OTL - First Run, Weißer Bildschirm nach Anmeldung, Vista

Kudla

Hallo alle zusammen!

Ich bin sehr dankbar hier im Forum Mitglied zu sein und eure Hilfe in Anspruch nehmen zu dürfen.

Es geht sich um folgendes: Ich habe einen Asus Laptop mit Windows Vist 64bit
Wenn ich diesen einschlate dauert es nun ziemlich lang. Wenn ich mich bei meinem Hauptkonto anmelde ist diese Anmeldezeit wieder äußerst lang und es erscheint nur ein weißer Bildschirm. Das Aufrufen des Task-Manager geht mal und mal wieder nicht. Abmelden funktioniert immer. Fahre ich den PC per Knopf herunter, sehe ich kurz den Desktop.

Melde ich mich bei meinem Nebenkonto (auch Administrato, Sicherheitskonto von mir sozusagen) Funktioniert das Desktop aber bei jedem Neustart ist die Windows Firewall komplett aus. Und er ist eben sehr langsam. Außerdem findet der AVG nichts.

Habe mir mal mit dem OTL einen Scan durch laufen lassen, das Ergebnis daraus bzw. dieses Dokument habe ich im Anhang. Sicherheitshalber auch nochmal hier:

Ich bitte, wenn möglich und ohne jemanden zu stressen da ja jeder auch ein Leben außer hier hat, um rasche Antwort.
Vielen herzlichen Dank für eure Bemühungen im Voraus!! Danke!

LG Andi

OTL logfile created on: 18.04.2013 23:33:25 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Sicherheit\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19088)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy

6,00 Gb Total Physical Memory | 3,68 Gb Available Physical Memory | 61,39% Memory free
12,20 Gb Paging File | 9,85 Gb Available in Paging File | 80,76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 117,96 Gb Total Space | 58,47 Gb Free Space | 49,57% Space Free | Partition Type: NTFS
Drive D: | 220,18 Gb Total Space | 92,87 Gb Free Space | 42,18% Space Free | Partition Type: NTFS
Drive G: | 114,92 Gb Total Space | 56,68 Gb Free Space | 49,33% Space Free | Partition Type: NTFS

Computer Name: ANDI | User Name: Sicherheit | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.04.18 23:06:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sicherheit\Desktop\OTL.exe
PRC - [2013.04.16 23:12:54 | 000,879,456 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\Opera.exe
PRC - [2013.02.13 04:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2012.01.29 14:43:17 | 002,077,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgtray.exe
PRC - [2010.11.24 21:51:33 | 000,725,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe
PRC - [2010.07.21 11:03:18 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgemc.exe
PRC - [2010.07.17 19:17:41 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
PRC - [2009.11.23 22:40:22 | 000,070,144 | ---- | M] (AlcaTech) -- C:\Windows\SysWOW64\mmrtkrnl.exe
PRC - [2009.09.20 12:07:23 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2009.09.20 11:17:46 | 000,247,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
PRC - [2009.04.07 18:34:26 | 000,159,744 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
PRC - [2009.03.21 05:37:18 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
PRC - [2009.03.04 19:26:24 | 008,392,704 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
PRC - [2009.02.11 01:51:18 | 000,113,208 | ---- | M] (ASUSTeK Inc.) -- C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\wbctlvga.exe
PRC - [2009.02.07 01:57:18 | 000,072,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\WBVGAservice.exe
PRC - [2008.12.23 02:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
PRC - [2008.10.15 01:13:24 | 002,987,008 | ---- | M] () -- C:\Program Files\ASUS\Turbo Gear\TurboGear.exe
PRC - [2008.10.01 02:52:44 | 001,025,536 | ---- | M] () -- C:\Program Files\ASUS\Turbo Gear\GearHelp.exe
PRC - [2008.08.14 05:59:56 | 000,301,624 | ---- | M] () -- C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
PRC - [2008.08.14 05:59:52 | 000,100,920 | ---- | M] () -- C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
PRC - [2008.08.14 01:21:56 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008.07.19 04:52:16 | 000,104,936 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2008.06.18 07:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2008.03.25 06:39:18 | 000,322,104 | ---- | M] (ASUSTek.) -- C:\Program Files (x86)\ASUS\Direct Console\DCHelper.exe
PRC - [2007.08.08 09:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe


========== Modules (No Company Name) ==========

MOD - [2013.03.16 01:40:28 | 014,717,144 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll
MOD - [2013.02.13 04:38:06 | 000,100,688 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2013.02.13 04:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
MOD - [2009.10.23 18:01:58 | 000,067,872 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2008.10.15 01:13:24 | 002,987,008 | ---- | M] () -- C:\Program Files\ASUS\Turbo Gear\TurboGear.exe
MOD - [2008.10.01 02:52:44 | 001,025,536 | ---- | M] () -- C:\Program Files\ASUS\Turbo Gear\GearHelp.exe
MOD - [2008.08.28 01:32:36 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2008.06.09 18:55:08 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2008.05.29 06:39:48 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\ASUS\Direct Console\SysInfo.dll
MOD - [2008.05.23 06:24:10 | 000,045,056 | ---- | M] () -- C:\Program Files\ASUS\Turbo Gear\atkmethod.dll
MOD - [2008.02.17 07:08:46 | 000,950,272 | ---- | M] () -- C:\Program Files\ASUS\Turbo Gear\OcSetting.dll
MOD - [2007.06.15 19:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
MOD - [2007.06.02 02:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
MOD - [2007.03.10 01:16:52 | 000,106,496 | ---- | M] () -- C:\Program Files\ATKGFNEX\AGFNEX.dll
MOD - [2005.05.12 00:39:32 | 000,565,248 | ---- | M] () -- C:\Program Files\ASUS\Turbo Gear\pngio.dll


