Guten Tag alle mit einander, ich habe gelesen das schon viele das Problem haben mit dem Trojaner die den Windows blokieren und habe das problem jetzt seit ein paar tagen bin jetzt im sicheren modus und habe mir den OTL geladen und das auch durch laufen lassen gleich im anhang die Daten. Wäre lieb wenn mir da jemand helfen könnte habe davon leider nicht viel ahnung.

lg schokolade93

Extras.Txt


OTL Extras logfile created on: 06.05.2012 12:18:45 - Run 1
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Dokumente und Einstellungen\Vivi\Eigene Dateien\Downloads
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1023,48 Mb Total Physical Memory | 532,37 Mb Available Physical Memory | 52,02% Memory free
1,28 Gb Paging File | 0,89 Gb Available in Paging File | 69,88% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 57,26 Gb Total Space | 45,93 Gb Free Space | 80,22% Space Free | Partition Type: NTFS

Computer Name: RANDI-U-VIVI | User Name: Vivi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_USERS\S-1-5-21-790525478-616249376-725345543-1008\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"1458:UDP" = 1458:UDP:*:Enabled:Windows Media Format SDK (iexplore.exe)
"1459:UDP" = 1459:UDP:*:Enabled:Windows Media Format SDK (iexplore.exe)
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\WINDOWS\system32\msmsgs.exe" = C:\WINDOWS\system32\msmsgs.exe:*:Disabled:msmsgs
"C:\WINDOWS\system32\w32usb2.exe" = C:\WINDOWS\system32\w32usb2.exe:*:Disabled:w32usb2
"C:\WINDOWS\system32\winitr32.exe" = C:\WINDOWS\system32\winitr32.exe:*:Disabled:winitr32
"C:\WINDOWS\system32\spykiller.exe" = C:\WINDOWS\system32\spykiller.exe:*:Disabled:spykiller
"C:\WINDOWS\system32\svxhost.exe" = C:\WINDOWS\system32\svxhost.exe:*:Disabled:svxhost
"C:\WINDOWS\system32\videosd32.exe" = C:\WINDOWS\system32\videosd32.exe:*:Disabled:videosd32
"C:\WINDOWS\system32\wind32.exe" = C:\WINDOWS\system32\wind32.exe:*:Disabled:wind32
"C:\Programme\Real\RealPlayer\realplay.exe" = C:\Programme\Real\RealPlayer\realplay.exe:*:Disabled:RealPlayer
"C:\Programme\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe" = C:\Programme\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater
"C:\Programme\HeliSquad\Heli Squad.exe" = C:\Programme\HeliSquad\Heli Squad.exe:*:Disabled:Heli Squad
"C:\Programme\FlightGear\bin\win32\fgfs.exe" = C:\Programme\FlightGear\bin\win32\fgfs.exe:*:Enabled:fgfs
"C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat" = C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat:*:Enabled:Die Schlacht um Mittelerde™ II
"C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Facebook\Video\Skype\FacebookVideoCalling.exe" = C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{32364CEA-7855-4A3C-B674-53D8E9B97936}" = TuneUp Utilities 2012
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU
"{8DC42D05-680B-41B0-8878-6C14D24602DB}" = QuickTime
"{90300407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Media Content
"{91130407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Small Business
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}" = Logitech Webcam Software
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE026CFE-73FE-4FED-9D5F-2C8D4DB512B0}" = TuneUp Utilities Language Pack (de-DE)
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"3Dfx InteractiveDeinstKey" = 3Dfx Interactive
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"AVS Media Player_is1" = AVS Media Player 4.1.7.92
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"AVS4YOU Video Converter 7_is1" = AVS Video Converter 8
"BabylonToolbar" = Babylon toolbar on IE
"CCleaner" = CCleaner
"Flatcast Viewer 5.3_is1" = Flatcast Viewer Plugin 5.3.0.784
"Flatcast_is1" = Flatcast Viewer Plugin 5.2.2.454
"Free YouTube to iPhone Converter_is1" = Free YouTube to iPhone Converter version 2.11.17.221
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.17.221
"ie8" = Windows Internet Explorer 8
"iexpedition" = Internet Expedition
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.61.0.1400
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"NVIDIA" = NVIDIA Windows 2000/XP Display Drivers
"PCI Audio Driver" = PCI Audio Driver
"TuneUp Utilities 2012" = TuneUp Utilities 2012
"ViewpointMediaPlayer" = Viewpoint Media Player (Remove Only)
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 2
"WinGimp-2.0_is1" = GIMP 2.6.12
"WinLiveSuite_Wave3" = Windows Live Essentials
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Zylom Games Player Plugin" = Zylom Games Player Plugin

