Hallo zusammen. Ich bin neu hier und hoffe, daß ich alles richtig mache.
Mein Rechner arbeitet mit Windows XP und hat sich nun den GVU-Trojaner eingefangen. Starten im abgesicherten Modus ist nicht möglich, daher schreibe ich vom Laptop meines Sohnes. Was ich bis jetzt gemacht habe:
1) Den Rechner vom Netzwerk getrennt
2) Die OTLPE-CD gebrannt und damit den Rechner gebootet.
3) Den Scan durchgeführt

Eine Datei Extras.txt wurde nicht erstellt. Nur die Datei OTL.txt. Diese sieht wie folgt aus:


OTL logfile created on: 5/29/2013 1:55:51 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

511.00 Mb Total Physical Memory | 255.00 Mb Available Physical Memory | 50.00% Memory free
459.00 Mb Paging File | 307.00 Mb Available in Paging File | 67.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 149.04 Gb Total Space | 124.23 Gb Free Space | 83.35% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled] -- -- (HidServ)
SRV - [2013/01/29 06:03:50 | 001,069,408 | ---- | M] (LULU Software) [Auto] -- C:\Programme\Soda PDF 5\HelperService.exe -- (Soda PDF 5 Helper Service)
SRV - [2013/01/29 06:03:50 | 000,794,464 | ---- | M] (LULU Software) [Auto] -- C:\Programme\Soda PDF 5\ConversionService.exe -- (Soda PDF 5 Service)
SRV - [2013/01/27 05:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012/11/29 11:06:10 | 001,723,744 | ---- | M] (TuneUp Software) [Auto] -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012/11/29 11:06:08 | 000,029,536 | ---- | M] (TuneUp Software) [Auto] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2012/11/07 10:49:33 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto] -- C:\Programme\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2011/07/19 23:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2009/01/08 10:10:00 | 000,187,456 | ---- | M] (DATA BECKER GmbH & Co KG) [Auto] -- C:\Programme\Gemeinsame Dateien\DATA BECKER Shared\DBService.exe -- (DBService)
SRV - [2008/10/24 11:35:44 | 000,128,296 | ---- | M] () [Disabled] -- C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe -- (AAV UpdateService)
SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2003/06/19 17:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE -- (MDM)
SRV - [2001/08/10 07:14:14 | 000,192,512 | ---- | M] (Roxio Inc.) [On_Demand] -- C:\WINDOWS\system32\ImapiRox.exe -- (ImapiService)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (USBAAPL)
DRV - File not found [Kernel | On_Demand] -- -- (SANDRA)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2013/05/28 06:11:44 | 000,029,904 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Microsoft Antimalware\Definition Updates\{628AC4A0-111E-41AC-B492-1C1056716139}\MpKsl67562063.sys -- (MpKsl67562063)
DRV - [2012/09/19 05:50:50 | 000,010,088 | ---- | M] (TuneUp Software) [Kernel | On_Demand] -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2012/03/20 09:47:53 | 000,039,016 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2011/05/06 14:04:19 | 000,055,216 | ---- | M] (Roxio) [Kernel | System] -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp)
DRV - [2011/05/06 14:04:19 | 000,022,713 | ---- | M] (Roxio) [Kernel | System] -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k)
DRV - [2009/03/25 08:29:52 | 000,130,432 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2008/04/13 14:45:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2004/08/04 03:38:57 | 000,701,952 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004/04/26 01:09:52 | 000,054,657 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2004/04/26 01:09:42 | 000,071,405 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2003/03/28 11:25:51 | 000,003,840 | ---- | M] (Elaborate Bytes) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ElbyDelay.sys -- (ElbyDelay)
DRV - [2001/09/10 04:43:46 | 000,205,824 | ---- | M] (Roxio) [File_System | System] -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys -- (UdfReadr_xp)
DRV - [2001/09/04 10:37:08 | 000,233,344 | ---- | M] (Roxio) [File_System | System] -- C:\WINDOWS\System32\drivers\cdudf_xp.sys -- (cdudf_xp)
DRV - [2001/09/04 09:39:50 | 000,017,990 | ---- | M] (Roxio) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\Dvd_2k.sys -- (dvd_2K)
DRV - [2001/09/04 09:39:40 | 000,019,702 | ---- | M] (Roxio) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\Mmc_2k.sys -- (mmc_2K)
DRV - [2001/09/04 09:39:28 | 000,078,454 | ---- | M] (Roxio) [Kernel | System] -- C:\WINDOWS\System32\drivers\pwd_2K.sys -- (pwd_2K)
DRV - [2001/08/29 10:19:44 | 000,524,288 | R--- | M] (Voyetra Turtle Beach) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tbcwdm.sys -- (tbcwdm)
DRV - [2001/08/29 10:19:38 | 000,142,336 | R--- | M] (Voyetra Turtle Beach) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tbcspud.sys -- (tbcspud)
DRV - [2001/08/20 09:09:22 | 000,119,276 | ---- | M] (Dazzle Multimedia, Inc.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Mojave.sys -- (Mojave)
DRV - [2001/08/20 05:59:38 | 000,025,472 | ---- | M] (Roxio Inc.) [Kernel | System] -- C:\WINDOWS\system32\drivers\imapiRox.sys -- (Imapi)
DRV - [2001/05/14 12:15:40 | 000,010,368 | ---- | M] (Dell Computer Corporation) [Kernel | System] -- C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS -- (OMCI)
DRV - [1999/04/30 10:39:58 | 000,196,096 | ---- | M] (Compuware Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\AgentCD.sys -- (agentcd)
DRV - [1998/11/03 08:42:26 | 000,007,328 | R--- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\ds1410d.sys -- (DS1410D)
DRV - [1997/11/25 11:32:18 | 000,041,984 | ---- | M] (Husqvarna Sewing Machines AB) [Kernel | Auto] -- C:\WINDOWS\System32\drivers\Semlpt.sys -- (SemLPT)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\Tiger_1_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2010/09/28 07:33:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFSodaPDF5Converter@sodapdf.com: C:\Programme\Soda PDF 5\FFSoda5Ext [2013/02/08 12:28:10 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2010/09/28 07:33:35 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2003/04/02 08:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Soda PDF 5 IE Helper) - {C737F472-1193-4281-BF53-A00B67AB3E19} - C:\Programme\Soda PDF 5\PDFIEHelper.dll (LULU Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - !{99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Soda PDF 5 IE Toolbar) - {F335ABA2-FDB4-4644-92B2-5CC4B0FC91D6} - C:\Programme\Soda PDF 5\PDFIEPlugin.dll (LULU Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [AdaptecDirectCD] C:\Programme\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe (Roxio)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [MSC] File not found
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [OpwareSE4] C:\Programme\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TraySantaCruz] C:\WINDOWS\system32\tbctray.exe (Voyetra Turtle Beach, Inc.)
O4 - HKLM..\Run: [UserFaultCheck] File not found
O4 - HKU\.DEFAULT..\Run: [DWQueuedReporting] C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation)
O4 - HKU\Tiger_1_ON_C..\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\139d2e78.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\KEM.exe (Logitech Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Printkey2000.lnk = C:\Programme\PrintKey2000\Printkey2000.exe (Fred's Software)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Tiger_1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - File not found
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1285506844156 (MUWebControl Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\dokume~1\alluse~1\anwend~1\browse~1\25911~1.18\{c16c1~1\mngr.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKU\Tiger_1_ON_C Winlogon: Shell - (cmd.exe) - C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O27 - HKLM IFEO\omnipage.exe: Debugger - "C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe" (TuneUp Software)
O27 - HKLM IFEO\scannerwizard.exe: Debugger - "C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe" (TuneUp Software)
O27 - HKLM IFEO\sse.exe: Debugger - "C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe" (TuneUp Software)
O27 - HKLM IFEO\startcenter.exe: Debugger - "C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe" (TuneUp Software)
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/09/24 15:17:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{a1d9d048-dac8-11df-9ea7-0050fcf6798b}\Shell - "" = AutoRun
O33 - MountPoints2\{a1d9d048-dac8-11df-9ea7-0050fcf6798b}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{a1d9d048-dac8-11df-9ea7-0050fcf6798b}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2013/05/27 09:03:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2013/05/27 09:03:13 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft
[2013/05/27 09:03:13 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten
[2013/05/27 09:03:12 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies
[2013/05/27 09:03:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft Help
[2013/05/27 09:03:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten
[2013/05/27 09:03:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop
[2013/05/27 09:03:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen
[2013/05/27 09:03:09 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\SendTo
[2013/05/27 09:03:09 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Zubehör
[2013/05/27 09:03:09 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü
[2013/05/27 09:03:09 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
[2013/05/27 09:03:09 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen
[2013/05/27 09:03:09 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Recent
[2013/05/27 09:03:09 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung
[2013/05/26 04:12:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Fotos 26.05.2013
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/05/28 06:14:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/05/27 09:18:53 | 000,013,758 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/05/27 07:00:10 | 000,163,064 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\2433f433
[2013/05/27 07:00:10 | 000,163,037 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Lokale Einstellungen\Anwendungsdaten\2433f433
[2013/05/27 07:00:10 | 000,163,029 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\2433f433
[2013/05/27 07:00:10 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013/05/26 12:48:20 | 000,000,386 | -H-- | M] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2013/05/25 03:28:00 | 000,575,589 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1587.JPG
[2013/05/25 03:28:00 | 000,488,341 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1585.JPG
[2013/05/25 03:28:00 | 000,465,039 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1586.JPG
[2013/05/25 03:28:00 | 000,056,037 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Karl Heinz.jpg
[2013/05/22 14:25:45 | 000,347,419 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Rechnung BFV 2013.pdf
[2013/05/22 14:23:39 | 005,202,474 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Rechnung BFV 2013.jpg
[2013/05/14 21:48:49 | 000,307,600 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/14 21:27:05 | 000,545,588 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2013/05/14 21:27:05 | 000,496,962 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013/05/14 21:27:05 | 000,112,118 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2013/05/14 21:27:05 | 000,085,446 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013/05/14 21:11:26 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/05/27 09:03:15 | 000,001,599 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Remoteunterstützung.lnk
[2013/05/27 09:03:15 | 000,000,772 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Windows Media Player.lnk
[2013/05/27 07:00:10 | 000,163,064 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\2433f433
[2013/05/27 07:00:10 | 000,163,037 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Lokale Einstellungen\Anwendungsdaten\2433f433
[2013/05/27 07:00:10 | 000,163,029 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\2433f433
[2013/05/25 03:28:00 | 000,575,589 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1587.JPG
[2013/05/25 03:28:00 | 000,488,341 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1585.JPG
[2013/05/25 03:28:00 | 000,465,039 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1586.JPG
[2013/05/25 03:28:00 | 000,056,037 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Karl Heinz.jpg
[2013/05/22 14:25:23 | 000,347,419 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Rechnung BFV 2013.pdf
[2013/05/22 14:23:36 | 005,202,474 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Rechnung BFV 2013.jpg
[2013/05/14 21:02:24 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013/04/16 02:49:14 | 000,307,600 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/04/09 05:16:00 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013/01/30 16:07:33 | 000,000,073 | ---- | C] () -- C:\WINDOWS\KTEL.INI
[2012/10/07 06:08:01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\eDrawingOfficeAutomator.INI
[2012/07/14 08:13:39 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Menu.INI
[2012/07/10 01:22:42 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2012/07/02 13:30:26 | 000,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2012/06/30 19:11:34 | 000,002,194 | ---- | C] () -- C:\WINDOWS\musi.ini
[2012/05/23 22:03:46 | 000,292,222 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2012/02/15 10:15:26 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/09/08 04:52:21 | 000,000,076 | ---- | C] () -- C:\WINDOWS\System32\dtirc.dll
[2011/08/29 08:35:04 | 000,081,920 | R--- | C] () -- C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
[2011/07/10 12:45:02 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2011/05/06 14:04:20 | 000,040,960 | ---- | C] () -- C:\WINDOWS\uneng.exe
[2011/03/11 11:41:19 | 000,001,573 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Lohnrechner2009.pref
[2010/12/25 05:48:29 | 000,039,095 | ---- | C] () -- C:\WINDOWS\iccsigs.dat
[2010/12/25 05:48:28 | 000,112,688 | ---- | C] () -- C:\WINDOWS\System32\shw32.dll
[2010/12/02 10:30:04 | 000,003,301 | ---- | C] () -- C:\WINDOWS\READWRITEPRO_NT.INI
[2010/12/02 10:29:55 | 000,003,439 | ---- | C] () -- C:\WINDOWS\DISKMANAGER.INI
[2010/12/02 10:29:54 | 000,005,423 | ---- | C] () -- C:\WINDOWS\Custom.ini
[2010/12/02 10:29:48 | 000,011,776 | R--- | C] () -- C:\WINDOWS\System32\downtvdd.dll
[2010/12/02 10:29:47 | 000,007,328 | R--- | C] () -- C:\WINDOWS\System32\drivers\ds1410d.sys
[2010/11/05 11:51:19 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/19 08:35:43 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/10/06 17:39:03 | 000,078,195 | ---- | C] () -- C:\WINDOWS\hpqins05.dat
[2010/09/30 09:18:11 | 000,000,051 | ---- | C] () -- C:\WINDOWS\WWWBATCH.INI
[2010/09/28 10:30:01 | 000,000,404 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2010/09/28 07:24:04 | 000,199,081 | ---- | C] () -- C:\WINDOWS\hpwins21.dat
[2010/09/28 07:24:04 | 000,000,428 | ---- | C] () -- C:\WINDOWS\hpwmdl21.dat
[2010/09/27 11:26:29 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/09/27 10:42:05 | 000,179,007 | ---- | C] () -- C:\WINDOWS\System32\DaConfig.dll
[2010/09/27 10:41:23 | 000,000,364 | ---- | C] () -- C:\WINDOWS\System32\drivers\BootI2c.bin
[2010/09/27 06:21:28 | 000,000,118 | ---- | C] () -- C:\WINDOWS\WinInit.INI
[2010/09/26 09:10:31 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2010/09/26 08:10:46 | 000,073,728 | R--- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2010/09/24 17:09:07 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/09/24 15:20:38 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/09/24 15:14:10 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/02/17 23:29:18 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2009/02/17 23:29:18 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2009/02/17 23:29:18 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2009/02/17 23:29:14 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2009/02/17 23:29:14 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2009/02/17 23:29:10 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2009/02/17 23:29:08 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2009/02/17 23:28:58 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2009/02/17 23:28:56 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008/05/26 16:23:36 | 000,016,834 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008/05/26 16:23:34 | 000,024,188 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008/05/26 16:23:32 | 000,016,568 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008/05/26 15:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 15:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2003/04/02 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2003/04/02 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2003/04/02 08:00:00 | 000,545,588 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2003/04/02 08:00:00 | 000,496,962 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2003/04/02 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2003/04/02 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2003/04/02 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2003/04/02 08:00:00 | 000,112,118 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2003/04/02 08:00:00 | 000,085,446 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2003/04/02 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2003/04/02 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2003/04/02 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2003/04/02 08:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003/04/02 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003/04/02 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2002/04/18 06:54:26 | 000,000,087 | ---- | C] () -- C:\WINDOWS\VIPCONVERSION.INI
[2002/04/04 05:37:06 | 000,005,094 | ---- | C] () -- C:\WINDOWS\VipStitchEditor.ini
[2002/04/04 05:35:14 | 000,004,582 | ---- | C] () -- C:\WINDOWS\VIPDESIGNSPLITTER.INI
[2002/02/20 09:49:46 | 000,014,658 | ---- | C] () -- C:\WINDOWS\VIPDIGITIZING.INI
[2002/01/29 12:13:50 | 000,005,088 | ---- | C] () -- C:\WINDOWS\VipReSizePlus.ini
[2002/01/29 12:10:04 | 000,007,592 | ---- | C] () -- C:\WINDOWS\VipColorPict.ini
[2002/01/29 11:53:42 | 000,004,545 | ---- | C] () -- C:\WINDOWS\VIPDISKMANAGER.INI
[2002/01/29 11:52:14 | 000,006,766 | ---- | C] () -- C:\WINDOWS\CUSTOMIZ.INI
[2001/08/10 07:14:16 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ImapiRoxPS.dll

