Virus blockiert Internet etc.

Prenauld

Liebes Forum,
ich habe seit einigen Tagen einen hübschen Virus (80000000.@; 800000cb.@), der zunächste die Treiber für WLAN, USB, Drucker etc. lahmgelegt hat.

Ich habe mehrere Scans gemacht. u.a. mit OTL, aber auch mit Spyhunter und Antimalware.
Infizierte Dateien, die gefunden wurden, konnte ich nicht löschen, und ich habe den Eindruck, dass es mehr Dateien werden, wenn ich den Rechner neu hochfahre.

Im abgesicherten Modus funktioniert alles aber noch, auch die Internetverbindung.


Hier die Dateien, vielleicht sagt das ja jemanden etwas?
Herzlichen Dank!



OTL Extras logfile created on: 18.02.2013 13:03:54 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\***\Desktop\Downloads
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1,99 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 73,12% Memory free
4,19 Gb Paging File | 3,81 Gb Available in Paging File | 90,94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 140,11 Gb Total Space | 78,37 Gb Free Space | 55,93% Space Free | Partition Type: NTFS

Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
.js [@ = JSFile] -- C:\Program Files\Macromedia\Dreamweaver 4\Dreamweaver.exe (Macromedia, Inc.)

[HKEY_USERS\S-1-5-21-1325203865-1460080553-2503124176-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
jsfile [open] -- "C:\Program Files\Macromedia\Dreamweaver 4\Dreamweaver.exe" "%1" (Macromedia, Inc.)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

