Rechner lahmt und Winamp streikt

18Antworten
  1. #1
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Rechner lahmt und Winamp streikt

    Hallo Leute,

    ich habe bei meinem Rechner das Problem, dass er in letzter Zeit ziemlich lahm geworden ist. Hochfahrehn dauert länger, als am Anfang. Aufbau der Startseite vom Firefox kann bis zu 30 sek. dauern, was vorher in ca. 10 sek. erledigt war. Desweiteren bekomme ich in letzter Zeit auch immer die Meldung, dass Winamp nicht mehr funktioniert und beendet wird, nachdem ich ihn gestartet habe. Version vom Winamp ist die 5.53 noch was. Was kann ich tun, bzw. woran können die Ursachen liegen? Festplatte hab ich schon defragmentiert, Speicherplatz ist frei gegeben und Cookies, etc. sind auch gelöscht.

  2. #2
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard Re: Rechner lahmt und Winamp streikt

    Hallöchen,

    Winamp würde ich mal deinstallieren, dann das System mit dem CCleaner bereinigen und zwar temporäre Dateien und Registry:

    Anleitung und Download CCleaner

    Dann gilt es natürlich zu kontrollieren ob du dir irgendwelche schadhafte Programme eingefangen hast mit deinem Antivirenprogramm und einem Programm das den Rechner nach Spyware durchsucht.

  3. #3
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    Hallo Dirk,

    was für ein Programm bzgl. der Spyware ist denn zu empfehlen? Gibt es da auch gute kostenlose? Ich hab als Anti Virus Programm das Kaspersky Internet Security 7.0.

  4. #4
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard Re: Rechner lahmt und Winamp streikt

    Hallöchen,

    in der Kaspersky Internet Security 7.0 ist auch bereits eine Lösung gegen Spyware enthalten. Also wenn das bei dir aktiv ist und immer aktuell gehalten wird, dann solltest du da eigentlich keine zusätzliche Software benötigen. Hast du denn mal einen kompletten Systemscan gemacht?

  5. #5
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    Hallo Dirk,

    also bei dem kaspersky hab ich soweit alles auf dem aktuellsten Stand. Lasse gerade auch mal die Virensuche durchlaufen, für den Arbeitsplatz, etc. p.p. Hoffe mal, dass das auch ein Systemscan ist. Ansonsten wäre ich für einen Tipp dankbar, wie ich einen Systemscan durchführen kann.

  6. #6
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard Re: Rechner lahmt und Winamp streikt

    Hallöchen,

    Virenscan ist schon mal gut. Zur Not erstellst du einfach mal Logfile mit HijackThis und wir schauen mal drüber...

    Anleitung und Download HijackThis


  7. #7
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    So, also mit Hijack This hab ich es gerade gemacht. Folgendes ist dabei heraus gekommen.

    Logfile of HijackThis v1.99.1
    Scan saved at 14:27:06, on 23.04.2008
    Platform: Unknown Windows (WinNT 6.00.1905 SP1)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)

    Running processes:
    C:\Windows\Explorer.EXE
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
    C:\Program Files\ASUS\AI Gear\GearHelp.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Analog Devices\Core\smax4pnp.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Users\Björn\Documents\Dateien\HijackThis.exe
    C:\Windows\system32\werfault.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.daemon-search.com/startpage
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
    O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Statistik für Web-Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
    O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
    O11 - Options group: [INTERNATIONAL] International*
    O13 - Gopher Prefix:
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DL L
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll,C:\PROG RA~1\KASPER~1\KASPER~1.0\adialhk.dll
    O20 - Winlogon Notify: klogon - C:\Windows\system32\klogon.dll
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r (file missing)
    O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
    O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: lxdb_device - - C:\Windows\system32\lxdbcoms.exe
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
    O23 - Service: UPnPService - Magix AG - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

  8. #8
    Avatar von Humdinger
    Humdinger ist offline

    Title
    Benutzer
    seit
    18.01.2008
    Ort
    Mainz
    Beiträge
    174

    Standard Re: Rechner lahmt und Winamp streikt

    Dieses:

    C:\Windows\system32\lxdbcoms.exe

    hier prüfen lassen, Ergebnis posten
    https://www.virustotal.com/de

    CCleaner ausführen
    https://www.paules-pc-infothek.de/ppf2/v ... php?t=1138

    combofix ausführen,
    warnmeldung ignorieren, vollständig posten (Kaspersky dabei deaktivieren)
    https://virus-protect.org/artikel/tools/combofix.html

  9. #9
    Avatar von computerdirk
    computerdirk ist offline

    Title
    Benutzer
    seit
    07.01.2005
    Ort
    Ilsede
    Beiträge
    12.171

    Standard Re: Rechner lahmt und Winamp streikt

    Hallöchen,

    die Datei C:\Windows\system32\lxdbcoms.exe könnte zu einem Drucker gehören. Hast du zufällig die Treiber und Software für einen Lexmark auf deinem Rechner?

  10. #10
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    Ja, ich habe Treiber für meinen Lexmark auf dem Rechner installiert. Winamp ist neu installiert und funktioniert jetzt auch. Nur der Rechner ist noch etwas lahm. Unter diesem ComboFix habe ich folgendes angezeigt bekommen:

    ComboFix 08-04-22.5 - Björn 2008-04-23 20:53:08.1 - NTFSx86
    Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1252.1.1031.18.1218 [GMT 2:00]
    ausgeführt von:: C:\Users\Björn\Desktop\ComboFix.exe
    * Neuer Wiederherstellungspunkt wurde erstellt
    .