========== LOP Check ==========

[2011/09/08 04:54:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\J River
[2012/12/12 07:36:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\TuneUp Software
[2011/10/02 14:43:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Alcatech
[2012/06/11 15:03:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Amazon
[2012/12/23 07:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\APP_NAME_NON_STRING
[2010/09/28 10:53:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Canon
[2013/03/06 14:15:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\capella-software
[2011/04/10 10:09:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\CD-LabelPrint
[2012/12/02 12:18:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\DesktopIconForAmazon
[2012/10/07 06:09:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\EDrawings
[2012/12/02 15:23:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Flo & Seb Engineering
[2012/07/02 13:41:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\FreeCDRipper
[2012/10/08 12:49:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\FreeFLVConverter
[2011/05/23 17:34:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\GetRightToGo
[2011/02/05 13:15:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\inFlow Inventory
[2011/09/10 08:28:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\J River
[2013/01/30 16:00:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\klickTel
[2013/04/28 10:08:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Marine Aquarium 3
[2011/11/02 11:35:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\mresreg
[2012/12/02 12:18:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\OCS
[2012/12/02 12:18:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Opera
[2012/05/13 14:25:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\PDF Software
[2010/09/28 10:29:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\ScanSoft
[2012/12/09 07:32:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\TuneUp Software
[2013/01/05 10:55:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\VariCAD-Viewer.de
[2010/09/28 21:28:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Windows Desktop Search
[2010/11/27 03:42:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Windows Search
[2012/10/10 14:14:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Youtube Downloader HD
[2012/10/07 13:21:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Youtube to MP3 Converter
[2013/02/01 12:02:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AAV
[2010/09/27 07:00:17 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2012/12/09 07:28:37 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2012/11/11 12:40:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DATA BECKER Downloads
[2013/04/19 03:08:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fltu
[2011/02/05 13:32:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\inFlow Inventory
[2011/06/20 17:13:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\iWin Games
[2012/11/17 19:54:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ORTMANN Media-Verlag
[2010/09/27 10:21:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Drivers HeadQuarters
[2012/07/14 07:49:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RapidSolution
[2010/09/28 10:29:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ScanSoft
[2012/04/06 14:25:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sPlan70
[2012/04/06 11:42:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sPlan70(Demo)
[2011/06/23 06:37:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2011/12/31 09:09:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\tmp
[2012/12/09 07:33:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2012/04/06 10:54:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ulead Systems
[2011/02/02 13:23:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WinZip
[2012/12/09 08:09:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/12/09 08:09:24 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013/03/26 15:00:07 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\ExpressRipReminder.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 110 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:517DBC32
@Alternate Data Stream - 105 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:E50C1642
< End of report >


Bitte teilen Sie mir mit, wenn ich was Falsches gepostet habe.
Können Sie mit diesen Informationen etwas anfangen?

Freundliche Grüße
Regent

hi,
auf deinem zweiten pc gehe auf start, programme zubehör editor, kopiere dort
rein:

:OTL
O4 - HKU\Tiger_1_ON_C..\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\139d2e78.exe (Adobe Systems Incorporated)
O20 - HKU\Tiger_1_ON_C Winlogon: Shell - (cmd.exe) - C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
[2013/05/27 07:00:10 | 000,163,064 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\2433f433
[2013/05/27 07:00:10 | 000,163,037 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Lokale Einstellungen\Anwendungsdaten\2433f433
:Files
:Commands
[EMPTYFLASH] 
[emptytemp]
         

dieses speicherst du auf nem usb stick als fix.txt
nutze nun wieder OTLPENet.exe (starte also von der erstellten cd) und hake alles an, wie es bereits im post zu OTLPENet.exe beschrieben ist.
• Klicke nun bitte auf den Fix Button.
es sollte nun eine meldung ähnlich dieser: "load fix from file" erscheinen, lade also die fix.txt von deinem stick.
wenn dies nicht funktioniert, bitte den fix manuell eintragen.
dann klicke erneut den fix buton. pc startet evtl. neu. wenn ja, nimm die cd aus dem laufwerk, windows sollte nun normal starten und die otl.txt öffnen,
log posten bitte.
falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

Hallo marmusg,
vielen Dank für deine schnelle Antwort.
Folgendes Problem:
Ich finde den post zu OTLPENet.exe nicht und weiß daher nicht, o ich Haken setzen soll.
Gruß Regent

einfach starten, wie beim ersten Mal, nur nicht auf Scan klicken

Hallo marmusg,
habe die fix von Hand reinkopiert. Runfix gedrückt. Das Programm hat es abgearbeitet und eine log erstellt. Ich bin dann runtergefahren und habe normal gestartet. Jedoch ist der Fehler leider nicht behoben. Schade.

Habe ich etwas falsch gemacht?
Gruß Regent

hi,
• Mache einen doppel Klick auf das OTLPE Icon.
• Wenn du gefragt wirst "Do you wish to load the remote registry", dann wähle Yes.
• Wenn du gefragt wirst "Do you wish to load remote user profile(s) for scanning", dann wähle Yes.
• setze den haken bei "Automatically Load All Remaining Users" wenn er nicht gesetzt ist.

• OTL sollte nun starten.
Kopiere nun den Inhalt in die
Textbox.