========== Firewall Settings ==========

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}" = Sony Video Shared Library
"{0645A454-AD44-4F0D-99CF-6B762735AD1F}" = aioprnt
"{10934A28-0CC6-4B98-A14F-76B3546003AF}" = ksDIP
"{15D5C238-4C2E-4AEA-A66D-D6989A4C586B}" = VAIO Launcher
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1BEF9285-5530-426B-A5F1-5836B95C7EB1}" = VAIO Original Screen Saver
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{2063C2E8-3812-4BBD-9998-6610F80C1DD4}" = VAIO Media AC3 Decoder 1.0
"{206FD69B-F9FE-4164-81BD-D52552BC9C23}" = GearDrvs
"{23825B69-36DF-4DAD-9CFD-118D11D80F16}" = VAIO Content Folder Setting
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 30
"{2A0F3EF9-68EE-49E9-A05B-ED5B82DF63E5}" = Wireless Switch Setting Utility
"{2A2FF7F5-6F0E-4A5D-A881-39365E718BD6}" = VAIO Cozy Orange Wallpaper
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{374F03BB-9C09-4DB3-9C9B-C71E63292950}" = Google Earth
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{48820099-ED7D-424B-890C-9A82EF00656D}" = VAIO Update 3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works
"{4EA55D20-27FB-45D7-8726-147E8A5F6C62}" = VAIO MusicBox
"{500162A0-4DD5-460A-BAFD-895AAE48C532}" = VAIO Media Content Collection 6.0
"{560F6B2E-F0DF-44E5-8190-A4A161F0E205}" = VAIO Media 6.0
"{56BA241F-580C-43D2-8403-947241AAE633}" = center
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5855C127-1F20-404D-B7FB-1FD84D7EAB5E}" = VAIO Media Redistribution 6.0
"{5F12E9D1-402C-4672-86D7-52E86A3A1411}" = VAIO Content Importer VAIO Content Exporter
"{5F5DE5D5-D130-4110-A3A4-69FFB0B14BD9}" = VAIO Content Metadata XML Interface Library
"{6110F38A-5BE6-4199-AC96-D2DD6B4A3ADE}" = VAIO Content Metadata Intelligent Analyzing Manager
"{6332AFF1-9D9A-429C-AA03-F82749FA4F49}" = SonicStage Mastering Studio
"{638BAD93-701B-482A-86C6-72DFF3E6FE51}" =
"{63A6E9A9-A190-46D4-9430-2DB28654AFD8}" = Norton 360
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = VAIO Content Importer / VAIO Content Exporter
"{69351E9E-23ED-41D5-B146-EDBF83C63B66}" = VAIO Content Metadata Manager Setting
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B1F20F2-6321-4669-A58C-33DF8E7517FF}" = VAIO Entertainment Platform
"{6D2576EC-A0E9-418A-A09A-409933A3B6F4}" = VAIO Camera Capture Utility
"{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}" = VAIO Movie Story Template Data
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{785EB1D4-ECEC-4195-99B4-73C47E187721}" = VAIO Media Integrated Server 6.1
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{802889F8-6AF5-45A5-9764-CA5B999E50FC}" = VAIO Power Management
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8FC56444-161D-43B4-A662-F18F2E4A2A32}" = VAIO Content Metadata Manager Setting
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{92F8615C-43B7-4925-8457-B6D004E8D478}" = VAIO Content Metadata XML Interface Library
"{934A3213-1CB6-4264-84A2-EE080C017BCA}" = VAIO Tender Green Wallpaper
"{97BCD719-6ECB-458F-97D6-F38D2E07375E}" = VAIO Aqua Breeze Wallpaper
"{98FC7A64-774B-49B5-B046-4B4EBC053FA9}" = VAIO MusicBox Sample Music
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AB83A3C-604D-4B4F-AA25-A23A3FC39844}" = ArcSoft Magic-i Visual Effects Installer
"{9C1C8A04-F8CA-4472-A92D-4288CE32DE86}" = SonicStage Mastering Studio Plugins
"{9FA8B5F5-4BDC-4CF4-9202-AA97FF79AE98}" = VAIO Media
"{A5BA14E0-7384-11D4-BAE7-00409631A2C8}" = Macromedia Extension Manager
"{A63E7492-A0BC-4BB9-89A7-352965222380}" = VAIO Original Function Setting
"{A6E92CAB-9E63-46DC-8ABF-0CAFF7B7CD02}" = eXPert PDF 4
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" = Setting Utility Series
"{ABDA9912-5D00-11D4-BAE7-9367CA097955}" = Macromedia Dreamweaver 4
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch
"{AF9A04EB-7D8E-41DE-9EDE-4AB9BB2B71B6}" = VAIO Media Registration Tool 6.0
"{AFBA0609-EB70-43CB-B11C-294EDADFA101}" =
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}" = VAIO Movie Story
"{B7FB0C86-41A4-4402-9A33-912C462042A0}" = Roxio Easy Media Creator Home
"{BBFFB027-7D53-4E1B-95BC-35A2216D1D60}" = VAIO Long Battery Life Wallpaper
"{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{DA5BDB2A-12F0-4343-8351-21AAEB293990}" = PreReq
"{DE6B7599-D3EF-4436-8836-BAA0B0D7768D}" = aiofw
"{DF7DB916-90E5-40F2-9010-B8125EB5FD6F}" = SonicStage Mastering Studio Audio Filter
"{E0F274B7-592B-4669-8FB8-8D9825A09858}" = KODAK Home Center Software
"{E4D96ABB-E0D8-4CA4-856E-A2703F5490F0}" = VAIO Content Metadata Intelligent Analyzing Manager
"{E66BB7B9-EC7B-45A6-B479-AD43A9B32AA0}" = SonicStage Mastering Studio
"{E6707034-D7A4-49B1-94D0-F5AACE46F06C}" = Instant Mode
"{E89D31F3-7F6C-47A3-8669-0A8DDE27B664}" = VAIO Media Registration Tool
"{E91E8912-769D-42F0-8408-0E329443BABC}" = Sitecom Wireless LAN Card
"{EBE55E74-AF94-47BB-849B-C79F236C65F4}" = VAIO Movie Story
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}" = VAIO Event Service
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" =
"{FAA6B94E-78A7-489C-B2DB-050D9FEBFADA}" = VAIO Content Metadata Intelligent Analyzing Manager
"{FE24086F-3B0C-4C47-A874-97A7B8E2FBBE}" = aioscnnr
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AP storage" = AP storage
"Avira AntiVir Desktop" = Avira Free Antivirus
"CCleaner" = CCleaner
"CDex" = CDex - Open Source Digital Audio CD Extractor
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"CUEcards 2000" = CUEcards 2000
"Defraggler" = Defraggler
"dlanconf" = devolo dLAN-Konfigurationsassistent
"dlanwlancfg" = devolo dLAN Wireless extender Konfiguration
"dslmon" = devolo Informer
"dt icon module" =
"easyshare" = devolo EasyShare
"eBay HTML" =
"ElsterFormular 13.2.0.8623k" = ElsterFormular
"ESET Online Scanner" = ESET Online Scanner v3
"Google Desktop" = Google Desktop
"gtfirstboot Setting Request" =
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mobile Partner" = Mobile Partner
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 16.0.1 (x86 de)" = Mozilla Firefox 16.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"OpenMG HotFix4.7-07-13-22-01" = OpenMG Limited Patch 4.7-07-15-19-01
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"VAIO Help and Support" =
"VAIO MFU Module" =
"VAIO Xblack Contents" = VAIO Xblack Contents
"WinRAR archiver" = WinRAR Archivierer

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1325203865-1460080553-2503124176-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"GoToMeeting" = GoToMeeting 4.5.0.457

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 17.02.2013 09:42:16 | Computer Name = ***-PC | Source = VzCdbSvc | ID = 7
Description = Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5})
(Fehlercode = 0x80042019)

Error - 17.02.2013 09:42:20 | Computer Name = ***-PC | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff

Error - 18.02.2013 05:28:00 | Computer Name = ***-PC | Source = EventSystem | ID = 4609
Description =

Error - 18.02.2013 07:53:47 | Computer Name = ***-PC | Source = Distributed Link Tracking Client | ID = 12500
Description =