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-790525478-616249376-725345543-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 05.05.2012 06:16:10 | Computer Name = RANDI-U-VIVI | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 05.05.2012 10:01:24 | Computer Name = RANDI-U-VIVI | Source = JavaQuickStarterService | ID = 1
Description =

Error - 05.05.2012 10:05:37 | Computer Name = RANDI-U-VIVI | Source = JavaQuickStarterService | ID = 1
Description =

Error - 06.05.2012 05:47:19 | Computer Name = RANDI-U-VIVI | Source = JavaQuickStarterService | ID = 1
Description =

Error - 06.05.2012 05:49:16 | Computer Name = RANDI-U-VIVI | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb979909,
P2 1031, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.

Error - 06.05.2012 05:51:06 | Computer Name = RANDI-U-VIVI | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb958481,
P2 1031, P3 1635, P4 msi, P5 f, P6 9.0.31211.0, P7 install, P8 x86, P9 xp, P10
0.

Error - 06.05.2012 05:51:24 | Computer Name = RANDI-U-VIVI | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb974417,
P2 1031, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.

Error - 06.05.2012 06:07:11 | Computer Name = RANDI-U-VIVI | Source = JavaQuickStarterService | ID = 1
Description =

Error - 06.05.2012 06:17:57 | Computer Name = RANDI-U-VIVI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung oneclick.exe, Version 12.0.3500.13, fehlgeschlagenes
Modul internet.bpl, Version 12.0.3500.13, Fehleradresse 0x0000308a.

Error - 06.05.2012 06:18:13 | Computer Name = RANDI-U-VIVI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung integrator.exe, Version 12.0.3500.13, fehlgeschlagenes
Modul internet.bpl, Version 12.0.3500.13, Fehleradresse 0x0000308a.

[ Application Events ]
Error - 05.05.2012 06:16:10 | Computer Name = RANDI-U-VIVI | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 05.05.2012 10:01:24 | Computer Name = RANDI-U-VIVI | Source = JavaQuickStarterService | ID = 1
Description =

Error - 05.05.2012 10:05:37 | Computer Name = RANDI-U-VIVI | Source = JavaQuickStarterService | ID = 1
Description =

Error - 06.05.2012 05:47:19 | Computer Name = RANDI-U-VIVI | Source = JavaQuickStarterService | ID = 1
Description =

Error - 06.05.2012 05:49:16 | Computer Name = RANDI-U-VIVI | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb979909,
P2 1031, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.

Error - 06.05.2012 05:51:06 | Computer Name = RANDI-U-VIVI | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb958481,
P2 1031, P3 1635, P4 msi, P5 f, P6 9.0.31211.0, P7 install, P8 x86, P9 xp, P10
0.

Error - 06.05.2012 05:51:24 | Computer Name = RANDI-U-VIVI | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb974417,
P2 1031, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.

Error - 06.05.2012 06:07:11 | Computer Name = RANDI-U-VIVI | Source = JavaQuickStarterService | ID = 1
Description =

Error - 06.05.2012 06:17:57 | Computer Name = RANDI-U-VIVI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung oneclick.exe, Version 12.0.3500.13, fehlgeschlagenes
Modul internet.bpl, Version 12.0.3500.13, Fehleradresse 0x0000308a.

