BKA-Trojaner

Lilli99

Liebe Leute,

habe mir den ukash-trojaner einmgefangen und komme nicht weiter. Habe bereits spybot, antivir und Malwarebytes laufen lassen.
Jetzt habe ich mit OTLPE diese Datei erstellt die man anscheinend braucht.
Folgendes hat er ausgespuckt: (eine extras.txt war nicht dabei)
Kann mir bitte jemand sagen was ich jetzt weiter tun soll? Die Internetverbindung geht übrigens nicht mehr seit ich dieses OTL benutzt habe.
vielen dank im voraus

OTL logfile created on: 12/22/2011 5:58:31 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1,023.00 Mb Total Physical Memory | 806.00 Mb Available Physical Memory | 79.00% Memory free
907.00 Mb Paging File | 852.00 Mb Available in Paging File | 94.00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 149.04 Gb Total Space | 80.73 Gb Free Space | 54.16% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet003

========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand] -- -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - File not found [Auto] -- -- (Pml Driver HPZ12)
SRV - File not found [On_Demand] -- -- (NMIndexingService)
SRV - File not found [Auto] -- -- (Net Driver HPZ12)
SRV - [2011/12/15 08:59:48 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/12/15 08:59:38 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/12/02 10:19:07 | 000,065,536 | ---- | M] () [Auto] -- C:\WINDOWS\system32\afasrv32.exe -- (AfaService)
SRV - [2010/03/08 08:33:30 | 000,187,456 | ---- | M] (DATA BECKER GmbH & Co KG) [Auto] -- C:\Programme\Gemeinsame Dateien\DATA BECKER Shared\DBService.exe -- (DBService)
SRV - [2009/06/27 05:18:28 | 000,603,904 | ---- | M] (TuneUp Software) [Auto] -- C:\WINDOWS\system32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc)
SRV - [2009/06/27 05:18:24 | 000,362,240 | ---- | M] (TuneUp Software) [On_Demand] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2009/04/17 04:09:46 | 000,935,208 | ---- | M] (Nero AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009/04/07 18:40:52 | 001,377,536 | ---- | M] (O&O Software GmbH) [Auto] -- C:\WINDOWS\system32\oodag.exe -- (O&O Defrag)
SRV - [2008/11/24 05:19:54 | 000,027,904 | ---- | M] (TuneUp Software) [Auto] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2008/09/08 11:19:46 | 000,098,488 | ---- | M] (SiSoftware) [On_Demand] -- C:\Programme\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe -- (SandraAgentSrv)
SRV - [2007/01/31 08:55:42 | 000,096,370 | ---- | M] (Canon Inc.) [Auto] -- C:\Programme\Canon\CAL\CALMAIN.exe -- (CCALib8)
SRV - [2006/12/14 11:00:00 | 000,544,768 | ---- | M] (Magix AG) [On_Demand] -- C:\Programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe -- (UPnPService)
SRV - [2006/10/26 12:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006/10/26 07:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005/11/17 09:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand] -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2005/05/11 06:52:00 | 000,061,440 | ---- | M] (Cyberlink) [Auto] -- C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe -- (CyberLink Media Library Service)
SRV - [2005/05/11 06:50:34 | 000,110,672 | ---- | M] () [Auto] -- C:\APPS\Powercinema\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS)
SRV - [2005/05/11 06:50:14 | 000,221,266 | ---- | M] () [Auto] -- C:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS)
SRV - [2005/01/07 05:01:52 | 000,049,152 | ---- | M] () [Auto] -- C:\APPS\HIDSERVICE\HidService.exe -- (GenericHidService)
SRV - [2004/11/09 15:36:01 | 001,140,312 | ---- | M] (America Online, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe -- (AOL ACS)
SRV - [2004/02/26 02:52:00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | Boot] -- -- (TfSysMon)
DRV - File not found [Kernel | On_Demand] -- -- (TfNetMon)
DRV - File not found [Kernel | Boot] -- -- (TfFsMon)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | On_Demand] -- -- (pctplsg)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (MBAMSwissArmy)
DRV - File not found [Kernel | On_Demand] -- -- (LVUVC) Logitech QuickCam E3500(UVC)
DRV - File not found [Kernel | On_Demand] -- -- (LVUSBSta)