Error - 18.02.2013 07:53:48 | Computer Name = ***-PC | Source = VzCdbSvc | ID = 7
Description = Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5})
(Fehlercode = 0x80042019)

Error - 18.02.2013 07:53:53 | Computer Name = ***-PC | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff

Error - 18.02.2013 07:57:00 | Computer Name = ***-PC | Source = Distributed Link Tracking Client | ID = 12500
Description =

Error - 18.02.2013 07:57:01 | Computer Name = ***-PC | Source = VzCdbSvc | ID = 7
Description = Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5})
(Fehlercode = 0x80042019)

Error - 18.02.2013 07:57:06 | Computer Name = ***-PC | Source = Avira Antivirus | ID = 4122
Description = Die Datei AVGDLL_Init(avgntflt) konnte nicht geladen werden. Fehlercode:
0xffffffff

Error - 18.02.2013 07:59:06 | Computer Name = ***-PC | Source = EventSystem | ID = 4609
Description =

[ System Events ]
Error - 15.02.2013 07:17:44 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 15.02.2013 07:27:20 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 18.02.2013 05:27:53 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 18.02.2013 05:28:00 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 18.02.2013 05:28:02 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 18.02.2013 05:28:07 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 18.02.2013 07:59:00 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 18.02.2013 07:59:06 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 18.02.2013 07:59:08 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =

Error - 18.02.2013 07:59:13 | Computer Name = ***-PC | Source = DCOM | ID = 10005
Description =


< End of report >


und:

OTL logfile created on: 18.02.2013 13:03:54 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\***\Desktop\Downloads
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1,99 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 73,12% Memory free
4,19 Gb Paging File | 3,81 Gb Available in Paging File | 90,94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 140,11 Gb Total Space | 78,37 Gb Free Space | 55,93% Space Free | Partition Type: NTFS

Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\***\Desktop\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)


========== Modules (No Company Name) ==========

MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()