    ((((((((((((((((((((((( Dateien erstellt von 2008-03-23 bis 2008-04-23 ))))))))))))))))))))))))))))))
    .

    2008-04-23 14:29 . 2008-04-23 14:34<DIR>d--------C:\Users\Björn\AppData\Roaming\Winamp
    2008-04-23 14:29 . 2008-04-23 14:30<DIR>d--------C:\Program Files\Winamp
    2008-04-23 11:04 . 2008-04-23 11:040--ah-----C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_ 00.Wdf
    2008-04-22 23:52 . 2008-04-22 23:52<DIR>d--------C:\PerfLogs
    2008-04-22 23:07 . 2008-04-22 22:24152,576--a------C:\Windows\System32\SPWizUI.dll
    2008-04-22 23:07 . 2008-04-22 22:2447,560--a------C:\Windows\System32\SPReview.exe
    2008-04-22 22:38 . 2008-01-18 23:33193,024--a------C:\Windows\System32\recdisc.exe
    2008-04-22 22:38 . 2008-01-18 23:366,656--a------C:\Windows\System32\sdspres.dll
    2008-04-22 22:37 . 2008-01-18 23:33599,552--a------C:\Windows\System32\vsp1cln.exe
    2008-04-22 22:37 . 2008-01-18 23:36142,336--a------C:\Windows\System32\spp.dll
    2008-04-22 22:37 . 2008-01-18 23:3628,160--a------C:\Windows\System32\sxproxy.dll
    2008-04-22 22:27 . 2008-01-18 21:318,322,048--a------C:\Windows\System32\spwizimg.dll
    2008-04-22 22:25 . 2008-01-18 23:3344,032--a------C:\Windows\System32\cbsra.exe
    2008-04-22 22:24 . 2008-04-22 23:09196,608--a------C:\Windows\SPInstall.etl
    2008-04-21 10:58 . 2008-03-12 22:21678,408--a------C:\Windows\System32\gpprefcl.dll
    2008-04-21 10:31 . 2006-10-19 03:1112,096--a------C:\Windows\System32\drivers\AsInsHelp64.sys
    2008-04-21 10:31 . 2006-10-19 03:1110,304--a------C:\Windows\System32\drivers\AsInsHelp32.sys
    2008-04-21 10:07 . 2008-04-21 10:07<DIR>d--------C:\Program Files\Common Files\ATI Technologies
    2008-04-21 09:59 . 2008-04-21 10:06<DIR>d--------C:\Program Files\ATI Technologies
    2008-04-21 09:59 . 2008-04-21 09:59<DIR>d--------C:\Program Files\ATI
    2008-04-21 09:58 . 2008-04-21 09:58<DIR>d--------C:\ATI
    2008-04-21 09:54 . 2008-04-21 09:54<DIR>d--------C:\Windows\System32\RTL8187
    2008-04-21 09:54 . 2008-04-21 09:54<DIR>d--------C:\Program Files\REALTEK USB Wireless LAN Driver and Utility
    2008-04-21 09:54 . 2007-02-08 18:46211,456--a------C:\Windows\System32\drivers\rtl8187B.sys
    2008-04-17 13:29 . 2008-04-17 13:29<DIR>d--------C:\Users\All Users\IncrediMail
    2008-04-17 13:29 . 2008-04-17 13:33<DIR>d--------C:\Users\All Users\IM
    2008-04-17 13:29 . 2008-04-17 13:29<DIR>d--------C:\ProgramData\IncrediMail
    2008-04-17 13:29 . 2008-04-17 13:33<DIR>d--------C:\ProgramData\IM
    2008-04-16 19:50 . 2008-04-16 19:50<DIR>d--------C:\Program Files\REALTEK RTL8187 Wireless LAN Driver
    2008-04-16 19:50 . 2006-12-12 12:32192,512-r-------C:\Windows\System32\drivers\rtl8187.sys
    2008-04-15 20:21 . 2006-01-20 14:4355,808-ra------C:\Windows\System32\avmadd32.dll
    2008-04-15 20:21 . 2006-05-29 03:0016,384-ra------C:\Windows\System32\avmprmon.dll
    2008-04-11 17:23 . 2008-04-11 17:2338,400--a------C:\Windows\System32\SoundSchemes.exe
    2008-04-10 20:03 . 2008-04-10 20:06<DIR>d--------C:\Users\Björn\AppData\Roaming\SpeedSim
    2008-04-09 19:32 . 2008-02-29 09:11988,216--a------C:\Windows\System32\winload.exe
    2008-04-09 19:32 . 2008-02-29 09:11927,288--a------C:\Windows\System32\winresume.exe
    2008-04-09 19:32 . 2008-02-22 07:05615,992--a------C:\Windows\System32\ci.dll
    2008-04-09 19:32 . 2008-02-29 08:53378,368--a------C:\Windows\System32\srcore.dll
    2008-04-09 19:32 . 2008-02-29 06:12318,464--a------C:\Windows\System32\rstrui.exe
    2008-04-09 19:32 . 2008-02-29 08:5346,592--a------C:\Windows\System32\setbcdlocale.dll
    2008-04-09 19:32 . 2008-02-29 08:5340,960--a------C:\Windows\System32\srclient.dll
    2008-04-09 19:32 . 2008-02-29 09:1419,000--a------C:\Windows\System32\kd1394.dll
    2008-04-09 19:32 . 2008-02-29 06:1214,848--a------C:\Windows\System32\srdelayed.exe
    2008-04-09 19:32 . 2008-02-29 08:356,656--a------C:\Windows\System32\kbd106n.dll
    2008-04-09 19:31 . 2008-02-29 06:212,032,128--a------C:\Windows\System32\win32k.sys
    2008-04-09 19:31 . 2008-02-22 04:501,383,424--a------C:\Windows\System32\mshtml.tlb
    2008-04-09 19:31 . 2008-02-22 07:01826,880--a------C:\Windows\System32\wininet.dll
    2008-04-09 19:31 . 2008-02-22 06:57295,936--a------C:\Windows\System32\gdi32.dll
    2008-03-29 08:24 . 2008-03-29 08:243,544,064--a------C:\Windows\System32\drivers\atikmdag.sys
    2008-03-29 06:19 . 2008-03-29 06:19372,736--a------C:\Windows\System32\ATIDEMGX.dll
    2008-03-29 06:18 . 2008-03-29 06:18249,856--a------C:\Windows\System32\Oemdspif.dll
    2008-03-29 06:12 . 2008-03-29 06:129,662,464--a------C:\Windows\System32\atioglxx.dll
    2008-03-29 05:41 . 2008-03-29 05:4147,104--a------C:\Windows\System32\amdpcom32.dll
    2008-03-29 05:29 . 2008-03-29 05:2949,152--a------C:\Windows\System32\drivers\ati2erec.dll

