Ich letzten ganz normal im internet gesurft und auf einmal war bildschirm nur mehr weiß und es steht "Es konnte keine Verbindung zu dieser website hergestellt werden". Bitte um Hilfe ich weiß nicht mehr weiter :-(

Mit einem sauberen 2. Rechner eine OTLPE-CD erstellen und den infizierten Rechner dann von dieser CD booten:

Falls Du kein Brennprogramm installiert hast, lade dir bitte ISOBurner herunter. Das Programm wird Dir erlauben, OTLPE auf eine CD zu brennen und sie bootfähig zu machen. Du brauchst das Tool nur zu installieren, der Rest läuft automatisch => Wie brenne ich eine ISO Datei auf CD/DVD.


Lade OTLPENet.exe von OldTimer herunter und speichere sie auf Deinem Desktop. Anmerkung: Die Datei ist ca. 120 MB groß und es wird bei langsamer Internet-Verbindung ein wenig dauern, bis Du sie runtergeladen hast.

• Wenn der Download fertig ist, mache einen Doppelklick auf die Datei und beantworte die Frage "Do you want to burn the CD?" mit Yes.
• Lege eine leere CD in Deinen Brenner.
• ImgBurn (oder Dein Brennprogramm) wird das Archiv extrahieren und OTLPE Network auf die CD brennen.
• Wenn der Brenn-Vorgang abgeschlossen ist, wirst Du eine Dialogbox sehen => "Operation successfully completed".
• Du kannst nun die Fenster des Brennprogramms schließen.

Nun boote von der OTLPE CD. Hinweis: Wie boote ich von CD


Bebilderte Anleitung: OTLpe-Scan

• Dein System sollte nach einigen Minuten den REATOGO-X-PE Desktop anzeigen.
• Mache einen Doppelklick auf das OTLPE Icon.
• Hinweis: Damit OTLPE auch das richtige installierte Windows scant, musst du den Windows-Ordner des auf der Platte installierten Windows auswählen, einfach nur C: auswählen gibt einen Fehler!
• Wenn Du gefragt wirst "Do you wish to load the remote registry", dann wähle Yes.
• Wenn Du gefragt wirst "Do you wish to load remote user profile(s) for scanning", dann wähle Yes.
• Vergewissere Dich, dass die Box "Automatically Load All Remaining Users" gewählt ist und drücke OK.
• OTLpe sollte nun starten.
• Drücke Run Scan, um den Scan zu starten.
• Wenn der Scan fertig ist, werden die Dateien C:\OTL.Txt und C:\Extras.Txt erstellt
• Kopiere diese Datei auf Deinen USB-Stick, wenn Du keine Internetverbindung auf diesem System hast.
• Bitte poste den Inhalt von C:\OTL.txt und Extras.txt.

So. Ich hab das jetzt laut anleitung gemacht und das ist die OTL.txt:
OTL Logfile:

OTL logfile created on: 9/10/2012 5:11:24 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
64bit-Windows 7 Home Premium Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000c07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 90.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = E: | %SystemRoot% = E:\Windows | %ProgramFiles% = E:\Program Files (x86)
Drive C: | 100.00 Mb Total Space | 64.77 Mb Free Space | 64.77% Space Free | Partition Type: NTFS
Drive D: | 931.51 Gb Total Space | 0.17 Gb Free Space | 0.02% Space Free | Partition Type: NTFS
Drive E: | 698.54 Gb Total Space | 55.43 Gb Free Space | 7.93% Space Free | Partition Type: NTFS
Drive G: | 1011.88 Mb Total Space | 811.00 Mb Free Space | 80.15% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand] -- E:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2007/03/08 00:21:50 | 000,566,704 | ---- | M] ( ) [Disabled] -- E:\Windows\System32\lxcecoms.exe -- (lxce_device)
SRV - [2012/09/05 15:59:28 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand] -- E:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/08/15 07:58:19 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [Disabled] -- E:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/07/04 11:25:54 | 005,160,568 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- E:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2012/07/03 07:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto] -- E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/05/15 06:48:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Disabled] -- E:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/05/14 20:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Disabled] -- E:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012/02/29 02:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Disabled] -- E:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/02/13 22:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- E:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2012/01/10 14:22:59 | 000,107,832 | ---- | M] () [Auto] -- E:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2012/01/10 14:22:48 | 000,066,872 | ---- | M] () [Auto] -- E:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011/12/09 13:06:13 | 002,983,808 | ---- | M] (TeamViewer GmbH) [Disabled] -- E:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2011/02/13 22:35:46 | 000,271,360 | ---- | M] (hxxp://www.PEEPLEware.com) [Disabled] -- E:\Program Files (x86)\RemoteX\RemoteX.exe -- (__RemoteX__)
SRV - [2010/05/04 06:07:22 | 000,503,080 | ---- | M] (Nero AG) [Disabled] -- E:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86)
SRV - [2010/03/18 08:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- E:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/04 01:35:54 | 001,632,776 | ---- | M] (M-Audio) [Disabled] -- E:\Program Files (x86)\M-Audio\Oxygen\AudioDevMon.exe -- (OxygenAudioDevMon)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled] -- E:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007/03/08 00:21:18 | 000,537,520 | ---- | M] ( ) [Disabled] -- E:\Windows\SysWow64\lxcecoms.exe -- (lxce_device)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012/07/03 07:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand] -- E:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012/04/18 22:50:26 | 000,028,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot] -- E:\Windows\System32\drivers\avgidsha.sys -- (AVGIDSHA)
DRV:64bit: - [2012/04/18 13:08:03 | 000,188,736 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2012/03/18 23:17:26 | 000,383,808 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- E:\Windows\System32\drivers\avgtdia.sys -- (Avgtdia)
DRV:64bit: - [2012/02/21 23:25:32 | 000,289,872 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- E:\Windows\System32\drivers\avgldx64.sys -- (Avgldx64)
DRV:64bit: - [2012/02/15 05:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/01/30 22:46:48 | 000,036,944 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot] -- E:\Windows\System32\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:64bit: - [2011/12/23 07:32:14 | 000,047,696 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System] -- E:\Windows\System32\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:64bit: - [2011/12/23 07:32:04 | 000,029,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand] -- E:\Windows\System32\drivers\avgidsfiltera.sys -- (AVGIDSFilter)
DRV:64bit: - [2011/12/23 07:31:58 | 000,124,496 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand] -- E:\Windows\System32\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
DRV:64bit: - [2011/12/15 20:46:15 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- E:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011/12/06 19:31:40 | 000,575,488 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\netr7364.sys -- (netr7364)
DRV:64bit: - [2011/11/02 13:57:44 | 000,270,912 | ---- | M] (DT Soft Ltd) [Kernel | System] -- E:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011/08/02 12:38:44 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\netaapl64.sys -- (Netaapl)
DRV:64bit: - [2011/07/26 20:19:14 | 000,021,504 | ---- | M] (Sagatek Co. Ltd.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\MO4Driver.sys -- (SSMO4Filter)
DRV:64bit: - [2010/11/20 23:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 23:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- E:\Windows\system32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/11/20 09:34:04 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System] -- E:\Windows\System32\drivers\vpcvmm.sys -- (vpcvmm)
DRV:64bit: - [2010/11/20 09:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\vpchbus.sys -- (vpcbus)
DRV:64bit: - [2010/11/20 07:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\vpcusb.sys -- (vpcusb)
DRV:64bit: - [2010/11/20 07:35:22 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System] -- E:\Windows\System32\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV:64bit: - [2010/11/09 09:35:24 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto] -- E:\Windows\System32\drivers\cpuz135_x64.sys -- (cpuz135)
DRV:64bit: - [2010/08/11 09:18:24 | 000,012,800 | ---- | M] () [Kernel | On_Demand] -- E:\Windows\System32\drivers\Mo3Fltr.sys -- (Mo3Fltr)
DRV:64bit: - [2010/03/04 01:35:52 | 000,134,664 | ---- | M] (M-Audio) [Kernel | On_Demand] -- E:\Windows\System32\drivers\MAudioOxygen.sys -- (OXYGEN)
DRV:64bit: - [2009/11/23 12:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009/11/23 12:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009/08/13 16:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2009/07/31 06:40:32 | 000,025,600 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\WRfiltv.sys -- (WRfiltv)
DRV:64bit: - [2009/07/01 06:54:54 | 000,030,728 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\LGPBTDD.sys -- (LGPBTDD)
DRV:64bit: - [2009/06/19 22:09:57 | 000,054,272 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\L1E62x64.sys -- (L1E) NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- E:\Windows\System32\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- E:\Windows\system32\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- E:\Windows\system32\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2007/07/31 14:04:48 | 000,090,112 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\ser2pl64.sys -- (Ser2pl)
DRV:64bit: - [2005/03/28 20:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand] -- E:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2010/10/06 13:04:02 | 000,043,704 | ---- | M] () [Kernel | System] -- E:\Program Files (x86)\iZ3D Driver\Win64\S3DInjectionDriver.sys -- (iZ3DInjectionDriver)
DRV - [2010/06/28 17:50:22 | 000,146,928 | ---- | M] (CyberLink Corp.) [2012/01/14 07:42:51] [Kernel | Auto] -- E:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC})
DRV - [2009/02/06 06:13:42 | 000,146,928 | ---- | M] (CyberLink Corp.) [2011/12/19 01:31:58] [Kernel | Auto] -- E:\Program Files (x86)\CyberLink\PowerDVD8\000.fcl -- ({FE4C91E7-22C2-4D0C-9F6B-82F1B7742054})
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\232442_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
IE - HKU\232442_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
IE - HKU\232442_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = FB 09 3C 37 D6 8D CD 01  [binary data]
IE - HKU\232442_ON_E\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Alex_Michi_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.facebook.com/
IE - HKU\Alex_Michi_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
IE - HKU\Alex_Michi_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
IE - HKU\Alex_Michi_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 7C 27 37 5A 1E 43 CD 01  [binary data]
IE - HKU\Alex_Michi_ON_E\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Filax_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=112555&tt=010712_2&babsrc=HP_ss&mntrId=6012b76f000000000000002215a13998
IE - HKU\Filax_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
IE - HKU\Filax_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
IE - HKU\Filax_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 15 82 D4 DA CA 9E CC 01  [binary data]
IE - HKU\Filax_ON_E\..\URLSearchHook: {09900DE8-1DCA-443F-9243-26FF581438AF} - Reg Error: Key error. File not found
IE - HKU\Filax_ON_E\..\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - Reg Error: Key error. File not found
IE - HKU\Filax_ON_E\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Filax_ON_E\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
 
