Internet Browser stürzen ab

kacy

Hallo,
ich habe seit einigen Tagen das Problem das mein Internetbrowser öfter abgestürzt ist. (Chrome) Habe mir dann Opera runtergeladen, jedoch blieb das Problem auch bei Opera bestehen...
Kacy ist nicht mein Realname, darum hab ich ihn in den Logs nicht editiert.
Wollte mir, wenn ich mit euch das Problem behoben habe, Avast antivirus auf den Rechner machen, weil ich mit Avira nicht so zufrieden bin.
In den logfiles tauchen noch Sachen auf die ich eigentlich deinstalliert habe z.B. (Tuneup) (Opera).

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 23:24 on 22/04/2013 (Kacy)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-


GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-04-23 10:23:10
Windows 5.1.2600 Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IdePort0 WDC_WD1600BEVT-22ZCT0 rev.11.01A11 149,05GB
Running: gmer_2.1.19163.exe; Driver: C:\DOKUME~1\Kacy\LOKALE~1\Temp\axpdqaob.sys


---- System - GMER 2.1 ----

SSDT F7D1F4EC ZwClose
SSDT F7D1F4A6 ZwCreateKey
SSDT F7D1F4F6 ZwCreateSection
SSDT F7D1F49C ZwCreateThread
SSDT F7D1F4AB ZwDeleteKey
SSDT F7D1F4B5 ZwDeleteValueKey
SSDT F7D1F4E7 ZwDuplicateObject
SSDT F7D1F4BA ZwLoadKey
SSDT F7D1F488 ZwOpenProcess
SSDT F7D1F48D ZwOpenThread
SSDT F7D1F50F ZwQueryValueKey
SSDT F7D1F4C4 ZwReplaceKey
SSDT F7D1F500 ZwRequestWaitReplyPort
SSDT F7D1F4BF ZwRestoreKey
SSDT F7D1F4FB ZwSetContextThread
SSDT F7D1F505 ZwSetSecurityObject
SSDT F7D1F4B0 ZwSetValueKey
SSDT F7D1F50A ZwSystemDebugControl
SSDT F7D1F497 ZwTerminateProcess

---- Kernel code sections - GMER 2.1 ----

? system32\drivers\xpsec.sys Das System kann den angegebenen Pfad nicht finden. !
? system32\drivers\xcpip.sys Das System kann den angegebenen Pfad nicht finden. !

---- Devices - GMER 2.1 ----

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys
AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys

---- Registry - GMER 2.1 ----

Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher@LastDiskLayoutTimeString 2013/04/19-03:07:46

---- Disk sectors - GMER 2.1 ----

Disk \Device\Harddisk0\DR0 unknown MBR code
Disk \Device\Harddisk0\DR0 sector 0: rootkit-like behavior
Disk \Device\Harddisk0\DR0 malicious Win32:MBRoot code @ sector 312576708 !
Disk \Device\Harddisk0\DR0 PE file @ sector 312576730 !

---- EOF - GMER 2.1 ----


OTL Extras logfile created on: 23.04.2013 03:05:15 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\Kacy\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1011,88 Mb Total Physical Memory | 431,59 Mb Available Physical Memory | 42,65% Memory free
2,37 Gb Paging File | 1,40 Gb Available in Paging File | 59,13% Paging File free
Paging file location(s): C:\pagefile.sys 1512 3024 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 144,17 Gb Total Space | 106,25 Gb Free Space | 73,70% Space Free | Partition Type: NTFS

Computer Name: ACER-3429739CD9 | User Name: Kacy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = htmlfile] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
http [open] -- "C:\Programme\Opera\Opera.exe" "%1"
https [open] -- "C:\Programme\Opera\Opera.exe" "%1"
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop
"65533:TCP" = 65533:TCP:*:Enabled:Services
"52344:TCP" = 52344:TCP:*:Enabled:Services

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop
"65533:TCP" = 65533:TCP:*:Enabled:Services
"52344:TCP" = 52344:TCP:*:Enabled:Services

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\Opera\opera.exe" = C:\Programme\Opera\opera.exe:*:Enabled:Opera Internet Browser


