Google Suchergebnisse werden weitergeleitet zu "abnow.com"

.
DDS (Ver_2011-08-26.01) - NTFSx86 
Internet Explorer: 9.0.8112.16421  BrowserJavaVersion: 1.6.0_29
Run by Matthias at 11:44:45 on 2012-02-24
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.2047.1338 [GMT 1:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\ATK Hotkey\ASLDRSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
D:\Programme\Cisco VPN\cvpnd.exe
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
D:\Programme\DocuCom\Bin\ZNLSvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k HPService
D:\Programme\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\FreePDF_XP\fpassist.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - d:\progra~1\micros~1\office12\GR469A~1.DLL
BHO: Help the General-Search Project: {ca4520f3-ae13-4fb1-a513-58e23991c86d} - c:\users\matthias\appdata\roaming\mediaf~1\extens~1\GENCRA~1.DLL
BHO: ZeonIEEventHelper Class: {da986d7d-ccaf-47b2-84fe-bfa1549bebf9} - d:\programme\docucom\bin\ZeonIEFavClient.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - d:\programme\java\bin\jp2ssv.dll
TB: DocuCom PDF: {e3286bf1-e654-42ff-b4a6-5e111731df6b} - d:\programme\docucom\bin\ZeonIEFavClient.dll
{555d4d79-4bd2-4094-a395-cfc534424a05}
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [<NO NAME>] 
uRun: [Google Update] "c:\users\matthias\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [Media Finder] "c:\program files\media finder\MF.exe" /opentotray
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [GrooveMonitor] "d:\programme\microsoft office\office12\GrooveMonitor.exe"
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [FreePDF Assistant] c:\program files\freepdf_xp\fpassist.exe
mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
mRun: [AdobeCS5ServiceManager] "c:\program files\common files\adobe\cs5servicemanager\CS5ServiceManager.exe" -launchedbylogin
mRun: [SwitchBoard] c:\program files\common files\adobe\switchboard\SwitchBoard.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [<NO NAME>] 
mRun: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Download with &Media Finder - c:\program files\media finder\hook.html
IE: Nach Microsoft E&xel exportieren - d:\progra~1\micros~1\office12\EXCEL.EXE/3000
IE: Zeon Append to existing PDF - d:\programme\docucom\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Zeon Convert link target to DocuCom PDF - d:\programme\docucom\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Zeon Convert link target to existing PDF - d:\programme\docucom\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Zeon Convert selected links to DocuCom PDF - d:\programme\docucom\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
IE: Zeon Convert selected links to existing PDF - d:\programme\docucom\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
IE: Zeon Convert to DocuCom PDF - d:\programme\docucom\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - d:\programme\icq7.5\ICQ.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - d:\progra~1\micros~1\office12\ONBttnIE.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - d:\progra~1\micros~1\office12\REFIEBAR.DLL
LSP: mswsock.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
TCP: DhcpNameServer = 137.193.6.6 137.193.10.21
TCP: Interfaces\{AE286085-2B7A-4606-8830-BC9DEC05F891} : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{AE286085-2B7A-4606-8830-BC9DEC05F891}\1445B4D2241434B45505 : DhcpNameServer = 10.0.4.5
TCP: Interfaces\{AE286085-2B7A-4606-8830-BC9DEC05F891}\5416379724F687D2646314344363 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{AE286085-2B7A-4606-8830-BC9DEC05F891}\64259445A51224F687C43565B4 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{D4B1773B-DBB2-4A31-9445-B2E05A16D078} : DhcpNameServer = 137.193.6.6 137.193.10.21
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - d:\progra~1\micros~1\office12\GRA32A~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - d:\progra~1\micros~1\office12\GR469A~1.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\matthias\appdata\roaming\mozilla\firefox\profiles\sniwvhgw.default\
FF - prefs.js: browser.startup.homepage - chrome://speeddial/content/speeddial.xul
FF - prefs.js: keyword.URL - hxxp://www.google.de/search?q=
FF - prefs.js: network.proxy.http - localhost
FF - prefs.js: network.proxy.http_port - 9666
FF - prefs.js: network.proxy.socks - localhost
FF - prefs.js: network.proxy.socks_port - 9050
FF - prefs.js: network.proxy.ssl - localhost
FF - prefs.js: network.proxy.ssl_port - 9666
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.69\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: c:\users\matthias\appdata\local\google\update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: d:\programme\adobe\reader\air\nppdf32.dll
FF - plugin: d:\programme\adobe\reader\browser\nppdf32.dll
FF - plugin: d:\programme\java\bin\new_plugin\npdeployJava1.dll
FF - plugin: d:\programme\java\bin\new_plugin\npjp2.dll
FF - plugin: d:\programme\mozilla firefox\plugins\npdeployJava1.dll
.
