Hallo,

ich habe mir soeben ein Trojaner/Virus eingefangen. Während des Surfens poppte ein Fenster auf mit obigen Titel. Per Ukash soll ich 100€ via Ukash überweisen, da ich meine Windows Lizenz nicht gültig sei.

Ich wäre euch dankbar, wenn Ihr mir in diese Misere helfen könntet.

Hier die beiden Logfiles
OTL Extras logfile

OTL Extras logfile created on: 02.02.2012 22:30:09 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\***\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,91 Gb Total Physical Memory | 6,70 Gb Available Physical Memory | 84,72% Memory free
15,82 Gb Paging File | 14,64 Gb Available in Paging File | 92,51% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 52,91 Gb Free Space | 44,41% Space Free | Partition Type: NTFS
Drive D: | 976,56 Gb Total Space | 698,14 Gb Free Space | 71,49% Space Free | Partition Type: NTFS
Drive E: | 886,45 Gb Total Space | 620,45 Gb Free Space | 69,99% Space Free | Partition Type: NTFS
Drive Q: | 3,74 Gb Total Space | 3,60 Gb Free Space | 96,40% Space Free | Partition Type: FAT32
 
Computer Name: SUPPENLOEFFELPC | User Name: Suppenloeffel | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"9000:TCP" = 9000:TCP:*:Enabled:Logitech Media Server 9000 tcp (UI)
"9001:TCP" = 9001:TCP:*:Enabled:Logitech Media Server 9001 tcp (UI)
"9002:TCP" = 9002:TCP:*:Enabled:Logitech Media Server 9002 tcp (UI)
"9003:TCP" = 9003:TCP:*:Enabled:Logitech Media Server 9003 tcp (UI)
"9004:TCP" = 9004:TCP:*:Enabled:Logitech Media Server 9004 tcp (UI)
"9005:TCP" = 9005:TCP:*:Enabled:Logitech Media Server 9005 tcp (UI)
"9006:TCP" = 9006:TCP:*:Enabled:Logitech Media Server 9006 tcp (UI)
"9007:TCP" = 9007:TCP:*:Enabled:Logitech Media Server 9007 tcp (UI)
"9008:TCP" = 9008:TCP:*:Enabled:Logitech Media Server 9008 tcp (UI)
"9009:TCP" = 9009:TCP:*:Enabled:Logitech Media Server 9009 tcp (UI)
"9010:TCP" = 9010:TCP:*:Enabled:Logitech Media Server 9010 tcp (UI)
"9100:TCP" = 9100:TCP:*:Enabled:Logitech Media Server 9100 tcp (UI)
"8000:TCP" = 8000:TCP:*:Enabled:Logitech Media Server 8000 tcp (UI)
"10000:TCP" = 10000:TCP:*:Enabled:Logitech Media Server 10000 tcp (UI)
"9090:TCP" = 9090:TCP:*:Enabled:Logitech Media Server 9090 tcp (UI)
"3483:UDP" = 3483:UDP:*:Enabled:Logitech Media Server 3483 udp
"3483:TCP" = 3483:TCP:*:Enabled:Logitech Media Server 3483 tcp
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"9000:TCP" = 9000:TCP:*:Enabled:Logitech Media Server 9000 tcp (UI)
"9001:TCP" = 9001:TCP:*:Enabled:Logitech Media Server 9001 tcp (UI)
"9002:TCP" = 9002:TCP:*:Enabled:Logitech Media Server 9002 tcp (UI)
"9003:TCP" = 9003:TCP:*:Enabled:Logitech Media Server 9003 tcp (UI)
"9004:TCP" = 9004:TCP:*:Enabled:Logitech Media Server 9004 tcp (UI)
"9005:TCP" = 9005:TCP:*:Enabled:Logitech Media Server 9005 tcp (UI)
"9006:TCP" = 9006:TCP:*:Enabled:Logitech Media Server 9006 tcp (UI)
"9007:TCP" = 9007:TCP:*:Enabled:Logitech Media Server 9007 tcp (UI)
"9008:TCP" = 9008:TCP:*:Enabled:Logitech Media Server 9008 tcp (UI)
"9009:TCP" = 9009:TCP:*:Enabled:Logitech Media Server 9009 tcp (UI)
"9010:TCP" = 9010:TCP:*:Enabled:Logitech Media Server 9010 tcp (UI)
"9100:TCP" = 9100:TCP:*:Enabled:Logitech Media Server 9100 tcp (UI)
"8000:TCP" = 8000:TCP:*:Enabled:Logitech Media Server 8000 tcp (UI)
"10000:TCP" = 10000:TCP:*:Enabled:Logitech Media Server 10000 tcp (UI)
"9090:TCP" = 9090:TCP:*:Enabled:Logitech Media Server 9090 tcp (UI)
"3483:UDP" = 3483:UDP:*:Enabled:Logitech Media Server 3483 udp
"3483:TCP" = 3483:TCP:*:Enabled:Logitech Media Server 3483 tcp
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP560_series" = Canon MP560 series MP Drivers
"{138A4072-9E64-46BD-B5F9-DB2BB395391F}" = LWS VideoEffects
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64
"{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{8219EDCB-CE5A-4348-B056-AAC0FE4E99D0}" = Microsoft IntelliType Pro 8.2
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64
"{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4
"{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A2862596-B7C3-4D7F-A227-40FEDDF1332B}" = WEB.DE Toolbar MSVC100 CRT x64
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 280.19
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.2.23.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}" = Microsoft Xbox 360 Accessories 1.2
"{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit)
"{D4F66BBA-D79E-4F11-9B06-70C3D75A2958}" = Adobe Photoshop Lightroom 3.6 64-bit
"{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft IntelliType Pro 8.2" = Microsoft IntelliType Pro 8.2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0513EE35-E0FB-4166-B663-BD1AE3A803DE}" = Anno 1404
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin
"{23BE4DF2-293D-4077-82F4-1FD8C269277C}" = TuneUp Utilities Language Pack (en-US)
"{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}" = TuneUp Utilities 2011
"{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 27
"{2A30052B-831C-41D3-8044-3C0388066350}" = Seagate Manager Installer
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0017-0407-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (German) 2010
"{90140000-0017-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{0F513B77-0D84-4615-87F7-B814D1FC64F5}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.OMUI.de-de_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.OMUI.de-de_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.OMUI.de-de_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUSR_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0407-1000-0000000FF1CE}_Office14.OMUI.de-de_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0100-0407-0000-0000000FF1CE}" = Microsoft Office O MUI (German) 2010
"{90140000-0100-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{90D3D490-F6C4-4F4A-971B-93D0A66F2E2E}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0101-0407-0000-0000000FF1CE}" = Microsoft Office X MUI (German) 2010
"{90140000-0101-0407-0000-0000000FF1CE}_Office14.OMUI.de-de_{4733E76A-5F12-4513-9CA8-DB2540A74EDA}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin
"{A07B2C21-863B-47AB-AE7E-20BB00BD7D33}" = ANNO 1404 - Venedig
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Deutsch
"{AC76BA86-7AD7-2447-0000-A00000000003}" = Chinese Simplified Fonts Support For Adobe Reader X
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{CC4BBCBA-89F6-47C3-9B0F-5CE5BB1C316C}" = WEB.DE Toolbar MSVC100 CRT x86
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
"{EED027B7-0DB6-404B-8F45-6DFEE34A0441}" = LWS Video Mask Maker
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"1&1 Mail & Media GmbH 1und1Softwareaktualisierung" = WEB.DE Softwareaktualisierung
"1&1 Mail & Media GmbH Toolbar IE8" = WEB.DE Toolbar für Internet Explorer
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe_697a06b96d8bcbe2d77b88e7d5448d0" = Adobe Creative Suite 4 Master Collection
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Canon MP560 series Benutzerregistrierung" = Canon MP560 series Benutzerregistrierung
"Canon_IJ_Network_Scan_UTILITY" = Canon IJ Network Scan Utility
"Canon_IJ_Network_UTILITY" = Canon IJ Network Tool
"CANONIJPLM100" = Canon Inkjet Printer/Scanner/Fax Extended Survey Program
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"DAEMON Tools Lite" = DAEMON Tools Lite
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"GTK 2.0" = GTK+ Runtime 2.14.7 rev a (nur entfernen)
"InstallShield_{2A30052B-831C-41D3-8044-3C0388066350}" = Seagate Manager Installer
"InstallShield_{48B0F38D-1913-44F3-99AA-D4C55A2B038E}" = Drive Manager
"InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"Logitech Media Server_is1" = Logitech Media Server 7.7.1
"Logitech Vid" = Logitech Vid HD
"MediaMonkey_is1" = MediaMonkey 3.2
"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)
"Mozilla Thunderbird 9.0.1 (x86 de)" = Mozilla Thunderbird 9.0.1 (x86 de)
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"Office14.OMUI.de-de" = Microsoft Office Language Pack 2010 - German/Deutsch
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Pidgin" = Pidgin
"PunkBusterSvc" = PunkBuster Services
"SABnzbd" = SABnzbd 0.6.9
"ShiftN_is1" = ShiftN 3.6
"SpeedFan" = SpeedFan (remove only)
"Steam App 107100" = Bastion
"Steam App 12210" = Grand Theft Auto IV
"Steam App 17460" = Mass Effect
"Steam App 18500" = Defense Grid: The Awakening
"Steam App 240" = Counter-Strike: Source
"Steam App 24960" = Battlefield: Bad Company 2
"Steam App 26900" = Crayon Physics Deluxe
"Steam App 3590" = Plants vs. Zombies: Game of the Year
"Steam App 38900" = Rhythm Zone
"Steam App 40800" = Super Meat Boy
"Steam App 43110" = Metro 2033
"Steam App 440" = Team Fortress 2
"Steam App 48000" = LIMBO
"Steam App 58400" = Turba
"Steam App 620" = Portal 2
"Steam App 62000" = Flight Control HD
"Steam App 62100" = Chime
"TuneUp Utilities 2011" = TuneUp Utilities 2011
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.11
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 26.11.2011 11:05:47 | Computer Name = Suppenloeffelpc | Source = Application Hang | ID = 1002
Description = Programm GTAIV.exe, Version 1.0.7.0 kann nicht mehr unter Windows 
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: a0c    Startzeit: 
01ccac4ca06d80b1    Endzeit: 251    Anwendungspfad: d:\games\steam\steamapps\common\grand
 theft auto iv\GTAIV\GTAIV.exe    Berichts-ID:   
 
