Hi,

ich habe seit gestern das Problem, dass sich einige Programme wie z.B. Winrar oder uTorrent nicht mehr starten lassen. Andere widerrum laufen tiptop wie Firefox und Total Commander. Beim Internetexplorer ist es so dass es nur ohne Addons startet, dann versucht er allerdings immer

"res://ieframe.dll/acr_error.htm#microsoft.com,hxxp://www.microsoft.com/germany/windows/internet-explorer/welcome.aspx"

zu laden, aber refresht alle 5 sekunden.
Bei anderen Programmen kommt nur die Fehlermeldung:

"Die Dateien können nicht geöffnet werden - Durch die Internetsicherheitseinstellungen wurde verhindert dass eine oder mehrere Dateien geöffnet werden"

Wenn ich das Benutzerkonnte wechsle funktioniert jedoch alles einwandfrei.
Habe alle hilfeanleitungen zu den Internetsicherheitseinstellungen ausprobiert aber nichts funktioniert.

Hier schonmal eine OTL analyse:

OTL logfile created on: 10/27/2010 11:09:53 AM - Run 1
OTL by OldTimer - Version 3.2.17.1 Folder = C:\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 64.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 78.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 187.67 Gb Total Space | 108.92 Gb Free Space | 58.04% Space Free | Partition Type: NTFS
Drive D: | 30.27 Gb Total Space | 5.45 Gb Free Space | 18.00% Space Free | Partition Type: NTFS

Computer Name: KROXLDYPHIC | User Name: Ali | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Users\Ali\AppData\Local\Temp\Yzm.exe (CJSC Computing Forces)
PRC - C:\Users\Ali\AppData\Local\Temp\Yzl.exe (CJSC Computing Forces)
PRC - C:\Windows\Yconaa.exe (CJSC Computing Forces)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe (Autodesk)
PRC - C:\Program Files\Avira\AntiVir Desktop\avscan.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
PRC - C:\Program Files\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
PRC - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avcenter.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe (ABBYY)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\totalcmd\TOTALCMD.EXE (Ghisler Software GmbH)
PRC - C:\Windows\System32\TPHDEXLG.exe (Lenovo.)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Intel Corporation)
PRC - C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
PRC - C:\Windows\System32\TpShocks.exe (Lenovo.)
PRC - C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe (Conexant Systems, Inc.)
PRC - C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo Group Limited)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
PRC - C:\Windows\System32\IgrsSvcs.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
PRC - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
PRC - C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
PRC - C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe ()


========== Modules (SafeList) ==========

MOD - C:\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation)
MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation)
MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation)
MOD - C:\Program Files\Lenovo\Bluetooth Software\btmmhook.dll (Broadcom Corporation.)


========== Win32 Services (SafeList) ==========

SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (Akamai) -- C:/Program Files/Common Files/Akamai/netsession_win_062a651.dll ()
SRV - (Autodesk Licensing Service) -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe (Autodesk)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (TuneUp.Defrag) -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Hamachi2Svc) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (Microsoft SharePoint Workspace Audit Service) -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (CVPND) -- C:\Program Files\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (SwitchBoard) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (ABBYY.Licensing.FineReader.Professional.10.0) -- C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe (ABBYY)
SRV - (TPHDEXLGSVC) -- C:\Windows\System32\TPHDEXLG.exe (Lenovo.)
SRV - (IAANTMON) Intel(R) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Intel Corporation)
SRV - (Lenovo ReadyComm ConnSvc) -- C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe (Lenovo Group Limited)
SRV - (Lenovo ReadyComm AppSvc) -- C:\Program Files\Lenovo\ReadyComm\AppSvc.exe (Lenovo Group Limited)
SRV - (IGRS) -- C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe (Lenovo Group Limited)
SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation)
SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation)
SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation)
SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation)
SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation)
SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation)
SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation)
SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SRV - (AxInstSV) ActiveX-Installer (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation)
SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation)
SRV - (ReadyComm.DirectRouter) -- C:\windows\System32\IgrsSvcs.exe (Microsoft Corporation)
SRV - (PS_MDP) -- C:\windows\System32\IgrsSvcs.exe (Microsoft Corporation)
SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
SRV - (btwdins) -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV - (Autodesk Network Licensing Service) -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskNetSrv.exe (Autodesk, Inc.)
SRV - (mi-raysat_3dsmax9_32) mental ray 3.5 Satellite (32-bit) -- C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe ()


