Chrome|Firefox lädt keine Seiten (websearch.mocaflix.com)

OTL logfile created on: 04.04.2013 14:49:14 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\**** ****\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 1,73 Gb Available Physical Memory | 57,54% Memory free
6,20 Gb Paging File | 4,96 Gb Available in Paging File | 80,04% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 15,44 Gb Free Space | 13,26% Space Free | Partition Type: NTFS
Drive D: | 106,68 Gb Total Space | 9,49 Gb Free Space | 8,89% Space Free | Partition Type: NTFS
Drive F: | 463,50 Mb Total Space | 19,38 Mb Free Space | 4,18% Space Free | Partition Type: FAT
 
Computer Name: J********-PC | User Name: ********* | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Windows\System32\Macromed\Flash\FlashUtil32_11_6_602_180_ActiveX.exe (Adobe Systems Incorporated)
PRC - C:\Users\****\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\FRITZ!DSL\IGDCTRL.EXE (AVM Berlin)
PRC - C:\Program Files\FRITZ!DSL\StCenter.exe (AVM Berlin)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\FRITZ!DSL\FwebProt.exe (AVM Berlin)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
PRC - C:\Program Files\ASUS\SmartLogon\sensorsrv.exe (ASUS)
PRC - C:\Program Files\ASUS\ASUS Live Update\ALU.exe ()
PRC - C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)
PRC - C:\Program Files\ATK Hotkey\Hcontrol.exe (ATK0100)
PRC - C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
PRC - C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe ()
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\P4G\BatteryLife.exe (ATK)
PRC - C:\Program Files\ATK Hotkey\WDC.exe ()
PRC - C:\Program Files\ATK Hotkey\KBFiltr.exe ()
PRC - C:\Program Files\ATK Hotkey\ATKOSD.exe ()
PRC - C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
PRC - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()
PRC - C:\Program Files\Wireless Console 2\wcourier.exe ()
PRC - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe ()
PRC - C:\Windows\System32\ACEngSvr.exe (ASUSTeK)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\75b362975753a31559874bea5609e59c\System.Deployment.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\39f4c7717661667c68f9af8c4f6402b9\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\dfsvc\46477be438c431f09e4d23ec47604f8e\dfsvc.ni.exe ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\43cd41484df96d15df949eb17dd88152\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\5de5d8c1c02e33789e3cf7e3f54c0ec9\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dll ()
MOD - C:\Program Files\preispilot\Internet Explorer\preispilot.dll ()
MOD - C:\Program Files\WinRAR\rarext.dll ()
MOD - C:\Windows\System32\CmdLineExt03.dll ()
MOD - C:\Program Files\ASUS\ASUS Live Update\ALU.exe ()
MOD - C:\Program Files\ASUS\ASUS Data Security Manager\AdsmendecExt.dll ()
MOD - C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll ()
MOD - C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (IGDCTRL) -- C:\Program Files\FRITZ!DSL\IGDCTRL.EXE (AVM Berlin)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (ASLDRService) -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
SRV - (ATKGFNEXSrv) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
SRV - (spmgr) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()
SRV - (ADSMService) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe ()
 
 
========== Driver Services (SafeList) ==========
 
DRV - (ZTEusbser6k) -- system32\DRIVERS\ZTEusbser6k.sys File not found
DRV - (ZTEusbnmea) -- system32\DRIVERS\ZTEusbnmea.sys File not found
DRV - (ZTEusbmdm6k) -- system32\DRIVERS\ZTEusbmdm6k.sys File not found
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (massfilter) -- system32\drivers\massfilter.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (clwvd) -- system32\DRIVERS\clwvd.sys File not found
DRV - (ALSysIO) -- C:\Users\****~1\AppData\Local\Temp\ALSysIO.sys File not found
DRV - (aclphwmt) --  File not found
DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (AswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (sptd) -- C:\Windows\System32\drivers\sptd.sys ()
DRV - (ewusbnet) -- C:\Windows\System32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (teamviewervpn) -- C:\Windows\System32\drivers\teamviewervpn.sys (TeamViewer GmbH)
DRV - (hwusbdev) -- C:\Windows\System32\drivers\ewusbdev.sys (Huawei Technologies Co., Ltd.)
