Weißer Bildschirm "Please wait while the connection is beeing established"

Sheso

Hier ist die log Datei, vielen Dank für die Hilfe!
OTL logfile created on: 6/8/2012 11:20:16 AM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

894.00 Mb Total Physical Memory | 686.00 Mb Available Physical Memory | 77.00% Memory free
806.00 Mb Paging File | 717.00 Mb Available in Paging File | 89.00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 86.04 Gb Total Space | 3.78 Gb Free Space | 4.40% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet003

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto] -- -- (SENS)
SRV - File not found [Disabled] -- -- (HidServ)
SRV - File not found [On_Demand] -- -- (AppMgmt)
SRV - [2012/01/31 03:56:05 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012/01/31 03:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/05/25 08:06:20 | 000,037,664 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009/10/06 19:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2007/06/11 04:14:52 | 000,517,040 | ---- | M] ( ) [Auto] -- C:\WINDOWS\System32\lxdicoms.exe -- (lxdi_device)
SRV - [2007/06/11 04:14:42 | 000,099,248 | ---- | M] () [Auto] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdiserv.exe -- (lxdiCATSCustConnectService)
SRV - [2006/01/20 05:20:00 | 000,073,728 | ---- | M] (Hewlett-Packard Company) [Auto] -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2003/07/28 06:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [File_System | Boot] -- -- (Lbd)
DRV - File not found [Kernel | On_Demand] -- -- (Lavasoft Kernexplorer)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand] -- -- (hwdatacard)
DRV - File not found [Kernel | On_Demand] -- -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand] -- -- (ewusbnet)
DRV - File not found [Kernel | On_Demand] -- -- (ew_hwusbdev)
DRV - File not found [Kernel | On_Demand] -- -- (cpuz132)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2012/01/31 03:56:33 | 000,137,416 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012/01/31 03:56:33 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011/09/16 11:08:07 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2009/10/08 11:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/10/07 04:49:50 | 000,023,832 | R--- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lvuvcflt.sys -- (FilterService)
DRV - [2009/10/07 04:49:38 | 006,756,632 | R--- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lvuvc.sys -- (LVUVC) Logitech Webcam 250(UVC)
DRV - [2009/10/07 04:47:55 | 000,266,008 | R--- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lvrs.sys -- (LVRS)
DRV - [2009/10/07 04:46:12 | 000,114,712 | R--- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lvpopflt.sys -- (lvpopflt)
DRV - [2009/10/06 19:46:36 | 000,025,752 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2009/02/09 04:42:42 | 000,099,968 | ---- | M] (Guillemot Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\hxctlflt.sys -- (hxctlflt)
DRV - [2008/02/27 09:27:38 | 000,098,432 | ---- | M] (Guillemot Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\camfilt2.sys -- (camfilt2)
DRV - [2007/09/10 03:50:56 | 000,457,984 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\PAC7302.SYS -- (PAC7302)
DRV - [2006/06/29 00:13:08 | 001,160,320 | R--- | M] (Agere Systems) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2006/04/06 01:20:44 | 004,258,816 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/03/29 06:59:12 | 000,027,648 | ---- | M] (Samsung Electronics,.LTD) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SamsungEDS.SYS -- (DNSeFilter)
DRV - [2006/03/28 10:50:14 | 001,522,688 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006/01/18 05:41:58 | 000,080,512 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006/01/15 22:15:24 | 000,470,112 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SSB2413.sys -- (SSB2413)
DRV - [2005/11/30 08:44:56 | 000,010,368 | ---- | M] (Cyberlink Co.,Ltd.) [Kernel | Boot] -- C:\WINDOWS\System32\drivers\BsStor.sys -- (BsStor)
DRV - [2005/11/16 14:28:32 | 000,028,928 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005/11/01 12:08:00 | 000,308,992 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005/11/01 11:54:50 | 000,051,584 | ---- | M] (REDC) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2004/08/03 17:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C)
DRV - [2000/08/23 19:19:38 | 000,004,300 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\MEMIO.SYS -- (DOSMEMIO)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:57030

IE - HKU\Eso_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 49273
FF - prefs.js..network.proxy.type: 4


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/03/17 22:48:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011/07/23 22:31:29 | 000,000,000 | ---D | M]