========== Driver Services (SafeList) ==========

DRV - (USBCCID) -- C:\windows\System32\DRIVERS\RtsUCcid.sys File not found
DRV - (RtsUIR) -- C:\windows\System32\DRIVERS\Rts516xIR.sys File not found
DRV - (RSUSBSTOR) -- C:\windows\System32\Drivers\RtsUStor.sys File not found
DRV - (igfx) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (sptd) -- C:\windows\System32\Drivers\sptd.sys ()
DRV - (mvCmdemo) -- C:\Windows\System32\drivers\mvCmdemo.SYS (MaxiVista)
DRV - (mvvideodemo) -- C:\Windows\System32\drivers\mvvideodemo.sys (MaxiVista)
DRV - (CVPNDRVA) -- C:\Windows\System32\drivers\CVPNDRVA.sys (Cisco Systems, Inc.)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (hamachi) -- C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (ACPIVPC) -- C:\Windows\System32\drivers\AcpiVpc.sys (Lenovo Corporation)
DRV - (KSecPkg) -- C:\windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation)
DRV - (funfrm) -- C:\windows\System32\drivers\funfrm.sys ()
DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics Incorporated)
DRV - (TPDIGIMN) -- C:\windows\System32\DRIVERS\ApsHM86.sys (Lenovo.)
DRV - (Shockprf) -- C:\windows\System32\DRIVERS\Apsx86.sys (Lenovo.)
DRV - (CnxtHdAudService) -- C:\Windows\System32\drivers\CHDRT32.sys (Conexant Systems Inc.)
DRV - (BCM43XX) -- C:\Windows\System32\drivers\BCMWL6.SYS (Broadcom Corporation)
DRV - (iaStor) -- C:\windows\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (Cam5607) -- C:\Windows\System32\drivers\BisonC07.sys (Bison Electronics. Inc. )
DRV - (Bridge0) -- C:\Windows\System32\drivers\wdbridge.sys (Lenovo)
DRV - (wsvd) -- C:\Windows\System32\drivers\wsvd.sys (CyberLink)
DRV - (wdmirror) -- C:\Windows\System32\drivers\WDMirror.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (cmdide) -- C:\windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (adpahci) -- C:\windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.)
DRV - (adp94xx) -- C:\windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.)
DRV - (amdsbs) -- C:\windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.)
DRV - (adpu320) -- C:\windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.)
DRV - (amdsata) -- C:\windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices)
DRV - (arc) -- C:\windows\system32\DRIVERS\arc.sys (Adaptec, Inc.)
DRV - (amdxata) -- C:\windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices)
DRV - (aliide) -- C:\windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor) -- C:\windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) -- C:\windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\windows\system32\DRIVERS\nfrd960.sys (IBM Corporation)
DRV - (LSI_SAS) -- C:\windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation)
DRV - (iaStorV) -- C:\windows\system32\DRIVERS\iaStorV.sys (Intel Corporation)
DRV - (MegaSR) -- C:\windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.)
DRV - (LSI_SCSI) -- C:\windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation)
DRV - (LSI_FC) -- C:\windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation)
DRV - (LSI_SAS2) -- C:\windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation)
DRV - (iirsp) -- C:\windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (megasas) -- C:\windows\system32\DRIVERS\megasas.sys (LSI Corporation)
DRV - (hwpolicy) -- C:\windows\System32\drivers\hwpolicy.sys (Microsoft Corporation)
DRV - (elxstor) -- C:\windows\system32\DRIVERS\elxstor.sys (Emulex)
DRV - (aic78xx) -- C:\windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.)
DRV - (HpSAMD) -- C:\windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company)
DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation)
DRV - (vsmraid) -- C:\windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (vhdmp) -- C:\windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation)
DRV - (vdrvroot) -- C:\windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation)
DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation)
DRV - (viaide) -- C:\windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.)
DRV - (ql2300) -- C:\windows\system32\DRIVERS\ql2300.sys (QLogic Corporation)
DRV - (rdyboost) -- C:\windows\System32\drivers\rdyboost.sys (Microsoft Corporation)
DRV - (ql40xx) -- C:\windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation)
DRV - (SiSRaid4) -- C:\windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems)
DRV - (pcw) -- C:\windows\System32\drivers\pcw.sys (Microsoft Corporation)
DRV - (SiSRaid2) -- C:\windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.)
DRV - (stexstor) -- C:\windows\system32\DRIVERS\stexstor.sys (Promise Technology)
DRV - (CNG) -- C:\windows\System32\Drivers\cng.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.)
DRV - (rdpbus) -- C:\windows\system32\DRIVERS\rdpbus.sys (Microsoft Corporation)
DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation)
DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation)
DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
DRV - (vwififlt) -- C:\Windows\System32\drivers\vwififlt.sys (Microsoft Corporation)
DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation)
DRV - (1394ohci) -- C:\windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation)
DRV - (UmPass) -- C:\windows\system32\DRIVERS\umpass.sys (Microsoft Corporation)
DRV - (mshidkmdf) -- C:\windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV - (MTConfig) -- C:\windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation)
DRV - (acpials) -- C:\Windows\System32\drivers\acpials.sys (Microsoft Corporation)
DRV - (AppID) -- C:\windows\system32\drivers\appid.sys (Microsoft Corporation)
DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation)
DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation)
DRV - (AcpiPmi) -- C:\windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation)
DRV - (AmdPPM) -- C:\windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation)
DRV - (hcw85cir) -- C:\windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BrUsbMdm) -- C:\windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) -- C:\windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrFiltLo) -- C:\windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp) -- C:\windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.)
DRV - (netw5v32) Intel(R) -- C:\Windows\System32\drivers\netw5v32.sys (Intel Corporation)
DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (ebdrv) -- C:\windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation)
DRV - (b06bdrv) -- C:\windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation)
DRV - (IntcHdmiAddService) Intel(R) -- C:\Windows\System32\drivers\IntcHdmi.sys (Intel(R) Corporation)
DRV - (btwaudio) -- C:\Windows\System32\drivers\btwaudio.sys (Broadcom Corporation.)
DRV - (btwavdt) -- C:\Windows\System32\drivers\btwavdt.sys (Broadcom Corporation.)
DRV - (btwrchid) -- C:\Windows\System32\drivers\btwrchid.sys (Broadcom Corporation.)
DRV - (k57nd60x) Broadcom NetLink (TM) -- C:\Windows\System32\drivers\k57nd60x.sys (Broadcom Corporation)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (btwl2cap) -- C:\Windows\System32\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV - (DNE) -- C:\Windows\System32\drivers\dne2000.sys (Deterministic Networks, Inc.)
DRV - (WimFltr) -- C:\Windows\System32\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (CVirtA) -- C:\Windows\System32\drivers\CVirtA.sys (Cisco Systems, Inc.)
DRV - (StarOpen) -- C:\windows\System32\drivers\StarOpen.sys ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/ [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo.live.com/
IE - HKLM\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsof1.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "QIP Search"
FF - prefs.js..browser.search.selectedEngine: "Torrent Finder"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.ch"
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: {1280606b-2510-4fe0-97ef-9b5a22eafe30}:0.6.9
FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.3
FF - prefs.js..extensions.enabledItems: {791DB184-BFBA-11DA-9C61-0638DF403F48}:0.8.2
FF - prefs.js..extensions.enabledItems: {AE93811A-5C9A-4d34-8462-F7B864FC4696}:3.73
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1
FF - prefs.js..extensions.enabledItems: {ca8b7b3d-b6e6-438f-b935-601b3de48d66}:1.1.6
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: fbdislike@doweb.fr:1.2.1
FF - prefs.js..extensions.enabledItems: {01A8CA0A-4C96-465b-A49B-65C46FAD54F9}:6.0
FF - prefs.js..extensions.enabledItems: chromifox@altmusictv.com:3.6.5
FF - prefs.js..network.proxy.type: 0


FF - HKLM\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2010/09/28 00:05:31 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/27 10:16:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/27 10:16:11 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010/10/27 07:16:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins

[2010/08/17 20:53:10 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\mozilla\Extensions
[2010/08/17 20:53:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ali\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010/10/26 23:33:38 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions
[2010/10/13 01:00:08 | 000,000,000 | ---D | M] (Session Manager) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}
[2010/10/26 23:33:23 | 000,000,000 | ---D | M] (FlashGot) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2010/08/17 21:01:06 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/10/26 23:33:22 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010/08/17 21:01:09 | 000,000,000 | ---D | M] (Page Title Eraser) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{791DB184-BFBA-11DA-9C61-0638DF403F48}
[2010/09/02 22:33:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}
[2010/10/17 14:41:35 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/08/17 21:01:11 | 000,000,000 | ---D | M] (Firefox Throttle) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{ca8b7b3d-b6e6-438f-b935-601b3de48d66}
[2010/08/19 17:21:16 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/08/17 21:01:15 | 000,000,000 | ---D | M] (Torbutton) -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}
[2010/08/17 21:00:59 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\chromifox@altmusictv.com
[2010/08/22 22:55:55 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\fbdislike@doweb.fr
[2010/08/17 21:00:59 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\moveplayer@movenetworks.com
[2010/08/17 21:01:04 | 000,000,000 | ---D | M] -- C:\Users\Ali\AppData\Roaming\mozilla\Firefox\Profiles\caxj5e9x.default\extensions\SkipScreen@SkipScreen
[2009/02/22 18:12:18 | 000,002,321 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Mozilla\FireFox\Profiles\caxj5e9x.default\searchplugins\dictcc.xml
[2009/04/05 01:07:40 | 000,002,395 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Mozilla\FireFox\Profiles\caxj5e9x.default\searchplugins\encyclopedia-dramatica-en.xml
[2010/04/26 17:58:36 | 000,003,171 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Mozilla\FireFox\Profiles\caxj5e9x.default\searchplugins\kinoto.xml
[2010/10/26 14:27:44 | 000,006,472 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Mozilla\FireFox\Profiles\caxj5e9x.default\searchplugins\torrent-finder.xml
[2009/02/21 22:14:42 | 000,002,006 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Mozilla\FireFox\Profiles\caxj5e9x.default\searchplugins\urban-dictionary.xml
[2009/03/17 19:29:22 | 000,001,334 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Mozilla\FireFox\Profiles\caxj5e9x.default\searchplugins\wiktionary-de.xml
[2009/02/25 00:04:34 | 000,002,109 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Mozilla\FireFox\Profiles\caxj5e9x.default\searchplugins\youtube-videosuche.xml
[2010/10/27 10:16:11 | 000,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2010/08/17 22:34:11 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/08/22 01:44:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/03/27 18:06:04 | 000,067,032 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npContribute.dll
[2010/08/22 01:43:51 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/07/12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2010/10/12 22:24:52 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010/10/12 22:24:52 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2010/10/12 22:24:52 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2010/10/12 22:24:52 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2010/10/12 22:24:52 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsof1.dll (Conduit Ltd.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsof1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Program Files\softonic-de3\tbsof1.dll (Conduit Ltd.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [InitTopR] C:\Program Files\MuM ProR 2011\VZTopR.exe (Mensch und Maschine Zuberbühler)
O4 - HKLM..\Run: [TpShocks] C:\Windows\System32\TpShocks.exe (Lenovo.)
O4 - HKCU..\Run: [Metropolis] C:\windows\System32\sshnas21.DLL (CJSC Computing Forces)
O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
O4 - HKCU..\Run: [U36VRSFLG6] C:\Users\Ali\AppData\Local\Temp\Yzl.exe (CJSC Computing Forces)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 [2010/09/20 17:28:39 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 [2010/09/20 17:28:39 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 [2010/09/20 17:28:39 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 [2010/09/20 17:28:39 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 [2010/09/20 17:28:39 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 [2010/09/20 17:28:39 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 [2010/10/26 23:39:17 | 000,000,000 | ---D | M]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: .psf ([]* in Computer)
O15 - HKCU\..Trusted Domains: .rar ([]* in Computer)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 147.87.140.129
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - c:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (acaptuser32.dll) - C:\windows\System32\acaptuser32.dll (Adobe Systems, Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\windows\System32\igfxdev.dll (Intel Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{35e0e70d-ab02-11df-8733-00269e44b22a}\Shell - "" = AutoRun
O33 - MountPoints2\{35e0e70d-ab02-11df-8733-00269e44b22a}\Shell\AutoRun\command - "" = F:\Setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/10/27 10:49:38 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CPFilters.dll
[2010/10/27 10:49:38 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdri.dll
[2010/10/27 10:49:38 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MSNP.ax
[2010/10/27 10:49:38 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mpg2splt.ax
[2010/10/27 10:49:35 | 000,026,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\Diskdump.sys
[2010/10/26 17:08:11 | 000,258,048 | ---- | C] (CJSC Computing Forces) -- C:\windows\Yconaa.exe
[2010/10/26 17:07:58 | 000,303,104 | ---- | C] (CJSC Computing Forces) -- C:\windows\System32\sshnas21.dll
[2010/10/21 09:10:02 | 000,000,000 | ---D | C] -- C:\Users\Ali\Documents\My Games
[2010/10/21 09:10:02 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Local\FalloutNV
[2010/10/21 09:09:18 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dcsx_42.dll
[2010/10/21 09:09:18 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_42.dll
[2010/10/21 09:09:18 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAudio2_5.dll
[2010/10/21 09:09:18 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine3_5.dll
[2010/10/21 09:09:17 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_42.dll
[2010/10/21 09:09:17 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx11_42.dll
[2010/10/21 09:09:12 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAPOFX1_3.dll
[2010/10/21 09:09:10 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAudio2_3.dll
[2010/10/21 09:09:10 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAPOFX1_2.dll
[2010/10/21 09:09:09 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAudio2_2.dll
