Code:
Alles auswählen Aufklappen ATTFilter
OTL logfile created on: 07.03.2012 23:27:18 - Run 1
OTL by OldTimer - Version 3.2.35.1 Folder = C:\Dokumente und Einstellungen\Julska\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,87 Gb Total Physical Memory | 1,31 Gb Available Physical Memory | 69,89% Memory free
3,72 Gb Paging File | 3,30 Gb Available in Paging File | 88,54% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 14,65 Gb Total Space | 0,32 Gb Free Space | 2,20% Space Free | Partition Type: NTFS
Drive D: | 134,39 Gb Total Space | 96,74 Gb Free Space | 71,98% Space Free | Partition Type: NTFS
Computer Name: WOLSKI-BCC8AC0E | User Name: Julska | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\Julska\Desktop\OTL.exe (OldTimer Tools)
PRC - D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe ()
PRC - D:\Programme\1&1 Surf-Stick\UIMain.exe ()
PRC - D:\Programme\1&1 Surf-Stick\CMUpdater.exe ()
PRC - D:\Programme\1&1 Surf-Stick\AssistantServices.exe ()
PRC - D:\Programme\1&1 Surf-Stick\UIExec.exe ()
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Dokumente und Einstellungen\Julska\Lokale Einstellungen\Anwendungsdaten\Skype\Skype.exe (Rockwell Software, Inc.)
PRC - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
PRC - C:\WINDOWS\system32\VTTimer.exe (S3 Graphics, Inc.)
PRC - C:\WINDOWS\system32\S3Trayp.exe (S3 Graphics Co., Ltd.)
========== Modules (No Company Name) ==========
MOD - C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll ()
MOD - C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll ()
MOD - D:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}\components\RadioWMPCoreGecko10.dll ()
MOD - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe ()
MOD - D:\Programme\1&1 Surf-Stick\UIPlugin\UISetting.dll ()
MOD - D:\Programme\1&1 Surf-Stick\UIMain.exe ()
MOD - D:\Programme\1&1 Surf-Stick\UIPlugin\UISms.dll ()
MOD - D:\Programme\1&1 Surf-Stick\CMUpdater.exe ()
MOD - D:\Programme\1&1 Surf-Stick\UIPlugin\UIPhoneBook.dll ()
MOD - D:\Programme\1&1 Surf-Stick\UpdateAgent.dll ()
MOD - D:\Programme\1&1 Surf-Stick\UIPlugin\UIConnectRecord.dll ()
MOD - D:\Programme\1&1 Surf-Stick\UIPlugin\UIMms.dll ()
MOD - D:\Programme\1&1 Surf-Stick\UISkin.dll ()
MOD - D:\Programme\1&1 Surf-Stick\UIPlugin\UIUssd.dll ()
MOD - D:\Programme\1&1 Surf-Stick\UIPlugin\UIStk.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIDataBase.dll ()
MOD - D:\Programme\1&1 Surf-Stick\AssistantServices.exe ()
MOD - D:\Programme\1&1 Surf-Stick\UICommonDlg.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIConfig.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BKService.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BISetting.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BISms.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BICodec.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIPhoneBook.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIXml.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIService.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\CMCOMService.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIRas.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIDevManager.dll ()
MOD - D:\Programme\1&1 Surf-Stick\UIExec.exe ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIOptimizationClient.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BILog.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIConnectRecord.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIStk.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIVoice.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BIUssd.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\SysService.dll ()
MOD - D:\Programme\1&1 Surf-Stick\Component\BICallRecord.dll ()
MOD - C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll ()
MOD - C:\Programme\Avira\AntiVir Desktop\sqlite3.dll ()
MOD - C:\WINDOWS\system32\msjetoledb40.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
========== Win32 Services (SafeList) ==========
SRV - (HidServ) -- File not found
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (SearchAnonymizer) -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe ()
SRV - (UI Assistant Service) -- D:\Programme\1&1 Surf-Stick\AssistantServices.exe ()
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (getPlus(R) Helper) getPlus(R) -- C:\Programme\NOS\bin\getPlus_HelperSvc.exe (NOS Microsystems Ltd.)
SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (WDICA) -- File not found
DRV - (upperdev) -- File not found
DRV - (UfasoftSnifDriver4) -- File not found
DRV - (smserial) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (Packet) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (hwdatacard) -- File not found
DRV - (gtstusbser) -- File not found
DRV - (Changer) -- File not found
DRV - (a5s6a3a2) -- File not found
DRV - (Netaapl) -- C:\WINDOWS\system32\drivers\netaapl.sys (Apple Inc.)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ZTEusbser6k) -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys (ZTE Incorporated)
DRV - (ZTEusbnmea) -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys (ZTE Incorporated)
DRV - (ZTEusbmdm6k) -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated)
DRV - (massfilter) -- C:\WINDOWS\system32\drivers\massfilter.sys (ZTE Incorporated)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (nm) -- C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)
DRV - (MPE) -- C:\WINDOWS\system32\drivers\MPE.sys (Microsoft Corporation)
DRV - (NWUSBPort) -- C:\WINDOWS\system32\drivers\nwusbser.sys (Novatel Wireless Inc.)
