50 Euro Virus mit Deutschlandflagge.Nichts geht mehr!

OTL logfile created on: 01.04.2012 14:47:21 - Run 2
OTL by OldTimer - Version 3.2.39.2     Folder = C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1023,48 Mb Total Physical Memory | 729,77 Mb Available Physical Memory | 71,30% Memory free
2,41 Gb Paging File | 2,26 Gb Available in Paging File | 93,78% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 74,55 Gb Total Space | 38,26 Gb Free Space | 51,33% Space Free | Partition Type: NTFS
Drive D: | 67,66 Gb Total Space | 50,37 Gb Free Space | 74,45% Space Free | Partition Type: NTFS
Drive E: | 6,82 Gb Total Space | 6,82 Gb Free Space | 100,00% Space Free | Partition Type: FAT32
Drive F: | 149,04 Gb Total Space | 148,96 Gb Free Space | 99,95% Space Free | Partition Type: NTFS
 
Computer Name: VASILIKA | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\WINDOWS\system32\tsd32.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (AppMgmt) -- %SystemRoot%\System32\appmgmts.dll File not found
SRV - (BBSvc) -- C:\Programme\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (BBUpdate) -- C:\Programme\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (FsUsbExService) -- C:\WINDOWS\system32\FsUsbExService.Exe (Teruten)
SRV - (getPlus(R) Helper) getPlus(R) -- C:\Programme\NOS\bin\getPlus_HelperSvc.exe (NOS Microsystems Ltd.)
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (StarWindServiceAE) -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software)
SRV - (UxTuneUp) -- C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software GmbH)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (HRService) -- C:\Programme\Haufe\iDesk\iDeskService\ideskservice.exe ()
SRV - (CyberLink Media Library Service) -- C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe (Cyberlink)
SRV - (CLSched) CyberLink Task Scheduler (CTS) -- C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe ()
SRV - (CLCapSvc) CyberLink Background Capture Service (CBCS) -- C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe ()
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
SRV - (x10nets) -- C:\Programme\Common Files\X10\Common\X10nets.exe (X10)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (WDICA) --  File not found
DRV - (wanatw) WAN Miniport (ATW) -- system32\DRIVERS\wanatw4.sys File not found
DRV - (vaxscsi) -- C:\WINDOWS\System32\Drivers\vaxscsi.sys File not found
DRV - (PID_0928) Logitech QuickCam Express(PID_0928) -- system32\DRIVERS\LV561AV.SYS File not found
DRV - (PDRFRAME) --  File not found
DRV - (PDRELI) --  File not found
DRV - (PDFRAME) --  File not found
DRV - (PDCOMP) --  File not found
DRV - (PCIDump) --  File not found
DRV - (MRENDIS5) -- c:\PROGRA~1\COMMON~1\motive\MRENDIS5.SYS File not found
DRV - (LVUSBSta) -- system32\drivers\lvusbsta.sys File not found
DRV - (LVMVDrv) -- system32\DRIVERS\LVMVDrv.sys File not found
DRV - (LVcKap) -- system32\DRIVERS\LVcKap.sys File not found
DRV - (lbrtfdc) --  File not found
DRV - (i2omgmt) --  File not found
DRV - (Changer) --  File not found
DRV - (awx896kz) --  File not found
DRV - (CardReaderFilter) -- C:\WINDOWS\system32\drivers\USBCRFT.SYS (ICSI Technology Ltd.)
DRV - (LVUVC) Logitech Webcam 300(UVC) -- C:\WINDOWS\system32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) -- C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)
DRV - (fssfltr) -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (FilterService) -- C:\WINDOWS\system32\drivers\lvuvcflt.sys (Logitech Inc.)
DRV - (lvpopflt) -- C:\WINDOWS\system32\drivers\lvpopflt.sys (Logitech Inc.)
DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (FsUsbExDisk) -- C:\WINDOWS\system32\FsUsbExDisk.Sys ()
DRV - (ss_bmdm) -- C:\WINDOWS\system32\drivers\ss_bmdm.sys (MCCI Corporation)
DRV - (ss_bbus) SAMSUNG USB Mobile Device (WDM) -- C:\WINDOWS\system32\drivers\ss_bbus.sys (MCCI)
DRV - (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV - (MPE) -- C:\WINDOWS\system32\drivers\mpe.sys (Microsoft Corporation)
DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys ()
DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (dtscsi) -- C:\WINDOWS\system32\drivers\dtscsi.sys (DT Soft Ltd.)
DRV - (AgereSoftModem) -- C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems)
DRV - (3xHybrid) -- C:\WINDOWS\system32\drivers\3xHybrid.sys (Philips Semiconductors GmbH)
DRV - (BTHidEnum) -- C:\WINDOWS\system32\drivers\vbtenum.sys ()
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (BTNetFilter) -- C:\WINDOWS\system32\drivers\BTNetFilter.sys ()
DRV - (RT2500USB) -- C:\WINDOWS\system32\drivers\rt2500usb.sys (Ralink Technology Inc.)
DRV - (Btcsrusb) -- C:\WINDOWS\system32\drivers\btcusb.sys (IVT Corporation)
DRV - (VcommMgr) -- C:\WINDOWS\system32\drivers\VcommMgr.sys (IVT Corporation)
DRV - (BTHidMgr) -- C:\WINDOWS\system32\drivers\BTHidMgr.sys (IVT Corporation)
DRV - (VComm) -- C:\WINDOWS\system32\drivers\VComm.sys (IVT Corporation)
DRV - (BlueletAudio) -- C:\WINDOWS\system32\drivers\blueletaudio.sys (IVT Corporation)
DRV - (cmudax) -- C:\WINDOWS\system32\drivers\cmudax.sys (C-Media Inc.)
DRV - (BT) -- C:\WINDOWS\system32\drivers\BtNetDrv.sys (IVT Corporation)
DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\Hdaudio.sys (Windows (R) Server 2003 DDK provider)
DRV - (XUIF) -- C:\WINDOWS\system32\drivers\x10ufx2.sys (X10 Wireless Technology, Inc.)
DRV - (WINFLASH) -- D:\Tools\Winflash\WinFlash.sys ()
DRV - (wceusbsh) -- C:\WINDOWS\system32\drivers\wceusbsh.sys (Windows (R) 2000 DDK provider)
DRV - (wbscr) -- C:\WINDOWS\system32\drivers\wbscr.sys (Winbond Electronics Corp.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.medion.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.aldi.com/
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programme\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027: C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/npracplug;version=1.0.0.0: C:\Programme\Real\RealArcade\Plugins\Mozilla\npracplug.dll (RealNetworks)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2088: C:\Programme\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040: C:\Programme\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Programme\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll File not found
FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
 