DRV - File not found [Kernel | On_Demand] -- -- (LVRS)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | On_Demand] -- -- (FilterService)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2011/12/15 09:00:00 | 000,134,856 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/12/15 09:00:00 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011/12/15 09:00:00 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2010/06/17 08:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/09/11 08:03:02 | 000,037,664 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2009/06/29 11:00:50 | 000,112,640 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2009/06/29 11:00:50 | 000,102,656 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ewusbfake.sys -- (hwusbfake)
DRV - [2009/04/09 06:38:30 | 000,102,400 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2008/07/30 00:51:30 | 000,277,736 | ---- | M] (Protect Software GmbH) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\acedrv11.sys -- (acedrv11)
DRV - [2008/07/29 06:35:18 | 000,021,920 | ---- | M] (SiSoftware) [Kernel | On_Demand] -- C:\Programme\SiSoftware\SiSoftware Sandra Lite 2009\WNt500x86\sandra.sys -- (SANDRA)
DRV - [2008/05/27 04:52:18 | 000,051,072 | ---- | M] (Generic USB smartcard reader) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\MHIKEY10.sys -- (MHIKEY10)
DRV - [2008/04/13 13:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2007/11/06 15:22:06 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2005/10/26 09:08:26 | 003,786,944 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2005/09/23 07:50:44 | 000,021,808 | ---- | M] (NewSoft Technology Corporation) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\Aldebaran.sys -- (Aldebaran)
DRV - [2005/09/23 07:50:28 | 000,016,855 | ---- | M] (NewSoft Technology Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\Achernar.sys -- (Achernar)
DRV - [2005/03/09 08:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004/12/02 09:36:08 | 000,070,912 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2004/08/27 09:18:50 | 000,097,920 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\SI3112r.sys -- (SI3112r)
DRV - [2004/08/26 17:31:42 | 000,028,857 | ---- | M] (Siemens Subscriber Networks, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\enethusb.sys -- (ENETHUSB)
DRV - [2004/05/20 10:35:16 | 000,010,240 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\SiWinAcc.sys -- (SiFilter)
DRV - [2004/05/05 15:17:28 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
DRV - [2003/01/10 16:13:04 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Alle_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\Alle_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\Alle_ON_C\..\URLSearchHook: {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - Reg Error: Key error. File not found
IE - HKU\Alle_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0




FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@protectdisc.com/NPPDLicenseHelper: C:\Programme\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.449: C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Programme\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Programme\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Programme\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\tunebite-firefox-surf-and-catch-extension@audials.com: C:\Programme\RapidSolution\AudialsOne\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ [2009/11/29 08:19:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011/11/16 18:38:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins

[2011/10/18 19:00:42 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011/11/16 18:38:32 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011/09/28 20:24:37 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011/09/28 20:16:42 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2011/09/28 20:24:37 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2011/09/28 20:24:37 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2011/09/28 20:24:37 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2011/09/28 20:24:37 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2009/10/17 13:53:28 | 000,327,779 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 11212 more lines...
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Programme\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Tunebite_WebRipPlugin Class) - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Programme\RapidSolution\AudialsOne\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)
O3 - HKLM\..\Toolbar: (no name) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - No CLSID value found.
