`Durch das Besuchen von Seiten mit infizierten Inhalten...wird ihr Windows geblockt.`

Hilfesuche · 19.04.2012, 01:15

Guten Abend,

habe das gleiche Problem wie der Member `Ahnungslos11`. Nur handelt es sich bei mir um Windows XP mit 32bit.

OTL habe ich bereits durchlaufen lassen (dank eurer verstaendlichen Beschreibung) und habe als Logfiles folgende Textdokumente:

Extras.Txt - EditorOTL Logfile:

Code:

ATTFilter

OTL Extras logfile created on: 19.04.2012 01:33:10 - Run 1
OTL by OldTimer - Version 3.2.40.0     Folder = C:\Dokumente und Einstellungen\Administrator\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale:  | Country:  | Language:  | Date Format: 
 
2,00 Gb Total Physical Memory | 1,74 Gb Available Physical Memory | 87,09% Memory free
2,60 Gb Paging File | 2,49 Gb Available in Paging File | 95,80% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 55,89 Gb Total Space | 22,04 Gb Free Space | 39,44% Space Free | Partition Type: NTFS
Drive D: | 55,90 Gb Total Space | 40,58 Gb Free Space | 72,59% Space Free | Partition Type: NTFS
Drive E: | 37,25 Gb Total Space | 30,23 Gb Free Space | 81,16% Space Free | Partition Type: FAT32
 
Computer Name: * | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Programme\Microsoft Office\Office\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Dokumente und Einstellungen\*\bea\BearShare.exe" = C:\Dokumente und Einstellungen\*\bea\BearShare.exe:*:Enabled:BearShare
"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox\web_de_Update.exe" = C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox\web_de_Update.exe:*:Enabled:WEB.DE Update -- (AccSys GmbH)
"E:\Radio\Player\ClipInc-Player.exe" = E:\Radio\Player\ClipInc-Player.exe:*:Enabled:ClipInc. Player
"C:\Programme\SopCast\SopCast.exe" = C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application
"C:\Programme\KONAMI\Pro Evolution Soccer 2008\PES2008.exe" = C:\Programme\KONAMI\Pro Evolution Soccer 2008\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)
"C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6
"C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat" = C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat:*:Enabled:Die Schlacht um Mittelerde™ II
"C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\patchget.dat" = C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\patchget.dat:*:Enabled:patchgrabber
"C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe" = C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe:*:Enabled:ClipInc Server
"C:\Programme\Tobit ClipInc\Player\ClipInc-Player.exe" = C:\Programme\Tobit ClipInc\Player\ClipInc-Player.exe:*:Enabled:ClipInc Player
"C:\Programme\Metin2_Germany\metin2.bin" = C:\Programme\Metin2_Germany\metin2.bin:*:Disabled:metin2
"C:\Programme\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe" = C:\Programme\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe:*:Enabled:mRouterRuntime Module
"C:\Programme\LucasArts\Star Wars JK II Jedi Outcast\GameData\jk2mp.exe" = C:\Programme\LucasArts\Star Wars JK II Jedi Outcast\GameData\jk2mp.exe:*:Disabled:jk2mp
"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Programme\Skype\Plugin Manager\skypePM.exe" = C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)
"C:\Programme\Mozilla Firefox\firefox.exe" = C:\Programme\Mozilla Firefox\firefox.exe:*:Disabled:Firefox -- (Mozilla Corporation)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000407-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{03440014-3975-4267-9F39-1DC4745090B7}" = Microsoft Encarta Enzyklopädie 2003
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20F1FFAF-1BFF-450C-A8C7-03D1BE24B950}" = Microsoft .NET Framework (German)
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = PowerCinema 2.0
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java(TM) 6 Update 29
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0
"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{369B36BE-3D64-4641-9AEA-808D436FE132}" = Microsoft Picture It! Foto 7.0
"{374F03BB-9C09-4DB3-9C9B-C71E63292950}" = Google Earth
"{3A9E0E2F-B0D1-452B-B833-7A7300EA1231}" = Saitek NT Controller Drivers
"{3D1A6B70-3E02-49BC-88B0-916C80274632}" = Informationen über Ihren PC
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{43DCF766-6838-4F9A-8C91-D92DA586DFA7}" = Microsoft Windows-Journal-Viewer
"{43DDC07F-2867-4407-B4FF-28EB7BA6A846}" = Steganos Live Encryption Engine 15
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D4C8490-9048-4E2C-AF1B-3866D6BC9EC8}" = WEB.DE Firefox Paket
"{50974B3A-B8D5-4C7B-9D23-ED0EC9517B45}" = PL-2303 USB-to-Serial
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5B4383F2-37EE-4E97-AD81-F5FF76F286DA}" = OutlookAddInNet3Setup
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6815FCDD-401D-481E-BA88-31B4754C2B46}" = Macromedia Flash Player 8
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6B103F43-069C-11D6-9EA2-0050BAE317E1}" = PowerCinema
"{6C11D561-620B-47DA-A693-4C597F3CDF40}" = EPSON Smart Panel
"{6C5D7191-140A-11D6-B5A0-0050DA208A93}" = ArcSoft PhotoImpression
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{76EFFC7C-17A6-479D-9E47-8E658C1695AE}" = Windows-Sicherungsprogramm
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7CDBE27D-87EC-434E-AFE4-D0116AE876BB}" = Microsoft Works Suite-Add-Ins für Microsoft Word
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A367C28-423C-48E2-8C76-EBA1171F932A}" = Adobe Photoshop Album 2.0
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{911B0407-6000-11D3-8CFE-0050048383C9}" = Microsoft Word 2002
"{98E8A2EF-4EAE-43B8-A172-74842B764777}" = InterVideo WinDVD 4
"{9A3EABC0-CA06-11D4-BF77-00104B130C19}" = EPSON TWAIN 5
"{A2B3D1A5-82CA-4876-AFFA-DB304A3A4FE1}" = InstantCopy
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4D7B764-4140-11D4-88EB-0050DA3579C0}" = Nero - Burning Rom
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A81200000003}" = Adobe Reader 8.1.2 - Deutsch
"{AEDDF5A3-29CE-11D5-A8C2-000102246AAE}" = ubi.com
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2EFE303-A594-11D5-95EB-005004BC1C65}" = EPSON PhotoQuicker3.2
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B69CC1A5-0404-11D6-ABCB-005004C21D30}" = EPSON Copy Utility
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4BEEB8C-B9D2-4CD9-A2AA-1F3A1F57DF21}" = Works Suite-Betriebssystem-Pack
"{C54BD612-9C91-4342-B529-D177CEB8C0C3}" = MindManager X5 Pro
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector Pro
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D379964B-685C-44D5-AE46-C953A9FEEA14}" = EPSON Photo Print
"{EA1CB7AC-E221-4822-A789-0ADB051DC498}" = Medion Flash XL
"{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}" = ScanToWeb
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{EDDDC607-91D9-4758-9F57-265FDCD8A772}" = Microsoft Works 7.0 
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F7F2DC0A-C22E-49AD-AD37-797309A54E7B}" = Microsoft AutoRoute 2002
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"America Online de" = AOL Deutschland
"Anotha ID3 Editor" = Anotha ID3 Editor 1.41
"ATI Display Driver" = ATI Display Driver
"aTube Catcher" = aTube Catcher
"Avira AntiVir Desktop" = Avira Free Antivirus
"AVMWLANCLI" = AVM FRITZ!WLAN
"Backgammon Professional" = Backgammon Professional
"CCleaner" = CCleaner
"ClocX" = ClocX (1.4)
"EAX Unified" = EAX Unified
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Firebird SQL Server D" = Firebird SQL Server - MAGIX Edition (D)
"FLF Services Periodensystem_is1" = FLF Services Periodensystem 1.2
"FMCODEC" = FM Screen Capture Codec (Remove Only)
"FolderBox" = FolderBox 1.2
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.9
"GameSpy Arcade" = GameSpy Arcade
"Graboid Video" = Graboid Video 2.12
"Hardcopy" = Hardcopy
"iColorFolder" = iColorFolder
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"IrfanView" = IrfanView (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.3.1 (Standard)
"Logitech Print Service" = Logitech Print Service
"MediaShow" = Medi@Show
"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework Full v1.0.3705 (1031)" = Microsoft .NET Framework (German) v1.0.3705
"Mozilla Firefox 11.0 (x86 de)" = Mozilla Firefox 11.0 (x86 de)
"MUSICMATCH Jukebox" = MUSICMATCH Jukebox
"Office Mouse" = Office Mouse
"RealPlayer 6.0" = RealPlayer Basic
"Shockwave" = Shockwave
"SiSLan" = SiS 900 PCI Fast Ethernet Adapter Driver
"SSC Service Utility_is1" = SSC Service Utility v3.10
"Switch" = Switch
"Thoosje Sidebar V2.3" = Thoosje Sidebar V2.3
"TomTom HOME" = TomTom HOME 2.7.6.2056
"tulox Freeware-Wörterbuch (Englisch)" = tulox Freeware-Wörterbuch (Englisch)
"tulox Freeware-Wörterbuch (Französisch)" = tulox Freeware-Wörterbuch (Französisch)
"Uninstall_is1" = Uninstall 1.0.0.1
"VideoLive Mail" = VideoLive Mail 4.0
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VLC media player 1.0.1
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WEB.DE Firefox Browser Update" = WEB.DE Firefox Browser Update
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"X10Hardware" = X10 Hardware(TM)
"Xvid_is1" = Xvid 1.1.3 final uninstall
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 18.04.2012 15:23:31 | Computer Name = * | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{d67b0b7b-c987-11d7-95a9-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 18.04.2012 15:23:31 | Computer Name = * | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{5cf3e6b2-090e-11da-8fbb-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 18.04.2012 15:23:31 | Computer Name = * | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{92cfe064-d153-11de-97b2-00038a000015},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 18.04.2012 15:23:31 | Computer Name = * | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{92cfe067-d153-11de-97b2-00038a000015},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 18.04.2012 15:23:53 | Computer Name = * | Source = VSS | ID = 5013
Description = Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager"
 aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070015" (konvertiert
 in 0x800423f3) fehlgeschlagen.
 
Error - 18.04.2012 17:12:16 | Computer Name = * | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{d67b0b7b-c987-11d7-95a9-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 18.04.2012 17:12:16 | Computer Name = * | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{5cf3e6b2-090e-11da-8fbb-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 18.04.2012 17:12:16 | Computer Name = * | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{92cfe064-d153-11de-97b2-00038a000015},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 18.04.2012 17:12:16 | Computer Name = * | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{92cfe067-d153-11de-97b2-00038a000015},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 18.04.2012 17:12:39 | Computer Name = * | Source = VSS | ID = 5013
Description = Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager"
 aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x80070015" (konvertiert
 in 0x800423f3) fehlgeschlagen.
 
[ System Events ]
Error - 18.04.2012 19:22:16 | Computer Name = * | Source = Service Control Manager | ID = 7023
Description = Der Dienst "SNPSTD3" wurde mit folgendem Fehler beendet:   %%126
 
Error - 18.04.2012 19:22:16 | Computer Name = * | Source = Service Control Manager | ID = 7023
Description = Der Dienst "W810mdm" wurde mit folgendem Fehler beendet:   %%126
 
Error - 18.04.2012 19:22:16 | Computer Name = * | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Belgium_id_card_service" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 18.04.2012 19:22:16 | Computer Name = * | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Adsservice" wurde mit folgendem Fehler beendet:   %%126
 
Error - 18.04.2012 19:22:16 | Computer Name = * | Source = Service Control Manager | ID = 7023
Description = Der Dienst "T6963C" wurde mit folgendem Fehler beendet:   %%126
 
Error - 18.04.2012 19:22:16 | Computer Name = * | Source = Service Control Manager | ID = 7023
Description = Der Dienst "BcmSqlStartupSvc" wurde mit folgendem Fehler beendet: 
  %%126
 
Error - 18.04.2012 19:26:31 | Computer Name = * | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error - 18.04.2012 19:27:18 | Computer Name = * | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   avipbb  avkmgr  Fips  intelppm  SLEE_15_DRIVER  ssmdrv
 
Error - 18.04.2012 19:28:05 | Computer Name = * | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {A1F4E726-8CF1-11D1-BF92-0060081ED811}
 
Error - 18.04.2012 19:28:08 | Computer Name = * | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {A1F4E726-8CF1-11D1-BF92-0060081ED811}
 
 
< End of report >

--- --- ---

OTL.Txt - EditorOTL Logfile:

Code:

ATTFilter

OTL logfile created on: 19.04.2012 01:33:10 - Run 1
OTL by OldTimer - Version 3.2.40.0     Folder = C:\Dokumente und Einstellungen\Administrator\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale:  | Country:  | Language:  | Date Format: 
 
2,00 Gb Total Physical Memory | 1,74 Gb Available Physical Memory | 87,09% Memory free
2,60 Gb Paging File | 2,49 Gb Available in Paging File | 95,80% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 55,89 Gb Total Space | 22,04 Gb Free Space | 39,44% Space Free | Partition Type: NTFS
Drive D: | 55,90 Gb Total Space | 40,58 Gb Free Space | 72,59% Space Free | Partition Type: NTFS
Drive E: | 37,25 Gb Total Space | 30,23 Gb Free Space | 81,16% Space Free | Partition Type: FAT32
 