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
         

• Drücke Run Scan um den Scan zu starten.
• Wenn er fertig ist werden die Dateien in C:\otl.txt gesichert
• Kopiere diesen Ordner auf deinen USB-Stick wenn du keine Internetverbindung auf diesem System hast.
poste beide logs

Hallo markusg,

ich bin nicht ganz so fit auf diesem Gebiet, drum bitte erzürne nicht, wenn ich nachfrage.
Die OTL.txt ist unten aufgeführt. Was ist das 2., was ich posten soll?
OTL Logfile:

OTL logfile created on: 5/30/2013 9:37:21 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
511.00 Mb Total Physical Memory | 297.00 Mb Available Physical Memory | 58.00% Memory free
459.00 Mb Paging File | 337.00 Mb Available in Paging File | 74.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 149.04 Gb Total Space | 124.19 Gb Free Space | 83.33% Space Free | Partition Type: NTFS
Drive E: | 3.74 Gb Total Space | 2.70 Gb Free Space | 72.18% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Disabled] --  -- (HidServ)
SRV - [2013/01/29 06:03:50 | 001,069,408 | ---- | M] (LULU Software) [Auto] -- C:\Programme\Soda PDF 5\HelperService.exe -- (Soda PDF 5 Helper Service)
SRV - [2013/01/29 06:03:50 | 000,794,464 | ---- | M] (LULU Software) [Auto] -- C:\Programme\Soda PDF 5\ConversionService.exe -- (Soda PDF 5 Service)
SRV - [2013/01/27 05:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012/11/29 11:06:10 | 001,723,744 | ---- | M] (TuneUp Software) [Auto] -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012/11/29 11:06:08 | 000,029,536 | ---- | M] (TuneUp Software) [Auto] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2012/11/07 10:49:33 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto] -- C:\Programme\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2011/07/19 23:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2009/01/08 10:10:00 | 000,187,456 | ---- | M] (DATA BECKER GmbH & Co KG) [Auto] -- C:\Programme\Gemeinsame Dateien\DATA BECKER Shared\DBService.exe -- (DBService)
SRV - [2008/10/24 11:35:44 | 000,128,296 | ---- | M] () [Disabled] -- C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe -- (AAV UpdateService)
SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2003/06/19 17:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE -- (MDM)
SRV - [2001/08/10 07:14:14 | 000,192,512 | ---- | M] (Roxio Inc.) [On_Demand] -- C:\WINDOWS\system32\ImapiRox.exe -- (ImapiService)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (USBAAPL)
DRV - File not found [Kernel | On_Demand] --  -- (SANDRA)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - [2013/05/28 06:11:44 | 000,029,904 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Microsoft Antimalware\Definition Updates\{628AC4A0-111E-41AC-B492-1C1056716139}\MpKsl67562063.sys -- (MpKsl67562063)
DRV - [2012/09/19 05:50:50 | 000,010,088 | ---- | M] (TuneUp Software) [Kernel | On_Demand] -- C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2012/03/20 09:47:53 | 000,039,016 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2011/05/06 14:04:19 | 000,055,216 | ---- | M] (Roxio) [Kernel | System] -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp)
DRV - [2011/05/06 14:04:19 | 000,022,713 | ---- | M] (Roxio) [Kernel | System] -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k)
DRV - [2009/03/25 08:29:52 | 000,130,432 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2008/04/13 14:45:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2004/08/04 03:38:57 | 000,701,952 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004/04/26 01:09:52 | 000,054,657 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2004/04/26 01:09:42 | 000,071,405 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2003/03/28 11:25:51 | 000,003,840 | ---- | M] (Elaborate Bytes) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ElbyDelay.sys -- (ElbyDelay)
DRV - [2001/09/10 04:43:46 | 000,205,824 | ---- | M] (Roxio) [File_System | System] -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys -- (UdfReadr_xp)
DRV - [2001/09/04 10:37:08 | 000,233,344 | ---- | M] (Roxio) [File_System | System] -- C:\WINDOWS\System32\drivers\cdudf_xp.sys -- (cdudf_xp)
DRV - [2001/09/04 09:39:50 | 000,017,990 | ---- | M] (Roxio) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\Dvd_2k.sys -- (dvd_2K)
DRV - [2001/09/04 09:39:40 | 000,019,702 | ---- | M] (Roxio) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\Mmc_2k.sys -- (mmc_2K)
DRV - [2001/09/04 09:39:28 | 000,078,454 | ---- | M] (Roxio) [Kernel | System] -- C:\WINDOWS\System32\drivers\pwd_2K.sys -- (pwd_2K)
DRV - [2001/08/29 10:19:44 | 000,524,288 | R--- | M] (Voyetra Turtle Beach) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tbcwdm.sys -- (tbcwdm)
DRV - [2001/08/29 10:19:38 | 000,142,336 | R--- | M] (Voyetra Turtle Beach) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tbcspud.sys -- (tbcspud)
DRV - [2001/08/20 09:09:22 | 000,119,276 | ---- | M] (Dazzle Multimedia, Inc.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Mojave.sys -- (Mojave)
DRV - [2001/08/20 05:59:38 | 000,025,472 | ---- | M] (Roxio Inc.) [Kernel | System] -- C:\WINDOWS\system32\drivers\imapiRox.sys -- (Imapi)
DRV - [2001/05/14 12:15:40 | 000,010,368 | ---- | M] (Dell Computer Corporation) [Kernel | System] -- C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS -- (OMCI)
DRV - [1999/04/30 10:39:58 | 000,196,096 | ---- | M] (Compuware Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\AgentCD.sys -- (agentcd)
DRV - [1998/11/03 08:42:26 | 000,007,328 | R--- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\ds1410d.sys -- (DS1410D)
DRV - [1997/11/25 11:32:18 | 000,041,984 | ---- | M] (Husqvarna Sewing Machines AB) [Kernel | Auto] -- C:\WINDOWS\System32\drivers\Semlpt.sys -- (SemLPT)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = Nachrichten - Service - Shopping bei t-online.de
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Tiger_1_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost
 
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2010/09/28 07:33:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFSodaPDF5Converter@sodapdf.com: C:\Programme\Soda PDF 5\FFSoda5Ext [2013/02/08 12:28:10 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2003/04/02 08:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Soda PDF 5 IE Helper) - {C737F472-1193-4281-BF53-A00B67AB3E19} - C:\Programme\Soda PDF 5\PDFIEHelper.dll (LULU Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - !{99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Soda PDF 5 IE Toolbar) - {F335ABA2-FDB4-4644-92B2-5CC4B0FC91D6} - C:\Programme\Soda PDF 5\PDFIEPlugin.dll (LULU Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [AdaptecDirectCD] C:\Programme\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe (Roxio)
O4 - HKLM..\Run: [KernelFaultCheck]  File not found
O4 - HKLM..\Run: [MSC]  File not found
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [OpwareSE4] C:\Programme\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TraySantaCruz] C:\WINDOWS\system32\tbctray.exe (Voyetra Turtle Beach, Inc.)
O4 - HKLM..\Run: [UserFaultCheck]  File not found
O4 - HKU\.DEFAULT..\Run: [DWQueuedReporting] C:\Programme\Gemeinsame Dateien\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation)
O4 - HKU\Tiger_1_ON_C..\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx]  File not found
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\KEM.exe (Logitech Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Printkey2000.lnk = C:\Programme\PrintKey2000\Printkey2000.exe (Fred's Software)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Tiger_1_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 -  File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 -  File not found
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1285506844156 (MUWebControl Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\dokume~1\alluse~1\anwend~1\browse~1\25911~1.18\{c16c1~1\mngr.dll) -  File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKU\Tiger_1_ON_C Winlogon: Shell - (cmd.exe) -  File not found
O27 - HKLM IFEO\omnipage.exe: Debugger - "C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe" (TuneUp Software)
O27 - HKLM IFEO\scannerwizard.exe: Debugger - "C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe" (TuneUp Software)
O27 - HKLM IFEO\sse.exe: Debugger - "C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe" (TuneUp Software)
O27 - HKLM IFEO\startcenter.exe: Debugger - "C:\Programme\TuneUp Utilities 2013\TUAutoReactivator32.exe" (TuneUp Software)
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/09/24 15:17:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4d64f3ba-f112-4efe-a02e-96680859937c} - KB918899
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5b7bf89d-d196-4c32-a303-a57b8ab7f18d} - KB918439
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {dd772a76-bef3-44d7-8b39-502c8504c1f1} - KB925486
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {f15ee071-deb7-4cbb-951f-431c98338d8e} - KB911567
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
 
NetSvcs: 6to4 -  File not found
NetSvcs: HidServ -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: UxTuneUp - C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp -  File not found
 
MsConfig - Services: "AAV UpdateService"
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Windows Search.lnk - C:\Programme\Windows Desktop Search\WindowsSearch.exe - (Microsoft Corporation)
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 2
MsConfig - State: "services" - 2
MsConfig - State: "startup" - 2
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/05/30 19:39:06 | 000,000,000 | ---D | C] -- C:\_OTL
[2013/05/27 09:03:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2013/05/27 09:03:13 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft
[2013/05/27 09:03:13 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten
[2013/05/27 09:03:12 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies
[2013/05/27 09:03:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft Help
[2013/05/27 09:03:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten
[2013/05/27 09:03:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop
[2013/05/27 09:03:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen
[2013/05/27 09:03:09 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\SendTo
[2013/05/27 09:03:09 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Zubehör
[2013/05/27 09:03:09 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü
[2013/05/27 09:03:09 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
[2013/05/27 09:03:09 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen
[2013/05/27 09:03:09 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Recent
[2013/05/27 09:03:09 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung
[2013/05/27 06:59:35 | 000,044,544 | ---- | C] (Adobe Systems Incorporated) -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\139d2e78.dll
[2013/05/26 04:12:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Fotos 26.05.2013
 
========== Files - Modified Within 30 Days ==========
 
[2013/05/30 14:25:12 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/05/30 13:51:41 | 000,013,758 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/05/27 07:00:10 | 000,163,029 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\2433f433
[2013/05/27 07:00:10 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013/05/27 06:59:35 | 000,044,544 | ---- | M] (Adobe Systems Incorporated) -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\139d2e78.dll
[2013/05/26 12:48:20 | 000,000,386 | -H-- | M] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2013/05/25 03:28:00 | 000,575,589 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1587.JPG
[2013/05/25 03:28:00 | 000,488,341 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1585.JPG
[2013/05/25 03:28:00 | 000,465,039 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1586.JPG
[2013/05/25 03:28:00 | 000,056,037 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Karl Heinz.jpg
[2013/05/22 14:25:45 | 000,347,419 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Rechnung BFV 2013.pdf
[2013/05/22 14:23:39 | 005,202,474 | ---- | M] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Rechnung BFV 2013.jpg
[2013/05/14 21:48:49 | 000,307,600 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/14 21:27:05 | 000,545,588 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2013/05/14 21:27:05 | 000,496,962 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013/05/14 21:27:05 | 000,112,118 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2013/05/14 21:27:05 | 000,085,446 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013/05/14 21:11:26 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013/05/07 00:27:17 | 006,015,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/05/02 11:28:50 | 000,238,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
 
