Hallo,

wie schon oben beschrieben hab ich damit Probleme hoffe den den Thread für Hilfesuchende aufmerksam gelesen zu haben und alles richtig gemacht zu haben, ansonsten einfach bescheid geben hier die OTL.txt




OTL logfile created on: 02.01.2012 18:19:06 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\***\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19170)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,97 Gb Total Physical Memory | 2,34 Gb Available Physical Memory | 59,06% Memory free
8,11 Gb Paging File | 6,51 Gb Available in Paging File | 80,28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453,74 Gb Total Space | 320,94 Gb Free Space | 70,73% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 465,65 Gb Free Space | 99,98% Space Free | Partition Type: NTFS
Drive E: | 12,02 Gb Total Space | 1,93 Gb Free Space | 16,03% Space Free | Partition Type: NTFS

Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.01.02 18:12:59 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
PRC - [2011.12.14 12:22:18 | 000,546,624 | ---- | M] (TuneUp Software) -- C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe
PRC - [2011.11.09 17:59:58 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011.08.21 18:30:38 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.05.25 21:07:14 | 024,176,560 | ---- | M] (Dropbox, Inc.) -- C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2010.06.28 13:01:30 | 002,435,592 | ---- | M] (Check Point Software Technologies LTD) -- C:\Windows\SysWOW64\ZoneLabs\vsmon.exe
PRC - [2010.06.28 12:59:52 | 001,043,968 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe
PRC - [2009.03.30 05:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
PRC - [2008.12.17 16:11:40 | 000,365,952 | ---- | M] () -- C:\Program Files (x86)\SMINST\BLService.exe