O3 - HKU\Alle_ON_C\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKU\Alle_ON_C\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKU\Alle_ON_C\..\Toolbar\WebBrowser: (no name) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [mspd] C:\WINDOWS\system32\mspd.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [TrayServer] C:\Programme\MAGIX\Filme_auf_DVD_7\Trayserver.exe (MAGIX AG)
O4 - HKLM..\Run: [USBestCR] C:\Programme\USIM Editor\iconcs968500.exe ()
O4 - HKU\Administrator_ON_C..\RunOnce: [NeroHomeFirstStart] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Alle_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {7527E129-A524-434A-A337-8C19F6F25C91} https://shop.aldisued-fotos-druck.de/shop/activex/aldi_sued_express_upload.cab (AldiSuedActiveFormX Element)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://dl8-cdn-03.sun.com/s/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab?e=1226772049304&h=2468ad6c63e77ab64e3824ae37cc9d55/&filename=jinstall-6u10-windows-i586-jc.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (fz32.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\APPS\DESKTOP\desktop.htm
O24 - Desktop BackupWallPaper: C:\APPS\DESKTOP\desktop.htm
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\I\Shell - "" = AutoRun
O33 - MountPoints2\I\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (OODBS) - C:\WINDOWS\System32\OODBS.exe (O&O Software GmbH)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/12/22 07:56:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\Malwarebytes
[2011/12/22 07:56:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2011/12/22 07:56:01 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/12/22 07:56:00 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2011/12/21 17:57:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\Avira
[2011/12/21 17:50:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2011/12/21 17:49:19 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2011/12/21 17:49:14 | 000,134,856 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011/12/21 17:49:14 | 000,074,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011/12/21 17:49:14 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2011/12/21 17:48:45 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2011/12/21 17:48:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2011/12/21 17:07:41 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Alle\Recent
[2011/12/21 17:00:01 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner
[2011/12/17 06:54:41 | 000,000,000 | ---D | C] -- C:\c588964b7966379fa2076be568ad
[2011/12/07 12:41:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\DVDVideoSoft
[2011/12/07 12:41:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\DVDVideoSoftIEHelpers
[2011/12/07 12:41:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DVDVideoSoft
[2011/12/07 12:41:21 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DVDVideoSoft
[2011/12/07 12:41:20 | 000,000,000 | ---D | C] -- C:\Programme\DVDVideoSoft
[2011/12/07 12:41:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Alle\Eigene Dateien\DVDVideoSoft
[2011/12/01 15:13:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Alle\Lokale Einstellungen\Anwendungsdaten\PCHealth
[2007/10/28 05:04:16 | 000,049,152 | ---- | C] (Newsoft) -- C:\Programme\NSLIC.dll
[2007/10/28 05:04:10 | 000,282,624 | ---- | C] (NewSoft Technology Corporation) -- C:\Programme\VWork6rc.dll
[2007/10/28 05:03:38 | 003,538,112 | ---- | C] (NewSoft Technology Corporation) -- C:\Programme\VWorks6.exe
[2007/10/28 05:03:38 | 000,536,064 | ---- | C] (RealNetworks, Inc.) -- C:\Programme\RMBE3260.DLL
[2007/10/28 05:03:38 | 000,386,560 | ---- | C] (RealNetworks, Inc.) -- C:\Programme\PNGU3266.DLL
[2007/10/28 05:03:38 | 000,245,760 | ---- | C] (NewSoft Corp.) -- C:\Programme\VideoCap.dll
[2007/10/28 05:03:38 | 000,241,664 | ---- | C] (NewSoft) -- C:\Programme\mp3filter.dll
[2007/10/28 05:03:38 | 000,212,480 | ---- | C] (Eastman Kodak) -- C:\Programme\Pcdlib32.dll
[2007/10/28 05:03:38 | 000,172,032 | ---- | C] (newsoftinc) -- C:\Programme\Ucig3432.dll
[2007/10/28 05:03:38 | 000,172,032 | ---- | C] (NewSoft Technology Corporation) -- C:\Programme\ShowStream.dll
[2007/10/28 05:03:38 | 000,151,552 | ---- | C] (newsoftinc) -- C:\Programme\Ucijpg32.dll
[2007/10/28 05:03:38 | 000,049,152 | ---- | C] (Newsoft) -- C:\Programme\Single2.dll
[2007/10/28 05:03:38 | 000,021,776 | ---- | C] (Microsoft Corporation) -- C:\Programme\Shfolder.dll
[2007/10/28 05:03:37 | 000,995,383 | ---- | C] (Microsoft Corporation) -- C:\Programme\Mfc42.dll