========== Files Created - No Company Name ==========
 
[2013/05/27 09:03:15 | 000,001,599 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Remoteunterstützung.lnk
[2013/05/27 09:03:15 | 000,000,772 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Windows Media Player.lnk
[2013/05/27 07:00:10 | 000,163,029 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\2433f433
[2013/05/25 03:28:00 | 000,575,589 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1587.JPG
[2013/05/25 03:28:00 | 000,488,341 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1585.JPG
[2013/05/25 03:28:00 | 000,465,039 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\CIMG1586.JPG
[2013/05/25 03:28:00 | 000,056,037 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Karl Heinz.jpg
[2013/05/22 14:25:23 | 000,347,419 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Rechnung BFV 2013.pdf
[2013/05/22 14:23:36 | 005,202,474 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\Rechnung BFV 2013.jpg
[2013/05/14 21:02:24 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013/04/16 02:49:14 | 000,307,600 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/04/09 05:16:00 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013/01/30 16:07:33 | 000,000,073 | ---- | C] () -- C:\WINDOWS\KTEL.INI
[2012/10/07 06:08:01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\eDrawingOfficeAutomator.INI
[2012/07/14 08:13:39 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Menu.INI
[2012/07/10 01:22:42 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2012/07/02 13:30:26 | 000,000,034 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2012/06/30 19:11:34 | 000,002,194 | ---- | C] () -- C:\WINDOWS\musi.ini
[2012/05/23 22:03:46 | 000,292,222 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2012/02/15 10:15:26 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/09/08 04:52:21 | 000,000,076 | ---- | C] () -- C:\WINDOWS\System32\dtirc.dll
[2011/08/29 08:35:04 | 000,081,920 | R--- | C] () -- C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
[2011/07/10 12:45:02 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2011/05/06 14:04:20 | 000,040,960 | ---- | C] () -- C:\WINDOWS\uneng.exe
[2011/03/11 11:41:19 | 000,001,573 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Lohnrechner2009.pref
[2010/12/25 05:48:29 | 000,039,095 | ---- | C] () -- C:\WINDOWS\iccsigs.dat
[2010/12/25 05:48:28 | 000,112,688 | ---- | C] () -- C:\WINDOWS\System32\shw32.dll
[2010/12/02 10:30:04 | 000,003,301 | ---- | C] () -- C:\WINDOWS\READWRITEPRO_NT.INI
[2010/12/02 10:29:55 | 000,003,439 | ---- | C] () -- C:\WINDOWS\DISKMANAGER.INI
[2010/12/02 10:29:54 | 000,005,423 | ---- | C] () -- C:\WINDOWS\Custom.ini
[2010/12/02 10:29:48 | 000,011,776 | R--- | C] () -- C:\WINDOWS\System32\downtvdd.dll
[2010/12/02 10:29:47 | 000,007,328 | R--- | C] () -- C:\WINDOWS\System32\drivers\ds1410d.sys
[2010/11/05 11:51:19 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\Tiger 1\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/19 08:35:43 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/10/06 17:39:03 | 000,078,195 | ---- | C] () -- C:\WINDOWS\hpqins05.dat
[2010/09/30 09:18:11 | 000,000,051 | ---- | C] () -- C:\WINDOWS\WWWBATCH.INI
[2010/09/28 10:30:01 | 000,000,404 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2010/09/28 07:24:04 | 000,199,081 | ---- | C] () -- C:\WINDOWS\hpwins21.dat
[2010/09/28 07:24:04 | 000,000,428 | ---- | C] () -- C:\WINDOWS\hpwmdl21.dat
[2010/09/27 11:26:29 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/09/27 10:42:05 | 000,179,007 | ---- | C] () -- C:\WINDOWS\System32\DaConfig.dll
[2010/09/27 10:41:23 | 000,000,364 | ---- | C] () -- C:\WINDOWS\System32\drivers\BootI2c.bin
[2010/09/27 06:21:28 | 000,000,118 | ---- | C] () -- C:\WINDOWS\WinInit.INI
[2010/09/26 09:10:31 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2010/09/26 08:10:46 | 000,073,728 | R--- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2010/09/24 17:09:07 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/09/24 15:20:38 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/09/24 15:14:10 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/02/17 23:29:18 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2009/02/17 23:29:18 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2009/02/17 23:29:18 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2009/02/17 23:29:14 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2009/02/17 23:29:14 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2009/02/17 23:29:10 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2009/02/17 23:29:08 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2009/02/17 23:28:58 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2009/02/17 23:28:56 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008/05/26 16:23:36 | 000,016,834 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008/05/26 16:23:34 | 000,024,188 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008/05/26 16:23:32 | 000,016,568 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008/05/26 15:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 15:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2003/04/02 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2003/04/02 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2003/04/02 08:00:00 | 000,545,588 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2003/04/02 08:00:00 | 000,496,962 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2003/04/02 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2003/04/02 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2003/04/02 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2003/04/02 08:00:00 | 000,112,118 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2003/04/02 08:00:00 | 000,085,446 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2003/04/02 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2003/04/02 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2003/04/02 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2003/04/02 08:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003/04/02 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003/04/02 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2002/04/18 06:54:26 | 000,000,087 | ---- | C] () -- C:\WINDOWS\VIPCONVERSION.INI
[2002/04/04 05:37:06 | 000,005,094 | ---- | C] () -- C:\WINDOWS\VipStitchEditor.ini
[2002/04/04 05:35:14 | 000,004,582 | ---- | C] () -- C:\WINDOWS\VIPDESIGNSPLITTER.INI
[2002/02/20 09:49:46 | 000,014,658 | ---- | C] () -- C:\WINDOWS\VIPDIGITIZING.INI
[2002/01/29 12:13:50 | 000,005,088 | ---- | C] () -- C:\WINDOWS\VipReSizePlus.ini
[2002/01/29 12:10:04 | 000,007,592 | ---- | C] () -- C:\WINDOWS\VipColorPict.ini
[2002/01/29 11:53:42 | 000,004,545 | ---- | C] () -- C:\WINDOWS\VIPDISKMANAGER.INI
[2002/01/29 11:52:14 | 000,006,766 | ---- | C] () -- C:\WINDOWS\CUSTOMIZ.INI
[2001/08/10 07:14:16 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ImapiRoxPS.dll
 
========== LOP Check ==========
 
[2011/09/08 04:54:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\J River
[2012/12/12 07:36:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\TuneUp Software
[2011/10/02 14:43:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Alcatech
[2012/06/11 15:03:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Amazon
[2012/12/23 07:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\APP_NAME_NON_STRING
[2010/09/28 10:53:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Canon
[2013/03/06 14:15:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\capella-software
[2011/04/10 10:09:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\CD-LabelPrint
[2012/12/02 12:18:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\DesktopIconForAmazon
[2012/10/07 06:09:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\EDrawings
[2012/12/02 15:23:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Flo & Seb Engineering
[2012/07/02 13:41:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\FreeCDRipper
[2012/10/08 12:49:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\FreeFLVConverter
[2011/05/23 17:34:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\GetRightToGo
[2011/02/05 13:15:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\inFlow Inventory
[2011/09/10 08:28:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\J River
[2013/01/30 16:00:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\klickTel
[2013/04/28 10:08:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Marine Aquarium 3
[2011/11/02 11:35:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\mresreg
[2012/12/02 12:18:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\OCS
[2012/12/02 12:18:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Opera
[2012/05/13 14:25:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\PDF Software
[2010/09/28 10:29:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\ScanSoft
[2012/12/09 07:32:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\TuneUp Software
[2013/01/05 10:55:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\VariCAD-Viewer.de
[2010/09/28 21:28:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Windows Desktop Search
[2010/11/27 03:42:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Windows Search
[2012/10/10 14:14:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Youtube Downloader HD
[2012/10/07 13:21:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Tiger 1\Anwendungsdaten\Youtube to MP3 Converter
[2013/02/01 12:02:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AAV
[2010/09/27 07:00:17 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2012/12/09 07:28:37 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2012/11/11 12:40:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DATA BECKER Downloads
[2013/04/19 03:08:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fltu
[2011/02/05 13:32:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\inFlow Inventory
[2011/06/20 17:13:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\iWin Games
[2012/11/17 19:54:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ORTMANN Media-Verlag
[2010/09/27 10:21:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Drivers HeadQuarters
[2012/07/14 07:49:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RapidSolution
[2010/09/28 10:29:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ScanSoft
[2012/04/06 14:25:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sPlan70
[2012/04/06 11:42:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sPlan70(Demo)
[2011/06/23 06:37:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2011/12/31 09:09:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\tmp
[2012/12/09 07:33:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2012/04/06 10:54:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ulead Systems
[2011/02/02 13:23:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WinZip
[2012/12/09 08:09:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/12/09 08:09:24 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2013/03/26 15:00:07 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\ExpressRipReminder.job
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2010/09/29 00:54:05 | 000,000,000 | ---D | M] -- C:\0336daae10872780fe369cb6
[2010/09/28 21:27:14 | 000,000,000 | ---D | M] -- C:\4c70531f2744cc2f18d9b9c516
[2011/10/02 06:50:28 | 000,000,000 | ---D | M] -- C:\b1a3c391907d9f339422
[2010/09/29 00:49:42 | 000,000,000 | ---D | M] -- C:\d0050df5b27e3cd78d
[2010/09/27 10:41:08 | 000,000,000 | ---D | M] -- C:\dell
[2013/05/27 09:03:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen
[2010/12/02 10:42:32 | 000,000,000 | ---D | M] -- C:\Husq95
[2010/12/02 10:34:31 | 000,000,000 | ---D | M] -- C:\HusqCross
[2010/09/28 06:57:50 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2013/05/20 07:14:11 | 000,000,000 | R--D | M] -- C:\Programme
[2013/04/14 08:15:23 | 000,000,000 | -HSD | M] -- C:\RECYCLER
[2011/08/29 14:08:11 | 000,000,000 | ---D | M] -- C:\Softwarenetz
[2010/09/26 11:20:48 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2010/12/02 11:59:24 | 000,000,000 | ---D | M] -- C:\VipEmbroidery
[2013/05/30 19:39:09 | 000,000,000 | ---D | M] -- C:\WINDOWS
[2013/05/30 19:39:06 | 000,000,000 | ---D | M] -- C:\_OTL
 
< %PROGRAMFILES%\*.exe >
 
Invalid Environment Variable: %LOCALAPPDATA%\*.exe
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2010/09/26 10:54:53 | 022,286,026 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2010/09/26 14:07:54 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2010/09/26 10:54:53 | 022,286,026 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2010/09/26 14:07:54 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004/08/04 02:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\AGP440.SYS
 
< MD5 for: ATAPI.SYS  >
[2003/04/02 08:00:00 | 010,180,476 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2010/09/26 10:54:53 | 022,286,026 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010/09/26 14:07:54 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2010/09/26 10:54:53 | 022,286,026 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2010/09/26 14:07:54 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
 
< MD5 for: EVENTLOG.DLL  >
[2008/04/13 22:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 22:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll
 
< MD5 for: EXPLORER.EXE  >
[2008/04/13 22:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\explorer.exe
[2008/04/13 22:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
 
< MD5 for: NETLOGON.DLL  >
[2008/04/13 22:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/13 22:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll
[2009/02/06 14:46:10 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=ED4BBAD725A21632FB205452749FC8F5 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009/02/06 14:46:10 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=ED4BBAD725A21632FB205452749FC8F5 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
 
< MD5 for: SCECLI.DLL  >
[2008/04/13 22:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/13 22:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll
 
< MD5 for: USER32.DLL  >
[2005/03/02 14:09:46 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=3751D7CF0E0A113D84414992146BCE6A -- C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\user32.dll
[2005/03/02 14:19:56 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=4C90159A69A5FD3EB39C71411F28FCFF -- C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
[2008/04/13 22:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\ServicePackFiles\i386\user32.dll
[2008/04/13 22:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2008/04/13 22:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008/04/13 22:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2008/04/13 22:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008/04/13 22:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2003/04/02 08:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys
[2003/04/02 08:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
[2010/09/24 18:02:22 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2010/09/24 18:02:22 | 000,630,784 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2010/09/24 18:02:22 | 000,413,696 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
 