 
 
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\Windows\System32\Macromed\Flash\NPSWF64_11_3_300_271.dll ()
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: E:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: E:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: E:\Windows\System32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: E:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer: E:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=:  
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0: E:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: E:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: E:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin: E:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE: E:\Windows\SysWOW64\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: E:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922:  File not found
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision: E:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming: E:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.1: E:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
 
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\ [2012/07/17 03:58:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\fbphotozoom@installdaddy.com: C:\Program Files (x86)\fbphotozoom\fbphotozoom13.xpi [2012/03/08 14:54:36 | 000,102,233 | ---- | M] ()
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/03/26 09:59:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack\ [2012/07/03 03:42:38 | 000,000,000 | ---D | M]
 
[2012/03/08 14:54:44 | 000,000,000 | ---D | M] (No name found) -- E:\Program Files (x86)\Mozilla Firefox\extensions
[2011/11/27 11:17:00 | 000,002,048 | ---- | M] () -- E:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml
 
O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - E:\Windows\System32\drivers\etc\hosts
O2:64bit: - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - E:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - E:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2:64bit: - BHO: (no name) - AutorunsDisabled - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - E:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - E:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - E:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - E:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (MailRuBHO Class) - {8984B388-A5BB-4DF7-B274-77B879E179DB} - E:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O2 - BHO: (MyAshampoo Toolbar) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - E:\Program Files (x86)\MyAshampoo\prxtbMyA0.dll (Conduit Ltd.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - E:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found.
O3 - HKLM\..\Toolbar: (Спутник@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - E:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - E:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (MyAshampoo Toolbar) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - E:\Program Files (x86)\MyAshampoo\prxtbMyA0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - E:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\232442_ON_E\..\Toolbar\WebBrowser: (Спутник@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - E:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O3 - HKU\232442_ON_E\..\Toolbar\WebBrowser: (MyAshampoo Toolbar) - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - E:\Program Files (x86)\MyAshampoo\prxtbMyA0.dll (Conduit Ltd.)
O3 - HKU\232442_ON_E\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - E:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\Alex_Michi_ON_E\..\Toolbar\WebBrowser: (Спутник@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - E:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O3 - HKU\Alex_Michi_ON_E\..\Toolbar\WebBrowser: (MyAshampoo Toolbar) - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - E:\Program Files (x86)\MyAshampoo\prxtbMyA0.dll (Conduit Ltd.)
O3 - HKU\Alex_Michi_ON_E\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - E:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\Filax_ON_E\..\Toolbar\WebBrowser: (Спутник@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - E:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O3 - HKU\Filax_ON_E\..\Toolbar\WebBrowser: (MyAshampoo Toolbar) - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - E:\Program Files (x86)\MyAshampoo\prxtbMyA0.dll (Conduit Ltd.)
O3 - HKU\Filax_ON_E\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - E:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4:64bit: - HKLM..\Run: [Launch LCore] E:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [LXCECATS] E:\Windows\System32\spool\DRIVERS\x64\3\LXCEtime.DLL ()
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AVG_TRAY] E:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [D3DOverrider] E:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\Tools\D3DOverrider\D3DOverriderWrapper.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [SteelSeries World of Warcraft(R) MMO Gaming Mouse Legendary Edition] E:\Program Files (x86)\SteelSeries\World of Warcraft(R) MMO Gaming Mouse Legendary Edition\WoWMHID4.exe ()
O4 - HKU\Filax_ON_E..\Run: [kjmrrvowhoggfpt] E:\ProgramData\kjmrrvow.exe ()
O4 - HKU\Filax_ON_E..\Run: [Spotify Web Helper] E:\Users\Filax\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ()
O4 - HKU\LocalService_ON_E..\Run: [Sidebar] E:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_E..\Run: [Sidebar] E:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\UpdatusUser.Filax-PC_ON_E..\Run: [Sidebar] E:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\UpdatusUser_ON_E..\Run: [Sidebar] E:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_E..\RunOnce: [mctadmin]  File not found
O4 - HKU\NetworkService_ON_E..\RunOnce: [mctadmin]  File not found
O4 - HKU\UpdatusUser.Filax-PC_ON_E..\RunOnce: [mctadmin]  File not found
O4 - HKU\UpdatusUser_ON_E..\RunOnce: [mctadmin]  File not found
O4 - Startup: E:\Users\Filax\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O8:64bit: - Extra context menu item: Free YouTube Download - E:\Users\Filax\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - E:\Users\Filax\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube Download - E:\Users\Filax\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - E:\Users\Filax\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9:64bit: - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - E:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - E:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - E:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000004 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000005 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000006 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000007 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000008 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000009 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000010 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000021 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - E:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - E:\Program Files (x86)\SaferSurf\SsrfLayer.dll (Nutzwerk GmbH)
O13:64bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - Filax_ON_E\..Trusted Domains: blank ([]about in Local intranet)
O15:64bit: - Filax_ON_E\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15:64bit: - Filax_ON_E\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15:64bit: - Filax_ON_E\..Trusted Domains: soe.com ([]* in Trusted sites)
O15:64bit: - Filax_ON_E\..Trusted Domains: sony.com ([]* in Trusted sites)
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 10.1.0)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Reg Error: Key error.)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package)
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - E:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - E:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{c819a6c7-b21f-11e1-a77e-002215a13998}\Shell - "" = AutoRun
O33 - MountPoints2\{c819a6c7-b21f-11e1-a77e-002215a13998}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart) - E:\Program Files (x86)\AVG\AVG2012\avgrsa.exe (AVG Technologies CZ, s.r.o.)
64bit: O35 - HKLM\..comfile [open] -- "%1" %* File not found
64bit: O35 - HKLM\..exefile [open] -- "%1" %* File not found
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
 
MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk - E:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE - (Microsoft Corporation)
MsConfig:64bit - StartUpFolder: C:^Users^Filax^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Audio-Systemsteuerung.lnk - E:\Program Files (x86)\Creative\SB WoW Wireless Headset\WoWAudioCP\WoWAudio.exe - (Creative Technology Ltd)
MsConfig:64bit - StartUpFolder: C:^Users^Filax^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip -  - File not found
MsConfig:64bit - StartUpFolder: C:^Users^Filax^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk -  - File not found
MsConfig:64bit - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - E:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: Akamai NetSession Interface - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: ApnUpdater - hkey= - key= - E:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
MsConfig:64bit - StartUpReg: ApplePhotoStreams - hkey= - key= - E:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: APSDaemon - hkey= - key= - E:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: Badoo Desktop - hkey= - key= - E:\ProgramData\Badoo\Badoo Desktop\1.6.48.1082\Badoo.Desktop.exe (Badoo)
MsConfig:64bit - StartUpReg: BDRegion - hkey= - key= - E:\Program Files (x86)\CyberLink\Shared Files\brs.exe (cyberlink)
MsConfig:64bit - StartUpReg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - hkey= - key= - E:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
MsConfig:64bit - StartUpReg: BitTorrent - hkey= - key= - E:\Program Files (x86)\BitTorrent\BitTorrent.exe (BitTorrent, Inc.)
MsConfig:64bit - StartUpReg: D3DOverrider - hkey= - key= - E:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\Tools\D3DOverrider\D3DOverriderWrapper.exe ()
MsConfig:64bit - StartUpReg: DAEMON Tools Lite - hkey= - key= - E:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
MsConfig:64bit - StartUpReg: DivXUpdate - hkey= - key= - E:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
MsConfig:64bit - StartUpReg: EzPrint - hkey= - key= - E:\Program Files (x86)\Lexmark 4300 Series\ezprint.exe (Lexmark International Inc.)
MsConfig:64bit - StartUpReg: F5D7050v3 - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: Guard.Mail.ru.gui - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: iCloudServices - hkey= - key= - E:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: iTunesHelper - hkey= - key= - E:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: LXCECATS - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: lxcemon.exe - hkey= - key= - E:\Program Files (x86)\Lexmark 4300 Series\lxcemon.exe (Lexmark International, Inc.)
MsConfig:64bit - StartUpReg: MediaGet2 - hkey= - key= - E:\Users\Filax\AppData\Local\MediaGet2\mediaget.exe (MediaGet LLC)
MsConfig:64bit - StartUpReg: MobileDocuments - hkey= - key= - E:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: msnmsgr - hkey= - key= - E:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig:64bit - StartUpReg: PDVD8LanguageShortcut - hkey= - key= - E:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe ()
MsConfig:64bit - StartUpReg: QuickTime Task - hkey= - key= - E:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: RegistryBooster - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: RemoteControl10 - hkey= - key= - E:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
MsConfig:64bit - StartUpReg: RemoteControl8 - hkey= - key= - E:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.)
MsConfig:64bit - StartUpReg: RemotelessHelper - hkey= - key= - E:\Program Files (x86)\SpotifyRemotelessHelper\SpotifyRemotelessHelper.exe ()
MsConfig:64bit - StartUpReg: RemoteX - hkey= - key= - E:\Program Files (x86)\RemoteX\RemoteXUser.exe (hxxp://www.PEEPLEware.com)
MsConfig:64bit - StartUpReg: SaferSurf Console - hkey= - key= - E:\Program Files (x86)\SaferSurf\SaferSurfConsole.exe (Nutzwerk GmbH)
MsConfig:64bit - StartUpReg: SkyMonk - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: Skype - hkey= - key= - E:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig:64bit - StartUpReg: Smart File Advisor - hkey= - key= - E:\Program Files (x86)\Smart File Advisor\sfa.exe (Filefacts.net)
MsConfig:64bit - StartUpReg: Soft32 Updater.exe - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: Spotify - hkey= - key= - E:\Users\Filax\AppData\Roaming\Spotify\spotify.exe (Spotify Ltd)
MsConfig:64bit - StartUpReg: Spotify Web Helper - hkey= - key= - E:\Users\Filax\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ()
MsConfig:64bit - StartUpReg: Steam - hkey= - key= - E:\Spiele\Steam\steam.exe (Valve Corporation)
MsConfig:64bit - StartUpReg: SteelSeries World of Warcraft MMO Gaming Mouse - hkey= - key= - E:\Program Files (x86)\SteelSeries\World of Warcraft MMO Gaming Mouse\WoWMHID.exe (SteelSeries)
MsConfig:64bit - StartUpReg: TrayServer - hkey= - key= - E:\Program Files (x86)\MAGIX\Movie_Edit_Pro_17_Plus_Download_Version\Trayserver_EN.exe (MAGIX AG)
MsConfig:64bit - StartUpReg: WinampAgent - hkey= - key= -  File not found
MsConfig:64bit - StartUpReg: XboxStat - hkey= - key= - E:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
MsConfig:64bit - State: "startup" - 2
MsConfig:64bit - State: "services" - 2
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/09/10 08:48:16 | 127,231,689 | ---- | C] (Igor Pavlov) -- E:\Users\232442\Desktop\OTLPENet.exe
[2012/09/10 03:05:16 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Local\Apple Computer
[2012/09/09 17:51:06 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Roaming\Media Player Classic
[2012/09/09 17:51:04 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Roaming\DivX
[2012/09/09 17:20:14 | 000,000,000 | ---D | C] -- E:\Users\232442\Documents\StarCraft II
[2012/09/09 17:18:50 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft.temp
[2012/09/09 16:30:16 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Roaming\Skype
[2012/09/09 13:08:57 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Roaming\vlc
[2012/09/09 11:46:23 | 000,000,000 | ---D | C] -- E:\Games
[2012/09/09 11:45:43 | 000,000,000 | ---D | C] -- E:\Users\232442\Documents\Nexus Mod Manager
[2012/09/09 11:45:43 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Local\Black_Tree_Gaming
[2012/09/09 11:33:49 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Local\Skyrim
[2012/09/09 11:32:16 | 000,000,000 | ---D | C] -- E:\Users\232442\Documents\My Games
[2012/09/09 09:38:44 | 000,000,000 | ---D | C] -- E:\Users\232442\Documents\FIFA 12