[2007/10/28 05:03:37 | 000,688,195 | ---- | C] (newsoftinc) -- C:\Programme\Fiotif32.dll
[2007/10/28 05:03:37 | 000,688,128 | ---- | C] (NewSoft Technology Corporation) -- C:\Programme\AviToMpeg2.dll
[2007/10/28 05:03:37 | 000,307,200 | ---- | C] (Newsoft) -- C:\Programme\MpegEdit.dll
[2007/10/28 05:03:37 | 000,290,869 | ---- | C] (Microsoft Corporation) -- C:\Programme\Msvcrt.dll
[2007/10/28 05:03:37 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\Programme\PNCRT.DLL
[2007/10/28 05:03:37 | 000,167,936 | ---- | C] (NewSoft Technology Corporation) -- C:\Programme\AudioData.dll
[2007/10/28 05:03:37 | 000,143,360 | ---- | C] (newsoftinc) -- C:\Programme\Fiotga32.dll
[2007/10/28 05:03:37 | 000,139,264 | ---- | C] (newsoftinc) -- C:\Programme\Fiojpg32.dll
[2007/10/28 05:03:37 | 000,135,256 | ---- | C] (newsoftinc) -- C:\Programme\Fiopof32.dll
[2007/10/28 05:03:37 | 000,135,168 | ---- | C] (newsoftinc) -- C:\Programme\Fiopcd32.dll
[2007/10/28 05:03:37 | 000,131,072 | ---- | C] (NewSoft Technology Corporation) -- C:\Programme\NsRender.dll
[2007/10/28 05:03:37 | 000,114,688 | ---- | C] (newsoftinc) -- C:\Programme\Fioall32.dll
[2007/10/28 05:03:37 | 000,100,352 | ---- | C] (An Chen Computer Co., Ltd.) -- C:\Programme\CMAspi2K.dll
[2007/10/28 05:03:37 | 000,086,016 | ---- | C] (NewSoft Technology Corporation) -- C:\Programme\NSCDVD.dll
[2007/10/28 05:03:37 | 000,077,878 | ---- | C] (Microsoft Corporation) -- C:\Programme\Msvcirt.dll
[2007/10/28 05:03:37 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Programme\Msvcrt40.dll
[2007/10/28 05:03:37 | 000,057,344 | ---- | C] (NewSoft) -- C:\Programme\AudioCap.dll
[2007/10/28 05:03:37 | 000,053,248 | ---- | C] (Newsoft Tech. Co.) -- C:\Programme\NsDeviceDB.dll
[2007/10/28 05:03:37 | 000,049,152 | ---- | C] (newsoftinc) -- C:\Programme\Fiobmp32.dll
[2007/10/28 05:03:37 | 000,036,864 | ---- | C] (newsoftinc) -- C:\Programme\Fiopct32.dll
[2007/10/28 05:03:37 | 000,032,768 | ---- | C] (newsoftinc) -- C:\Programme\Fiopcx32.dll
[2007/10/28 05:03:37 | 000,032,768 | ---- | C] (NewSoft) -- C:\Programme\Av2Rm.dll
[2007/10/28 05:03:37 | 000,028,672 | ---- | C] (newsoftinc) -- C:\Programme\Fiowmf32.dll
[2007/10/28 05:03:36 | 000,216,576 | ---- | C] (An Chen Computer Co., Ltd.) -- C:\Programme\Achernar.dll
[2007/10/28 05:03:36 | 000,155,648 | ---- | C] (NewSoft) -- C:\Programme\Acp.dll
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/12/22 11:44:21 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/12/22 11:36:36 | 1073,139,712 | -HS- | M] () -- C:\hiberfil.sys
[2011/12/22 11:36:34 | 004,899,842 | ---- | M] () -- C:\WINDOWS\System32\oodbs.lor
[2011/12/22 07:56:07 | 000,000,759 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/12/22 07:56:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2011/12/22 07:37:55 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{FE41880B-3FEA-4E03-8DA1-C761E35DDE72}.job
[2011/12/21 17:50:04 | 000,001,674 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2011/12/21 17:50:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2011/12/21 17:08:45 | 000,187,016 | ---- | M] () -- C:\Dokumente und Einstellungen\Alle\Eigene Dateien\cc_20111221_230823.reg
[2011/12/21 17:03:15 | 000,001,883 | ---- | M] () -- C:\Dokumente und Einstellungen\Alle\Desktop\Entfernen des Avira DE-Cleaners.lnk
[2011/12/21 17:03:15 | 000,001,812 | ---- | M] () -- C:\Dokumente und Einstellungen\Alle\Desktop\Avira DE-Cleaner.lnk
[2011/12/21 17:00:02 | 000,000,657 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk
[2011/12/21 16:22:56 | 000,000,256 | ---- | M] () -- C:\WINDOWS\tasks\taskmgr.job
[2011/12/21 16:17:33 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\taskmgr.exe
[2011/12/21 15:54:40 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/12/21 15:39:48 | 000,000,294 | RHS- | M] () -- C:\BOOT.INI
[2011/12/21 15:03:20 | 000,462,652 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2011/12/21 15:03:20 | 000,444,164 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/12/21 15:03:20 | 000,085,542 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2011/12/21 15:03:20 | 000,072,040 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/12/15 09:00:00 | 000,134,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011/12/15 09:00:00 | 000,074,640 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011/12/15 09:00:00 | 000,036,000 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2011/12/15 05:32:18 | 000,349,792 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/12/13 07:22:46 | 000,002,503 | ---- | M] () -- C:\Dokumente und Einstellungen\Alle\Desktop\Word 2007.lnk