[2010/07/27 16:57:45 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\mozilla\Extensions
[2011/12/28 10:27:37 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\mozilla\Firefox\Profiles\r67sg7gi.default\extensions
[2010/08/20 02:02:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\mozilla\Firefox\Profiles\r67sg7gi.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/12/28 10:27:37 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\mozilla\Firefox\Profiles\r67sg7gi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012/01/20 23:37:00 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
File not found (No name found) --
[2012/03/17 22:48:15 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011/10/03 00:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2011/10/04 12:51:35 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011/10/04 12:51:35 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2011/10/04 12:51:35 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2011/10/04 12:51:35 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2011/10/04 12:51:35 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2011/10/04 12:51:35 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

Hosts file not found
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [7Rxb5FismTZydeX] C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe (lyqU)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ATICCC] C:\Programme\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BatteryManager] C:\Programme\Samsung\Samsung Battery Manager\BatteryManager.exe ()
O4 - HKLM..\Run: [DisplayManager] C:\Programme\Samsung\DisplayManager\DisplayManager.exe (SAMSUNG ELECTRONICS)
O4 - HKLM..\Run: [DMHotKey] C:\Programme\Samsung\DisplayManager\DMLoader.exe (SAMSUNG)
O4 - HKLM..\Run: [EDS] C:\Programme\Samsung\Samsung EDS\EDSAgent.exe ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Programme\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [lxdiamon] C:\Programme\Lexmark 3500-4500 Series\lxdiamon.exe ()
O4 - HKLM..\Run: [lxdimon.exe] C:\Programme\Lexmark 3500-4500 Series\lxdimon.exe ()
O4 - HKLM..\Run: [MagicKeyboard] C:\Programme\Samsung\MagicKBD\PreMKbd.exe ()
O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [UpdatePDRShortCut] C:\Programme\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKU\.DEFAULT..\Run: [5ytw.exe] File not found
O4 - HKU\.DEFAULT..\Run: [CTFMON.EXE] File not found
O4 - HKU\.DEFAULT..\Run: [cxlacuxatx.exe] File not found
O4 - HKU\Eso_ON_C..\Run: [{19370822-9492-A938-B4E6-37FE5E6DE45C}] File not found
O4 - HKU\Eso_ON_C..\Run: [{2320191B-42A9-B248-705B-2C822414A0BB}] File not found
O4 - HKU\Eso_ON_C..\Run: [5ytw.exe] File not found
O4 - HKU\Eso_ON_C..\Run: [7Rxb5FismTZydeX] C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe (lyqU)
O4 - HKU\Eso_ON_C..\Run: [Crtuser] File not found
O4 - HKU\Eso_ON_C..\Run: [CTFMON.EXE] File not found
O4 - HKU\Eso_ON_C..\Run: [cxlacuxatx.exe] File not found
O4 - HKU\Eso_ON_C..\Run: [SkypeM] File not found
O4 - HKU\LocalService_ON_C..\Run: [CTFMON.EXE] File not found
O4 - HKU\LocalService_ON_C..\Run: [cxlacuxatx.exe] File not found
O4 - HKU\NetworkService_ON_C..\Run: [CTFMON.EXE] File not found
O4 - Startup: C:\Dokumente und Einstellungen\Eso\Startmenü\Programme\Autostart\ctfmon.lnk = X:\I386\SYSTEM32\RUNDLL32.EXE (Microsoft Corporation)
F3 - HKU\.DEFAULT WinNT: Load - (C:\WINDOWS\TEMP\csrss.exe) - File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: 41901 = C:\DOKUME~1\ALLUSE~1\LOCALS~1\Temp\msdubm.cmd
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Eso_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Eso_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
O7 - HKU\Eso_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\43EFC0.exe
O7 - HKU\Eso_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\Eso_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Open Picture in &Microsoft PhotoDraw - C:\Programme\Microsoft Office\Office\1033\PHDINTL.DLL (Microsoft Corporation)
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab (Bitdefender QuickScan Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe) - C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe (lyqU)
O20 - HKLM Winlogon: UserInit - (C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe) - C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe (lyqU)
O20 - HKU\Eso_ON_C Winlogon: Shell - (C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe) - C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe (lyqU)
O20 - HKU\Eso_ON_C Winlogon: UserInit - (C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe) - C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe (lyqU)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper:
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/07/27 16:07:02 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{ac09a96e-b4fc-11e0-b1b6-0016e396fc26}\Shell - "" = AutoRun
O33 - MountPoints2\{ac09a96e-b4fc-11e0-b1b6-0016e396fc26}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{ac09a96e-b4fc-11e0-b1b6-0016e396fc26}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{ac09a972-b4fc-11e0-b1b6-00137730b7ed}\Shell - "" = AutoRun
O33 - MountPoints2\{ac09a972-b4fc-11e0-b1b6-00137730b7ed}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{ac09a972-b4fc-11e0-b1b6-00137730b7ed}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: qwinonce - (C:\WINDOWS\system32\lpqinst.dll) - File not found