========== Services (SafeList) ==========

SRV - (c05bbb311abc7514) -- C:\Windows\System32\drivers\c05bbb311abc7514.sys ()
SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) -- C:\Programme\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (Kodak AiO Network Discovery Service) -- C:\Programme\Kodak\AiO\Center\ekdiscovery.exe (Eastman Kodak Company)
SRV - (VAIO Event Service) -- C:\Programme\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
SRV - (VcmIAlzMgr) -- C:\Programme\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation)
SRV - (VcmXmlIfHelper) -- C:\Programme\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe (Sony Corporation)
SRV - (VAIO Entertainment TV Device Arbitration Service) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe (Sony Corporation)
SRV - (VzFw) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe (Sony Corporation)
SRV - (VzCdbSvc) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe (Sony Corporation)
SRV - (Vcsw) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-AppServer) -- C:\Programme\Sony\VAIO Media Integrated Server\VMISrv.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-Mobile-Gateway) -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-UCLS-UPnP) -- C:\Programme\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-UPnP) -- C:\Programme\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-UCLS-HTTP) -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-HTTP) -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe (Sony Corporation)
SRV - (TOSHIBA Bluetooth Service) -- C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
SRV - (VAIOMediaPlatform-UCLS-AppServer) -- C:\Programme\Sony\VAIO Media Integrated Server\UCLS.exe (Sony Corporation)
SRV - (IviRegMgr) -- C:\Programme\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
SRV - (MSCSPTISRV) -- C:\Programme\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe (Sony Corporation)
SRV - (SPTISRV) -- C:\Programme\Common Files\Sony Shared\AVLib\SPTISRV.exe (Sony Corporation)
SRV - (PACSPTISVR) -- C:\Programme\Common Files\Sony Shared\AVLib\PACSPTISVR.exe ()
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (UIUSys) -- system32\DRIVERS\UIUSYS.SYS File not found
DRV - (pwbda) -- System32\drivers\wqqka.sys File not found
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) -- C:\Windows\system32\drivers\blbdrive.sys File not found
DRV - (c05bbb311abc7514) -- C:\Windows\System32\drivers\c05bbb311abc7514.sys ()
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (Wanarpv6) -- C:\Windows\System32\drivers\wanarp.sys ()
DRV - (Wanarp) -- C:\Windows\System32\drivers\wanarp.sys ()
DRV - (NDProxy) -- C:\Windows\System32\drivers\ndproxy.sys ()
DRV - (NdisTapi) -- C:\Windows\System32\drivers\ndistapi.sys ()
DRV - (PSched) -- C:\Windows\System32\drivers\pacer.sys ()
DRV - (Ntfs) -- C:\Windows\System32\drivers\ntfs.sys ()
DRV - (volsnap) -- C:\Windows\System32\drivers\volsnap.sys ()
DRV - (NativeWifiP) -- C:\Windows\System32\drivers\nwifi.sys ()
DRV - (srv) -- C:\Windows\System32\drivers\srv.sys ()
DRV - (srvnet) -- C:\Windows\System32\drivers\srvnet.sys ()
DRV - (tunnel) -- C:\Windows\System32\drivers\tunnel.sys ()
DRV - (tunmp) -- C:\Windows\System32\drivers\TUNMP.SYS ()
DRV - (Tcpip6) -- C:\Windows\System32\drivers\tcpip.sys ()
DRV - (Tcpip) -- C:\Windows\System32\drivers\tcpip.sys ()
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (srv2) -- C:\Windows\System32\drivers\srv2.sys ()
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (Wdf01000) -- C:\Windows\System32\drivers\Wdf01000.sys ()
DRV - (sermouse) -- C:\Windows\System32\drivers\sermouse.sys ()
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (usbhub) -- C:\Windows\System32\drivers\usbhub.sys ()
DRV - (usbccgp) -- C:\Windows\System32\drivers\usbccgp.sys ()
DRV - (usbehci) -- C:\Windows\System32\drivers\usbehci.sys ()
DRV - (usbuhci) -- C:\Windows\System32\drivers\usbuhci.sys ()
DRV - (USBSTOR) -- C:\Windows\System32\drivers\USBSTOR.SYS ()
DRV - (Rasl2tp) -- C:\Windows\System32\drivers\rasl2tp.sys ()
DRV - (PptpMiniport) -- C:\Windows\System32\drivers\raspptp.sys ()
DRV - (usbvideo) -- C:\Windows\System32\drivers\usbvideo.sys ()
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys ()
DRV - (NETw4v32) -- C:\Windows\System32\drivers\NETw4v32.sys ()
DRV - (DMICall) -- C:\Windows\System32\drivers\DMICall.sys (Sony Corporation)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys ()
DRV - (ti21sony) -- C:\Windows\System32\drivers\ti21sony.sys ()
DRV - (tosrfusb) -- C:\Windows\System32\drivers\tosrfusb.sys ()
DRV - (tosrfbd) -- C:\Windows\System32\drivers\tosrfbd.sys ()
DRV - (R5U870FLx86) -- C:\Windows\System32\drivers\R5U870FLx86.sys ()
DRV - (R5U870FUx86) -- C:\Windows\System32\drivers\R5U870FUx86.sys ()
DRV - (regi) -- C:\Windows\System32\drivers\regi.sys ()