< %systemroot%\system32\*.dll /lockedfiles >
[2011/03/03 02:54:43 | 000,149,504 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\dnsapi.dll
[2013/04/16 18:16:48 | 011,112,960 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\ieframe.dll
[2013/04/16 18:16:48 | 002,005,504 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\iertutil.dll
[2008/04/13 22:22:18 | 000,280,064 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\mstask.dll
[2008/04/13 22:22:20 | 000,067,072 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\ntdsapi.dll
[2012/06/08 10:25:14 | 008,503,808 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\shell32.dll
 
Invalid Environment Variable: %USERPROFILE%\*.*
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.exe
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.dll
 
Invalid Environment Variable: %USERPROFILE%\Application Data\*.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 110 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:517DBC32
@Alternate Data Stream - 105 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:E50C1642
< End of report >
         

--- --- ---

hi
auf deinem zweiten pc gehe auf start, programme zubehör editor, kopiere dort
rein:

:OTL
O20 - AppInit_DLLs: (c:\dokume~1\alluse~1\anwend~1\browse~1\25911~1.18\{c16c1~1\mngr.dll) -  File not found
O20 - HKU\Tiger_1_ON_C Winlogon: Shell - (cmd.exe) -  File not found
[2013/05/27 07:00:10 | 000,163,029 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\2433f433
[2013/05/27 06:59:35 | 000,044,544 | ---- | M] (Adobe Systems Incorporated) -- C:\Dokumente und Einstellungen\Tiger 1\Eigene Dateien\139d2e78.dll
:Files
:Commands
[EMPTYFLASH] 
[emptytemp]
         

dieses speicherst du auf nem usb stick als fix.txt
nutze nun wieder OTLPENet.exe (starte also von der erstellten cd) und hake alles an, wie es bereits im post zu OTLPENet.exe beschrieben ist.
• Klicke nun bitte auf den Fix Button.
es sollte nun eine meldung ähnlich dieser: "load fix from file" erscheinen, lade also die fix.txt von deinem stick.
wenn dies nicht funktioniert, bitte den fix manuell eintragen.
dann klicke erneut den fix buton. pc startet evtl. neu. wenn ja, nimm die cd aus dem laufwerk, windows sollte nun normal starten und die otl.txt öffnen,
log posten bitte.

Wenns geklappt hatt, weiter mit dem upload

PC läuft
Was muss ich noch tun?

Gruß Regent

Der Upload fehlt wie nach dem ersten OTL Script beschrieben

Guten Morgen,
welchen Link will er denn haben beim Hochladen. Meine Überschrift nimmt er nicht.

Gruß
Regent

Habs gefunden.
Ich Dummerle.
Upload hat funktioniert.
Was wäre der nächste Schritt?