    .
    (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))) ))))
    .
    2008-04-23 18:572,621,440----a-wC:\Users\Björn\ntuser.dat
    2008-04-23 18:572,621,440----a-wC:\Users\Björn\ntuser.dat
    2008-04-23 18:569,558,560--sha-wC:\Windows\system32\drivers\fidbox.dat
    2008-04-23 14:52---------d-----wC:\ProgramData\Kaspersky Lab
    2008-04-23 14:15128,468--sha-wC:\Windows\system32\drivers\fidbox.idx
    2008-04-23 12:34---------d-----wC:\Users\Björn\AppData\Roaming\Winamp
    2008-04-22 22:06174--sha-wC:\Program Files\desktop.ini
    2008-04-22 21:53---------d-----wC:\Program Files\Windows Sidebar
    2008-04-22 21:53---------d-----wC:\Program Files\Windows Photo Gallery
    2008-04-22 21:53---------d-----wC:\Program Files\Windows Mail
    2008-04-22 21:53---------d-----wC:\Program Files\Windows Journal
    2008-04-22 21:53---------d-----wC:\Program Files\Windows Defender
    2008-04-22 21:53---------d-----wC:\Program Files\Windows Collaboration
    2008-04-22 21:53---------d-----wC:\Program Files\Windows Calendar
    2008-04-22 21:3082,432----a-wC:\Windows\System32\axaltocm.dll
    2008-04-22 21:30101,888----a-wC:\Windows\System32\ifxcardm.dll
    2008-04-22 14:52---------d-----wC:\Program Files\Lx_cats
    2008-04-21 08:57---------d-----wC:\ProgramData\Microsoft Help
    2008-04-21 08:33---------d--h--wC:\Program Files\InstallShield Installation Information
    2008-04-21 08:33---------d-----wC:\Program Files\ASUS
    2008-04-21 08:07---------d-s---wC:\Users\Björn\AppData\Roaming\Microsoft
    2008-04-17 14:2796,645----a-wC:\Windows\system32\drivers\klin.dat
    2008-04-17 14:2787,941----a-wC:\Windows\system32\drivers\klick.dat
    2008-04-16 14:37---------d-----wC:\Program Files\ICQ6
    2008-04-10 18:06---------d-----wC:\Users\Björn\AppData\Roaming\SpeedSim
    2008-04-10 18:02---------d-----wC:\Program Files\SpeedSim
    2008-04-01 17:20---------d-----wC:\Program Files\Messenger Plus! Live
    2008-03-31 23:2322,328----a-wC:\Windows\system32\drivers\PnkBstrK.sys
    2008-03-31 23:23103,736----a-wC:\Windows\System32\PnkBstrB.exe
    2008-03-29 04:19159,744----a-wC:\Windows\System32\atitmmxx.dll
    2008-03-29 04:1843,520----a-wC:\Windows\System32\ati2edxx.dll
    2008-03-29 04:18315,392----a-wC:\Windows\System32\atipdlxx.dll
    2008-03-29 04:18253,952----a-wC:\Windows\System32\Ati2evxx.dll
    2008-03-29 04:17667,648----a-wC:\Windows\System32\Ati2evxx.exe
    2008-03-29 04:053,074,560----a-wC:\Windows\System32\atiumdag.dll
    2008-03-29 03:514,088,320----a-wC:\Windows\System32\atiumdva.dll
    2008-03-26 15:28---------d-----wC:\Users\Björn\AppData\Roaming\ICQ
    2008-03-20 09:43---------d-----wC:\Program Files\Common Files\Adobe
    2008-03-19 13:22---------d-----wC:\Program Files\Kaspersky Lab
    2008-03-19 13:21---------d-----wC:\ProgramData\Kaspersky Lab Setup Files
    2008-03-19 13:20---------d-----wC:\ProgramData\Avira
    2008-03-18 18:28---------d-----wC:\Program Files\MSBuild
    2008-03-18 18:28---------d-----wC:\Program Files\Microsoft Works
    2008-03-18 18:26---------d-----wC:\Program Files\Microsoft.NET
    2008-03-18 18:23---------d-----wC:\Program Files\Microsoft Visual Studio 8
    2008-03-17 09:15---------d-----wC:\Program Files\Common Files\BitDefender
    2008-03-17 09:1281,984----a-wC:\Windows\System32\bdod.bin
    2008-03-14 11:26---------d-----wC:\ProgramData\Messenger Plus!
    2008-03-10 13:11---------d-----wC:\ProgramData\ATI
    2008-03-10 11:50---------d-----wC:\Users\Björn\AppData\Roaming\LimeWire
    2008-03-06 18:27---------d-----wC:\Users\Björn\AppData\Roaming\Teleca
    2008-03-06 18:13---------d-----wC:\ProgramData\Teleca
    2008-03-06 18:13---------d-----wC:\ProgramData\Sony Ericsson
    2008-03-06 18:13---------d-----wC:\Program Files\Sony Ericsson
    2008-03-06 18:13---------d-----wC:\Program Files\Common Files\Teleca Shared
    2008-03-06 18:13---------d-----wC:\Program Files\Common Files\Sony Ericsson Shared
    2008-03-05 12:26---------d-----wC:\Users\Björn\AppData\Roaming\DAEMON Tools
    2008-03-05 12:26---------d-----wC:\Program Files\DAEMON Tools Lite
    2008-03-05 12:00716,272----a-wC:\Windows\system32\drivers\sptd.sys
    2008-03-04 23:0290,112----a-wC:\Windows\System32\atibrtmon.exe
    2008-03-04 12:05---------d-----wC:\Program Files\Common Files\Nero
    2008-03-04 11:09---------d-----wC:\ProgramData\Nero
    2008-02-26 17:5821,504----a-wC:\Windows\jestertb.dll
    2008-02-25 09:42---------d-----wC:\Program Files\Microsoft Silverlight
    .