DRV - (Tosrfhid) -- C:\Windows\System32\drivers\Tosrfhid.sys ()
DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys ()
DRV - (NPF_devolo) -- C:\Windows\System32\drivers\npf_devolo.sys ()
DRV - (tosrfbnp) -- C:\Windows\System32\drivers\tosrfbnp.sys ()
DRV - (SNC) -- C:\Windows\System32\drivers\SonyNC.sys ()
DRV - (QWAVEdrv) -- C:\Windows\System32\drivers\qwavedrv.sys ()
DRV - (NDIS) -- C:\Windows\System32\drivers\ndis.sys ()
DRV - (volmgrx) -- C:\Windows\System32\drivers\volmgrx.sys ()
DRV - (pcmcia) -- C:\Windows\System32\drivers\pcmcia.sys ()
DRV - (MsRPC) -- C:\Windows\System32\drivers\msrpc.sys ()
DRV - (pci) -- C:\Windows\System32\drivers\pci.sys ()
DRV - (nv_agp) -- C:\Windows\System32\drivers\NV_AGP.SYS ()
DRV - (TermDD) -- C:\Windows\System32\drivers\termdd.sys ()
DRV - (volmgr) -- C:\Windows\System32\drivers\volmgr.sys ()
DRV - (Mup) -- C:\Windows\System32\drivers\mup.sys ()
DRV - (partmgr) -- C:\Windows\System32\drivers\partmgr.sys ()
DRV - (sbp2port) -- C:\Windows\System32\drivers\sbp2port.sys ()
DRV - (uliagpkx) -- C:\Windows\System32\drivers\ULIAGPKX.SYS ()
DRV - (uagp35) -- C:\Windows\System32\drivers\UAGP35.SYS ()
DRV - (mssmbios) -- C:\Windows\System32\drivers\mssmbios.sys ()
DRV - (viaagp) -- C:\Windows\System32\drivers\VIAAGP.SYS ()
DRV - (Wd) -- C:\Windows\System32\drivers\wd.sys ()
DRV - (spldr) -- C:\Windows\System32\drivers\spldr.sys ()
DRV - (pciide) -- C:\Windows\System32\drivers\pciide.sys ()
DRV - (swenum) -- C:\Windows\System32\drivers\swenum.sys ()
DRV - (usbprint) -- C:\Windows\System32\drivers\usbprint.sys ()
DRV - (PEAUTH) -- C:\Windows\System32\drivers\PEAuth.sys ()
DRV - (WpdUsb) -- C:\Windows\System32\drivers\WpdUsb.sys ()
DRV - (rdpdr) -- C:\Windows\System32\drivers\rdpdr.sys ()
DRV - (RDPWD) -- C:\Windows\System32\drivers\rdpwd.sys ()
DRV - (tssecsrv) -- C:\Windows\System32\drivers\tssecsrv.sys ()
DRV - (TDTCP) -- C:\Windows\System32\drivers\tdtcp.sys ()
DRV - (TDPIPE) -- C:\Windows\System32\drivers\tdpipe.sys ()
DRV - (RDPENCDD) -- C:\Windows\System32\drivers\RDPENCDD.sys ()
DRV - (RDPCDD) -- C:\Windows\System32\drivers\RDPCDD.sys ()
DRV - (ws2ifsl) -- C:\Windows\System32\drivers\ws2ifsl.sys ()
DRV - (NdisWan) -- C:\Windows\System32\drivers\ndiswan.sys ()
DRV - (RasAcd) -- C:\Windows\System32\drivers\rasacd.sys ()
DRV - (RasPppoe) -- C:\Windows\System32\drivers\raspppoe.sys ()
DRV - (tcpipreg) -- C:\Windows\System32\drivers\tcpipreg.sys ()
DRV - (tdx) -- C:\Windows\System32\drivers\tdx.sys ()
DRV - (nsiproxy) -- C:\Windows\System32\drivers\nsiproxy.sys ()
DRV - (NetBIOS) -- C:\Windows\System32\drivers\netbios.sys ()
DRV - (Ndisuio) -- C:\Windows\System32\drivers\ndisuio.sys ()
DRV - (netbt) -- C:\Windows\System32\drivers\netbt.sys ()
DRV - (Smb) -- C:\Windows\System32\drivers\smb.sys ()
DRV - (rspndr) -- C:\Windows\System32\drivers\rspndr.sys ()
DRV - (umbus) -- C:\Windows\System32\drivers\umbus.sys ()
DRV - (ohci1394) -- C:\Windows\System32\drivers\ohci1394.sys ()
DRV - (usbcir) -- C:\Windows\System32\drivers\usbcir.sys ()
DRV - (usbohci) -- C:\Windows\System32\drivers\usbohci.sys ()
DRV - (WUDFRd) -- C:\Windows\System32\drivers\WUDFRd.sys ()
DRV - (vga) -- C:\Windows\System32\drivers\vgapnp.sys ()
DRV - (VgaSave) -- C:\Windows\System32\drivers\vga.sys ()
DRV - (WacomPen) -- C:\Windows\System32\drivers\wacompen.sys ()
DRV - (sfloppy) -- C:\Windows\System32\drivers\sfloppy.sys ()
DRV - (sffp_sd) -- C:\Windows\System32\drivers\sffp_sd.sys ()
DRV - (sffp_mmc) -- C:\Windows\System32\drivers\sffp_mmc.sys ()
DRV - (sffdisk) -- C:\Windows\System32\drivers\sffdisk.sys ()
DRV - (Serial) -- C:\Windows\System32\drivers\serial.sys ()
DRV - (Parport) -- C:\Windows\System32\drivers\parport.sys ()
DRV - (Serenum) -- C:\Windows\System32\drivers\serenum.sys ()
DRV - (Parvdm) -- C:\Windows\System32\drivers\parvdm.sys ()
DRV - (MSPQM) -- C:\Windows\System32\drivers\mspqm.sys ()
DRV - (MSTEE) -- C:\Windows\System32\drivers\mstee.sys ()
DRV - (Null) -- C:\Windows\System32\drivers\null.sys ()
DRV - (WmiAcpi) -- C:\Windows\System32\drivers\wmiacpi.sys ()
DRV - (rdbss) -- C:\Windows\System32\drivers\rdbss.sys ()
DRV - (udfs) -- C:\Windows\System32\drivers\udfs.sys ()
DRV - (Npfs) -- C:\Windows\System32\drivers\npfs.sys ()
DRV - (ViaC7) -- C:\Windows\System32\drivers\viac7.sys ()
DRV - (Processor) -- C:\Windows\System32\drivers\processr.sys ()
DRV - (tosporte) -- C:\Windows\System32\drivers\tosporte.sys ()
DRV - (RT73) -- C:\Windows\System32\drivers\rt73.sys ()
DRV - (Tosrfcom) -- C:\Windows\System32\drivers\tosrfcom.sys ()
DRV - (tosrfnds) -- C:\Windows\System32\drivers\tosrfnds.sys ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {314853C9-FE11-458D-A2E4-E930BADC4669}
IE - HKLM\..\SearchScopes\{314853C9-FE11-458D-A2E4-E930BADC4669}: "URL" = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta=