[2012/09/09 09:30:56 | 000,000,000 | ---D | C] -- E:\Users\232442\Documents\Native Instruments
[2012/09/09 09:30:54 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Local\Native Instruments
[2012/09/09 07:41:00 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Virtual DJ
[2012/09/09 07:40:57 | 000,000,000 | ---D | C] -- E:\Users\232442\Documents\VirtualDJ
[2012/09/09 07:40:57 | 000,000,000 | ---D | C] -- E:\Program Files (x86)\VirtualDJ
[2012/09/09 05:31:44 | 000,000,000 | ---D | C] -- E:\Users\Filax\AppData\Roaming\JPEGsnoop
[2012/09/09 05:24:47 | 000,000,000 | ---D | C] -- E:\Users\Filax\AppData\Roaming\Malwarebytes
[2012/09/09 05:24:39 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/09/09 05:24:38 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- E:\Windows\System32\drivers\mbam.sys
[2012/09/09 05:24:38 | 000,000,000 | ---D | C] -- E:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/09/09 05:24:38 | 000,000,000 | ---D | C] -- E:\ProgramData\Malwarebytes
[2012/09/09 04:55:14 | 000,000,000 | ---D | C] -- E:\TDSSKiller_Quarantine
[2012/09/08 12:17:18 | 000,597,504 | ---- | C] (OldTimer Tools) -- E:\Users\Filax\Documents\OTL.exe
[2012/09/08 12:17:03 | 000,597,504 | ---- | C] (OldTimer Tools) -- E:\Users\Filax\Desktop\OTL.exe
[2012/09/08 12:09:50 | 000,000,000 | ---D | C] -- E:\_OTL
[2012/09/08 12:07:51 | 000,597,504 | ---- | C] (OldTimer Tools) -- E:\Users\232442\Desktop\OTL.exe
[2012/09/08 11:26:00 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Roaming\Opera
[2012/09/08 11:26:00 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Local\Opera
[2012/09/08 10:38:03 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Local\Logitech
[2012/09/08 10:37:56 | 000,000,000 | ---D | C] -- E:\Users\232442\AppData\Roaming\NVIDIA
[2012/09/08 10:24:09 | 000,000,000 | ---D | C] -- E:\ProgramData\bmctzqkwhpprslq
[2012/09/06 13:51:15 | 000,000,000 | ---D | C] -- E:\Users\Filax\AppData\Local\PictureConverter
[2012/09/06 13:10:35 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2012/09/06 13:08:15 | 000,000,000 | ---D | C] -- E:\Users\Filax\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2012/09/05 19:01:51 | 000,000,000 | ---D | C] -- E:\Users\Filax\AppData\Roaming\OpenOffice.org
[2012/09/05 19:01:16 | 000,000,000 | --SD | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
[2012/09/05 19:00:53 | 000,000,000 | ---D | C] -- E:\Program Files (x86)\OpenOffice.org 3
[2012/09/05 05:23:39 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonic Charge µTonic VST
[2012/09/03 09:49:23 | 000,000,000 | ---D | C] -- E:\Users\Filax\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sonic Charge
[2012/09/03 09:49:23 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonic Charge
[2012/09/01 08:23:55 | 000,000,000 | ---D | C] -- E:\Users\Filax\AppData\Roaming\PhotoScape
[2012/09/01 08:23:33 | 000,000,000 | ---D | C] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
[2012/09/01 08:23:25 | 000,000,000 | ---D | C] -- E:\Program Files (x86)\PhotoScape
[2012/08/23 13:30:07 | 000,000,000 | ---D | C] -- E:\Program Files\VideoLAN
[2012/08/19 14:59:38 | 000,000,000 | -HSD | C] -- E:\ProgramData\SecuROM
[2012/08/19 14:57:22 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- E:\Windows\SysWow64\CmdLineExt_x64.dll
[2012/08/18 14:59:44 | 000,000,000 | ---D | C] -- E:\Program Files (x86)\The Elder Scrolls V Skyrim
[2012/08/18 14:59:44 | 000,000,000 | ---D | C] -- E:\Program Files (x86)\Bethesda Softworks
[2012/08/14 12:55:55 | 000,000,000 | ---D | C] -- E:\Users\Filax\Documents\neox
[2012/06/25 04:58:26 | 002,174,976 | ---- | C] (Advanced Micro Devices Inc.) -- E:\Program Files (x86)\Common Files\atimpenc.dll
[2011/11/08 11:31:59 | 001,224,704 | ---- | C] ( ) -- E:\Windows\SysWow64\lxceserv.dll
[2011/11/08 11:31:59 | 000,995,328 | ---- | C] ( ) -- E:\Windows\SysWow64\lxceusb1.dll
[2011/11/08 11:31:59 | 000,696,320 | ---- | C] ( ) -- E:\Windows\SysWow64\lxcehbn3.dll
[2011/11/08 11:31:59 | 000,643,072 | ---- | C] ( ) -- E:\Windows\SysWow64\lxcepmui.dll
[2011/11/08 11:31:59 | 000,585,728 | ---- | C] ( ) -- E:\Windows\SysWow64\lxcelmpm.dll
[2011/11/08 11:31:59 | 000,537,520 | ---- | C] ( ) -- E:\Windows\SysWow64\lxcecoms.exe
[2011/11/08 11:31:59 | 000,413,696 | ---- | C] ( ) -- E:\Windows\SysWow64\lxceinpa.dll
[2011/11/08 11:31:59 | 000,397,312 | ---- | C] ( ) -- E:\Windows\SysWow64\lxceiesc.dll
[2011/11/08 11:31:59 | 000,385,968 | ---- | C] ( ) -- E:\Windows\SysWow64\lxceih.exe
[2011/11/08 11:31:59 | 000,181,168 | ---- | C] ( ) -- E:\Windows\SysWow64\lxceppls.exe
[2011/11/08 11:31:59 | 000,163,840 | ---- | C] ( ) -- E:\Windows\SysWow64\lxceprox.dll
[2011/11/08 11:31:59 | 000,094,208 | ---- | C] ( ) -- E:\Windows\SysWow64\lxcepplc.dll
[2011/11/08 11:31:58 | 000,684,032 | ---- | C] ( ) -- E:\Windows\SysWow64\lxcecomc.dll
[2011/11/08 11:31:58 | 000,421,888 | ---- | C] ( ) -- E:\Windows\SysWow64\lxcecomm.dll
[2011/11/08 11:31:58 | 000,381,872 | ---- | C] ( ) -- E:\Windows\SysWow64\lxcecfg.exe
[2011/11/02 12:55:22 | 000,623,616 | ---- | C] (Ivan Bischof ©2003 - 2005) -- E:\Users\Filax\AppData\Local\No23 Recorder.exe
[2011/11/02 12:55:20 | 000,102,912 | ---- | C] (Albert L Faber) -- E:\Users\Filax\AppData\Local\CDRip.dll
[2011/11/02 12:55:19 | 000,097,336 | ---- | C] (Un4seen Developments) -- E:\Users\Filax\AppData\Local\bass.dll
[2011/11/02 12:55:19 | 000,013,872 | ---- | C] (Un4seen Developments) -- E:\Users\Filax\AppData\Local\basscd.dll
[2011/11/02 12:27:07 | 000,082,816 | ---- | C] (VSO Software) -- E:\Users\Filax\AppData\Roaming\pcouffin.sys
[4 E:\ProgramData\*.tmp files -> E:\ProgramData\*.tmp -> ]
[4 E:\ProgramData\*.tmp files -> E:\ProgramData\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012/09/10 09:55:39 | 000,067,584 | --S- | M] () -- E:\Windows\bootstat.dat
[2012/09/10 09:47:10 | 000,698,006 | ---- | M] () -- E:\Windows\System32\perfh007.dat
[2012/09/10 09:47:10 | 000,651,988 | ---- | M] () -- E:\Windows\System32\perfh009.dat
[2012/09/10 09:47:10 | 000,148,062 | ---- | M] () -- E:\Windows\System32\perfc007.dat
[2012/09/10 09:47:10 | 000,120,920 | ---- | M] () -- E:\Windows\System32\perfc009.dat
[2012/09/10 09:13:31 | 000,036,032 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/09/10 09:13:31 | 000,036,032 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/09/10 09:04:33 | 3220,475,904 | -HS- | M] () -- E:\hiberfil.sys
[2012/09/10 08:58:00 | 000,000,884 | ---- | M] () -- E:\Windows\tasks\Adobe Flash Player Updater.job
[2012/09/10 08:48:16 | 127,231,689 | ---- | M] (Igor Pavlov) -- E:\Users\232442\Desktop\OTLPENet.exe
[2012/09/10 03:09:40 | 094,137,248 | ---- | M] () -- E:\Windows\System32\drivers\AVG\incavi.avm