========== Modules (No Company Name) ==========

MOD - [2011.11.24 15:28:56 | 013,420,352 | ---- | M] () -- C:\Program Files (x86)\TuneUp Utilities 2012\libcef.dll
MOD - [2011.11.09 17:59:57 | 001,989,592 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2011.05.16 15:34:43 | 006,271,136 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011.12.14 12:23:22 | 000,035,648 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:64bit: - [2010.06.29 18:49:27 | 000,128,752 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
SRV:64bit: - [2010.06.15 16:50:10 | 000,823,288 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc)
SRV:64bit: - [2009.07.02 10:07:14 | 004,775,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\OSPPSVC.EXE -- (osppsvc)
SRV:64bit: - [2008.12.31 13:35:14 | 000,934,400 | ---- | M] (ATI Technologies Inc.) [Auto | Running] -- C:\Windows\SysNative\Ati2evxx.exe -- (Ati External Event Utility)
SRV:64bit: - [2008.10.26 21:49:46 | 000,279,040 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_8aadd48d\STacSV64.exe -- (STacSV)
SRV:64bit: - [2008.06.27 16:53:06 | 000,089,088 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_8aadd48d\AESTSr64.exe -- (AESTFilters)
SRV:64bit: - [2008.03.18 15:25:40 | 000,023,040 | ---- | M] (Hewlett-Packard Corporation) [Auto | Running] -- C:\Windows\SysNative\Hpservice.exe -- (hpsrv)
SRV - [2011.12.14 12:23:34 | 002,123,584 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2011.12.14 12:23:22 | 000,028,992 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2011.08.21 18:30:38 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010.06.28 13:01:30 | 002,435,592 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\Windows\SysWOW64\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2010.06.17 22:50:00 | 003,890,920 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc)
SRV - [2009.03.30 05:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.12.17 16:11:40 | 000,365,952 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\SMINST\BLService.exe -- (Recovery Service for Windows)
SRV - [2008.02.03 12:00:00 | 000,129,992 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011.08.02 17:38:56 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2010.05.15 16:30:50 | 000,453,720 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\vsdatant.sys -- (Vsdatant)
DRV:64bit: - [2010.02.24 11:20:40 | 000,191,616 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\acedrv11.sys -- (acedrv11)
DRV:64bit: - [2009.12.21 20:50:00 | 000,007,552 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\vHidDev.sys -- (vhidmini)
DRV:64bit: - [2009.10.01 01:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2009.09.23 16:16:30 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\atksgt.sys -- (atksgt)
DRV:64bit: - [2009.09.23 16:16:30 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2008.12.31 15:01:20 | 004,993,536 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2008.10.26 21:50:58 | 000,469,504 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\stwrt64.sys -- (STHDA)
DRV:64bit: - [2008.10.23 10:42:06 | 000,128,352 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\jmcr.sys -- (JMCR)
DRV:64bit: - [2008.09.04 18:48:00 | 000,064,000 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\enecir.sys -- (enecir)
DRV:64bit: - [2008.08.29 00:57:24 | 004,745,216 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\NETw5v64.sys -- (NETw5v64) Intel(R)
DRV:64bit: - [2008.08.06 17:26:08 | 000,174,592 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169)
DRV:64bit: - [2008.07.24 17:48:10 | 000,250,928 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)
DRV:64bit: - [2008.07.24 12:04:34 | 000,115,328 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ewusbmdm.sys -- (hwdatacard)
DRV:64bit: - [2008.05.22 12:22:26 | 000,020,608 | ---- | M] (Razer USA Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Lycosa.sys -- (Lycosa)
DRV:64bit: - [2008.03.27 11:10:56 | 000,026,984 | ---- | M] (Hewlett-Packard Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2008.03.27 11:10:14 | 000,040,296 | ---- | M] (Hewlett-Packard Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2008.01.21 03:47:27 | 000,903,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\xnacc.sys -- (xnacc)
DRV:64bit: - [2008.01.21 03:46:57 | 003,154,432 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\NETw3v64.sys -- (NETw3v64) Intel(R)
DRV:64bit: - [2008.01.21 03:46:55 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus)
DRV:64bit: - [2007.12.04 02:08:46 | 000,052,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2007.06.18 16:13:12 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV:64bit: - [2007.02.27 02:15:20 | 000,092,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\xusb21.sys -- (xusb21)
DRV:64bit: - [2006.10.04 02:45:36 | 000,273,408 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)
DRV - [2011.11.24 15:34:44 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2010.06.15 16:49:48 | 000,033,528 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] -- C:\Programme\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)
DRV - [2010.02.17 19:23:05 | 000,014,920 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
DRV - [2010.02.17 19:23:05 | 000,012,360 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
DRV - [2009.09.06 10:39:50 | 000,114,496 | ---- | M] (Protection Technology Co.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\prodrv04.sys -- (prodrv04)
DRV - [2005.01.04 10:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
DRV - [1999.10.13 15:19:20 | 000,012,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\usbscan.sys -- (usbscan)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://startsear.ch/?aff=1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKLM\..\URLSearchHook: {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Program Files (x86)\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=91&bd=Pavilion&pf=cnnb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://google.icq.com/search/search_frame.php
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://google.icq.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.searchqu.com/406
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {5786d022-540e-4699-b350-b4be0ae94b79} - No CLSID value found
IE - HKCU\..\URLSearchHook: {b106b661-3e1b-4015-af5c-195e909f35c6} - No CLSID value found
IE - HKCU\..\URLSearchHook: {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - SOFTWARE\Classes\CLSID\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}\InprocServer32 File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "iLivid Web Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Ashampoo DE Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q="
FF - prefs.js..browser.search.order.1: "iLivid Web Search"
FF - prefs.js..browser.search.selectedEngine: "iLivid Web Search"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: finder@meingutscheincode.de:2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: nasanightlaunch@example.com:0.6.20110419
FF - prefs.js..keyword.URL: "hxxp://www.searchqu.com/web?src=ffb&appid=160&systemid=406&sr=0&q="


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\PROGRAM FILES\CHECKPOINT\ZAFORCEFIELD\TRUSTCHECKER [2012.01.02 17:28:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker [2012.01.02 17:28:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.11.09 17:59:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.01.02 17:29:16 | 000,000,000 | ---D | M]

[2011.10.09 14:20:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2012.01.02 17:27:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\v2kojzfq.default\extensions
[2012.01.02 17:27:53 | 000,000,000 | ---D | M] (ZoneAlarm-Sicherheit Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\v2kojzfq.default\extensions\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}
[2011.10.08 11:43:40 | 000,000,000 | ---D | M] (Gutscheinrausch.de) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\v2kojzfq.default\extensions\0snsiezz.r23
[2011.02.05 21:50:45 | 000,002,323 | ---- | M] () -- C:\Users\***AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\askcom.xml
[2011.07.24 14:36:54 | 000,000,925 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\conduit.xml
[2010.06.09 15:33:35 | 000,002,059 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\daemon-search.xml
[2011.12.28 14:22:48 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin-1.xml
[2011.08.18 12:48:44 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin-2.xml
[2011.08.21 22:43:57 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin-3.xml
[2011.08.24 15:10:41 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin-4.xml
[2011.09.01 05:27:49 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin-5.xml
[2011.09.08 04:59:12 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin-6.xml
[2011.09.25 11:40:16 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin-7.xml
[2011.09.27 23:18:32 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin-8.xml
[2011.03.30 14:14:34 | 000,001,042 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\icqplugin.xml
[2011.09.27 21:03:27 | 000,002,520 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\SearchResults.xml
[2011.07.11 19:04:02 | 000,000,633 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\v2kojzfq.default\searchplugins\startsear.xml
[2012.01.02 17:42:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.01.02 17:42:10 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files (x86)\mozilla firefox\extensions\quickstores@quickstores.de
[2011.11.09 17:59:58 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.02.02 20:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011.10.02 01:35:07 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.10.02 01:35:07 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.10.02 01:35:07 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.10.02 01:35:07 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.09.27 21:03:27 | 000,002,520 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\SearchResults.xml
[2011.10.02 01:35:07 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.10.02 01:35:07 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

