Wieder mal weißer Bildschirm

OTL logfile created on: 30.05.2013 09:29:42 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = f:\
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 1,77 Gb Available Physical Memory | 88,92% Memory free
2,59 Gb Paging File | 2,54 Gb Available in Paging File | 98,04% Paging File free
Paging file location(s): C:\pagefile.sys 768 768 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINNT | %ProgramFiles% = C:\Programme
Drive C: | 19,53 Gb Total Space | 14,01 Gb Free Space | 71,71% Space Free | Partition Type: NTFS
Drive D: | 44,99 Gb Total Space | 36,08 Gb Free Space | 80,20% Space Free | Partition Type: NTFS
Drive F: | 979,70 Mb Total Space | 856,47 Mb Free Space | 87,42% Space Free | Partition Type: FAT
 
Computer Name: SPO_19301N | User Name: Redaktion | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.05.30 08:08:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- f:\OTL.exe
PRC - [2004.08.04 15:00:00 | 000,401,408 | ---- | M] (Microsoft Corporation) -- C:\WINNT\system32\cmd.exe
 
 
========== Modules (No Company Name) ==========
 
 
========== Services (SafeList) ==========
 
SRV - [2012.06.26 06:22:52 | 000,337,256 | ---- | M] (Aventail Corporation) [Auto | Stopped] -- C:\WINNT\system32\ngvpnmgr.exe -- (NgVpnMgr)
SRV - [2011.02.18 17:37:16 | 000,037,664 | ---- | M] (Apple Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010.03.25 01:32:16 | 000,009,216 | ---- | M] (Vodafone) [Auto | Stopped] -- C:\Programme\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe -- (VMCService)
SRV - [2009.09.22 16:00:00 | 000,103,744 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- c:\Programme\Network Associates\Common Framework\FrameworkService.exe -- (McAfeeFramework)
SRV - [2009.06.10 20:50:00 | 000,049,152 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- c:\Programme\McAfee\VirusScan Enterprise\VsTskMgr.exe -- (McTaskManager)
SRV - [2009.06.08 20:50:00 | 000,144,704 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- c:\Programme\McAfee\VirusScan Enterprise\Mcshield.exe -- (McShield)
SRV - [2008.02.05 11:00:00 | 000,143,360 | ---- | M] (matrix42 AG) [Auto | Stopped] -- C:\WINNT\system32\EMPIRUM\SETUPSVC.EXE -- (SetupService)
SRV - [2006.01.04 13:50:26 | 000,172,032 | ---- | M] (Acronis) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2005.10.13 05:37:00 | 000,163,941 | ---- | M] (Fujitsu Siemens Computers) [Auto | Stopped] -- C:\Programme\Deskview\DNAgent\DNAgent.Exe -- (DeskView Agent)
SRV - [2005.10.13 05:37:00 | 000,114,688 | ---- | M] (Fujitsu Siemens Computers) [On_Demand | Stopped] -- C:\Programme\Deskview\DVCC\MTAlerting.exe -- (MTAlerting)
SRV - [2005.10.13 05:37:00 | 000,053,340 | ---- | M] (Fujitsu Siemens Computers) [Auto | Stopped] -- C:\Programme\Deskview\DVAnPMan\DVAnPMan.exe -- (DVAnPMan)
SRV - [2005.04.06 16:03:28 | 000,110,592 | ---- | M] () [Auto | Stopped] -- C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Service)
SRV - [2001.02.23 10:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\PCASp50.sys -- (PCASp50)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012.06.23 06:01:26 | 000,081,480 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\ngvpn.sys -- (NgVpn)
DRV - [2012.06.23 06:01:26 | 000,027,208 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\nglog.sys -- (NgLog)
DRV - [2012.06.23 06:01:26 | 000,025,160 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\ngwfp.sys -- (NgWfp)
DRV - [2012.06.23 06:01:26 | 000,023,112 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\ngfilter.sys -- (NgFilter)
DRV - [2010.06.02 12:19:57 | 000,249,152 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINNT\system32\drivers\timntr.sys -- (timounter)
DRV - [2010.06.02 12:19:57 | 000,030,688 | ---- | M] (Acronis) [File_System | Auto | Stopped] -- C:\WINNT\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2010.06.02 12:19:55 | 000,096,320 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINNT\system32\drivers\snapman.sys -- (snapman)
DRV - [2010.06.02 12:16:50 | 000,028,684 | ---- | M] (Fujitsu Siemens Computers ) [Kernel | On_Demand | Stopped] -- d:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\OemF0211.sys -- (OEMF0211)
DRV - [2010.06.02 12:16:48 | 000,027,768 | ---- | M] (Fujitsu Siemens Computers ) [Kernel | On_Demand | Stopped] -- d:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\SniF0011.sys -- (SNIF0011)