[2012/09/09 17:18:50 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft.temp
[2012/09/09 17:18:50 | 000,000,000 | ---- | M] () -- E:\Users\Public\Desktop\World of Warcraft.lnk.temp
[2012/09/09 16:30:11 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012/09/09 12:34:00 | 000,002,169 | ---- | M] () -- E:\Users\232442\Desktop\The Elder Scrolls - Skyrim.lnk
[2012/09/09 08:26:24 | 000,384,488 | ---- | M] () -- E:\Windows\System32\FNTCACHE.DAT
[2012/09/09 07:41:01 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual DJ
[2012/09/09 07:41:00 | 000,001,043 | ---- | M] () -- E:\Users\Filax\Desktop\Virtual DJ Pro.lnk
[2012/09/09 07:41:00 | 000,001,043 | ---- | M] () -- E:\Users\Alex Michi\Desktop\Virtual DJ Pro.lnk
[2012/09/09 07:41:00 | 000,001,043 | ---- | M] () -- E:\Users\232442\Desktop\Virtual DJ Pro.lnk
[2012/09/09 05:31:33 | 001,134,691 | ---- | M] () -- E:\Users\Filax\Desktop\JPEGsnoop-bin.zip
[2012/09/09 05:24:39 | 000,001,113 | ---- | M] () -- E:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012/09/09 05:24:39 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/09/08 12:25:10 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2012/09/08 12:17:18 | 000,597,504 | ---- | M] (OldTimer Tools) -- E:\Users\Filax\Documents\OTL.exe
[2012/09/08 12:17:03 | 000,597,504 | ---- | M] (OldTimer Tools) -- E:\Users\Filax\Desktop\OTL.exe
[2012/09/08 12:07:51 | 000,597,504 | ---- | M] (OldTimer Tools) -- E:\Users\232442\Desktop\OTL.exe
[2012/09/08 11:26:16 | 000,027,520 | ---- | M] () -- E:\Users\232442\AppData\Local\dt.dat
[2012/09/08 11:25:17 | 000,001,437 | ---- | M] () -- E:\Users\232442\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/09/08 10:24:09 | 000,000,051 | ---- | M] () -- E:\ProgramData\ymcycrctzgkwzgm
[2012/09/08 10:24:02 | 000,054,784 | ---- | M] () -- E:\ProgramData\kjmrrvow.exe
[2012/09/07 14:32:46 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2012/09/07 14:32:45 | 000,001,306 | ---- | M] () -- E:\Users\Filax\Desktop\Free YouTube Download.lnk
[2012/09/07 14:30:17 | 000,001,402 | ---- | M] () -- E:\Users\Filax\Desktop\Free YouTube to MP3 Converter.lnk
[2012/09/06 13:30:58 | 000,608,780 | ---- | M] () -- E:\Users\Filax\Desktop\picture_converter.zip
[2012/09/06 13:23:03 | 000,000,862 | ---- | M] () -- E:\Users\Public\Desktop\StarCraft II.lnk
[2012/09/06 13:22:58 | 000,000,000 | R--D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
[2012/09/06 13:22:41 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
[2012/09/05 19:02:03 | 000,001,239 | ---- | M] () -- E:\Users\Filax\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
[2012/09/05 19:01:39 | 000,000,000 | --SD | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
[2012/09/05 19:01:20 | 000,001,172 | ---- | M] () -- E:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2012/09/05 05:23:39 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonic Charge µTonic VST
[2012/09/05 05:23:23 | 010,442,229 | ---- | M] () -- E:\Users\Filax\Desktop\Install Sonic Charge MicroTonic.zip
[2012/09/05 04:45:03 | 000,005,759 | ---- | M] () -- E:\Users\Filax\Desktop\Sonic.Charge.MicroTonic.VSTi.v2.0.1-H2O.ZIP
[2012/09/03 09:49:23 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonic Charge
[2012/09/01 08:23:34 | 000,001,059 | ---- | M] () -- E:\Users\Alex Michi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk
[2012/09/01 08:23:34 | 000,001,059 | ---- | M] () -- E:\Users\232442\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,001,059 | ---- | M] () -- E:\Users\Filax\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,001,035 | ---- | M] () -- E:\Users\Filax\Desktop\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,001,035 | ---- | M] () -- E:\Users\Alex Michi\Desktop\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,001,035 | ---- | M] () -- E:\Users\232442\Desktop\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
[2012/08/25 20:30:31 | 000,000,000 | ---- | M] () -- E:\nvdrssel.bin
[2012/08/23 13:58:05 | 000,001,475 | ---- | M] () -- E:\Users\Filax\AppData\Local\RecConfig.xml
[2012/08/22 13:36:38 | 000,000,934 | ---- | M] () -- E:\Users\Public\Desktop\Nexus Mod Manager.lnk
[2012/08/19 14:57:22 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- E:\Windows\SysWow64\CmdLineExt_x64.dll
[2012/08/19 14:57:10 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows - LIVE
[2012/08/19 12:20:57 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
[2012/08/18 14:59:05 | 000,000,312 | ---- | M] () -- E:\Users\Filax\Desktop\Curse Client.appref-ms
[2012/08/16 12:21:59 | 000,027,520 | ---- | M] () -- E:\Users\Filax\AppData\Local\dt.dat
[2012/08/15 07:58:19 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\SysWow64\FlashPlayerApp.exe
[2012/08/15 07:58:19 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/08/12 10:09:03 | 000,154,084 | -H-- | M] () -- E:\Windows\SysWow64\mlfcache.dat
[4 E:\ProgramData\*.tmp files -> E:\ProgramData\*.tmp -> ]
[4 E:\ProgramData\*.tmp files -> E:\ProgramData\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012/09/09 17:18:50 | 000,000,000 | ---- | C] () -- E:\Users\Public\Desktop\World of Warcraft.lnk.temp
[2012/09/09 12:33:31 | 000,002,169 | ---- | C] () -- E:\Users\232442\Desktop\The Elder Scrolls - Skyrim.lnk
[2012/09/09 07:41:00 | 000,001,043 | ---- | C] () -- E:\Users\Filax\Desktop\Virtual DJ Pro.lnk
[2012/09/09 07:41:00 | 000,001,043 | ---- | C] () -- E:\Users\Alex Michi\Desktop\Virtual DJ Pro.lnk
[2012/09/09 07:41:00 | 000,001,043 | ---- | C] () -- E:\Users\232442\Desktop\Virtual DJ Pro.lnk
[2012/09/09 05:31:31 | 001,134,691 | ---- | C] () -- E:\Users\Filax\Desktop\JPEGsnoop-bin.zip
[2012/09/09 05:24:39 | 000,001,113 | ---- | C] () -- E:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012/09/08 11:26:16 | 000,027,520 | ---- | C] () -- E:\Users\232442\AppData\Local\dt.dat
[2012/09/08 11:25:17 | 000,001,437 | ---- | C] () -- E:\Users\232442\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/09/08 10:24:09 | 000,054,784 | ---- | C] () -- E:\ProgramData\kjmrrvow.exe
[2012/09/08 10:24:04 | 000,000,051 | ---- | C] () -- E:\ProgramData\ymcycrctzgkwzgm
[2012/09/07 14:32:45 | 000,001,306 | ---- | C] () -- E:\Users\Filax\Desktop\Free YouTube Download.lnk
[2012/09/07 14:30:17 | 000,001,402 | ---- | C] () -- E:\Users\Filax\Desktop\Free YouTube to MP3 Converter.lnk
[2012/09/06 13:30:58 | 000,608,780 | ---- | C] () -- E:\Users\Filax\Desktop\picture_converter.zip
[2012/09/06 13:10:35 | 000,000,862 | ---- | C] () -- E:\Users\Public\Desktop\StarCraft II.lnk
[2012/09/05 19:02:03 | 000,001,239 | ---- | C] () -- E:\Users\Filax\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