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\..\SearchScopes,DefaultScope = {314853C9-FE11-458D-A2E4-E930BADC4669}
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\..\SearchScopes\{314853C9-FE11-458D-A2E4-E930BADC4669}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SNYK
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = hxxp://127.0.0.1:4664/search&s=ihnm6qJewxZ_29v2fmFilhCi1xw?q={searchTerms}
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 10.10.14.10:80
IE - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = 10.10.14.10

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "qrobe.it"
FF - prefs.js..extensions.enabledAddons: googlesharing@extension.thoughtcrime.org:0.22
FF - prefs.js..extensions.enabledAddons: firefox@ghostery.com:2.8.4
FF - prefs.js..extensions.enabledAddons: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.68
FF - prefs.js..extensions.enabledAddons: donottrackplus@abine.com:2.2.6.110
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6
FF - prefs.js..extensions.enabledItems: googlesharing@extension.thoughtcrime.org:0.21
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.1.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.28 14:22:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.01.10 11:33:06 | 000,000,000 | ---D | M]

[2008.10.24 15:33:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2013.02.14 17:25:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ki94vs61.default\extensions
[2012.10.17 15:39:20 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ki94vs61.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2013.02.14 17:25:43 | 000,000,000 | ---D | M] (DoNotTrackMe) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ki94vs61.default\extensions\donottrackplus@abine.com
[2013.02.06 15:51:05 | 000,000,000 | ---D | M] (Ghostery) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ki94vs61.default\extensions\firefox@ghostery.com
[2011.07.05 11:18:18 | 000,000,000 | ---D | M] (GoogleSharing) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ki94vs61.default\extensions\googlesharing@extension.thoughtcrime.org
[2011.07.05 11:18:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ki94vs61.default\extensions\googlesharing@extension.thoughtcrime.org\chrome
[2011.07.05 11:18:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ki94vs61.default\extensions\googlesharing@extension.thoughtcrime.org\components
[2011.07.05 11:18:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\ki94vs61.default\extensions\googlesharing@extension.thoughtcrime.org\defaults
[2013.01.30 10:11:59 | 000,533,536 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\ki94vs61.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2013.02.14 16:03:34 | 000,817,280 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\ki94vs61.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.02.06 15:51:05 | 000,138,614 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\ki94vs61.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
[2013.02.12 06:55:59 | 000,007,919 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\ki94vs61.default\extensions\donottrackplus@abine.com\chrome\content\ff\view_expiry.js
[2013.02.06 15:56:58 | 000,002,123 | ---- | M] () -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\ki94vs61.default\searchplugins\qrobeit.xml
[2012.07.05 13:17:49 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.10.28 14:22:00 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.11.10 05:54:13 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.06.14 23:46:57 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.10.28 14:21:57 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.06.14 23:46:57 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.14 23:46:57 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.14 23:46:57 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.14 23:46:56 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programme\Google BAE\BAE.dll (Your Company Name)
O3 - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Conime] C:\Windows\System32\conime.exe (Microsoft Corporation)
O4 - HKLM..\Run: [EKIJ5000StatusMonitor] C:\Windows\System32\spool\drivers\w32x86\3\EKIJ5000MUI.exe (Eastman Kodak Company)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [vspdfprsrv.exe] C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe ()
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\..Trusted Domains: localhost ([]http in Lokales Intranet)
O15 - HKU\S-1-5-21-1325203865-1460080553-2503124176-1000\..Trusted Ranges: GD ([http] in Lokales Intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3B90B628-2CE4-44ED-B98D-40CBCCBBCB7F}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BDC8CF50-17D2-4F93-8387-EA49ADFF4354}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CCB919D9-EE52-41F3-A80E-9C5B257587C0}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E8D3B9EF-A0AB-41E2-979F-2C01C0F80089}: DhcpNameServer = 192.168.31.252 195.144.67.8
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{08f13077-3cbd-11df-915f-001a803c2a1b}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{28933b7e-060c-11e0-ab90-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{28933b7e-060c-11e0-ab90-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3c859241-0992-11df-aa9c-000cf61b9f4f}\Shell - "" = AutoRun