Error - 03.12.2011 16:40:18 | Computer Name = Suppenloeffelpc | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: GTAIV.exe, Version: 1.0.7.0, Zeitstempel:
 0x4bd9efbe  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17514, Zeitstempel:
 0x4ce7ba58  Ausnahmecode: 0xc0000374  Fehleroffset: 0x000ce653  ID des fehlerhaften Prozesses:
 0xf8c  Startzeit der fehlerhaften Anwendung: 0x01ccb1fbb9192ea1  Pfad der fehlerhaften
 Anwendung: d:\games\steam\steamapps\common\grand theft auto iv\GTAIV\GTAIV.exe  Pfad
 des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll  Berichtskennung: 02bb7bff-1def-11e1-9f1c-002522bcc7d3
 
Error - 07.12.2011 19:01:48 | Computer Name = Suppenloeffelpc | Source = Application | ID = 0
Description = 
 
Error - 07.12.2011 19:01:48 | Computer Name = Suppenloeffelpc | Source = Application | ID = 0
Description = 
 
Error - 07.12.2011 19:01:49 | Computer Name = Suppenloeffelpc | Source = Application | ID = 0
Description = 
 
Error - 07.12.2011 19:01:49 | Computer Name = Suppenloeffelpc | Source = Application | ID = 0
Description = 
 
Error - 18.12.2011 12:08:56 | Computer Name = Suppenloeffelpc | Source = Application Hang | ID = 1002
Description = Programm MediaMonkey.exe, Version 3.2.3.1303 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf 
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 11a8    Startzeit: 01ccbd8a4883e289    Endzeit: 7    Anwendungspfad: 
C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe    Berichts-ID: 893a34da-2992-11e1-95bd-002522bcc7d3

 
Error - 18.12.2011 12:25:50 | Computer Name = Suppenloeffelpc | Source = Application Hang | ID = 1002
Description = Programm MediaMonkey.exe, Version 3.2.3.1303 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf 
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: b00    Startzeit: 01ccbda0bdf1c8d4    Endzeit: 9    Anwendungspfad: C:\Program
 Files (x86)\MediaMonkey\MediaMonkey.exe    Berichts-ID: f184eb2d-2994-11e1-95bd-002522bcc7d3

 
Error - 20.12.2011 18:11:17 | Computer Name = Suppenloeffelpc | Source = Microsoft-Windows-RestartManager | ID = 10006
Description = Die Anwendung oder der Dienst "Logitech Media Server" konnte nicht
 heruntergefahren werden.
 