[2012/09/05 19:01:20 | 000,001,172 | ---- | C] () -- E:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2012/09/05 05:23:23 | 010,442,229 | ---- | C] () -- E:\Users\Filax\Desktop\Install Sonic Charge MicroTonic.zip
[2012/09/05 05:14:47 | 000,013,612 | ---- | C] () -- E:\Users\Filax\Desktop\H2O.nfo
[2012/09/05 04:45:03 | 000,005,759 | ---- | C] () -- E:\Users\Filax\Desktop\Sonic.Charge.MicroTonic.VSTi.v2.0.1-H2O.ZIP
[2012/09/01 08:23:34 | 000,001,059 | ---- | C] () -- E:\Users\Alex Michi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk
[2012/09/01 08:23:34 | 000,001,059 | ---- | C] () -- E:\Users\232442\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,001,059 | ---- | C] () -- E:\Users\Filax\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,001,035 | ---- | C] () -- E:\Users\Filax\Desktop\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,001,035 | ---- | C] () -- E:\Users\Alex Michi\Desktop\PhotoScape.lnk
[2012/09/01 08:23:33 | 000,001,035 | ---- | C] () -- E:\Users\232442\Desktop\PhotoScape.lnk
[2012/08/25 20:30:31 | 000,000,000 | ---- | C] () -- E:\nvdrssel.bin
[2012/08/18 14:59:27 | 000,000,312 | ---- | C] () -- E:\Users\Filax\Desktop\Curse Client.appref-ms
[2012/08/17 06:02:46 | 000,112,982 | ---- | C] () -- E:\Users\Alex Michi\Desktop\DSC01208.JPG
[2012/08/16 12:21:59 | 000,027,520 | ---- | C] () -- E:\Users\Filax\AppData\Local\dt.dat
[2012/08/12 10:09:03 | 000,154,084 | -H-- | C] () -- E:\Windows\SysWow64\mlfcache.dat
[2012/07/16 03:40:23 | 000,027,520 | ---- | C] () -- E:\Users\Alex Michi\AppData\Local\dt.dat
[2012/06/30 07:39:47 | 000,003,584 | ---- | C] () -- E:\Users\Filax\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/05/14 20:21:50 | 000,423,744 | ---- | C] () -- E:\Windows\SysWow64\nvStreaming.exe
[2012/04/22 13:28:54 | 001,591,958 | ---- | C] () -- E:\Windows\SysWow64\PerfStringBackup.INI
[2012/04/14 14:06:55 | 000,000,331 | ---- | C] () -- E:\Windows\game.ini
[2012/03/14 08:06:46 | 000,000,526 | ---- | C] () -- E:\Windows\eReg.dat
[2012/02/24 20:10:54 | 000,000,024 | -HS- | C] () -- E:\Windows\SysWow64\Userdata.ini
[2012/01/26 11:42:56 | 000,002,240 | ---- | C] () -- E:\Windows\LENDIG.sys
[2012/01/10 14:22:49 | 000,107,832 | ---- | C] () -- E:\Windows\SysWow64\PnkBstrB.exe
[2012/01/10 14:22:48 | 000,682,280 | ---- | C] () -- E:\Windows\SysWow64\pbsvc.exe
[2012/01/10 14:22:48 | 000,066,872 | ---- | C] () -- E:\Windows\SysWow64\PnkBstrA.exe
[2012/01/09 18:05:56 | 000,000,745 | ---- | C] () -- E:\Windows\CoD.INI
[2012/01/05 12:43:31 | 000,002,754 | ---- | C] () -- E:\Windows\cmudax3.ini
[2012/01/02 20:48:19 | 000,000,040 | -HS- | C] () -- E:\ProgramData\.zreglib
[2011/12/22 11:39:00 | 000,190,464 | ---- | C] () -- E:\Windows\SysWow64\PCGW32.DLL
[2011/12/18 16:59:13 | 000,162,304 | ---- | C] () -- E:\Windows\SysWow64\ztvunrar36.dll
[2011/12/18 16:59:13 | 000,077,312 | ---- | C] () -- E:\Windows\SysWow64\ztvunace26.dll
[2011/12/15 18:50:46 | 000,000,316 | ---- | C] () -- E:\Windows\SIERRA.INI
[2011/12/06 19:31:59 | 000,200,704 | ---- | C] () -- E:\Windows\SysWow64\UpdateDriver.exe
[2011/12/06 19:31:59 | 000,005,224 | ---- | C] () -- E:\Windows\SysWow64\ucuiinfo.ini
[2011/11/21 08:23:50 | 000,000,403 | ---- | C] () -- E:\Windows\ODBC.INI
[2011/11/21 08:23:49 | 000,000,000 | ---- | C] () -- E:\Windows\NSREX.INI
[2011/11/08 11:31:59 | 000,385,024 | ---- | C] () -- E:\Windows\SysWow64\lxcecomx.dll
[2011/11/08 11:31:59 | 000,274,432 | ---- | C] () -- E:\Windows\SysWow64\lxceinst.dll
[2011/11/02 14:21:07 | 000,165,376 | ---- | C] () -- E:\Windows\SysWow64\unrar.dll
[2011/11/02 14:21:07 | 000,000,038 | ---- | C] () -- E:\Windows\avisplitter.ini
[2011/11/02 14:21:06 | 000,134,144 | ---- | C] () -- E:\Windows\SysWow64\xvidvfw.dll
[2011/11/02 14:21:06 | 000,108,032 | ---- | C] () -- E:\Windows\SysWow64\ff_vfw.dll
[2011/11/02 13:29:35 | 000,001,801 | ---- | C] () -- E:\Windows\WRcfg.ini
[2011/11/02 13:29:35 | 000,000,388 | ---- | C] () -- E:\Windows\WRMCcfg.ini
[2011/11/02 13:29:34 | 000,176,128 | ---- | C] () -- E:\Windows\SysWow64\APOMngr.DLL
[2011/11/02 13:29:34 | 000,073,728 | ---- | C] () -- E:\Windows\SysWow64\CmdRtr.DLL
[2011/11/02 12:55:23 | 000,143,872 | ---- | C] () -- E:\Users\Filax\AppData\Local\vorbis.dll
[2011/11/02 12:55:23 | 000,064,000 | ---- | C] () -- E:\Users\Filax\AppData\Local\vorbisenc.dll
[2011/11/02 12:55:23 | 000,019,456 | ---- | C] () -- E:\Users\Filax\AppData\Local\vorbisfile.dll
[2011/11/02 12:55:22 | 000,029,184 | ---- | C] () -- E:\Users\Filax\AppData\Local\no23xwrapper.dll
[2011/11/02 12:55:22 | 000,015,872 | ---- | C] () -- E:\Users\Filax\AppData\Local\ogg.dll
[2011/11/02 12:55:22 | 000,007,605 | ---- | C] () -- E:\Users\Filax\AppData\Local\Resmon.ResmonCfg
[2011/11/02 12:55:22 | 000,001,475 | ---- | C] () -- E:\Users\Filax\AppData\Local\RecConfig.xml
[2011/11/02 12:55:21 | 000,155,136 | ---- | C] () -- E:\Users\Filax\AppData\Local\lame_enc.dll
[2011/11/02 12:55:20 | 000,000,093 | ---- | C] () -- E:\Users\Filax\AppData\Local\fusioncache.dat
[2011/11/02 12:27:07 | 000,099,384 | ---- | C] () -- E:\Users\Filax\AppData\Roaming\inst.exe
[2011/11/02 12:27:07 | 000,007,859 | ---- | C] () -- E:\Users\Filax\AppData\Roaming\pcouffin.cat
[2011/11/02 12:27:07 | 000,001,189 | ---- | C] () -- E:\Users\Filax\AppData\Roaming\vso_ts_preview.xml
[2011/11/02 12:27:07 | 000,001,167 | ---- | C] () -- E:\Users\Filax\AppData\Roaming\pcouffin.inf
[2011/11/02 12:27:07 | 000,000,615 | ---- | C] () -- E:\Users\Filax\AppData\Roaming\burnaware.ini
[2011/11/02 12:27:07 | 000,000,600 | ---- | C] () -- E:\Users\Filax\AppData\Roaming\winscp.rnd
[2011/09/28 11:44:14 | 000,179,271 | ---- | C] () -- E:\Windows\SysWow64\xlive.dll.cat
[2010/11/20 23:24:49 | 000,252,928 | ---- | C] () -- E:\Windows\SysWow64\DShowRdpFilter.dll
[2010/06/08 09:19:24 | 000,692,224 | ---- | C] () -- E:\Windows\SysWow64\libeay32.dll
[2010/06/08 09:19:24 | 000,151,552 | ---- | C] () -- E:\Windows\SysWow64\ssleay32.dll
[2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- E:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- E:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- E:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- E:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- E:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- E:\Windows\SysWow64\ir32_32.dll
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- E:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- E:\Windows\SysWow64\mlang.dat
[2007/04/27 05:43:58 | 000,120,200 | ---- | C] () -- E:\Windows\SysWow64\DLLDEV32i.dll
 