---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true
============= SERVICES / DRIVERS ===============
.
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2011-10-15 36000]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-1-3 63928]
R2 AntiVirSchedulerService;Avira Planer;c:\program files\avira\antivir desktop\sched.exe [2011-10-15 86224]
R2 AntiVirService;Avira Echtzeit Scanner;c:\program files\avira\antivir desktop\avguard.exe [2011-10-15 110032]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2011-10-15 74640]
R2 ZNLSvc;Zeon License Service;d:\programme\docucom\bin\ZNLSvc.exe [2008-9-8 186200]
R3 AtcL001;NDIS-Miniporttreiber für L1-Gigabit-Ethernet-Controller von Atheros;c:\windows\system32\drivers\l160x86.sys [2009-6-25 47104]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-8-25 218688]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update-Dienst (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-6-14 136176]
S3 ADVXRUKZPTW;ADVXRUKZPTW;c:\users\matthias\appdata\local\temp\ADVXRUKZPTW.exe [2011-7-13 564096]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 62464]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-6-14 136176]
S3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\drivers\ivusb.sys [2010-7-29 25112]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2011-5-18 137600]
S3 StorSvc;Speicherdienst;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 SwitchBoard;SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 VKPWI;VKPWI;c:\users\matthias\appdata\local\temp\VKPWI.exe [2011-7-13 392064]
S3 WSDPrintDevice;WSD-Druckunterstützung durch UMB;c:\windows\system32\drivers\WSDPrint.sys [2009-7-14 17920]
.
=============== Created Last 30 ================
.
2012-02-22 17:11:11	--------	d-sh--w-	c:\windows\system32\%APPDATA%
2012-02-22 17:07:43	0	--sha-w-	c:\windows\system32\dds_log_trash.cmd
2012-02-22 17:07:03	--------	d-sh--w-	c:\users\matthias\appdata\local\89835f6e
2012-02-22 16:52:53	--------	d-----w-	c:\users\matthias\appdata\roaming\Media Finder
2012-02-22 16:35:49	--------	d-----w-	c:\windows\WindowsMobile
2012-02-22 16:09:18	262360	----a-w-	c:\users\matthias\appdata\roaming\wahemiex.dll
2012-02-21 06:38:25	6552120	----a-w-	c:\programdata\microsoft\windows defender\definition updates\{f125534d-15d5-4432-93b8-d3ee2f9e3a59}\mpengine.dll
2012-02-15 11:04:32	478720	----a-w-	c:\windows\system32\timedate.cpl
2012-02-15 11:04:27	690688	----a-w-	c:\windows\system32\msvcrt.dll
2012-02-15 11:04:22	442880	----a-w-	c:\windows\system32\ntshrui.dll
2012-02-15 11:04:20	2343424	----a-w-	c:\windows\system32\win32k.sys
2012-01-31 08:11:51	67440	----a-w-	c:\windows\system32\drivers\ksecdd.sys
2012-01-31 08:11:51	369352	----a-w-	c:\windows\system32\drivers\cng.sys
2012-01-31 08:11:51	314880	----a-w-	c:\windows\system32\webio.dll
2012-01-31 08:11:51	22528	----a-w-	c:\windows\system32\lsass.exe
2012-01-31 08:11:51	224768	----a-w-	c:\windows\system32\schannel.dll
2012-01-31 08:11:51	22016	----a-w-	c:\windows\system32\secur32.dll
2012-01-31 08:11:51	15872	----a-w-	c:\windows\system32\sspisrv.dll
2012-01-31 08:11:51	134000	----a-w-	c:\windows\system32\drivers\ksecpkg.sys
2012-01-31 08:11:51	1038848	----a-w-	c:\windows\system32\lsasrv.dll
2012-01-31 08:11:51	100352	----a-w-	c:\windows\system32\sspicli.dll
.
==================== Find3M  ====================
.
2012-02-23 08:44:22	414368	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-01-29 04:10:42	237072	------w-	c:\windows\system32\MpSigStub.exe
2011-12-19 13:12:00	104752	----a-w-	c:\windows\system32\drivers\VBoxNetAdp.sys
2011-12-19 13:11:58	91440	----a-w-	c:\windows\system32\drivers\VBoxUSBMon.sys
2011-12-19 13:11:58	158512	----a-w-	c:\windows\system32\drivers\VBoxDrv.sys
2011-12-14 03:04:54	1798656	----a-w-	c:\windows\system32\jscript9.dll
2011-12-14 02:57:18	1127424	----a-w-	c:\windows\system32\wininet.dll
2011-12-14 02:56:58	1427456	----a-w-	c:\windows\system32\inetcpl.cpl
2011-12-14 02:50:04	2382848	----a-w-	c:\windows\system32\mshtml.tlb
.
============= FINISH: 11:45:42,99 ===============