Error - 07.01.2012 09:29:52 | Computer Name = Suppenloeffelpc | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Steam.exe, Version: 1.0.1065.11, 
Zeitstempel: 0x4d9b89de  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17514,
 Zeitstempel: 0x4ce7ba58  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00038da9  ID des fehlerhaften
 Prozesses: 0xa84  Startzeit der fehlerhaften Anwendung: 0x01cccd406241b567  Pfad der
 fehlerhaften Anwendung: D:\Games\Steam\Steam.exe  Pfad des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll
Berichtskennung:
 ad57f86a-3933-11e1-9b0f-002522bcc7d3
 
[ System Events ]
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = DCOM | ID = 10005
Description = 
 
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = DCOM | ID = 10005
Description = 
 
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = DCOM | ID = 10005
Description = 
 
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 02.02.2012 17:29:17 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 02.02.2012 17:29:18 | Computer Name = Suppenloeffelpc | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
 
< End of report >
         

Und der OTL logfile

OTL logfile created on: 02.02.2012 22:30:09 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\***\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,91 Gb Total Physical Memory | 6,70 Gb Available Physical Memory | 84,72% Memory free
15,82 Gb Paging File | 14,64 Gb Available in Paging File | 92,51% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 52,91 Gb Free Space | 44,41% Space Free | Partition Type: NTFS
Drive D: | 976,56 Gb Total Space | 698,14 Gb Free Space | 71,49% Space Free | Partition Type: NTFS
Drive E: | 886,45 Gb Total Space | 620,45 Gb Free Space | 69,99% Space Free | Partition Type: NTFS
Drive Q: | 3,74 Gb Total Space | 3,60 Gb Free Space | 96,40% Space Free | Partition Type: FAT32
 
Computer Name: SUPPENLOEFFELPC | User Name: *** | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
 
 
========== Modules (No Company Name) ==========
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (FLEXnet Licensing Service 64) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (UMVPFSrv) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (FreeAgentGoNext Service) -- C:\Program Files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (IJPLMSVC) -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE ()
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (atksgt) -- C:\Windows\SysNative\drivers\atksgt.sys ()
DRV:64bit: - (lirsgt) -- C:\Windows\SysNative\drivers\lirsgt.sys ()
DRV:64bit: - (LVUVC64) Logitech HD Webcam C510(UVC) -- C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (CompFilter64) -- C:\Windows\SysNative\drivers\lvbflt64.sys (Logitech Inc.)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (EtronXHCI) -- C:\Windows\SysNative\drivers\EtronXHCI.sys (Etron Technology Inc)
DRV:64bit: - (EtronHub3) -- C:\Windows\SysNative\drivers\EtronHub3.sys (Etron Technology Inc)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (MEIx64) Intel(R) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (xusb21) -- C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (adfs) -- C:\Windows\SysNative\drivers\adfs.sys (Adobe Systems, Inc.)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (speedfan) -- C:\Windows\SysWOW64\speedfan.sys (Almico Software)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.web.de/tb2/ie_startpage
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C9 BC 0F 28 64 BF CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.selectedEngine: "Wikipedia (de)"
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.01.08 17:43:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.09.11 17:38:10 | 000,000,000 | ---D | M]
 
[2011.09.11 17:11:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2012.01.07 10:24:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\pfjw2acy.default\extensions
[2012.01.08 17:43:18 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
() (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\PFJW2ACY.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012.01.08 17:43:17 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.09.03 01:19:44 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.09.03 01:13:56 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.09.03 01:19:44 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.09.03 01:19:44 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.09.03 01:19:44 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.09.03 01:19:44 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.11.01 22:18:55 | 000,001,347 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts:    127.0.0.1 activate.adobe.com
O1 - Hosts:    127.0.0.1 practivate.adobe.com
O1 - Hosts:    127.0.0.1 ereg.adobe.com
O1 - Hosts:    127.0.0.1 activate.wip3.adobe.com
O1 - Hosts:    127.0.0.1 wip3.adobe.com
O1 - Hosts:    127.0.0.1 3dns-3.adobe.com
O1 - Hosts:    127.0.0.1 3dns-2.adobe.com
O1 - Hosts:    127.0.0.1 adobe-dns.adobe.com
O1 - Hosts:    127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts:    127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts:    127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts:    127.0.0.1 activate-sea.adobe.com
O1 - Hosts:    127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts:    127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts:    127.0.0.1 wwis-dubc1-vip60.adobe.com
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (WEB.DE Toolbar BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (WEB.DE Toolbar BHO) - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3:64bit: - HKLM\..\Toolbar: (WEB.DE Toolbar) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (WEB.DE Toolbar) - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (WEB.DE Toolbar) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O3 - HKCU\..\Toolbar\WebBrowser: (WEB.DE Toolbar) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files (x86)\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [UMonit] C:\Windows\SysWOW64\UMonit.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files (x86)\Logitech\Vid HD\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found
O4 - HKCU..\Run: [Steam] D:\Games\Steam\steam.exe (Valve Corporation)
O4 - HKCU..\Run: [vasja] C:\Users\***\AppData\Local\Temp\0.9628378498923743.exe (Orb Networks)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1A475DA5-3EFB-47BD-97A4-0F7EBD23ED6F}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Programme\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O18 - Protocol\Handler\webde {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE Toolbar\IE\uitb.dll (1und1 Mail und Media GmbH)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3e54508d-dc97-11e0-8959-002522bcc7d3}\Shell - "" = AutoRun
O33 - MountPoints2\{3e54508d-dc97-11e0-8959-002522bcc7d3}\Shell\AutoRun\command - "" = M:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.02.02 22:28:04 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.01.25 23:19:05 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2012.01.25 23:19:05 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2012.01.25 23:19:05 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2012.01.25 23:19:05 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2012.01.25 23:19:05 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2012.01.25 23:19:05 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2012.01.11 21:26:30 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2012.01.11 21:26:30 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2012.01.11 21:26:30 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2012.01.11 21:26:30 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2012.01.11 21:26:29 | 001,731,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2012.01.11 21:26:29 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2012.01.11 21:26:29 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2012.01.07 23:50:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft XNA
 