Computer Name: * | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (webrootspysweeperservice) -- %systemroot%\system32\RR2Ctrl.dll File not found
SRV - (Slntamr) -- %systemroot%\system32\jaguar.dll File not found
SRV - (RTHDMIAzAudService) -- %systemroot%\system32\emclisrv.dll File not found
SRV - (Pcatip) -- %systemroot%\system32\com4qlb.dll File not found
SRV - (osanbm) -- %systemroot%\system32\cpqarray.dll File not found
SRV - (MTDVC2_ENUM) -- %systemroot%\system32\samfilt.dll File not found
SRV - (MRV6X32P) -- %systemroot%\system32\nvsvc.dll File not found
SRV - (mcafeeframework) -- %systemroot%\system32\acs.dll File not found
SRV - (iaimfp4) -- %systemroot%\system32\scdemu.dll File not found
SRV - (hpt3xx) -- %systemroot%\system32\mup.dll File not found
SRV - (FTDIBUS) -- %systemroot%\system32\incdrec.dll File not found
SRV - (CVPND) -- %systemroot%\system32\lxcc_device.dll File not found
SRV - (awservice) -- %systemroot%\system32\alertmanager.dll File not found
SRV - (AppMgmt) -- %SystemRoot%\System32\appmgmts.dll File not found
SRV - (AMService) -- C:\WINDOWS\TEMP\abnbvn\setup.exe run File not found
SRV - (ABVPN2K) -- %systemroot%\system32\bt3cser.dll File not found
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (FsUsbExService) -- C:\WINDOWS\system32\FsUsbExService.Exe (Teruten)
SRV - (TomTomHOMEService) -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
SRV - (LBTServ) -- C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (AdminSVCff) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox\adminsvcff.exe (hablamax)
SRV - (FirebirdServerMAGIXInstance) -- D:\Common\Database\bin\fbserver.exe (MAGIX®)
SRV - (AVM WLAN Connection Service) -- C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin)
SRV - (WANMiniportService) WAN Miniport (ATW) -- C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)
SRV - (EPSONStatusAgent2) -- C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe (SEIKO EPSON CORPORATION)
SRV - (EpsonBidirectionalService) -- C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\eEBSvc.exe ()
SRV - (x10nets) -- C:\Programme\Common Files\X10\Common\X10nets.exe (X10)
SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (WDICA) --  File not found
DRV - (USBModem) -- system32\DRIVERS\lgusbmodem.sys File not found
DRV - (UsbDiag) -- system32\DRIVERS\lgusbdiag.sys File not found
DRV - (usbbus) -- system32\DRIVERS\lgusbbus.sys File not found
DRV - (RT2500) -- System32\DRIVERS\RT2500.sys File not found
DRV - (QCMerced) -- System32\DRIVERS\LVCM.sys File not found
DRV - (PDRFRAME) --  File not found
DRV - (PDRELI) --  File not found
DRV - (PDFRAME) --  File not found
DRV - (PDCOMP) --  File not found
DRV - (PCIDump) --  File not found
DRV - (LVUSBSta) -- system32\drivers\lvusbsta.sys File not found
DRV - (lbrtfdc) --  File not found
DRV - (i2omgmt) --  File not found
DRV - (Changer) --  File not found
DRV - (bDMusicb) -- C:\DOKUME~1\FABIAN~1\LOKALE~1\Temp\bDMusicb.sys File not found
DRV - (az1fsg15) --  File not found
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avkmgr) -- C:\WINDOWS\system32\drivers\avkmgr.sys (Avira GmbH)
DRV - (dgderdrv) -- C:\WINDOWS\system32\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV - (ssadmdm) -- C:\WINDOWS\system32\drivers\ssadmdm.sys (MCCI Corporation)
DRV - (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) -- C:\WINDOWS\system32\drivers\ssadbus.sys (MCCI Corporation)
DRV - (ssadmdfl) SAMSUNG Android USB Modem (Filter) -- C:\WINDOWS\system32\drivers\ssadmdfl.sys (MCCI Corporation)
DRV - (FsUsbExDisk) -- C:\WINDOWS\system32\FsUsbExDisk.Sys ()
DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys ()
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (giveio) -- C:\WINDOWS\system32\giveio.sys ()
DRV - (gameenum) -- C:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (LMouFilt) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042Kbd) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech, Inc.)
DRV - (SLEE_15_DRIVER) -- C:\WINDOWS\system32\drivers\sleen15.sys (Softwareentwicklung Remus - ArchiCrypt )
DRV - (atksgt) -- C:\WINDOWS\system32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\WINDOWS\system32\drivers\lirsgt.sys ()
DRV - (FWLANUSB) -- C:\WINDOWS\system32\drivers\fwlanusb.sys (AVM GmbH)
DRV - (w800obex) -- C:\WINDOWS\system32\drivers\w800obex.sys (MCCI)
DRV - (w800mgmt) -- C:\WINDOWS\system32\drivers\w800mgmt.sys (MCCI)
DRV - (w800mdm) -- C:\WINDOWS\system32\drivers\w800mdm.sys (MCCI)
DRV - (w800mdfl) -- C:\WINDOWS\system32\drivers\w800mdfl.sys (MCCI)
DRV - (w800bus) Sony Ericsson W800 driver (WDM) -- C:\WINDOWS\system32\drivers\w800bus.sys (MCCI)
DRV - (MDC8021X) AEGIS Protocol (IEEE 802.1x) -- C:\WINDOWS\system32\drivers\mdc8021x.sys (Meetinghouse Data Communications)
DRV - (DSIR620) -- C:\WINDOWS\system32\drivers\DSIR620.sys ()
DRV - (SSHDRV61) -- C:\WINDOWS\system32\drivers\SSHDRV61.sys ()
DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (Ser2pl) -- C:\WINDOWS\system32\drivers\ser2pl.sys (Prolific Technology Inc.)
DRV - (MxlW2k) -- C:\WINDOWS\System32\drivers\MxlW2k.sys (MusicMatch, Inc.)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (PhTVTune) -- C:\WINDOWS\system32\drivers\PhTVTune.sys (Philips Semiconductors)
DRV - (Cap7134) MEDION (7134) -- C:\WINDOWS\system32\drivers\Cap7134.sys (Philips Semiconductors)
DRV - (SISAGP) -- C:\WINDOWS\system32\drivers\SISAGPX.SYS (Silicon Integrated Systems Corporation)
DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\system32\drivers\wanatw4.sys (America Online, Inc.)
DRV - (ASPI32) -- C:\WINDOWS\system32\drivers\aspi32.sys (Adaptec)
DRV - (ASPI) -- C:\WINDOWS\system32\drivers\aspi32.sys (Adaptec)
DRV - (SISNIC) -- C:\WINDOWS\system32\drivers\sisnic.sys (SiS Corporation)
DRV - (Intels51) -- C:\WINDOWS\system32\drivers\ctxs51.sys (Intel Corporation)
DRV - (ASAPIW2K) -- C:\WINDOWS\system32\drivers\asapiW2k.sys (VOB Computersysteme GmbH)
DRV - (ATWPKT) -- C:\WINDOWS\system32\drivers\atwpkt.sys (America Online)
DRV - (X10UIF) -- C:\WINDOWS\system32\drivers\x10uif.sys (X10 Wireless Technology, Inc.)
DRV - (HIDSwvd) -- C:\WINDOWS\system32\drivers\HIDSwvd.sys (Microsoft Corporation)
DRV - (ms_mpu401) -- C:\WINDOWS\system32\drivers\msmpu401.sys (Microsoft Corporation)
DRV - (Rasirda) WAN-Miniport (IrDA) -- C:\WINDOWS\system32\drivers\rasirda.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 
 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Programme\DivX\DivX Content Uploader\npUpload.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/npracplug;version=1.0.0.0: C:\Programme\Real\RealArcade\Plugins\Mozilla\npracplug.dll (RealNetworks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Programme\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{184AA5E6-741D-464a-820E-94B3ABC2F3B4}: C:\WINDOWS\system32\5025 [2011.09.11 19:48:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.03.20 15:00:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.12.08 01:01:34 | 000,000,000 | ---D | M]
 
[2012.02.10 18:11:29 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.03.20 15:00:29 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011.11.21 16:54:54 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2005.04.27 22:10:49 | 000,102,400 | ---- | M] (RealNetworks) -- C:\Programme\mozilla firefox\plugins\npracplug.dll
[2003.06.27 03:21:12 | 000,196,608 | ---- | M] () -- C:\Programme\mozilla firefox\plugins\npViewpoint.dll
[2012.01.12 20:23:15 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.01.12 20:23:15 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012.01.12 20:23:15 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012.01.12 20:23:15 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.01.12 20:23:15 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.01.12 20:23:15 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
Hosts file not found
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Programme\ICQToolbar\toolbaru.dll (IE Toolbar)
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {184AA5E6-741D-464a-820E-94B3ABC2F3B4} - No CLSID value found.
O2 - BHO: (no name) - {A7F3CAAA-A526-44AA-9D1C-10DDD1EEBADD} - No CLSID value found.
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (no name) - {BBE59AF5-EE22-4A3A-AB26-3F774D1B4216} - C:\Programme\FolderBox\FolderBox.dll ()
O2 - BHO: (no name) - {C689C99E-3A8C-4c87-A79C-C80DC9C81632} - No CLSID value found.
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min File not found
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Programme\Bonjour\mdnsNSP.dll File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} hxxp://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37667.1728819444 (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Java Plug-in 1.5.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27F1B603-B389-4B5C-96F4-74C12600AAA6}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - (c:\programme\gemeinsame dateien\logitech\bluetooth\LBTWlgn.dll) - c:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2003.02.14 11:30:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.04.19 01:29:16 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
[2012.04.19 01:28:10 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\UserData
[2012.04.19 01:27:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Macromedia
[2012.04.19 01:26:30 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten
[2012.04.19 01:26:29 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator\Recent
[2012.04.19 01:26:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop
[2012.04.19 01:26:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
[2012.04.19 00:56:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight
[2012.04.19 00:56:01 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Silverlight
[2012.04.18 21:11:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2012.04.18 20:55:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2012.04.18 20:55:09 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2012.04.18 20:55:02 | 000,137,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2012.04.18 20:55:02 | 000,074,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2012.04.18 20:55:02 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2012.04.18 20:55:00 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2012.04.18 20:55:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2012.04.18 20:47:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2012.04.18 19:58:43 | 001,372,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll
[2012.04.18 19:58:43 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll
[2012.04.18 19:58:40 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll
[2012.04.18 19:58:40 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll
[2012.04.18 19:58:40 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll
[2012.04.18 19:58:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2012.04.18 19:58:39 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll
[2012.04.18 19:58:39 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll
[2012.04.18 19:58:39 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll
[2012.04.18 19:58:39 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll
[2012.04.18 19:58:39 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll
[2012.04.18 19:58:39 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll
[2012.04.18 19:58:39 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll
[2012.04.18 19:58:39 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll
[2012.04.18 19:58:39 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll
[2012.04.18 19:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll
[2012.04.18 19:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll
[2012.04.18 19:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll
[2012.04.18 19:58:37 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll
[2012.04.18 19:58:37 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll
[2012.04.18 19:58:37 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll
[2012.04.18 19:58:37 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll
[2012.04.18 19:58:37 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll
[2012.04.18 19:58:37 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll
[2012.04.18 19:58:37 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe
[2012.04.18 19:58:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll
[2012.04.18 19:58:36 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll
[2012.04.18 19:58:36 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll
[2012.04.18 19:58:36 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe
[2012.04.18 19:58:36 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll
[2012.04.18 19:58:36 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll
[2012.04.18 19:58:36 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll
[2012.04.18 19:58:35 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe
[2012.04.18 19:58:34 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll
[2012.04.18 19:58:34 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2012.04.18 19:58:34 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verclsid.exe
[2012.04.18 19:58:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-de
[2012.04.18 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2012.04.18 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de
[2012.04.18 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2012.04.18 19:53:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2012.04.15 17:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2012.04.15 17:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LOGFILES
[2012.04.15 17:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\INFECTED
[2012.04.15 17:59:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\REPORTS
[2012.04.12 21:52:08 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen
[2012.04.12 21:52:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü
[2012.04.12 21:52:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2012.04.12 21:51:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\InterTrust
[2012.04.12 21:51:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Identities
[2012.04.12 21:51:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Help
[2012.04.12 21:51:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Adobe
[2012.04.12 21:51:45 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft
[2012.04.12 21:51:45 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies
[2012.04.12 21:51:45 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten
[2012.04.12 21:51:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\MSN6
[2012.04.12 21:51:41 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen
[2012.04.12 21:51:41 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Default User
[2012.03.23 18:18:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Sun
[2012.03.20 15:32:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Macromedia
[2012.03.20 15:32:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Adobe
[2012.03.20 15:09:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Adobe
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.04.19 01:29:20 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
[2012.04.19 01:25:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.04.19 01:22:07 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.04.19 01:11:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.04.19 00:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2012.04.19 00:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2012.04.18 23:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At48.job
[2012.04.18 23:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At47.job
[2012.04.18 22:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At46.job
[2012.04.18 22:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At45.job
[2012.04.18 21:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At44.job
[2012.04.18 21:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At43.job
[2012.04.18 20:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At42.job
[2012.04.18 20:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At41.job
[2012.04.18 20:55:30 | 000,001,675 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012.04.18 20:50:08 | 000,443,544 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.04.18 20:50:08 | 000,427,852 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.04.18 20:50:08 | 000,078,306 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.04.18 20:50:08 | 000,065,810 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.04.18 20:48:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.04.18 20:48:08 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2012.04.18 20:47:05 | 000,267,800 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.04.18 19:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At40.job
[2012.04.18 19:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At39.job
[2012.04.18 19:53:27 | 000,251,712 | RHS- | M] () -- C:\ntldr
[2012.04.17 17:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At36.job
[2012.04.17 17:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At35.job
[2012.04.15 16:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At34.job
[2012.04.15 16:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At33.job
[2012.04.15 15:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At32.job
[2012.04.15 15:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At31.job
[2012.04.15 15:38:56 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.04.15 15:17:17 | 000,000,000 | -HS- | M] () -- C:\WINDOWS\System32\dds_trash_log.cmd
[2012.04.14 23:42:25 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2012.04.12 18:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At38.job
[2012.04.12 18:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At37.job
[2012.04.12 14:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At30.job
[2012.04.12 14:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At29.job
[2012.04.12 13:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At28.job
[2012.04.12 13:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At27.job
[2012.04.12 12:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At26.job
[2012.04.12 12:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At25.job
[2012.04.10 11:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
[2012.04.10 11:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2012.04.10 03:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2012.04.10 03:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2012.04.10 02:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2012.04.10 02:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2012.04.10 01:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2012.04.10 01:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.04.18 20:55:30 | 000,001,675 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012.03.17 04:00:59 | 000,000,112 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\wGaWyo.dat
[2012.03.17 03:42:47 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011.02.01 23:57:24 | 000,462,488 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2011.02.01 21:41:04 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011.02.01 21:41:04 | 000,036,640 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011.01.29 18:00:24 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2011.01.29 18:00:22 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011.01.29 18:00:22 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011.01.29 18:00:22 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011.01.29 18:00:22 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2010.09.03 23:19:04 | 000,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010.08.02 17:45:18 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
 
========== LOP Check ==========
 
[2003.02.14 12:27:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\InterTrust
[2009.11.14 21:28:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2009.11.14 21:20:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Pro
[2009.07.15 18:19:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
[2012.04.15 17:59:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\INFECTED
[2012.04.15 17:59:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LOGFILES
[2007.03.24 15:28:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2007.12.12 22:27:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NCH Swift Sound
[2006.04.04 15:57:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NFS Underground
[2012.04.15 17:59:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\REPORTS
[2005.03.07 18:09:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RTE
[2011.02.01 21:36:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2008.08.16 23:57:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony
[2012.04.15 18:01:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2011.01.15 15:16:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TomTom
[2007.03.02 19:43:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox
[2010.12.21 01:27:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.04.19 00:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2012.04.19 00:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2012.04.10 11:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2012.04.10 11:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At24.job
[2012.04.12 12:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job
[2012.04.12 12:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job
[2012.04.12 13:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job
[2012.04.12 13:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job
[2012.04.12 14:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job
[2012.04.10 01:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2012.04.12 14:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job
[2012.04.15 15:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job
[2012.04.15 15:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job
[2012.04.15 16:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job
[2012.04.15 16:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job
[2012.04.17 17:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job
[2012.04.17 17:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job
[2012.04.12 18:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job
[2012.04.12 18:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job
[2012.04.18 19:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job
[2012.04.10 01:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2012.04.18 19:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job
[2012.04.18 20:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job
[2012.04.18 20:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job
[2012.04.18 21:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job
[2012.04.18 21:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job
[2012.04.18 22:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job
[2012.04.18 22:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job
[2012.04.18 23:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job
[2012.04.18 23:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job
[2012.04.10 02:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2012.04.10 02:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2012.04.10 03:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2012.04.10 03:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
 
========== Purity Check ==========
 
 
 
========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\WINDOWS\$NtUninstallKB59195$] -> Error: Cannot create file handle -> Unknown point type

< End of report >

--- --- ---

Schon mal Danke fuer eure Bemuehungen.

Seit dieser Meldung habe ich keine Dateien von dem PC entfernt oder sonstige Anstalten gemacht das Problem selbst zu beheben. Ich hole mir da lieber ersteinmal eine Expertenmeinung heran.
Und der abgesicherte Modus mit Netzwerk, in dem ich mich auch gerade befinde, funktioniert reibungslos.

markusg · 19.04.2012, 10:19

Mit einem sauberen 2. Rechner eine OTLPE-CD erstellen und den infizierten Rechner dann von dieser CD booten:

Falls Du kein Brennprogramm installiert hast, lade dir bitte ISOBurner herunter. Das Programm wird Dir erlauben, OTLPE auf eine CD zu brennen und sie bootfähig zu machen. Du brauchst das Tool nur zu installieren, der Rest läuft automatisch => Wie brenne ich eine ISO Datei auf CD/DVD.

Lade

OTLPENet.exe von OldTimer herunter und speichere sie auf Deinem Desktop. Anmerkung: Die Datei ist ca. 120 MB groß und es wird bei langsamer Internet-Verbindung ein wenig dauern, bis Du sie runtergeladen hast.

Wenn der Download fertig ist, mache einen Doppelklick auf die Datei und beantworte die Frage "Do you want to burn the CD?" mit Yes.
Lege eine leere CD in Deinen Brenner.
ImgBurn (oder Dein Brennprogramm) wird das Archiv extrahieren und OTLPE Network auf die CD brennen.
Wenn der Brenn-Vorgang abgeschlossen ist, wirst Du eine Dialogbox sehen => "Operation successfully completed".
Du kannst nun die Fenster des Brennprogramms schließen.

Nun boote von der OTLPE CD. Hinweis: Wie boote ich von CD

Bebilderte Anleitung: OTLpe-Scan

Dein System sollte nach einigen Minuten den REATOGO-X-PE Desktop anzeigen.
Mache einen Doppelklick auf das OTLPE Icon.
Hinweis: Damit OTLPE auch das richtige installierte Windows scant, musst du den Windows-Ordner des auf der Platte installierten Windows auswählen, einfach nur C: auswählen gibt einen Fehler!
Wenn Du gefragt wirst "Do you wish to load the remote registry", dann wähle Yes.
Wenn Du gefragt wirst "Do you wish to load remote user profile(s) for scanning", dann wähle Yes.
Vergewissere Dich, dass die Box "Automatically Load All Remaining Users" gewählt ist und drücke OK.
OTLpe sollte nun starten.
Drücke Run Scan, um den Scan zu starten.
Wenn der Scan fertig ist, werden die Dateien C:\OTL.Txt und C:\Extras.Txt erstellt
Kopiere diese Datei auf Deinen USB-Stick, wenn Du keine Internetverbindung auf diesem System hast.
Bitte poste den Inhalt von C:\OTL.txt und Extras.txt.

Hilfesuche · 19.04.2012, 14:31

Vielen Dank fuer die rasche Hilfe!

Habe alles so weit erledigt, doch ich bekomme da nur eine Datei und zwar folgende:

OTL.Txt-NotepadOTL Logfile:

Code:

ATTFilter

OTL logfile created on: 4/19/2012 4:15:50 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 6.0.2900.5512)
Locale:  | Country:  | Language:  | Date Format: 
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 55.89 Gb Total Space | 22.03 Gb Free Space | 39.41% Space Free | Partition Type: NTFS
Drive D: | 55.90 Gb Total Space | 40.58 Gb Free Space | 72.59% Space Free | Partition Type: NTFS
Drive E: | 37.25 Gb Total Space | 30.23 Gb Free Space | 81.16% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Auto] --  -- (webrootspysweeperservice)
SRV - File not found [Auto] --  -- (Slntamr)
SRV - File not found [Auto] --  -- (RTHDMIAzAudService)
SRV - File not found [Auto] --  -- (Pcatip)
SRV - File not found [Auto] --  -- (osanbm)
SRV - File not found [Auto] --  -- (MTDVC2_ENUM)
SRV - File not found [Auto] --  -- (MRV6X32P)
SRV - File not found [Auto] --  -- (mcafeeframework)
SRV - File not found [Auto] --  -- (iaimfp4)
SRV - File not found [Auto] --  -- (hpt3xx)
SRV - File not found [Auto] --  -- (FTDIBUS)
SRV - File not found [Auto] --  -- (CVPND)
SRV - File not found [Auto] --  -- (awservice)
SRV - File not found [On_Demand] --  -- (AppMgmt)
SRV - File not found [Auto] --  -- (AMService)
SRV - File not found [Auto] --  -- (ABVPN2K)
SRV - [2012/01/31 02:56:05 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012/01/31 02:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/10/15 19:40:40 | 000,037,664 | ---- | M] (Apple Inc.) [Disabled] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/09/06 03:11:32 | 000,217,088 | ---- | M] (Teruten) [Disabled] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010/08/24 05:38:18 | 000,092,008 | ---- | M] (TomTom) [Disabled] -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2007/11/15 05:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2006/10/25 05:43:36 | 000,180,224 | ---- | M] (hablamax) [Auto] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox\adminsvcff.exe -- (AdminSVCff)
SRV - [2005/11/17 10:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand] -- D:\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2005/10/17 21:04:00 | 000,379,812 | R--- | M] (AVM Berlin) [Auto] -- C:\Programme\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service)
SRV - [2002/10/31 04:35:58 | 000,065,536 | ---- | M] (America Online, Inc.) [Auto] -- C:\WINDOWS\wanmpsvc.exe -- (WANMiniportService) WAN Miniport (ATW)
SRV - [2002/07/16 21:03:00 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) [Disabled] -- C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe -- (EPSONStatusAgent2)
SRV - [2002/01/29 08:33:14 | 000,077,824 | ---- | M] () [Disabled] -- C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\eEBSvc.exe -- (EpsonBidirectionalService)
SRV - [2001/11/12 08:31:48 | 000,020,480 | ---- | M] (X10) [On_Demand] -- C:\Programme\Common Files\X10\Common\X10nets.exe -- (x10nets)
SRV - [2001/02/23 05:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (USBModem)
DRV - File not found [Kernel | On_Demand] --  -- (UsbDiag)
DRV - File not found [Kernel | On_Demand] --  -- (usbbus)
DRV - File not found [Kernel | On_Demand] --  -- (RT2500)
DRV - File not found [Kernel | On_Demand] --  -- (QCMerced)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand] --  -- (LVUSBSta)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - File not found [Kernel | On_Demand] --  -- (bDMusicb)
DRV - [2012/01/31 02:56:33 | 000,137,416 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012/01/31 02:56:33 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011/09/16 10:08:07 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011/01/29 12:00:20 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2011/01/03 04:38:36 | 000,136,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011/01/03 04:38:36 | 000,121,192 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2011/01/03 04:38:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2010/09/06 03:11:32 | 000,036,640 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/11/14 15:15:15 | 000,722,416 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2009/10/08 10:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/07/17 13:38:49 | 000,005,248 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\giveio.sys -- (giveio)
DRV - [2008/04/13 18:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2007/09/20 22:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007/09/20 22:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007/09/20 22:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007/02/21 08:33:54 | 000,080,232 | ---- | M] (Softwareentwicklung Remus - ArchiCrypt ) [Driver] [Kernel | System] -- C:\WINDOWS\system32\drivers\sleen15.sys -- (SLEE_15_DRIVER)
DRV - [2006/12/05 10:16:03 | 000,271,360 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2006/12/05 10:16:02 | 000,018,048 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2005/10/17 21:04:00 | 000,264,704 | R--- | M] (AVM GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\fwlanusb.sys -- (FWLANUSB)
DRV - [2005/05/24 10:01:16 | 000,077,040 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800obex.sys -- (w800obex)
DRV - [2005/05/24 10:00:56 | 000,079,216 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800mgmt.sys -- (w800mgmt)
DRV - [2005/05/24 10:00:46 | 000,087,424 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800mdm.sys -- (w800mdm)
DRV - [2005/05/24 10:00:44 | 000,006,096 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800mdfl.sys -- (w800mdfl)
DRV - [2005/05/24 10:00:37 | 000,052,384 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800bus.sys -- (w800bus) Sony Ericsson W800 driver (WDM)
DRV - [2004/12/25 05:07:19 | 000,015,781 | ---- | M] (Meetinghouse Data Communications) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\mdc8021x.sys -- (MDC8021X) AEGIS Protocol (IEEE 802.1x)
DRV - [2004/12/19 07:03:52 | 000,014,336 | R--- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\DSIR620.sys -- (DSIR620)
DRV - [2004/01/17 15:01:10 | 000,036,864 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\SSHDRV61.sys -- (SSHDRV61)
DRV - [2003/09/25 22:53:00 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2003/07/16 09:27:40 | 000,043,264 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2003/02/14 14:47:03 | 000,028,164 | ---- | M] (MusicMatch, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\MxlW2k.sys -- (MxlW2k)
DRV - [2003/01/28 05:49:48 | 000,697,084 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2003/01/19 12:58:28 | 000,546,688 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2002/11/04 10:32:00 | 000,027,520 | ---- | M] (Philips Semiconductors) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\PhTVTune.sys -- (PhTVTune)
DRV - [2002/11/04 10:29:42 | 000,422,976 | ---- | M] (Philips Semiconductors) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Cap7134.sys -- (Cap7134) MEDION (7134)
DRV - [2002/10/31 06:58:42 | 000,030,848 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\SISAGPX.SYS -- (SISAGP)
DRV - [2002/10/31 04:33:04 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - [2002/07/17 03:05:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aspi32.sys -- (ASPI32)
DRV - [2002/07/17 03:05:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\aspi32.sys -- (ASPI)
DRV - [2002/07/10 11:39:34 | 000,032,256 | ---- | M] (SiS Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)
DRV - [2002/07/01 10:10:40 | 000,638,366 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ctxs51.sys -- (Intels51)
DRV - [2002/04/17 15:27:02 | 000,011,264 | ---- | M] (VOB Computersysteme GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\asapiW2k.sys -- (ASAPIW2K)
DRV - [2002/03/20 12:38:20 | 000,019,140 | ---- | M] (America Online) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\atwpkt.sys -- (ATWPKT)
DRV - [2001/11/14 13:07:42 | 000,010,761 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\x10uif.sys -- (X10UIF)
DRV - [2001/08/17 09:02:50 | 000,002,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HIDSwvd.sys -- (HIDSwvd)
DRV - [2001/08/17 09:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
DRV - [2001/08/17 07:51:32 | 000,019,584 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rasirda.sys -- (Rasirda) WAN-Miniport (IrDA)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Upgrade to Google Chrome
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = Welcome to ALDI
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Fabian_Stecher_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\Fabian_Stecher_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = ICQ.com Suche
IE - HKU\Fabian_Stecher_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome
IE - HKU\Fabian_Stecher_ON_C\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKU\Fabian_Stecher_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\Fabian_Stecher_ON_C\..\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Programme\AskSearch\bin\DefaultSearch.dll ()
IE - HKU\Fabian_Stecher_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKU\Fabian_Stecher_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Fabian_Stecher_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost;*.local
 
IE - HKU\LocalService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = Welcome to ALDI
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\NetworkService_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = Welcome to ALDI
IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Programme\DivX\DivX Content Uploader\npUpload.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/npracplug;version=1.0.0.0: C:\Programme\Real\RealArcade\Plugins\Mozilla\npracplug.dll (RealNetworks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Programme\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{184AA5E6-741D-464a-820E-94B3ABC2F3B4}: C:\WINDOWS\system32\5025 [2011/09/11 13:48:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/03/20 09:00:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011/12/07 19:01:34 | 000,000,000 | ---D | M]
 
[2012/02/10 12:11:29 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012/03/20 09:00:29 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011/11/21 10:54:54 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2005/04/27 16:10:49 | 000,102,400 | ---- | M] (RealNetworks) -- C:\Programme\mozilla firefox\plugins\npracplug.dll
[2003/06/26 21:21:12 | 000,196,608 | ---- | M] () -- C:\Programme\mozilla firefox\plugins\npViewpoint.dll
[2012/01/12 14:23:15 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/01/12 14:23:15 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/01/12 14:23:15 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/01/12 14:23:15 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/01/12 14:23:15 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/01/12 14:23:15 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
Hosts file not found
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Programme\ICQToolbar\toolbaru.dll (IE Toolbar)
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {184AA5E6-741D-464a-820E-94B3ABC2F3B4} - No CLSID value found.
O2 - BHO: (no name) - {A7F3CAAA-A526-44AA-9D1C-10DDD1EEBADD} - No CLSID value found.
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: () - {BBE59AF5-EE22-4A3A-AB26-3F774D1B4216} - C:\Programme\FolderBox\FolderBox.dll ()
O2 - BHO: (no name) - {C689C99E-3A8C-4c87-A79C-C80DC9C81632} - No CLSID value found.
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O3 - HKU\Fabian_Stecher_ON_C\..\Toolbar\WebBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [AVGCtrl]  File not found
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKU\Fabian_Stecher_ON_C..\Run: [EPSON Stylus CX3200] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\Fabian_Stecher_ON_C..\Run: [SkypePM] C:\Dokumente und Einstellungen\Fabian Stecher\Lokale Einstellungen\Anwendungsdaten\Skype\SkypePM.exe (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\Fabian Stecher\Startmenü\Programme\Autostart\Hardcopy.LNK = C:\Programme\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\Fabian_Stecher_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 -  File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} hxxp://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37667.1728819444 (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Java Plug-in 1.5.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\programme\gemeinsame dateien\logitech\bluetooth\LBTWlgn.dll - C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2003/02/14 05:30:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\K\Shell - "" = AutoRun
O33 - MountPoints2\K\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\reatogoMenu.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608555} - Internet Explorer Classes for Java
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 9.0
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 9.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offlinebrowsingpaket
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {429D8DD3-05E0-4F56-B6D6-AC0730567C02} - Euro Update Tool
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer-Hilfe
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {588A559B-BBC9-4148-A2C0-96A33D1DBC26} - Microsoft .NET Framework 1.0 Hotfix (KB928367)
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsererweiterungen
ActiveX: {65289DE3-4C1A-11D6-B6E1-00B0D049139F} - Microsoft .NET Framework 1.0 Service Pack 2 (KB867461)
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Zugang zu MSN Site
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {78705f0d-e8db-4b2d-8193-982bdda15ecd} - .NET Framework
ActiveX: {8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
ActiveX: {8b15971b-5355-4c82-8c07-7e181ea07608} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML-Datenbindung
ActiveX: {94de52c8-2d59-4f1b-883e-79663d2d9a8c} - Fax Provider
ActiveX: {9BFBE94F-2FAF-11D6-8712-0002B3281F8B} - Microsoft .NET Framework 1.0 Service Pack 1 (KB867461)
ActiveX: {abcdf74f-9a64-4e6e-b8eb-6e5a41de6550} - 
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C34F4917-ED43-439f-9023-97B0024A2B3B} - Q810847
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer-Hauptschriftarten
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {D82A39FB-1784-4608-BFE8-1ACBFF3079C1} - Microsoft .NET Framework 1.0 Service Pack 3 (KB867461)
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML-Hilfe
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F279058C-50B2-4BE4-60C9-369CACF06821} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
 
NetSvcs: 6to4 -  File not found
NetSvcs: AppMgmt -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: awservice -  File not found
NetSvcs: FTDIBUS -  File not found
NetSvcs: MRV6X32P -  File not found
NetSvcs: Slntamr -  File not found
NetSvcs: CVPND -  File not found
NetSvcs: hpt3xx -  File not found
NetSvcs: osanbm -  File not found
NetSvcs: ABVPN2K -  File not found
NetSvcs: webrootspysweeperservice -  File not found
NetSvcs: iaimfp4 -  File not found
NetSvcs: RTHDMIAzAudService -  File not found
NetSvcs: mcafeeframework -  File not found
NetSvcs: Pcatip -  File not found
NetSvcs: MTDVC2_ENUM -  File not found
NetSvcs: WmdmPmSp -  File not found
 
MsConfig - Services: "TomTomHOMEService"
MsConfig - Services: "MDM"
MsConfig - Services: "FsUsbExService"
MsConfig - Services: "EpsonBidirectionalService"
MsConfig - Services: "Apple Mobile Device"
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^InterVideo WinCinema Manager.lnk - C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe - ()
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe - (Logitech Inc.)
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Logitech SetPoint.lnk - C:\Programme\Logitech\SetPoint\SetPoint.exe - (Logitech, Inc.)
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Microsoft Office.lnk - C:\Programme\Microsoft Office\Office\OSA9.EXE - (Microsoft Corporation)
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^MindManager PDF Writer.lnk - C:\Programme\Mindjet\MindManager 5\sys\PDF\ENU\W2K\PDFSaver.exe - (Tracker Software Products)
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^Fabian Stecher^Startmenü^Programme^Autostart^OpenOffice.org 2.2.lnk -  - File not found
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^Fabian Stecher^Startmenü^Programme^Autostart^OpenOffice.org 3.1.lnk - C:\Programme\OpenOffice.org 3\program\quickstart.exe - ()
MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: AdobeUpdater - hkey= - key= - C:\Programme\Gemeinsame Dateien\Adobe\Updater5\AdobeUpdater.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: ATIPTA - hkey= - key= - C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe (ATI Technologies, Inc.)
MsConfig - StartUpReg: AVMWlanClient - hkey= - key= - C:\Programme\avmwlanstick\WLanGUI.exe (AVM GmbH Berlin)
MsConfig - StartUpReg: ClipIncSrvTray - hkey= - key= -  File not found
MsConfig - StartUpReg: CloneCDElbyCDFL - hkey= - key= -  File not found
MsConfig - StartUpReg: CloneCDTray - hkey= - key= -  File not found
MsConfig - StartUpReg: ctfmon.exe - hkey= - key= -  File not found
MsConfig - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Programme\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
MsConfig - StartUpReg: Dit - hkey= - key= - C:\WINDOWS\Dit.exe ()
MsConfig - StartUpReg: EPSON Stylus CX3200 - hkey= - key= -  File not found
MsConfig - StartUpReg: FLMOFFICE4DMOUSE - hkey= - key= - C:\Programme\Office Mouse\moffice.exe ()
MsConfig - StartUpReg: Google Update - hkey= - key= -  File not found
MsConfig - StartUpReg: HTpatch - hkey= - key= - C:\WINDOWS\htpatch.exe ()
MsConfig - StartUpReg: ICQ - hkey= - key= - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
MsConfig - StartUpReg: iTunesHelper - hkey= - key= - C:\Programme\iTunes\iTunesHelper.exe (Apple Inc.)
MsConfig - StartUpReg: Kernel and Hardware Abstraction Layer - hkey= - key= - C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
MsConfig - StartUpReg: KernelFaultCheck - hkey= - key= -  File not found
MsConfig - StartUpReg: KiesHelper - hkey= - key= - C:\Programme\Samsung\Kies\KiesHelper.exe (Samsung)
MsConfig - StartUpReg: KiesTrayAgent - hkey= - key= - C:\Programme\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
MsConfig - StartUpReg: LDM - hkey= - key= - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)
MsConfig - StartUpReg: LogitechSoftwareUpdate - hkey= - key= -  File not found
MsConfig - StartUpReg: LogitechVideoRepair - hkey= - key= -  File not found
MsConfig - StartUpReg: LogitechVideoTray - hkey= - key= -  File not found
MsConfig - StartUpReg: LVCOMSX - hkey= - key= -  File not found
MsConfig - StartUpReg: Microsoft Works Update Detection - hkey= - key= - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe (Microsoft® Corporation)
MsConfig - StartUpReg: mRouterConfig - hkey= - key= -  File not found
MsConfig - StartUpReg: MSMSGS - hkey= - key= - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation)
MsConfig - StartUpReg: NeroCheck - hkey= - key= -  File not found
MsConfig - StartUpReg: PC Suite for Smartphones - hkey= - key= -  File not found
MsConfig - StartUpReg: PCMService - hkey= - key= - C:\Programme\Medion Home CinemaXL\PowerCinema\PCMService.exe ()
MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Programme\EA SPORTS\QTTask.exe (Apple Inc.)
MsConfig - StartUpReg: Skype - hkey= - key= -  File not found
MsConfig - StartUpReg: SoundMan - hkey= - key= - C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig - StartUpReg: swg - hkey= - key= - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
MsConfig - StartUpReg: TomTomHOME.exe - hkey= - key= - C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
MsConfig - StartUpReg: tuloxFreeWBE - hkey= - key= - C:\Programme\tuloxFreeWBE\FreeDict.exe (GEKKO Software GmbH)
MsConfig - StartUpReg: tuloxFreeWBF - hkey= - key= - C:\Programme\tuloxFreeWBF\FreeDict.exe (GEKKO Software GmbH)
MsConfig - StartUpReg: VOBRegCheck - hkey= - key= -  File not found
MsConfig - StartUpReg: WhenUSave - hkey= - key= -  File not found
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 2
MsConfig - State: "startup" - 2
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/04/18 19:29:16 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
[2012/04/18 19:28:10 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\UserData
[2012/04/18 19:27:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Macromedia
[2012/04/18 19:26:30 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten
[2012/04/18 19:26:29 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator\Recent
[2012/04/18 19:26:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop
[2012/04/18 19:26:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
[2012/04/18 18:56:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight
[2012/04/18 18:56:01 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Silverlight
[2012/04/18 15:11:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2012/04/18 15:11:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Avira
[2012/04/18 14:55:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2012/04/18 14:55:09 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2012/04/18 14:55:02 | 000,137,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2012/04/18 14:55:02 | 000,074,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2012/04/18 14:55:02 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2012/04/18 14:55:00 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2012/04/18 14:55:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2012/04/18 14:47:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2012/04/18 13:58:43 | 001,372,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll
[2012/04/18 13:58:43 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll
[2012/04/18 13:58:40 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll
[2012/04/18 13:58:40 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll
[2012/04/18 13:58:40 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll
[2012/04/18 13:58:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2012/04/18 13:58:39 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll
[2012/04/18 13:58:39 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll
[2012/04/18 13:58:39 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll
[2012/04/18 13:58:39 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll
[2012/04/18 13:58:39 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll
[2012/04/18 13:58:39 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll
[2012/04/18 13:58:39 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll
[2012/04/18 13:58:39 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll
[2012/04/18 13:58:39 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll
[2012/04/18 13:58:39 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll
[2012/04/18 13:58:39 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll
[2012/04/18 13:58:39 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapolqec.dll
[2012/04/18 13:58:39 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll
[2012/04/18 13:58:39 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll
[2012/04/18 13:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll
[2012/04/18 13:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll
[2012/04/18 13:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll
[2012/04/18 13:58:37 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll
[2012/04/18 13:58:37 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll
[2012/04/18 13:58:37 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll
[2012/04/18 13:58:37 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll
[2012/04/18 13:58:37 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll
[2012/04/18 13:58:37 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll
[2012/04/18 13:58:37 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe
[2012/04/18 13:58:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll
[2012/04/18 13:58:36 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll
[2012/04/18 13:58:36 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll
[2012/04/18 13:58:36 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe
[2012/04/18 13:58:36 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll
[2012/04/18 13:58:36 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll
[2012/04/18 13:58:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qutil.dll
[2012/04/18 13:58:36 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll
[2012/04/18 13:58:36 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasqec.dll
[2012/04/18 13:58:36 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll
[2012/04/18 13:58:35 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe
[2012/04/18 13:58:34 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll
[2012/04/18 13:58:34 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2012/04/18 13:58:34 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verclsid.exe
[2012/04/18 13:58:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-de
[2012/04/18 13:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2012/04/18 13:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de
[2012/04/18 13:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2012/04/18 13:53:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2012/04/15 11:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2012/04/15 11:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LOGFILES
[2012/04/15 11:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\INFECTED
[2012/04/15 11:59:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\REPORTS
[2012/04/14 15:31:13 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Fabian Stecher\Recent
[2012/04/12 15:52:08 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen
[2012/04/12 15:52:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü
[2012/04/12 15:52:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2012/04/12 15:51:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\InterTrust
[2012/04/12 15:51:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Identities
[2012/04/12 15:51:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Help
[2012/04/12 15:51:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Adobe
[2012/04/12 15:51:45 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft
[2012/04/12 15:51:45 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies
[2012/04/12 15:51:45 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten
[2012/04/12 15:51:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\MSN6
[2012/04/12 15:51:41 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen
[2012/04/12 15:51:41 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Default User
[2012/03/23 12:18:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Sun
[2005/05/01 09:45:18 | 000,774,144 | ---- | C] (RealNetworks, Inc.) -- C:\Programme\RngInterstitial.dll
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\*.tmp files -> C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012/04/19 09:04:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/04/19 03:49:16 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/04/19 03:39:56 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/04/18 19:29:20 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
[2012/04/18 19:22:40 | 000,001,500 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\AUS !!!.lnk
[2012/04/18 19:11:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/04/18 18:56:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight
[2012/04/18 18:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2012/04/18 18:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2012/04/18 17:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At48.job
[2012/04/18 17:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At47.job
[2012/04/18 16:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At46.job
[2012/04/18 16:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At45.job
[2012/04/18 15:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At44.job
[2012/04/18 15:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At43.job
[2012/04/18 14:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At42.job
[2012/04/18 14:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At41.job
[2012/04/18 14:55:30 | 000,001,675 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012/04/18 14:55:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2012/04/18 14:50:08 | 000,443,544 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012/04/18 14:50:08 | 000,427,852 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/04/18 14:50:08 | 000,078,306 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012/04/18 14:50:08 | 000,065,810 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/04/18 14:49:39 | 000,000,079 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Desktop anzeigen.scf
[2012/04/18 14:49:28 | 000,000,763 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Browser starten.lnk
[2012/04/18 14:48:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/04/18 14:48:08 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2012/04/18 14:47:05 | 000,267,800 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/04/18 13:59:02 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zubehör
[2012/04/18 13:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At40.job
[2012/04/18 13:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At39.job
[2012/04/18 13:53:27 | 000,251,712 | RHS- | M] () -- C:\ntldr
[2012/04/17 11:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At36.job
[2012/04/17 11:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At35.job
[2012/04/15 10:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At34.job
[2012/04/15 10:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At33.job
[2012/04/15 09:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At32.job
[2012/04/15 09:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At31.job
[2012/04/15 09:17:17 | 000,000,000 | -HS- | M] () -- C:\WINDOWS\System32\dds_trash_log.cmd
[2012/04/14 17:42:59 | 000,462,488 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2012/04/14 17:42:25 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2012/04/12 12:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At38.job
[2012/04/12 12:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At37.job
[2012/04/12 10:24:49 | 000,169,984 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/04/12 08:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At30.job
[2012/04/12 08:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At29.job
[2012/04/12 07:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At28.job
[2012/04/12 07:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At27.job
[2012/04/12 06:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At26.job
[2012/04/12 06:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At25.job
[2012/04/10 05:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
[2012/04/10 05:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2012/04/09 21:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2012/04/09 21:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2012/04/09 20:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2012/04/09 20:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2012/04/09 19:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2012/04/09 19:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\*.tmp files -> C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012/04/18 14:55:30 | 000,001,675 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012/04/18 14:49:39 | 000,000,079 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Desktop anzeigen.scf
[2012/04/12 15:52:03 | 000,000,784 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2012/04/12 15:52:03 | 000,000,759 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Browser starten.lnk
[2012/04/12 15:52:03 | 000,000,079 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Desktop anzeigen.scf
[2012/03/16 22:00:59 | 000,000,112 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\wGaWyo.dat
[2012/03/16 21:42:47 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/07/05 17:20:41 | 000,063,216 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\mdbu.bin
[2011/02/01 17:57:24 | 000,462,488 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2011/02/01 15:41:04 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011/02/01 15:41:04 | 000,036,640 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011/01/29 12:00:24 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2011/01/29 12:00:22 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011/01/29 12:00:22 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011/01/29 12:00:22 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011/01/29 12:00:22 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2010/11/21 14:52:39 | 000,002,910 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\.recently-used.xbel
[2010/09/03 17:19:04 | 000,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010/08/02 11:45:18 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2009/07/17 13:38:49 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys
[2009/06/07 07:27:20 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\vbzlib1.dll
[2009/05/29 04:03:16 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/01/14 10:44:10 | 000,000,272 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2008/12/08 13:17:28 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2008/12/08 13:17:28 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2008/01/02 17:57:11 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008/01/02 17:57:11 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2007/07/02 15:41:13 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2007/07/02 15:36:50 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2007/05/19 11:04:47 | 000,000,022 | ---- | C] () -- C:\WINDOWS\CITEMP.INI
[2007/03/24 09:25:22 | 000,006,537 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2007/03/15 16:17:11 | 000,554,496 | ---- | C] () -- C:\WINDOWS\System32\dvmsg.dll
[2006/12/05 10:16:03 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2006/12/05 10:16:02 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2006/09/17 16:57:36 | 000,097,388 | R--- | C] () -- C:\WINDOWS\System32\drivers\Fwusb1b.bin
[2006/07/29 12:05:06 | 000,118,784 | R--- | C] () -- C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe
[2006/07/24 12:14:42 | 000,008,192 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2006/03/31 10:22:28 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2005/08/10 07:09:47 | 000,233,472 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe
[2005/05/03 08:18:42 | 000,000,016 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2005/04/19 11:32:09 | 000,019,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\rasirda.sys
[2005/04/19 11:32:06 | 000,014,336 | R--- | C] () -- C:\WINDOWS\System32\drivers\DSIR620.sys
[2005/03/07 12:13:07 | 000,081,920 | R--- | C] () -- C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
[2005/01/28 12:42:47 | 000,000,035 | ---- | C] () -- C:\WINDOWS\System32\RTELM.dll
[2004/12/25 08:03:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2004/12/25 08:03:22 | 000,099,970 | ---- | C] () -- C:\WINDOWS\UninstallFirefox.exe
[2004/12/25 08:02:41 | 000,004,480 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2004/12/11 08:27:55 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll
[2004/12/10 07:34:07 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2004/10/31 09:55:10 | 000,000,808 | ---- | C] () -- C:\WINDOWS\eReg.dat
[2004/09/11 10:14:30 | 000,000,604 | ---- | C] () -- C:\WINDOWS\Thps3.INI
[2004/08/21 17:18:13 | 000,000,741 | ---- | C] () -- C:\WINDOWS\CDEX.INI
[2004/08/02 09:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/05/08 04:01:17 | 000,000,201 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2004/01/17 15:01:10 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\SSHDRV61.sys
[2004/01/16 09:37:28 | 000,169,720 | ---- | C] () -- C:\Programme\replay.rp3
[2004/01/16 09:37:28 | 000,051,672 | ---- | C] () -- C:\Programme\ghost.gst
[2004/01/16 09:25:19 | 000,000,578 | ---- | C] () -- C:\Programme\install.win
[2004/01/07 19:10:04 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\NX.exe
[2004/01/07 19:10:04 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\E2.exe
[2004/01/07 19:10:03 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\SaiCfg.dll
[2003/11/20 14:47:38 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2003/11/20 14:44:11 | 000,290,919 | ---- | C] () -- C:\WINDOWS\System32\pythoncom21.dll
[2003/11/20 14:44:11 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\PyWinTypes21.dll
[2003/11/20 14:40:18 | 000,096,768 | ---- | C] () -- C:\WINDOWS\SlantAdj.dll
[2003/11/20 14:40:18 | 000,003,136 | ---- | C] () -- C:\WINDOWS\Ade001.bin
[2003/11/20 14:40:18 | 000,000,072 | R--- | C] () -- C:\WINDOWS\System32\epDPE.ini
[2003/11/20 14:39:19 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\EEBAPI.dll
[2003/11/20 14:39:19 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\EEBDSCVR.dll
[2003/11/20 14:39:19 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\EBAPI.dll
[2003/11/20 14:38:02 | 000,000,182 | ---- | C] () -- C:\WINDOWS\System32\EBPPORT.DAT
[2003/08/25 13:21:54 | 000,182,272 | ---- | C] () -- C:\WINDOWS\patchw32.dll
[2003/08/08 06:12:37 | 000,169,984 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2003/08/08 06:12:37 | 000,000,147 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2003/02/21 08:02:35 | 000,000,200 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2003/02/15 12:52:19 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2003/02/15 08:21:45 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2003/02/14 14:45:50 | 000,127,184 | ---- | C] () -- C:\WINDOWS\Unwise.exe
[2003/02/14 13:11:29 | 000,001,410 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2003/02/14 13:11:20 | 000,443,544 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2003/02/14 13:11:20 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2003/02/14 13:11:20 | 000,078,306 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2003/02/14 13:11:20 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2003/02/14 13:11:03 | 000,427,852 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2003/02/14 13:11:03 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2003/02/14 13:11:03 | 000,065,810 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2003/02/14 13:11:03 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2003/02/14 13:11:01 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2003/02/14 13:11:01 | 000,004,518 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003/02/14 13:10:59 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003/02/14 13:10:55 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2003/02/14 13:10:55 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2003/02/14 13:10:49 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2003/02/14 13:10:39 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003/02/14 08:53:00 | 000,000,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2003/02/14 06:40:13 | 000,073,728 | ---- | C] () -- C:\WINDOWS\Dit.exe
[2003/02/14 06:40:13 | 000,065,536 | ---- | C] () -- C:\WINDOWS\DitExp.exe
[2003/02/14 06:40:13 | 000,065,536 | ---- | C] () -- C:\WINDOWS\Dit.DLL
[2003/02/14 06:40:13 | 000,000,208 | ---- | C] () -- C:\WINDOWS\Dit.INI
[2003/02/14 06:33:34 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2003/02/14 05:58:17 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2003/02/14 05:49:54 | 000,028,672 | ---- | C] () -- C:\WINDOWS\htpatch.exe
[2003/02/14 05:49:54 | 000,003,072 | ---- | C] () -- C:\WINDOWS\winio.sys
[2003/02/14 05:33:46 | 000,000,904 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2003/02/14 05:32:06 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2003/02/14 05:28:21 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2003/02/14 05:23:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2003/02/14 05:23:00 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2003/02/11 05:21:49 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.exe
[2003/01/08 10:55:50 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\VOBRegCheck.exe
[2002/03/26 15:18:27 | 000,091,136 | ---- | C] () -- C:\WINDOWS\System32\mp4fil32.dll
[1999/01/27 08:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll
[1999/01/22 12:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
[1997/11/17 11:13:16 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
 
========== LOP Check ==========
 
[2003/02/14 16:22:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\X10 Commander
[2003/02/14 06:27:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\InterTrust
[2010/12/20 19:02:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Azureus
[2004/08/22 07:44:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\CDZilla
[2009/11/14 15:36:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\DAEMON Tools Lite
[2009/11/14 15:15:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\DAEMON Tools Pro
[2010/09/04 14:55:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Dealio
[2003/11/20 14:52:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\EPSON
[2005/03/07 12:14:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\FotoWire
[2010/09/03 17:19:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\FreeAudioPack
[2010/11/21 14:52:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\gtk-2.0
[2008/07/21 09:17:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\ICQ
[2008/01/02 17:28:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\ICQ Toolbar
[2003/02/14 06:27:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\InterTrust
[2005/08/09 16:02:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\InterVideo
[2008/02/05 23:59:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\IrfanView
[2006/05/08 11:26:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Leadertech
[2011/04/19 11:19:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\LG Electronics
[2007/03/24 09:28:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\MAGIX
[2005/02/19 08:22:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mindjet
[2007/12/12 16:27:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\NCH Swift Sound
[2010/07/25 05:45:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\OpenCandy
[2009/09/29 14:26:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\OpenOffice.org
[2009/12/22 13:31:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\RouterControl
[2011/02/01 15:31:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Samsung
[2010/09/04 14:55:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Search Settings
[2012/03/19 14:59:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Sony
[2008/08/16 18:01:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Teleca
[2009/01/13 16:21:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Tobit
[2011/01/15 09:16:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\TomTom
[2009/11/14 15:28:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2009/11/14 15:20:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Pro
[2009/07/15 12:19:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
[2012/04/15 11:59:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\INFECTED
[2012/04/15 11:59:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LOGFILES
[2007/03/24 09:28:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2007/12/12 16:27:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NCH Swift Sound
[2006/04/04 09:57:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NFS Underground
[2012/04/15 11:59:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\REPORTS
[2005/03/07 12:09:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RTE
[2011/02/01 15:36:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2008/08/16 17:57:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony
[2012/04/15 12:01:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2011/01/15 09:16:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TomTom
[2007/03/02 13:43:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox
[2010/12/20 19:27:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/04/18 18:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2012/03/16 22:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2012/03/16 22:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2012/03/16 22:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2012/03/16 22:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2012/03/16 22:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2012/03/16 22:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2012/03/16 22:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2012/03/16 22:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2012/03/16 22:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2012/03/16 22:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2012/04/18 18:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2012/03/16 22:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2012/03/16 22:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2012/03/16 22:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2012/04/10 05:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2012/04/10 05:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At24.job
[2012/04/12 06:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job
[2012/04/12 06:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job
[2012/04/12 07:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job
[2012/04/12 07:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job
[2012/04/12 08:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job
[2012/04/09 19:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2012/04/12 08:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job
[2012/04/15 09:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job
[2012/04/15 09:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job
[2012/04/15 10:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job
[2012/04/15 10:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job
[2012/04/17 11:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job
[2012/04/17 11:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job
[2012/04/12 12:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job
[2012/04/12 12:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job
[2012/04/18 13:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job
[2012/04/09 19:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2012/04/18 13:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job
[2012/04/18 14:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job
[2012/04/18 14:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job
[2012/04/18 15:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job
[2012/04/18 15:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job
[2012/04/18 16:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job
[2012/04/18 16:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job
[2012/04/18 17:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job
[2012/04/18 17:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job
[2012/04/09 20:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2012/04/09 20:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2012/04/09 21:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2012/04/09 21:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2012/03/16 22:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2012/04/12 15:51:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen
[2009/09/25 13:36:36 | 000,000,000 | ---D | M] -- C:\DVDVideoSoft
[2004/11/02 17:14:58 | 000,000,000 | ---D | M] -- C:\EPSON
[2012/04/12 14:31:37 | 000,000,000 | ---D | M] -- C:\games
[2007/09/04 10:47:09 | 000,000,000 | ---D | M] -- C:\My Games
[2011/02/01 15:25:20 | 000,000,000 | ---D | M] -- C:\Program Files
[2012/04/18 18:56:01 | 000,000,000 | R--D | M] -- C:\Programme
[2003/08/29 18:46:48 | 000,000,000 | -HSD | M] -- C:\RECYCLER
[2010/01/01 09:29:12 | 000,000,000 | ---D | M] -- C:\RouterControl
[2011/05/14 14:07:27 | 000,000,000 | ---D | M] -- C:\Sounds
[2009/01/13 16:30:31 | 000,000,000 | ---D | M] -- C:\Spiele
[2006/12/05 14:14:41 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2012/04/18 19:25:37 | 000,000,000 | ---D | M] -- C:\WINDOWS
 
< %PROGRAMFILES%\*.exe >
 
Invalid Environment Variable: %LOCALAPPDATA%\*.exe
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2004/08/03 20:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008/04/14 02:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2004/08/03 20:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2008/04/14 02:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 18:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\agp440.sys
[2008/04/13 18:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004/08/03 18:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
 
< MD5 for: ATAPI.SYS  >
[2002/08/29 08:00:00 | 010,180,476 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2004/08/03 20:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008/04/14 02:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2002/08/29 08:00:00 | 010,180,476 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp1.cab:atapi.sys
[2002/08/28 22:52:58 | 010,180,476 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:atapi.sys
[2004/08/03 20:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2008/04/14 02:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/13 18:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\atapi.sys
[2008/04/13 18:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/03 17:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
 
< MD5 for: EVENTLOG.DLL  >
[2008/04/14 01:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 22:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\eventlog.dll
[2008/04/14 01:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll
[2004/08/03 19:57:20 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
 
< MD5 for: EXPLORER.EXE  >
[2004/08/03 19:57:54 | 001,035,264 | ---- | M] (Microsoft Corporation) MD5=22FE1BE02EADDE1632E478E4125639E0 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2008/04/14 01:52:46 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\explorer.exe
[2008/04/14 01:52:46 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2008/04/13 22:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\explorer.exe
 
< MD5 for: NETLOGON.DLL  >
[2008/04/14 01:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/13 22:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\netlogon.dll
[2008/04/14 01:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll
[2004/08/03 19:57:32 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2009/02/06 14:46:10 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=ED4BBAD725A21632FB205452749FC8F5 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009/02/06 14:46:10 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=ED4BBAD725A21632FB205452749FC8F5 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
 
< MD5 for: SCECLI.DLL  >
[2008/04/14 01:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/13 22:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\scecli.dll
[2008/04/14 01:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll
[2004/08/03 19:57:34 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
 
< MD5 for: USER32.DLL  >
[2004/08/03 19:57:38 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=56785FD5236D7B22CF471A6DA9DB46D8 -- C:\WINDOWS\$NtServicePackUninstall$\user32.dll
[2008/04/14 01:52:32 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\ServicePackFiles\i386\user32.dll
[2008/04/13 22:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\user32.dll
[2008/04/14 01:52:32 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll
[2002/08/29 08:00:00 | 000,561,664 | ---- | M] (Microsoft Corporation) MD5=E3DAFFDB1C86C1AEAC1B205F6CF67009 -- C:\WINDOWS\$NtUninstallQ328310$\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008/04/14 01:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008/04/13 22:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\userinit.exe
[2008/04/14 01:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe
[2004/08/03 19:58:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2004/08/03 19:58:20 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008/04/14 01:53:06 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008/04/13 22:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\SoftwareDistribution\Download\a746b2abbbec3e139e29152ba22decd1\winlogon.exe
[2008/04/14 01:53:06 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2002/08/29 08:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys
[2002/08/29 08:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
[2003/02/14 06:22:23 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2003/02/14 06:22:23 | 000,606,208 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2003/02/14 06:22:23 | 000,413,696 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
 
< %systemroot%\system32\*.dll /lockedfiles >
[2008/06/20 13:46:10 | 000,147,968 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\dnsapi.dll
[2008/04/14 01:52:20 | 000,280,064 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\mstask.dll
[2008/04/14 01:52:22 | 000,067,072 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\ntdsapi.dll
[2010/04/16 12:06:44 | 001,509,888 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\shdocvw.dll
[2008/06/17 15:00:59 | 008,502,272 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\shell32.dll
[8 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
 
Invalid Environment Variable: %USERPROFILE%\*.*
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.exe
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.dll
 
Invalid Environment Variable: %USERPROFILE%\Application Data\*.exe
 
 
========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\WINDOWS\$NtUninstallKB59195$] ->  -> Unknown point type
< End of report >

--- --- ---

markusg · 19.04.2012, 15:12

wird die meldung noch angezeigt wenn du dich anmeldest?

Hilfesuche · 19.04.2012, 15:19

Habe ich noch nicht ausprobiert, aber werde ich jetzt gleich mal tun.

markusg · 19.04.2012, 15:29

ok, denn irgendwie sehe ich momentan noch nichts...

Hilfesuche · 19.04.2012, 15:29

Also funktioniert noch nicht wieder.
Kann es eventuell daran liegen, dass ich im abgesicherten Modus unter dem Administrator Account aktiv war und nicht unter meinem eigenen Account?

markusg · 19.04.2012, 15:32

hast du
OTLPENet.exe
von cd ausgeführt, also das gerät von cd gestartet und dann den betroffenen nutzer angeklickt? falls nein, scan erneut machen

Hilfesuche · 19.04.2012, 15:37

Alles klar, dann muss ich den scan erneut durchführen.

So hab den ersten Scan (ohne das Booten) in meinem Account abgeschlossen. Hier die beiden Logfiles:

Extras.Txt-EditorOTL Logfile:

Code:

ATTFilter

OTL Extras logfile created on: 19.04.2012 18:59:56 - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = K:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 82,00% Memory free
3,00 Gb Paging File | 2,00 Gb Available in Paging File | 94,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 55,89 Gb Total Space | 21,95 Gb Free Space | 39,27% Space Free | Partition Type: NTFS
Drive D: | 55,90 Gb Total Space | 40,58 Gb Free Space | 72,59% Space Free | Partition Type: NTFS
Drive E: | 37,25 Gb Total Space | 30,23 Gb Free Space | 81,16% Space Free | Partition Type: FAT32
Drive K: | 436,59 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: FABIAN | User Name: Fabian Stecher
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
 
[HKEY_USERS\S-1-5-21-2625688696-1807287611-2029565558-1007\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Programme\Microsoft Office\Office\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Dokumente und Einstellungen\Peter\bea\BearShare.exe" = C:\Dokumente und Einstellungen\Peter\bea\BearShare.exe:*:Enabled:BearShare
"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox\web_de_Update.exe" = C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox\web_de_Update.exe:*:Enabled:WEB.DE Update -- (AccSys GmbH)
"E:\Radio\Player\ClipInc-Player.exe" = E:\Radio\Player\ClipInc-Player.exe:*:Enabled:ClipInc. Player
"C:\Programme\SopCast\SopCast.exe" = C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application
"C:\Programme\KONAMI\Pro Evolution Soccer 2008\PES2008.exe" = C:\Programme\KONAMI\Pro Evolution Soccer 2008\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)
"C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6
"C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat" = C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat:*:Enabled:Die Schlacht um Mittelerde™ II
"C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\patchget.dat" = C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\patchget.dat:*:Enabled:patchgrabber
"C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe" = C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe:*:Enabled:ClipInc Server
"C:\Programme\Tobit ClipInc\Player\ClipInc-Player.exe" = C:\Programme\Tobit ClipInc\Player\ClipInc-Player.exe:*:Enabled:ClipInc Player
"C:\Programme\Metin2_Germany\metin2.bin" = C:\Programme\Metin2_Germany\metin2.bin:*:Disabled:metin2
"C:\Programme\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe" = C:\Programme\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe:*:Enabled:mRouterRuntime Module
"C:\Programme\LucasArts\Star Wars JK II Jedi Outcast\GameData\jk2mp.exe" = C:\Programme\LucasArts\Star Wars JK II Jedi Outcast\GameData\jk2mp.exe:*:Disabled:jk2mp
"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Programme\Skype\Plugin Manager\skypePM.exe" = C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)
"C:\Programme\Mozilla Firefox\firefox.exe" = C:\Programme\Mozilla Firefox\firefox.exe:*:Disabled:Firefox -- (Mozilla Corporation)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000407-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{03440014-3975-4267-9F39-1DC4745090B7}" = Microsoft Encarta Enzyklopädie 2003
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20F1FFAF-1BFF-450C-A8C7-03D1BE24B950}" = Microsoft .NET Framework (German)
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = PowerCinema 2.0
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java(TM) 6 Update 29
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0
"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{369B36BE-3D64-4641-9AEA-808D436FE132}" = Microsoft Picture It! Foto 7.0
"{374F03BB-9C09-4DB3-9C9B-C71E63292950}" = Google Earth
"{3A9E0E2F-B0D1-452B-B833-7A7300EA1231}" = Saitek NT Controller Drivers
"{3D1A6B70-3E02-49BC-88B0-916C80274632}" = Informationen über Ihren PC
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{43DCF766-6838-4F9A-8C91-D92DA586DFA7}" = Microsoft Windows-Journal-Viewer
"{43DDC07F-2867-4407-B4FF-28EB7BA6A846}" = Steganos Live Encryption Engine 15
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D4C8490-9048-4E2C-AF1B-3866D6BC9EC8}" = WEB.DE Firefox Paket
"{50974B3A-B8D5-4C7B-9D23-ED0EC9517B45}" = PL-2303 USB-to-Serial
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5B4383F2-37EE-4E97-AD81-F5FF76F286DA}" = OutlookAddInNet3Setup
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6815FCDD-401D-481E-BA88-31B4754C2B46}" = Macromedia Flash Player 8
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6B103F43-069C-11D6-9EA2-0050BAE317E1}" = PowerCinema
"{6C11D561-620B-47DA-A693-4C597F3CDF40}" = EPSON Smart Panel
"{6C5D7191-140A-11D6-B5A0-0050DA208A93}" = ArcSoft PhotoImpression
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{76EFFC7C-17A6-479D-9E47-8E658C1695AE}" = Windows-Sicherungsprogramm
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7CDBE27D-87EC-434E-AFE4-D0116AE876BB}" = Microsoft Works Suite-Add-Ins für Microsoft Word
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A367C28-423C-48E2-8C76-EBA1171F932A}" = Adobe Photoshop Album 2.0
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{911B0407-6000-11D3-8CFE-0050048383C9}" = Microsoft Word 2002
"{98E8A2EF-4EAE-43B8-A172-74842B764777}" = InterVideo WinDVD 4
"{9A3EABC0-CA06-11D4-BF77-00104B130C19}" = EPSON TWAIN 5
"{A2B3D1A5-82CA-4876-AFFA-DB304A3A4FE1}" = InstantCopy
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4D7B764-4140-11D4-88EB-0050DA3579C0}" = Nero - Burning Rom
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A81200000003}" = Adobe Reader 8.1.2 - Deutsch
"{AEDDF5A3-29CE-11D5-A8C2-000102246AAE}" = ubi.com
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2EFE303-A594-11D5-95EB-005004BC1C65}" = EPSON PhotoQuicker3.2
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B69CC1A5-0404-11D6-ABCB-005004C21D30}" = EPSON Copy Utility
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4BEEB8C-B9D2-4CD9-A2AA-1F3A1F57DF21}" = Works Suite-Betriebssystem-Pack
"{C54BD612-9C91-4342-B529-D177CEB8C0C3}" = MindManager X5 Pro
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector Pro
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D379964B-685C-44D5-AE46-C953A9FEEA14}" = EPSON Photo Print
"{EA1CB7AC-E221-4822-A789-0ADB051DC498}" = Medion Flash XL
"{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}" = ScanToWeb
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{EDDDC607-91D9-4758-9F57-265FDCD8A772}" = Microsoft Works 7.0 
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F7F2DC0A-C22E-49AD-AD37-797309A54E7B}" = Microsoft AutoRoute 2002
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"America Online de" = AOL Deutschland
"Anotha ID3 Editor" = Anotha ID3 Editor 1.41
"ATI Display Driver" = ATI Display Driver
"aTube Catcher" = aTube Catcher
"Avira AntiVir Desktop" = Avira Free Antivirus
"AVMWLANCLI" = AVM FRITZ!WLAN
"Backgammon Professional" = Backgammon Professional
"CCleaner" = CCleaner
"ClocX" = ClocX (1.4)
"EAX Unified" = EAX Unified
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Firebird SQL Server D" = Firebird SQL Server - MAGIX Edition (D)
"FLF Services Periodensystem_is1" = FLF Services Periodensystem 1.2
"FMCODEC" = FM Screen Capture Codec (Remove Only)
"FolderBox" = FolderBox 1.2
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.9
"GameSpy Arcade" = GameSpy Arcade
"Graboid Video" = Graboid Video 2.12
"Hardcopy" = Hardcopy
"iColorFolder" = iColorFolder
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"IrfanView" = IrfanView (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.3.1 (Standard)
"Logitech Print Service" = Logitech Print Service
"MediaShow" = Medi@Show
"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework Full v1.0.3705 (1031)" = Microsoft .NET Framework (German) v1.0.3705
"Mozilla Firefox 11.0 (x86 de)" = Mozilla Firefox 11.0 (x86 de)
"MUSICMATCH Jukebox" = MUSICMATCH Jukebox
"Office Mouse" = Office Mouse
"RealPlayer 6.0" = RealPlayer Basic
"Shockwave" = Shockwave
"SiSLan" = SiS 900 PCI Fast Ethernet Adapter Driver
"SSC Service Utility_is1" = SSC Service Utility v3.10
"Switch" = Switch
"Thoosje Sidebar V2.3" = Thoosje Sidebar V2.3
"TomTom HOME" = TomTom HOME 2.7.6.2056
"tulox Freeware-Wörterbuch (Englisch)" = tulox Freeware-Wörterbuch (Englisch)
"tulox Freeware-Wörterbuch (Französisch)" = tulox Freeware-Wörterbuch (Französisch)
"Uninstall_is1" = Uninstall 1.0.0.1
"VideoLive Mail" = VideoLive Mail 4.0
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VLC media player 1.0.1
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WEB.DE Firefox Browser Update" = WEB.DE Firefox Browser Update
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"X10Hardware" = X10 Hardware(TM)
"Xvid_is1" = Xvid 1.1.3 final uninstall
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-2625688696-1807287611-2029565558-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"MyFreeCodec" = MyFreeCodec
 
< End of report >

--- --- ---

OTL.Txt-EditorOTL Logfile:

Code:

ATTFilter

OTL logfile created on: 19.04.2012 18:59:56 - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = K:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 82,00% Memory free
3,00 Gb Paging File | 2,00 Gb Available in Paging File | 94,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 55,89 Gb Total Space | 21,95 Gb Free Space | 39,27% Space Free | Partition Type: NTFS
Drive D: | 55,90 Gb Total Space | 40,58 Gb Free Space | 72,59% Space Free | Partition Type: NTFS
Drive E: | 37,25 Gb Total Space | 30,23 Gb Free Space | 81,16% Space Free | Partition Type: FAT32
Drive K: | 436,59 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: FABIAN | User Name: Fabian Stecher
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Auto] --  -- (webrootspysweeperservice)
SRV - File not found [Auto] --  -- (Slntamr)
SRV - File not found [Auto] --  -- (RTHDMIAzAudService)
SRV - File not found [Auto] --  -- (Pcatip)
SRV - File not found [Auto] --  -- (osanbm)
SRV - File not found [Auto] --  -- (MTDVC2_ENUM)
SRV - File not found [Auto] --  -- (MRV6X32P)
SRV - File not found [Auto] --  -- (mcafeeframework)
SRV - File not found [Auto] --  -- (iaimfp4)
SRV - File not found [Auto] --  -- (hpt3xx)
SRV - File not found [Auto] --  -- (FTDIBUS)
SRV - File not found [Auto] --  -- (CVPND)
SRV - File not found [Auto] --  -- (awservice)
SRV - File not found [On_Demand] --  -- (AppMgmt)
SRV - File not found [Auto] --  -- (AMService)
SRV - File not found [Auto] --  -- (ABVPN2K)
SRV - [2012.01.31 08:56:05 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.01.31 08:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.10.16 01:40:40 | 000,037,664 | ---- | M] (Apple Inc.) [Disabled] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010.09.06 09:11:32 | 000,217,088 | ---- | M] (Teruten) [Disabled] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010.08.24 11:38:18 | 000,092,008 | ---- | M] (TomTom) [Disabled] -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2007.11.15 11:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2006.10.25 11:43:36 | 000,180,224 | ---- | M] (hablamax) [Auto] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox\adminsvcff.exe -- (AdminSVCff)
SRV - [2005.11.17 16:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand] -- D:\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2005.10.18 03:04:00 | 000,379,812 | R--- | M] (AVM Berlin) [Auto] -- C:\Programme\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service)
SRV - [2002.10.31 10:35:58 | 000,065,536 | ---- | M] (America Online, Inc.) [Auto] -- C:\WINDOWS\wanmpsvc.exe -- (WANMiniportService) WAN Miniport (ATW)
SRV - [2002.07.17 03:03:00 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) [Disabled] -- C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe -- (EPSONStatusAgent2)
SRV - [2002.01.29 14:33:14 | 000,077,824 | ---- | M] () [Disabled] -- C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\eEBSvc.exe -- (EpsonBidirectionalService)
SRV - [2001.11.12 14:31:48 | 000,020,480 | ---- | M] (X10) [On_Demand] -- C:\Programme\Common Files\X10\Common\X10nets.exe -- (x10nets)
SRV - [2001.02.23 11:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (USBModem)
DRV - File not found [Kernel | On_Demand] --  -- (UsbDiag)
DRV - File not found [Kernel | On_Demand] --  -- (usbbus)
DRV - File not found [Kernel | On_Demand] --  -- (RT2500)
DRV - File not found [Kernel | On_Demand] --  -- (QCMerced)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand] --  -- (LVUSBSta)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - File not found [Kernel | On_Demand] --  -- (bDMusicb)
DRV - File not found [Kernel | On_Demand] --  -- (a1sv23ka)
DRV - [2012.01.31 08:56:33 | 000,137,416 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.01.31 08:56:33 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.09.16 16:08:07 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.01.29 18:00:20 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2011.01.03 10:38:36 | 000,136,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011.01.03 10:38:36 | 000,121,192 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2011.01.03 10:38:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2010.09.06 09:11:32 | 000,036,640 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.11.14 21:15:15 | 000,722,416 | ---- | M] () [Kernel | Boot] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2009.10.08 16:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.07.17 19:38:49 | 000,005,248 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\giveio.sys -- (giveio)
DRV - [2008.04.14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2007.09.21 04:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007.09.21 04:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007.09.21 04:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007.02.21 14:33:54 | 000,080,232 | ---- | M] (Softwareentwicklung Remus - ArchiCrypt ) [Driver] [Kernel | System] -- C:\WINDOWS\system32\drivers\sleen15.sys -- (SLEE_15_DRIVER)
DRV - [2006.12.05 16:16:03 | 000,271,360 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2006.12.05 16:16:02 | 000,018,048 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2005.10.18 03:04:00 | 000,264,704 | R--- | M] (AVM GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\fwlanusb.sys -- (FWLANUSB)
DRV - [2005.05.24 16:01:16 | 000,077,040 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800obex.sys -- (w800obex)
DRV - [2005.05.24 16:00:56 | 000,079,216 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800mgmt.sys -- (w800mgmt)
DRV - [2005.05.24 16:00:46 | 000,087,424 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800mdm.sys -- (w800mdm)
DRV - [2005.05.24 16:00:44 | 000,006,096 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800mdfl.sys -- (w800mdfl)
DRV - [2005.05.24 16:00:37 | 000,052,384 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w800bus.sys -- (w800bus) Sony Ericsson W800 driver (WDM)
DRV - [2004.12.25 11:07:19 | 000,015,781 | ---- | M] (Meetinghouse Data Communications) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\mdc8021x.sys -- (MDC8021X) AEGIS Protocol (IEEE 802.1x)
DRV - [2004.12.19 13:03:52 | 000,014,336 | R--- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\DSIR620.sys -- (DSIR620)
DRV - [2004.01.17 21:01:10 | 000,036,864 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\SSHDRV61.sys -- (SSHDRV61)
DRV - [2003.09.26 04:53:00 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2003.07.16 15:27:40 | 000,043,264 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2003.02.14 20:47:03 | 000,028,164 | ---- | M] (MusicMatch, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\MxlW2k.sys -- (MxlW2k)
DRV - [2003.01.28 11:49:48 | 000,697,084 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2003.01.19 18:58:28 | 000,546,688 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2002.11.04 16:32:00 | 000,027,520 | ---- | M] (Philips Semiconductors) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\PhTVTune.sys -- (PhTVTune)
DRV - [2002.11.04 16:29:42 | 000,422,976 | ---- | M] (Philips Semiconductors) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Cap7134.sys -- (Cap7134) MEDION (7134)
DRV - [2002.10.31 12:58:42 | 000,030,848 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\SISAGPX.SYS -- (SISAGP)
DRV - [2002.10.31 10:33:04 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - [2002.07.17 09:05:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aspi32.sys -- (ASPI32)
DRV - [2002.07.17 09:05:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\aspi32.sys -- (ASPI)
DRV - [2002.07.10 17:39:34 | 000,032,256 | ---- | M] (SiS Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)
DRV - [2002.07.01 16:10:40 | 000,638,366 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ctxs51.sys -- (Intels51)
DRV - [2002.04.17 21:27:02 | 000,011,264 | ---- | M] (VOB Computersysteme GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\asapiW2k.sys -- (ASAPIW2K)
DRV - [2002.03.20 18:38:20 | 000,019,140 | ---- | M] (America Online) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\atwpkt.sys -- (ATWPKT)
DRV - [2001.11.14 19:07:42 | 000,010,761 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\x10uif.sys -- (X10UIF)
DRV - [2001.08.17 15:02:50 | 000,002,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HIDSwvd.sys -- (HIDSwvd)
DRV - [2001.08.17 15:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
DRV - [2001.08.17 13:51:32 | 000,019,584 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rasirda.sys -- (Rasirda) WAN-Miniport (IrDA)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Upgrade to Google Chrome
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = Welcome to ALDI
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = Welcome to ALDI
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = Welcome to ALDI
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\Software\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\Software\Microsoft\Internet Explorer\Main,Start Page = ICQ.com Suche
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\..\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Programme\AskSearch\bin\DefaultSearch.dll ()
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost;*.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.order.1: "Ask"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=867034"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/ig?hl=de"
FF - prefs.js..extensions.enabledItems: {184AA5E6-741D-464a-820E-94B3ABC2F3B4}:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=867034&p="
FF - prefs.js..network.proxy.ftp: "75.101.252.238"
FF - prefs.js..network.proxy.ftp_port: 80
FF - prefs.js..network.proxy.gopher: "75.101.252.238"
FF - prefs.js..network.proxy.gopher_port: 80
FF - prefs.js..network.proxy.socks: "75.101.252.238"
FF - prefs.js..network.proxy.socks_port: 80
FF - prefs.js..network.proxy.ssl: "75.101.252.238"
FF - prefs.js..network.proxy.ssl_port: 80
FF - prefs.js..network.proxy.type: 4
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Programme\DivX\DivX Content Uploader\npUpload.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/npracplug;version=1.0.0.0: C:\Programme\Real\RealArcade\Plugins\Mozilla\npracplug.dll (RealNetworks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Programme\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{184AA5E6-741D-464a-820E-94B3ABC2F3B4}: C:\WINDOWS\system32\5025 [2011.09.11 19:48:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.03.20 15:00:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.12.08 01:01:34 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\extensions\\{184AA5E6-741D-464a-820E-94B3ABC2F3B4}: C:\WINDOWS\system32\5025 [2011.09.11 19:48:12 | 000,000,000 | ---D | M]
 
[2011.01.15 15:16:23 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Extensions
[2011.01.15 15:16:23 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Extensions\home2@tomtom.com
[2012.04.04 11:51:55 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\extensions
[2008.05.23 14:32:55 | 000,000,000 | ---D | M] (Vista-aero) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb}
[2007.03.02 19:38:58 | 000,000,000 | ---D | M] (Brauserix) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\extensions\{8DD78DDF-6BFD-436e-A6BA-18BFFDABA53F}
[2008.05.23 14:32:24 | 000,000,000 | ---D | M] ("Doodle Classic") -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\extensions\{9dd2ef0a-f6f2-4f54-ad61-611181226d56}
[2007.03.02 19:38:58 | 000,000,000 | ---D | M] (Platinum) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\extensions\{F44A59FC-F61F-46ab-8FD4-444CED7C412A}
[2007.03.02 19:38:58 | 000,000,000 | ---D | M] (Blue) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\extensions\blue
[2011.12.08 20:59:57 | 000,000,000 | ---D | M] (German Dictionary, extended for Austria) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\extensions\de-AT@dictionaries.addons.mozilla.org
[2004.12.25 15:07:26 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\extensions\temp
[2008.10.25 12:30:45 | 000,000,681 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\ask.xml
[2012.04.06 13:11:45 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-1.xml
[2009.09.11 00:08:06 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-10.xml
[2009.10.28 20:30:08 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-11.xml
[2009.12.16 22:32:47 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-12.xml
[2010.01.06 23:33:02 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-13.xml
[2010.02.21 17:10:18 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-14.xml
[2010.03.20 03:42:28 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-15.xml
[2010.03.25 14:09:11 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-16.xml
[2010.03.30 19:31:22 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-17.xml
[2008.02.08 16:45:14 | 000,000,949 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-2.xml
[2008.03.27 21:44:02 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-3.xml
[2008.04.17 13:27:41 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-4.xml
[2008.07.02 15:38:15 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-5.xml
[2008.07.17 14:24:22 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-6.xml
[2009.07.15 19:51:45 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-7.xml
[2009.07.24 15:27:12 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-8.xml
[2009.08.07 00:10:49 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin-9.xml
[2009.07.13 17:12:02 | 000,000,944 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\icqplugin.xml
[2009.12.20 00:04:41 | 000,003,915 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\sweetim.xml
[2007.09.07 11:23:19 | 000,002,109 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Profiles\rimuxzb4.default\searchplugins\youtube-video-search.xml
[2012.02.10 18:11:29 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
File not found (No name found) -- 
[2011.09.11 19:48:12 | 000,000,000 | ---D | M] (Java String Helper) -- C:\WINDOWS\SYSTEM32\5025
[2012.03.20 15:00:29 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011.11.21 16:54:54 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2005.04.27 22:10:49 | 000,102,400 | ---- | M] (RealNetworks) -- C:\Programme\mozilla firefox\plugins\npracplug.dll
[2003.06.27 03:21:12 | 000,196,608 | ---- | M] () -- C:\Programme\mozilla firefox\plugins\npViewpoint.dll
[2012.01.12 20:23:15 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.01.12 20:23:15 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012.01.12 20:23:15 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012.01.12 20:23:15 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.01.12 20:23:15 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.01.12 20:23:15 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
Hosts file not found
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Programme\ICQToolbar\toolbaru.dll (IE Toolbar)
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {184AA5E6-741D-464a-820E-94B3ABC2F3B4} - No CLSID value found.
O2 - BHO: (no name) - {A7F3CAAA-A526-44AA-9D1C-10DDD1EEBADD} - No CLSID value found.
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: () - {BBE59AF5-EE22-4A3A-AB26-3F774D1B4216} - C:\Programme\FolderBox\FolderBox.dll ()
O2 - BHO: (no name) - {C689C99E-3A8C-4c87-A79C-C80DC9C81632} - No CLSID value found.
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O3 - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\..\Toolbar\WebBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [AVGCtrl]  File not found
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007..\Run: [EPSON Stylus CX3200] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007..\Run: [SkypePM] C:\Dokumente und Einstellungen\Fabian Stecher\Lokale Einstellungen\Anwendungsdaten\Skype\SkypePM.exe (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\Fabian Stecher\Startmenü\Programme\Autostart\Hardcopy.LNK = C:\Programme\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2625688696-1807287611-2029565558-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 -  File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} hxxp://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37667.1728819444 (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Java Plug-in 1.5.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\programme\gemeinsame dateien\logitech\bluetooth\LBTWlgn.dll - C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - CLSID or File not found.
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Desktop-Hintergrund.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mozilla\Firefox\Desktop-Hintergrund.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2003.02.14 11:30:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006.03.24 13:06:41 | 000,000,053 | R--- | M] () - K:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{9941598a-20a8-11e0-995f-00038a000015}\Shell\AutoRun\command - "" = N:\InstallTomTomHOME.exe
O33 - MountPoints2\{cacae0cd-ce13-11de-97a8-00038a000015}\Shell\AutoRun\command - "" = G:\Menu.exe
O33 - MountPoints2\{cd63fd62-b495-11dc-9405-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{cd63fd62-b495-11dc-9405-00038a000015}\Shell\1\Command - "" = .\recycled\info.exe
O33 - MountPoints2\{cd63fd62-b495-11dc-9405-00038a000015}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{cd63fd62-b495-11dc-9405-00038a000015}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL .\recycled\info.exe
O33 - MountPoints2\K\Shell - "" = AutoRun
O33 - MountPoints2\K\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\reatogoMenu.exe -- [2005.07.16 23:36:50 | 000,240,128 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.04.19 00:56:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight
[2012.04.19 00:56:01 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Silverlight
[2012.04.18 21:11:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2012.04.18 21:11:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Avira
[2012.04.18 20:55:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2012.04.18 20:55:09 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2012.04.18 20:55:02 | 000,137,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2012.04.18 20:55:02 | 000,074,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2012.04.18 20:55:02 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2012.04.18 20:55:00 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2012.04.18 20:55:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2012.04.18 20:47:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2012.04.18 19:58:43 | 001,372,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll
[2012.04.18 19:58:43 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll
[2012.04.18 19:58:40 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll
[2012.04.18 19:58:40 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll
[2012.04.18 19:58:40 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll
[2012.04.18 19:58:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2012.04.18 19:58:39 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll
[2012.04.18 19:58:39 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll
[2012.04.18 19:58:39 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll
[2012.04.18 19:58:39 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll
[2012.04.18 19:58:39 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll
[2012.04.18 19:58:39 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll
[2012.04.18 19:58:39 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll
[2012.04.18 19:58:39 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll
[2012.04.18 19:58:39 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll
[2012.04.18 19:58:39 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll
[2012.04.18 19:58:39 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll
[2012.04.18 19:58:39 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapolqec.dll
[2012.04.18 19:58:39 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll
[2012.04.18 19:58:39 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll
[2012.04.18 19:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll
[2012.04.18 19:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll
[2012.04.18 19:58:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll
[2012.04.18 19:58:37 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll
[2012.04.18 19:58:37 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll
[2012.04.18 19:58:37 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll
[2012.04.18 19:58:37 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll
[2012.04.18 19:58:37 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll
[2012.04.18 19:58:37 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll
[2012.04.18 19:58:37 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe
[2012.04.18 19:58:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll
[2012.04.18 19:58:36 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll
[2012.04.18 19:58:36 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll
[2012.04.18 19:58:36 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe
[2012.04.18 19:58:36 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll
[2012.04.18 19:58:36 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll
[2012.04.18 19:58:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qutil.dll
[2012.04.18 19:58:36 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll
[2012.04.18 19:58:36 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasqec.dll
[2012.04.18 19:58:36 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll
[2012.04.18 19:58:35 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe
[2012.04.18 19:58:34 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll
[2012.04.18 19:58:34 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2012.04.18 19:58:34 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verclsid.exe
[2012.04.18 19:58:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-de
[2012.04.18 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2012.04.18 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de
[2012.04.18 19:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2012.04.18 19:53:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2012.04.15 17:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2012.04.15 17:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LOGFILES
[2012.04.15 17:59:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\INFECTED
[2012.04.15 17:59:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\REPORTS
[2012.04.14 21:31:13 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Fabian Stecher\Recent
[2012.03.23 18:18:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Sun
[2005.05.01 15:45:18 | 000,774,144 | ---- | C] (RealNetworks, Inc.) -- C:\Programme\RngInterstitial.dll
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\*.tmp files -> C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.04.19 18:49:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.04.19 17:26:34 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.04.19 09:49:16 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.04.19 01:22:40 | 000,001,500 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\AUS !!!.lnk
[2012.04.19 01:11:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.04.19 00:56:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight
[2012.04.19 00:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2012.04.19 00:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2012.04.18 23:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At48.job
[2012.04.18 23:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At47.job
[2012.04.18 22:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At46.job
[2012.04.18 22:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At45.job
[2012.04.18 21:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At44.job
[2012.04.18 21:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At43.job
[2012.04.18 20:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At42.job
[2012.04.18 20:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At41.job
[2012.04.18 20:55:30 | 000,001,675 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012.04.18 20:55:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2012.04.18 20:50:08 | 000,443,544 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.04.18 20:50:08 | 000,427,852 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.04.18 20:50:08 | 000,078,306 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.04.18 20:50:08 | 000,065,810 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.04.18 20:49:39 | 000,000,079 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Desktop anzeigen.scf
[2012.04.18 20:49:28 | 000,000,763 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Browser starten.lnk
[2012.04.18 20:48:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.04.18 20:48:08 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2012.04.18 20:47:05 | 000,267,800 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.04.18 19:59:02 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zubehör
[2012.04.18 19:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At40.job
[2012.04.18 19:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At39.job
[2012.04.18 19:53:27 | 000,251,712 | RHS- | M] () -- C:\ntldr
[2012.04.17 17:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At36.job
[2012.04.17 17:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At35.job
[2012.04.15 16:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At34.job
[2012.04.15 16:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At33.job
[2012.04.15 15:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At32.job
[2012.04.15 15:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At31.job
[2012.04.15 15:17:17 | 000,000,000 | -HS- | M] () -- C:\WINDOWS\System32\dds_trash_log.cmd
[2012.04.14 23:42:59 | 000,462,488 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2012.04.14 23:42:25 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2012.04.12 18:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At38.job
[2012.04.12 18:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At37.job
[2012.04.12 16:24:49 | 000,169,984 | ---- | M] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.04.12 14:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At30.job
[2012.04.12 14:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At29.job
[2012.04.12 13:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At28.job
[2012.04.12 13:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At27.job
[2012.04.12 12:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At26.job
[2012.04.12 12:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At25.job
[2012.04.10 11:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
[2012.04.10 11:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2012.04.10 03:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2012.04.10 03:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2012.04.10 02:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2012.04.10 02:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2012.04.10 01:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2012.04.10 01:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\*.tmp files -> C:\Dokumente und Einstellungen\Fabian Stecher\Desktop\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.04.18 20:55:30 | 000,001,675 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012.04.18 20:49:39 | 000,000,079 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Desktop anzeigen.scf
[2012.03.17 04:00:59 | 000,000,112 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\wGaWyo.dat
[2012.03.17 03:42:47 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011.07.05 23:20:41 | 000,063,216 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\mdbu.bin
[2011.02.01 23:57:24 | 000,462,488 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2011.02.01 21:41:04 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011.02.01 21:41:04 | 000,036,640 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011.01.29 18:00:24 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2011.01.29 18:00:22 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011.01.29 18:00:22 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011.01.29 18:00:22 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011.01.29 18:00:22 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2010.11.21 20:52:39 | 000,002,910 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\.recently-used.xbel
[2010.09.03 23:19:04 | 000,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010.08.02 17:45:18 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2009.07.17 19:38:49 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys
[2009.06.07 13:27:20 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\vbzlib1.dll
[2009.05.29 10:03:16 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009.01.14 16:44:10 | 000,000,272 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2008.12.08 19:17:28 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2008.12.08 19:17:28 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2008.01.02 23:57:11 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008.01.02 23:57:11 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2007.07.02 21:41:13 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2007.07.02 21:36:50 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2007.05.19 17:04:47 | 000,000,022 | ---- | C] () -- C:\WINDOWS\CITEMP.INI
[2007.03.24 15:25:22 | 000,006,537 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2007.03.15 22:17:11 | 000,554,496 | ---- | C] () -- C:\WINDOWS\System32\dvmsg.dll
[2006.12.05 16:16:03 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2006.12.05 16:16:02 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2006.09.17 22:57:36 | 000,097,388 | R--- | C] () -- C:\WINDOWS\System32\drivers\Fwusb1b.bin
[2006.07.29 18:05:06 | 000,118,784 | R--- | C] () -- C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe
[2006.07.24 18:14:42 | 000,008,192 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2006.03.31 16:22:28 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2005.08.10 13:09:47 | 000,233,472 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe
[2005.05.03 14:18:42 | 000,000,016 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2005.04.19 17:32:09 | 000,019,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\rasirda.sys
[2005.04.19 17:32:06 | 000,014,336 | R--- | C] () -- C:\WINDOWS\System32\drivers\DSIR620.sys
[2005.03.07 18:13:07 | 000,081,920 | R--- | C] () -- C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
[2005.01.28 18:42:47 | 000,000,035 | ---- | C] () -- C:\WINDOWS\System32\RTELM.dll
[2004.12.25 14:03:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2004.12.25 14:03:22 | 000,099,970 | ---- | C] () -- C:\WINDOWS\UninstallFirefox.exe
[2004.12.25 14:02:41 | 000,004,480 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2004.12.11 14:27:55 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll
[2004.12.10 13:34:07 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2004.10.31 15:55:10 | 000,000,808 | ---- | C] () -- C:\WINDOWS\eReg.dat
[2004.09.11 16:14:30 | 000,000,604 | ---- | C] () -- C:\WINDOWS\Thps3.INI
[2004.08.21 23:18:13 | 000,000,741 | ---- | C] () -- C:\WINDOWS\CDEX.INI
[2004.08.02 15:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.05.08 10:01:17 | 000,000,201 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2004.01.17 21:01:10 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\SSHDRV61.sys
[2004.01.16 15:37:28 | 000,169,720 | ---- | C] () -- C:\Programme\replay.rp3
[2004.01.16 15:37:28 | 000,051,672 | ---- | C] () -- C:\Programme\ghost.gst
[2004.01.16 15:25:19 | 000,000,578 | ---- | C] () -- C:\Programme\install.win
[2004.01.08 01:10:04 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\NX.exe
[2004.01.08 01:10:04 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\E2.exe
[2004.01.08 01:10:03 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\SaiCfg.dll
[2003.11.20 20:47:38 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2003.11.20 20:44:11 | 000,290,919 | ---- | C] () -- C:\WINDOWS\System32\pythoncom21.dll
[2003.11.20 20:44:11 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\PyWinTypes21.dll
[2003.11.20 20:40:18 | 000,096,768 | ---- | C] () -- C:\WINDOWS\SlantAdj.dll
[2003.11.20 20:40:18 | 000,003,136 | ---- | C] () -- C:\WINDOWS\Ade001.bin
[2003.11.20 20:40:18 | 000,000,072 | R--- | C] () -- C:\WINDOWS\System32\epDPE.ini
[2003.11.20 20:39:19 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\EEBAPI.dll
[2003.11.20 20:39:19 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\EEBDSCVR.dll
[2003.11.20 20:39:19 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\EBAPI.dll
[2003.11.20 20:38:02 | 000,000,182 | ---- | C] () -- C:\WINDOWS\System32\EBPPORT.DAT
[2003.08.25 19:21:54 | 000,182,272 | ---- | C] () -- C:\WINDOWS\patchw32.dll
[2003.08.08 12:12:37 | 000,169,984 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2003.08.08 12:12:37 | 000,000,147 | ---- | C] () -- C:\Dokumente und Einstellungen\Fabian Stecher\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2003.02.21 14:02:35 | 000,000,200 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2003.02.15 18:52:19 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2003.02.15 14:21:45 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2003.02.14 20:45:50 | 000,127,184 | ---- | C] () -- C:\WINDOWS\Unwise.exe
[2003.02.14 19:11:29 | 000,001,410 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2003.02.14 19:11:20 | 000,443,544 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2003.02.14 19:11:20 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2003.02.14 19:11:20 | 000,078,306 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2003.02.14 19:11:20 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2003.02.14 19:11:03 | 000,427,852 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2003.02.14 19:11:03 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2003.02.14 19:11:03 | 000,065,810 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2003.02.14 19:11:03 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2003.02.14 19:11:01 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2003.02.14 19:11:01 | 000,004,518 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003.02.14 19:10:59 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003.02.14 19:10:55 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2003.02.14 19:10:55 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2003.02.14 19:10:49 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2003.02.14 19:10:39 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003.02.14 14:53:00 | 000,000,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2003.02.14 12:40:13 | 000,073,728 | ---- | C] () -- C:\WINDOWS\Dit.exe
[2003.02.14 12:40:13 | 000,065,536 | ---- | C] () -- C:\WINDOWS\DitExp.exe
[2003.02.14 12:40:13 | 000,065,536 | ---- | C] () -- C:\WINDOWS\Dit.DLL
[2003.02.14 12:40:13 | 000,000,208 | ---- | C] () -- C:\WINDOWS\Dit.INI
[2003.02.14 12:33:34 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2003.02.14 11:58:17 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2003.02.14 11:49:54 | 000,028,672 | ---- | C] () -- C:\WINDOWS\htpatch.exe
[2003.02.14 11:49:54 | 000,003,072 | ---- | C] () -- C:\WINDOWS\winio.sys
[2003.02.14 11:33:46 | 000,000,904 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2003.02.14 11:32:06 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2003.02.14 11:28:21 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2003.02.14 11:23:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2003.02.14 11:23:00 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2003.02.11 11:21:49 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.exe
[2003.01.08 16:55:50 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\VOBRegCheck.exe
[2002.03.26 21:18:27 | 000,091,136 | ---- | C] () -- C:\WINDOWS\System32\mp4fil32.dll
[1999.01.27 14:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll
[1999.01.22 18:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
[1997.11.17 17:13:16 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
 
========== LOP Check ==========
 
[2003.02.14 22:22:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\X10 Commander
[2010.12.21 01:02:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Azureus
[2004.08.22 13:44:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\CDZilla
[2009.11.14 21:36:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\DAEMON Tools Lite
[2009.11.14 21:15:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\DAEMON Tools Pro
[2010.09.04 20:55:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Dealio
[2003.11.20 20:52:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\EPSON
[2005.03.07 18:14:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\FotoWire
[2010.09.03 23:19:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\FreeAudioPack
[2010.11.21 20:52:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\gtk-2.0
[2008.07.21 15:17:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\ICQ
[2008.01.02 23:28:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\ICQ Toolbar
[2003.02.14 12:27:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\InterTrust
[2005.08.09 22:02:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\InterVideo
[2008.02.06 05:59:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\IrfanView
[2006.05.08 17:26:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Leadertech
[2011.04.19 17:19:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\LG Electronics
[2007.03.24 15:28:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\MAGIX
[2005.02.19 14:22:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Mindjet
[2007.12.12 22:27:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\NCH Swift Sound
[2010.07.25 11:45:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\OpenCandy
[2009.09.29 20:26:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\OpenOffice.org
[2009.12.22 19:31:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\RouterControl
[2011.02.01 21:31:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Samsung
[2010.09.04 20:55:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Search Settings
[2012.03.19 20:59:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Sony
[2008.08.17 00:01:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Teleca
[2009.01.13 22:21:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\Tobit
[2011.01.15 15:16:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Fabian Stecher\Anwendungsdaten\TomTom
[2009.11.14 21:28:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2009.11.14 21:20:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Pro
[2009.07.15 18:19:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
[2012.04.15 17:59:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\INFECTED
[2012.04.15 17:59:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LOGFILES
[2007.03.24 15:28:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2007.12.12 22:27:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NCH Swift Sound
[2006.04.04 15:57:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NFS Underground
[2012.04.15 17:59:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\REPORTS
[2005.03.07 18:09:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RTE
[2011.02.01 21:36:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2008.08.16 23:57:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony
[2012.04.15 18:01:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2011.01.15 15:16:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TomTom
[2007.03.02 19:43:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox
[2010.12.21 01:27:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.04.19 00:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2012.04.19 00:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2012.03.17 04:00:59 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2012.04.10 11:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2012.04.10 11:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At24.job
[2012.04.12 12:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At25.job
[2012.04.12 12:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At26.job
[2012.04.12 13:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At27.job
[2012.04.12 13:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At28.job
[2012.04.12 14:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At29.job
[2012.04.10 01:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2012.04.12 14:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At30.job
[2012.04.15 15:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At31.job
[2012.04.15 15:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At32.job
[2012.04.15 16:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At33.job
[2012.04.15 16:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At34.job
[2012.04.17 17:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At35.job
[2012.04.17 17:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At36.job
[2012.04.12 18:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At37.job
[2012.04.12 18:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At38.job
[2012.04.18 19:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At39.job
[2012.04.10 01:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2012.04.18 19:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At40.job
[2012.04.18 20:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At41.job
[2012.04.18 20:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At42.job
[2012.04.18 21:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At43.job
[2012.04.18 21:56:01 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At44.job
[2012.04.18 22:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At45.job
[2012.04.18 22:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At46.job
[2012.04.18 23:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At47.job
[2012.04.18 23:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At48.job
[2012.04.10 02:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2012.04.10 02:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2012.04.10 03:56:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2012.04.10 03:56:00 | 000,000,356 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2012.03.17 04:00:59 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
 
========== Purity Check ==========
 
 
< End of report >

--- --- ---

19.04.2012, 15:29	#6
markusg /// Malware-holic	`Durch das Besuchen von Seiten mit infizierten Inhalten...wird ihr Windows geblockt.` ok, denn irgendwie sehe ich momentan noch nichts... __________________ --> `Durch das Besuchen von Seiten mit infizierten Inhalten...wird ihr Windows geblockt.`

`Durch das Besuchen von Seiten mit infizierten Inhalten...wird ihr Windows geblockt.`

Plagegeister aller Art und deren Bekämpfung: `Durch das Besuchen von Seiten mit infizierten Inhalten...wird ihr Windows geblockt.`