OTL.txt....OTL Logfile:

OTL logfile created on: 24.11.2010 13:51:59 - Run 2
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Users\Public\Desktop\MFtools
Windows Vista Business Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18975)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1.013,00 Mb Total Physical Memory | 196,00 Mb Available Physical Memory | 19,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 47,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 40,00 Gb Total Space | 2,42 Gb Free Space | 6,05% Space Free | Partition Type: NTFS
Drive D: | 69,78 Gb Total Space | 4,45 Gb Free Space | 6,38% Space Free | Partition Type: NTFS
 
Computer Name: | User Name:  | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Public\Desktop\MFtools\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\FreePDF_XP\fpassist.exe (shbox.de)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
PRC - C:\Program Files\Brother\ControlCenter3\brccMCtl.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe ()
PRC - C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\DispSwitch\DispSwitchLauncher.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\PSUtility\PSUService.exe (FUJITSU LIMITED)
PRC - C:\Program Files\Fujitsu\PSUtility\TrayManager.exe (FUJITSU LIMITED)
PRC - C:\Windows\System32\Crypserv.exe (CrypKey (Canada) Ltd.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Public\Desktop\MFtools\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirWebService) -- C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Avira GmbH)
SRV - (AntiVirMailService) -- C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (getPlusHelper) getPlus(R) -- C:\Program Files\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (IAANTMON) Intel(R) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe (Intel Corporation)
SRV - (WirelessSelectorService) -- C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe ()
SRV - (PowerSavingUtilityService) -- C:\Program Files\Fujitsu\PSUtility\PSUService.exe (FUJITSU LIMITED)
SRV - (Crypkey License) -- C:\Windows\System32\Crypserv.exe (CrypKey (Canada) Ltd.)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (wrssweep) -- C:\Program Files\Webroot\Washer\wrssweep.sys File not found
DRV - (WDC_SAM) -- C:\Windows\System32\DRIVERS\wdcsam.sys File not found
DRV - (USBAAPL) -- C:\Windows\System32\Drivers\usbaapl.sys File not found
DRV - (NwlnkFwd) -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (catchme) -- C:\Users\Peter\AppData\Local\Temp\catchme.sys File not found
DRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys File not found
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (truecrypt) -- C:\Windows\System32\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV - (bbcap) -- C:\Windows\System32\drivers\bbcap.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (VClone) -- C:\Windows\System32\drivers\VClone.sys (Elaborate Bytes AG)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (ACEDRV06) -- C:\Windows\System32\drivers\ACEDRV06.sys (Protect Software GmbH)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (e1express) Intel(R) -- C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation)
DRV - (FJGSDisk) -- C:\Windows\system32\DRIVERS\FJGSDisk.sys (FUJITSU LIMITED)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (phaudlwr) -- C:\Windows\System32\drivers\phaudlwr.sys (Philips Applied Technologies)
DRV - (SPC1300) USB2.0 PC Camera (SPC1300) -- C:\Windows\System32\drivers\spc1300.sys ()
DRV - (igfx) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (ialm) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (SWUMX71) Sierra Wireless USB MUX Driver (UMTS71) -- C:\Windows\system32\drivers\swumx71.sys (Sierra Wireless Inc.)
DRV - (SWUMX70) Sierra Wireless USB MUX Driver (UMTS70) -- C:\Windows\system32\drivers\swumx70.sys (Sierra Wireless Inc.)
DRV - (SWUMX54) Sierra Wireless USB MUX Driver (UMTS54) -- C:\Windows\system32\drivers\swumx54.sys (Sierra Wireless Inc.)
DRV - (SWUMX53) Sierra Wireless USB MUX Driver (UMTS53) -- C:\Windows\system32\drivers\swumx53.sys (Sierra Wireless Inc.)
DRV - (SWUMX52) Sierra Wireless USB MUX Driver (UMTS52) -- C:\Windows\system32\drivers\swumx52.sys (Sierra Wireless Inc.)
DRV - (SWUMX51) Sierra Wireless USB MUX Driver (UMTS51) -- C:\Windows\system32\drivers\swumx51.sys (Sierra Wireless Inc.)
DRV - (SWUMX50) Sierra Wireless USB MUX Driver (UMTS50) -- C:\Windows\system32\drivers\swumx50.sys (Sierra Wireless Inc.)
DRV - (SWUMX3A) Sierra Wireless USB MUX Driver (UMTS3A) -- C:\Windows\system32\drivers\swumx3a.sys (Sierra Wireless Inc.)
DRV - (SWUMX33) Sierra Wireless USB MUX Driver (UMTS33) -- C:\Windows\system32\drivers\swumx33.sys (Sierra Wireless Inc.)
DRV - (SWUMX32) Sierra Wireless USB MUX Driver (UMTS32) -- C:\Windows\System32\drivers\swumx32.sys (Sierra Wireless Inc.)
DRV - (SWUMX20) Sierra Wireless USB MUX Driver (UMTS20) -- C:\Windows\system32\drivers\swumx20.sys (Sierra Wireless Inc.)
DRV - (swumx12) Sierra Wireless USB MUX Driver (UMTS12) -- C:\Windows\system32\drivers\swumx12.sys (Sierra Wireless Inc.)
DRV - (SWUMX00) Sierra Wireless USB MUX Driver (UMTS00) -- C:\Windows\system32\drivers\swumx00.sys (Sierra Wireless Inc.)
DRV - (SWNC8U32) Sierra Wireless MUX NDIS Driver (UMTS32) -- C:\Windows\System32\drivers\swnc8u32.sys (Sierra Wireless Inc.)
DRV - (Tosrfhid) -- C:\Windows\System32\drivers\Tosrfhid.sys (TOSHIBA Corporation.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (tosrfusb) -- C:\Windows\System32\drivers\tosrfusb.sys (TOSHIBA CORPORATION)
DRV - (NETw4v32) Intel(R) -- C:\Windows\System32\drivers\NETw4v32.sys (Intel Corporation)
DRV - (tosrfbd) -- C:\Windows\System32\drivers\tosrfbd.sys (TOSHIBA CORPORATION)
DRV - (iaStor) -- C:\Windows\system32\drivers\iastor.sys (Intel Corporation)
DRV - (O2SCBUS) -- C:\Windows\System32\drivers\ozscr.sys (O2Micro)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (Brserid) Brother MFC-Seriellschnittstellentreiber (WDM) -- C:\Windows\System32\drivers\BrSerId.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) Brother MFC-WDM-Treiber (USB,seriell) -- C:\Windows\System32\drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (SMSCIRDA) -- C:\Windows\System32\drivers\smscirda.sys (SMSC)
DRV - (FUJ02E3) -- C:\Windows\System32\drivers\fuj02e3.sys (FUJITSU LIMITED)
DRV - (FUJ02B1) -- C:\Windows\System32\drivers\fuj02b1.sys (FUJITSU LIMITED)
DRV - (O2SDRDR) -- C:\Windows\system32\drivers\o2sd.sys (O2Micro )
DRV - (tosporte) -- C:\Windows\system32\drivers\tosporte.sys (TOSHIBA Corporation)
DRV - (O2MDRDR) -- C:\Windows\system32\drivers\o2media.sys (O2Micro )
DRV - (NetworkX) -- C:\Windows\system32\ckldrv.sys ()
DRV - (toshidpt) -- C:\Windows\system32\drivers\toshidpt.sys (TOSHIBA Corporation.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.yahoo.com
IE - HKLM\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://yup.ru/search?m=sponsored&toolid=60969&p="
FF - prefs.js..browser.search.order.1: ">8A: 2 8=B5@=5B"
FF - prefs.js..browser.search.param.yahoo-fr: "chrf-ytbm"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm"
FF - prefs.js..browser.search.param.yahoo-type: "${8}"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.spiegel.de/"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 41
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.6.5
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.0.8
FF - prefs.js..extensions.enabledItems: {E5D844C9-0726-4EAC-B508-A07BFA513C9F}:1.9.1
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.06.23 12:20:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.11.15 00:18:27 | 000,000,000 | ---D | M]
 
[2009.04.22 06:52:22 | 000,000,000 | ---D | M] -- C:\Users\+++\AppData\Roaming\mozilla\Extensions
[2008.06.24 20:02:32 | 000,000,000 | ---D | M] -- C:\Users\+++\AppData\Roaming\mozilla\Extensions-BackupByFirefoxPortable
[2008.06.24 20:02:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\+++\AppData\Roaming\mozilla\Extensions-BackupByFirefoxPortable\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2010.11.23 17:47:17 | 000,000,000 | ---D | M] -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions
[2010.10.16 09:31:25 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.01.07 15:40:32 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010.08.21 14:15:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.01.01 16:30:01 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2009.05.11 23:02:41 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}
[2009.08.05 06:16:37 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2009.08.18 22:24:20 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010.10.24 16:29:54 | 000,000,000 | ---D | M] -- C:\Users\+++\AppData\Roaming\mozilla\Firefox\Profiles\xlvgr0yh.default\extensions\foxmarks@kei.com
[2010.06.21 16:35:24 | 000,001,042 | ---- | M] () -- C:\Users\+++\AppData\Roaming\Mozilla\FireFox\Profiles\xlvgr0yh.default\searchplugins\icqplugin.xml
[2010.04.29 08:47:32 | 000,004,299 | ---- | M] () -- C:\Users\+++\AppData\Roaming\Mozilla\FireFox\Profiles\xlvgr0yh.default\searchplugins\yasearch.xml
[2010.11.15 00:15:17 | 000,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009.08.04 16:20:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.04.12 16:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009.12.02 09:31:53 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2009.09.21 10:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\crawlersrch.xml
[2009.12.02 09:31:53 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2009.12.02 09:31:53 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2009.12.02 09:31:53 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2009.12.02 09:31:53 | 000,000,801 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,736 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: ::1             localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - S:\Kommunikation\Neuer Ordner\jccatch.dll File not found
O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - S:\Kommunikation\Neuer Ordner\getflash.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [FreePDF Assistant] C:\Program Files\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [LoadFUJ02E3] C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [LoadFujitsuQuickTouch] C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [ Malwarebytes Anti-Malware  (reboot)] D:\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PSUtility] C:\Program Files\Fujitsu\PSUtility\TrayManager.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SSUtility] C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [TvOutSwitch] C:\Program Files\Fujitsu\DispSwitch\DispSwitchLauncher.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.4.2/jinstall-1_4_2_03-windows-i586.cab (Java Plug-in 1.4.2_03)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (c:\users\\appdata\local\temp\4040719srv.exe) - c:\users\\appdata\local\temp\4040719srv.exe File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{eb0c5021-9c85-11df-a6cc-000000000000}\Shell - "" = AutoRun
O33 - MountPoints2\{eb0c5021-9c85-11df-a6cc-000000000000}\Shell\AutoRun\command - "" = G:\WD SmartWare.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.11.24 12:41:01 | 000,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2010.11.24 12:17:25 | 000,000,000 | ---D | C] -- C:\Users\\AppData\Roaming\Malwarebytes
[2010.11.24 12:17:04 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.11.24 12:17:03 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.11.24 12:15:34 | 000,000,000 | ---D | C] -- C:\Users\Public\Desktop\MFtools
[2010.11.15 00:17:21 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010.10.29 18:45:29 | 000,000,000 | ---D | C] -- C:\Users\\AppData\Roaming\uTorrent
[2010.10.27 11:40:04 | 000,000,000 | ---D | C] -- C:\Users\\AppData\Roaming\Avira
[2010.10.27 11:35:22 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2010.10.27 11:35:13 | 000,126,856 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2010.10.27 11:35:13 | 000,061,960 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2010.10.27 11:35:13 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntdd.sys
[2010.10.27 11:35:13 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\Windows\System32\drivers\avgntmgr.sys
[2010.10.27 11:34:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2010.10.27 11:34:42 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2010.10.27 11:04:54 | 000,000,000 | ---D | C] -- C:\Program Files\Panda Security
[2010.10.27 10:55:04 | 000,000,000 | ---D | C] -- C:\Users\\AppData\Roaming\download
[2010.10.25 18:26:33 | 000,000,000 | ---D | C] -- C:\Users\AppData\Local\GNU
[2010.10.25 18:25:48 | 000,000,000 | ---D | C] -- C:\Users\\.kde
[2010.10.25 17:17:53 | 000,000,000 | ---D | C] -- C:\Users\\AppData\Roaming\gnupg
[2010.10.25 17:17:49 | 000,000,000 | ---D | C] -- C:\ProgramData\GNU
[2009.06.14 09:21:59 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\\AppData\Roaming\pcouffin.sys
[4 d:\\Documents\*.tmp files -> d:\\Documents\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2010.11.24 13:18:57 | 000,000,000 | ---- | M] () -- C:\Users\\defogger_reenable
[2010.11.24 13:03:22 | 000,000,031 | ---- | M] () -- C:\Windows\System32\bbcap.err
[2010.11.24 13:02:00 | 000,016,384 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2010.11.24 13:01:52 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.11.24 13:01:52 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.11.24 13:01:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.11.24 12:41:02 | 000,000,739 | ---- | M] () -- C:\Users\\Desktop\NTREGOPT.lnk
[2010.11.24 12:41:02 | 000,000,720 | ---- | M] () -- C:\Users\\Desktop\ERUNT.lnk
[2010.11.24 12:17:07 | 000,000,514 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.24 12:15:37 | 000,288,107 | ---- | M] () -- C:\Users\\Desktop\Gmer.zip
[2010.11.24 12:15:37 | 000,050,477 | ---- | M] () -- C:\Users\\Desktop\defogger.exe
[2010.11.24 12:13:07 | 000,471,560 | ---- | M] () -- C:\Users\\Desktop\Load.exe
[2010.11.23 19:58:50 | 000,044,544 | ---- | M] () -- C:\Users\\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.23 19:19:28 | 000,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{DC6ACBFC-DEC8-43EA-8549-CA8085A1B80D}.job
[2010.11.22 11:12:07 | 000,147,456 | ---- | M] () -- C:\Users\\Desktop\Digital Home Screener_DE_final.doc
[2010.11.22 11:11:25 | 000,061,960 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2010.11.16 13:55:54 | 000,017,920 | ---- | M] () -- C:\Users\\Desktop\T10p223.XLS
[2010.11.16 13:45:10 | 000,017,408 | ---- | M] () -- C:\Users\\Desktop\T10P288.XLS
[2010.11.15 01:12:11 | 000,033,792 | ---- | M] () -- C:\Users\\Desktop\Anfrage Motorrad-Klinik.doc
[2010.11.15 00:15:16 | 000,001,848 | ---- | M] () -- C:\Users\Public\Desktop\Java Web Start.lnk
[2010.11.11 10:41:15 | 000,024,064 | ---- | M] () -- d:\\Documents\info.doc
[2010.11.11 02:19:57 | 004,839,936 | ---- | M] () -- d:\\Documents\prevs.doc
[2010.11.10 10:53:27 | 000,632,242 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.11.10 10:53:27 | 000,598,900 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.11.10 10:53:27 | 000,127,278 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.11.10 10:53:27 | 000,104,914 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.11.09 09:24:02 | 000,022,528 | ---- | M] () -- C:\Users\\Desktop\SPECIFIsearch.doc
[2010.11.08 10:32:38 | 000,296,448 | ---- | M] () -- C:\Users\\Desktop\gmer.exe
[2010.11.02 23:02:36 | 000,039,424 | ---- | M] () -- C:\Users\\Desktop\Colrch.doc
[2010.11.02 12:46:47 | 000,126,856 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2010.10.28 19:15:53 | 000,024,064 | ---- | M] () -- d:\\Documents\Dok1.doc
[2010.10.27 11:36:30 | 000,001,853 | ---- | M] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk
[2010.10.27 10:40:49 | 000,000,032 | ---- | M] () -- C:\Users\\AppData\Roaming\ldcpfk.dat
[4 d:\\Documents\*.tmp files -> d:\\Documents\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010.11.24 13:24:16 | 000,296,448 | ---- | C] () -- C:\Users\\Desktop\gmer.exe
[2010.11.24 13:18:57 | 000,000,000 | ---- | C] () -- C:\Users\\defogger_reenable
[2010.11.24 12:41:02 | 000,000,739 | ---- | C] () -- C:\Users\\Desktop\NTREGOPT.lnk
[2010.11.24 12:41:02 | 000,000,720 | ---- | C] () -- C:\Users\\Desktop\ERUNT.lnk
[2010.11.24 12:17:07 | 000,000,514 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.24 12:15:37 | 000,050,477 | ---- | C] () -- C:\Users\\Desktop\defogger.exe
[2010.11.24 12:15:36 | 000,288,107 | ---- | C] () -- C:\Users\\Desktop\Gmer.zip
[2010.11.24 12:12:42 | 000,471,560 | ---- | C] () -- C:\Users\\Desktop\Load.exe
[2010.11.22 11:09:04 | 000,147,456 | ---- | C] () -- C:\Users\\Desktop\Digitinal.doc
[2010.11.16 13:51:59 | 000,017,920 | ---- | C] () -- C:\Users\\Desktop\T3.XLS
[2010.11.16 13:43:54 | 000,017,408 | ---- | C] () -- C:\Users\\Desktop\T8.XLS
[2010.11.15 01:12:10 | 000,033,792 | ---- | C] () -- C:\Users\\Desktop\Anagk.doc
[2010.11.15 00:15:16 | 000,001,848 | ---- | C] () -- C:\Users\Public\Desktop\Java Web Start.lnk
[2010.11.11 10:41:15 | 000,024,064 | ---- | C] () -- d:\\Documents\info.doc
[2010.11.11 02:19:57 | 004,839,936 | ---- | C] () -- d:\\Documents\prevs.doc
[2010.11.10 16:23:31 | 000,017,920 | ---- | C] () -- C:\Users\\Desktop\hised2.XLS
[2010.11.10 13:32:50 | 000,017,408 | ---- | C] () -- C:\Users\\Desktop\smalposal.XLS
[2010.11.09 09:13:33 | 000,022,528 | ---- | C] () -- C:\Users\\Desktop\SPECIFICATIOearch.doc
[2010.11.02 23:02:35 | 000,039,424 | ---- | C] () -- C:\Users\rch.doc
[2010.10.28 19:14:17 | 000,024,064 | ---- | C] () -- d:\\Documents\Dok1.doc
[2010.10.27 11:36:30 | 000,001,853 | ---- | C] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk
[2010.10.08 07:30:54 | 000,000,032 | ---- | C] () -- C:\Users\\AppData\Roaming\ldcpfk.dat
[2010.10.07 08:00:06 | 000,000,120 | ---- | C] () -- C:\Users\\AppData\Local\Cvuqiwareheg.dat
[2010.10.07 08:00:06 | 000,000,000 | ---- | C] () -- C:\Users\\AppData\Local\Mhujipipadax.bin
[2010.10.07 07:57:09 | 000,000,020 | ---- | C] () -- C:\Users\\AppData\Roaming\oidzga.dat
[2010.07.06 11:04:25 | 000,004,096 | -H-- | C] () -- C:\Users\\AppData\Local\keyfile3.drm
[2010.04.25 11:46:34 | 000,581,632 | ---- | C] () -- C:\Users\\AppData\Roaming\plugin.dat
[2009.11.18 13:04:32 | 000,000,680 | ---- | C] () -- C:\Users\\AppData\Local\d3d9caps.dat
[2009.08.03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009.06.14 09:36:54 | 000,000,173 | -HS- | C] () -- C:\ProgramData\.zreglib
[2009.06.14 09:23:49 | 000,000,014 | ---- | C] () -- C:\Windows\System32\systeminfo3.dll
[2009.06.14 09:23:10 | 000,000,033 | ---- | C] () -- C:\Users\AppData\Roaming\pcouffin.log
[2009.06.14 09:22:00 | 000,007,887 | ---- | C] () -- C:\Users\\AppData\Roaming\pcouffin.cat
[2009.06.14 09:21:59 | 000,001,144 | ---- | C] () -- C:\Users\\AppData\Roaming\pcouffin.inf
[2009.05.06 18:51:42 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009.04.24 09:31:50 | 000,000,187 | ---- | C] () -- C:\Windows\Crypkey.ini
[2009.04.24 09:31:36 | 000,031,846 | ---- | C] () -- C:\Windows\System32\Ckldrv.sys
[2009.04.24 09:31:36 | 000,018,432 | ---- | C] () -- C:\Windows\Setup_ck.dll
[2009.02.01 11:11:35 | 000,016,432 | ---- | C] () -- C:\Users\\AppData\Roaming\mdb.bin
[2009.01.24 20:44:34 | 000,027,617 | ---- | C] () -- C:\Users\\AppData\Roaming\UserTile.png
[2008.12.11 15:12:15 | 000,055,865 | ---- | C] () -- C:\Users\\AppData\Roaming\mdbu.bin
[2008.06.21 15:23:46 | 000,028,672 | ---- | C] () -- C:\Windows\System32\drivers\spc1300c.sys
[2008.06.21 15:23:45 | 003,033,856 | ---- | C] () -- C:\Windows\System32\drivers\spc1300.sys
[2008.02.06 18:13:38 | 000,116,224 | ---- | C] () -- C:\Windows\System32\redmonnt.dll
[2007.11.28 17:40:09 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat
[2007.11.17 20:53:10 | 000,044,544 | ---- | C] () -- C:\Users\\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007.11.14 18:42:27 | 000,237,568 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2007.11.09 12:01:59 | 000,000,164 | ---- | C] () -- C:\Windows\System32\psyswin32.dll
[2007.11.08 14:27:15 | 000,000,432 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2007.11.08 14:18:58 | 000,000,093 | ---- | C] () -- C:\Windows\brpcfx.ini
[2007.11.08 14:18:57 | 000,000,225 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2007.11.08 14:14:07 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2007.11.08 14:14:05 | 000,106,496 | ---- | C] () -- C:\Windows\System32\BrMuSNMP.dll
[2007.11.08 14:10:44 | 000,031,664 | ---- | C] () -- C:\Windows\maxlink.ini
[2007.10.08 21:50:10 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2007.07.23 07:54:50 | 000,910,304 | ---- | C] () -- C:\Windows\System32\igmedkrn.dll
[2007.07.23 07:54:49 | 000,249,856 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll
[2007.07.23 07:54:49 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1244.dll
[2007.06.19 13:05:02 | 000,040,448 | ---- | C] () -- C:\Windows\REGOBJ.DLL
[2006.11.02 11:25:25 | 001,197,056 | ---- | C] () -- C:\Windows\System32\hpotiop1.dll
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2003.02.20 16:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
 
========== LOP Check ==========
 
[2009.06.23 09:32:55 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\Audacity
[2010.06.18 20:15:49 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\Blueberry
[2007.10.23 10:34:06 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\CD-LabelPrint
[2009.06.11 16:36:33 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\DonationCoder
[2010.10.27 14:41:32 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\download
[2008.09.30 12:54:11 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\Elluminate
[2010.10.27 10:05:25 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\gnupg
[2010.04.03 23:18:16 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\gtk-2.0
[2010.11.13 17:17:40 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\ICQ
[2010.06.28 13:01:49 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\InfraRecorder
[2009.03.21 14:33:13 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\LogSys
[2010.07.11 15:29:55 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\Music Editor Free
[2009.05.17 15:44:01 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\ooVoo Details
[2009.06.12 14:28:14 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\Opera
[2009.09.16 00:27:48 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\Orbit
[2009.01.24 20:44:33 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\PeerNetworking
[2008.11.07 10:07:47 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\ScanSoft
[2009.06.20 08:25:28 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\SuperMailer
[2010.08.13 09:55:34 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\TrueCrypt
[2010.10.30 15:55:12 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\uTorrent
[2009.06.14 09:33:26 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\Vso
[2009.08.25 13:32:40 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\webex
[2010.11.15 00:19:51 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\Western Digital
[2010.10.27 14:41:30 | 000,000,000 | ---D | M] -- C:\Users\\AppData\Roaming\zweitgeist
[2010.11.24 13:00:39 | 000,032,530 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010.11.23 19:19:28 | 000,000,418 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{DC6ACBFC-DEC8-43EA-8549-CA8085A1B80D}.job
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:63238B95

< End of report >
         

--- --- ---

Den Extras.txt kann ich leider nicht posten, weil die folgende Funktion nicht ging

Klicke nun in die Custom Scans/ Fixes Box.

Nun wirst Du gefragt ob du eine Datei einfügen willst.

Wähle nun die Scan.txt aus dem Ordner MFTools.

das funktionierte leider bei mir nicht :-((


Das war alles glaub ich...

Viele Grüße und danke an das Kompetenzteam!!!
Boutrous