========== Files - Modified Within 30 Days ==========
 
[2012.02.02 22:29:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.02 22:27:56 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.02.02 22:05:25 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.02.02 22:05:25 | 000,696,620 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.02.02 22:05:25 | 000,651,938 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.02.02 22:05:25 | 000,147,916 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.02.02 22:05:25 | 000,120,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.02.02 20:00:13 | 000,013,408 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.02 20:00:13 | 000,013,408 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.16 20:54:10 | 077,866,941 | ---- | M] () -- C:\Users\***\Desktop\blckwhite.xps
[2012.01.14 18:10:22 | 000,007,608 | ---- | M] () -- C:\Users\***\AppData\Local\Resmon.ResmonCfg
[2012.01.11 23:43:14 | 001,589,442 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
 
========== Files Created - No Company Name ==========
 
[2012.01.16 20:53:34 | 077,866,941 | ---- | C] () -- C:\Users\***\Desktop\blckwhite.xps
[2012.01.14 18:10:22 | 000,007,608 | ---- | C] () -- C:\Users\***\AppData\Local\Resmon.ResmonCfg
[2011.12.17 23:30:26 | 000,001,158 | ---- | C] () -- C:\Users\***\AppData\Roaming\ShiftN.ini
[2011.11.07 22:12:37 | 001,589,442 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.09.11 19:39:13 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2011.09.11 18:52:11 | 000,280,736 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.09.11 18:52:10 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.09.11 17:22:54 | 000,001,372 | R--- | C] () -- C:\Windows\SysWow64\IconCfg0.ini
[2011.09.11 17:22:53 | 000,200,704 | R--- | C] () -- C:\Windows\SysWow64\UMonit.exe
[2011.09.11 17:22:53 | 000,167,936 | R--- | C] () -- C:\Windows\SysWow64\ustor.dll
[2011.09.11 16:58:01 | 001,603,026 | -H-- | C] () -- C:\Users\***\AppData\Local\IconCache2.db
[2011.09.11 16:57:20 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011.09.11 16:57:19 | 013,356,032 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011.09.11 16:57:19 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.09.11 16:57:19 | 000,218,304 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.09.11 16:57:19 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2011.08.19 10:26:20 | 010,898,456 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2011.08.19 10:26:20 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2011.08.19 10:26:20 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2011.08.03 02:31:54 | 000,311,912 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

< End of report >
         

Achja weiss nicht ob es relevant ist, aber ich habe das Netzwerkkabel abgezogen.

Vielen Dank für Eure Unterstützung im Voraus.

MfG
Suppe

hi
bitte starte deinen pc diesmal in den abgesicherten modus mit netzwerk, da solltest du internet haben und arbeiten können, ohne fehlermeldung
ersetze außerdem im script *** durch deinen nutzernamen

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
O4 - HKCU..\Run: [vasja] C:\Users\***\AppData\Local\Temp\0.9628378498923743.exe (Orb Networks)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
 :Files
C:\Users\***\AppData\Local\Temp\0.9628378498923743.exe
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

Hey,

Da ich noch auf der Arbeit bin, werde ich mich heute später erst zuwenden können.

Vielen dank für die Unterstützung.

Hi markusg,
so habe dein Skript über OTL durchlaufen lassen.
Bin gerade im normalen Modus und es scheint alles soweit in Ordnung zu sein .

Ich habe wie angegeben die Movedfiles hochgeladen.

Muss ich noch weitere Schritte durchführen?

ich danke erst mal für den upload

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.

• Besuche folgende Seite für Downloadlinks und Anweisungen für dieses
  Tool
  
  Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  
• Hinweis:
  Gehe sicher das all deine Anti Virus und Anti Malware Programme abgeschalten sind, damit diese Combofix nicht bei der Arbeit stören.
  
• Poste bitte die C:\Combofix.txt in deiner nächsten Antwort.

Hi,

so habe combofix ausgeführt und habe nun das Problem, dass alle Programme wie Firefox nicht ohne weiteres ausführen konnte.

Es folgt immer die Fehlermeldung:

Pfad/Anwendung.exe

Es wurde versucht, einen Registrierungsschlüssel einem unzulässigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

ICh habe durch ausprobieren herausgefunden, dass ich Anwendungen nur durchführen kann, wenn ich es als Administrator ausführe.

Aber hier die logfile:

ComboFix 12-02-03.02 - Suppenloeffel 03.02.2012  19:18:35.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8102.6128 [GMT 1:00]
ausgeführt von:: c:\users\Suppenloeffel\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\4461f48e31bde5c56b31b973b773de09\List.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\93e7e3d6030f426844228042348210cf\Service.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\bd5179a413bc0c4b82eedc22c6cab101\re.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\e56c61f7248672819579325af3387035\POSIX.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\eb138ef0e4282611dbf485a302784646\LibYAML.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\f233f63b6654362865c7577442edb9e3\Win32.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3384\perl514.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\0665c25e931c1ac0151b062449e91028\XSAccessor.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\17d0b152e63e6bfe81b4b19588538896\mro.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\19febd96672ffdb7ea244cef36aaa062\Zlib.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\2b1fc61b36a6711ea149b18bf3b41500\Parser.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\38a10ee333cf1a9afec3f0acdf1bbebc\Scan.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\3a8764e0d7c5d453e01d9ad08cf7fb58\IO.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\3b7106dd14676048b10bbb09a990f74c\XS.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\4461f48e31bde5c56b31b973b773de09\List.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\44727051c604ef6b79894b64d4c63832\Expat.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\4f2c03383aab0133b8dc0a3fa2dd92fa\Storable.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\7f177c338672436e01c4f0bdbcf94491\EV.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\7f2598c08178217a0e2c754f3d568f28\Byte.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\8fedeb86a4a984edfc1fb255d4ea965c\XS.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\961b0d62fa52b1dd29c795a822fbf1cf\DBI.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\aff7ee779ea184f884ed432c30a58f5d\Scale.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\b6bd87c968599725b8ab2e5c25d3046a\API.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\b979ace6da01e63d651cce9ee2474fdc\Name.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\bc147d83c7c868eeee67082dcf55430c\File.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\bd5179a413bc0c4b82eedc22c6cab101\re.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c199d3c1960e7aeeecb599487952bed2\HiRes.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c19d5e3dc664d9f4ce700001e2621cee\MD5.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c344fd5536724b2af2e6453833b60203\SHA1.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\c668a322917d32a5ea22894518aa9897\Base64.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\cf5fe81e2f5dcbfecfd0495e1648c991\Unicode.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\d0bf009923f29116535c26d228271d6d\Scan.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\d1c77e404b5c4b954fa537ed63c8fb7b\File.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\dacfd0ab9b5fd029ed8d29e4482b0775\XS.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icudt46.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icuin46.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icuuc46.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\SQLite.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\e56c61f7248672819579325af3387035\POSIX.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\eb138ef0e4282611dbf485a302784646\LibYAML.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\f233f63b6654362865c7577442edb9e3\Win32.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\fa9e3c814aa32db2ad5f17bdfbc22746\attributes.dll
c:\users\SUPPEN~1\AppData\Local\Temp\pdk-Suppenloeffel-3928\perl514.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\4461f48e31bde5c56b31b973b773de09\List.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\93e7e3d6030f426844228042348210cf\Service.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\bd5179a413bc0c4b82eedc22c6cab101\re.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\e56c61f7248672819579325af3387035\POSIX.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\eb138ef0e4282611dbf485a302784646\LibYAML.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\f233f63b6654362865c7577442edb9e3\Win32.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3384\perl514.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\0665c25e931c1ac0151b062449e91028\XSAccessor.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\17d0b152e63e6bfe81b4b19588538896\mro.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\19febd96672ffdb7ea244cef36aaa062\Zlib.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\2b1fc61b36a6711ea149b18bf3b41500\Parser.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\31638f63e39b38d3e250a9a57cb9d1c5\Cwd.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\32785c19dc6898fbbbf06f3b776edd08\Fcntl.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\38a10ee333cf1a9afec3f0acdf1bbebc\Scan.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\3a7ccbf8181ee5a145227a6dfce3594c\WinError.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\3a8764e0d7c5d453e01d9ad08cf7fb58\IO.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\3b7106dd14676048b10bbb09a990f74c\XS.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\4461f48e31bde5c56b31b973b773de09\List.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\44727051c604ef6b79894b64d4c63832\Expat.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\4f2c03383aab0133b8dc0a3fa2dd92fa\Storable.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\5ffd05b2cbd58528e56519784ca9c869\Hostname.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\60ff464e01c2cd5526dbdad5a125081d\Dumper.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\7ef0d901bf4203fbcf7a0fff0e82aa5f\Encode.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\7f177c338672436e01c4f0bdbcf94491\EV.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\7f2598c08178217a0e2c754f3d568f28\Byte.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\8fedeb86a4a984edfc1fb255d4ea965c\XS.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\961b0d62fa52b1dd29c795a822fbf1cf\DBI.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\aff7ee779ea184f884ed432c30a58f5d\Scale.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\b6bd87c968599725b8ab2e5c25d3046a\API.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\b979ace6da01e63d651cce9ee2474fdc\Name.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\bc147d83c7c868eeee67082dcf55430c\File.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\bd5179a413bc0c4b82eedc22c6cab101\re.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c199d3c1960e7aeeecb599487952bed2\HiRes.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c19d5e3dc664d9f4ce700001e2621cee\MD5.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c344fd5536724b2af2e6453833b60203\SHA1.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c5cce8d16a1bd48692b421dcf46d3396\Util.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\c668a322917d32a5ea22894518aa9897\Base64.