========== Services (SafeList) ==========

SRV:64bit: - [2008.01.21 04:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV:64bit: - [2007.08.08 09:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2013.03.16 01:40:29 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.12.29 12:34:47 | 001,260,472 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2010.07.21 11:03:18 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2010.07.17 19:17:41 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009.10.20 20:19:48 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2009.02.07 01:57:18 | 000,072,248 | ---- | M] () [Disabled | Running] -- C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\WBVGAservice.exe -- (WBVGAservice)
SRV - [2008.08.14 05:59:52 | 000,100,920 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2008.07.27 20:03:13 | 000,069,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.03.31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013.01.15 22:02:49 | 000,282,976 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avgldx64.sys -- (AvgLdx64)
DRV:64bit: - [2011.09.12 20:18:11 | 000,035,664 | ---- | M] () [File_System | System | Running] -- C:\Windows\SysNative\Drivers\avgmfx64.sys -- (AvgMfx64)
DRV:64bit: - [2011.07.20 09:46:06 | 000,203,320 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2011.07.20 09:46:06 | 000,095,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2011.06.09 22:28:16 | 000,311,968 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\atksgt.sys -- (atksgt)
DRV:64bit: - [2011.06.09 22:28:10 | 000,043,168 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2011.05.06 01:21:57 | 000,317,520 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avgtdia.sys -- (AvgTdiA)
DRV:64bit: - [2010.08.02 11:00:50 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010.07.26 15:18:58 | 000,020,568 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv)
DRV:64bit: - [2010.07.26 15:15:26 | 000,016,392 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TFsExDisk.sys -- (TFsExDisk)
DRV:64bit: - [2010.04.27 04:25:22 | 000,161,280 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\sscemdm.sys -- (sscemdm)
DRV:64bit: - [2010.04.27 04:25:22 | 000,129,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ssceserd.sys -- (ssceserd)
DRV:64bit: - [2010.04.27 04:25:22 | 000,127,488 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\sscebus.sys -- (sscebus)
DRV:64bit: - [2010.04.27 04:25:22 | 000,018,944 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\sscemdfl.sys -- (sscemdfl)
DRV:64bit: - [2010.02.25 17:51:02 | 000,029,696 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\tap0901.sys -- (tap0901)
DRV:64bit: - [2009.11.25 14:59:28 | 000,058,936 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nchvsc64.sys -- (NCHVSC64)
DRV:64bit: - [2009.10.20 20:19:54 | 000,047,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2009.09.20 11:37:17 | 000,035,384 | ---- | M] () [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\AsDsm.sys -- (AsDsm)
DRV:64bit: - [2009.05.18 15:17:08 | 000,034,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.04.02 02:46:40 | 000,016,440 | ---- | M] () [File_System | Boot | Running] -- C:\Windows\SysNative\DRIVERS\lullaby.sys -- (lullaby)
DRV:64bit: - [2009.02.11 11:26:17 | 000,407,576 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\iaStor.sys -- (iaStor)
DRV:64bit: - [2009.01.14 02:48:18 | 001,187,840 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\athrx.sys -- (athr)
DRV:64bit: - [2008.11.03 09:03:27 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2008.07.09 11:16:19 | 000,092,200 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2008.05.13 15:02:13 | 000,019,880 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2008.05.13 15:02:11 | 000,121,896 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2008.05.02 07:59:47 | 000,166,912 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169)
DRV:64bit: - [2008.02.16 03:27:18 | 000,062,976 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rimmpx64.sys -- (rimmptsk)
DRV:64bit: - [2008.01.29 04:46:57 | 000,036,392 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2008.01.24 07:24:23 | 000,060,928 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\enecir.sys -- (enecir)