Gruß
Regent

danke fürs hochladen.
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

13:06:37.0343 0456 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
13:06:37.0609 0456 ============================================================
13:06:37.0609 0456 Current date / time: 2013/06/01 13:06:37.0609
13:06:37.0609 0456 SystemInfo:
13:06:37.0609 0456
13:06:37.0609 0456 OS Version: 5.1.2600 ServicePack: 3.0
13:06:37.0609 0456 Product type: Workstation
13:06:37.0609 0456 ComputerName: TIGER
13:06:37.0609 0456 UserName: Tiger 1
13:06:37.0609 0456 Windows directory: C:\WINDOWS
13:06:37.0609 0456 System windows directory: C:\WINDOWS
13:06:37.0609 0456 Processor architecture: Intel x86
13:06:37.0609 0456 Number of processors: 1
13:06:37.0609 0456 Page size: 0x1000
13:06:37.0609 0456 Boot type: Normal boot
13:06:37.0609 0456 ============================================================
13:06:40.0890 0456 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
13:06:40.0984 0456 ============================================================
13:06:40.0984 0456 \Device\Harddisk0\DR0:
13:06:40.0984 0456 MBR partitions:
13:06:40.0984 0456 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A14BC1
13:06:40.0984 0456 ============================================================
13:06:41.0031 0456 C: <-> \Device\Harddisk0\DR0\Partition1
13:06:41.0031 0456 ============================================================
13:06:41.0031 0456 Initialize success
13:06:41.0031 0456 ============================================================
13:07:48.0593 2320 ============================================================
13:07:48.0593 2320 Scan started
13:07:48.0593 2320 Mode: Manual; SigCheck; TDLFS;
13:07:48.0593 2320 ============================================================
13:07:49.0203 2320 ================ Scan system memory ========================
13:07:49.0218 2320 System memory - ok
13:07:49.0234 2320 ================ Scan services =============================
13:07:49.0531 2320 [ 7EEB488346FBFA3731276C3EE8A8FD9E ] AAV UpdateService C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
13:07:49.0937 2320 AAV UpdateService - ok
13:07:50.0390 2320 Abiosdsk - ok
13:07:50.0406 2320 abp480n5 - ok
13:07:50.0515 2320 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:07:54.0562 2320 ACPI - ok
13:07:54.0609 2320 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
13:07:54.0937 2320 ACPIEC - ok
13:07:54.0953 2320 adpu160m - ok
13:07:55.0046 2320 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
13:07:55.0437 2320 aec - ok
13:07:55.0484 2320 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
13:07:55.0609 2320 AFD - ok
13:07:55.0671 2320 [ 031387EF17D0004A5BB950AAFAB4EB4E ] agentcd C:\Windows\System32\AgentCD.sys
13:07:56.0312 2320 agentcd ( UnsignedFile.Multi.Generic ) - warning
13:07:56.0312 2320 agentcd - detected UnsignedFile.Multi.Generic (1)
13:07:56.0359 2320 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
13:07:56.0781 2320 agp440 - ok
13:07:56.0812 2320 Aha154x - ok
13:07:56.0953 2320 aic78u2 - ok
13:07:57.0078 2320 aic78xx - ok
13:07:57.0203 2320 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter C:\WINDOWS\system32\alrsvc.dll
13:07:57.0468 2320 Alerter - ok
13:07:57.0500 2320 [ 190CD73D4984F94D823F9444980513E5 ] ALG C:\WINDOWS\System32\alg.exe
13:07:57.0765 2320 ALG - ok
13:07:57.0781 2320 AliIde - ok
13:07:57.0796 2320 amsint - ok
13:07:57.0843 2320 [ D45960BE52C3C610D361977057F98C54 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
13:07:58.0109 2320 AppMgmt - ok
13:07:58.0156 2320 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
13:07:58.0437 2320 Arp1394 - ok
13:07:58.0453 2320 asc - ok
13:07:58.0468 2320 asc3350p - ok
13:07:58.0484 2320 asc3550 - ok
13:07:58.0625 2320 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
13:07:58.0750 2320 aspnet_state - ok
13:07:58.0796 2320 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:07:59.0046 2320 AsyncMac - ok
13:07:59.0078 2320 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
13:07:59.0343 2320 atapi - ok
13:07:59.0359 2320 Atdisk - ok
13:07:59.0437 2320 [ 8948961A4BD498A29E5EEEFE548E380F ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
13:07:59.0734 2320 ati2mtag - ok
13:07:59.0781 2320 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:08:00.0046 2320 Atmarpc - ok
13:08:00.0093 2320 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
13:08:00.0359 2320 AudioSrv - ok
13:08:00.0406 2320 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
13:08:00.0671 2320 audstub - ok
13:08:00.0734 2320 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
13:08:01.0015 2320 Beep - ok
13:08:01.0078 2320 [ D6F603772A789BB3228F310D650B8BD1 ] BITS C:\WINDOWS\system32\qmgr.dll
13:08:01.0453 2320 BITS - ok
13:08:01.0515 2320 [ B71549F23736ADF83A571061C47777FD ] Browser C:\WINDOWS\System32\browser.dll
13:08:01.0609 2320 Browser - ok
13:08:01.0656 2320 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
13:08:01.0953 2320 cbidf2k - ok
13:08:01.0984 2320 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
13:08:02.0265 2320 CCDECODE - ok
13:08:02.0281 2320 cd20xrnt - ok
13:08:02.0312 2320 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
13:08:02.0609 2320 Cdaudio - ok
13:08:02.0656 2320 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
13:08:02.0937 2320 Cdfs - ok
13:08:02.0984 2320 [ 4AC2E023B8BBEE458816D30DB0BF149A ] Cdr4_xp C:\WINDOWS\system32\drivers\Cdr4_xp.sys
13:08:03.0125 2320 Cdr4_xp ( UnsignedFile.Multi.Generic ) - warning
13:08:03.0125 2320 Cdr4_xp - detected UnsignedFile.Multi.Generic (1)
13:08:03.0171 2320 [ 7E56D7AB50E08B393B640C0BE898C752 ] Cdralw2k C:\WINDOWS\system32\drivers\Cdralw2k.sys
13:08:03.0250 2320 Cdralw2k ( UnsignedFile.Multi.Generic ) - warning
13:08:03.0250 2320 Cdralw2k - detected UnsignedFile.Multi.Generic (1)
13:08:03.0296 2320 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
13:08:03.0562 2320 Cdrom - ok
13:08:03.0625 2320 [ 5B20A47B0413240CDB93106BD58602A1 ] cdudf_xp C:\WINDOWS\system32\drivers\cdudf_xp.sys
13:08:03.0875 2320 cdudf_xp ( UnsignedFile.Multi.Generic ) - warning
13:08:03.0875 2320 cdudf_xp - detected UnsignedFile.Multi.Generic (1)
13:08:03.0890 2320 Changer - ok
13:08:03.0921 2320 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc C:\WINDOWS\system32\cisvc.exe
13:08:04.0171 2320 CiSvc - ok
13:08:04.0218 2320 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
13:08:04.0468 2320 ClipSrv - ok
13:08:04.0718 2320 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:08:05.0578 2320 clr_optimization_v2.0.50727_32 - ok
13:08:05.0640 2320 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
13:08:05.0921 2320 clr_optimization_v4.0.30319_32 - ok
13:08:05.0937 2320 CmdIde - ok
13:08:05.0953 2320 COMSysApp - ok
13:08:05.0984 2320 Cpqarray - ok
13:08:06.0031 2320 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
13:08:06.0312 2320 CryptSvc - ok
13:08:06.0328 2320 dac2w2k - ok
13:08:06.0343 2320 dac960nt - ok
13:08:06.0421 2320 [ 48297BF3339BC56DD7D7524D7A1740AA ] DBService C:\Programme\Gemeinsame Dateien\DATA BECKER Shared\DBService.exe
13:10:23.0296 2320 DBService ( UnsignedFile.Multi.Generic ) - warning
13:10:23.0296 2320 DBService - detected UnsignedFile.Multi.Generic (1)
13:10:23.0406 2320 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
13:10:23.0765 2320 DcomLaunch - ok
13:10:23.0843 2320 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
13:10:24.0531 2320 Dhcp - ok
13:10:24.0593 2320 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
13:10:25.0203 2320 Disk - ok
13:10:25.0218 2320 dmadmin - ok
13:10:25.0484 2320 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
13:10:26.0796 2320 dmboot - ok
13:10:26.0906 2320 [ 53720AB12B48719D00E327DA470A619A ] dmio C:\WINDOWS\system32\drivers\dmio.sys
13:10:27.0328 2320 dmio - ok
13:10:27.0453 2320 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
13:10:27.0812 2320 dmload - ok
13:10:27.0937 2320 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver C:\WINDOWS\System32\dmserver.dll
13:10:28.0250 2320 dmserver - ok
13:10:28.0359 2320 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
13:10:28.0812 2320 DMusic - ok
13:10:28.0953 2320 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
13:10:29.0250 2320 Dnscache - ok
13:10:29.0562 2320 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
13:10:29.0968 2320 Dot3svc - ok
13:10:30.0000 2320 dpti2o - ok
13:10:30.0031 2320 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
13:10:30.0406 2320 drmkaud - ok
13:10:30.0515 2320 [ 1A51E03B66635280684E9EDF34A2E8C0 ] DS1410D C:\WINDOWS\system32\drivers\DS1410D.SYS
13:10:30.0562 2320 DS1410D ( UnsignedFile.Multi.Generic ) - warning
13:10:30.0562 2320 DS1410D - detected UnsignedFile.Multi.Generic (1)
13:10:30.0656 2320 [ 3677E155D87DDA2BC53142D7D234D12A ] dvd_2K C:\WINDOWS\system32\drivers\dvd_2K.sys
13:10:30.0703 2320 dvd_2K ( UnsignedFile.Multi.Generic ) - warning
13:10:30.0703 2320 dvd_2K - detected UnsignedFile.Multi.Generic (1)
13:10:30.0812 2320 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost C:\WINDOWS\System32\eapsvc.dll
13:10:31.0156 2320 EapHost - ok
13:10:31.0218 2320 [ F9FB8A241685C6E4E737ED0501BEF7BE ] ElbyCDIO C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
13:10:31.0250 2320 ElbyCDIO ( UnsignedFile.Multi.Generic ) - warning
13:10:31.0250 2320 ElbyCDIO - detected UnsignedFile.Multi.Generic (1)
13:10:31.0296 2320 [ 8D35AFFBEED58FD66E9FAD223DE33718 ] ElbyDelay C:\WINDOWS\system32\Drivers\ElbyDelay.sys
13:10:31.0328 2320 ElbyDelay ( UnsignedFile.Multi.Generic ) - warning
13:10:31.0328 2320 ElbyDelay - detected UnsignedFile.Multi.Generic (1)
13:10:31.0406 2320 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc C:\WINDOWS\System32\ersvc.dll
13:10:31.0765 2320 ERSvc - ok
13:10:31.0859 2320 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog C:\WINDOWS\system32\services.exe
13:10:31.0921 2320 Eventlog - ok
13:10:32.0000 2320 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem C:\WINDOWS\System32\es.dll
13:10:32.0140 2320 EventSystem - ok
13:10:32.0171 2320 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
13:10:32.0812 2320 Fastfat - ok
13:10:32.0859 2320 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
13:10:33.0109 2320 FastUserSwitchingCompatibility - ok
13:10:33.0156 2320 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
13:10:33.0625 2320 Fdc - ok
13:10:33.0687 2320 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
13:10:34.0062 2320 Fips - ok
13:10:34.0078 2320 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
13:10:34.0375 2320 Flpydisk - ok
13:10:34.0515 2320 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
13:10:34.0875 2320 FltMgr - ok
13:10:34.0953 2320 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
13:10:35.0046 2320 FontCache3.0.0.0 - ok
13:10:35.0062 2320 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:10:35.0390 2320 Fs_Rec - ok
13:10:35.0421 2320 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
13:10:35.0781 2320 Ftdisk - ok
13:10:35.0843 2320 [ 065639773D8B03F33577F6CDAEA21063 ] gameenum C:\WINDOWS\system32\DRIVERS\gameenum.sys
13:10:36.0187 2320 gameenum - ok
13:10:36.0250 2320 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
13:10:36.0578 2320 Gpc - ok
13:10:36.0671 2320 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
13:10:37.0046 2320 helpsvc - ok
13:10:37.0062 2320 HidServ - ok
13:10:37.0125 2320 [ ED29F14101523A6E0E808107405D452C ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
13:10:37.0421 2320 hkmsvc - ok
13:10:37.0437 2320 hpn - ok
13:10:37.0546 2320 [ 0A3C6AA4A9FC38C20BA4EAC2C3351C05 ] hpqcxs08 C:\Programme\HP\Digital Imaging\bin\hpqcxs08.dll
13:10:37.0640 2320 hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning
13:10:37.0640 2320 hpqcxs08 - detected UnsignedFile.Multi.Generic (1)
13:10:37.0671 2320 [ 7DA3211AC63EDD90B8ECA1CA1ABFD43B ] hpqddsvc C:\Programme\HP\Digital Imaging\bin\hpqddsvc.dll
13:10:37.0718 2320 hpqddsvc ( UnsignedFile.Multi.Generic ) - warning
13:10:37.0718 2320 hpqddsvc - detected UnsignedFile.Multi.Generic (1)
13:10:37.0796 2320 [ 14229263AA19C704E0D6D2E7404A8455 ] HPSLPSVC C:\Programme\HP\Digital Imaging\bin\HPSLPSVC32.DLL
13:10:38.0000 2320 HPSLPSVC ( UnsignedFile.Multi.Generic ) - warning
13:10:38.0000 2320 HPSLPSVC - detected UnsignedFile.Multi.Generic (1)
13:10:38.0046 2320 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
13:10:38.0328 2320 HPZid412 - ok
13:10:38.0375 2320 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
13:10:38.0453 2320 HPZipr12 - ok
13:10:38.0500 2320 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
13:10:38.0609 2320 HPZius12 - ok
13:10:38.0687 2320 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
13:10:38.0828 2320 HTTP - ok
13:10:38.0859 2320 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
13:10:39.0203 2320 HTTPFilter - ok
13:10:39.0218 2320 i2omgmt - ok
13:10:39.0250 2320 i2omp - ok
13:10:39.0296 2320 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
13:10:39.0656 2320 i8042prt - ok
13:10:39.0828 2320 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
13:10:40.0140 2320 idsvc - ok
13:10:40.0218 2320 [ 52FA4D5BF104C7B02ADC49C414B484ED ] Imapi C:\WINDOWS\system32\drivers\ImapiRox.sys
13:10:40.0265 2320 Imapi ( UnsignedFile.Multi.Generic ) - warning
13:10:40.0265 2320 Imapi - detected UnsignedFile.Multi.Generic (1)
13:10:40.0343 2320 [ E3FCAEDB786EADB9D3983DE60AE57946 ] ImapiService C:\WINDOWS\system32\ImapiRox.exe
13:10:40.0390 2320 ImapiService ( UnsignedFile.Multi.Generic ) - warning
13:10:40.0390 2320 ImapiService - detected UnsignedFile.Multi.Generic (1)