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\cf5fe81e2f5dcbfecfd0495e1648c991\Unicode.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\d0bf009923f29116535c26d228271d6d\Scan.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\d10c2c06ba2044cccc247c4315f5c7d3\Process.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\d1c77e404b5c4b954fa537ed63c8fb7b\File.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\d1e7c33431cd8713f2ce3582829a8b14\Socket.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\dacfd0ab9b5fd029ed8d29e4482b0775\XS.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\de446fdd1ae335c7d2b9e62bb8cdf765\B.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\df1ba73f49c38cbbc7a11c779c3506d2\OLE.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icudt46.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icuin46.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\icuuc46.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e2e81dd6b3e5a36f0bdae076393cc11d\SQLite.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\e56c61f7248672819579325af3387035\POSIX.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\eaeabd54205de2f10c00aea80bbf0d83\Registry.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\eb138ef0e4282611dbf485a302784646\LibYAML.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\f233f63b6654362865c7577442edb9e3\Win32.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\fa9e3c814aa32db2ad5f17bdfbc22746\attributes.dll
c:\users\Suppenloeffel\AppData\Local\Temp\pdk-Suppenloeffel-3928\perl514.dll
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-01-03 bis 2012-02-03  ))))))))))))))))))))))))))))))
.
.
2012-02-03 17:26 . 2012-01-06 05:15	8602168	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{7DB0DA25-A65D-4292-901C-1D85E22E48FD}\mpengine.dll
2012-02-03 17:18 . 2012-02-03 17:22	--------	d-----w-	C:\_OTL
2012-01-11 20:26 . 2011-10-26 05:25	1572864	----a-w-	c:\windows\system32\quartz.dll
2012-01-11 20:26 . 2011-10-26 05:25	366592	----a-w-	c:\windows\system32\qdvd.dll
2012-01-11 20:26 . 2011-10-26 04:32	514560	----a-w-	c:\windows\SysWow64\qdvd.dll
2012-01-11 20:26 . 2011-10-26 04:32	1328128	----a-w-	c:\windows\SysWow64\quartz.dll
2012-01-11 20:26 . 2011-11-19 14:58	77312	----a-w-	c:\windows\system32\packager.dll
2012-01-11 20:26 . 2011-11-19 14:01	67072	----a-w-	c:\windows\SysWow64\packager.dll
2012-01-11 20:26 . 2011-11-17 06:41	1731920	----a-w-	c:\windows\system32\ntdll.dll
2012-01-11 20:26 . 2011-11-17 05:38	1292080	----a-w-	c:\windows\SysWow64\ntdll.dll
2012-01-08 16:43 . 2012-01-08 16:43	626688	----a-w-	c:\program files (x86)\Mozilla Firefox\msvcr80.dll
2012-01-08 16:43 . 2012-01-08 16:43	548864	----a-w-	c:\program files (x86)\Mozilla Firefox\msvcp80.dll
2012-01-08 16:43 . 2012-01-08 16:43	479232	----a-w-	c:\program files (x86)\Mozilla Firefox\msvcm80.dll
2012-01-08 16:43 . 2012-01-08 16:43	43992	----a-w-	c:\program files (x86)\Mozilla Firefox\mozutils.dll
2012-01-07 22:50 . 2012-01-07 22:50	--------	d-----w-	c:\program files (x86)\Microsoft XNA
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-26 23:52 . 2011-09-11 16:20	279656	------w-	c:\windows\system32\MpSigStub.exe
2011-11-24 04:52 . 2011-12-17 13:59	3145216	----a-w-	c:\windows\system32\win32k.sys
2011-11-18 09:46 . 2011-09-11 16:23	414368	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-18 09:46 . 2011-11-18 09:46	279616	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{BF42D4A8-016E-4fcd-B1EB-837659FD77C6}]
2011-12-12 16:13	1603688	----a-w-	c:\program files (x86)\WEB.DE Toolbar\IE\uitb.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{C424171E-592A-415a-9EB1-DFD6D95D3530}"= "c:\program files (x86)\WEB.DE Toolbar\IE\uitb.dll" [2011-12-12 1603688]
.
[HKEY_CLASSES_ROOT\clsid\{c424171e-592a-415a-9eb1-dfd6d95d3530}]
[HKEY_CLASSES_ROOT\uitb.Toolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{99F77431-0658-476F-99CE-A05F35CDC7BA}]
[HKEY_CLASSES_ROOT\uitb.Toolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="d:\games\Steam\steam.exe" [2011-09-11 1242448]
"Logitech Vid"="c:\program files (x86)\Logitech\Vid HD\Vid.exe" [2010-10-29 5915480]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-11-10 3514176]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UMonit"="c:\windows\system32\UMonit.exe" [2009-02-11 200704]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"IJNetworkScanUtility"="c:\program files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-05-19 136544]
"MaxMenuMgr"="c:\program files (x86)\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-09-25 185640]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-08-12 205336]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech Media Server-Taskleisten-Tool.lnk - c:\program files (x86)\Squeezebox\SqueezeTray.exe [2011-12-7 3051619]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-09-11 1038088]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-21 136360]
S2 FreeAgentGoNext Service;Seagate Service;c:\program files (x86)\Seagate\SeagateManager\Sync\FreeAgentService.exe [2009-09-25 189736]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-09-01 2027840]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-08-19 450848]
S3 CompFilter64;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbflt64.sys [x]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech HD Webcam C510(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-07-08 11856]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BF42D4A8-016E-4fcd-B1EB-837659FD77C6}]
2011-12-12 16:13	1997928	----a-w-	c:\program files\WEB.DE Toolbar\IE\uitb.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{C424171E-592A-415a-9EB1-DFD6D95D3530}"= "c:\program files\WEB.DE Toolbar\IE\uitb.dll" [2011-12-12 1997928]
.
[HKEY_CLASSES_ROOT\CLSID\{C424171E-592A-415a-9EB1-DFD6D95D3530}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-30 11660904]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-12 168216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-12 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-12 416024]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1873256]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 2185032]
"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-04 767312]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-10-01 825184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://go.web.de/tb2/ie_startpage
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files (x86)\WEB.DE Toolbar\IE\uitb.dll
FF - ProfilePath - c:\users\Suppenloeffel\AppData\Roaming\Mozilla\Firefox\Profiles\pfjw2acy.default\
FF - prefs.js: browser.search.selectedEngine - Wikipedia (de)
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_bc2.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1003314698-1868941570-2493159992-1000\Software\SecuROM\License information*]
"datasecu"=hex:49,87,83,cb,44,74,0d,e8,3e,39,2e,61,8b,71,4d,53,c8,aa,62,3e,31,
   ca,98,11,87,dc,a7,e6,fb,cb,9c,a4,07,78,f1,d1,e9,02,6a,eb,3e,f0,1e,8c,9c,0b,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-02-03  19:23:07 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-02-03 18:23
.
Vor Suchlauf: 11 Verzeichnis(se), 57.960.968.192 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 57.379.946.496 Bytes frei
.
- - End Of File - - 5F95025D944F299F45FF1FDBF2B19C5B
         