DRV:64bit: - [2008.01.21 04:51:07 | 000,016,384 | ---- | M] () [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2008.01.21 04:47:28 | 000,046,080 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2008.01.21 04:46:55 | 000,111,104 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus)
DRV:64bit: - [2008.01.21 04:46:52 | 000,019,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2007.12.06 12:12:55 | 000,320,048 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)
DRV:64bit: - [2007.10.17 06:54:20 | 000,015,872 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\EIO64.sys -- (EIO64)
DRV:64bit: - [2007.07.28 04:45:52 | 000,057,856 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rixdpx64.sys -- (rismxdp)
DRV:64bit: - [2007.07.27 05:33:54 | 000,055,296 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rimspx64.sys -- (rimsptsk)
DRV:64bit: - [2007.07.24 20:11:32 | 000,014,904 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV:64bit: - [2007.04.16 20:51:50 | 000,014,112 | R--- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)
DRV:64bit: - [2006.10.27 15:01:07 | 000,013,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2006.10.04 03:45:36 | 000,273,408 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)
DRV:64bit: - [2006.06.27 15:24:22 | 000,047,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\AmdTools64.sys -- (AmdTools64)
DRV - [2010.07.26 15:15:26 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
DRV - [2004.01.26 17:36:35 | 000,095,552 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.01.26 17:01:28 | 000,052,224 | ---- | M] (Protection Technology) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003.12.01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\sfhlp01.sys -- (sfhlp01)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {8A96AF9E-4074-43b7-BEA3-87217BDA74C8}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{8A96AF9E-4074-43b7-BEA3-87217BDA74C8}: "URL" = hxxp://www.searchqu.com/web?src=ieb&systemid=101&q={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013.03.05 21:42:16 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2006.09.18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GRA8E1~1.DLL (Microsoft Corporation)
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI9130~1\ToolBar\searchqudtx.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI9130~1\ToolBar\searchqudtx.dll File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ATK)
O4 - HKLM..\Run: [ADSMTray] C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\amd_dc_opt\amd_dc_opt.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CLMLServer] C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [DirectConsole2] C:\Program Files (x86)\ASUS\Direct Console\Direct Console.exe (ASUSTek.)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Realtime Audio Engine] C:\Windows\SysWow64\mmrtkrnl.exe (AlcaTech)
O4 - HKLM..\Run: [Turbo Gear] C:\Program Files\ASUS\Turbo Gear\TurboGear.exe ()
O4 - HKLM..\Run: [Turbo Gear Help] C:\Program Files\ASUS\Turbo Gear\GearHelp.exe ()
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKLM..\RunOnce: [B Register C:\Program Files (x86)\DivX\DivX Plus DirectShow Filters\DirectShowDemuxFilter.dll] C:\Program Files (x86)\DivX\DivX Plus DirectShow Filters\DirectShowDemuxFilter.dll (DivX, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.43.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1B4D2956-A9C9-4FC5-8C99-B5BA51882005}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{47A80E82-F4D2-4F11-924A-61B118A1C5CF}: DhcpNameServer = 192.168.43.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GR99D3~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\WI9130~1\Datamngr\x64\datamngr.dll) - File not found
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\WI9130~1\Datamngr\x64\IEBHO.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GRA8E1~1.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013.04.18 23:06:00 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Sicherheit\Desktop\OTL.exe
[2013.04.18 23:05:37 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\Adobe