========== LOP Check ==========
 
[2011/11/02 11:16:01 | 000,000,000 | -HSD | M] -- E:\ProgramData\Anwendungsdaten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Application Data
[2012/06/08 17:11:56 | 000,000,000 | ---D | M] -- E:\ProgramData\ashampoo
[2012/01/03 09:03:45 | 000,000,000 | ---D | M] -- E:\ProgramData\Astroburn Pro
[2011/11/02 13:01:00 | 000,000,000 | ---D | M] -- E:\ProgramData\AVG2012
[2012/07/10 06:00:17 | 000,000,000 | ---D | M] -- E:\ProgramData\Babylon
[2012/04/04 16:59:18 | 000,000,000 | ---D | M] -- E:\ProgramData\Badoo
[2012/05/15 12:54:28 | 000,000,000 | ---D | M] -- E:\ProgramData\Battle.net
[2012/09/08 10:24:18 | 000,000,000 | ---D | M] -- E:\ProgramData\bmctzqkwhpprslq
[2012/01/26 09:16:57 | 000,000,000 | ---D | M] -- E:\ProgramData\Camel Audio
[2011/11/02 12:34:45 | 000,000,000 | ---D | M] -- E:\ProgramData\Common Files
[2011/11/17 10:32:59 | 000,000,000 | ---D | M] -- E:\ProgramData\DAEMON Tools Lite
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Desktop
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Documents
[2011/11/02 11:16:01 | 000,000,000 | -HSD | M] -- E:\ProgramData\Dokumente
[2011/11/04 17:09:54 | 000,000,000 | ---D | M] -- E:\ProgramData\EA Core
[2012/05/17 17:42:22 | 000,000,000 | ---D | M] -- E:\ProgramData\Electronic Arts
[2011/11/02 11:16:01 | 000,000,000 | -HSD | M] -- E:\ProgramData\Favoriten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Favorites
[2011/12/22 11:40:37 | 000,000,000 | ---D | M] -- E:\ProgramData\FZf6k4QZguJ
[2012/04/25 14:50:44 | 000,000,000 | ---D | M] -- E:\ProgramData\Guard.Mail.Ru
[2011/12/15 18:51:48 | 000,000,000 | ---D | M] -- E:\ProgramData\InstallMate
[2012/02/21 10:03:52 | 000,000,000 | ---D | M] -- E:\ProgramData\iZ3D Driver
[2012/07/01 08:39:52 | 000,000,000 | ---D | M] -- E:\ProgramData\Konvertor
[2011/11/05 10:10:06 | 000,000,000 | ---D | M] -- E:\ProgramData\LAG
[2011/12/12 07:43:11 | 000,000,000 | ---D | M] -- E:\ProgramData\m2backup
[2011/12/12 07:21:13 | 000,000,000 | ---D | M] -- E:\ProgramData\m2portal
[2012/01/08 12:34:12 | 000,000,000 | ---D | M] -- E:\ProgramData\MAGIX
[2012/03/07 17:53:23 | 000,000,000 | ---D | M] -- E:\ProgramData\Media Get LLC
[2012/09/10 03:09:42 | 000,000,000 | ---D | M] -- E:\ProgramData\MFAData
[2011/12/12 07:41:38 | 000,000,000 | ---D | M] -- E:\ProgramData\mquadr.at
[2011/11/30 17:39:29 | 000,000,000 | ---D | M] -- E:\ProgramData\Native Instruments
[2011/11/30 07:14:01 | 000,000,000 | ---D | M] -- E:\ProgramData\Origin
[2011/12/15 18:50:53 | 000,000,000 | ---D | M] -- E:\ProgramData\Premium
[2012/02/24 14:12:10 | 000,000,000 | ---D | M] -- E:\ProgramData\RELOADED
[2012/01/02 20:48:27 | 000,000,000 | ---D | M] -- E:\ProgramData\SlySoft
[2011/11/04 17:11:51 | 000,000,000 | ---D | M] -- E:\ProgramData\Solidshield
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Start Menu
[2011/11/02 11:16:01 | 000,000,000 | -HSD | M] -- E:\ProgramData\Startmenü
[2012/03/26 10:07:49 | 000,000,000 | ---D | M] -- E:\ProgramData\Temp
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Templates
[2011/12/02 04:37:37 | 000,000,000 | ---D | M] -- E:\ProgramData\TuneUp Software
[2011/11/02 11:16:01 | 000,000,000 | -HSD | M] -- E:\ProgramData\Vorlagen
[2012/03/26 09:41:15 | 000,000,000 | ---D | M] -- E:\ProgramData\WeGame
[2012/07/14 10:33:15 | 000,000,000 | ---D | M] -- E:\ProgramData\WinZip
[2012/07/10 06:03:43 | 000,000,000 | ---D | M] -- E:\ProgramData\Xilisoft
[2011/11/02 14:22:04 | 000,000,000 | -HSD | M] -- E:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2012/02/26 14:00:48 | 000,000,000 | ---D | M] -- E:\ProgramData\{618727BE-40FF-4E42-AB24-60F292ECDF2B}
[2011/12/24 17:11:59 | 000,000,000 | ---D | M] -- E:\ProgramData\{629D8B17-22B3-46F8-A281-BD604EBA3ED7}
[2011/12/02 04:33:08 | 000,000,000 | ---D | M] -- E:\ProgramData\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
[2011/11/02 12:16:00 | 000,000,000 | ---D | M] -- E:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2012/05/09 17:29:48 | 000,000,000 | ---D | M] -- E:\ProgramData\{C78336EC-F2EB-4640-99A4-DFE96581B90B}
[2012/05/09 17:30:24 | 000,000,000 | ---D | M] -- E:\ProgramData\{E26B3878-7CEC-469C-B449-5CAA336DF8CD}
[2012/09/09 07:18:56 | 000,032,632 | ---- | M] () -- E:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2012/06/10 16:30:34 | 000,000,000 | ---D | M] -- E:\$AVG
[2012/09/09 07:30:28 | 000,000,000 | -HSD | M] -- E:\$RECYCLE.BIN
[2012/02/23 17:57:23 | 000,000,000 | ---D | M] -- E:\Casino
[2012/01/16 11:49:00 | 000,000,000 | ---D | M] -- E:\dbox2
[2012/01/16 20:06:57 | 000,000,000 | ---D | M] -- E:\DBoxBoot
[2012/02/26 14:00:17 | 000,000,000 | ---D | M] -- E:\DJ
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\Documents and Settings
[2011/11/02 11:16:01 | 000,000,000 | -HSD | M] -- E:\Dokumente und Einstellungen
[2011/11/02 14:19:32 | 000,000,000 | ---D | M] -- E:\drivers
[2012/03/26 10:07:19 | 000,000,000 | ---D | M] -- E:\Fraps
[2012/09/09 11:46:23 | 000,000,000 | ---D | M] -- E:\Games
[2012/03/27 09:53:12 | 000,000,000 | ---D | M] -- E:\Graphics
[2012/04/24 07:56:29 | 000,000,000 | ---D | M] -- E:\michi
[2012/08/04 05:57:17 | 000,000,000 | ---D | M] -- E:\NVIDIA
[2009/07/13 23:20:08 | 000,000,000 | ---D | M] -- E:\PerfLogs
[2012/08/23 13:30:07 | 000,000,000 | R--D | M] -- E:\Program Files
[2012/09/09 07:40:57 | 000,000,000 | R--D | M] -- E:\Program Files (x86)
[2012/09/09 05:24:38 | 000,000,000 | ---D | M] -- E:\ProgramData
[2011/11/02 11:16:01 | 000,000,000 | -HSD | M] -- E:\Programme
[2011/11/02 11:16:01 | 000,000,000 | -HSD | M] -- E:\Recovery
[2012/07/22 14:19:42 | 000,000,000 | ---D | M] -- E:\Spiele
[2012/03/16 10:42:30 | 000,000,000 | -HSD | M] -- E:\System Volume Information
[2012/09/09 04:55:14 | 000,000,000 | ---D | M] -- E:\TDSSKiller_Quarantine
[2012/08/04 05:59:13 | 000,000,000 | R--D | M] -- E:\Users
[2012/09/09 07:15:46 | 000,000,000 | ---D | M] -- E:\Windows
[2012/09/08 12:09:50 | 000,000,000 | ---D | M] -- E:\_OTL
 