Ich bins nochmal.

War zu voreilig mit der Behauptung, dass Anwendungen sich nur öffnen lassen, wenn man diese als Administrator öffnet.

Nach einem Neustart ließen sich alle Anwendungen ohne Probleme öffnen.

Scheint, dass alles wieder in Ordnung ist, oder gibts da noch weitere Schritte, die ich noch durchführen muss?

Zunächst einmal ein für heute.

Gute Nacht,
Suppe

hi,
wir machen noch einen scan, dann wird aufgeräumt, sicherheitslücken geschlossen und der pc abgesichert.
malwarebytes:
Downloade Dir bitte Malwarebytes

• Installiere
  das Programm in den vorgegebenen Pfad.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Starte Malwarebytes, klicke auf Aktualisierung --> Suche
  nach Aktualisierung
• Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
• Wenn der Scan beendet
  ist, klicke auf Ergebnisse anzeigen.
• Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
• Poste
  das Logfile, welches sich in Notepad öffnet, hier in den Thread.
• Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Hey,

habe nun Anit-Malware durchlaufen lassen.
Es gab vier Befunde, die ich gelöscht habe.

Hier die Logfile:

 Malwarebytes Anti-Malware  (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.02.05.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
*** :: SUPPENLOEFFELPC [Administrator]

Schutz: Aktiviert

05.02.2012 18:34:37
mbam-log-2012-02-05 (18-34-37).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 788327
Laufzeit: 1 Stunde(n), 15 Minute(n), 40 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
L:\$RECYCLE.BIN\S-1-5-21-2487867538-530820569-3706899629-1000\$RZLDVHT\CryptLoad_1.1.4 - Rapidshare DL Client\router\FRITZ!Box\nc.exe (PUP.Netcat) -> Erfolgreich gelöscht und in Quarantäne gestellt.
L:\z============ S O F T W A R E S\Internet&LAN\flashget\fgf140.exe (Adware.Cydoor) -> Erfolgreich gelöscht und in Quarantäne gestellt.
O:\z============ S O F T W A R E S\Internet&LAN\flashget\fgf140.exe (Adware.Cydoor) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Lg Suppe

meinst du 3 funde? ich sehe keine 4 :-)

lade den CCleaner standard:
CCleaner Download - CCleaner 3.15.1643
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Hey,

tja da hat sich wohl ein Fehler eingeschlichen

hat bissl gedauert, aber hier die Liste.