[2013.04.18 00:35:49 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.04.18 00:35:49 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013.04.18 00:35:49 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013.04.18 00:35:49 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013.04.18 00:35:49 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2013.04.18 00:35:49 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.04.18 00:35:49 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.04.18 00:35:49 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.04.18 00:35:49 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.04.18 00:35:49 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.04.18 00:35:49 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.04.18 00:35:49 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013.04.18 00:35:49 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013.04.16 23:59:49 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\vlc
[2013.04.16 23:56:22 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\NVIDIA
[2013.04.16 23:56:11 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\DivX
[2013.04.16 23:43:52 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2013.04.16 23:43:52 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2013.04.16 23:43:37 | 010,624,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2013.04.16 23:43:31 | 008,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2013.04.16 23:42:37 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2013.04.16 23:42:13 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2013.04.16 23:40:50 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.04.16 23:40:38 | 002,067,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2013.04.16 23:40:36 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2013.04.16 23:40:12 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2013.04.16 23:40:12 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2013.04.16 23:40:12 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2013.04.16 23:40:12 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbeio.dll
[2013.04.16 23:38:52 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2013.04.16 23:38:52 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2013.04.16 23:38:52 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2013.04.16 23:38:16 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netevent.dll
[2013.04.16 23:38:16 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2013.04.16 23:35:18 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll
[2013.04.16 23:35:17 | 001,161,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll
[2013.04.16 23:28:24 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013.04.16 23:23:01 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2013.04.16 23:23:01 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2013.04.16 23:21:10 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2013.04.16 23:21:09 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe
[2013.04.16 23:09:07 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\Opera
[2013.04.16 23:09:07 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Local\Opera
[2013.04.16 23:03:39 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Local\VirtualStore
[2013.04.16 22:53:01 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\Apple Computer
[2013.04.16 22:52:54 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Local\Power2Go
[2013.04.16 22:51:22 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013.04.16 22:51:22 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Searches
[2013.04.16 22:51:22 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013.04.16 22:51:16 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\Identities
[2013.04.16 22:51:14 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Contacts
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Vorlagen
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\AppData\Local\Verlauf
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\AppData\Local\Temporary Internet Files
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Startmenü
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\SendTo
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Recent
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Netzwerkumgebung
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Lokale Einstellungen
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Documents\Eigene Videos
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Documents\Eigene Musik
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Eigene Dateien
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Documents\Eigene Bilder
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Druckumgebung
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Cookies
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\AppData\Local\Anwendungsdaten
[2013.04.16 22:50:04 | 000,000,000 | -HSD | C] -- C:\Users\Sicherheit\Anwendungsdaten
[2013.04.16 22:50:03 | 000,000,000 | --SD | C] -- C:\Users\Sicherheit\AppData\Roaming\Microsoft
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Videos
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Saved Games
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Pictures
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Music
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Links
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Favorites
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Downloads
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Documents
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\Desktop
[2013.04.16 22:50:03 | 000,000,000 | R--D | C] -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013.04.16 22:50:03 | 000,000,000 | -H-D | C] -- C:\Users\Sicherheit\AppData
[2013.04.16 22:50:03 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Local\Temp
[2013.04.16 22:50:03 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Local\Microsoft
[2013.04.16 22:50:03 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\Media Center Programs
[2013.04.16 22:50:03 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\Macromedia
[2013.04.16 22:50:03 | 000,000,000 | ---D | C] -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite
[2013.04.02 23:02:12 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2013.04.02 23:02:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2013.04.02 23:01:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.04.18 23:06:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sicherheit\Desktop\OTL.exe
[2013.04.18 22:56:01 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2013.04.18 22:53:16 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2013.04.18 22:53:09 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.04.18 22:53:08 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.04.18 22:53:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.04.18 22:52:41 | 2146,471,935 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.18 22:51:40 | 000,004,268 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2013.04.18 22:39:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.04.18 04:05:00 | 117,792,174 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm
[2013.04.18 00:55:36 | 000,374,424 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.04.18 00:20:11 | 000,000,514 | ---- | M] () -- C:\Windows\SysWow64\ABG71GX.DAT
[2013.04.16 23:30:44 | 001,427,406 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.04.16 23:30:44 | 000,621,952 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.04.16 23:30:44 | 000,590,082 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.04.16 23:30:44 | 000,123,852 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.04.16 23:30:44 | 000,102,094 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.04.16 22:55:17 | 000,000,306 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2013.04.02 23:04:57 | 000,122,608 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.04.18 00:36:51 | 000,694,784 | ---- | C] () -- C:\Windows\SysNative\drivers\bthport.sys
[2013.04.18 00:36:51 | 000,204,288 | ---- | C] () -- C:\Windows\SysNative\fsquirt.exe
[2013.04.18 00:36:51 | 000,035,328 | ---- | C] () -- C:\Windows\SysNative\drivers\BTHUSB.SYS
[2013.04.18 00:36:51 | 000,026,624 | ---- | C] () -- C:\Windows\SysNative\drivers\bthenum.sys
[2013.04.18 00:35:57 | 009,272,320 | ---- | C] () -- C:\Windows\SysNative\mshtml.dll
[2013.04.18 00:35:56 | 012,477,440 | ---- | C] () -- C:\Windows\SysNative\ieframe.dll
[2013.04.18 00:35:51 | 001,488,384 | ---- | C] () -- C:\Windows\SysNative\urlmon.dll
[2013.04.18 00:35:50 | 002,339,840 | ---- | C] () -- C:\Windows\SysNative\iertutil.dll
[2013.04.18 00:35:50 | 001,147,904 | ---- | C] () -- C:\Windows\SysNative\wininet.dll
[2013.04.18 00:35:50 | 001,062,912 | ---- | C] () -- C:\Windows\SysNative\mstime.dll
[2013.04.18 00:35:50 | 000,710,656 | ---- | C] () -- C:\Windows\SysNative\msfeeds.dll
[2013.04.18 00:35:50 | 000,459,776 | ---- | C] () -- C:\Windows\SysNative\iedkcs32.dll
[2013.04.18 00:35:50 | 000,243,712 | ---- | C] () -- C:\Windows\SysNative\occache.dll