DRV - [2010.06.02 12:16:47 | 000,029,300 | ---- | M] (Fujitsu Siemens Computers ) [Kernel | On_Demand | Stopped] -- d:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\SniF0010.sys -- (SNIF0010)
DRV - [2010.03.11 09:36:26 | 000,024,192 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Stopped] -- C:\WINNT\system32\drivers\tcpipBM.sys -- (tcpipBM)
DRV - [2010.03.11 09:36:24 | 000,013,184 | ---- | M] (Bytemobile, Inc.) [Kernel | Boot | Running] -- C:\WINNT\system32\drivers\BMLoad.sys -- (BMLoad)
DRV - [2010.03.01 18:35:22 | 000,080,000 | ---- | M] (Vodafone) [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\vodafone_K3805-z_dc_enum.sys -- (vodafone_K3805-z_dc_enum)
DRV - [2009.08.18 12:06:56 | 000,028,416 | R--- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\g3grumdm.sys -- (G3GRUMDM)
DRV - [2009.08.18 12:06:56 | 000,024,576 | R--- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\g3gruser.sys -- (G3GRUSER)
DRV - [2009.08.18 12:06:56 | 000,019,328 | R--- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\g3grsc.sys -- (G3GRSC)
DRV - [2009.07.27 08:45:34 | 000,554,368 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\AVerAF15DMBTH.sys -- (AVerAF15DMBTH)
DRV - [2009.06.10 20:50:00 | 000,178,024 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\mfehidk.sys -- (mfehidk)
DRV - [2009.06.10 20:50:00 | 000,052,200 | ---- | M] (McAfee, Inc.) [Kernel | System | Stopped] -- C:\WINNT\system32\drivers\mfetdik.sys -- (mfetdik)
DRV - [2009.06.08 20:50:00 | 000,073,512 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\mfeavfk.sys -- (mfeavfk)
DRV - [2009.06.08 20:50:00 | 000,065,000 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\mfeapfk.sys -- (mfeapfk)
DRV - [2009.06.08 20:50:00 | 000,034,408 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\mfebopk.sys -- (mfebopk)
DRV - [2008.11.20 09:50:52 | 000,034,880 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\WINNT\system32\drivers\o2media.sys -- (O2MDRDR)
DRV - [2008.11.20 09:50:52 | 000,029,056 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\WINNT\system32\drivers\o2sd.sys -- (O2SDRDR)
DRV - [2008.11.18 13:23:44 | 000,075,648 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\AGR1310b.sys -- (AGR1310b)
DRV - [2007.04.26 23:52:48 | 001,428,096 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\w39n51.sys -- (w39n51)
DRV - [2006.06.29 07:25:24 | 004,304,384 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService)
DRV - [2006.02.28 16:57:22 | 000,084,836 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2006.01.19 13:31:34 | 000,010,068 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\BtNetDrv.sys -- (BT)
DRV - [2005.11.10 18:51:38 | 000,854,404 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\smserial.sys -- (smserial)
DRV - [2005.10.23 17:25:12 | 000,023,000 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2005.10.13 05:37:00 | 000,015,104 | ---- | M] (Fujitsu Siemens Computers) [Kernel | System | Stopped] -- C:\WINNT\system32\drivers\Snidmi.sys -- (snidmi)
DRV - [2005.08.31 10:34:52 | 000,020,480 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2005.08.31 10:34:10 | 000,020,480 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2005.07.29 16:21:32 | 000,011,988 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINNT\system32\drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2005.04.30 14:50:10 | 000,028,271 | ---- | M] (IVT Corporation) [Kernel | Boot | Running] -- C:\WINNT\system32\drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2004.10.19 13:37:38 | 000,061,312 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\VComm.sys -- (VComm)
DRV - [2004.08.03 23:10:14 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\MPE.sys -- (MPE)
DRV - [2004.02.17 14:05:12 | 000,023,468 | ---- | M] (O2Micro) [Kernel | On_Demand | Stopped] -- C:\WINNT\system32\drivers\ozscr.sys -- (O2SCBUS)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = Aktuelle Nachrichten - Berlin Nachrichten
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Aktuelle Nachrichten - Berlin Nachrichten
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 10.*;<local>;*.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=10.100.0.31:8080;ftp=10.100.0.31:8080
 