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron JMB38X Flash Media Controller
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros for Acer Driver v7.6.0.224_Foxconn Installation Program
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{399C37FB-08AF-493B-BFED-20FBD85EDF7F}" = Acer Crystal Eye webcam
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}" = OpenOffice.org 3.4
"{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{69333A04-5134-40A5-A055-9166A7AA1EC8}" =
"{6DA399FC-350F-41AC-8CA6-B9F8496753BE}_is1" = Media Finder 1.0.9.31
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}" = UxStyle Core Beta
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (German) 12
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{58FC5E37-DD28-4D4A-A549-125744C6763C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{888B9AC7-8F5C-456B-A27A-157A6C310E52}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.1
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B515962D-C979-44AC-9912-F7BB499B4B2C}" = VirtualDJ Home FREE
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F18DB86D-BC16-4E01-BCCE-63F62B931D82}" = InterVideo Register Manager
"{F4811919-F252-4B25-9AB2-8859A85810B5}" = TuneUp Utilities Language Pack (de-DE)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira Free Antivirus
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Free AVI Video Converter_is1" = Free AVI Video Converter version 5.0.15.706
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.32.918
"GIMP-2_is1" = GIMP 2.8.2
"G'MIC for GIMP_is1" = G'MIC for GIMP Version 1.5.2.3
"Google Chrome" = Google Chrome
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"Lexmark S300-S400 Series" = Lexmark S300-S400 Series
"LManager" = Launch Manager
"MediaCoder" = MediaCoder 0.8.13
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Revo Uninstaller" = Revo Uninstaller 1.94
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"VLC media player" = VLC media player 2.0.1
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"WinRAR archiver" = WinRAR 4.20 (32-Bit)
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 29.11.2012 15:51:37 | Computer Name = ACER-3429739CD9 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung file-jpeg.exe, Version 2.8.2.0, fehlgeschlagenes
Modul msvcrt.dll, Version 7.0.2600.5512, Fehleradresse 0x00036fa3.

Error - 29.11.2012 15:52:02 | Computer Name = ACER-3429739CD9 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung file-jpeg.exe, Version 2.8.2.0, fehlgeschlagenes
Modul msvcrt.dll, Version 7.0.2600.5512, Fehleradresse 0x00036fa3.

Error - 04.12.2012 05:06:24 | Computer Name = ACER-3429739CD9 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung AcroRd32.exe, Version 9.5.1.283, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 04.12.2012 05:06:25 | Computer Name = ACER-3429739CD9 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung AcroRd32.exe, Version 9.5.1.283, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 04.12.2012 05:06:42 | Computer Name = ACER-3429739CD9 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung AcroRd32.exe, Version 9.5.1.283, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 05.12.2012 17:31:06 | Computer Name = ACER-3429739CD9 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung soffice.bin, Version 3.4.9590.500, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 05.12.2012 17:31:10 | Computer Name = ACER-3429739CD9 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung soffice.bin, Version 3.4.9590.500, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 09.01.2013 23:09:14 | Computer Name = ACER-3429739CD9 | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Tried to start a service that wasn't the latest version of CLR Optimization service.
Will shutdown

Error - 13.01.2013 21:34:38 | Computer Name = ACER-3429739CD9 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung soffice.bin, Version 3.4.9590.500, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

[ System Events ]
Error - 22.04.2013 18:30:59 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 18:31:13 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 18:31:31 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 18:31:36 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 18:31:54 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 18:32:00 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 18:32:14 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 18:32:32 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 18:36:12 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.

Error - 22.04.2013 19:03:27 | Computer Name = ACER-3429739CD9 | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort0 hat innerhalb der Fehlerwartezeit nicht
geantwortet.


< End of report >



OTL logfile created on: 23.04.2013 03:05:15 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\Kacy\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1011,88 Mb Total Physical Memory | 431,59 Mb Available Physical Memory | 42,65% Memory free
2,37 Gb Paging File | 1,40 Gb Available in Paging File | 59,13% Paging File free
Paging file location(s): C:\pagefile.sys 1512 3024 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 144,17 Gb Total Space | 106,25 Gb Free Space | 73,70% Space Free | Partition Type: NTFS