DRV - (NWUSBModem) -- C:\WINDOWS\system32\drivers\nwusbmdm.sys (Novatel Wireless Inc.)
DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (AF15BDA) Cinergy T USB XE (MKII) -- C:\WINDOWS\system32\drivers\AF15BDA.sys (AfaTech )
DRV - (PRISM_A02) -- C:\WINDOWS\system32\drivers\PRISMA02.sys (Conexant Systems, Inc.)
DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV - (S3GIGP) -- C:\WINDOWS\system32\drivers\S3gIGPm.sys (S3 Graphics Co., Ltd.)
DRV - (SIS163u) -- C:\WINDOWS\system32\drivers\sis163u.sys (Silicon Integrated Systems Corp.)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (EU3_USB) -- C:\WINDOWS\system32\drivers\EU3USB.sys ( Inc.)
DRV - (PCANDIS5) -- C:\WINDOWS\system32\PCANDIS5.SYS (Printing Communications Assoc., Inc. (PCAUSA))
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
IE - HKLM\..\SearchScopes,DefaultScope = {56256A51-B582-467e-B8D4-7786EDA79AE0}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZKfox000&fl=0&ptb=_Sts4N1Mxgx1gz2umLuZrQ&url=hxxp://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=sb&searchfor={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.facemoods.com/?a=ddrnw
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKCU\..\SearchScopes\{0CE2B29A-CD1E-4A32-9501-5FA3420E89E1}: "URL" = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&mode=bounce&k=0
IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = hxxp://supertoolbar.ask.com.anonymize-me.de/?anonymto=687474703A2F2F7375706572746F6F6C6261722E61736B2E636F6D2F72656469726563743F636C69656E743D69652674623D54524C266F3D267372633D63726D26713D7B7365617263685465726D737D&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&k=0
IE - HKCU\..\SearchScopes\{3C4F8561-985D-47C6-9AA6-80448AF1239D}: "URL" = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&mode=bounce&k=0
IE - HKCU\..\SearchScopes\{48F0A5B8-46C1-4ED0-B1DA-B1CE64B7A2FD}: "URL" = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&mode=bounce&k=0
IE - HKCU\..\SearchScopes\{4EC8C623-89E2-4131-B9ED-A6803E6E957F}: "URL" = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&mode=bounce&k=0
IE - HKCU\..\SearchScopes\{51D35792-C850-4C71-9472-51A6A9420793}: "URL" = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&mode=bounce&k=0
IE - HKCU\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = hxxp://www.mywebsearch.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E6D797765627365617263682E636F6D2F6A73702F6366675F7265646972322E6A73703F69643D5A4B666F7830303026666C3D30267074623D5F537473344E314D78677831677A32756D4C755A72512675726C3D687474703A2F2F7365617263682E6D797765627365617263682E636F6D2F6D797765627365617263682F6466745F72656469722E6A68746D6C2673743D736226736561726368666F723D7B7365617263685465726D737D&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&k=0
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://www.icq.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E6963712E636F6D2F7365617263682F726573756C74732E7068703F713D7B7365617263685465726D737D2663685F69643D6F7364&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&k=0
IE - HKCU\..\SearchScopes\{D2242F83-1B9C-4FAE-BE67-5558AEB705DC}: "URL" = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=302dda8f-bf23-441c-b429-1b39657421b2&pid=icqt&mode=bounce&k=0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaultthis.engineName: "Fast Browser Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://www.fastbrowsersearch.com/results/results.aspx?v=2&bd=042010&ua=002&s=DEF&tid={5A2A9550-559E-EDDA-4934-290E3EE3CD13}&q="
FF - prefs.js..browser.search.order.1: "Fast Browser Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}:2.4.3
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:2.7.1.3
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.8
FF - prefs.js..keyword.URL: "hxxp://www.fastbrowsersearch.com/results/results.aspx?v=2&bd=042010&ua=002&s=NAUS&tid={5A2A9550-559E-EDDA-4934-290E3EE3CD13}&q="
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: D:\Programme\Picasa2\npPicasa2.dll File not found
FF - HKLM\Software\MozillaPlugins\@innoplus.de/ino3DViewer: D:\Programme\innoplus\3D-Viewer-innoPlus\npIno3DViewer.dll (INNOVA-engineering GmbH Dresden)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: D:\Programme\Mozilla Firefox\components [2012.02.15 14:00:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2011.12.27 22:27:04 | 000,000,000 | ---D | M]
[2009.03.05 18:21:42 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Extensions
[2012.03.02 15:03:45 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\extensions
[2011.12.27 22:52:27 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.02.15 11:24:45 | 000,000,000 | ---D | M] (softonic-de3 Community Toolbar) -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
[2012.03.02 15:03:45 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010.10.09 17:59:07 | 000,001,985 | ---- | M] () -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\searchplugins\bing.xml