Error - 06.05.2012 06:18:13 | Computer Name = RANDI-U-VIVI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung integrator.exe, Version 12.0.3500.13, fehlgeschlagenes
Modul internet.bpl, Version 12.0.3500.13, Fehleradresse 0x0000308a.

[ System Events ]
Error - 06.05.2012 06:07:12 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:12 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:12 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:12 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:12 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:12 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:18 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:19 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:20 | Computer Name = RANDI-U-VIVI | Source = Cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.

Error - 06.05.2012 06:07:22 | Computer Name = RANDI-U-VIVI | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Java Quick Starter" wurde mit folgendem dienstspezifischem
Fehler beendet: 1 (0x1).


< End of report >


OTL.Txt


OTL logfile created on: 06.05.2012 12:18:45 - Run 1
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Dokumente und Einstellungen\Vivi\Eigene Dateien\Downloads
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1023,48 Mb Total Physical Memory | 532,37 Mb Available Physical Memory | 52,02% Memory free
1,28 Gb Paging File | 0,89 Gb Available in Paging File | 69,88% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 57,26 Gb Total Space | 45,93 Gb Free Space | 80,22% Space Free | Partition Type: NTFS

Computer Name: RANDI-U-VIVI | User Name: Vivi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.05.06 12:17:21 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Vivi\Eigene Dateien\Downloads\OTL.exe
PRC - [2012.04.12 09:37:36 | 001,224,176 | ---- | M] (Google Inc.) -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\chrome.exe
PRC - [2012.04.05 12:34:26 | 001,529,152 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
PRC - [2012.04.05 12:34:26 | 001,220,928 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
PRC - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2009.10.07 01:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) -- C:\Programme\Gemeinsame Dateien\logishrd\LVMVFM\LVPrcSrv.exe
PRC - [2007.06.13 15:21:45 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2012.04.28 09:29:50 | 008,743,584 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\NPAPIFlash\gcswf32.dll
MOD - [2012.04.12 09:37:34 | 000,444,400 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\18.0.1025.162\ppgooglenaclpluginchrome.dll
MOD - [2012.04.12 09:37:33 | 003,915,248 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\18.0.1025.162\pdf.dll
MOD - [2012.04.12 09:36:08 | 000,122,880 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\18.0.1025.162\avutil-51.dll
MOD - [2012.04.12 09:36:06 | 000,220,672 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\18.0.1025.162\avformat-53.dll
MOD - [2012.04.12 09:36:05 | 001,747,456 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\18.0.1025.162\avcodec-53.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012.04.05 12:34:26 | 001,529,152 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.02.29 09:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2009.10.07 01:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2004.10.22 04:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2001.02.23 10:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\DRIVERS\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Programme\Softwin\BitDefender9\bdfdll.sys -- (bdfdll)
DRV - [2012.04.04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012.03.29 16:32:12 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2009.10.07 01:46:36 | 000,025,752 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2009.04.30 22:55:58 | 002,687,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LV302V32.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI)
DRV - [2004.08.03 23:08:22 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2002.11.13 16:47:16 | 000,168,390 | ---- | M] (T-Systems Nova GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WTOMCAT.sys -- (TOMCATWAN) T-Online DynamicISDN (WDM)
DRV - [2002.06.29 00:48:54 | 000,012,900 | ---- | M] (WayTech Development, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\kbfilter.sys -- (kbfilter)
DRV - [2001.12.19 11:42:52 | 000,022,256 | R--- | M] (Micro-Star International Co., Ltd) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\msiusbd.sys -- (AUSBD_FilterService)
DRV - [2001.12.19 11:42:28 | 000,034,256 | R--- | M] (Micro-Star International Co., Ltd) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\msiehcd.sys -- (ADPTEHCD)
DRV - [2001.12.10 18:25:22 | 000,357,070 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmaudio.sys -- (cmpci) C-Media PCI Audio Driver (WDM)
DRV - [2001.11.22 17:08:06 | 000,070,528 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\Fasttrak.sys -- (Fasttrak)
DRV - [2001.08.17 15:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
DRV - [2001.08.17 13:14:24 | 000,444,416 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\fpcibase.sys -- (fpcibase)
DRV - [2001.08.17 13:13:48 | 000,037,568 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\avmwan.sys -- (AVMWAN)
DRV - [2001.08.17 12:11:18 | 000,020,160 | ---- | M] (ADMtek Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ADM8511.SYS -- (ADM8511)
DRV - [1997.10.08 05:04:06 | 000,006,816 | ---- | M] (3Dfx Interactive, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\MAPMEM.SYS -- (MapMem)
DRV - [1997.10.08 05:04:06 | 000,006,336 | ---- | M] (3Dfx Interactive, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\NTREMAP.SYS -- (NTRemap)
DRV - [1997.10.08 05:04:06 | 000,004,832 | ---- | M] (3Dfx Interactive, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\GENPORT.SYS -- (GenPort)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://search.live.com/sphome.aspx
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.msn.com/?ocid=OIE8HP&PC=B8DF
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.live.com
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=110819&babsrc=HP_ss&mntrId=a42883ad000000000000000255310b2c
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=110819&babsrc=SP_ss&mntrId=a42883ad000000000000000255310b2c
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\..\SearchScopes\{0EE73472-52CB-43D0-9DD5-84DA1EDDF0B2}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=B8DFDF&pc=B8DF&src=IE-SearchBox
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=crm&q={searchTerms}&locale=&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=32701428-5C2E-4CCC-A7A6-784A62D1693C&apn_sauid=F924DE68-435A-4DFF-A4BF-5F3D70C7B35D
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2612669
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-21-790525478-616249376-725345543-1008\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll File not found
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Facebook\Video\Skype\npFacebookVideoCalling.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.111\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.111\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\@www.flatcast.com/FlatViewer 5.2: C:\DOKUME~1\Vivi\ANWEND~1\Mozilla\plugins\NpFv530.dll File not found