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\
 
O1 HOSTS File: ([2012.03.23 20:02:02 | 000,004,262 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: <html>
O1 - Hosts: <head><title>502 Bad Gateway</title></head>
O1 - Hosts: <body bgcolor="white">
O1 - Hosts: <center><h1>502 Bad Gateway</h1></center>
O1 - Hosts: <hr><center>nginx</center>
O1 - Hosts: </body>
O1 - Hosts: </html>
O2 - BHO: (no name) - {975670D0-7EFB-4fa8-90FA-3AE575B9FB77} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programme\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {9d81af43-de53-48d0-a199-42c2a226b24c} - No CLSID value found.
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\IE\5.0\pdfforgeToolbarIE.dll File not found
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {DFEFCDEE-CF1A-4FC8-89AF-189327213627} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found
O4 - HKLM..\Run: [Dit] C:\WINDOWS\Dit.exe (ICSI Technology Ltd.)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [LWS] C:\Programme\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [PCMService] C:\Programme\Home Cinema\PowerCinema\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl] C:\Programme\Home Cinema\PowerDVD\PDVDServ.exe (Cyberlink Corp.)
O4 - HKLM..\Run: [SearchSettings] "C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe" File not found
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] C:\WINDOWS\System32\Hdaudpropshortcut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKCU..\Run: [AOLMIcon] C:\Programme\Gemeinsame Dateien\AOLSHARE\AOLMIcon.exe File not found
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil11g_ActiveX.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Image Zone Schnellstart.lnk = C:\Programme\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Google Search - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html File not found
O8 - Extra context menu item: Ähnliche Seiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html File not found
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html File not found
O8 - Extra context menu item: Verweisseiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html File not found
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe File not found
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Programme\Internet Explorer\PLUGINS\NPDocBox.dll (Intertrust Technologies, Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} hxxp://office.microsoft.com/officeupdate/content/opuc.cab (Office Update Installation Engine)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1106843944468 (WUWebControl Class)
O16 - DPF: {6551848B-8185-4436-8C20-BDEA6E2E5BA7} file:///G:/plugin/lesax.cab (AXReader Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab (get_atlcom Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{35ECF9E6-E576-464C-A084-965596A82414}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\MEDION 5aol.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\MEDION 5aol.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.02.12 20:54:46 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.04.01 14:46:55 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Desktop\OTL.exe
[2012.03.28 08:51:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2012.03.28 08:51:30 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2012.03.28 08:51:28 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2012.03.28 08:51:28 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2012.03.28 08:51:28 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2012.03.28 08:51:28 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2012.03.28 08:51:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2012.03.27 21:56:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\Google
[2012.03.27 21:54:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\DataDesign
[2012.03.27 09:36:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\Duden
[2012.03.25 10:57:25 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\PrivacIE
[2012.03.23 19:51:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2012.03.23 19:38:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\Windows Search
[2012.03.23 19:37:36 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\IETldCache
[2012.03.23 19:36:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\Identities
[2012.03.23 19:36:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\CyberLink
[2012.03.23 19:36:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\AOL
[2012.03.23 19:36:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\Adobe
[2012.03.23 19:36:02 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\Microsoft
[2012.03.23 19:36:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\Macromedia
[2012.03.23 19:36:01 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten
[2012.03.23 19:36:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Eigene Dateien\Eigene Tabellen
[2012.03.23 19:36:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Eigene Dateien\Eigene Musik
[2012.03.23 19:36:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Eigene Dateien\Eigene Dokumente
[2012.03.23 19:36:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Eigene Dateien\Eigene Bilder
[2012.03.23 19:36:01 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Cookies
[2012.03.23 19:36:01 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Druckumgebung
[2012.03.23 19:36:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\You've Got Pictures Screensaver
[2012.03.23 19:36:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\Sun
[2012.03.23 19:36:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Anwendungsdaten\Real
[2012.03.23 19:36:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Desktop
[2012.03.23 19:36:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Eigene Dateien\Bluetooth
[2012.03.23 19:36:00 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Eigene Dateien\Eigene Videos
[2012.03.23 19:36:00 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Eigene Dateien