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/03/19 02:59:17 | 000,294,912 | ---- | C] (lyqU) -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\k8rdift659c.exe
[2011/07/12 06:35:10 | 000,356,352 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiinpa.dll
[2011/07/12 06:35:10 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiiesc.dll
[2011/07/12 06:35:10 | 000,311,296 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihcp.dll
[2011/07/12 06:35:08 | 000,942,080 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiusb1.dll
[2011/07/12 06:35:07 | 001,187,840 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiserv.dll
[2011/07/12 06:35:06 | 000,614,400 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipmui.dll
[2011/07/12 06:35:06 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiprox.dll
[2011/07/12 06:35:06 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipplc.dll
[2011/07/12 06:35:04 | 000,532,480 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdilmpm.dll
[2011/07/12 06:35:02 | 000,320,432 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiih.exe
[2011/07/12 06:34:59 | 000,671,744 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihbn3.dll
[2011/07/12 06:34:56 | 000,765,952 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomc.dll
[2011/07/12 06:34:56 | 000,517,040 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicoms.exe
[2011/07/12 06:34:56 | 000,360,448 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomm.dll
[2011/07/12 06:34:55 | 000,340,912 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicfg.exe
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/06/07 21:50:22 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/06/07 21:50:19 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/03/13 11:07:47 | 000,000,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\43EFC0.dat
[2012/02/15 08:17:51 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/12/17 15:43:24 | 076,004,920 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\niwmis2323.dat
[2011/08/08 09:26:32 | 000,000,129 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2011/07/12 06:38:37 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdivs.dll
[2011/07/12 06:38:30 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\lxdicoin.dll
[2011/07/12 06:36:55 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdidrs.dll
[2011/07/12 06:36:55 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdicnv4.dll
[2011/07/12 06:36:55 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxdicaps.dll
[2011/07/12 06:35:11 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\lxdiinst.dll
[2011/07/12 06:34:59 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdigrd.dll
[2011/05/06 17:57:49 | 000,000,064 | ---- | C] () -- C:\WINDOWS\System32\rp_stats.dat
[2011/05/06 17:57:49 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\rp_rules.dat
[2011/01/23 17:56:00 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\test.dll
[2010/09/15 23:56:38 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/09/12 07:57:19 | 000,000,001 | R--- | C] () -- C:\Dokumente und Einstellungen\Eso\serverport
[2010/08/25 12:43:48 | 000,000,190 | ---- | C] () -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\default.rss
[2010/08/25 12:37:24 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/08/25 09:25:03 | 000,000,163 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
[2010/08/25 08:17:36 | 000,000,002 | -HS- | C] () -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\.zreglib
[2010/08/05 14:12:26 | 000,082,289 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2010/07/28 05:59:27 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/07/27 17:35:23 | 000,196,608 | ---- | C] () -- C:\Dokumente und Einstellungen\Eso\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/27 17:09:08 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/07/27 16:57:39 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/07/27 16:56:32 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/07/27 16:55:09 | 000,588,592 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/07/27 16:46:31 | 000,000,566 | ---- | C] () -- C:\WINDOWS\System32\SP7302.INI
[2010/07/27 16:44:05 | 000,000,135 | R--- | C] () -- C:\WINDOWS\System32\lngEng.ini
[2010/07/27 16:44:05 | 000,000,117 | ---- | C] () -- C:\WINDOWS\System32\lngKor.ini
[2010/07/27 16:33:04 | 000,001,697 | ---- | C] () -- C:\WINDOWS\System32\MagicKBD.INI
[2010/07/27 16:33:04 | 000,001,697 | ---- | C] () -- C:\WINDOWS\System32\Eso_KBD.ini
[2010/07/27 16:33:02 | 000,004,300 | ---- | C] () -- C:\WINDOWS\System32\MEMIO.SYS
[2010/07/27 16:33:02 | 000,003,425 | ---- | C] () -- C:\WINDOWS\System32\KBDR.INI
[2010/07/27 16:33:02 | 000,002,741 | ---- | C] () -- C:\WINDOWS\System32\KBDD.INI
[2010/07/27 16:33:02 | 000,002,699 | ---- | C] () -- C:\WINDOWS\System32\KBDO.INI
[2010/07/27 16:33:02 | 000,002,699 | ---- | C] () -- C:\WINDOWS\System32\KBDC.INI
[2010/07/27 16:33:02 | 000,002,606 | ---- | C] () -- C:\WINDOWS\System32\KBDB.INI
[2010/07/27 16:33:02 | 000,002,236 | ---- | C] () -- C:\WINDOWS\System32\KBDQ.INI
[2010/07/27 16:33:02 | 000,001,956 | ---- | C] () -- C:\WINDOWS\System32\KBDE.INI
[2010/07/27 16:33:02 | 000,001,885 | ---- | C] () -- C:\WINDOWS\System32\KBDP.INI