========== Chrome ==========

CHR - default_search_provider: ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =

O1 HOSTS File: ([2010.10.07 16:33:53 | 000,000,814 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 74.208.10.249 gs.apple.com
O2:64bit: - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Programme\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (ZoneAlarm-Sicherheit Toolbar) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Program Files (x86)\ZoneAlarm-Sicherheit\prxtbZone.dll㔀 File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKLM\..\Toolbar: (ZoneAlarm-Sicherheit Toolbar) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Program Files (x86)\ZoneAlarm-Sicherheit\prxtbZone.dll㔀 File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe" File not found
O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O4 - Startup: C:\Users\Stefan Roßberg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Eintrag öffnen - C:\Program Files (x86)\PRMT8\PRMTIE\addentry.htm File not found
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Online-Wörterbücher - C:\Program Files (x86)\PRMT8\PRMTIE\oda.htm File not found
O8:64bit: - Extra context menu item: S&end to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Seite übersetzen - C:\Program Files (x86)\PRMT8\PRMTIE\page.htm File not found
O8:64bit: - Extra context menu item: Übersetzen - C:\Program Files (x86)\PRMT8\PRMTIE\translat.htm File not found
O8:64bit: - Extra context menu item: Übersetzungsoptionen anpassen - C:\Program Files (x86)\PRMT8\PRMTIE\options.htm File not found
O8:64bit: - Extra context menu item: Unbekannte Wörter - C:\Program Files (x86)\PRMT8\PRMTIE\infopanel.htm File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Eintrag öffnen - C:\Program Files (x86)\PRMT8\PRMTIE\addentry.htm File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Online-Wörterbücher - C:\Program Files (x86)\PRMT8\PRMTIE\oda.htm File not found
O8 - Extra context menu item: S&end to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Seite übersetzen - C:\Program Files (x86)\PRMT8\PRMTIE\page.htm File not found
O8 - Extra context menu item: Übersetzen - C:\Program Files (x86)\PRMT8\PRMTIE\translat.htm File not found
O8 - Extra context menu item: Übersetzungsoptionen anpassen - C:\Program Files (x86)\PRMT8\PRMTIE\options.htm File not found
O8 - Extra context menu item: Unbekannte Wörter - C:\Program Files (x86)\PRMT8\PRMTIE\infopanel.htm File not found
O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found
O9:64bit: - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found
O9:64bit: - Extra Button: Linked &Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found
O9:64bit: - Extra 'Tools' menuitem : Linked &Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Linked &Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found
O9 - Extra 'Tools' menuitem : Linked &Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{25261E47-9F2C-455C-96B9-F21BDA8D2B01}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper:
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{567598d7-90d3-11de-af35-806e6f6e6963}\Shell\AutoRun\command - "" = wd_windows_tools\setup.exe
O33 - MountPoints2\{5a06f8f5-0b55-11df-8bae-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{5a06f8f5-0b55-11df-8bae-00238bf852ca}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{5a06f917-0b55-11df-8bae-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{5a06f917-0b55-11df-8bae-00238bf852ca}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{677bc31a-be4e-11de-8404-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{677bc31a-be4e-11de-8404-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{677bc359-be4e-11de-8404-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{677bc359-be4e-11de-8404-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{677bc37a-be4e-11de-8404-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{677bc37a-be4e-11de-8404-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{706f1822-e35a-11de-88f8-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{706f1822-e35a-11de-88f8-00238bf852ca}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{70f8af7c-86a1-11de-909c-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{70f8af7c-86a1-11de-909c-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{70f8af9e-86a1-11de-909c-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{70f8af9e-86a1-11de-909c-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{70f8afb2-86a1-11de-909c-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{70f8afb2-86a1-11de-909c-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{70f8afb4-86a1-11de-909c-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{70f8afb4-86a1-11de-909c-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{70f8afb6-86a1-11de-909c-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{70f8afb6-86a1-11de-909c-00238bf852ca}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{74db4990-8749-11de-80da-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{74db4990-8749-11de-80da-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{74db499c-8749-11de-80da-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{74db499c-8749-11de-80da-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{8997443a-0515-11df-abaf-00238bf852ca}\Shell\AutoRun\command - "" = H:\rundll.exe
O33 - MountPoints2\{8997443a-0515-11df-abaf-00238bf852ca}\Shell\explore\Command - "" = H:\rundll.exe
O33 - MountPoints2\{8997443a-0515-11df-abaf-00238bf852ca}\Shell\open\Command - "" = H:\rundll.exe