13:10:40.0421 2320 ini910u - ok
13:10:40.0484 2320 [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
13:10:40.0765 2320 IntelIde - ok
13:10:40.0812 2320 [ 3BB22519A194418D5FEC05D800A19AD0 ] ip6fw C:\WINDOWS\system32\drivers\ip6fw.sys
13:10:41.0234 2320 ip6fw - ok
13:10:41.0296 2320 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:10:41.0578 2320 IpFilterDriver - ok
13:10:41.0640 2320 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
13:10:42.0453 2320 IpInIp - ok
13:10:42.0515 2320 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
13:10:42.0796 2320 IpNat - ok
13:10:42.0828 2320 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
13:10:43.0109 2320 IPSec - ok
13:10:43.0156 2320 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
13:10:43.0578 2320 IRENUM - ok
13:10:43.0625 2320 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
13:10:44.0156 2320 isapnp - ok
13:10:44.0281 2320 [ B591E761161D1EF547D76EF236EAA6A5 ] JavaQuickStarterService C:\Programme\Java\jre7\bin\jqs.exe
13:10:44.0375 2320 JavaQuickStarterService - ok
13:10:44.0453 2320 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
13:10:44.0937 2320 Kbdclass - ok
13:10:44.0953 2320 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
13:10:45.0531 2320 kmixer - ok
13:10:45.0609 2320 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
13:10:45.0953 2320 KSecDD - ok
13:10:45.0984 2320 [ FD1D572C705BD70953621DA8334F5A5C ] L8042mou C:\WINDOWS\system32\DRIVERS\L8042mou.Sys
13:10:46.0171 2320 L8042mou - ok
13:10:46.0250 2320 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
13:10:46.0500 2320 lanmanserver - ok
13:10:46.0562 2320 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
13:10:46.0828 2320 lanmanworkstation - ok
13:10:46.0828 2320 lbrtfdc - ok
13:10:47.0000 2320 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
13:10:47.0625 2320 LmHosts - ok
13:10:47.0687 2320 [ E424EB5F4FCF486490A17BEA3DFC64A9 ] LMouKE C:\WINDOWS\system32\DRIVERS\LMouKE.Sys
13:10:47.0859 2320 LMouKE - ok
13:10:47.0968 2320 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
13:10:48.0062 2320 MDM - ok
13:10:48.0140 2320 [ B7550A7107281D170CE85524B1488C98 ] Messenger C:\WINDOWS\System32\msgsvc.dll
13:10:48.0750 2320 Messenger - ok
13:10:48.0859 2320 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe
13:10:48.0937 2320 Microsoft Office Groove Audit Service - ok
13:10:48.0953 2320 [ A54FD7E564C996CFCEE6EE7491F3C318 ] mmc_2K C:\WINDOWS\system32\drivers\mmc_2K.sys
13:10:49.0109 2320 mmc_2K ( UnsignedFile.Multi.Generic ) - warning
13:10:49.0109 2320 mmc_2K - detected UnsignedFile.Multi.Generic (1)
13:10:49.0156 2320 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
13:10:49.0734 2320 mnmdd - ok
13:10:49.0765 2320 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc C:\WINDOWS\System32\mnmsrvc.exe
13:10:50.0390 2320 mnmsrvc - ok
13:10:50.0437 2320 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
13:10:51.0031 2320 Modem - ok
13:10:51.0078 2320 [ CBC359BC4154C7AF79AE2D16C6C9B30A ] Mojave C:\WINDOWS\system32\DRIVERS\Mojave.sys
13:10:51.0359 2320 Mojave - ok
13:10:51.0375 2320 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
13:10:52.0015 2320 Mouclass - ok
13:10:52.0109 2320 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
13:10:52.0671 2320 MountMgr - ok
13:10:52.0781 2320 [ CF105EE42E3F71E648CEBB3F666E1CF0 ] MpFilter C:\WINDOWS\system32\DRIVERS\MpFilter.sys
13:10:52.0890 2320 MpFilter - ok
13:10:53.0078 2320 [ A69630D039C38018689190234F866D77 ] MpKsl661bd01e c:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Microsoft Antimalware\Definition Updates\{DF0E0655-195A-4F12-9470-26212B2A2F53}\MpKsl661bd01e.sys
13:10:53.0171 2320 MpKsl661bd01e - ok
13:10:53.0218 2320 mraid35x - ok
13:10:53.0265 2320 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
13:10:53.0843 2320 MRxDAV - ok
13:10:53.0937 2320 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:10:54.0359 2320 MRxSmb - ok
13:10:54.0390 2320 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC C:\WINDOWS\System32\msdtc.exe
13:10:55.0000 2320 MSDTC - ok
13:10:55.0062 2320 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
13:10:55.0640 2320 Msfs - ok
13:10:55.0656 2320 MSIServer - ok
13:10:55.0687 2320 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
13:10:56.0250 2320 MSKSSRV - ok
13:10:56.0359 2320 [ C1F19D2BACBEE9AB64D9AE69E9859AC0 ] MsMpSvc c:\Programme\Microsoft Security Client\MsMpEng.exe
13:10:56.0421 2320 MsMpSvc - ok
13:10:56.0468 2320 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
13:10:57.0046 2320 MSPCLOCK - ok
13:10:57.0078 2320 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
13:10:57.0656 2320 MSPQM - ok
13:10:57.0750 2320 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
13:10:58.0421 2320 mssmbios - ok
13:10:58.0453 2320 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
13:10:59.0171 2320 MSTEE - ok
13:10:59.0234 2320 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
13:10:59.0578 2320 Mup - ok
13:10:59.0609 2320 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
13:11:00.0218 2320 NABTSFEC - ok
13:11:00.0312 2320 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent C:\WINDOWS\System32\qagentrt.dll
13:11:00.0890 2320 napagent - ok
13:11:00.0921 2320 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
13:11:01.0625 2320 NDIS - ok
13:11:01.0656 2320 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
13:11:02.0218 2320 NdisIP - ok
13:11:02.0265 2320 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:11:02.0531 2320 NdisTapi - ok
13:11:02.0656 2320 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
13:11:03.0265 2320 Ndisuio - ok
13:11:03.0328 2320 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:11:04.0000 2320 NdisWan - ok
13:11:04.0046 2320 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
13:11:04.0375 2320 NDProxy - ok
13:11:04.0406 2320 [ 2969D26EEE289BE7422AA46FC55F4E38 ] Net Driver HPZ12 C:\WINDOWS\System32\HPZinw12.dll
13:11:04.0625 2320 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
13:11:04.0625 2320 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
13:11:04.0687 2320 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
13:11:05.0250 2320 NetBIOS - ok
13:11:05.0296 2320 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
13:11:05.0828 2320 NetBT - ok
13:11:05.0890 2320 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE C:\WINDOWS\system32\netdde.exe
13:11:06.0578 2320 NetDDE - ok
13:11:06.0687 2320 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
13:11:07.0671 2320 NetDDEdsdm - ok
13:11:07.0796 2320 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon C:\WINDOWS\System32\lsass.exe
13:11:08.0953 2320 Netlogon - ok
13:11:09.0093 2320 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman C:\WINDOWS\System32\netman.dll
13:11:10.0203 2320 Netman - ok
13:11:10.0296 2320 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
13:11:11.0328 2320 NetTcpPortSharing - ok
13:11:11.0468 2320 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
13:11:12.0687 2320 NIC1394 - ok
13:11:12.0812 2320 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla C:\WINDOWS\System32\mswsock.dll
13:11:13.0593 2320 Nla - ok
13:11:13.0671 2320 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
13:11:14.0890 2320 Npfs - ok
13:11:15.0093 2320 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
13:11:16.0875 2320 Ntfs - ok
13:11:16.0953 2320 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp C:\WINDOWS\System32\lsass.exe
13:11:17.0984 2320 NtLmSsp - ok
13:11:18.0171 2320 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
13:11:19.0562 2320 NtmsSvc - ok
13:11:19.0718 2320 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
13:11:20.0796 2320 Null - ok
13:11:23.0031 2320 [ 8C0456001B6900114BBB1C548BD8AAF5 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
13:11:32.0359 2320 nv - ok
13:11:32.0453 2320 [ 472A00D2183C9E5EDB3E076272741812 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
13:11:33.0015 2320 NVSvc - ok
13:11:33.0093 2320 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
13:11:34.0171 2320 NwlnkFlt - ok
13:11:34.0328 2320 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
13:11:35.0468 2320 NwlnkFwd - ok
13:11:35.0703 2320 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
13:11:36.0500 2320 odserv - ok
13:11:36.0578 2320 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
13:11:37.0875 2320 ohci1394 - ok
13:11:37.0968 2320 [ E1E54131462B63EFEFAF14ACA8E4012B ] OMCI C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS
13:11:38.0375 2320 OMCI ( UnsignedFile.Multi.Generic ) - warning
13:11:38.0375 2320 OMCI - detected UnsignedFile.Multi.Generic (1)
13:11:38.0453 2320 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
13:11:38.0828 2320 ose - ok
13:11:39.0031 2320 [ F84785660305B9B903FB3BCA8BA29837 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
13:11:40.0109 2320 Parport - ok
13:11:40.0218 2320 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
13:11:41.0140 2320 PartMgr - ok
13:11:41.0296 2320 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
13:11:42.0484 2320 ParVdm - ok
13:11:42.0578 2320 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
13:11:43.0687 2320 PCI - ok
13:11:43.0750 2320 PCIDump - ok
13:11:43.0875 2320 PCIIde - ok
13:11:44.0093 2320 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
13:11:45.0296 2320 Pcmcia - ok
13:11:45.0390 2320 PDCOMP - ok
13:11:45.0593 2320 PDFRAME - ok
13:11:45.0718 2320 PDRELI - ok
13:11:45.0921 2320 PDRFRAME - ok
13:11:46.0046 2320 perc2 - ok
13:11:46.0234 2320 perc2hib - ok
13:11:46.0703 2320 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay C:\WINDOWS\system32\services.exe
13:11:47.0328 2320 PlugPlay - ok
13:11:47.0421 2320 [ BAFC9706BDF425A02B66468AB2605C59 ] Pml Driver HPZ12 C:\WINDOWS\System32\HPZipm12.dll
13:11:47.0703 2320 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
13:11:47.0703 2320 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
13:11:47.0812 2320 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent C:\WINDOWS\System32\lsass.exe
13:11:48.0781 2320 PolicyAgent - ok
13:11:48.0937 2320 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
13:11:50.0093 2320 PptpMiniport - ok
13:11:50.0156 2320 [ 2CB55427C58679F49AD600FCCBA76360 ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
13:11:51.0265 2320 Processor - ok
13:11:51.0343 2320 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
13:11:52.0468 2320 ProtectedStorage - ok
13:11:52.0531 2320 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
13:11:53.0656 2320 PSched - ok
13:11:53.0765 2320 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
13:11:55.0000 2320 Ptilink - ok
13:11:55.0109 2320 [ DD37E1D9F08EEC0CB0FC84E010F33C3B ] pwd_2K C:\WINDOWS\system32\drivers\pwd_2K.sys
13:11:55.0531 2320 pwd_2K ( UnsignedFile.Multi.Generic ) - warning
13:11:55.0531 2320 pwd_2K - detected UnsignedFile.Multi.Generic (1)
13:11:55.0750 2320 ql1080 - ok
13:11:55.0875 2320 Ql10wnt - ok
13:11:56.0062 2320 ql12160 - ok
13:11:56.0187 2320 ql1240 - ok
13:11:56.0375 2320 ql1280 - ok
13:11:56.0500 2320 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:11:57.0593 2320 RasAcd - ok
13:11:57.0687 2320 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto C:\WINDOWS\System32\rasauto.dll
13:11:58.0828 2320 RasAuto - ok
13:11:58.0906 2320 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
13:11:59.0859 2320 Rasl2tp - ok
13:12:00.0000 2320 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan C:\WINDOWS\System32\rasmans.dll
13:12:01.0109 2320 RasMan - ok
13:12:01.0171 2320 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:12:02.0375 2320 RasPppoe - ok
13:12:02.0453 2320 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
13:12:03.0640 2320 Raspti - ok
13:12:03.0765 2320 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:12:05.0140 2320 Rdbss - ok
13:12:05.0203 2320 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
13:12:06.0515 2320 RDPCDD - ok
13:12:06.0640 2320 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
13:12:07.0703 2320 rdpdr - ok
13:12:07.0921 2320 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
13:12:08.0656 2320 RDPWD - ok
13:12:08.0796 2320 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
13:12:09.0937 2320 RDSessMgr - ok
13:12:10.0062 2320 [ ED761D453856F795A7FE056E42C36365 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
13:12:11.0156 2320 redbook - ok
13:12:11.0265 2320 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
13:12:12.0406 2320 RemoteAccess - ok
13:12:12.0531 2320 [ E4CD1F3D84E1C2CA0B8CF7501E201593 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
13:12:13.0640 2320 RemoteRegistry - ok
13:12:13.0765 2320 [ D8B0B4ADE32574B2D9C5CC34DC0DBBE7 ] ROOTMODEM C:\WINDOWS\system32\Drivers\RootMdm.sys
13:12:15.0031 2320 ROOTMODEM - ok
13:12:15.0125 2320 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator C:\WINDOWS\System32\locator.exe
13:12:16.0187 2320 RpcLocator - ok
13:12:16.0359 2320 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs C:\WINDOWS\system32\rpcss.dll
13:12:17.0500 2320 RpcSs - ok
13:12:17.0578 2320 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\System32\rsvp.exe
13:12:18.0828 2320 RSVP - ok
13:12:18.0906 2320 [ CF84B1F0E8B14D4120AAF9CF35CBB265 ] RTL8023xp C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
13:12:20.0109 2320 RTL8023xp - ok
13:12:20.0187 2320 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs C:\WINDOWS\system32\lsass.exe
13:12:21.0203 2320 SamSs - ok
13:12:21.0328 2320 SANDRA - ok
13:12:21.0640 2320 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