[2011/12/07 12:41:38 | 000,001,026 | ---- | M] () -- C:\Dokumente und Einstellungen\Alle\Desktop\Free YouTube to MP3 Converter.lnk
[2011/12/07 12:41:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DVDVideoSoft
[2011/11/23 09:40:13 | 001,859,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
[2011/11/23 09:40:13 | 001,859,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/12/22 07:56:07 | 000,000,759 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/12/21 17:50:04 | 000,001,674 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2011/12/21 17:08:33 | 000,187,016 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Eigene Dateien\cc_20111221_230823.reg
[2011/12/21 17:03:15 | 000,001,883 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Desktop\Entfernen des Avira DE-Cleaners.lnk
[2011/12/21 17:03:15 | 000,001,812 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Desktop\Avira DE-Cleaner.lnk
[2011/12/21 17:00:02 | 000,000,657 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk
[2011/12/21 16:22:55 | 000,000,256 | ---- | C] () -- C:\WINDOWS\tasks\taskmgr.job
[2011/12/07 12:41:38 | 000,001,026 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Desktop\Free YouTube to MP3 Converter.lnk
[2011/04/12 10:49:46 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Menu.INI
[2010/12/02 10:08:05 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\afasrv32.exe
[2010/10/13 13:49:05 | 000,000,303 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2010/04/21 04:08:55 | 000,000,275 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Goya.ini
[2010/04/21 03:52:16 | 000,000,046 | ---- | C] () -- C:\WINDOWS\Goya.INI
[2010/03/08 08:31:21 | 000,389,632 | ---- | C] () -- C:\WINDOWS\System32\mspd.exe
[2010/03/08 08:19:44 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2010/03/08 08:18:38 | 000,007,119 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2009/11/30 20:25:42 | 000,113,603 | ---- | C] () -- C:\WINDOWS\hpoins07.dat.temp
[2009/11/30 20:25:41 | 000,021,124 | ---- | C] () -- C:\WINDOWS\hpomdl07.dat.temp
[2009/11/30 20:21:53 | 000,071,565 | ---- | C] () -- C:\WINDOWS\hpqins05.dat.temp
[2009/11/30 20:19:34 | 000,071,955 | ---- | C] () -- C:\WINDOWS\hpqins05.dat
[2009/11/30 16:17:04 | 000,004,767 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2009/09/11 08:02:46 | 000,000,022 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\8f01a90e-7eb3-48d3-93b1-50d88fd146fb
[2009/08/27 10:18:10 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\downloads.m3u
[2009/08/21 02:52:51 | 000,000,265 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\default.rss
[2009/06/27 05:17:35 | 007,925,760 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.mda
[2009/06/26 06:59:42 | 000,000,039 | RHS- | C] () -- C:\Dokumente und Einstellungen\Administrator\p3pp0s_conf.dat
[2009/06/26 06:59:23 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2009/06/09 23:03:00 | 001,580,550 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2009/04/04 06:52:56 | 000,000,030 | ---- | C] () -- C:\WINDOWS\Iedit.INI
[2009/03/02 05:33:32 | 000,067,584 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2008/09/07 10:49:49 | 000,000,424 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/09/07 10:16:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OpPrintServer.INI
[2008/06/19 10:17:58 | 000,000,074 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\default.pls
[2008/06/18 14:12:54 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008/06/18 14:06:15 | 000,000,039 | RHS- | C] () -- C:\Dokumente und Einstellungen\Alle\p3pp0s_conf.dat
[2008/01/13 08:15:20 | 000,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini
[2007/11/26 09:19:51 | 000,000,010 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2007/11/06 15:19:28 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2007/10/28 05:38:46 | 000,182,784 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/10/28 05:11:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\IPPCPUID.DLL
[2007/10/28 05:04:32 | 000,000,177 | R--- | C] () -- C:\Programme\Execute.ini
[2007/10/28 05:04:32 | 000,000,175 | ---- | C] () -- C:\Programme\LUTRAY.ini
[2007/10/28 05:04:10 | 000,001,324 | ---- | C] () -- C:\Programme\VW6_set.ini
[2007/10/28 05:04:10 | 000,000,170 | ---- | C] () -- C:\Programme\LUTRAYMSG.ini
[2007/10/28 05:04:08 | 000,000,389 | ---- | C] () -- C:\Programme\VWorks6.ini
[2007/10/28 05:03:38 | 000,024,576 | ---- | C] () -- C:\Programme\ResInfo.dll
[2007/10/28 05:03:38 | 000,003,742 | ---- | C] () -- C:\Programme\VideoCap.ini
[2007/10/28 05:03:38 | 000,002,888 | ---- | C] () -- C:\Programme\Pamovie.reg
[2007/10/28 05:03:38 | 000,000,739 | R--- | C] () -- C:\Programme\importavi.ini
[2007/10/28 05:03:38 | 000,000,008 | ---- | C] () -- C:\Programme\pm20.ini
[2007/10/28 05:03:37 | 000,421,888 | ---- | C] () -- C:\Programme\LiveUpdateTray.exe
[2007/10/28 05:03:37 | 000,143,360 | ---- | C] () -- C:\Programme\LiveUpdate.dll
[2007/10/28 05:03:37 | 000,131,072 | ---- | C] () -- C:\Programme\DvInfoParser.dll
[2007/10/28 05:03:37 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\Nsvideo.dll
[2007/10/28 05:03:37 | 000,086,016 | ---- | C] () -- C:\Programme\Jpeglib.dll
[2007/10/28 05:03:37 | 000,036,864 | ---- | C] () -- C:\Programme\PALETTE.MAP
[2007/10/28 05:03:37 | 000,028,672 | ---- | C] () -- C:\Programme\GetPhotoPath.dll
[2007/10/28 05:03:37 | 000,024,576 | ---- | C] () -- C:\Programme\Eraser.exe
[2007/10/28 05:03:37 | 000,019,280 | ---- | C] () -- C:\Programme\DeviceDBInf.tdi
[2007/10/28 05:03:37 | 000,005,056 | ---- | C] () -- C:\Programme\PMMAIL.EXE
[2007/10/28 05:03:37 | 000,000,180 | ---- | C] () -- C:\Programme\FIOALL.INI
[2007/10/28 05:03:37 | 000,000,037 | ---- | C] () -- C:\Programme\Eraser.ini
[2007/10/28 05:03:36 | 000,077,824 | ---- | C] () -- C:\Programme\AVFile.dll
[2007/10/28 04:49:41 | 000,032,768 | R--- | C] () -- C:\WINDOWS\System32\infcpy.dll
[2007/10/06 10:22:49 | 000,000,172 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2007/08/06 10:36:59 | 004,215,160 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe
[2007/06/26 13:32:48 | 000,000,054 | ---- | C] () -- C:\WINDOWS\TwainUI.INI
[2007/06/05 11:43:29 | 000,001,946 | ---- | C] () -- C:\WINDOWS\pi2000.ini
[2007/06/05 11:18:58 | 000,000,073 | ---- | C] () -- C:\WINDOWS\ChssBase.ini
[2007/04/15 10:20:51 | 000,000,263 | ---- | C] () -- C:\WINDOWS\lexstat.ini
[2007/04/11 08:31:41 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\Alle\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2007/04/11 08:31:25 | 000,000,141 | ---- | C] () -- C:\WINDOWS\system32\config\systemprofile\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2007/04/11 07:35:15 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2007/04/11 07:30:03 | 000,198,144 | ---- | C] () -- C:\WINDOWS\System32\_psisdecd.dll
[2007/04/11 07:29:36 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007/04/11 07:22:16 | 000,000,410 | ---- | C] () -- C:\WINDOWS\System32\SETUPPC.INI
[2007/04/11 07:15:45 | 000,007,615 | ---- | C] () -- C:\WINDOWS\HDReg.ini
[2007/04/11 07:14:19 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2007/04/11 07:06:49 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2007/04/11 07:06:48 | 000,001,272 | ---- | C] () -- C:\WINDOWS\System32\drivers\alcxinit.dat
[2007/04/11 07:06:24 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2007/04/11 07:06:20 | 000,157,184 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2005/10/21 08:28:56 | 000,005,968 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/08/02 09:35:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2005/08/02 09:35:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2005/08/02 09:35:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2005/08/02 09:35:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2005/08/02 09:35:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2005/08/02 09:35:00 | 000,540,672 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2005/08/02 09:35:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2005/08/02 09:35:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2005/08/02 09:35:00 | 000,393,216 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2005/08/02 09:35:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2004/08/11 12:13:19 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/11 12:10:36 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2004/08/11 12:03:37 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/08/11 11:57:52 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/08/11 11:56:16 | 000,349,792 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004/08/11 11:48:09 | 000,462,652 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004/08/11 11:48:09 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004/08/11 11:48:09 | 000,085,542 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004/08/11 11:48:09 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004/08/11 11:47:49 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/11 11:47:46 | 000,444,164 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/11 11:47:46 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/11 11:47:46 | 000,072,040 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/11 11:47:46 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/11 11:47:45 | 000,004,613 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/11 11:47:43 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/11 11:47:41 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004/08/11 11:47:34 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/11 11:47:34 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/11 11:47:25 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/11 11:47:16 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/06/23 07:14:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2003/02/20 10:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001/07/06 08:30:00 | 000,003,254 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI
[1997/06/14 02:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll

========== LOP Check ==========

[2011/05/30 10:29:22 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\Acronis
[2010/12/02 10:17:49 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\.#
[2011/05/30 09:46:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\Acronis
[2007/06/05 11:18:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\ChessBase
[2009/06/26 12:05:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\DNA
[2011/12/07 12:41:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\DVDVideoSoft
[2011/12/07 12:41:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\DVDVideoSoftIEHelpers
[2010/07/29 11:38:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\Fazi
[2010/11/04 18:14:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\Image Zone Express
[2009/04/08 08:32:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\Leadertech
[2010/03/08 08:41:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\MAGIX
[2008/09/07 16:40:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\NCH Swift Sound
[2011/04/14 14:52:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\phonostar-Player
[2010/05/10 10:15:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\ProtectDisc
[2009/11/29 08:27:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\RapidSolution
[2009/06/27 05:18:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\TuneUp Software
[2008/09/23 07:29:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Alle\Anwendungsdaten\Ulead Systems
[2010/03/30 07:41:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Bytemobile
[2010/03/30 07:41:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Vodafone
[2010/03/30 07:48:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Bytemobile
[2009/01/15 09:10:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\2DBoy
[2011/06/03 15:42:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
[2007/04/15 10:24:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BVRP Software
[2010/08/17 19:37:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DATA BECKER Downloads
[2008/03/19 09:23:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ElsterFormular
[2010/03/08 08:43:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2008/09/07 16:48:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NCH Swift Sound
[2007/10/28 05:04:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Newsoft
[2009/11/29 08:25:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rapidsolution
[2009/06/27 03:33:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2009/06/27 05:17:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2007/04/11 07:25:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ulead Systems
[2007/04/11 07:15:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Viewpoint
[2010/03/30 07:41:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Vodafone
[2009/06/27 05:17:24 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{55A29068-F2CE-456C-9148-C869879E2357}
[2011/12/21 16:22:56 | 000,000,256 | ---- | M] () -- C:\WINDOWS\Tasks\taskmgr.job
[2011/12/22 07:37:55 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{FE41880B-3FEA-4E03-8DA1-C761E35DDE72}.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\taskmgr.exe:SummaryInformation
@Alternate Data Stream - 146 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMPFC5A2B2
@Alternate Data Stream - 127 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:1CA73D29
< End of report >