    (((((((((((((((((((((((((((( Autostart Punkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Hinweis* leere Eintrage & legitime Standardeintrage werden nicht angezeigt.

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
    "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [2007-06-26 17:53 218376]
    "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [ ]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
    "EnableUIADesktopToggle"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0\r3h ook.dll,C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dl l

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\DomainProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\FirewallRules]
    "{033B604A-1739-4AF2-87BC-BA5CFB0D7829}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "TCP Query User{D753556A-7BAA-4568-A178-8C7A18DE62E8}C:\\program files\\icq6\\icq.exe"= UDP:C:\program files\icq6\icq.exe:ICQ Library
    "UDP Query User{2552D0BE-183C-4F06-8BD2-E1DDDFAEB654}C:\\program files\\icq6\\icq.exe"= TCP:C:\program files\icq6\icq.exe:ICQ Library
    "TCP Query User{BAADB5A7-DF91-4F9D-B128-171E62EB32D1}C:\\program files\\limewire\\limewire.exe"= UDP:C:\program files\limewire\limewire.exe:LimeWire
    "UDP Query User{C66AB0A7-D5A8-4930-B6D9-AD6E1510A192}C:\\program files\\limewire\\limewire.exe"= TCP:C:\program files\limewire\limewire.exe:LimeWire
    "TCP Query User{632EB57F-C0DF-4D82-AEB9-332619DD88FD}C:\\program files\\electronic arts\\need for speed prostreet\\nfs.exe"= UDP:C:\program files\electronic arts\need for speed prostreet\nfs.exe:nfs
    "UDP Query User{6A853B26-733E-4790-AB8C-EED88B7735A4}C:\\program files\\electronic arts\\need for speed prostreet\\nfs.exe"= TCP:C:\program files\electronic arts\need for speed prostreet\nfs.exe:nfs
    "{C6FDBEA4-265F-4384-992D-12423DD934A6}"= UDP:C:\Windows\System32\lxdbcoms.exe:Lexmark Communications System
    "{DB3A1B5D-5D86-4B00-8847-7BD98BF04346}"= TCP:C:\Windows\System32\lxdbcoms.exe:Lexmark Communications System
    "{7A4594B2-3D17-4685-8D5F-8348B1646927}"= UDP:C:\Windows\System32\spool\drivers\w32x86\3\lxd bpswx.exe:Printer Status Window
    "{F637A44C-800D-428B-8A02-EC32128373DB}"= TCP:C:\Windows\System32\spool\drivers\w32x86\3\lxd bpswx.exe:Printer Status Window
    "TCP Query User{FC9FD747-BB16-4C20-8958-0A08B40CA41F}C:\\programdata\\kaspersky lab setup files\\kaspersky internet security 7.0.1.321\\german\\setup.exe"= UDP:C:\programdata\kaspersky lab setup files\kaspersky internet security 7.0.1.321\german\setup.exe:Installationsprogramm für Kaspersky Internet Security 7.0
    "UDP Query User{3321D4A5-196E-4A45-BDF1-84EE32EB0DD2}C:\\programdata\\kaspersky lab setup files\\kaspersky internet security 7.0.1.321\\german\\setup.exe"= TCP:C:\programdata\kaspersky lab setup files\kaspersky internet security 7.0.1.321\german\setup.exe:Installationsprogramm für Kaspersky Internet Security 7.0
    "TCP Query User{98993751-C536-4166-8BA7-2C8D6FBA789F}C:\\program files\\azureus\\azureus.exe"= UDP:C:\program files\azureus\azureus.exe:Azureus
    "UDP Query User{4A70BA05-3B73-4D01-B388-D36CFA5A1BDC}C:\\program files\\azureus\\azureus.exe"= TCP:C:\program files\azureus\azureus.exe:Azureus
    "TCP Query User{33985AC9-9064-4B1A-994F-65EE32594E41}C:\\program files\\intervideo\\dvd8\\windvd.exe"= UDP:C:\program files\intervideo\dvd8\windvd.exe:WinDVD
    "UDP Query User{BD80CB46-EB6F-415C-8C72-41693B2031B1}C:\\program files\\intervideo\\dvd8\\windvd.exe"= TCP:C:\program files\intervideo\dvd8\windvd.exe:WinDVD
    "TCP Query User{CF3373E4-EAE2-4426-BA4E-B4B7A766501E}C:\\program files\\dc++\\dcplusplus.exe"= UDP:C:\program files\dc++\dcplusplus.exeC++