13:12:22.0734 2320 SCardSvr - ok
13:12:22.0890 2320 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule C:\WINDOWS\system32\schedsvc.dll
13:12:24.0031 2320 Schedule - ok
13:12:24.0156 2320 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
13:12:25.0140 2320 Secdrv - ok
13:12:25.0296 2320 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon C:\WINDOWS\System32\seclogon.dll
13:12:26.0406 2320 seclogon - ok
13:12:26.0500 2320 [ BAF2C083722BD67E5F9275E295134F0C ] SemLPT C:\WINDOWS\system32\drivers\SemLPT.sys
13:12:26.0906 2320 SemLPT ( UnsignedFile.Multi.Generic ) - warning
13:12:26.0906 2320 SemLPT - detected UnsignedFile.Multi.Generic (1)
13:12:27.0000 2320 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS C:\WINDOWS\system32\sens.dll
13:12:28.0062 2320 SENS - ok
13:12:28.0156 2320 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
13:12:29.0281 2320 serenum - ok
13:12:29.0359 2320 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
13:12:30.0546 2320 Serial - ok
13:12:31.0078 2320 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\DRIVERS\sfloppy.sys
13:12:32.0203 2320 Sfloppy - ok
13:12:32.0390 2320 [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
13:12:33.0937 2320 SharedAccess - ok
13:12:34.0031 2320 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
13:12:34.0765 2320 ShellHWDetection - ok
13:12:34.0812 2320 Simbad - ok
13:12:35.0000 2320 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
13:12:36.0171 2320 SLIP - ok
13:12:36.0640 2320 [ 369E4401CCDFDE3E81BB91898FDEF7C5 ] Soda PDF 5 Helper Service C:\Programme\Soda PDF 5\HelperService.exe
13:12:38.0359 2320 Soda PDF 5 Helper Service - ok
13:12:38.0484 2320 [ AAE0A4F03EC12E02B0830AD93BAD9F58 ] Soda PDF 5 Service C:\Programme\Soda PDF 5\ConversionService.exe
13:12:39.0750 2320 Soda PDF 5 Service - ok
13:12:39.0812 2320 Sparrow - ok
13:12:39.0968 2320 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
13:12:41.0125 2320 splitter - ok
13:12:41.0250 2320 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
13:12:42.0046 2320 Spooler - ok
13:12:42.0125 2320 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
13:12:43.0296 2320 sr - ok
13:12:43.0359 2320 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice C:\WINDOWS\System32\srsvc.dll
13:12:44.0625 2320 srservice - ok
13:12:44.0750 2320 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
13:12:45.0796 2320 Srv - ok
13:12:45.0890 2320 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
13:12:46.0937 2320 SSDPSRV - ok
13:12:47.0062 2320 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc C:\WINDOWS\system32\wiaservc.dll
13:12:48.0375 2320 stisvc - ok
13:12:48.0453 2320 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
13:12:49.0531 2320 streamip - ok
13:12:49.0625 2320 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
13:12:50.0734 2320 swenum - ok
13:12:50.0859 2320 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
13:12:52.0000 2320 swmidi - ok
13:12:52.0125 2320 SwPrv - ok
13:12:52.0343 2320 symc810 - ok
13:12:52.0531 2320 symc8xx - ok
13:12:52.0656 2320 sym_hi - ok
13:12:52.0828 2320 sym_u3 - ok
13:12:53.0015 2320 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
13:12:54.0218 2320 sysaudio - ok
13:12:54.0328 2320 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
13:12:55.0546 2320 SysmonLog - ok
13:12:55.0703 2320 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
13:12:56.0890 2320 TapiSrv - ok
13:12:57.0046 2320 [ 4E296E262AE499E3B1697798A9084451 ] tbcspud C:\WINDOWS\system32\drivers\tbcspud.sys
13:12:58.0078 2320 tbcspud - ok
13:12:58.0593 2320 [ FC855B65379F621A34C4309C31F754EB ] tbcwdm C:\WINDOWS\system32\drivers\tbcwdm.sys
13:12:59.0953 2320 tbcwdm - ok
13:13:00.0062 2320 [ 74D4299CDC4CF748EFEF725C2206E135 ] tbhsd C:\WINDOWS\system32\drivers\tbhsd.sys
13:13:02.0062 2320 tbhsd - ok
13:13:02.0250 2320 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
13:13:03.0125 2320 Tcpip - ok
13:13:03.0234 2320 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
13:13:04.0328 2320 TDPIPE - ok
13:13:04.0406 2320 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
13:13:05.0531 2320 TDTCP - ok
13:13:05.0656 2320 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
13:13:06.0781 2320 TermDD - ok
13:13:06.0906 2320 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService C:\WINDOWS\System32\termsrv.dll
13:13:08.0187 2320 TermService - ok
13:13:08.0296 2320 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes C:\WINDOWS\System32\shsvcs.dll
13:13:08.0906 2320 Themes - ok
13:13:08.0968 2320 [ 03681A1CE77F51586903869A5AB1DEAB ] TlntSvr C:\WINDOWS\System32\tlntsvr.exe
13:13:10.0281 2320 TlntSvr - ok
13:13:10.0343 2320 TosIde - ok
13:13:10.0546 2320 [ 626504572B175867F30F3215C04B3E2F ] TrkWks C:\WINDOWS\system32\trkwks.dll
13:13:11.0750 2320 TrkWks - ok
13:13:12.0703 2320 [ 75E9D9B9E1C268697DA56EFF1A578F68 ] TuneUp.UtilitiesSvc C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
13:13:14.0562 2320 TuneUp.UtilitiesSvc - ok
13:13:14.0625 2320 [ 94C4CD2D19B8C4137A46261F229FEC24 ] TuneUpUtilitiesDrv C:\Programme\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys
13:13:14.0671 2320 TuneUpUtilitiesDrv - ok
13:13:14.0734 2320 [ 3AF8116D049E6F98A6D37913DA989984 ] UdfReadr_xp C:\WINDOWS\system32\drivers\UdfReadr_xp.sys
13:13:15.0046 2320 UdfReadr_xp ( UnsignedFile.Multi.Generic ) - warning
13:13:15.0046 2320 UdfReadr_xp - detected UnsignedFile.Multi.Generic (1)
13:13:15.0234 2320 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
13:13:15.0734 2320 Udfs - ok
13:13:15.0765 2320 ultra - ok
13:13:15.0890 2320 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
13:13:16.0515 2320 Update - ok
13:13:16.0656 2320 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost C:\WINDOWS\System32\upnphost.dll
13:13:17.0125 2320 upnphost - ok
13:13:17.0234 2320 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS C:\WINDOWS\System32\ups.exe
13:13:17.0578 2320 UPS - ok
13:13:17.0593 2320 USBAAPL - ok
13:13:17.0671 2320 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
13:13:17.0984 2320 usbccgp - ok
13:13:18.0015 2320 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
13:13:18.0328 2320 usbehci - ok
13:13:18.0406 2320 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
13:13:18.0734 2320 usbhub - ok
13:13:18.0812 2320 [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys
13:13:19.0171 2320 usbohci - ok
13:13:19.0187 2320 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
13:13:19.0531 2320 usbprint - ok
13:13:19.0562 2320 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
13:13:19.0906 2320 usbscan - ok
13:13:20.0000 2320 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
13:13:20.0421 2320 USBSTOR - ok
13:13:20.0562 2320 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
13:13:21.0015 2320 usbuhci - ok
13:13:21.0250 2320 [ D90693C3AD11172B8952C8A1117AFCB1 ] UxTuneUp C:\WINDOWS\System32\uxtuneup.dll
13:13:23.0078 2320 UxTuneUp - ok
13:13:23.0250 2320 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
13:13:24.0000 2320 VgaSave - ok
13:13:24.0062 2320 ViaIde - ok
13:13:24.0093 2320 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
13:13:25.0625 2320 VolSnap - ok
13:13:25.0812 2320 [ 68F106273BE29E7B7EF8266977268E78 ] VSS C:\WINDOWS\System32\vssvc.exe
13:13:26.0750 2320 VSS - ok
13:13:26.0859 2320 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time C:\WINDOWS\System32\w32time.dll
13:13:27.0296 2320 W32Time - ok
13:13:27.0375 2320 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:13:27.0703 2320 Wanarp - ok
13:13:27.0734 2320 WDICA - ok
13:13:27.0781 2320 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
13:13:28.0234 2320 wdmaud - ok
13:13:28.0328 2320 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient C:\WINDOWS\System32\webclnt.dll
13:13:28.0781 2320 WebClient - ok
13:13:29.0250 2320 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
13:13:30.0031 2320 winmgmt - ok
13:13:30.0156 2320 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
13:13:30.0468 2320 WmdmPmSN - ok
13:13:30.0968 2320 [ FFA4D901D46D07A5BAB2D8307FBB51A6 ] Wmi C:\WINDOWS\System32\advapi32.dll
13:13:31.0796 2320 Wmi - ok
13:13:32.0484 2320 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv C:\WINDOWS\System32\wbem\wmiapsrv.exe
13:13:32.0890 2320 WmiApSrv - ok
13:13:33.0218 2320 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
13:13:33.0703 2320 WPFFontCache_v0400 - ok
13:13:33.0781 2320 [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc C:\WINDOWS\system32\wscsvc.dll
13:13:34.0140 2320 wscsvc - ok
13:13:34.0187 2320 WSearch - ok
13:13:34.0250 2320 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
13:13:34.0546 2320 WSTCODEC - ok
13:13:34.0578 2320 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
13:13:34.0671 2320 WudfPf - ok
13:13:34.0718 2320 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
13:13:34.0765 2320 WudfRd - ok
13:13:34.0812 2320 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
13:13:34.0921 2320 WudfSvc - ok
13:13:34.0984 2320 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
13:13:35.0375 2320 WZCSVC - ok
13:13:35.0421 2320 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
13:13:35.0750 2320 xmlprov - ok
13:13:35.0765 2320 ================ Scan global ===============================
13:13:35.0812 2320 [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
13:13:35.0859 2320 [ E62178BC21EAC63A3B9A2DBD46C1B505 ] C:\WINDOWS\system32\winsrv.dll
13:13:35.0921 2320 [ E62178BC21EAC63A3B9A2DBD46C1B505 ] C:\WINDOWS\system32\winsrv.dll
13:13:35.0953 2320 [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
13:13:35.0968 2320 [Global] - ok
13:13:35.0968 2320 ================ Scan MBR ==================================
13:13:35.0984 2320 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
13:13:36.0546 2320 \Device\Harddisk0\DR0 - ok
13:13:36.0546 2320 ================ Scan VBR ==================================
13:13:36.0578 2320 [ 7DDCF305DC50EA8396A6B355EADF345A ] \Device\Harddisk0\DR0\Partition1
13:13:36.0593 2320 \Device\Harddisk0\DR0\Partition1 - ok
13:13:36.0593 2320 ============================================================
13:13:36.0593 2320 Scan finished
13:13:36.0593 2320 ============================================================
13:13:36.0750 1508 Detected object count: 21
13:13:36.0750 1508 Actual detected object count: 21
09:58:10.0218 1508 agentcd ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0218 1508 agentcd ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0218 1508 Cdr4_xp ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0218 1508 Cdr4_xp ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0218 1508 Cdralw2k ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0218 1508 Cdralw2k ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0218 1508 cdudf_xp ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0218 1508 cdudf_xp ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0234 1508 DBService ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0250 1508 DBService ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0250 1508 DS1410D ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0250 1508 DS1410D ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0250 1508 dvd_2K ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0250 1508 dvd_2K ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0250 1508 ElbyCDIO ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0250 1508 ElbyCDIO ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0250 1508 ElbyDelay ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0250 1508 ElbyDelay ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0250 1508 hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0250 1508 hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0265 1508 hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0265 1508 hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0265 1508 HPSLPSVC ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0265 1508 HPSLPSVC ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0265 1508 Imapi ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0265 1508 Imapi ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0265 1508 ImapiService ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0265 1508 ImapiService ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0281 1508 mmc_2K ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0281 1508 mmc_2K ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0281 1508 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0281 1508 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0281 1508 OMCI ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0281 1508 OMCI ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0281 1508 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0281 1508 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0296 1508 pwd_2K ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0296 1508 pwd_2K ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0296 1508 SemLPT ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0296 1508 SemLPT ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:10.0296 1508 UdfReadr_xp ( UnsignedFile.Multi.Generic ) - skipped by user
09:58:10.0296 1508 UdfReadr_xp ( UnsignedFile.Multi.Generic ) - User select action: Skip
09:58:29.0906 0768 Deinitialize success

Gut so?

Gruß Regent

Hi,
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo

Ich habe alles ausgeschalten, was ich gefunden habe.
Combofix bleibt kurz vor Schluß stehen und arbeitet nicht mehr weiter.

Gruß Regent