========== FireFox ==========
 
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0
FF - prefs.js..extensions.enabledItems: ff-bmboc@bytemobile.com:4.2.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..network.proxy.ftp: "10.100.0.31"
FF - prefs.js..network.proxy.ftp_port: 8080
FF - prefs.js..network.proxy.http: "10.100.0.31"
FF - prefs.js..network.proxy.http_port: 8080
FF - prefs.js..network.proxy.no_proxies_on: "10.*,localhost,127.0.0.1"
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.type: 4
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINNT\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINNT\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=0.9.9: C:\Programme\Videolan\VLC\npvlc.dll (the VideoLAN Team)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\ff-bmboc@bytemobile.com: C:\Programme\Vodafone\Vodafone Mobile Connect\Optimization Client\addon\ [2010.06.02 15:11:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.06.09 11:05:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.03.20 22:54:16 | 000,000,000 | ---D | M]
 
[2010.06.03 14:17:39 | 000,000,000 | ---D | M] (No name found) -- d:\Dokumente und Einstellungen\Redaktion\Anwendungsdaten\Mozilla\Extensions
[2010.06.03 14:17:39 | 000,000,000 | ---D | M] (No name found) -- d:\Dokumente und Einstellungen\Redaktion\Anwendungsdaten\Mozilla\Firefox\Profiles\libhjd4q.default\extensions
[2011.11.15 23:16:45 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2010.06.03 14:37:44 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.06.02 12:49:13 | 000,000,000 | ---D | M] (Deutsches Wörterbuch) -- C:\Programme\Mozilla Firefox\extensions\de-DE@dictionaries.addons.mozilla.org
[2010.06.02 15:11:38 | 000,000,000 | ---D | M] (Bytemobile Optimization Client) -- C:\PROGRAMME\VODAFONE\VODAFONE MOBILE CONNECT\OPTIMIZATION CLIENT\ADDON
[2009.08.24 21:25:19 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2009.08.24 21:25:19 | 000,002,344 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2009.08.24 21:25:19 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2009.08.24 21:25:19 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2009.08.24 21:25:19 | 000,000,801 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2010.04.22 16:25:08 | 000,001,285 | ---- | M]) - C:\WINNT\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 10.200.0.110     tspc1-ge0
O1 - Hosts: 10.200.0.112     tspc2-ge0
O1 - Hosts: 10.200.0.113     sybasefloat
O1 - Hosts: 10.200.0.111     ppifloat tsp-ppi-prodfs
O1 - Hosts: 10.200.0.15     tshermes
O1 - Hosts: 10.200.0.16     doccenter
O1 - Hosts: 10.100.0.99     tsredtest
O1 - Hosts: 10.100.0.220    tsbackup nsrhost
O1 - Hosts: 10.200.0.220    tsbackup.ge0 nsrhost
O1 - Hosts: 10.200.0.16     doccenter
O1 - Hosts: 10.200.0.211	  TS_HERMES ts_hermes
O1 - Hosts: 10.200.0.212    TS_DOCCENTER ts_doccenter
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\Programme\McAfee\VirusScan Enterprise\ScriptCl.dll (McAfee, Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [_UserEnv] C:\WINNT\system32\EMPIRUM\ENV.EXE (matrix42 AG)
O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe (Acronis)
O4 - HKLM..\Run: [Alcmtr] C:\WINNT\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AzMixerSel] C:\Programme\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [McAfeeUpdaterUI] c:\Programme\Network Associates\Common Framework\udaterui.exe (McAfee, Inc.)
O4 - HKLM..\Run: [MobileConnect] C:\Programme\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone)
O4 - HKLM..\Run: [RunSWDepot1] SWDEPOT /WU /S /T /Q File not found
O4 - HKLM..\Run: [RunSWDepot2] SWDEPOT \\%EmpirumServer%\Configurator$\User\SwDepot.dds /I\\%EmpirumServer%\Values$\MachineValues\%DomainName%\%Computername%.ddc  /S /K-1 /F /Z2 File not found
O4 - HKLM..\Run: [ShStatEXE] c:\Programme\McAfee\VirusScan Enterprise\SHSTAT.EXE (McAfee, Inc.)
O4 - HKLM..\Run: [SMSERIAL] C:\WINNT\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe (Acronis)
O4 - HKCU..\Run: [Personal ID] C:\coolspot AG\Personal ID\pid.exe (coolspot AG, Düsseldorf)
O4 - Startup: d:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Aventail VPN Connection.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteChangeNotify = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 181
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM\..Trusted Domains: tsp_empirum ([]file in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = tsp.de