[2012.04.25 12:18:48 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Mozilla\Extensions

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFiel dTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms},
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\18.0.1025.162\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\18.0.1025.162\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Programme\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programme\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programme\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programme\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programme\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programme\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programme\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Programme\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programme\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\locked-.lsbi
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\locked-.nhnh
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\locked-.cmfy

O1 HOSTS File: ([2001.08.18 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx ()
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Programme\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKU\.DEFAULT..\Run: [Microsoft Update Machine] guard32.exe File not found
O4 - HKU\.DEFAULT..\Run: [MSChoExE] suge.exe File not found
O4 - HKU\.DEFAULT..\Run: [Personal Firwall] ptmedsrv.exe File not found
O4 - HKU\.DEFAULT..\Run: [SpyKiller AutoUpdate] spykiller.exe File not found
O4 - HKU\.DEFAULT..\Run: [SVX Control Service] svxhost.exe File not found
O4 - HKU\.DEFAULT..\Run: [System DMI] sysdmi.exe File not found
O4 - HKU\.DEFAULT..\Run: [Win32 Configuration] videosd32.exe File not found
O4 - HKU\.DEFAULT..\Run: [Win32 USB2 Driver] wind32.exe File not found
O4 - HKU\.DEFAULT..\Run: [Win32 USB2.0 Driver] w32usb2.exe File not found
O4 - HKU\.DEFAULT..\Run: [Win32 Wmls Driver] winitr32.exe File not found
O4 - HKU\.DEFAULT..\Run: [Window Monitor] winmon32.exe File not found
O4 - HKU\.DEFAULT..\Run: [Windows Messenger] msmsgs.exe File not found
O4 - HKU\.DEFAULT..\Run: [WindowsRegKey%update] ethernet32m.exe File not found
O4 - HKU\.DEFAULT..\Run: [wvsvc] wvsvc.exe File not found
O4 - HKU\S-1-5-18..\Run: [Microsoft Update Machine] guard32.exe File not found
O4 - HKU\S-1-5-18..\Run: [MSChoExE] suge.exe File not found
O4 - HKU\S-1-5-18..\Run: [Personal Firwall] ptmedsrv.exe File not found
O4 - HKU\S-1-5-18..\Run: [SpyKiller AutoUpdate] spykiller.exe File not found
O4 - HKU\S-1-5-18..\Run: [SVX Control Service] svxhost.exe File not found
O4 - HKU\S-1-5-18..\Run: [System DMI] sysdmi.exe File not found
O4 - HKU\S-1-5-18..\Run: [Win32 Configuration] videosd32.exe File not found
O4 - HKU\S-1-5-18..\Run: [Win32 USB2 Driver] wind32.exe File not found
O4 - HKU\S-1-5-18..\Run: [Win32 USB2.0 Driver] w32usb2.exe File not found
O4 - HKU\S-1-5-18..\Run: [Win32 Wmls Driver] winitr32.exe File not found
O4 - HKU\S-1-5-18..\Run: [Window Monitor] winmon32.exe File not found
O4 - HKU\S-1-5-18..\Run: [Windows Messenger] msmsgs.exe File not found
O4 - HKU\S-1-5-18..\Run: [WindowsRegKey%update] ethernet32m.exe File not found
O4 - HKU\S-1-5-18..\Run: [wvsvc] wvsvc.exe File not found
O4 - HKU\S-1-5-21-790525478-616249376-725345543-1008..\Run: [A42883AD] C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Bizrzrzrzrz\936BEF83A42883AD9473.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [SpyKiller AutoUpdate] spykiller.exe File not found
O4 - HKU\.DEFAULT..\RunOnce: [SVX Control Service] svxhost.exe File not found
O4 - HKU\.DEFAULT..\RunOnce: [Win32 Configuration] videosd32.exe File not found
O4 - HKU\.DEFAULT..\RunOnce: [Win32 USB2 Driver] wind32.exe File not found
O4 - HKU\.DEFAULT..\RunOnce: [Win32 USB2.0 Driver] w32usb2.exe File not found
O4 - HKU\.DEFAULT..\RunOnce: [Win32 Wmls Driver] winitr32.exe File not found
O4 - HKU\.DEFAULT..\RunOnce: [Windows Messenger] msmsgs.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [SpyKiller AutoUpdate] spykiller.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [SVX Control Service] svxhost.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [Win32 Configuration] videosd32.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [Win32 USB2 Driver] wind32.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [Win32 USB2.0 Driver] w32usb2.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [Win32 Wmls Driver] winitr32.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [Windows Messenger] msmsgs.exe File not found
O4 - HKLM..\RunServices: [SpyKiller AutoUpdate] spykiller.exe File not found
O4 - HKLM..\RunServices: [SVX Control Service] svxhost.exe File not found
O4 - HKLM..\RunServices: [Win32 USB2.0 Driver] w32usb2.exe File not found
O4 - HKLM..\RunServices: [Win32 Wmls Driver] winitr32.exe File not found
O4 - HKLM..\RunServices: [Window Monitor] winmon32.exe File not found
O4 - HKLM..\RunServices: [Windows Messenger] msmsgs.exe File not found
O4 - HKU\.DEFAULT..\RunServices: [Window Monitor] winmon32.exe File not found
O4 - HKU\S-1-5-18..\RunServices: [Window Monitor] winmon32.exe File not found
O4 - Startup: C:\Dokumente und Einstellungen\Vivi\Startmenü\Programme\Autostart\IMVU.lnk = C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\IMVUClient\locked-IMVUQualityAgent.exe.jfon ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-790525478-616249376-725345543-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Download with &Media Finder - C:\Programme\Media Finder\hook.html File not found
O8 - Extra context menu item: Free YouTube to iPhone Converter - C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetoiphoneconverter.htm File not found
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Dokumente und Einstellungen\Vivi\Startmenü\Programme\IMVU\Run IMVU.lnk ()
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://www.apple.com/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{298503BA-7E29-43B4-AEBF-B8A2E3EE4AB2}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{76C54631-E5A2-4416-A3C0-D05959217EB1}: DhcpNameServer = 192.168.0.100 192.168.0.1
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O27 - HKLM IFEO\taskmgr.exe: Debugger - P9KDMF.EXE File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2002.11.01 18:51:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012.05.06 12:17:06 | 000,031,552 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TURegOpt.exe
[2012.05.06 12:17:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TuneUp Utilities 2012
[2012.05.06 12:16:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\TuneUp Software
[2012.05.06 12:16:40 | 000,000,000 | ---D | C] -- C:\Programme\TuneUp Utilities 2012
[2012.05.06 12:16:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2012.05.06 12:16:19 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.05.06 12:16:19 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2012.05.06 11:53:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2012.05.05 10:07:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2012.05.05 10:07:47 | 000,000,000 | ---D | C] -- C:\Programme\MSBuild
[2012.05.05 10:07:22 | 000,000,000 | ---D | C] -- C:\Programme\Reference Assemblies
[2012.05.05 10:05:51 | 000,000,000 | ---D | C] -- C:\8796fdb00233484200943b57a774fcd4
[2012.05.04 13:30:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Malwarebytes
[2012.05.04 13:23:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\PCHealth
[2012.05.04 13:04:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office Live Add-in
[2012.05.04 13:02:46 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft CAPICOM 2.1.0.2
[2012.05.04 13:02:35 | 000,000,000 | ---D | C] -- C:\Programme\MSXML 6.0
[2012.05.04 12:55:58 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Vivi\Recent
[2012.05.04 10:49:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2012.05.04 10:49:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2012.05.04 10:49:19 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.05.04 10:49:19 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2012.05.03 19:58:43 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2012.05.03 19:58:43 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803$
[2012.05.03 19:58:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\Profiles
[2012.05.03 19:58:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe
[2012.05.03 19:58:03 | 000,000,000 | ---D | C] -- C:\Programme\Adobe
[2012.05.03 19:57:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Startmenü\Programme\AVS4YOU
[2012.05.03 19:57:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AVS4YOU
[2012.05.03 19:57:22 | 000,000,000 | ---D | C] -- C:\Programme\BabylonToolbar
[2012.05.03 19:57:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\BabylonToolbar
[2012.05.03 19:57:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DVDVideoSoft
[2012.05.03 19:57:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\DVDVideoSoftIEHelpers
[2012.05.03 19:57:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\GIMP
[2012.05.03 19:56:47 | 000,000,000 | ---D | C] -- C:\Programme\GIMP-2.0
[2012.05.03 19:56:43 | 000,000,000 | ---D | C] -- C:\Programme\Java
[2012.05.03 19:56:36 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java
[2012.05.03 19:56:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Logitech
[2012.05.03 08:29:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Bizrzrzrzrz
[2012.04.25 12:18:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Media Finder
[2012.04.25 12:18:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Media Finder
[2012.04.25 12:18:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Babylon
[2012.04.25 12:18:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2012.04.25 12:18:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Babylon
[2012.04.23 19:55:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Mozilla
[2012.04.23 15:11:16 | 000,000,000 | ---D | C] -- C:\Programme\Project64 1.6
[2012.04.15 16:24:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\LogiShrd
[2012.04.15 16:24:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Leadertech
[2012.04.15 16:23:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LogiShrd
[2012.04.15 16:23:28 | 000,000,000 | ---D | C] -- C:\Programme\Logitech
[2012.04.15 16:19:47 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\logishrd
[2012.04.14 16:27:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Vivi\Lokale Einstellungen\Anwendungsdaten\Facebook
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.05.06 12:22:00 | 000,000,412 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{2A01A7E7-CB6C-40F4-9549-CA7848F89CE8}.job
[2012.05.06 12:17:03 | 000,001,711 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\TuneUp 1-Klick-Wartung.lnk
[2012.05.06 12:17:03 | 000,001,707 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\TuneUp Utilities 2012.lnk
[2012.05.06 12:07:39 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.05.06 12:06:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.05.06 11:48:00 | 000,001,206 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-790525478-616249376-725345543-1008UA.job
[2012.05.05 22:32:00 | 000,001,014 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-790525478-616249376-725345543-1008UA.job
[2012.05.05 16:32:00 | 000,000,992 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-790525478-616249376-725345543-1008Core.job
[2012.05.05 16:02:06 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.05.05 16:01:04 | 000,174,672 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.05.05 12:48:00 | 000,001,154 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-790525478-616249376-725345543-1008Core.job
[2012.05.05 10:09:25 | 000,390,410 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.05.05 10:09:25 | 000,377,112 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.05.05 10:09:25 | 000,071,506 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.05.05 10:09:25 | 000,060,112 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.05.04 13:28:56 | 000,034,308 | ---- | M] () -- C:\WINDOWS\System32\BASSMOD.dll
[2012.05.04 13:03:19 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.05.04 10:49:22 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.05.03 20:04:29 | 000,000,981 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Startmenü\Programme\Autostart\IMVU.lnk
[2012.05.03 08:33:11 | 000,001,491 | ---- | M] () -- C:\locked-user.js.gpuv
[2012.05.03 08:30:30 | 000,024,576 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\locked-ESBK.mb.kypm
[2012.05.03 08:30:30 | 000,007,168 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\locked-ESBK.mbb.dfon
[2012.05.03 08:28:14 | 000,106,496 | -H-- | M] () -- C:\WINDOWS\System32\7ACB7737A42883AD81E3.exe
[2012.04.30 17:29:50 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh321
[2012.04.30 17:29:30 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh320
[2012.04.30 17:28:00 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh323
[2012.04.30 17:26:42 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh322
[2012.04.30 14:58:04 | 000,003,065 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Desktop\vba.ini
[2012.04.27 09:21:44 | 000,002,243 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2012.04.26 18:38:10 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh325
[2012.04.26 18:37:48 | 000,481,078 | ---- | M] () -- C:\WINDOWS\System32\winsh324
[2012.04.23 19:55:35 | 000,715,038 | ---- | M] () -- C:\WINDOWS\unins001.exe
[2012.04.19 21:06:25 | 000,000,780 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\GIMP 2.lnk
[2012.04.15 21:55:47 | 000,002,357 | ---- | M] () -- C:\Dokumente und Einstellungen\Vivi\Desktop\Google Chrome.lnk
[2012.04.15 16:23:45 | 000,001,840 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Logitech-Webkamera-Software.lnk
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.05.06 12:17:03 | 000,001,711 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\TuneUp 1-Klick-Wartung.lnk
[2012.05.06 12:17:03 | 000,001,707 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\TuneUp Utilities 2012.lnk
[2012.05.06 12:17:02 | 000,001,713 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TuneUp Utilities 2012.lnk
[2012.05.05 10:09:10 | 000,115,928 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2012.05.04 13:28:56 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2012.05.04 12:57:15 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2012.05.04 10:49:22 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.05.03 11:06:39 | 000,174,672 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.05.03 08:29:16 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh325
[2012.05.03 08:29:16 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh324
[2012.05.03 08:29:16 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh323
[2012.05.03 08:29:16 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh322
[2012.05.03 08:29:16 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh321
[2012.05.03 08:29:16 | 000,481,078 | ---- | C] () -- C:\WINDOWS\System32\winsh320
[2012.05.03 08:28:14 | 000,106,496 | -H-- | C] () -- C:\WINDOWS\System32\7ACB7737A42883AD81E3.exe
[2012.04.25 12:19:08 | 000,001,491 | ---- | C] () -- C:\locked-user.js.gpuv
[2012.04.23 19:55:40 | 000,715,038 | ---- | C] () -- C:\WINDOWS\unins001.exe
[2012.04.19 21:06:25 | 000,000,780 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\GIMP 2.lnk
[2012.04.15 16:23:45 | 000,001,840 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Logitech-Webkamera-Software.lnk
[2012.04.14 16:27:13 | 000,001,014 | ---- | C] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-790525478-616249376-725345543-1008UA.job
[2012.04.14 16:27:13 | 000,000,992 | ---- | C] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-790525478-616249376-725345543-1008Core.job
[2012.04.12 13:14:40 | 000,003,065 | ---- | C] () -- C:\Dokumente und Einstellungen\Vivi\Desktop\vba.ini
[2012.03.17 15:07:38 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.03.09 17:07:18 | 000,695,578 | ---- | C] () -- C:\WINDOWS\unins000.exe
[2012.03.02 21:27:03 | 000,002,560 | ---- | C] () -- C:\WINDOWS\_MSRSTRT.EXE

========== LOP Check ==========

[2012.05.04 10:12:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\ad\Anwendungsdaten\BabylonToolbar
[2012.05.04 10:41:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\ad\Anwendungsdaten\PriceGong
[2012.04.25 12:18:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2012.05.06 12:16:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2006.06.29 19:46:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ScanSoft
[2012.03.02 21:26:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online
[2004.06.08 10:18:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online_ZusatzSoftware
[2012.05.06 12:17:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2012.04.04 16:47:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom
[2012.05.06 12:16:19 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.05.03 08:30:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Canon
[2012.05.03 19:58:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\InterTrust
[2003.06.14 13:20:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\ScanSoft
[2003.08.04 21:21:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\T-Online
[2004.07.29 16:37:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\ttoe
[2012.05.03 08:31:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Babylon
[2012.05.03 19:57:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\BabylonToolbar
[2012.05.03 08:29:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Bizrzrzrzrz
[2012.05.03 19:57:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\DVDVideoSoft
[2012.05.03 19:57:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\DVDVideoSoftIEHelpers
[2012.05.03 08:31:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Flatcast
[2012.05.03 08:31:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\IMVU
[2012.05.03 08:31:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\IMVUClient
[2012.04.15 16:24:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Leadertech
[2012.04.25 12:22:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\Media Finder
[2012.04.27 21:07:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\PriceGong
[2012.05.06 12:16:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Vivi\Anwendungsdaten\TuneUp Software
[2012.05.05 16:32:00 | 000,000,992 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-790525478-616249376-725345543-1008Core.job
[2012.05.05 22:32:00 | 000,001,014 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-790525478-616249376-725345543-1008UA.job
[2012.05.06 12:22:00 | 000,000,412 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{2A01A7E7-CB6C-40F4-9549-CA7848F89CE8}.job

========== Purity Check ==========



< End of report >

Funktioniert noch der abgesicherte Modus mit Netzwerktreibern? Mit Internetverbindung?



Abgesicherter Modus zur Bereinigung

• Windows mit F8-Taste beim Start in den abgesicherten Modus bringen.
• Starte den Rechner in den abgesicherten Modus mit Netzwerktreibern:
  
  

Hallo,danke für deine Antwort abgesicherter modus nimmt der nur mit der windows cd, im moment bekomme ich auch normal wieder zugriff auf meinen pc durch abgesicherten modus habe ich jetzt tune up und malwarebytes Anti-Malware drauf dadurch kommt die anzeige jetzt nicht mehr aber weiß nicht ob der trojaner noch drauf ist.
kannst du mir sagen wie ich das raus finde?
lg schokolade93

Hallo,danke für deine Antwort abgesicherter modus nimmt der nur mit der windows cd,

Versteh ich nicht! Den abgesicherten Modus startet man nicht über die Windows-CD!
Und wieso soll jetzt der abgesicherte Modus wieder einfach so funktioniert?
Sry das klingt echt nicht nachvollziehbar

kannst du mir sagen wie ich das raus finde?

Du möchtest erstmal die Logs von Malwarebytes posten und diesen Schrott TunUp hättest du besser mal sein gelassen