[2013.04.18 00:35:49 | 001,638,912 | ---- | C] () -- C:\Windows\SysNative\mshtml.tlb
[2013.04.18 00:35:49 | 001,538,560 | ---- | C] () -- C:\Windows\SysNative\inetcpl.cpl
[2013.04.18 00:35:49 | 000,479,232 | ---- | C] () -- C:\Windows\SysNative\html.iec
[2013.04.18 00:35:49 | 000,252,416 | ---- | C] () -- C:\Windows\SysNative\iepeers.dll
[2013.04.18 00:35:49 | 000,219,136 | ---- | C] () -- C:\Windows\SysNative\ieui.dll
[2013.04.18 00:35:49 | 000,162,816 | ---- | C] () -- C:\Windows\SysNative\ieUnatt.exe
[2013.04.18 00:35:49 | 000,132,096 | ---- | C] () -- C:\Windows\SysNative\iesysprep.dll
[2013.04.18 00:35:49 | 000,096,768 | ---- | C] () -- C:\Windows\SysNative\mshtmled.dll
[2013.04.18 00:35:49 | 000,077,312 | ---- | C] () -- C:\Windows\SysNative\iesetup.dll
[2013.04.18 00:35:49 | 000,072,192 | ---- | C] () -- C:\Windows\SysNative\iernonce.dll
[2013.04.18 00:35:49 | 000,071,680 | ---- | C] () -- C:\Windows\SysNative\msfeedsbs.dll
[2013.04.18 00:35:49 | 000,070,656 | ---- | C] () -- C:\Windows\SysNative\ie4uinit.exe
[2013.04.18 00:35:49 | 000,056,832 | ---- | C] () -- C:\Windows\SysNative\licmgr10.dll
[2013.04.18 00:35:49 | 000,031,744 | ---- | C] () -- C:\Windows\SysNative\jsproxy.dll
[2013.04.18 00:35:49 | 000,012,288 | ---- | C] () -- C:\Windows\SysNative\msfeedssync.exe
[2013.04.18 00:35:45 | 002,762,240 | ---- | C] () -- C:\Windows\SysNative\win32k.sys
[2013.04.18 00:35:44 | 000,176,128 | ---- | C] () -- C:\Windows\SysNative\drivers\srv2.sys
[2013.04.18 00:35:44 | 000,144,896 | ---- | C] () -- C:\Windows\SysNative\drivers\srvnet.sys
[2013.04.18 00:35:43 | 000,847,872 | ---- | C] () -- C:\Windows\SysNative\oleaut32.dll
[2013.04.18 00:35:43 | 000,274,432 | ---- | C] () -- C:\Windows\SysNative\drivers\mrxsmb10.sys
[2013.04.18 00:35:43 | 000,135,168 | ---- | C] () -- C:\Windows\SysNative\drivers\mrxsmb.sys
[2013.04.18 00:35:43 | 000,105,984 | ---- | C] () -- C:\Windows\SysNative\drivers\mrxsmb20.sys
[2013.04.18 00:35:42 | 000,407,552 | ---- | C] () -- C:\Windows\SysNative\drivers\afd.sys
[2013.04.18 00:35:42 | 000,097,792 | ---- | C] () -- C:\Windows\SysNative\drivers\dfsc.sys
[2013.04.18 00:35:41 | 000,975,360 | ---- | C] () -- C:\Windows\SysNative\inetcomm.dll
[2013.04.18 00:35:40 | 000,344,576 | ---- | C] () -- C:\Windows\SysNative\schannel.dll
[2013.04.18 00:35:39 | 000,450,048 | ---- | C] () -- C:\Windows\SysNative\winsrv.dll
[2013.04.18 00:35:39 | 000,085,504 | ---- | C] () -- C:\Windows\SysNative\csrsrv.dll
[2013.04.18 00:20:11 | 000,000,514 | ---- | C] () -- C:\Windows\SysWow64\ABG71GX.DAT
[2013.04.17 00:04:08 | 000,316,416 | ---- | C] () -- C:\Windows\SysNative\msshsq.dll
[2013.04.16 23:45:47 | 000,633,856 | ---- | C] () -- C:\Windows\SysNative\comctl32.dll
[2013.04.16 23:45:00 | 000,087,552 | ---- | C] () -- C:\Windows\SysNative\consent.exe
[2013.04.16 23:44:12 | 000,224,256 | ---- | C] () -- C:\Windows\SysNative\iphlpsvc.dll
[2013.04.16 23:44:12 | 000,029,696 | ---- | C] () -- C:\Windows\SysNative\drivers\tunnel.sys
[2013.04.16 23:43:44 | 013,425,152 | ---- | C] () -- C:\Windows\SysNative\wmp.dll
[2013.04.16 23:43:31 | 008,147,968 | ---- | C] () -- C:\Windows\SysNative\wmploc.DLL
[2013.04.16 23:42:37 | 000,189,952 | ---- | C] () -- C:\Windows\SysNative\t2embed.dll
[2013.04.16 23:42:13 | 000,462,848 | ---- | C] () -- C:\Windows\SysNative\odbc32.dll
[2013.04.16 23:41:59 | 000,301,568 | ---- | C] () -- C:\Windows\SysNative\shsvcs.dll
[2013.04.16 23:41:20 | 004,692,368 | ---- | C] () -- C:\Windows\SysNative\ntoskrnl.exe
[2013.04.16 23:41:19 | 001,560,960 | ---- | C] () -- C:\Windows\SysNative\ntdll.dll
[2013.04.16 23:41:11 | 001,794,560 | ---- | C] () -- C:\Windows\SysNative\msxml6.dll
[2013.04.16 23:41:01 | 012,898,304 | ---- | C] () -- C:\Windows\SysNative\shell32.dll
[2013.04.16 23:40:56 | 000,454,144 | ---- | C] () -- C:\Windows\SysNative\shlwapi.dll
[2013.04.16 23:40:50 | 000,817,664 | ---- | C] () -- C:\Windows\SysNative\jscript.dll
[2013.04.16 23:40:49 | 000,613,376 | ---- | C] () -- C:\Windows\SysNative\vbscript.dll
[2013.04.16 23:40:45 | 000,979,344 | ---- | C] () -- C:\Windows\SysNative\winresume.exe
[2013.04.16 23:40:44 | 001,075,600 | ---- | C] () -- C:\Windows\SysNative\winload.efi
[2013.04.16 23:40:44 | 001,062,800 | ---- | C] () -- C:\Windows\SysNative\winload.exe
[2013.04.16 23:40:44 | 000,990,096 | ---- | C] () -- C:\Windows\SysNative\winresume.efi