7-Zip 9.20 (x64 edition)	Igor Pavlov	10.09.2011	4,53MB	9.20.00.0	notwendig
Adobe Creative Suite 4 Master Collection	Adobe Systems Incorporated	10.09.2011	1.874MB	4.0	notwendig
Adobe Flash Player 10 ActiveX	Adobe Systems Incorporated	12.09.2011	6,00MB	10.3.183.7	notwendig
Adobe Flash Player 11 Plugin 64-bit	Adobe Systems Incorporated	17.11.2011	6,00MB	11.1.102.55	notwendig
Adobe Photoshop Lightroom 3.6 64-bit	Adobe	18.12.2011	342MB	03.06.2001	notwendig
Adobe Reader X (10.1.1) - Deutsch	Adobe Systems Incorporated	14.09.2011	119,0MB	10.01.2001	notwendig
ANNO 1404	Ubisoft	11.09.2011		1.02.0000	notwendig
ANNO 1404 - Venedig	Ubisoft	11.09.2011		2.0.5008.0	notwendig
Avira AntiVir Personal - Free Antivirus	Avira GmbH	16.10.2011	90,4MB	10.2.0.704	notwendig
Bastion	Supergiant Games	28.12.2011			notwendig
Battlefield: Bad Company 2	DICE	10.09.2011			notwendig
Canon Easy-WebPrint EX		09.10.2011			notwendig
Canon IJ Network Scan Utility		09.10.2011			notwendig
Canon IJ Network Tool		09.10.2011			notwendig
Canon Inkjet Printer/Scanner/Fax Extended Survey Program		09.10.2011			notwendig
Canon MP Navigator EX 3.0		09.10.2011			notwendig
Canon MP560 series Benutzerregistrierung		09.10.2011			notwendig
Canon MP560 series MP Drivers		09.10.2011			notwendig
Canon Utilities My Printer		09.10.2011			notwendig
Canon Utilities Solution Menu		09.10.2011			notwendig
CCleaner	Piriform	05.02.2012		Mrz 15	notwendig
CDBurnerXP	CDBurnerXP	10.09.2011	12,0MB	4.3.8.2631	notwendig
Chime	Zoe Mode	10.09.2011			notwendig
Chinese Simplified Fonts Support For Adobe Reader X	Adobe Systems Incorporated	23.01.2012	86,7MB	10.0.0	notwendig
Counter-Strike: Source	Valve	10.09.2011			notwendig
Crayon Physics Deluxe	Kloonigames	10.09.2011			notwendig
DAEMON Tools Lite	DT Soft Ltd	17.11.2011		4.45.1.0236	notwendig
Defense Grid: The Awakening	Hidden Path Entertainment	10.09.2011			notwendig
Drive Manager	Seagate Technology	23.10.2011	32,1MB	1.00.0012	notwendig
Etron USB3.0 Host Controller	Etron Technology	10.09.2011	5,13MB	0.96	notwendig
Flight Control HD		10.09.2011			notwendig
Genesys USB Mass Storage Device	Genesys Logic	10.09.2011		2.5.0.0	unbekannt
Grand Theft Auto IV	Rockstar	10.11.2011			notwendig
GTK+ Runtime 2.14.7 rev a (nur entfernen)		04.11.2011			unbekannt
Intel(R) Processor Graphics	Intel Corporation	11.09.2011		8.15.10.2361	notwendig
Java(TM) 6 Update 27	Oracle	10.09.2011	95,0MB	6.0.270	notwendig
League of Legends	Riot Games	29.10.2011		1.02.0000	notwendig
LIMBO		22.12.2011			notwendig
Logitech Media Server 7.7.1	Logitech	16.12.2011	78,1MB	07.07.2001	notwendig
Logitech Vid HD	Logitech Inc..	02.11.2011		7.2 (7240)	notwendig
Logitech Webcam Software	Logitech Inc.	02.11.2011		2.0	notwendig
Malwarebytes Anti-Malware Version 1.60.1.1000	Malwarebytes Corporation	04.02.2012	17,4MB	1.60.1.1000	notwendig
Mass Effect	BioWare	22.12.2011			notwendig
MediaMonkey 3.2	Ventis Media Inc.	11.09.2011		03. Feb	notwendig
Metro 2033	THQ	18.12.2011			notwendig
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	10.09.2011	38,8MB	4.0.30319	notwendig
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	10.09.2011	2,94MB	4.0.30319	notwendig
Microsoft .NET Framework 4 Extended	Microsoft Corporation	06.11.2011	52,0MB	4.0.30319	notwendig
Microsoft Games for Windows - LIVE Redistributable	Microsoft Corporation	02.11.2011	31,3MB	3.5.92.0	notwendig
Microsoft Games for Windows Marketplace	Microsoft Corporation	04.11.2011	6,04MB	3.5.50.0	notwendig
Microsoft IntelliType Pro 8.2	Microsoft Corporation	10.09.2011		8.20.469.0	notwendig
Microsoft Office Language Pack 2010 - German/Deutsch	Microsoft Corporation	15.09.2011		14.0.6029.1000	notwendig
Microsoft Office Professional Plus 2010	Microsoft Corporation	15.09.2011		14.0.6029.1000	notwendig
Microsoft Silverlight	Microsoft Corporation	16.10.2011	40,5MB	4.0.60831.0	notwendig
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	13.09.2011	0,29MB	8.0.56336	notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022	Microsoft Corporation	10.09.2011	2,52MB	9.0.21022	notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17	Microsoft Corporation	11.09.2011	0,77MB	9.0.30729	notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161	Microsoft Corporation	14.09.2011	0,77MB	9.0.30729.6161	notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022	Microsoft Corporation	04.11.2011	1,41MB	9.0.21022	notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17	Microsoft Corporation	10.09.2011	0,23MB	9.0.30729	notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	10.09.2011	0,58MB	9.0.30729.4148	notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	14.09.2011	0,59MB	9.0.30729.6161	notwendig
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319	Microsoft Corporation	06.11.2011	11,0MB	10.0.30319	notwendig
Microsoft Xbox 360 Accessories 1.2	Microsoft	02.12.2011	7,82MB	1.20.146.0	notwendig
Microsoft XNA Framework Redistributable 3.1	Microsoft Corporation	06.01.2012	7,55MB	3.1.10527.0	notwendig
Mozilla Firefox 9.0.1 (x86 de)	Mozilla	07.01.2012	36,4MB	9.0.1	notwendig
Mozilla Thunderbird 9.0.1 (x86 de)	Mozilla	16.01.2012	38,8MB	9.0.1	notwendig
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	26.10.2011	1,28MB	4.20.9870.0	notwendig
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	26.10.2011	1,33MB	4.20.9876.0	notwendig
NVIDIA 3D Vision Controller-Treiber 280.19	NVIDIA Corporation	10.09.2011		280.19	notwendig
NVIDIA Grafiktreiber 285.62	NVIDIA Corporation	06.11.2011		285.62	notwendig
NVIDIA HD-Audiotreiber 1.2.23.3	NVIDIA Corporation	10.09.2011		1.2.23.3	notwendig
NVIDIA PhysX-Systemsoftware 9.10.0514	NVIDIA Corporation	10.09.2011		9.10.0514	notwendig
NVIDIA Update 1.5.20	NVIDIA Corporation	06.11.2011		01.05.2020	notwendig
Pidgin		10.09.2011		02.10.2000	notwendig
Plants vs. Zombies: Game of the Year	PopCap	10.09.2011			notwendig
Portal 2	Valve	18.12.2011			notwendig
PunkBuster Services	Even Balance, Inc.	10.09.2011		0.988	notwendig
Realtek Ethernet Controller Driver	Realtek	10.09.2011		7.41.216.2011	notwendig
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	10.09.2011		6.0.1.6257	notwendig
Rhythm Zone		10.09.2011			notwendig
SABnzbd 0.6.9	The SABnzbd Team	15.09.2011	18,0MB	0.6.9	notwendig
Seagate Manager Installer	Seagate	25.10.2011	47,8MB	2.01.0600	notwendig
ShiftN 3.6	Marcus Hebel	16.12.2011	10,7MB	03. Jun	notwendig
Skype™ 5.5	Skype Technologies S.A.	18.11.2011	17,0MB	5.5.124	notwendig
SpeedFan (remove only)		10.09.2011			notwendig
Steam	Valve Corporation	10.09.2011	35,5MB	1.0.0.0	notwendig
Super Meat Boy		10.09.2011			notwendig
Team Fortress 2	Valve	10.09.2011			notwendig
TeamSpeak 3 Client	TeamSpeak Systems GmbH	10.09.2011			notwendig
TuneUp Utilities 2011	TuneUp Software	16.09.2011		10.0.4400.20	notwendig
Turba		28.12.2011			unbekannt
Ubisoft Game Launcher	UBISOFT	10.09.2011		1.0.0.0	notwendig
VLC media player 1.1.11	VideoLAN	10.09.2011		01.01.2011	notwendig
WEB.DE Softwareaktualisierung	1&1 Mail & Media GmbH	06.12.2011		2.0.2.4	notwendig
WEB.DE Toolbar für Internet Explorer	1&1 Mail & Media GmbH	19.12.2011		2.0.3.1	notwendig
Windows Live ID Sign-in Assistant	Microsoft Corporation	02.11.2011	10,0MB	6.500.3165.0	notwendig
µTorrent		23.09.2011		3.0.0	notwendig
         

Vielen lieben Dank

deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok



deinstaliere:
Java
Download der kostenlosen Java-Software
downloade java jre, instalieren.

deinstaliere:


deinstaliere:
TuneUp
auf solchen unsinn sollte man verzichten, bringt wenig und schadet dem system häufig mehr als es nutzt.

öffne otl, bereinigen, neustart.
öffne ccleaner, analysieren, bereinigen, neustart, teste ob alles wie gewohnt läuft

Hey,

alles durchgeführt. Grundsätzlich läuft alles wieder wie gewohnt.
Dafür ein dickes Lob für die Mühe.

Das einzige was mir auffällt, ist dass der Rechner hin und wieder (aber selten) nach dem Hochfahren für eine Weile nicht mehr reagiert oder sich aufhängt.
Kann das an Malwarebyte und Antivir hängen?

Gruss
Suppe

schalte mal den hintergrund wächter von Malwarebytes aus, läuft ja eh nur 30 tage.
du kannst mir auch noch mal die autostart liste vom CCleaner posten, dann können wir mal gucken was noch aus geschaltet werden kann