    "UDP Query User{DA58E7D9-7676-48B4-9C51-712A7C559E00}C:\\program files\\dc++\\dcplusplus.exe"= TCP:C:\program files\dc++\dcplusplus.exeC++
    "TCP Query User{9E9417EE-7F0B-43C0-A802-AD38484052E0}C:\\program files\\edonkey2000\\edonkey2000.exe"= UDP:C:\program files\edonkey2000\edonkey2000.exe:edonkey2000
    "UDP Query User{49632246-0D27-4531-BC6B-B8B6CDCE1F54}C:\\program files\\edonkey2000\\edonkey2000.exe"= TCP:C:\program files\edonkey2000\edonkey2000.exe:edonkey2000
    "TCP Query User{EC4CA790-7BD6-40DF-944A-188A3DD0FD14}C:\\program files\\abc\\abc.exe"= UDP:C:\program files\abc\abc.exe:abc
    "UDP Query User{F7101712-645B-4391-A2F8-0C65751AD58E}C:\\program files\\abc\\abc.exe"= TCP:C:\program files\abc\abc.exe:abc
    "TCP Query User{3799D571-4137-47B5-94FF-53E9A417FA11}C:\\program files\\common files\\nero\\nero web\\setupx.exe"= UDP:C:\program files\common files\nero\nero web\setupx.exe:MSI starter
    "UDP Query User{4E45A108-2078-4213-A6D1-3FCBF256D42C}C:\\program files\\common files\\nero\\nero web\\setupx.exe"= TCP:C:\program files\common files\nero\nero web\setupx.exe:MSI starter
    "TCP Query User{BD10D254-0DEE-49B6-BBE1-3D606EEFBD1A}C:\\users\\björn\\appdata\\local\\te mp\\onlineupdate8\\setupxu.exe"= UDP:C:\users\björn\appdata\local\temp\onlineupdat e8\setupxu.exe:setupxu.exe
    "UDP Query User{11419A83-5CE2-4D3B-A4AB-CB98D36AD951}C:\\users\\björn\\appdata\\local\\te mp\\onlineupdate8\\setupxu.exe"= TCP:C:\users\björn\appdata\local\temp\onlineupdat e8\setupxu.exe:setupxu.exe
    "TCP Query User{E75B31E5-9FAC-41BA-91C3-35B2C95AD613}C:\\program files\\azureus\\azureus.exe"= UDP:C:\program files\azureus\azureus.exe:Azureus
    "UDP Query User{B13B0BE3-9533-49CB-B867-B81C7F6E7394}C:\\program files\\azureus\\azureus.exe"= TCP:C:\program files\azureus\azureus.exe:Azureus
    "TCP Query User{8E423915-72DF-4E45-B4C9-525E70722EC4}C:\\program files\\bearshare applications\\bearshare\\bearshare.exe"= UDP:C:\program files\bearshare applications\bearshare\bearshare.exe:BearShare
    "UDP Query User{BA1AD434-D60F-4792-8BFD-1831CA7CD9D5}C:\\program files\\bearshare applications\\bearshare\\bearshare.exe"= TCP:C:\program files\bearshare applications\bearshare\bearshare.exe:BearShare
    "{EA05DC02-7619-4A3C-BB57-FC9516A70E4E}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
    "{7398761B-E472-4F22-8B86-953A91FDB651}"= UDP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{82EA761D-706D-4707-BAF5-91C4C5F7A4A4}"= TCP:C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{A3CF05C1-23A4-49EE-91A4-B5B9670FF0FF}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{0A08A95F-CAE4-4548-BDCD-A70B2196FD07}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{8D50BE1C-D248-4E6B-97A7-DBDDB533ABB7}"= Disabled:UDP:\fsetup.exe:AVM FSetup Application
    "{B81AC208-3B63-4FC6-BE7C-14ABD97E4264}"= Disabled:TCP:\fsetup.exe:AVM FSetup Application
    "{D82F783E-D266-40E4-A5FD-762F9E991D80}"= Disabled:UDP:C:\Program Files\IncrediMail\bin\IncMail.exe:IncrediMail
    "{445BB0BD-2B70-4F07-8858-32420AC2EC68}"= Disabled:TCP:C:\Program Files\IncrediMail\bin\IncMail.exe:IncrediMail
    "{E3ACC146-0CDB-456F-8C74-FA7D3CFD0CB8}"= Disabled:UDP:C:\Program Files\IncrediMail\bin\ImApp.exe:IncrediMail
    "{E673E069-ABFD-4B86-9508-AA4F7E848F66}"= Disabled:TCP:C:\Program Files\IncrediMail\bin\ImApp.exe:IncrediMail
    "{3F4E2F06-7A51-4DE5-93D2-7E8A79F394BA}"= Disabled:UDP:C:\Program Files\IncrediMail\bin\ImpCnt.exe:IncrediMail
    "{C8C1AE4B-320F-4AD4-8C7C-F04C2B528F13}"= Disabled:TCP:C:\Program Files\IncrediMail\bin\ImpCnt.exe:IncrediMail

    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\PublicProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\StandardProfile]
    "EnableFirewall"= 0 (0x0)

