A80-AFD8-E16338744DE1}\Setup.exe" -l0x7
Ask Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Broadcom Gigabit NetLink Controller-->MsiExec.exe /X{9AF0B106-56F1-461B-A270-95BC1682E282}
C:\Program Files\Acer GameZone\GameConsole-->"C:\Program Files\Acer GameZone\GameConsole\unins000.exe"
Cake Mania 2-->"C:\Program Files\Acer GameZone\Cake Mania 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Cake Mania 2\install.log"
Camera RAW Plug-In for EPSON Creativity Suite-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}\SETUP.EXE" -l0x7 UNINST
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Compatibility Pack für 2007 Office System-->MsiExec.exe /X{90120000-0020-0407-0000-0000000FF1CE}
Cooking Dash-->"C:\Program Files\Acer GameZone\Cooking Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Cooking Dash\install.log"
Cradle of Rome-->"C:\Program Files\Acer GameZone\Cradle of Rome\Uninstall.exe" "C:\Program Files\Acer GameZone\Cradle of Rome\install.log"
CX4300_5500_DX4400 Handbuch-->C:\Program Files\EPSON\TPMANUAL\CX4300_5500_DX4400\DEU\USE_G\DOCUNINS.EXE
Dairy Dash-->"C:\Program Files\Acer GameZone\Dairy Dash\Uninstall.exe" "C:\Program Files\Acer GameZone\Dairy Dash\install.log"
DHTML Editing Component-->MsiExec.exe /I{2EA870FA-585F-4187-903D-CB9FFD21E2E0}
Dream Day Honeymoon-->"C:\Program Files\Acer GameZone\Dream Day Honeymoon\Uninstall.exe" "C:\Program Files\Acer GameZone\Dream Day Honeymoon\install.log"
Dream Day Wedding-->"C:\Program Files\Acer GameZone\Dream Day Wedding\Uninstall.exe" "C:\Program Files\Acer GameZone\Dream Day Wedding\install.log"
EPSON Attach To Email-->C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x7 -UnInstall
EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}\SETUP.EXE" -l0x7 UNINST
EPSON File Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}\Setup.exe" -l0x7 UNINST
EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x7 -u
EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
EPSON-Drucker-Software-->C:\Windows\system32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
eSobi v2-->C:\Program Files\InstallShield Installation Information\{15D967B5-A4BE-42AE-9E84-64CD062B25AA}\setup.exe -runfromtemp -l0x0407
EvenMoreMegaSwellAdsForYou-->C:\Program Files\EvenMoreMegaSwellAdsForYou\uninstall.exe uninstall=evenmoremegaswelladsforyou
FFEvenMoreMegaSwellAdsForYou-->C:\Program Files\Mozilla Firefox\extensions\EvenMoreMegaSwellAdsForYou@EvenMoreMegaSwellAdsForYou\uninstall.exe uninstall=evenmoremegaswelladsforyouff
File Uploader-->MsiExec.exe /X{237CD223-1B9D-47E8-A76C-E478B83CCEA2}
Frostbar-DE Toolbar-->C:\PROGRA~1\FROSTB~1\UNWISE.EXE   /U C:\PROGRA~1\FROSTB~1\INSTALL.LOG 
FrostWire 4.17.2-->C:\Program Files\FrostWire\Uninstall.exe
Galapago-->"C:\Program Files\Acer GameZone\Galapago\Uninstall.exe" "C:\Program Files\Acer GameZone\Galapago\install.log"
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
IncrediMail-->C:\Program Files\IncrediMail\bin\ImSetup.exe /remove /addon:IncrediMail /log:IncMail.log
Intel(R) Graphics Media Accelerator Driver-->C:\Windows\system32\igxpun.exe -uninstall
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Jewel Quest Solitaire-->"C:\Program Files\Acer GameZone\Jewel Quest Solitaire\Uninstall.exe" "C:\Program Files\Acer GameZone\Jewel Quest Solitaire\install.log"
Junk Mail filter update-->MsiExec.exe /I{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}
Launch Manager-->C:\Windows\UNINST32.EXE LManager.UNI
LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x0007 -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x7 LG -removeonly
Luxor 2-->"C:\Program Files\Acer GameZone\Luxor 2\Uninstall.exe" "C:\Program Files\Acer GameZone\Luxor 2\install.log"
Mahjong Escape Ancient China-->"C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\Uninstall.exe" "C:\Program Files\Acer GameZone\Mahjong Escape Ancient China\install.log"
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Meine CEWE FOTOWELT-->"C:\Program Files\real\Meine CEWE FOTOWELT\uninstall.exe"
Microsoft .NET Framework 1.1 German Language Pack-->MsiExec.exe /X{E78BFA60-5393-4C38-82AB-E8019E464EB4}
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - deu\setup.exe
Microsoft .NET Framework 3.5 Language Pack SP1 - deu-->MsiExec.exe /I{052FDD78-A6EA-3187-8386-C82F4CA3A929}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0407-0000-0000000FF1CE} /uninstall {26454C26-D259-4543-AA60-3189E09C5F76}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Excel MUI (German) 2007-->MsiExec.exe /X{90120000-0016-0407-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (German) 2007-->MsiExec.exe /X{90120000-00A1-0407-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (German) 2007-->MsiExec.exe /X{90120000-0018-0407-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (German)-->MsiExec.exe /X{95120000-00AF-0407-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Italian) 2007-->MsiExec.exe /X{90120000-001F-0410-0000-0000000FF1CE}
Microsoft Office Proofing (German) 2007-->MsiExec.exe /X{90120000-002C-0407-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0410-0000-0000000FF1CE} /uninstall {322296D4-1EAE-4030-9FBC-D2787EB25FA2}
Microsoft Office Shared MUI (German) 2007-->MsiExec.exe /X{90120000-006E-0407-0000-0000000FF1CE}
Microsoft Office Suite Activation Assistant-->MsiExec.exe /X{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}
Microsoft Office Word MUI (German) 2007-->MsiExec.exe /X{90120000-001B-0407-0000-0000000FF1CE}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual J# .NET Redistributable Package 1.1-->MsiExec.exe /X{1A655D51-1423-48A3-B748-8F5A0BE294C8}
Microsoft Works-->MsiExec.exe /I{62F7DA7E-CCCB-439C-A760-00C3926E761F}
Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Nikon Message Center-->MsiExec.exe /X{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}
Nikon Transfer-->MsiExec.exe /X{E9757890-7EC5-46C8-99AB-B00F07B6525C}

"