[2011.11.26 12:39:58 | 000,005,407 | ---- | M] () -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\searchplugins\fast-browser-search.xml
[2012.02.03 23:11:41 | 000,000,451 | ---- | M] () -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\searchplugins\web-browser-search.xml
[2010.10.09 17:59:07 | 000,024,033 | ---- | M] () -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\searchplugins\{11B703A5-9EAA-4DFA-88D8-77DCE5D67F76}.xml
[2010.10.09 17:59:07 | 000,002,516 | ---- | M] () -- C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\Mozilla\Firefox\Profiles\cxpw6jvn.default\searchplugins\{D01DDF59-74EA-4004-B30F-23B0E67731D7}.xml
() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\JULSKA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\CXPW6JVN.DEFAULT\EXTENSIONS\{ADE0487A-C040-4576-A3A2-A4F1B0525876}.XPI
() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\JULSKA\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\CXPW6JVN.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011.12.27 18:29:59 | 000,002,048 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\fcmdSrch.xml
O1 HOSTS File: ([2008.04.14 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Programme\kikin\ie_kikin.dll (kikin)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {00000000-0000-0000-0000-000000000000} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [Ocs_SM] C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\OCS\SM\SearchAnonymizer.exe (OCS)
O4 - HKLM..\Run: [S3Trayp] C:\WINDOWS\System32\S3Trayp.exe (S3 Graphics Co., Ltd.)
O4 - HKLM..\Run: [UIExec] D:\Programme\1&1 Surf-Stick\UIExec.exe ()
O4 - HKLM..\Run: [VTTimer] C:\WINDOWS\System32\VTTimer.exe (S3 Graphics, Inc.)
O4 - HKCU..\Run: [ISUSPM] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
O4 - HKCU..\Run: [SkypeM] C:\Dokumente und Einstellungen\Julska\Lokale Einstellungen\Anwendungsdaten\Skype\Skype.exe (Rockwell Software, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Dokumente und Einstellungen\Julska\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Programme\kikin\ie_kikin.dll (kikin)
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - D:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - D:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1251562122437 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1251574894156 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2A712DB3-BE21-4057-AEA8-22A4429E4967}: DhcpNameServer = 212.23.115.148 212.23.97.2
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About========== Files/Folders - Created Within 30 Days ==========
[2012.03.07 23:26:48 | 000,584,704 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Julska\Desktop\OTL.exe
[2012.03.06 16:00:33 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Julska\Recent
[2012.02.28 12:52:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Reisekostenabrechnung 3
[2012.02.28 12:49:35 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{907549E1-1111-4EA2-9A82-21C7D9BBB851}
[2012.02.28 12:49:31 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Borland Shared
[2012.02.28 12:49:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Reisekostenabrechnung 3
[2012.02.28 11:35:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Julska\Reisekostensoftware
[2012.02.28 11:35:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Julska\Startmenü\Programme\Reisekosten
========== Files - Modified Within 30 Days ==========
[2012.03.07 23:20:12 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.03.07 23:20:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.03.06 16:54:52 | 000,584,704 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Julska\Desktop\OTL.exe
[2012.03.01 18:11:44 | 000,013,010 | ---- | M] () -- C:\Dokumente und Einstellungen\Julska\Desktop\pienime.jpg
[2012.02.16 01:49:52 | 000,268,600 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.02.15 15:58:01 | 000,452,664 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.02.15 15:58:01 | 000,435,898 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.02.15 15:58:01 | 000,081,558 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.02.15 15:58:01 | 000,068,794 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.02.10 16:02:11 | 000,018,432 | -H-- | M] () -- D:\Eigene Dateien\photothumb.db
========== Files Created - No Company Name ==========
[2012.03.01 18:11:44 | 000,013,010 | ---- | C] () -- C:\Dokumente und Einstellungen\Julska\Desktop\pienime.jpg
[2012.02.15 12:38:04 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.02.15 12:38:04 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2010.06.24 10:56:50 | 000,000,200 | ---- | C] () -- C:\WINDOWS\WININIT.INI
< End of report >
07.03.2012, 23:47
Baum-Darstellung