    R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\system32\DRIVERS\klim6.sys [2007-04-04 15:59]
    R2 lxdb_device;lxdb_device;C:\Windows\system32\lxdbco ms.exe [2007-02-02 04:17]
    R3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atik mdag.sys [2008-03-29 08:24]
    R3 RTL8187;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;C:\Windows\system32\DRIVERS\RTL8187.sys [2006-12-12 12:32]
    R3 SNP325;USB PC Camera (SNPSTD325);C:\Windows\system32\DRIVERS\snp325.sys [2007-05-07 18:58]
    S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 16:18]
    S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2008-03-29 08:24]
    S3 s125bus;Sony Ericsson Device 125 driver (WDM);C:\Windows\system32\DRIVERS\s125bus.sys [2007-04-24 12:33]
    S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;C:\Windows\system32\DRIVERS\s125mdfl.sys [2007-04-24 12:33]
    S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;C:\Windows\system32\DRIVERS\s125mdm.sys [2007-04-24 12:33]
    S3 se3ebus;Sony Ericsson Device 062 (WDM);C:\Windows\system32\DRIVERS\se3ebus.sys [2007-04-10 16:14]
    S3 se3emdfl;Sony Ericsson Device 062 USB WMC Modem Filter;C:\Windows\system32\DRIVERS\se3emdfl.sys [2007-04-10 16:14]
    S3 se3emdm;Sony Ericsson Device 062 USB WMC Modem Driver;C:\Windows\system32\DRIVERS\se3emdm.sys [2007-04-10 16:14]
    S3 se3emgmt;Sony Ericsson Device 062 USB WMC Device Management Drivers (WDM);C:\Windows\system32\DRIVERS\se3emgmt.sys [2007-04-10 16:14]
    S3 se3eobex;Sony Ericsson Device 062 USB WMC OBEX Interface;C:\Windows\system32\DRIVERS\se3eobex.sys [2007-04-10 16:14]
    S3 UPnPService;UPnPService;C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 18:00]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    GPSvcGroupREG_MULTI_SZ GPSvc

    [HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{0a86e221-c2cd-11dc-9fc3-001d6085c32e}]
    \shell\AutoRun\command - F:\Setupx.exe

    *Newly Created Service* - CATCHME

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}]
    %SystemRoot%\system32\soundschemes.exe /AddRegistration
    .
    Inhalt des "geplante Tasks" Ordners
    "2008-04-04 15:15:00 C:\Windows\Tasks\1-Klick-Wartung.job"
    - C:\Program Files\TuneUp Utilities 2008\OneClick.exe
    .
    ************************************************** ************************

    catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, https://www.gmer.net
    Rootkit scan 2008-04-23 20:57:22
    Windows 6.0.6001 Service Pack 1 NTFS

    Scanne versteckte Prozesse...

    Scanne versteckte Autostart Einträge...

    Scanne versteckte Dateien...

    Scan erfolgreich abgeschlossen
    versteckte Dateien: 2

    ************************************************** ************************
    .
    Zeit der Fertigstellung: 2008-04-23 20:59:16
    ComboFix-quarantined-files.txt 2008-04-23 18:59:08

    9 Verzeichnis(se), 191,165,247,488 Bytes frei
    17 Verzeichnis(se), 191,121,375,232 Bytes frei

    237--- E O F ---2008-04-23 09:52:02

  11. #11
    Avatar von Humdinger
    Humdinger ist offline

    Title
    Benutzer
    seit
    18.01.2008
    Ort
    Mainz
    Beiträge
    174

    Standard Re: Rechner lahmt und Winamp streikt

    Bearshare, Limewire etc..?

    Scanne mal mit CounterSpy im abgesicherten Modus (bei Neustart F8 drücken)
    https://www.paules-pc-infothek.de/ppf2/v ... php?t=1201
    wähle immer REMOVE

    poste den Report nach Neustart

  12. #12
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    Bearshare, Limewire, Azureus und wie die ganzen Dinger alle heißen, hatte ich zuletzt auf meinem XP Rechner gehabt. Seitdem ich Vista habe, ist da gar nichts mehr von vorhanden. Hab ja den ganzen PC soweit neu aufgerüstet.

  13. #13
    Avatar von Humdinger
    Humdinger ist offline

    Title
    Benutzer
    seit
    18.01.2008
    Ort
    Mainz
    Beiträge
    174

    Standard Re: Rechner lahmt und Winamp streikt

    Ja als Programme nicht, aber in der Registery sind wahrscheinlich noch reste. Die Firewall verzeichnete jedenfalls jede Menge dieser Filesharing Tools.

    Also was schadet eine Überprüfung mit CounterSpy im abgesicherten Modus?

    Kaspersky Internet Security bereinigt leider nicht die Registery Einträge!

  14. #14
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    Wenn in der Registry noch Reste verzeichnet sind, dann muss man sie doch irgendwie entfernen können, oder nicht? In den abgesicherten Modus mit F8 komme ich beim Neustart nicht rein. Mir wird dann nur das boot menü angezeigt. Entweder kann ich die Festplatte, oder eines meiner beiden DVD Laufwerke auswählen. Abgesicherter Modus ist nirgends zu sehen.