[2010/10/21 09:09:09 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine3_3.dll
[2010/10/21 09:09:09 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAPOFX1_1.dll
[2010/10/21 09:09:09 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\X3DAudio1_5.dll
[2010/10/21 09:09:08 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine3_2.dll
[2010/10/21 08:59:21 | 000,000,000 | ---D | C] -- C:\Spiele
[2010/10/20 11:17:44 | 000,000,000 | ---D | C] -- C:\windows\Sun
[2010/10/18 13:43:53 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/10/18 11:10:23 | 000,046,928 | R--- | C] (Adobe Systems Inc) -- C:\windows\System32\AdobePDF.dll
[2010/10/18 11:10:23 | 000,022,872 | R--- | C] (Adobe Systems Inc.) -- C:\windows\System32\AdobePDFUI.dll
[2010/10/18 11:08:44 | 000,111,992 | ---- | C] (Adobe Systems, Inc.) -- C:\windows\System32\acaptuser32.dll
[2010/10/17 14:47:08 | 000,013,696 | ---- | C] (MaxiVista) -- C:\windows\System32\drivers\mvCmdemo.SYS
[2010/10/17 14:46:29 | 000,025,728 | ---- | C] (Maxivsta) -- C:\windows\System32\mvvideodemo.dll
[2010/10/17 14:46:29 | 000,012,544 | ---- | C] (MaxiVista) -- C:\windows\System32\drivers\mvvideodemo.sys
[2010/10/17 14:46:27 | 000,000,000 | ---D | C] -- C:\Program Files\MaxiVista
[2010/10/13 16:32:02 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\MuMZ
[2010/10/13 16:21:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2010/10/13 16:13:06 | 000,000,000 | ---D | C] -- C:\Program Files\MuM ProR 2011
[2010/10/13 15:52:09 | 000,000,000 | ---D | C] -- C:\Program Files\VZTUTEXT
[2010/10/13 13:11:30 | 000,000,000 | ---D | C] -- C:\windows\System32\x64
[2010/10/13 13:03:12 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\ks.sys
[2010/10/13 13:01:57 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\psisdecd.dll
[2010/10/13 13:01:54 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc.dll
[2010/10/13 13:01:54 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_isv.dll
[2010/10/13 13:01:54 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_isv.exe
[2010/10/13 13:01:54 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate.exe
[2010/10/13 13:01:54 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_ssp.exe
[2010/10/13 13:01:54 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\RMActivate_ssp_isv.exe
[2010/10/13 13:01:54 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_ssp_isv.dll
[2010/10/13 13:01:54 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\secproc_ssp.dll
[2010/10/13 10:55:08 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmploc.DLL
[2010/10/13 10:55:03 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\StructuredQuery.dll
[2010/10/13 10:54:57 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mstime.dll
[2010/10/13 10:54:57 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll
[2010/10/13 10:54:57 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iedkcs32.dll
[2010/10/13 10:54:57 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\licmgr10.dll
[2010/10/13 10:54:56 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb
[2010/10/13 10:54:56 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\html.iec
[2010/10/13 10:54:56 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iepeers.dll
[2010/10/13 10:54:56 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll
[2010/10/13 10:54:56 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeedsbs.dll
[2010/10/13 10:54:56 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll
[2010/10/13 10:54:56 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeedssync.exe
[2010/10/13 10:54:40 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc40.dll
[2010/10/13 10:54:40 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfc40u.dll
[2010/10/13 10:54:40 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\t2embed.dll
[2010/10/13 10:54:14 | 002,327,552 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys
[2010/10/13 10:54:13 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmpmde.dll
[2010/10/13 10:49:23 | 000,000,000 | ---D | C] -- C:\Users\Ali\dwhelper
[2010/10/13 01:09:42 | 000,000,000 | ---D | C] -- C:\Program Files\UltraISO
[2010/10/13 01:09:42 | 000,000,000 | ---D | C] -- C:\Users\Ali\Documents\My ISO Files
[2010/10/13 01:09:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EZB Systems
[2010/10/11 12:27:00 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\Lenovo
[2010/10/11 12:16:45 | 000,000,000 | ---D | C] -- C:\Users\Ali\Documents\Adobe Scripts
[2010/10/10 19:36:01 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_42.dll
[2010/10/10 19:35:54 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp Detect
[2010/10/10 19:35:31 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\Winamp
[2010/10/10 19:35:31 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp
[2010/10/06 20:13:23 | 000,000,000 | ---D | C] -- C:\windows\pss
[2010/10/06 16:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2010/10/06 15:45:04 | 000,000,000 | ---D | C] -- C:\Users\Ali\Documents\Autodesk Revit Architecture 2011
[2010/10/06 15:41:11 | 000,000,000 | ---D | C] -- C:\Users\Ali\Documents\Visual Studio 2008
[2010/10/06 15:38:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SDKs
[2010/10/06 15:38:07 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 9.0
[2010/10/06 15:37:45 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_41.dll
[2010/10/06 15:37:45 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_41.dll
[2010/10/06 15:37:45 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAudio2_4.dll
[2010/10/06 15:37:45 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_41.dll
[2010/10/06 15:37:44 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_40.dll
[2010/10/06 15:37:44 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_40.dll
[2010/10/06 15:37:44 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine3_4.dll
[2010/10/06 15:37:44 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\X3DAudio1_6.dll
[2010/10/06 15:37:43 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_39.dll
[2010/10/06 15:37:43 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_39.dll
[2010/10/06 15:37:42 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_39.dll
[2010/10/06 15:37:42 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_38.dll
[2010/10/06 15:37:42 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAudio2_1.dll
[2010/10/06 15:37:42 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine3_1.dll
[2010/10/06 15:37:42 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAPOFX1_0.dll
[2010/10/06 15:37:42 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\X3DAudio1_4.dll
[2010/10/06 15:37:41 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_38.dll
[2010/10/06 15:37:41 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_37.dll
[2010/10/06 15:37:41 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\XAudio2_0.dll
[2010/10/06 15:37:41 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_38.dll
[2010/10/06 15:37:41 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_37.dll
[2010/10/06 15:37:41 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine3_0.dll
[2010/10/06 15:37:41 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\X3DAudio1_3.dll
[2010/10/06 15:37:40 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DX9_37.dll