O33 - MountPoints2\{8b94af15-f5ff-11de-a363-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{8b94af15-f5ff-11de-a363-00238bf852ca}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{bae92339-a369-11de-8092-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{bae92339-a369-11de-8092-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{bae9233b-a369-11de-8092-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{bae9233b-a369-11de-8092-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{da927c1b-a84b-11de-8bee-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{da927c1b-a84b-11de-8bee-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{da927c1d-a84b-11de-8bee-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{da927c1d-a84b-11de-8bee-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{ebc2ea36-a2c8-11de-8e06-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{ebc2ea36-a2c8-11de-8e06-806e6f6e6963}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{ebc2ea9a-a2c8-11de-8e06-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{ebc2ea9a-a2c8-11de-8e06-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{f629e69b-e62c-11de-92f5-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{f629e69b-e62c-11de-92f5-00238bf852ca}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{f629e6e5-e62c-11de-92f5-00238bf852ca}\Shell - "" = AutoRun
O33 - MountPoints2\{f629e6e5-e62c-11de-92f5-00238bf852ca}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012.01.02 18:12:57 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.01.02 18:02:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trojancheck 6
[2012.01.02 17:42:09 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\QuickStoresToolbar
[2012.01.02 17:28:43 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\ForceField Shared Files
[2012.01.02 17:28:43 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\CheckPoint
[2012.01.02 17:27:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit
[2012.01.02 17:27:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZoneAlarm-Sicherheit
[2012.01.02 17:27:32 | 000,000,000 | ---D | C] -- C:\Program Files\CheckPoint
[2012.01.02 17:27:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZoneAlarm
[2012.01.02 17:27:27 | 000,046,592 | ---- | C] (Zone Labs Inc.) -- C:\Windows\SysWow64\vsutil_loc0407.dll
[2012.01.02 17:25:42 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ZoneLabs
[2012.01.02 17:25:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Zone Labs
[2012.01.02 17:24:58 | 000,000,000 | ---D | C] -- C:\Windows\Internet Logs
[2012.01.02 17:24:58 | 000,000,000 | ---D | C] -- C:\ProgramData\CheckPoint
[2012.01.01 17:55:08 | 000,035,648 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll
[2012.01.01 17:55:08 | 000,028,992 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll
[2011.12.27 19:51:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011.12.27 19:49:54 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011.12.27 19:49:53 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011.12.27 19:49:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2011.12.27 19:49:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2011.12.27 19:48:37 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011.12.27 19:48:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2011.12.22 22:22:24 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\ABBYY
[2011.12.20 16:35:35 | 000,000,000 | ---D | C] -- C:\Users\***\CopyTransPhotoDEv2.940
[2011.12.13 19:27:54 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\WindSolutions
[2011.12.13 19:27:54 | 000,000,000 | ---D | C] -- C:\ProgramData\WindSolutions
[2011.12.09 14:40:15 | 000,034,624 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe
[2011.12.09 14:40:15 | 000,025,920 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll
[2011.12.09 14:40:15 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll
[2011.12.09 14:40:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2012
[2011.12.09 14:39:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TuneUp Utilities 2012
[2011.12.09 14:39:13 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.01.02 18:15:41 | 001,455,442 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.01.02 18:15:41 | 000,631,814 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.01.02 18:15:41 | 000,598,850 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.01.02 18:15:41 | 000,128,450 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.01.02 18:15:41 | 000,106,120 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.01.02 18:12:59 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.01.02 18:09:20 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.01.02 18:09:20 | 000,003,216 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.02 18:09:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.01.02 18:06:53 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012.01.02 18:06:35 | 000,000,020 | ---- | M] () -- C:\Users\***\defogger_reenable
[2012.01.02 18:06:28 | 000,050,477 | ---- | M] () -- C:\Users\***\Desktop\Defogger.exe
[2012.01.02 17:30:54 | 000,000,565 | ---- | M] () -- C:\Users\\Desktop\League of Legends spielen.lnk
[2012.01.02 17:29:04 | 000,420,800 | ---- | M] () -- C:\Windows\SysNative\drivers\vsconfig.xml
[2012.01.02 17:27:29 | 000,000,903 | ---- | M] () -- C:\Users\***\Desktop\ZoneAlarm Security.lnk
[2012.01.02 17:27:28 | 000,005,977 | ---- | M] () -- C:\Windows\SysWow64\vsconfig.xml
[2012.01.02 17:06:53 | 000,000,448 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{E4B67883-A384-4E96-AD2B-6FA3582D1CC9}.job
[2012.01.02 16:38:13 | 000,000,979 | ---- | M] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2012.01.02 11:09:49 | 009,762,151 | ---- | M] () -- C:\Users\***\Desktop\006 - Gotye feat. Kimbra - Somebody that i used to know.mp3
[2011.12.28 09:01:58 | 1844,791,296 | ---- | M] () -- C:\Users\***\Desktop\aja-ano.avi
[2011.12.28 09:01:53 | 1768,140,800 | ---- | M] () -- C:\Users\***\Desktop\poe-sdwgs.avi
[2011.12.28 08:50:49 | 1045,471,232 | ---- | M] () -- C:\Users\***\Desktop\let.me.in.ac3d.xvid-DS.avi
[2011.12.27 12:01:02 | 000,143,540 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat
[2011.12.23 13:12:57 | 000,271,200 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2011.12.23 13:12:57 | 000,271,200 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.12.23 13:12:00 | 000,271,200 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2011.12.22 21:51:42 | 000,000,020 | ---- | M] () -- C:\Users\Public\Documents\ExitAP.ini
[2011.12.18 12:12:53 | 001,140,900 | ---- | M] () -- C:\Users\***\Desktop\IMG_0248.JPG
[2011.12.18 12:12:52 | 001,078,593 | ---- | M] () -- C:\Users\***\Desktop\IMG_0247.JPG
[2011.12.15 15:49:16 | 000,419,896 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.12.14 12:23:40 | 000,034,624 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe
[2011.12.14 12:23:22 | 000,035,648 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll
[2011.12.14 12:23:22 | 000,028,992 | ---- | M] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll
[2011.12.14 12:23:22 | 000,025,920 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll
[2011.12.14 12:23:22 | 000,021,312 | ---- | M] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll
[2011.12.09 14:35:09 | 000,001,672 | ---- | M] () -- C:\Users\***\Desktop\League of Legends spielen .lnk
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.01.02 18:06:34 | 000,000,020 | ---- | C] () -- C:\Users\***\defogger_reenable
[2012.01.02 18:06:28 | 000,050,477 | ---- | C] () -- C:\Users\***\Desktop\Defogger.exe
[2012.01.02 17:30:54 | 000,000,565 | ---- | C] () -- C:\Users\***\Desktop\League of Legends spielen.lnk
[2012.01.02 17:27:29 | 000,000,903 | ---- | C] () -- C:\Users\***\Desktop\ZoneAlarm Security.lnk
[2012.01.02 17:27:28 | 000,005,977 | ---- | C] () -- C:\Windows\SysWow64\vsconfig.xml
[2012.01.02 17:25:41 | 000,420,800 | ---- | C] () -- C:\Windows\SysNative\drivers\vsconfig.xml
[2012.01.02 16:38:13 | 000,000,979 | ---- | C] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2012.01.02 11:09:40 | 009,762,151 | ---- | C] () -- C:\Users\***d\Desktop\006 - Gotye feat. Kimbra - Somebody that i used to know.mp3
[2011.12.28 08:37:30 | 1768,140,800 | ---- | C] () -- C:\Users\***\Desktop\poe-sdwgs.avi
[2011.12.28 08:35:12 | 1844,791,296 | ---- | C] () -- C:\Users\***\Desktop\aja-ano.avi
[2011.12.28 08:34:32 | 1045,471,232 | ---- | C] () -- C:\Users\***\Desktop\let.me.in.ac3d.xvid-DS.avi
[2011.12.18 12:12:52 | 001,140,900 | ---- | C] () -- C:\Users\***\Desktop\IMG_0248.JPG
[2011.12.18 12:12:52 | 001,078,593 | ---- | C] () -- C:\Users\***\Desktop\IMG_0247.JPG
[2011.12.09 14:40:12 | 000,001,933 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2012.lnk
[2011.12.09 14:35:09 | 000,001,672 | ---- | C] () -- C:\Users\***\Desktop\League of Legends spielen .lnk
[2011.08.26 23:21:30 | 000,042,392 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
[2011.08.24 15:11:33 | 000,000,000 | ---- | C] () -- C:\Users\***\AppData\Roaming\downloads.m3u
[2011.08.21 21:39:53 | 000,000,029 | ---- | C] () -- C:\Users\***\AppData\Roaming\default.rss
[2011.08.21 16:47:18 | 000,001,442 | ---- | C] () -- C:\Windows\czwgw-xw48.ini
[2011.08.21 16:41:51 | 000,172,032 | ---- | C] () -- C:\Windows\SysWow64\GBGraphics.dll
[2011.02.21 17:05:06 | 000,271,200 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.02.21 17:05:01 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.02.21 17:04:59 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini
[2011.02.10 09:05:29 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011.01.19 22:57:34 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2011.01.19 22:56:49 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2011.01.19 22:56:01 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2011.01.01 17:47:00 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2010.11.09 20:50:47 | 000,006,144 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.10.24 16:26:54 | 000,000,600 | ---- | C] () -- C:\Users\***\AppData\Roaming\winscp.rnd
[2010.09.28 21:16:18 | 000,017,408 | ---- | C] () -- C:\Users\***\AppData\Local\WebpageIcons.db
[2010.09.02 17:12:54 | 000,143,540 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2010.06.04 16:33:57 | 000,000,044 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010.04.18 12:20:29 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010.03.29 13:46:45 | 000,069,632 | ---- | C] () -- C:\Windows\uinst001.exe
[2009.12.04 21:56:53 | 000,000,102 | ---- | C] () -- C:\Users\***\AppData\Local\fusioncache.dat
[2009.12.04 21:25:58 | 001,476,470 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009.08.19 18:55:17 | 000,006,836 | ---- | C] () -- C:\Users\***\AppData\Local\d3d9caps.dat
[2009.08.08 08:58:17 | 000,000,826 | ---- | C] () -- C:\Windows\eReg.dat
[2009.06.15 02:52:36 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009.01.22 06:05:52 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009.01.21 23:36:44 | 000,000,428 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat
[2008.12.31 12:55:34 | 003,107,788 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.dat
[2008.01.21 03:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2006.11.02 16:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2006.11.02 13:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2006.11.02 13:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006.11.02 10:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2002.09.18 00:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe

========== LOP Check ==========

[2010.09.12 10:49:21 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Ashampoo
[2010.10.12 16:24:59 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Canneverbe Limited
[2012.01.02 17:28:43 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\CheckPoint
[2010.06.04 08:31:45 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DAEMON Tools Lite
[2010.09.12 10:44:53 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DeepBurner Pro
[2012.01.02 18:10:22 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox
[2010.08.19 15:27:06 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.06.06 14:44:52 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HLSW
[2012.01.02 17:45:52 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\ICQ
[2011.01.03 00:37:30 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\IrfanView
[2011.11.27 19:18:30 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Iwyzop
[2011.09.09 21:30:32 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\LolClient
[2010.08.23 17:55:50 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\mediAvatar
[2010.08.23 17:56:49 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Notepad++
[2011.07.10 15:19:23 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenArena
[2011.10.09 15:03:23 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenCandy
[2010.05.24 09:36:52 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Opera
[2011.02.12 19:31:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\PRMT
[2011.02.12 19:31:03 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\PROject MT
[2011.10.09 16:06:48 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\ProtectDISC
[2012.01.02 17:42:10 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\QuickStoresToolbar
[2011.07.05 16:10:27 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Razer
[2010.06.27 19:06:50 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Software Informer
[2010.11.07 22:27:16 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Software4u
[2011.01.04 02:08:07 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TeraCopy
[2011.06.27 22:08:43 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TS3Client
[2011.12.09 14:40:01 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TuneUp Software
[2010.10.12 16:25:12 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Uniblue
[2011.12.13 19:28:50 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\WindSolutions
[2011.11.27 19:02:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Xizyb
[2012.01.02 18:06:53 | 000,032,538 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.01.02 17:06:53 | 000,000,448 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{E4B67883-A384-4E96-AD2B-6FA3582D1CC9}.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:4342757A

< End of report >

kann mir den niemand helfen?