[2013.04.16 23:40:43 | 000,020,880 | ---- | C] () -- C:\Windows\SysNative\kdusb.dll
[2013.04.16 23:40:43 | 000,018,832 | ---- | C] () -- C:\Windows\SysNative\kd1394.dll
[2013.04.16 23:40:43 | 000,018,320 | ---- | C] () -- C:\Windows\SysNative\kdcom.dll
[2013.04.16 23:40:38 | 002,424,320 | ---- | C] () -- C:\Windows\SysNative\mstscax.dll
[2013.04.16 23:40:36 | 000,730,624 | ---- | C] () -- C:\Windows\SysNative\mstsc.exe
[2013.04.16 23:40:31 | 001,923,584 | ---- | C] () -- C:\Windows\SysNative\ole32.dll
[2013.04.16 23:40:16 | 000,461,312 | ---- | C] () -- C:\Windows\SysNative\drivers\srv.sys
[2013.04.16 23:40:13 | 000,560,128 | ---- | C] () -- C:\Windows\SysNative\EncDec.dll
[2013.04.16 23:40:12 | 000,416,768 | ---- | C] () -- C:\Windows\SysNative\sbe.dll
[2013.04.16 23:40:12 | 000,226,816 | ---- | C] () -- C:\Windows\SysNative\mpg2splt.ax
[2013.04.16 23:40:12 | 000,210,944 | ---- | C] () -- C:\Windows\SysNative\sbeio.dll
[2013.04.16 23:38:58 | 000,090,624 | ---- | C] () -- C:\Windows\SysNative\drivers\bowser.sys
[2013.04.16 23:38:53 | 000,367,616 | ---- | C] () -- C:\Windows\SysNative\atmfd.dll
[2013.04.16 23:38:52 | 000,096,256 | ---- | C] () -- C:\Windows\SysNative\fontsub.dll
[2013.04.16 23:38:52 | 000,048,128 | ---- | C] () -- C:\Windows\SysNative\atmlib.dll
[2013.04.16 23:38:17 | 000,179,712 | ---- | C] () -- C:\Windows\SysNative\srvsvc.dll
[2013.04.16 23:38:16 | 000,017,920 | ---- | C] () -- C:\Windows\SysNative\netevent.dll
[2013.04.16 23:38:16 | 000,012,288 | ---- | C] () -- C:\Windows\SysNative\sscore.dll
[2013.04.16 23:37:14 | 000,002,048 | ---- | C] () -- C:\Windows\SysNative\tzres.dll
[2013.04.16 23:35:18 | 001,398,784 | ---- | C] () -- C:\Windows\SysNative\mfc42.dll
[2013.04.16 23:35:18 | 001,360,384 | ---- | C] () -- C:\Windows\SysNative\mfc42u.dll
[2013.04.16 23:35:14 | 001,251,840 | ---- | C] () -- C:\Windows\SysNative\sdclt.exe
[2013.04.16 23:23:03 | 000,854,528 | ---- | C] () -- C:\Windows\SysNative\schedsvc.dll
[2013.04.16 23:23:02 | 000,655,872 | ---- | C] () -- C:\Windows\SysNative\taskschd.dll
[2013.04.16 23:23:02 | 000,499,712 | ---- | C] () -- C:\Windows\SysNative\wmicmiplugin.dll
[2013.04.16 23:23:01 | 000,410,112 | ---- | C] () -- C:\Windows\SysNative\taskcomp.dll
[2013.04.16 23:23:01 | 000,267,776 | ---- | C] () -- C:\Windows\SysNative\taskeng.exe
[2013.04.16 23:21:10 | 001,090,048 | ---- | C] () -- C:\Windows\SysNative\wmpmde.dll
[2013.04.16 23:21:09 | 000,221,184 | ---- | C] () -- C:\Windows\SysNative\dnsapi.dll
[2013.04.16 23:21:09 | 000,117,760 | ---- | C] () -- C:\Windows\SysNative\dnsrslvr.dll
[2013.04.16 23:21:09 | 000,028,672 | ---- | C] () -- C:\Windows\SysNative\dnscacheugc.exe
[2013.04.16 22:55:17 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2013.04.16 22:52:15 | 000,000,956 | ---- | C] () -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2013.04.16 22:51:29 | 000,000,986 | ---- | C] () -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013.04.16 22:51:20 | 000,000,981 | ---- | C] () -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2013.04.16 22:51:13 | 000,000,922 | ---- | C] () -- C:\Users\Sicherheit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
[2011.06.01 16:24:44 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2009.10.01 15:03:48 | 000,000,084 | -H-- | C] () -- C:\ProgramData\aspg.dat
[2009.09.29 14:22:17 | 000,231,716 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.09.29 14:22:15 | 000,231,716 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.04.08 19:31:56 | 000,106,496 | ---- | C] () -- C:\Program Files (x86)\Common Files\CPInstallAction.dll
[2008.05.22 17:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files (x86)\Common Files\banner.jpg

========== ZeroAccess Check ==========

[2006.11.02 17:30:40 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2011.01.21 17:56:31 | 012,898,304 | ---- | M] ()
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2011.01.21 17:46:32 | 011,582,464 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.09.20 11:17:46 | 000,891,392 | ---- | M] ()
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.09.20 11:17:46 | 000,615,424 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2008.01.21 04:50:58 | 000,513,024 | ---- | M] ()
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013.04.16 23:09:07 | 000,000,000 | ---D | M] -- C:\Users\Sicherheit\AppData\Roaming\Opera

========== Purity Check ==========



< End of report >