[2010/10/06 15:37:40 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_36.dll
[2010/10/06 15:37:40 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_36.dll
[2010/10/06 15:37:40 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_10.dll
[2010/10/06 15:37:39 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_36.dll
[2010/10/06 15:37:39 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_35.dll
[2010/10/06 15:37:39 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_35.dll
[2010/10/06 15:37:39 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_9.dll
[2010/10/06 15:37:38 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_34.dll
[2010/10/06 15:37:38 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_34.dll
[2010/10/06 15:37:38 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_34.dll
[2010/10/06 15:37:38 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_8.dll
[2010/10/06 15:37:38 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\X3DAudio1_2.dll
[2010/10/06 15:37:37 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_33.dll
[2010/10/06 15:37:37 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\D3DCompiler_33.dll
[2010/10/06 15:37:37 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10_33.dll
[2010/10/06 15:37:37 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_7.dll
[2010/10/06 15:37:37 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xinput1_3.dll
[2010/10/06 15:37:36 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx10.dll
[2010/10/06 15:37:36 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_6.dll
[2010/10/06 15:37:36 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_5.dll
[2010/10/06 15:37:35 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_31.dll
[2010/10/06 15:37:35 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_4.dll
[2010/10/06 15:37:35 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_3.dll
[2010/10/06 15:37:35 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_2.dll
[2010/10/06 15:37:35 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_1.dll
[2010/10/06 15:37:35 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xinput1_2.dll
[2010/10/06 15:37:35 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xinput1_1.dll
[2010/10/06 15:37:35 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\x3daudio1_1.dll
[2010/10/06 15:37:29 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_30.dll
[2010/10/06 15:37:29 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\xactengine2_0.dll
[2010/10/06 15:37:29 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\x3daudio1_0.dll
[2010/10/06 15:37:28 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_28.dll
[2010/10/06 15:37:28 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_27.dll
[2010/10/06 15:37:27 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_25.dll
[2010/10/06 15:37:27 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_24.dll
[2010/10/06 15:13:13 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\Autodesk
[2010/10/06 13:43:45 | 000,000,000 | ---D | C] -- C:\Users\Ali\Application Data
[2010/10/02 12:57:10 | 000,000,000 | ---D | C] -- C:\Users\Ali\Documents\My Art
[2010/10/02 12:57:09 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\Samsung
[2010/10/01 17:11:51 | 000,000,000 | ---D | C] -- C:\Users\Ali\Documents\OneNote-Notizbücher
[2010/09/30 19:00:04 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\Adobe Mini Bridge CS5
[2010/09/30 19:00:03 | 000,000,000 | ---D | C] -- C:\Users\Ali\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010/09/29 12:15:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\McNeel Shared
[2010/09/29 12:15:13 | 000,000,000 | ---D | C] -- C:\Program Files\Rhinoceros 4.0
[2010/09/29 12:15:13 | 000,000,000 | ---D | C] -- C:\ProgramData\McNeel
[2010/09/29 12:12:32 | 000,000,000 | ---D | C] -- C:\windows\XSxS
[2010/09/29 12:12:32 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2010/09/29 12:11:30 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzres.dll
[2010/09/28 00:18:02 | 000,000,000 | ---D | C] -- C:\ProgramData\ALM
[2010/09/28 00:09:49 | 000,000,000 | ---D | C] -- C:\Users\Ali\Adobe Flash Builder 4
[2010/09/28 00:06:28 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Adobe
[2010/09/28 00:03:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PX Storage Engine
[2010/09/28 00:03:58 | 000,000,000 | ---D | C] -- C:\Program Files\My Company Name
[2010/09/27 23:19:55 | 000,000,000 | ---D | C] -- C:\Users\Ali\Desktop\Adobe CS5 Master Collection
[2010/09/27 21:42:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Akamai
[2010/08/25 18:59:08 | 000,004,096 | ---- | C] ( ) -- C:\windows\System32\IGFXDEVLib.dll
[1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/10/27 11:05:33 | 000,000,230 | -H-- | M] () -- C:\windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/10/27 11:05:05 | 000,009,920 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/10/27 11:05:05 | 000,009,920 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/10/27 11:05:04 | 000,000,242 | -H-- | M] () -- C:\windows\tasks\{62C40AA6-4406-467a-A5A5-DFDF1B559B7A}.job
[2010/10/27 11:00:04 | 000,000,286 | -H-- | M] () -- C:\windows\tasks\Acrobat Update.job
[2010/10/27 10:55:45 | 000,000,278 | -H-- | M] () -- C:\windows\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[2010/10/27 10:55:12 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2010/10/27 10:55:05 | 2309,431,296 | -HS- | M] () -- C:\hiberfil.sys
[2010/10/27 10:16:14 | 000,001,885 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/10/27 10:14:10 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010/10/27 10:14:10 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/10/27 10:10:08 | 000,000,270 | ---- | M] () -- C:\windows\tasks\Check Updates for Windows Live Toolbar.job
[2010/10/27 07:16:41 | 000,000,000 | ---- | M] () -- C:\windows\nsreg.dat
[2010/10/27 07:13:14 | 000,001,512 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MuM ProR 2011 Installer.lnk
[2010/10/27 07:05:08 | 025,039,343 | ---- | M] () -- C:\Users\Ali\Documents\Firefox 3.6.10 (de) - 2010-10-27.pcv
[2010/10/27 07:02:28 | 000,000,913 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2010/10/26 17:26:09 | 000,206,502 | ---- | M] () -- C:\Users\Ali\Documents\radua1_uebung3.xps
[2010/10/26 17:08:03 | 000,258,048 | ---- | M] (CJSC Computing Forces) -- C:\windows\Yconaa.exe
[2010/10/26 17:07:58 | 000,303,104 | ---- | M] (CJSC Computing Forces) -- C:\windows\System32\sshnas21.dll
[2010/10/25 18:32:48 | 000,654,166 | ---- | M] () -- C:\windows\System32\perfh007.dat
[2010/10/25 18:32:48 | 000,616,008 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2010/10/25 18:32:48 | 000,130,006 | ---- | M] () -- C:\windows\System32\perfc007.dat
[2010/10/25 18:32:48 | 000,106,388 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2010/10/23 18:20:48 | 000,000,132 | ---- | M] () -- C:\Users\Ali\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/10/19 12:38:50 | 000,000,000 | ---- | M] () -- C:\ProgramData\LauncherAccess.dt
[2010/10/19 11:41:44 | 000,222,080 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\MpSigStub.exe
[2010/10/18 16:11:00 | 000,026,619 | ---- | M] () -- C:\Users\Ali\Documents\indie.m3u
[2010/10/18 14:44:34 | 003,787,536 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2010/10/18 11:10:41 | 000,001,997 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Acrobat 9 Pro Extended.lnk
[2010/10/17 14:50:35 | 000,000,001 | ---- | M] () -- C:\windows\System32\OutN64proc64.dll
[2010/10/17 14:50:35 | 000,000,001 | ---- | M] () -- C:\windows\System32\InN64proc64.dll
[2010/10/17 14:46:43 | 000,000,943 | ---- | M] () -- C:\Users\Ali\Desktop\MaxiVista Demo Server.lnk
[2010/10/13 16:35:00 | 000,001,347 | ---- | M] () -- C:\Users\Ali\Desktop\MuM VideoTraining.lnk
[2010/10/13 16:20:04 | 000,002,194 | ---- | M] () -- C:\Users\Public\Desktop\Autodesk Revit Architecture 2011.lnk
[2010/10/13 01:15:06 | 2015,494,144 | ---- | M] () -- C:\Users\Ali\Documents\lino.iso
[2010/10/08 16:01:33 | 000,014,655 | ---- | M] () -- C:\Users\Ali\Documents\Geschwister Mächler.docx
[2010/10/08 16:01:33 | 000,000,162 | -H-- | M] () -- C:\Users\Ali\Documents\~$schwister Mächler.docx
[2010/10/07 13:03:53 | 000,002,235 | ---- | M] () -- C:\Users\Ali\Desktop\OneKey Recovery.lnk
[2010/10/06 16:15:26 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/04 14:04:59 | 000,001,456 | ---- | M] () -- C:\Users\Ali\AppData\Local\Adobe Save for Web 12.0 Prefs
[2010/10/01 09:26:30 | 000,173,965 | ---- | M] () -- C:\Users\Ali\Documents\100930_Stundenplan_HS10_V01.pdf
[2010/09/29 12:15:35 | 000,000,400 | ---- | M] () -- C:\windows\g_lfolqn307.ini
[2010/09/29 12:15:35 | 000,000,400 | ---- | M] () -- C:\windows\System32\drivers\edxhxw_222.set
[2010/09/29 12:15:35 | 000,000,400 | ---- | M] () -- C:\windows\System32\drivers\bfrpsej720.dat
[2010/09/29 12:15:33 | 000,001,150 | ---- | M] () -- C:\Users\Public\Desktop\Rhinoceros 4.0 Testversion.lnk
[2010/09/27 13:41:47 | 000,001,662 | ---- | M] () -- C:\Users\Ali\Desktop\sharepoint.bfh.ch@SSL - Verknüpfung.lnk
[1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/27 10:16:14 | 000,001,885 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/10/27 10:14:10 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010/10/27 10:14:10 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010/10/27 07:16:41 | 000,000,000 | ---- | C] () -- C:\windows\nsreg.dat
[2010/10/27 07:04:33 | 025,039,343 | ---- | C] () -- C:\Users\Ali\Documents\Firefox 3.6.10 (de) - 2010-10-27.pcv
[2010/10/27 07:02:28 | 000,000,913 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2010/10/26 17:26:00 | 000,206,502 | ---- | C] () -- C:\Users\Ali\Documents\radua1_uebung3.xps
[2010/10/26 17:08:45 | 000,000,278 | -H-- | C] () -- C:\windows\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[2010/10/26 17:08:12 | 000,000,230 | -H-- | C] () -- C:\windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/10/26 17:08:06 | 000,000,242 | -H-- | C] () -- C:\windows\tasks\{62C40AA6-4406-467a-A5A5-DFDF1B559B7A}.job
[2010/10/18 16:11:00 | 000,026,619 | ---- | C] () -- C:\Users\Ali\Documents\indie.m3u
[2010/10/18 10:51:51 | 000,001,997 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Acrobat 9 Pro Extended.lnk
[2010/10/17 14:50:35 | 000,000,001 | ---- | C] () -- C:\windows\System32\OutN64proc64.dll
[2010/10/17 14:50:35 | 000,000,001 | ---- | C] () -- C:\windows\System32\InN64proc64.dll
[2010/10/17 14:46:43 | 000,000,943 | ---- | C] () -- C:\Users\Ali\Desktop\MaxiVista Demo Server.lnk
[2010/10/13 16:33:25 | 000,001,347 | ---- | C] () -- C:\Users\Ali\Desktop\MuM VideoTraining.lnk
[2010/10/13 16:20:04 | 000,002,194 | ---- | C] () -- C:\Users\Public\Desktop\Autodesk Revit Architecture 2011.lnk
[2010/10/13 16:00:11 | 000,001,512 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MuM ProR 2011 Installer.lnk
[2010/10/13 01:13:10 | 2015,494,144 | ---- | C] () -- C:\Users\Ali\Documents\lino.iso
[2010/10/08 16:01:33 | 000,000,162 | -H-- | C] () -- C:\Users\Ali\Documents\~$schwister Mächler.docx
[2010/10/08 16:01:32 | 000,014,655 | ---- | C] () -- C:\Users\Ali\Documents\Geschwister Mächler.docx
[2010/10/06 16:15:26 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/04 14:04:59 | 000,001,456 | ---- | C] () -- C:\Users\Ali\AppData\Local\Adobe Save for Web 12.0 Prefs
[2010/10/04 12:26:10 | 000,000,132 | ---- | C] () -- C:\Users\Ali\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/10/01 09:26:30 | 000,173,965 | ---- | C] () -- C:\Users\Ali\Documents\100930_Stundenplan_HS10_V01.pdf
[2010/09/29 20:00:52 | 000,386,923 | ---- | C] () -- C:\windows\KMSAct.exe
[2010/09/29 12:15:35 | 000,000,400 | ---- | C] () -- C:\windows\g_lfolqn307.ini
[2010/09/29 12:15:35 | 000,000,400 | ---- | C] () -- C:\windows\System32\drivers\edxhxw_222.set
[2010/09/29 12:15:35 | 000,000,400 | ---- | C] () -- C:\windows\System32\drivers\bfrpsej720.dat
[2010/09/29 12:15:33 | 000,001,150 | ---- | C] () -- C:\Users\Public\Desktop\Rhinoceros 4.0 Testversion.lnk
[2010/09/27 13:41:47 | 000,001,662 | ---- | C] () -- C:\Users\Ali\Desktop\sharepoint.bfh.ch@SSL - Verknüpfung.lnk
[2010/08/21 23:14:13 | 001,708,544 | ---- | C] () -- C:\windows\System32\libqt4intf.dll
[2010/08/18 21:51:16 | 000,691,696 | ---- | C] () -- C:\windows\System32\drivers\sptd.sys
[2010/08/18 00:02:58 | 000,165,376 | ---- | C] () -- C:\windows\System32\unrar.dll
[2010/08/18 00:02:57 | 000,000,038 | ---- | C] () -- C:\windows\avisplitter.ini
[2010/08/18 00:02:54 | 000,790,528 | ---- | C] () -- C:\windows\System32\xvidcore.dll
[2010/08/18 00:02:53 | 000,134,144 | ---- | C] () -- C:\windows\System32\xvidvfw.dll
[2010/08/18 00:02:53 | 000,108,032 | ---- | C] () -- C:\windows\System32\ff_vfw.dll
[2010/08/17 22:59:06 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2010/08/17 22:56:23 | 000,005,632 | ---- | C] () -- C:\windows\System32\drivers\StarOpen.sys
[2010/08/17 22:12:22 | 000,000,088 | ---- | C] () -- C:\ProgramData\profile.xml
[2010/08/17 21:10:38 | 000,000,017 | ---- | C] () -- C:\Users\Ali\AppData\Local\resmon.resmoncfg
[2010/04/21 17:22:50 | 000,208,896 | ---- | C] () -- C:\windows\System32\iglhsip32.dll
[2010/04/21 17:22:50 | 000,143,360 | ---- | C] () -- C:\windows\System32\iglhcp32.dll
[2010/03/23 13:26:48 | 000,201,512 | ---- | C] () -- C:\windows\System32\vpnapi.dll
[2009/10/14 23:23:52 | 000,016,648 | R--- | C] () -- C:\windows\System32\LogAPI.dll
[2009/10/14 23:21:32 | 000,057,344 | ---- | C] () -- C:\windows\AsfHelper.dll
[2009/10/14 23:21:32 | 000,054,800 | ---- | C] () -- C:\windows\System32\drivers\funfrm.sys
[2009/10/14 23:21:22 | 001,410,312 | ---- | C] () -- C:\windows\System32\IcnOvrly.dll
[2009/10/14 23:21:22 | 001,171,456 | ---- | C] () -- C:\windows\System32\PicNotify.dll
[2009/10/14 23:21:22 | 000,660,744 | ---- | C] () -- C:\windows\System32\EncIcons.dll
[2009/10/14 23:21:22 | 000,513,288 | ---- | C] () -- C:\windows\System32\SimpleExt.dll
[2009/10/14 23:21:21 | 002,110,728 | ---- | C] () -- C:\windows\System32\Apblend.dll
[2009/10/14 23:21:08 | 001,044,480 | ---- | C] () -- C:\windows\System32\3DImageRenderer.dll
[2009/10/14 22:52:33 | 000,015,190 | ---- | C] () -- C:\windows\M3000Twn.ini
[2009/10/14 22:47:43 | 000,140,288 | ---- | C] () -- C:\windows\System32\igfxtvcx.dll
[2009/09/18 12:47:14 | 000,004,608 | ---- | C] () -- C:\windows\System32\HdmiCoin.dll
[2009/07/14 01:51:43 | 000,073,728 | ---- | C] () -- C:\windows\System32\BthpanContextHandler.dll
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\windows\System32\BWContextHandler.dll