  15. #15
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    So, hier ist erstmal die eine Sache von CounterSpy

    Scan History Details
    Start Date: 24.04.2008 16:39:55
    End Date: 24.04.2008 17:38:31
    Total Time: 58 Min 36 Sec
    Detected security risks

    KaZaA P2P Program more information...
    Details: KaZaA is a peer-to-peer (P2P) application that allows its users to join together in a network via the Internet and share files from each other's hard drives.
    Status: Ignored

    Registry entries detected
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\KAZAA
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\KAZAA\LocalContent


    Messenger Plus! Adware Bundler more information...
    Details: Messenger Plus! is a add-on for MSN Messenger. Messenger Plus! installs an OPTIONAL adware called C2Media which is also known as LOP.com.
    Status: Ignored

    Files detected
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Detoured.dll
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Events Style Sheet.xsl
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\lame_enc.dll
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Arabic.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_ChineseSimplified.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_ChineseTraditional.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Danish.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Default.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Dutch.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Estonian.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Finnish.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_French.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_German.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Hebrew.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Hungarian.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Italian.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Japanese.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Korean.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Norwegian.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Portuguese.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Spanish.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Swedish.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Thai.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Languages\Lng_Turkish.ini
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\libsndfile.dll
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\Log Viewer.exe
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\MPScripts.dll
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\MPSkins.dll
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\MPTools.exe
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\MsgPlusLive.dll
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\MsgPlusLiveRes.dll
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\MsgPlusLoader.dll
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\INTERFACE
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\LANGUAGES
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\SCRIPTS
    C:\PROGRAM FILES\MESSENGER PLUS! LIVE\SKINS

    Registry entries detected
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.ENCRYP TED
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.ENCRYP TED
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.ENCRYP TED\DefaultIcon
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.ENCRYP TED\DefaultIcon
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.ENCRYP TED\shell
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.ENCRYP TED\shell\open
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.ENCRYP TED\shell\open\command
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.ENCRYP TED\shell\open\command
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.SOUNDP ACK
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.SOUNDP ACK
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.SOUNDP ACK\DefaultIcon
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.SOUNDP ACK\DefaultIcon
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.SOUNDP ACK\shell
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.SOUNDP ACK\shell\open
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.SOUNDP ACK\shell\open\command
    HKEY_LOCAL_MACHINE\Software\Classes\MSGPLUS.SOUNDP ACK\shell\open\command
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_LOCAL_MACHINE\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\DefaultSettings
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\DefaultSettings\Contacts
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\DefaultSettings\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AbSbMlLREz TU
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AbSbMlLREz TU
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AbSbMlLREz TU
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AbSbMlLREz TU
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AuhQhDJTPS gs
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AuhQhDJTPS gs
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AuhQhDJTPS gs
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AuubBTGoai jX
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\AuubBTGoai jX
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BBWwjMszEr VL
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BBWwjMszEr VL
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BBWwjMszEr VL
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BNQfXSxDBV Sh
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BNQfXSxDBV Sh
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BNQfXSxDBV Sh
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BRWnZSwwib FV
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BRWnZSwwib FV
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BZOzWbRJNY uo
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BZOzWbRJNY uo
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BZOzWbRJNY uo
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\BZOzWbRJNY uo
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\CgdLTYhRHE ms
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\CgdLTYhRHE ms
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\CvUeurWqoa xM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\CvUeurWqoa xM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\DFCypLNEqg vC
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\DFCypLNEqg vC
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\DFCypLNEqg vC
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\DTJKszJZIn RR
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\DTJKszJZIn RR
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\EfKgeerZZV Km
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\EfKgeerZZV Km
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\EfKgeerZZV Km
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\ElHMignOvP Of
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\ElHMignOvP Of
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\ElHMignOvP Of
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\EpPOrPAouh VQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\EpPOrPAouh VQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\FNTKfZQlQo bB
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\FNTKfZQlQo bB
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\FNTKfZQlQo bB
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\HGbTIsrWss of
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\HGbTIsrWss of
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\HGbTIsrWss of
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\HQpZEwmxGx FZ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\HQpZEwmxGx FZ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\IjXFEmnAac xU
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\IjXFEmnAac xU
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\IpYbVLYikt NT
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\IpYbVLYikt NT
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\IpYbVLYikt NT
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\IpYbVLYikt NT
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\JPAepYkxIj JQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\JPAepYkxIj JQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\JYlLHBQaoy lQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\JYlLHBQaoy lQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\JYlLHBQaoy lQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KgydSvZSjC ih
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KgydSvZSjC ih
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KgydSvZSjC ih
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KgydSvZSjC ih
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KlSywbCqmu pM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KlSywbCqmu pM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KlSywbCqmu pM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KlSywbCqmu pM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KrOerXEjQu vI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KrOerXEjQu vI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KrOerXEjQu vI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\KrOerXEjQu vI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\LVFAcyiehS qw
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\LVFAcyiehS qw
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\LVFAcyiehS qw
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\LVFAcyiehS qw
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\MusfMxDYrE wm
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\MusfMxDYrE wm
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\MusfMxDYrE wm
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\MusfMxDYrE wm
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\MxDXItJXXE wm
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\MxDXItJXXE wm
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\NQqmuxFArR BO
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\NQqmuxFArR BO
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\NQqmuxFArR BO
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\NQqmuxFArR BO
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\NVGsqklKzX Gb
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\NVGsqklKzX Gb
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\PCnRGwglOz BP
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\PCnRGwglOz BP
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\PMfWkeotWp RF
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\PMfWkeotWp RF
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\PMfWkeotWp RF
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\PMfWkeotWp RF
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\QmoegxOuec lM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\QmoegxOuec lM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\QmoegxOuec lM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\QmoegxOuec lM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\RBYfXCvNZY nJ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\RBYfXCvNZY nJ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\RBYfXCvNZY nJ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\RBYfXCvNZY nJ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SjLCcabOoq lI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SjLCcabOoq lI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SjLCcabOoq lI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SjLCcabOoq lI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SjUnHNRPJP Ky
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SjUnHNRPJP Ky
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SjUnHNRPJP Ky
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SjUnHNRPJP Ky
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SmgmiczFZY tP
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\SmgmiczFZY tP
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\TEvWvLQaxC uu
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\TEvWvLQaxC uu
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\TEvWvLQaxC uu
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\TVHVFYbFBT Ob
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\TVHVFYbFBT Ob
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\TVHVFYbFBT Ob
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\TVHVFYbFBT Ob
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\VRAiuiytAi hJ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\VRAiuiytAi hJ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\XJMxIkuqtE ct
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\XJMxIkuqtE ct
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\YxTROmlPUh TB
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\YxTROmlPUh TB
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\YxTROmlPUh TB
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\ZGopUxCxLO nR
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\ZGopUxCxLO nR
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\ZVOqckuzCv XL
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\ZVOqckuzCv XL
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Contacts\ZVOqckuzCv XL
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\CustomN otifs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\QuickTe xts
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\QuickTe xts\QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\QuickTe xts\QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\QuickTe xts\QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\QuickTe xts\QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences\QuickTe xts\QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\dreamcatcher25@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\02970FFE0178
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\02970FFE0178
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\02970FFE0178
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\02970FFE0178
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\02970FFE0178
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\336E35DF55B1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\336E35DF55B1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\336E35DF55B1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\336E35DF55B1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\CustSounds\336E35DF55B1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\Scripts
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\GlobalSettings\Skins
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\DPXTQsghEhFQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\DPXTQsghEhFQ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\FHApQzTPXMmk
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\FHApQzTPXMmk
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\FHApQzTPXMmk
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\FJImdKufOfNH
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\FJImdKufOfNH
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\GopBNWjXRSeo
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\GopBNWjXRSeo
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\MxKrPJAouhFP
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\MxKrPJAouhFP
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\MxKrPJAouhFP
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\NGxBBZSgymdM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\NGxBBZSgymdM
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\OtEoqzEwwihI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\OtEoqzEwwihI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\OtEoqzEwwihI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\OtEoqzEwwihI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\UuauavQaoqdI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\UuauavQaoqdI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\UuauavQaoqdI
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\VFCkvSrSqglJ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\VFCkvSrSqglJ
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\YkkyogzUvJCn
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Contacts\YkkyogzUvJCn
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\CustomNoti fs\CustomNotif2
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\QuickTexts
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\QuickTexts \QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\QuickTexts \QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\QuickTexts \QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\QuickTexts \QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live\rockangel21@hotmail.de\Preferences\QuickTexts \QuickText1
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live
    HKEY_USERS\S-1-5-21-3495405480-2814537582-864744403-1000\SOFTWARE\PATCHOU\Messenger Plus! Live