< %PROGRAMFILES%\*.exe >
 
Invalid Environment Variable: %LOCALAPPDATA%\*.exe
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- E:\Windows\System32\drivers\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- E:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- E:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- E:\Windows\System32\drivers\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- E:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- E:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- E:\Windows\SysWOW64\cngaudit.dll
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- E:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- E:\Windows\System32\cngaudit.dll
[2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- E:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011/02/26 01:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- E:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- E:\Windows\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- E:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 02:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- E:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 23:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- E:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- E:\Windows\SysWOW64\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- E:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/20 23:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- E:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2010/11/20 23:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- E:\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 23:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- E:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011/03/11 02:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- E:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- E:\Windows\System32\drivers\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- E:\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- E:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010/11/20 23:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- E:\Windows\System32\netlogon.dll
[2010/11/20 23:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- E:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/20 23:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- E:\Windows\SysWOW64\netlogon.dll
[2010/11/20 23:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- E:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011/03/11 02:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- E:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- E:\Windows\System32\drivers\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- E:\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- E:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/20 23:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- E:\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 23:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- E:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2010/11/20 23:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- E:\Windows\SysWOW64\scecli.dll
[2010/11/20 23:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- E:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 23:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- E:\Windows\System32\scecli.dll
[2010/11/20 23:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- E:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010/11/20 23:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- E:\Windows\SysWOW64\user32.dll
[2010/11/20 23:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- E:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2010/11/20 23:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- E:\Windows\System32\user32.dll
[2010/11/20 23:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- E:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010/11/20 23:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- E:\Windows\SysWOW64\userinit.exe
[2010/11/20 23:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- E:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010/11/20 23:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- E:\Windows\System32\userinit.exe
[2010/11/20 23:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- E:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010/11/20 23:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- E:\Windows\System32\winlogon.exe
[2010/11/20 23:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- E:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2012/07/03 07:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- E:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009/07/13 20:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- E:\Windows\System32\drivers\ws2ifsl.sys
[2009/07/13 20:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- E:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
Invalid Environment Variable: %USERPROFILE%\*.*
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.exe
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.dll
 
Invalid Environment Variable: %USERPROFILE%\Application Data\*.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 133 bytes -> E:\ProgramData\Temp:05EE1EEF
@Alternate Data Stream - 127 bytes -> E:\ProgramData\Temp:0B4227B4
< End of report >
         

--- --- ---

hi

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
O4 - HKU\Filax_ON_E..\Run: [kjmrrvowhoggfpt] E:\ProgramData\kjmrrvow.exe ()
[2012/09/08 10:24:04 | 000,000,051 | ---- | C] () -- E:\ProgramData\ymcycrctzgkwzgm
 :Files
E:\ProgramData\kjmrrvow.exe
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hier:

All processes killed
========== OTL ==========
Registry key HKEY_USERS\Filax_ON_E\Software\Microsoft\Windows\CurrentVersion\Run not found.
File E:\ProgramData\kjmrrvow.exe not found.
File E:\ProgramData\ymcycrctzgkwzgm not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: 232442
->Flash cache emptied: 6879 bytes

User: Alex Michi
->Flash cache emptied: 0 bytes

User: All Users

User: AppData

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Filax
->Flash cache emptied: 492 bytes

User: Public

User: UpdatusUser
->Flash cache emptied: 0 bytes

User: UpdatusUser.Filax-PC
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


[EMPTYTEMP]

User: 232442
->Temp folder emptied: 27857971 bytes
->Temporary Internet Files folder emptied: 61941904 bytes
->Opera cache emptied: 54458169 bytes
->Flash cache emptied: 0 bytes

User: Alex Michi
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: AppData

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Filax
->Temp folder emptied: 356113 bytes
->Temporary Internet Files folder emptied: 155335 bytes
->Java cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Opera cache emptied: 60282 bytes
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: UpdatusUser.Filax-PC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 50318 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 1604 bytes

Total Files Cleaned = 138,00 mb


OTL by OldTimer - Version 3.2.55.0 log created on 09102012_215156

Files\Folders moved on Reboot...
C:\Users\232442\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\232442\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C06RBBVK\addons-tracker-v4[1].htm moved successfully.
C:\Users\232442\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VO506TL\addons-v4[1].htm moved successfully.

PendingFileRenameOperations files...
File C:\Users\232442\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!
File C:\Users\232442\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C06RBBVK\addons-tracker-v4[1].htm not found!
File C:\Users\232442\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VO506TL\addons-v4[1].htm not found!

Registry entries deleted on Reboot...

Files\Folders moved on Reboot...
File\Folder C:\Users\232442\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!
File\Folder C:\Users\232442\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C06RBBVK\addons-tracker-v4[1].htm not found!
File\Folder C:\Users\232442\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VO506TL\addons-v4[1].htm not found!

PendingFileRenameOperations files...
File C:\Users\232442\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!
File C:\Users\232442\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C06RBBVK\addons-tracker-v4[1].htm not found!
File C:\Users\232442\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VO506TL\addons-v4[1].htm not found!

Registry entries deleted on Reboot...

hast du in der zwischenzeit irgendwas gemacht? wenn ja was, musst es mir schon sagen sonst arbeitet es sich ziemlich schlecht

Nein gemacht hab ich nichts. aber ich hab otl mit einem anderen benutzerkonto gestartet. es sind nämlich noch 2 benutzerkonten vorhanden auf die ich zugreifen kann. ich kann nur nicht auf mein eigenenes zugreifen. muss ich otl wiedermit der boot starten?

du musst otl schon vom richtigen konto starten
sonst gehts natürlich nicht, also so, wie am anfang ausführen

Ok mache ich gleich

solche zwischenposts bitte weg lassen, einfach bescheid geben wenn fertig

Ich kann den log nicht sehn. Es steht immer the filname, directory name, or volume label syntax is incorrect

Ich hab mein benutzerkonto jetzt im abgesicherten modus gestarten und dann otl:

All processes killed
========== OTL ==========
Registry key HKEY_USERS\Filax_ON_E\Software\Microsoft\Windows\CurrentVersion\Run not found.
File E:\ProgramData\kjmrrvow.exe not found.
File E:\ProgramData\ymcycrctzgkwzgm not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: 232442
->Flash cache emptied: 0 bytes

User: Alex Michi
->Flash cache emptied: 0 bytes

User: All Users

User: AppData

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Filax
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Flash cache emptied: 0 bytes

User: UpdatusUser.Filax-PC
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


[EMPTYTEMP]

User: 232442
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Alex Michi
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: AppData

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Filax
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 38228 bytes
->Java cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: UpdatusUser.Filax-PC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.55.0 log created on 09112012_185036

Files\Folders moved on Reboot...
C:\Users\Filax\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...
File C:\Users\Filax\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...

geht der normale modus?

nein es ist noch immer der weiße bildschirm

ok geht doch :-) danke danke danke

Und der AVG antivirus hat auch die datei (kjmrrvow.exe) gelöscht.

poste die fundmeldung