O33 - MountPoints2\{3c859241-0992-11df-aa9c-000cf61b9f4f}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{3c859243-0992-11df-aa9c-000cf61b9f4f}\Shell - "" = AutoRun
O33 - MountPoints2\{3c859243-0992-11df-aa9c-000cf61b9f4f}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{3c859287-0992-11df-aa9c-000cf61b9f4f}\Shell - "" = AutoRun
O33 - MountPoints2\{3c859287-0992-11df-aa9c-000cf61b9f4f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3c8592c1-0992-11df-aa9c-000cf61b9f4f}\Shell - "" = AutoRun
O33 - MountPoints2\{3c8592c1-0992-11df-aa9c-000cf61b9f4f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{583ba377-0bf3-11df-aa1c-000cf61b9f4f}\Shell - "" = AutoRun
O33 - MountPoints2\{583ba377-0bf3-11df-aa1c-000cf61b9f4f}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{583ba379-0bf3-11df-aa1c-000cf61b9f4f}\Shell - "" = AutoRun
O33 - MountPoints2\{583ba379-0bf3-11df-aa1c-000cf61b9f4f}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{677d5836-4243-11df-9468-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{677d5836-4243-11df-9468-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{a12fedc1-0644-11de-b44d-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{a12fedc1-0644-11de-b44d-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{a12fedcf-0644-11de-b44d-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{a12fedcf-0644-11de-b44d-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{a12fedd7-0644-11de-b44d-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{a12fedd7-0644-11de-b44d-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{a12fedfd-0644-11de-b44d-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{a12fedfd-0644-11de-b44d-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{c73a92c6-04b6-11de-94a5-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{c73a92c6-04b6-11de-94a5-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{c73a92ed-04b6-11de-94a5-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{c73a92ed-04b6-11de-94a5-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{de0ee71a-3d65-11df-927d-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{de0ee71a-3d65-11df-927d-001a803c2a1b}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{de0ee71c-3d65-11df-927d-001a803c2a1b}\Shell - "" = AutoRun
O33 - MountPoints2\{de0ee71c-3d65-11df-927d-001a803c2a1b}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013.02.18 12:15:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
[2013.02.18 12:15:59 | 000,000,000 | ---D | C] -- C:\Program Files\MozBackup
[2013.02.18 11:02:23 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\Lesezeichen
[2013.02.15 14:02:08 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\DriverCure
[2013.02.15 14:02:04 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\SpeedyPC Software
[2013.02.15 14:02:04 | 000,000,000 | ---D | C] -- C:\ProgramData\SpeedyPC Software
[2013.02.14 15:30:26 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2013.02.13 16:08:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.02.13 16:08:56 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.02.13 16:08:56 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.02.13 16:08:20 | 010,156,344 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\***\Desktop\mbam-setup-1.70.0.1100(1).exe
[2013.02.13 15:46:12 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Malwarebytes
[2013.02.13 15:46:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.02.13 15:45:33 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\Malwarebytes' Anti-Malware
[2013.01.22 17:52:01 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\Krimispiel 2
[4 C:\Users\***\Desktop\*.tmp files -> C:\Users\***\Desktop\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.02.18 13:03:09 | 000,659,252 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.02.18 13:03:09 | 000,617,130 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.02.18 13:03:09 | 000,122,074 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.02.18 13:03:09 | 000,108,660 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.02.18 12:58:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.02.18 12:56:30 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.02.18 12:56:30 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.02.18 12:17:34 | 006,987,203 | ---- | M] () -- C:\Users\***\Documents\Firefox 16.0.1 (de) - 2013-02-18.pcv
[2013.02.18 12:15:59 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\MozBackup.lnk
[2013.02.18 11:39:10 | 000,002,637 | ---- | M] () -- C:\Users\***\Desktop\Microsoft Office Word 2003.lnk
[2013.02.18 10:48:47 | 000,001,356 | ---- | M] () -- C:\Users\***\AppData\Local\d3d9caps.dat
[2013.02.14 17:30:03 | 000,000,899 | ---- | M] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013.02.13 16:08:57 | 000,000,906 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.02.13 16:00:01 | 010,156,344 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\***\Desktop\mbam-setup-1.70.0.1100(1).exe
[2013.02.13 15:10:04 | 000,391,512 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.02.12 16:43:27 | 000,058,880 | ---- | M] () -- C:\Windows\System32\drivers\c05bbb311abc7514.sys
[4 C:\Users\***\Desktop\*.tmp files -> C:\Users\***\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.02.18 12:17:15 | 006,987,203 | ---- | C] () -- C:\Users\***\Documents\Firefox 16.0.1 (de) - 2013-02-18.pcv
[2013.02.18 12:15:59 | 000,000,824 | ---- | C] () -- C:\Users\Public\Desktop\MozBackup.lnk
[2013.02.13 16:08:57 | 000,000,906 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.02.12 16:43:27 | 000,058,880 | ---- | C] () -- C:\Windows\System32\drivers\c05bbb311abc7514.sys
[2012.07.10 13:54:39 | 000,061,952 | ---- | C] () -- C:\Windows\System32\drivers\wanarp.sys
[2012.07.10 13:54:39 | 000,048,640 | ---- | C] () -- C:\Windows\System32\drivers\ndproxy.sys
[2012.07.10 13:54:39 | 000,020,480 | ---- | C] () -- C:\Windows\System32\drivers\ndistapi.sys
[2012.07.10 13:54:37 | 000,070,144 | ---- | C] () -- C:\Windows\System32\drivers\pacer.sys
[2012.07.10 13:54:36 | 000,619,008 | ---- | C] () -- C:\Windows\System32\drivers\dxgkrnl.sys
[2012.07.10 13:54:36 | 000,036,864 | ---- | C] () -- C:\Windows\System32\cdd.dll
[2012.07.10 13:53:56 | 000,258,232 | ---- | C] () -- C:\Windows\System32\drivers\acpi.sys
[2012.07.10 13:53:56 | 000,020,920 | ---- | C] () -- C:\Windows\System32\drivers\compbatt.sys
[2012.07.10 13:53:55 | 000,028,344 | ---- | C] () -- C:\Windows\System32\drivers\battc.sys
[2012.07.10 13:53:55 | 000,014,208 | ---- | C] () -- C:\Windows\System32\drivers\CmBatt.sys
[2012.07.10 13:53:38 | 001,060,920 | ---- | C] () -- C:\Windows\System32\drivers\ntfs.sys
[2012.07.10 13:53:38 | 000,041,984 | ---- | C] () -- C:\Windows\System32\drivers\monitor.sys
[2012.07.10 13:51:59 | 000,109,624 | ---- | C] () -- C:\Windows\System32\drivers\ataport.sys
[2012.07.10 13:51:59 | 000,045,112 | ---- | C] () -- C:\Windows\System32\drivers\pciidex.sys
[2012.07.10 13:51:59 | 000,021,560 | ---- | C] () -- C:\Windows\System32\drivers\atapi.sys
[2012.07.10 13:51:59 | 000,017,464 | ---- | C] () -- C:\Windows\System32\drivers\intelide.sys
[2012.07.10 13:51:58 | 000,211,000 | ---- | C] () -- C:\Windows\System32\drivers\volsnap.sys
[2012.07.10 13:51:58 | 000,154,624 | ---- | C] () -- C:\Windows\System32\drivers\nwifi.sys
[2012.07.05 15:26:18 | 000,306,688 | ---- | C] () -- C:\Windows\System32\drivers\srv.sys
[2012.07.05 15:26:18 | 000,084,992 | ---- | C] () -- C:\Windows\System32\drivers\srvnet.sys
[2012.07.05 15:24:28 | 000,211,968 | ---- | C] () -- C:\Windows\System32\drivers\mrxsmb10.sys
[2012.07.05 15:24:28 | 000,102,400 | ---- | C] () -- C:\Windows\System32\drivers\mrxsmb.sys
[2012.07.05 15:24:28 | 000,058,368 | ---- | C] () -- C:\Windows\System32\drivers\mrxsmb20.sys
[2012.07.05 15:23:36 | 003,502,480 | ---- | C] () -- C:\Windows\System32\ntkrnlpa.exe
[2012.07.05 15:06:21 | 000,025,088 | ---- | C] () -- C:\Windows\System32\drivers\tunnel.sys
[2012.07.05 15:06:21 | 000,015,360 | ---- | C] () -- C:\Windows\System32\drivers\TUNMP.SYS
[2012.07.05 15:06:20 | 000,815,104 | ---- | C] () -- C:\Windows\System32\drivers\tcpip.sys
[2012.07.05 15:02:59 | 002,031,104 | ---- | C] () -- C:\Windows\System32\win32k.sys
[2012.07.05 14:08:45 | 000,396,800 | ---- | C] () -- C:\Windows\System32\drivers\http.sys
[2012.04.25 08:58:39 | 000,137,928 | ---- | C] () -- C:\Windows\System32\drivers\avipbb.sys
[2012.04.25 08:58:39 | 000,036,000 | ---- | C] () -- C:\Windows\System32\drivers\avkmgr.sys
[2011.09.27 14:24:06 | 000,289,792 | ---- | C] () -- C:\Windows\System32\atmfd.dll
[2011.09.27 14:19:30 | 000,408,136 | ---- | C] () -- C:\Windows\System32\drivers\ksecdd.sys
[2011.09.27 14:14:51 | 000,130,048 | ---- | C] () -- C:\Windows\System32\drivers\srv2.sys
[2011.09.27 14:11:24 | 000,213,592 | ---- | C] () -- C:\Windows\System32\drivers\netio.sys
[2011.01.26 15:51:43 | 000,072,080 | ---- | C] () -- C:\Users\***\g2mdlhlpx.exe
[2008.10.24 15:12:24 | 000,046,080 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.10.24 15:12:24 | 000,001,356 | ---- | C] () -- C:\Users\***\AppData\Local\d3d9caps.dat

========== ZeroAccess Check ==========

[2006.11.02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
"ThreadingModel" = Both
"" = shell32.dll -- [2012.07.05 15:11:32 | 011,315,712 | ---- | M] (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.07.05 15:11:32 | 011,315,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = fastprox.dll -- [2012.07.05 15:07:12 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2006.11.02 10:46:13 | 000,348,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013.02.15 14:02:08 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\DriverCure
[2013.02.14 17:31:21 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Dropbox
[2012.05.15 16:20:46 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\elsterformular
[2012.04.26 12:31:53 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\eXPert PDF Editor
[2009.04.27 10:17:14 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\InterVideo
[2011.04.07 12:27:46 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\OpenOffice.org
[2013.02.15 14:02:04 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\SpeedyPC Software
[2011.01.11 11:23:42 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Temp

========== Purity Check ==========



< End of report >