    Und das ist das andere, was er gefunden hat.

    https://img84.imageshack.us/img84/8073/scanoc6.th.jpg

  16. #16
    Avatar von Humdinger
    Humdinger ist offline

    Title
    Benutzer
    seit
    18.01.2008
    Ort
    Mainz
    Beiträge
    174

    Standard Re: Rechner lahmt und Winamp streikt

    Kazaa auch noch

    Status: Ignored
    Ignored ????? ---> du solltest doch immer REMOVE wählen

    mußte halt nochmal laufen lassen

    bei Vista beim booten erst F5 dann F8 drücken --> abgesicherter Modus

  17. #17
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    Bei Vista hab ich das mit F5 und F8 gemacht. Aber mit dem Remove bekomme ich irgendwie nicht hin. hab es im abgesicherten modus nochmal laufen lassen und danach diese reinigung, oder was das ist, gestartet. War das richtig, oder muss ich es nochmal laufen lassen? Hab von dem Programm absolut keine Ahnung.

  18. #18
    Avatar von Humdinger
    Humdinger ist offline

    Title
    Benutzer
    seit
    18.01.2008
    Ort
    Mainz
    Beiträge
    174

    Standard Re: Rechner lahmt und Winamp streikt

    Wird halt auch im Normalmodus nichts mehr gefunden

    hast du alles gelöscht

  19. #19
    Avatar von Speedjunky
    Speedjunky ist offline
    Themen Starter

    Title
    Benutzer
    seit
    29.10.2006
    Ort
    Ratingen
    Beiträge
    230

    Standard Re: Rechner lahmt und Winamp streikt

    Sodele,

    hab es nochmal durchlaufen lassen. Dann auf Remove und anschließend im Normalmodus nochmals. Gefunden wurde nichts mehr und der PC läuft nun auch wieder besser.

Ähnliche Themen

  1. Internetverbindung lahmt

    Von janemann32 im Forum Netzwerk Probleme
    Antworten: 0
    Letzter Beitrag: 08.05.2011, 14:17
  2. Brauche Hilfe: Internet lahmt u. ZoneAlarm streikt

    Von sir-hunter im Forum Windows Vista
    Antworten: 12
    Letzter Beitrag: 27.04.2011, 17:00
  3. Rechner lahmt HILFE !!!

    Von hetfild im Forum sonstige Hardware
    Antworten: 4
    Letzter Beitrag: 22.08.2007, 23:09
  4. Rechner und Internet lahmt

    Von xp202 im Forum Anwendersoftware
    Antworten: 6
    Letzter Beitrag: 01.06.2007, 11:48
  5. PC streikt

    Von ariel im Forum sonstige Hardware
    Antworten: 10
    Letzter Beitrag: 03.07.2006, 13:48
Diese Seite benutzt Cookies Durch die weitere Nutzung der Seite stimmen Sie der Verwendung von Cookies zu. Infos zum Datenschutz