< End of report >

OTL Extras logfile created on: 10/27/2010 11:09:53 AM - Run 1
OTL by OldTimer - Version 3.2.17.1 Folder = C:\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 64.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 78.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 187.67 Gb Total Space | 108.92 Gb Free Space | 58.04% Space Free | Partition Type: NTFS
Drive D: | 30.27 Gb Total Space | 5.45 Gb Free Space | 18.00% Space Free | Partition Type: NTFS

Computer Name: KROXLDYPHIC | User Name: Ali | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1 -- [2010/09/20 17:28:39 | 000,000,000 | ---D | M]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1 -- [2010/09/20 17:28:39 | 000,000,000 | ---D | M]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1 -- [2010/09/20 17:28:39 | 000,000,000 | ---D | M]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1 -- [2010/09/20 17:28:39 | 000,000,000 | ---D | M]

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}" = Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{14866AAD-1F23-39AC-A62B-7091ED1ADE64}" = Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{17542DBF-E17C-4562-BC4D-FA3EF3076C45}" = Lenovo ReadyComm 5
"{1BBD8D70-721A-41AD-AC8F-7308A0C8FA92}" = Adobe Creative Suite 5 Master Collection
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{211654D1-F7F8-4FF6-B008-354354354365}_is1" = MaxiVista Demo Server v4.0.12
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 21
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{342F5437-C87D-4BB5-89B9-B23E16C6A395}" = Microsoft Visual C++ 8.0 Support DLLs
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Backburner
"{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AF99FCA-1D0C-4D5A-9BFE-0D4376A52B23}" = Autodesk Revit Architecture 2011
"{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}" = Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729
"{4BB1DCED-84D3-47F9-B718-5947E904593E}" = Lenovo EasyCamera
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{56B4002F-671C-49F4-984C-C760FE3806B5}" = Microsoft SQL Server VSS Writer
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63d32065-045d-4328-a459-6d4c56540208}" = Microsoft Office Language Pack 2007 – Deutsch (für Office Outlook 2007 mit Business Contact Manager SP1)
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76C66170-C538-4E77-B54D-48E136B5B533}" = Lenovo ReadyComm 5.0 Service
"{76DAEC83-AF7B-333C-8A53-83D7C7D39199}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU
"{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}" = 3dsmax ancillary install
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{86501894-E722-4385-A792-B7C2F28FAE7B}" = NetSpeedMonitor 2.5.4.0 x86
"{8991E763-21F5-4DEA-A938-5D9D77DCB488}" = Broadcom 802.11 Wireless Driver
"{8A74DEFD-A224-49CC-AB80-4E88BC730125}" = LogMeIn Hamachi
"{8E87B944-4815-3C5E-947F-5035C9F64362}" = Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0017-0407-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-0100-0407-0000-0000000FF1CE}" = Microsoft Office O MUI (German) 2007
"{90120000-0101-0407-0000-0000000FF1CE}" = Microsoft Office X MUI (German) 2007
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{90A40409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95E1E426-EE9E-4F68-8F02-58A5A09B38F3}" = Rhinoceros 4.0 Testversion
"{9600B88C-BE14-4BEA-A529-F5F312900BA3}" = Samsung PC Studio 3
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{96F70DF8-160F-4F9C-9B9E-2A9B439B4EB9}" = Broadcom Gigabit NetLink Controller
"{975951E7-14D0-49AF-A630-89680D12D7F6}" = Autodesk Material Library 2011 Medium Image library
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A346205-EA92-4406-B1AB-50379DA3F057}" = Autodesk DWF Viewer 7
"{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = Lenovo Bluetooth with Enhanced Data Rate Software
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{ab3ef3f3-02df-47fe-ad89-26004ae29462}" = Module linguistique de Microsoft Office 2007 – French/Français (pour Office Outlook 2007 avec le Gestionnaire de contacts professionnels SP1)
"{AC76BA86-1033-F400-7761-000000000004}" = Adobe Acrobat 9 Pro Extended - English, Français, Deutsch
"{AC76BA86-1033-F400-7761-000000000004}_920" = Adobe Acrobat 9.2.0 - CPSID_50026
"{AC76BA86-1033-F400-7761-000000000004}{AC76BA86-1033-F400-7761-000000000004}" = Adobe Acrobat 9 Pro Extended - English, Français, Deutsch
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.0 - Deutsch
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}" = Energy Management
"{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}" = Cisco Systems VPN Client 5.0.07.0290
"{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}" = Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729
"{BC41C09D-FAA9-4346-9FE6-1E0017BC551A}" = Adobe Flash Player 10 Plugin
"{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}" = Microsoft SQL Server Native Client
"{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio 3
"{C6876FE6-A314-4628-B0D7-F3EE5E35C4B4}" = Windows Live Toolbar
"{CD1E078C-A6B9-47DA-B035-6365C85C7832}" = Autodesk Material Library 2011 Base Image library
"{D0879A9B-4BDF-4B75-A1FF-59809798806A}" = Sikuli
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D31B2B56-0657-4ACF-827C-09A934754A90}" = MuM ProR 2011
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E96D4088-AAC5-437F-9E39-EC0E387897B4}" = Autodesk 3ds Max 9 32-bit
"{F1000000-0001-0000-0000-074957833700}" = ABBYY FineReader 10 Professional Edition
"{F493761C-E465-4B9E-9FC1-A312F161DE0A}" = Active Protection System
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Akamai" = Akamai NetSession Interface
"Autodesk Revit Architecture 2011" = Autodesk Revit Architecture 2011
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"CNXT_AUDIO_HDA" = Conexant HD Audio
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"EasyCapture4.0" = EasyCapture
"FBX Plugin 2006.08 for Max 9.0" = FBX Plugin 2006.08 for Max 9.0
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
"JDownloader" = JDownloader
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.3.0 (Full)
"Lazarus_is1" = Lazarus 0.9.28.2
"LogMeIn Hamachi" = LogMeIn Hamachi
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox (3.6.11)" = Mozilla Firefox (3.6.11)
"Mozilla Thunderbird (3.1.2)" = Mozilla Thunderbird (3.1.2)
"MuM Revit 2011 VideoTraining Advanced" = MuM Revit 2011 VideoTraining Advanced
"MuM Revit 2011 VideoTraining Basic" = MuM Revit 2011 VideoTraining Basic
"MuM Revit 2011 VideoTraining Professional" = MuM Revit 2011 VideoTraining Professional
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"OMUI.de-de" = Microsoft Office Language Pack 2007 - German/Deutsch
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver Drive" = Samsung Mobile phone USB driver Drive Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"Sikuli" = Sikuli
"softonic-de3 Toolbar" = softonic-de3 Toolbar
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TuneUp Utilities" = TuneUp Utilities
"TVWiz" = Intel(R) TV Wizard
"UltraISO_is1" = UltraISO Premium V9.36
"uTorrent" = µTorrent
"Winamp" = Winamp
"Windows Live Toolbar" = Windows Live Toolbar
"WinRAR archiver" = WinRAR

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Winamp Erkennungs-Plug-in

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/4/2010 6:07:24 AM | Computer Name = Kroxldyphic | Source = MsiInstaller | ID = 11303
Description =

Error - 10/5/2010 6:58:31 AM | Computer Name = Kroxldyphic | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
9.0.4500.26, Zeitstempel: 0x4c644a0c Name des fehlerhaften Moduls: TuneUpUtilitiesService32.exe,
Version: 9.0.4500.26, Zeitstempel: 0x4c644a0c Ausnahmecode: 0xc0000005 Fehleroffset:
0x00013876 ID des fehlerhaften Prozesses: 0x8c4 Startzeit der fehlerhaften Anwendung:
0x01cb647b7c16ff03 Pfad der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities
2010\TuneUpUtilitiesService32.exe Pfad des fehlerhaften Moduls: C:\Program Files\TuneUp
Utilities 2010\TuneUpUtilitiesService32.exe Berichtskennung: 7d0fe7a7-d06f-11df-87fa-00269e44b22a