Computer Name: ACER-3429739CD9 | User Name: Kacy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.04.22 22:56:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Kacy\Desktop\OTL.exe
PRC - [2013.02.08 10:03:23 | 000,027,136 | ---- | M] (Bitdefender) -- C:\Programme\Bitdefender\Antivirus Free Edition\gzserv.exe
PRC - [2013.01.28 14:17:32 | 000,134,432 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2013\TUMessages.exe
PRC - [2013.01.28 14:17:30 | 000,404,768 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2013\TUInstallHelper.exe
PRC - [2012.12.03 09:35:28 | 000,946,352 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe
PRC - [2012.11.13 03:37:21 | 000,161,768 | ---- | M] (Oracle Corporation) -- C:\Programme\Java\jre7\bin\jqs.exe
PRC - [2012.08.12 22:54:48 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.06.22 11:12:23 | 000,212,992 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Temp\RtkBtMnt.exe
PRC - [2012.05.02 01:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.02 01:21:03 | 000,174,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- c:\Programme\Avira\AntiVir Desktop\guardgui.exe
PRC - [2012.05.02 01:00:50 | 000,117,688 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avwsc.exe
PRC - [2012.05.02 00:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.04.24 02:11:55 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.01.23 20:08:55 | 000,148,280 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\ezprint.exe
PRC - [2011.01.23 20:08:52 | 000,770,728 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\lxeamon.exe
PRC - [2010.04.14 15:45:21 | 000,598,696 | ---- | M] ( ) -- C:\WINDOWS\system32\lxeacoms.exe
PRC - [2009.07.13 01:07:48 | 000,021,096 | ---- | M] (The Within Network, LLC) -- C:\WINDOWS\UnsignedThemesSvc.exe
PRC - [2009.03.05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2008.06.04 18:10:02 | 000,114,688 | ---- | M] (InterVideo Inc.) -- C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe
PRC - [2008.05.22 15:30:16 | 000,425,984 | ---- | M] (Acer Inc.) -- C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
PRC - [2008.05.14 05:14:34 | 000,821,768 | ---- | M] (Dritek System Inc.) -- C:\Programme\Launch Manager\QtZgAcer.EXE
PRC - [2008.04.13 23:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.01.04 19:48:52 | 000,112,152 | R--- | M] (InterVideo) -- C:\Programme\Gemeinsame Dateien\InterVideo\RegMgr\iviRegMgr.exe


========== Modules (No Company Name) ==========

MOD - [2012.09.07 17:09:26 | 000,394,408 | ---- | M] () -- \\?\C:\Programme\Bitdefender\Antivirus Free Edition\ThreatScanner\trufos.dll
MOD - [2012.07.17 07:45:13 | 000,508,136 | ---- | M] () -- C:\Programme\Bitdefender\Antivirus Free Edition\sqlite3.dll
MOD - [2012.04.27 15:08:08 | 000,093,040 | ---- | M] () -- C:\Programme\Bitdefender\Antivirus Free Edition\bdmetrics.dll
MOD - [2012.04.16 23:11:02 | 000,398,288 | ---- | M] () -- C:\Programme\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2011.01.23 20:08:55 | 000,148,280 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\ezprint.exe
MOD - [2011.01.23 20:08:52 | 000,770,728 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\lxeamon.exe
MOD - [2010.04.05 05:56:07 | 000,716,954 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\epwizard.dll
MOD - [2010.04.05 05:55:15 | 000,159,890 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\customui.dll
MOD - [2010.04.05 05:55:04 | 000,061,604 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\epfunct.dll
MOD - [2010.04.05 05:54:59 | 000,123,033 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\eputil.dll
MOD - [2010.04.05 05:54:52 | 000,143,502 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\imagutil.dll
MOD - [2010.04.01 12:24:28 | 001,159,168 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\lxeadrs.dll
MOD - [2010.04.01 12:23:27 | 000,389,120 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\lxeascw.dll
MOD - [2009.11.04 08:14:19 | 000,157,696 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lxeadrpp.dll
MOD - [2009.06.23 06:11:04 | 000,102,400 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\epoemdll.dll
MOD - [2009.06.23 06:10:29 | 000,045,056 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\epstring.dll
MOD - [2009.06.23 06:09:11 | 002,203,648 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\epwizres.dll
MOD - [2009.05.27 07:16:50 | 000,192,512 | ---- | M] () -- C:\WINDOWS\system32\spool\drivers\w32x86\3\lxeadatr.dll
MOD - [2009.04.28 02:56:29 | 000,024,064 | ---- | M] () -- C:\WINDOWS\system32\LXEAsmr.dll
MOD - [2009.04.07 14:25:27 | 000,409,600 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\iptk.dll
MOD - [2009.03.10 00:43:49 | 000,155,648 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\lxeacaps.dll
MOD - [2009.03.02 09:25:47 | 000,151,552 | ---- | M] () -- C:\Programme\Lexmark S300-S400 Series\lxeaptp.dll
MOD - [2009.02.20 03:48:03 | 000,299,008 | ---- | M] () -- C:\WINDOWS\system32\LXEAsm.dll
MOD - [2007.04.06 01:56:30 | 000,356,352 | ---- | M] () -- C:\Acer\Empowering Technology\eRecovery\it41.dll
MOD - [2006.01.12 09:33:34 | 000,212,992 | ---- | M] () -- C:\Acer\Empowering Technology\eRecovery\imagefile.dll


========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013.03.13 20:54:23 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.02.08 10:03:23 | 000,027,136 | ---- | M] (Bitdefender) [Disabled | Running] -- C:\Programme\Bitdefender\Antivirus Free Edition\gzserv.exe -- (gzserv)
SRV - [2012.11.13 03:37:21 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Programme\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012.05.02 01:42:28 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.02 00:34:34 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.04.14 15:45:21 | 000,598,696 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\system32\lxeacoms.exe -- (lxea_device)
SRV - [2009.07.13 01:07:48 | 000,021,096 | ---- | M] (The Within Network, LLC) [Auto | Running] -- C:\WINDOWS\UnsignedThemesSvc.exe -- (UnsignedThemes)
SRV - [2007.08.24 03:19:12 | 000,443,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2007.01.04 19:48:52 | 000,112,152 | R--- | M] (InterVideo) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
SRV - [2006.10.26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\xpsec.sys -- (xpsec)
DRV - File not found [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\xcpip.sys -- (xcpip)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Programme\SiSoftware\SiSoftware Sandra Lite 2013.SP3\WNt500x86\Sandra.sys -- (SANDRA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOKUME~1\Kacy\LOKALE~1\Temp\axpdqaob.sys -- (axpdqaob)
DRV - [2013.04.20 17:09:58 | 000,343,456 | ---- | M] (BitDefender S.R.L.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\trufos.sys -- (trufos)
DRV - [2012.10.04 13:30:05 | 000,162,976 | ---- | M] (BitDefender LLC) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\gzflt.sys -- (gzflt)
DRV - [2012.06.04 09:59:20 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2012.06.04 09:59:20 | 000,080,824 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2012.04.27 10:20:04 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.04.25 00:32:27 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012.04.16 21:17:40 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.06.02 07:47:22 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011.06.02 07:47:22 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2011.06.02 07:47:22 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadserd.sys -- (ssadserd)
DRV - [2011.06.02 07:47:22 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2010.12.21 07:55:02 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadadb.sys -- (androidusb)
DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.07.13 01:07:46 | 000,025,448 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\uxpatch.sys -- (uxpatch)
DRV - [2008.07.08 03:16:26 | 000,096,856 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\jmcr.sys -- (JMCR)
DRV - [2008.07.01 05:27:44 | 000,108,800 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008.05.20 17:31:26 | 001,312,576 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2008.05.20 11:53:00 | 004,800,000 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2008.04.13 23:00:00 | 000,096,512 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\atapi.sys -- (atapi)
DRV - [2007.10.01 14:59:46 | 001,769,984 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2007.09.25 16:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Programme\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2005.01.13 14:46:16 | 000,069,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Acer\Empowering Technology\eRecovery\int15.sys -- (int15.sys)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = hxxp://search.babylon.com/?affID=113480&tt=120812_bandext_3312_2&babsrc=HP_ss&mntrId=0c2efe9800000000000000234d7662ce
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=xph&d=0612&m=aoa150
IE - HKCU\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=113480&tt=120812_bandext_3312_2&babsrc=SP_ss&mntrId=0c2efe9800000000000000234d7662ce
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2319825
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)


[2012.08.22 00:47:52 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\Mozilla\Extensions

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{googleriginalQueryForSuggestion}{google:assistedQueryStats}{google:se archFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParam eter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Programme\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Programme\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programme\Google\Chrome\Application\26.0.1410.64\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Programme\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programme\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programme\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Programme\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Programme\VideoLAN\VLC\npvlc.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Docs = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: Google Drive = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: General Crawler = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel\2.5_0\
CHR - Extension: Media Finder plugin = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai\1.1.0_0\
CHR - Extension: Winload = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ngnjhfpfhadncgafgbneeljaginimmmk\10.11.23.8_0\
CHR - Extension: DvdVideoSoft Free Youtube Download = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.0.0_0\
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2008.04.13 23:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O3 - HKLM\..\Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - No CLSID value found.
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [AzMixerSel] C:\Programme\Realtek\Audio\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe (Acer Inc.)
O4 - HKLM..\Run: [EzPrint] C:\Programme\Lexmark S300-S400 Series\ezprint.exe ()
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [InstallerLauncher] C:\Programme\Bitdefender\Antivirus Free Edition\Install\setuplauncher.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [LaunchApp] C:\WINDOWS\Alaunch.exe (Acer Inc.)
O4 - HKLM..\Run: [LManager] C:\Programme\Launch Manager\QtZgAcer.EXE (Dritek System Inc.)
O4 - HKLM..\Run: [lxeamon.exe] C:\Programme\Lexmark S300-S400 Series\lxeamon.exe ()
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe (sonix)
O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil32_11_6_602_180_Plugin.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\InterVideo WinCinema Manager.lnk = C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe (InterVideo Inc.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.08.21 00:30:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{7a989e2c-cd53-11e1-85ec-00234d7662ce}\Shell\play\command - "" = C:\Programme\InterVideo\WinDVD\WinDVD.exe -- [2008.06.04 18:13:06 | 000,132,368 | ---- | M] (InterVideo Inc.)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013.04.22 23:06:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kacy\Desktop\virus
[2013.04.22 22:56:21 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Kacy\Desktop\OTL.exe
[2013.04.22 22:34:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Chrome
[2013.04.22 13:54:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kacy\Startmenü\Programme\Revo Uninstaller
[2013.04.22 13:54:04 | 000,000,000 | ---D | C] -- C:\Programme\VS Revo Group
[2013.04.22 13:37:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\QuickScan
[2013.04.21 23:18:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\Opera
[2013.04.21 23:18:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\Opera
[2013.04.21 23:17:26 | 000,000,000 | ---D | C] -- C:\Programme\Opera
[2013.04.20 20:21:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\TuneUp Software
[2013.04.20 20:08:30 | 000,032,032 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TURegOpt.exe
[2013.04.20 20:07:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\TuneUp Software
[2013.04.20 20:06:02 | 000,000,000 | ---D | C] -- C:\Programme\TuneUp Utilities 2013
[2013.04.20 20:05:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2013.04.20 20:05:00 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013.04.20 20:05:00 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2013.04.20 17:09:58 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\WINDOWS\System32\drivers\trufos.sys
[2013.04.20 17:09:57 | 000,241,992 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\avchv.sys
[2013.04.20 17:08:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\QuickScan
[2013.04.20 17:04:58 | 000,622,616 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\avc3.sys
[2013.04.20 17:04:58 | 000,447,208 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\avckf.sys
[2013.04.20 16:58:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\QuickScan
[2013.04.20 16:58:48 | 000,000,000 | ---D | C] -- C:\Programme\Bitdefender
[2013.04.20 16:47:49 | 000,162,976 | ---- | C] (BitDefender LLC) -- C:\WINDOWS\System32\drivers\gzflt.sys
[2013.04.15 22:42:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kacy\Desktop\Neuer Ordner (2)
[2013.03.24 19:51:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Application Data
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.04.23 02:53:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.04.23 02:36:00 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013.04.22 23:24:20 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Kacy\defogger_reenable
[2013.04.22 22:58:02 | 000,377,856 | ---- | M] () -- C:\Dokumente und Einstellungen\Kacy\Desktop\gmer_2.1.19163.exe
[2013.04.22 22:56:25 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Kacy\Desktop\Defogger.exe
[2013.04.22 22:56:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Kacy\Desktop\OTL.exe
[2013.04.22 22:36:16 | 000,001,082 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013.04.22 13:55:23 | 000,017,052 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366631710.bdinstall.bin
[2013.04.22 13:33:47 | 000,017,052 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366630343.bdinstall.bin
[2013.04.22 13:29:57 | 000,017,051 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366630179.bdinstall.bin
[2013.04.22 13:29:35 | 000,017,052 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366630074.bdinstall.bin
[2013.04.22 13:27:50 | 000,043,804 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366630003.bdinstall.bin
[2013.04.22 13:26:41 | 000,022,211 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366629982.bdinstall.bin
[2013.04.20 19:35:05 | 001,457,173 | ---- | M] () -- C:\Dokumente und Einstellungen\Kacy\Desktop\Green-Black-Glass-HD.jpg
[2013.04.20 19:35:05 | 000,003,511 | ---- | M] () -- C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\recently-used.xbel
[2013.04.20 19:09:58 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.04.20 19:09:56 | 1061,105,664 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.20 17:09:58 | 000,343,456 | ---- | M] (BitDefender S.R.L.) -- C:\WINDOWS\System32\drivers\trufos.sys
[2013.04.20 17:09:57 | 000,241,992 | ---- | M] (BitDefender) -- C:\WINDOWS\System32\drivers\avchv.sys
[2013.04.20 17:05:29 | 000,157,862 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469895.bdinstall.bin
[2013.04.20 16:56:04 | 000,028,539 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469710.5936.bin
[2013.04.20 16:56:04 | 000,001,475 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469710.1456.bin
[2013.04.20 16:55:27 | 000,002,043 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469710.4028.bin
[2013.04.20 16:54:44 | 000,030,106 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469573.bdinstall.bin
[2013.04.20 16:51:34 | 000,028,694 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469466.bdinstall.bin
[2013.04.20 16:50:52 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2013.04.20 16:47:51 | 000,008,366 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469219.5084.bin
[2013.04.20 16:47:51 | 000,001,658 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469219.4112.bin
[2013.04.20 16:47:49 | 000,030,246 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469219.3668.bin
[2013.04.20 16:47:09 | 000,002,043 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469219.4372.bin
[2013.04.11 04:16:06 | 000,504,834 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2013.04.11 04:16:06 | 000,483,330 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.04.11 04:16:06 | 000,096,470 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2013.04.11 04:16:06 | 000,080,734 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.04.11 04:11:04 | 000,280,536 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.04.11 03:16:01 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.04.22 23:24:20 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\defogger_reenable
[2013.04.22 22:58:00 | 000,377,856 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\Desktop\gmer_2.1.19163.exe
[2013.04.22 22:56:24 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\Desktop\Defogger.exe
[2013.04.22 22:31:11 | 000,001,086 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013.04.22 22:31:09 | 000,001,082 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013.04.22 13:55:23 | 000,017,052 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366631710.bdinstall.bin
[2013.04.22 13:33:47 | 000,017,052 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366630343.bdinstall.bin
[2013.04.22 13:29:57 | 000,017,051 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366630179.bdinstall.bin
[2013.04.22 13:29:34 | 000,017,052 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366630074.bdinstall.bin
[2013.04.22 13:27:50 | 000,043,804 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366630003.bdinstall.bin
[2013.04.22 13:26:41 | 000,022,211 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366629982.bdinstall.bin
[2013.04.20 20:08:23 | 000,001,717 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TuneUp Utilities 2013.lnk
[2013.04.20 19:35:05 | 000,003,511 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\recently-used.xbel
[2013.04.20 19:08:14 | 001,457,173 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\Desktop\Green-Black-Glass-HD.jpg
[2013.04.20 17:05:28 | 000,157,862 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469895.bdinstall.bin
[2013.04.20 16:55:29 | 000,001,475 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469710.1456.bin
[2013.04.20 16:55:25 | 000,002,043 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469710.4028.bin
[2013.04.20 16:55:10 | 000,028,539 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469710.5936.bin
[2013.04.20 16:54:44 | 000,030,106 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469573.bdinstall.bin
[2013.04.20 16:51:34 | 000,028,694 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469466.bdinstall.bin
[2013.04.20 16:47:48 | 000,008,366 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469219.5084.bin
[2013.04.20 16:47:10 | 000,001,658 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469219.4112.bin
[2013.04.20 16:47:07 | 000,002,043 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469219.4372.bin
[2013.04.20 16:46:59 | 000,030,246 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1366469219.3668.bin
[2013.03.14 02:08:15 | 000,513,132 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\lalala.jpg
[2012.11.29 22:37:52 | 000,001,048 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\gmic_sources.cimgz
[2012.08.20 13:04:42 | 000,282,338 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-511291533-483287426-4087687731-1006-0.dat
[2012.08.20 13:04:40 | 000,282,910 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2012.08.19 19:50:20 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012.07.30 14:16:20 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2012.07.30 14:16:18 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2012.07.30 14:16:18 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2012.07.30 14:16:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2012.07.30 14:16:18 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2012.07.16 00:07:20 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxeavs.dll
[2012.07.16 00:07:17 | 000,442,368 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeacoin.dll
[2012.07.16 00:07:07 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\lxeagcfg.dll
[2012.07.16 00:07:06 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\lxeacui.dll
[2012.07.16 00:07:06 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\lxeacuir.dll
[2012.07.16 00:05:07 | 001,048,576 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeaserv.dll
[2012.07.16 00:05:07 | 000,847,872 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeausb1.dll
[2012.07.16 00:05:07 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeainpa.dll
[2012.07.16 00:05:07 | 000,356,352 | ---- | C] ( ) -- C:\WINDOWS\System32\LXEAhcp.dll
[2012.07.16 00:05:07 | 000,344,064 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeaiesc.dll
[2012.07.16 00:05:07 | 000,331,776 | ---- | C] () -- C:\WINDOWS\System32\LXEAinst.dll
[2012.07.16 00:05:06 | 000,643,072 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeapmui.dll
[2012.07.16 00:05:06 | 000,577,536 | ---- | C] ( ) -- C:\WINDOWS\System32\lxealmpm.dll
[2012.07.16 00:05:06 | 000,324,264 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeaih.exe
[2012.07.16 00:05:06 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\lxeains.dll
[2012.07.16 00:05:06 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\lxeainsb.dll
[2012.07.16 00:05:06 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\lxeainsr.dll
[2012.07.16 00:05:06 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\lxeajswr.dll
[2012.07.16 00:05:05 | 000,688,128 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeahbn3.dll
[2012.07.16 00:05:05 | 000,598,696 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeacoms.exe
[2012.07.16 00:05:05 | 000,372,736 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeacomm.dll
[2012.07.16 00:05:05 | 000,253,952 | ---- | C] () -- C:\WINDOWS\System32\lxeacu.dll
[2012.07.16 00:05:05 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxeagrd.dll
[2012.07.16 00:05:05 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\lxeacub.dll
[2012.07.16 00:05:05 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxeacur.dll
[2012.07.16 00:05:04 | 000,802,816 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeacomc.dll
[2012.07.16 00:05:04 | 000,373,416 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeacfg.exe
[2012.07.16 00:04:41 | 000,299,008 | ---- | C] () -- C:\WINDOWS\System32\LXEAsm.dll
[2012.07.16 00:04:41 | 000,024,064 | ---- | C] () -- C:\WINDOWS\System32\LXEAsmr.dll
[2012.07.04 22:10:07 | 000,009,216 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.06.22 12:01:53 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.06.22 11:28:03 | 000,016,384 | ---- | C] ( ) -- C:\WINDOWS\System32\ClearEvent.exe
[2012.06.22 11:09:15 | 000,000,137 | ---- | C] () -- C:\Dokumente und Einstellungen\Kacy\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat

========== ZeroAccess Check ==========

[2008.08.21 00:37:38 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.13 23:00:00 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 12:51:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.13 23:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013.04.20 20:05:00 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2012.08.21 21:03:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Lexmark S300-S400 Series
[2012.08.20 00:00:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2013.04.20 20:17:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2013.04.20 22:22:57 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2012.08.02 04:45:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\Broad Intelligence
[2012.10.31 14:48:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\DVDVideoSoft
[2012.08.02 05:26:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\DVDVideoSoftIEHelpers
[2012.07.14 03:31:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\InterVideo
[2012.08.22 00:48:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\Media Finder
[2012.07.30 13:19:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\OpenOffice.org
[2013.04.21 23:18:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\Opera
[2013.04.20 16:58:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\QuickScan
[2012.08.20 00:08:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\Samsung
[2013.04.20 20:07:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kacy\Anwendungsdaten\TuneUp Software

========== Purity Check ==========



< End of report >


Ich danke schon mal im Vorraus, und weiss eure Arbeit wirklich zu schätzen.
Ich weiss zwar nicht was man aus den Daten alles lesen kann, jedoch fühle ich mich gerade nackig...

Danke für eure Hilfe

lg Kacy