DRV - (ElRawDisk) -- C:\Windows\System32\drivers\rsdrv.sys (EldoS Corporation)
DRV - (irsir) -- C:\Windows\System32\drivers\irsir.sys (Microsoft Corporation)
DRV - (NETw3v32) -- C:\Windows\System32\drivers\NETw3v32.sys (Intel Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (AtcL001) -- C:\Windows\System32\drivers\l160x86.sys (Atheros Communications, Inc.)
DRV - (SNP2UVC) -- C:\Windows\System32\drivers\snp2uvc.sys ()
DRV - (lullaby) -- C:\Windows\System32\drivers\lullaby.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (AsDsm) -- C:\Windows\System32\drivers\AsDsm.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (rimmptsk) -- C:\Windows\System32\drivers\rimmptsk.sys (REDC)
DRV - (ghaio) -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys ()
DRV - (rismxdp) -- C:\Windows\System32\drivers\rixdptsk.sys (REDC)
DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (ASMMAP) -- C:\Program Files\ATKGFNEX\ASMMAP.sys ()
DRV - (s117obex) -- C:\Windows\System32\drivers\s117obex.sys (MCCI Corporation)
DRV - (s117mgmt) -- C:\Windows\System32\drivers\s117mgmt.sys (MCCI Corporation)
DRV - (s117unic) -- C:\Windows\System32\drivers\s117unic.sys (MCCI Corporation)
DRV - (s117bus) -- C:\Windows\System32\drivers\s117bus.sys (MCCI Corporation)
DRV - (NETw4v32) -- C:\Windows\System32\drivers\NETw4v32.sys (Intel Corporation)
DRV - (kbfiltr) -- C:\Windows\System32\drivers\kbfiltr.sys ( )
DRV - (MTsensor) -- C:\Windows\System32\drivers\ATKACPI.sys (ATK0100)
DRV - (smserial) -- C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)
DRV - (AVMUNET) -- C:\Windows\System32\drivers\avmunet.sys (AVM GmbH)
DRV - (StarOpen) -- C:\Windows\System32\drivers\StarOpen.sys ()
DRV - (sscdbus) -- C:\Windows\System32\drivers\sscdbus.sys (MCCI)
DRV - (k750bus) -- C:\Windows\System32\drivers\k750bus.sys (MCCI)
DRV - (SPOTIGOSp50) -- C:\Windows\System32\drivers\SPOTIGOSp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (FTDIBUS) -- C:\Windows\System32\drivers\ftdibus.sys (FTDI Ltd.)
DRV - (FTSER2K) -- C:\Windows\System32\drivers\ftser2k.sys (FTDI Ltd.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = hxxp://www.google.com
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9E D2 53 D4 42 E9 CA 01  [binary data]
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0
FF - prefs.js..extensions.enabledItems: firefox@bandoo.com:5.0
FF - prefs.js..extensions.enabledItems: {6226BA26-C017-4007-928C-DE9715C6FA67}:1.0.0
FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:2.0
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.2.9
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {e5a1e26f-0d1d-4307-868f-fbd9a374ab54}:2.4.0.4
FF - prefs.js..extensions.enabledItems: {7FF99715-3016-4381-84CE-E4E4C9673020}:1.0
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.6.20090220
FF - prefs.js..extensions.enabledItems: ciuvo-extension@icq.de:1.0.601
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0:  File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.3088: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.3146: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.3006: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.11.08 03:18:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.04.04 14:35:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.04.03 06:49:28 | 000,000,000 | ---D | M]
 
[2010.12.23 21:54:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\****\AppData\Roaming\mozilla\Extensions
[2013.04.03 05:52:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\xqormi53.default\extensions
[2010.05.24 13:00:24 | 000,000,000 | ---D | M] (Blingee Toolbar) -- C:\Users\**** ****
\AppData\Roaming\mozilla\Firefox\Profiles\xqormi53.default\extensions\{6226BA26-C017-4007-928C-DE9715C6FA67}
[2013.04.03 05:52:41 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\xqormi53.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012.08.31 19:36:51 | 000,101,863 | ---- | M] () (No name found) -- C:\Users\****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\extensions\ciuvo-extension@icq.de.xpi
[2012.06.11 12:48:32 | 000,020,591 | ---- | M] () (No name found) -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
[2013.02.15 17:05:42 | 000,817,280 | ---- | M] () (No name found) -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2010.03.14 14:26:25 | 000,001,819 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\bing.xml
[2013.04.03 05:48:34 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-10.xml
[2009.04.30 21:58:23 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-11.xml
[2009.04.30 22:58:22 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-12.xml
[2009.06.13 14:35:42 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-13.xml
[2009.08.08 11:15:25 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-14.xml
[2009.09.11 22:36:13 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-15.xml
[2009.11.01 23:11:44 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-16.xml
[2009.12.19 22:28:48 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-17.xml
[2010.01.06 20:01:36 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-18.xml
[2010.02.18 20:51:07 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-19.xml
[2010.03.31 19:34:28 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-20.xml
[2008.11.21 19:54:13 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-4.xml
[2008.12.22 16:34:51 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-5.xml
[2009.03.09 18:10:47 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-6.xml
[2009.04.10 22:17:13 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-7.xml
[2009.04.25 01:47:47 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-8.xml
[2009.04.28 23:30:46 | 000,000,950 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\icqplugin-9.xml
[2013.04.03 05:48:34 | 000,005,401 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\mozilla\firefox\profiles\xqormi53.default\searchplugins\searchcanvas.xml
[2013.04.03 06:49:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2013.04.03 06:49:26 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2013.03.27 04:17:36 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.03.27 05:32:09 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.03.27 05:32:09 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2013.03.27 05:32:09 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2013.03.27 05:32:09 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.03.27 05:32:09 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.03.27 05:32:09 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - homepage: hxxp://www.google.com/
CHR - Extension: Docs = C:\Users\**** ****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (Preispilot) - {C4415769-1588-4AD6-9624-B2E69DB78D1A} - C:\Program Files\preispilot\Internet Explorer\preispilot.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SimpleAdblock Class) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Common Files\Simple Adblock\SimpleAdblock.dll (Simple Adblock)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\Run: [FRITZ!protect] FwebProt.exe File not found
O4 - HKU\S-1-5-18..\Run: [FRITZ!protect] FwebProt.exe File not found
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: []  File not found
O4 - HKU\S-1-5-18..\RunOnce: []  File not found
O4 - HKU\S-1-5-19..\RunOnce: []  File not found
O4 - HKU\S-1-5-20..\RunOnce: []  File not found
O4 - Startup: C:\Users\**** ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Internet.lnk = C:\Program Files\FRITZ!DSL\FritzDsl.exe (AVM Berlin)
O4 - Startup: C:\Users\**** ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Protect.lnk = C:\Program Files\FRITZ!DSL\FwebProt.exe (AVM Berlin)
O4 - Startup: C:\Users\**** ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Startcenter.lnk = C:\Program Files\FRITZ!DSL\StCenter.exe (AVM Berlin)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\FRITZ!DSL\\sarah.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\FRITZ!DSL\sarah.dll (AVM Berlin)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\FRITZ!DSL\sarah.dll (AVM Berlin)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\FRITZ!DSL\sarah.dll (AVM Berlin)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\FRITZ!DSL\sarah.dll (AVM Berlin)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\..Trusted Domains: fritz.box ([]* in Local intranet)
O15 - HKU\S-1-5-21-841732120-1791181681-1593089396-1000\..Trusted Ranges: Range1 ([*] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{53167639-3EBD-4553-A076-158CFB227430}: DhcpNameServer = 193.189.244.225 193.189.244.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6E59C5E5-BD3B-4A52-BE31-0B410FEEC29F}: NameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8182A16A-A498-41F0-AA6B-DA509E37C0E3}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{97174844-82CD-4FB6-A989-478DE51F1687}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A692C005-E9EC-4B89-8715-6EFB6E0D6A50}: DhcpNameServer = 193.189.244.225 193.189.244.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BB8B0368-6F10-4F09-B564-952AA6AA7519}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C56F70D9-5EF3-41D5-BA3C-0957AC606511}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\25976~1.107\{c16c1~1\mngr.dll) -  File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\**** ****\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\**** ****\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{01b3c378-1ee2-11df-b535-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{01b3c378-1ee2-11df-b535-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{01b3c38c-1ee2-11df-b535-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{01b3c38c-1ee2-11df-b535-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{034fd10c-882d-11df-8917-001e101f79c9}\Shell - "" = AutoRun
O33 - MountPoints2\{034fd10c-882d-11df-8917-001e101f79c9}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{0c00bbc0-7d8a-11dd-9176-0022157fe0e9}\Shell\1\Command - "" = F:\.\recycled\info.exe
O33 - MountPoints2\{0c00bbc0-7d8a-11dd-9176-0022157fe0e9}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\.\recycled\info.exe
O33 - MountPoints2\{25ae2f23-c548-11dd-b581-00040ebe25db}\Shell\1\Command - "" = F:\.\recycled\info.exe
O33 - MountPoints2\{25ae2f23-c548-11dd-b581-00040ebe25db}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\.\recycled\info.exe
O33 - MountPoints2\{3a61479f-8a6e-11dd-8b39-00040ebe25db}\Shell\1\Command - "" = F:\.\recycled\info.exe
O33 - MountPoints2\{3a61479f-8a6e-11dd-8b39-00040ebe25db}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\.\recycled\info.exe
O33 - MountPoints2\{457272ca-7ab5-11dd-8f71-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{457272ca-7ab5-11dd-8f71-0022157fe0e9}\Shell\AutoRun\command - "" = G:\Autorun.exe
O33 - MountPoints2\{53a3393c-ed6b-11dd-900c-00040ebe25db}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{5a0c34ff-1df8-11df-a561-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{5a0c34ff-1df8-11df-a561-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5a0c350d-1df8-11df-a561-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{5a0c350d-1df8-11df-a561-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{5a0c3560-1df8-11df-a561-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{5a0c3560-1df8-11df-a561-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{717aac6e-2c5f-11df-a7d9-001f3c64b8f1}\Shell - "" = AutoRun
O33 - MountPoints2\{717aac6e-2c5f-11df-a7d9-001f3c64b8f1}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{740eae80-1eb6-11df-b5bc-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{740eae80-1eb6-11df-b5bc-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7e496835-c53a-11e1-8ffa-001e101f82a0}\Shell - "" = AutoRun
O33 - MountPoints2\{7e496835-c53a-11e1-8ffa-001e101f82a0}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{7e496847-c53a-11e1-8ffa-001e101fb4df}\Shell - "" = AutoRun
O33 - MountPoints2\{7e496847-c53a-11e1-8ffa-001e101fb4df}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{85630641-874b-11df-ac47-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{85630641-874b-11df-ac47-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{8563064e-874b-11df-ac47-001e101faa49}\Shell - "" = AutoRun
O33 - MountPoints2\{8563064e-874b-11df-ac47-001e101faa49}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{9acf79ad-86ec-11df-92c4-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{9acf79ad-86ec-11df-92c4-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{9acf79bc-86ec-11df-92c4-001e101fb45e}\Shell - "" = AutoRun
O33 - MountPoints2\{9acf79bc-86ec-11df-92c4-001e101fb45e}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{a1a6968f-86f3-11df-bb90-001e101f2c0e}\Shell - "" = AutoRun
O33 - MountPoints2\{a1a6968f-86f3-11df-bb90-001e101f2c0e}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{b6b4c83c-85cb-11df-acaf-0022157fe0e9}\Shell\AutoRun\command - "" = F:\Toshiba\Launcher\start.exe
O33 - MountPoints2\{c7203d3b-76d1-11dd-8124-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{c7203d3b-76d1-11dd-8124-0022157fe0e9}\Shell\AutoRun\command - "" = F:\preinst.exe
O33 - MountPoints2\{cf7412f1-7532-11dd-ac19-001f3c64b8f1}\Shell - "" = AutoRun
O33 - MountPoints2\{cf7412f1-7532-11dd-ac19-001f3c64b8f1}\Shell\AutoRun\command - "" = F:\preinst.exe
O33 - MountPoints2\{d79bebff-2388-11df-b9aa-0022157fe0e9}\Shell\AutoRun\command - "" = F:\Toshiba\more4you.exe
O33 - MountPoints2\{db9bc205-6c70-11de-9a9b-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{db9bc205-6c70-11de-9a9b-0022157fe0e9}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -a
O33 - MountPoints2\{f4482aba-61b6-11df-844b-0022157fe0e9}\Shell - "" = AutoRun
O33 - MountPoints2\{f4482aba-61b6-11df-844b-0022157fe0e9}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{fd0ed029-88cc-11df-a926-001e101f8924}\Shell - "" = AutoRun
O33 - MountPoints2\{fd0ed029-88cc-11df-a926-001e101f8924}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.04.04 14:39:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.04.04 14:37:19 | 000,000,000 | ---D | C] -- C:\Users\**** ****\AppData\Local\Apps
[2013.04.04 14:37:18 | 000,000,000 | ---D | C] -- C:\Users\**** ****\AppData\Local\Deployment
[2013.04.03 06:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2008.09.19 16:14:21 | 001,180,936 | ---- | C] (Microsoft Corporation) -- C:\Users\**** ****\msvcr80d.dll
[2008.09.19 16:14:21 | 001,041,672 | ---- | C] (Microsoft Corporation) -- C:\Users\**** ****\msvcp80d.dll
[2008.09.19 16:14:21 | 001,021,192 | ---- | C] (Microsoft Corporation) -- C:\Users\**** ****\msvcm80d.dll
[2008.09.19 16:14:21 | 000,632,072 | ---- | C] (Microsoft Corporation) -- C:\Users\**** ****\msvcr80.dll
[2008.09.19 16:14:21 | 000,554,248 | ---- | C] (Microsoft Corporation) -- C:\Users\**** ****\msvcp80.dll
[2008.09.19 16:14:21 | 000,505,096 | ---- | C] (Microsoft Corporation) -- C:\Users\**** ****\msvcp71.dll
[2008.09.19 16:14:21 | 000,484,616 | ---- | C] (Microsoft Corporation) -- C:\Users\**** ****\msvcm80.dll
[2008.09.19 16:14:21 | 000,353,544 | ---- | C] (Microsoft Corporation) -- C:\Users\**** ****\msvcr71.dll
[2008.09.19 16:13:22 | 000,386,312 | ---- | C] (Electronic Arts) -- C:\Users\**** ****\EASetup.exe
[1 C:\Users\**** ****\AppData\Local\*.tmp files -> C:\Users\**** ****\AppData\Local\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.04.04 14:42:59 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.04.04 14:42:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.04.04 14:39:38 | 000,001,978 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013.04.04 14:36:00 | 000,000,853 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.04.04 14:25:33 | 000,000,811 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.04.04 14:17:37 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.04.04 14:17:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.04.04 07:40:43 | 000,632,252 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.04.04 07:40:43 | 000,598,900 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.04.04 07:40:43 | 000,127,464 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.04.04 07:40:43 | 000,104,914 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.04.04 07:33:03 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.04.04 07:33:03 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.04.03 16:14:17 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2013.04.02 14:52:56 | 000,028,504 | ---- | M] () -- C:\Users\**** ****\AppData\Roaming\nvModes.001
[2013.04.01 21:33:55 | 003,932,184 | ---- | M] () -- C:\snp2uvc-001.raw
[1 C:\Users\**** ****\AppData\Local\*.tmp files -> C:\Users\**** ****\AppData\Local\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.04.04 14:39:38 | 000,001,978 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013.04.04 14:37:51 | 000,001,110 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.04.04 14:37:50 | 000,001,106 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.12.07 22:11:16 | 000,044,544 | ---- | C] () -- C:\Windows\System32\Gif89.dll
[2012.11.30 03:19:06 | 000,389,320 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.10.22 22:04:36 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2012.10.22 21:49:18 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2009.07.10 14:12:46 | 000,000,084 | -H-- | C] () -- C:\ProgramData\aspg.dat
[2009.01.27 20:37:23 | 004,968,322 | ---- | C] () -- C:\Users\**** ****\AppData\Roaming\Kevin_Rudolf_Let_It_Rock_(Feat._Lil_Wayne).mp3
[2009.01.27 20:37:23 | 001,002,594 | ---- | C] () -- C:\Users\**** ****\AppData\Roaming\--.mp3
[2009.01.09 12:49:31 | 000,007,592 | ---- | C] () -- C:\Users\**** ****\AppData\Local\d3d9caps.dat
[2008.09.19 16:14:22 | 000,386,312 | ---- | C] () -- C:\Users\**** ****\server.dll
[2008.09.19 16:14:22 | 000,001,462 | ---- | C] () -- C:\Users\**** ****\server.cfg
[2008.09.19 16:14:21 | 002,741,922 | ---- | C] () -- C:\Users\**** ****\Group7.cab
[2008.09.19 16:14:21 | 000,024,202 | ---- | C] () -- C:\Users\**** ****\Group9.cab
[2008.09.19 16:14:21 | 000,005,093 | ---- | C] () -- C:\Users\**** ****\Group8.cab
[2008.09.19 16:14:18 | 030,187,042 | ---- | C] () -- C:\Users\**** ****\Group6.cab
[2008.09.19 16:14:18 | 003,526,886 | ---- | C] () -- C:\Users\**** ****\Group5.cab
[2008.09.19 16:14:18 | 000,002,767 | ---- | C] () -- C:\Users\**** ****\Group4.cab
[2008.09.19 16:14:15 | 036,466,538 | ---- | C] () -- C:\Users\**** ****\Group3.cab
[2008.09.19 16:14:15 | 000,000,036 | ---- | C] () -- C:\Users\**** ****\Group21.cab
[2008.09.19 16:14:00 | 201,398,784 | ---- | C] () -- C:\Users\**** ****\Group20.cab
[2008.09.19 16:13:52 | 093,422,941 | ---- | C] () -- C:\Users\**** ****\Group2.cab
[2008.09.19 16:13:52 | 000,000,036 | ---- | C] () -- C:\Users\**** ****\Group19.cab
[2008.09.19 16:13:39 | 140,458,424 | ---- | C] () -- C:\Users\**** ****\Group18.cab
[2008.09.19 16:13:39 | 000,566,461 | ---- | C] () -- C:\Users\**** ****\Group17.cab
[2008.09.19 16:13:39 | 000,019,665 | ---- | C] () -- C:\Users\**** ****\Group16.cab
[2008.09.19 16:13:38 | 035,899,970 | ---- | C] () -- C:\Users\**** ****\Group153.cab
[2008.09.19 16:13:37 | 003,678,484 | ---- | C] () -- C:\Users\**** ****\Group152.cab
[2008.09.19 16:13:36 | 006,844,737 | ---- | C] () -- C:\Users\**** ****\Group151.cab
[2008.09.19 16:13:36 | 002,351,637 | ---- | C] () -- C:\Users\**** ****\Group15.cab
[2008.09.19 16:13:35 | 033,546,010 | ---- | C] () -- C:\Users\**** ****\Group14.cab
[2008.09.19 16:13:35 | 010,776,597 | ---- | C] () -- C:\Users\**** ****\Group136.cab
[2008.09.19 16:13:35 | 006,940,334 | ---- | C] () -- C:\Users\**** ****\Group135.cab
[2008.09.19 16:13:35 | 000,351,200 | ---- | C] () -- C:\Users\**** ****\Group137.cab
[2008.09.19 16:13:35 | 000,014,750 | ---- | C] () -- C:\Users\**** ****\Group134.cab
[2008.09.19 16:13:35 | 000,001,602 | ---- | C] () -- C:\Users\**** ****\Group139.cab
[2008.09.19 16:13:35 | 000,000,036 | ---- | C] () -- C:\Users\**** ****\Group138.cab
[2008.09.19 16:13:34 | 004,353,168 | ---- | C] () -- C:\Users\**** ****\Group111.cab
[2008.09.19 16:13:34 | 002,757,228 | ---- | C] () -- C:\Users\**** ****\Group13.cab
[2008.09.19 16:13:34 | 000,944,116 | ---- | C] () -- C:\Users\**** ****\Group114.cab
[2008.09.19 16:13:34 | 000,536,982 | ---- | C] () -- C:\Users\**** ****\Group112.cab
[2008.09.19 16:13:34 | 000,001,295 | ---- | C] () -- C:\Users\**** ****\Group113.cab
[2008.09.19 16:13:34 | 000,000,676 | ---- | C] () -- C:\Users\**** ****\Group12.cab
[2008.09.19 16:13:25 | 111,469,457 | ---- | C] () -- C:\Users\**** ****\Group110.cab
[2008.09.19 16:13:24 | 006,458,669 | ---- | C] () -- C:\Users\**** ****\Group11.cab
[2008.09.19 16:13:22 | 075,464,468 | ---- | C] () -- C:\Users\**** ****\Group10.cab
[2008.09.19 16:13:22 | 000,695,735 | ---- | C] () -- C:\Users\**** ****\Group0.cab
[2008.09.19 16:13:22 | 000,000,036 | ---- | C] () -- C:\Users\**** ****\Group1.cab
[2008.09.19 16:13:19 | 000,870,400 | ---- | C] () -- C:\Users\**** ****\autorun.dat
[2008.09.19 16:13:19 | 000,000,258 | ---- | C] () -- C:\Users\**** ****\dat.bin
[2008.09.19 16:13:19 | 000,000,160 | ---- | C] () -- C:\Users\**** ****\autorun.inf
[2008.09.09 23:57:16 | 000,024,206 | ---- | C] () -- C:\Users\**** ****\AppData\Roaming\UserTile.png
[2008.08.28 22:54:21 | 000,028,504 | ---- | C] () -- C:\Users\**** ****\AppData\Roaming\nvModes.001
[2008.08.28 22:32:36 | 000,028,504 | ---- | C] () -- C:\Users\**** ****\AppData\Roaming\nvModes.dat
[2008.08.28 20:59:07 | 000,241,152 | ---- | C] () -- C:\Users\**** ****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.08.28 19:59:48 | 000,000,323 | ---- | C] () -- C:\Users\**** ****\Public.lnk
 
========== ZeroAccess Check ==========
 
[2006.11.02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2009.01.15 00:44:23 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\concept design
[2009.01.09 13:25:54 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\CPUControl
[2009.09.28 22:11:34 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\DAEMON Tools
[2012.11.06 03:07:34 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\DAEMON Tools Lite
[2011.01.05 12:04:11 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\elsterformular
[2010.02.06 13:15:48 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\Epson
[2013.04.02 21:52:08 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\FRITZ!
[2008.10.18 13:48:46 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\GetRightToGo
[2013.03.15 15:24:10 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\ICQ
[2008.08.29 12:55:02 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\ICQ Toolbar
[2008.08.28 21:32:56 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\ICQLite
[2012.07.17 22:38:52 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\LolClient
[2012.06.11 21:34:36 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\LolClient2
[2010.01.07 17:56:34 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\ooVoo Details
[2008.11.24 21:08:59 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\OpenOffice.org
[2008.09.09 23:57:14 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\PeerNetworking
[2012.10.22 22:17:06 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\Samsung
[2010.01.06 21:36:49 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\TeamViewer
[2013.03.30 13:59:00 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\TS3Client
[2012.11.30 02:34:57 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\TuneUp Software
[2009.09.26 15:49:10 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\Uniblue
[2010.02.25 20:12:23 | 000,000,000 | ---D | M] -- C:\Users\**** ****\AppData\Roaming\VoipCheapCom
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:EC2E1DEC

< End of report >
         

Scant nun schon seit 13 Uhr und findet kein Ende.
Wird nachgereicht sobald vollständig.