Error - 10/6/2010 12:54:43 AM | Computer Name = Kroxldyphic | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
9.0.4500.26, Zeitstempel: 0x4c644a0c Name des fehlerhaften Moduls: TuneUpUtilitiesService32.exe,
Version: 9.0.4500.26, Zeitstempel: 0x4c644a0c Ausnahmecode: 0xc0000005 Fehleroffset:
0x00013876 ID des fehlerhaften Prozesses: 0x8f4 Startzeit der fehlerhaften Anwendung:
0x01cb6511df317751 Pfad der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities
2010\TuneUpUtilitiesService32.exe Pfad des fehlerhaften Moduls: C:\Program Files\TuneUp
Utilities 2010\TuneUpUtilitiesService32.exe Berichtskennung: d54bf6ba-d105-11df-a136-00269e44b22a

Error - 10/6/2010 7:06:31 AM | Computer Name = Kroxldyphic | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
9.0.4500.26, Zeitstempel: 0x4c644a0c Name des fehlerhaften Moduls: TuneUpUtilitiesService32.exe,
Version: 9.0.4500.26, Zeitstempel: 0x4c644a0c Ausnahmecode: 0xc0000005 Fehleroffset:
0x00013876 ID des fehlerhaften Prozesses: 0x938 Startzeit der fehlerhaften Anwendung:
0x01cb6545cc58503a Pfad der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities
2010\TuneUpUtilitiesService32.exe Pfad des fehlerhaften Moduls: C:\Program Files\TuneUp
Utilities 2010\TuneUpUtilitiesService32.exe Berichtskennung: c5c9081f-d139-11df-883b-00269e44b22a

Error - 10/6/2010 9:36:52 AM | Computer Name = Kroxldyphic | Source = MsiInstaller | ID = 10005
Description =

Error - 10/6/2010 10:31:51 AM | Computer Name = Kroxldyphic | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WSCommCntr2.exe, Version: 3.0.268.0,
Zeitstempel: 0x4b8f184d Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16559,
Zeitstempel: 0x4ba9b21e Ausnahmecode: 0xc0000005 Fehleroffset: 0x0002fc77 ID des fehlerhaften
Prozesses: 0x964 Startzeit der fehlerhaften Anwendung: 0x01cb65633119963e Pfad der
fehlerhaften Anwendung: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr\lib\WSCommCntr2.exe
Pfad
des fehlerhaften Moduls: C:\windows\SYSTEM32\ntdll.dll Berichtskennung: 74fb54ec-d156-11df-883b-00269e44b22a

Error - 10/6/2010 2:08:29 PM | Computer Name = Kroxldyphic | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
9.0.4500.26, Zeitstempel: 0x4c644a0c Name des fehlerhaften Moduls: TuneUpUtilitiesService32.exe,
Version: 9.0.4500.26, Zeitstempel: 0x4c644a0c Ausnahmecode: 0xc0000005 Fehleroffset:
0x00013876 ID des fehlerhaften Prozesses: 0x8d4 Startzeit der fehlerhaften Anwendung:
0x01cb6580be053233 Pfad der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities
2010\TuneUpUtilitiesService32.exe Pfad des fehlerhaften Moduls: C:\Program Files\TuneUp
Utilities 2010\TuneUpUtilitiesService32.exe Berichtskennung: b8408a08-d174-11df-88a8-00269e44b22a

Error - 10/7/2010 2:58:31 AM | Computer Name = Kroxldyphic | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TuneUpUtilitiesService32.exe, Version:
9.0.4500.26, Zeitstempel: 0x4c644a0c Name des fehlerhaften Moduls: TuneUpUtilitiesService32.exe,
Version: 9.0.4500.26, Zeitstempel: 0x4c644a0c Ausnahmecode: 0xc0000005 Fehleroffset:
0x00013876 ID des fehlerhaften Prozesses: 0x8d8 Startzeit der fehlerhaften Anwendung:
0x01cb65ec567d1af5 Pfad der fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities
2010\TuneUpUtilitiesService32.exe Pfad des fehlerhaften Moduls: C:\Program Files\TuneUp
Utilities 2010\TuneUpUtilitiesService32.exe Berichtskennung: 4b163842-d1e0-11df-ad7e-d6e7fcb1053a

Error - 10/7/2010 9:37:33 AM | Computer Name = Kroxldyphic | Source = Application Hang | ID = 1002
Description = Programm vpngui.exe, Version 0.0.0.0 kann nicht mehr unter Windows
ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1424 Startzeit:
01cb65ec9d81dfec Endzeit: 34 Anwendungspfad: C:\Program Files\VPN Client\vpngui.exe

Berichts-ID:
0747d678-d218-11df-ad7e-00269e44b22a

Error - 10/8/2010 12:31:50 PM | Computer Name = Kroxldyphic | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: rhythmzone.exe, Version: 2.6.1.31223,
Zeitstempel: 0x4b13e2cb Name des fehlerhaften Moduls: mono-1-vc.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4a3898bb Ausnahmecode: 0xc0000005 Fehleroffset: 0x1004c28e
ID
des fehlerhaften Prozesses: 0x1378 Startzeit der fehlerhaften Anwendung: 0x01cb6704d29bb44a
Pfad
der fehlerhaften Anwendung: D:\Spiele\Rhythm Zone\rhythmzone.exe Pfad des fehlerhaften
Moduls: mono-1-vc.dll Berichtskennung: 8c8ed8c4-d2f9-11df-ad7e-00269e44b22a

[ System Events ]
Error - 10/23/2010 1:37:34 PM | Computer Name = Kroxldyphic | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error - 10/23/2010 1:37:35 PM | Computer Name = Kroxldyphic | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error - 10/23/2010 1:37:36 PM | Computer Name = Kroxldyphic | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.

Error - 10/24/2010 9:19:06 AM | Computer Name = Kroxldyphic | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
von Dienst Netman erreicht.

Error - 10/25/2010 2:25:10 AM | Computer Name = Kroxldyphic | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
von Dienst Netman erreicht.

Error - 10/25/2010 4:34:34 AM | Computer Name = Kroxldyphic | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
von Dienst ShellHWDetection erreicht.

Error - 10/25/2010 6:46:53 AM | Computer Name = Kroxldyphic | Source = bowser | ID = 8003
Description =

Error - 10/25/2010 7:00:12 AM | Computer Name = Kroxldyphic | Source = bowser | ID = 8003
Description =

Error - 10/25/2010 7:04:15 AM | Computer Name = Kroxldyphic | Source = bowser | ID = 8003
Description =

Error - 10/25/2010 12:27:09 PM | Computer Name = Kroxldyphic | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
von Dienst Netman erreicht.


< End of report >

Hallo und

Wurde Malwarebytes schon ausgeführt? Wenn ja alle Logs davon posten.

Wenn nein und es sich nicht ausführen lässt => => http://www.trojaner-board.de/82699-m...tet-nicht.html
Ggf im Zusammenhang mit dem random installer probieren, falls man schon Probleme bei der Installation bzw. beim Download hat => http://malwarebytes.org/mbam-download-exe-random.php