[2010/07/27 16:33:02 | 000,001,857 | ---- | C] () -- C:\WINDOWS\System32\KBDUU.INI
[2010/07/27 16:33:02 | 000,001,835 | ---- | C] () -- C:\WINDOWS\System32\KBDG.INI
[2010/07/27 16:33:02 | 000,001,835 | ---- | C] () -- C:\WINDOWS\System32\KBDA.INI
[2010/07/27 16:33:02 | 000,001,834 | ---- | C] () -- C:\WINDOWS\System32\KBDU.INI
[2010/07/27 16:33:02 | 000,001,819 | ---- | C] () -- C:\WINDOWS\System32\KBDN.INI
[2010/07/27 16:33:02 | 000,001,699 | ---- | C] () -- C:\WINDOWS\System32\KBDT.INI
[2010/07/27 16:33:02 | 000,001,697 | ---- | C] () -- C:\WINDOWS\System32\KBDV.INI
[2010/07/27 16:33:02 | 000,001,522 | ---- | C] () -- C:\WINDOWS\System32\KBDS.INI
[2010/07/27 16:33:02 | 000,001,476 | ---- | C] () -- C:\WINDOWS\System32\KBDF.INI
[2010/07/27 16:27:07 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2010/07/27 16:25:40 | 000,274,432 | ---- | C] () -- C:\WINDOWS\System32\MagicQ.exe
[2010/07/27 16:25:40 | 000,249,856 | ---- | C] () -- C:\WINDOWS\System32\WLANUpdate.exe
[2010/07/27 16:25:40 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\mdslmmax.exe
[2010/07/27 16:25:40 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\RemoveWLAN.exe
[2010/07/27 16:25:40 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\ACUClose.exe
[2010/07/27 16:24:51 | 000,000,860 | R--- | C] () -- C:\WINDOWS\System32\drivers\HDACfg.dat
[2010/07/27 16:24:47 | 000,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2010/07/27 16:24:47 | 000,040,960 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010/07/27 16:22:14 | 000,000,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Eso\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2010/07/27 16:17:50 | 000,121,995 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2010/07/27 16:09:33 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/07/27 16:03:56 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/10/06 19:46:36 | 000,025,752 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2009/10/06 19:23:08 | 000,013,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\iKeyLFT2.dll
[2004/08/04 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/04 08:00:00 | 000,463,382 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004/08/04 08:00:00 | 000,444,848 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/04 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/04 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004/08/04 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/04 08:00:00 | 000,086,226 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004/08/04 08:00:00 | 000,072,724 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/04 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/04 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004/08/04 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/04 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/04 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/04 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003/02/20 11:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001/08/31 01:32:24 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/31 01:30:56 | 000,004,486 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/07/31 04:17:12 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHEALR.DLL

========== LOP Check ==========

[2011/05/01 11:28:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\BitTorrent
[2011/01/17 00:10:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\D3dpack
[2010/07/28 07:56:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Docx2Rtf
[2011/01/07 23:45:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Epema
[2011/01/17 01:57:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Etomi
[2011/01/07 14:46:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Ixugte
[2010/08/05 14:13:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Leadertech
[2011/09/20 12:10:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Lexmark Productivity Studio
[2011/01/19 09:43:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Mouwg
[2010/10/14 16:45:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Musicmatch
[2010/07/28 07:56:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\NwDocx
[2010/11/30 09:35:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Publish Providers
[2012/03/12 00:25:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\QuickScan
[2010/11/30 09:35:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Sony
[2011/07/23 20:11:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Telefónica
[2010/10/10 07:21:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\UDC Profiles
[2011/02/10 10:07:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Uniblue
[2010/10/05 07:28:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Eso\Anwendungsdaten\Xilisoft
[2010/08/04 17:22:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Driver Whiz
[2010/08/25 09:25:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Elaborate Bytes
[2010/10/17 09:15:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft
[2010/12/28 10:08:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp
[2011/07/23 22:33:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/03/16 14:17:00 | 000,000,484 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 110 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp:888AFB86
< End of report >