[2012.03.23 19:36:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Eigene Dateien\My Skype Pictures
[2012.03.23 19:35:59 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Favoriten
[2012.03.23 19:35:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\Microsoft Help
[2012.03.23 19:35:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2012.03.23 19:35:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\ApplicationHistory
[2012.03.23 19:35:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\Adobe
[2012.03.23 19:35:58 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\UserData
[2012.03.23 19:35:58 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\SendTo
[2012.03.23 19:35:58 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Recent
[2012.03.23 19:35:58 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Startmenü\Programme\Zubehör
[2012.03.23 19:35:58 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Startmenü
[2012.03.23 19:35:58 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Startmenü\Programme\Autostart
[2012.03.23 19:35:58 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Vorlagen
[2012.03.23 19:35:58 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Netzwerkumgebung
[2012.03.23 19:35:58 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen
[2012.03.23 19:35:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\WMTools Downloaded Files
[2012.03.23 19:35:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\WINDOWS
[2012.03.23 19:35:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\PowerCinema
[2012.03.23 19:35:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\{3248F0A6-6813-11D6-A77B-00B0D0150010}
[2012.03.21 12:28:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Local Settings
[2012.03.19 13:13:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Chrome
[2012.03.07 11:28:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\UAs
[2012.03.07 11:15:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xmldm
[2012.03.07 11:15:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\kock
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Programme\*.tmp files -> C:\Programme\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.04.01 14:46:56 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Desktop\OTL.exe
[2012.04.01 14:44:43 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.04.01 14:44:30 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.04.01 14:40:54 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.04.01 14:40:27 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\lvuvc.hs
[2012.04.01 14:08:00 | 000,001,094 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.04.01 13:50:21 | 000,017,408 | ---- | M] (ICSI Technology Ltd.) -- C:\WINDOWS\System32\drivers\USBCRFT.SYS
[2012.04.01 13:46:47 | 000,483,638 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.04.01 13:46:47 | 000,440,302 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.04.01 13:46:47 | 000,094,940 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.04.01 13:46:47 | 000,071,370 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.03.28 08:51:43 | 000,001,675 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk
[2012.03.27 21:56:26 | 000,001,781 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Desktop\Google Chrome.lnk
[2012.03.23 20:19:48 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2012.03.23 20:02:02 | 000,004,262 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012.03.22 09:35:38 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.03.19 13:10:59 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012.03.14 16:49:59 | 000,353,768 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.14 13:41:55 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.03.09 18:17:06 | 000,000,402 | ---- | M] () -- C:\WINDOWS\tasks\1-Klick-Wartung.job
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Programme\*.tmp files -> C:\Programme\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.03.28 08:51:43 | 000,001,675 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk
[2012.03.27 21:56:26 | 000,001,781 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Desktop\Google Chrome.lnk
[2012.03.23 19:36:24 | 000,000,678 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Desktop\Skype.lnk
[2012.03.23 19:36:07 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2012.03.23 19:36:04 | 000,001,599 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Startmenü\Programme\Remoteunterstützung.lnk
[2012.03.23 19:36:04 | 000,000,751 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Startmenü\Programme\Internet Explorer.lnk
[2012.03.23 19:36:04 | 000,000,722 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.VASILIKA.000\Startmenü\Programme\Outlook Express.lnk
[2012.03.21 12:34:11 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.02.16 13:03:54 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011.05.09 13:22:29 | 000,027,872 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2011.05.02 11:23:45 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2011.04.01 07:07:02 | 010,877,272 | ---- | C] () -- C:\WINDOWS\System32\LogiDPP.dll
[2011.04.01 07:07:02 | 000,102,744 | ---- | C] () -- C:\WINDOWS\System32\LogiDPPApp.exe
[2011.04.01 07:06:56 | 000,331,608 | ---- | C] () -- C:\WINDOWS\System32\DevManagerCore.dll
[2011.03.22 23:58:22 | 000,014,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2011.03.22 11:58:53 | 000,003,548 | ---- | C] () -- C:\WINDOWS\System32\drivers\WinFlash.sys
[2011.03.22 11:58:24 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\C3A9E6D071.sys
[2011.03.14 16:14:49 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011.03.14 16:14:49 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011.02.11 13:13:38 | 000,000,306 | ---- | C] () -- C:\WINDOWS\gttb64.ini
[2010.10.29 00:08:50 | 002,688,248 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2010.10.28 23:42:36 | 000,000,101 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft.SqlServer.Compact.351.32.bc

< End of report >