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FD88CA40-7582-4A7A-988D-6101CE6D8571}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINNT\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINNT\system32\userinit.exe) - C:\WINNT\system32\userinit.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINNT\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (d:\Dokumente und Einstellungen\Redaktion\Anwendungsdaten\skype.dat) - d:\Dokumente und Einstellungen\Redaktion\Anwendungsdaten\skype.dat ()
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: d:\Dokumente und Einstellungen\Redaktion\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: d:\Dokumente und Einstellungen\Redaktion\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O30 - LSA: Authentication Packages - (relog_ap) - C:\WINNT\System32\relog_ap.dll (Acronis)
O31 - SafeBoot: UseAlternatShell - 1
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[6 d:\Dokumente und Einstellungen\Redaktion\Eigene Dateien\*.tmp files -> d:\Dokumente und Einstellungen\Redaktion\Eigene Dateien\*.tmp -> ]
[5 d:\Dokumente und Einstellungen\Redaktion\Desktop\*.tmp files -> d:\Dokumente und Einstellungen\Redaktion\Desktop\*.tmp -> ]
[1 d:\Dokumente und Einstellungen\Redaktion\*.tmp files -> d:\Dokumente und Einstellungen\Redaktion\*.tmp -> ]
[1 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[1 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.05.30 09:23:35 | 000,002,048 | --S- | M] () -- C:\WINNT\bootstat.dat
[2013.05.30 09:03:21 | 000,000,004 | ---- | M] () -- d:\Dokumente und Einstellungen\Redaktion\Anwendungsdaten\skype.ini
[2013.05.30 09:02:49 | 000,001,092 | ---- | M] () -- C:\WINNT\tasks\GoogleUpdateTaskMachineCore.job
[2013.05.30 08:58:59 | 000,673,456 | ---- | M] () -- C:\WINNT\System32\FNTCACHE.DAT
[2013.05.30 08:15:11 | 000,002,206 | ---- | M] () -- C:\WINNT\System32\wpa.dbl
[2013.05.16 20:49:09 | 000,001,096 | ---- | M] () -- C:\WINNT\tasks\GoogleUpdateTaskMachineUA.job
[6 d:\Dokumente und Einstellungen\Redaktion\Eigene Dateien\*.tmp files -> d:\Dokumente und Einstellungen\Redaktion\Eigene Dateien\*.tmp -> ]
[5 d:\Dokumente und Einstellungen\Redaktion\Desktop\*.tmp files -> d:\Dokumente und Einstellungen\Redaktion\Desktop\*.tmp -> ]
[1 d:\Dokumente und Einstellungen\Redaktion\*.tmp files -> d:\Dokumente und Einstellungen\Redaktion\*.tmp -> ]
[1 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[1 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.05.15 21:58:54 | 000,000,004 | ---- | C] () -- d:\Dokumente und Einstellungen\Redaktion\Anwendungsdaten\skype.ini
[2012.06.26 06:24:46 | 000,152,936 | ---- | C] () -- C:\WINNT\ngmsi.dll
[2012.06.26 06:24:00 | 000,017,768 | ---- | C] () -- C:\WINNT\ngutil.exe
[2011.06.19 20:05:20 | 000,000,064 | ---- | C] () -- C:\WINNT\AVerText.ini
[2011.06.19 19:54:34 | 000,363,520 | ---- | C] () -- C:\WINNT\System32\PsisDecd.dll
[2011.06.19 19:54:18 | 000,000,350 | ---- | C] () -- C:\WINNT\System32\AP6RMHV.BIN
[2011.06.19 19:54:18 | 000,000,252 | ---- | C] () -- C:\WINNT\System32\AP6RMJX.BIN
[2011.06.19 19:54:18 | 000,000,252 | ---- | C] () -- C:\WINNT\System32\AP6RMJH.BIN
[2011.06.19 19:54:18 | 000,000,238 | ---- | C] () -- C:\WINNT\System32\AP6RMFP.BIN
[2011.06.19 19:54:18 | 000,000,189 | ---- | C] () -- C:\WINNT\System32\AP6RMKS.BIN
[2011.06.19 19:54:18 | 000,000,126 | ---- | C] () -- C:\WINNT\System32\AP6RMHR.BIN
[2011.01.08 09:10:52 | 000,003,584 | ---- | C] () -- d:\Dokumente und Einstellungen\Redaktion\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.06.02 12:10:28 | 000,019,052 | RHS- | C] () -- d:\Dokumente und Einstellungen\All Users\ntuser.pol
[2010.03.15 19:15:34 | 000,156,430 | R--- | C] () -- d:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DeviceManager.xml.rc4
[1980.01.01 01:00:00 | 000,098,304 | ---- | C] () -- d:\Dokumente und Einstellungen\Redaktion\Anwendungsdaten\skype.dat
 
========== ZeroAccess Check ==========
 
[2010.06.02 12:30:37 | 000,000,227 | RHS- | M] () -- C:\WINNT\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2006.09.23 13:12:38 | 001,497,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINNT\system32\wbem\fastprox.dll -- [2004.08.04 15:00:00 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINNT\system32\wbem\wbemess.dll -- [2004.08.04 15:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >