Shutdowner auf Firmenrechner

OTL logfile created on: 12/27/2010 4:34:54 PM - Run 
OTLPE by OldTimer - Version 3.1.43.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 87.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 135.22 Gb Total Space | 118.66 Gb Free Space | 87.75% Space Free | Partition Type: NTFS
Drive D: | 97.65 Gb Total Space | 69.78 Gb Free Space | 71.45% Space Free | Partition Type: NTFS
Drive X: | 434.99 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Disabled] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2010/12/13 01:36:19 | 000,267,944 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/12/07 05:32:02 | 002,228,008 | ---- | M] (TeamViewer GmbH) [Auto] -- C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010/11/03 02:13:11 | 000,135,336 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/09/07 02:20:26 | 000,057,344 | ---- | M] (vidicom GmbH) [Auto] -- C:\Programme\Gemeinsame Dateien\vidicom\VcmServer.exe -- (vidicom Server)
SRV - [2010/03/25 14:40:44 | 000,017,904 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Microsoft Security Essentials\MsMpEng.exe -- (MsMpSvc)
SRV - [2010/03/18 09:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
SRV - [2010/03/18 06:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 06:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/18 06:16:28 | 000,124,240 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2009/11/20 09:26:30 | 000,211,456 | ---- | M] (vidicom GmbH) [Auto] -- C:\Programme\Gemeinsame Dateien\vidicom\VidiRegServ.exe -- (VidiReg Server)
SRV - [2008/06/24 10:05:56 | 000,537,896 | ---- | M] (Nero AG) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe -- (NMIndexingService)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\zkceslqw.sys -- (zkceslqw)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\xukrzoqj.sys -- (xukrzoqj)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\xmdiqqmh.sys -- (xmdiqqmh)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\wzvaguho.sys -- (wzvaguho)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\wsznclrd.sys -- (wsznclrd)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\wflunmsa.sys -- (wflunmsa)
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\vyoiccjs.sys -- (vyoiccjs)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\vxqalydk.sys -- (vxqalydk)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\vvdfeteg.sys -- (vvdfeteg)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\vsafkrmn.sys -- (vsafkrmn)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\uohktqid.sys -- (uohktqid)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\ulbqoxhs.sys -- (ulbqoxhs)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\ufghomno.sys -- (ufghomno)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\uebjxuzh.sys -- (uebjxuzh)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\tmdxkjyo.sys -- (tmdxkjyo)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\tkjzibap.sys -- (tkjzibap)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\tbgouety.sys -- (tbgouety)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\syrjakyt.sys -- (syrjakyt)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\srwgnwss.sys -- (srwgnwss)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\sjydhypd.sys -- (sjydhypd)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\seoljpan.sys -- (seoljpan)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\sdhuxgjp.sys -- (sdhuxgjp)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\sapqqahc.sys -- (sapqqahc)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\rwgmhwmy.sys -- (rwgmhwmy)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\rusnujuz.sys -- (rusnujuz)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\qslsidmb.sys -- (qslsidmb)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\qdtpehor.sys -- (qdtpehor)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\qakihphp.sys -- (qakihphp)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\pvgzhcso.sys -- (pvgzhcso)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\ptrfnkcs.sys -- (ptrfnkcs)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\pswykqqh.sys -- (pswykqqh)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\pcmhcfus.sys -- (pcmhcfus)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\ozvgdkkk.sys -- (ozvgdkkk)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\owiuoxqj.sys -- (owiuoxqj)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\oujuxowk.sys -- (oujuxowk)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\oqytrwnh.sys -- (oqytrwnh)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\omhfbood.sys -- (omhfbood)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\okmzmhvj.sys -- (okmzmhvj)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\okkmisrx.sys -- (okkmisrx)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\oedclext.sys -- (oedclext)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\oankzujl.sys -- (oankzujl)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\nwbctnaa.sys -- (nwbctnaa)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\nvamuweb.sys -- (nvamuweb)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\nkrmteme.sys -- (nkrmteme)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\muxxgsqc.sys -- (muxxgsqc)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\msrvlnjm.sys -- (msrvlnjm)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\mnjsqbac.sys -- (mnjsqbac)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\mkbzgqgx.sys -- (mkbzgqgx)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\mhtujfbk.sys -- (mhtujfbk)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\mbguhsmu.sys -- (mbguhsmu)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\magizjoc.sys -- (magizjoc)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\lzlwtqda.sys -- (lzlwtqda)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\lwhqffyq.sys -- (lwhqffyq)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\lvwkpxdv.sys -- (lvwkpxdv)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\lddsllsw.sys -- (lddsllsw)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\kvkrtmby.sys -- (kvkrtmby)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\kqdsmiop.sys -- (kqdsmiop)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\kjhnmndc.sys -- (kjhnmndc)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\jvxiecrv.sys -- (jvxiecrv)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\jueycbew.sys -- (jueycbew)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\jpihkaua.sys -- (jpihkaua)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\jkqyjpxe.sys -- (jkqyjpxe)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\jelldeqs.sys -- (jelldeqs)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\iwltesbh.sys -- (iwltesbh)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\ioynrfec.sys -- (ioynrfec)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\inqzxsbn.sys -- (inqzxsbn)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\igtzslgf.sys -- (igtzslgf)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\hwacjzey.sys -- (hwacjzey)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\hrxkduib.sys -- (hrxkduib)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\hgtloaut.sys -- (hgtloaut)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\gxredzmc.sys -- (gxredzmc)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\gvfpudjb.sys -- (gvfpudjb)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\gpgltkpv.sys -- (gpgltkpv)
DRV - File not found [Kernel | On_Demand] -- E:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\fvzgasob.sys -- (fvzgasob)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\equkrvyc.sys -- (equkrvyc)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\ejxqtriw.sys -- (ejxqtriw)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\dxngsexw.sys -- (dxngsexw)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\drequofh.sys -- (drequofh)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\dnzaufej.sys -- (dnzaufej)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\cvzhejzc.sys -- (cvzhejzc)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\crvptiig.sys -- (crvptiig)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\cozliwgv.sys -- (cozliwgv)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\cjdrdemh.sys -- (cjdrdemh)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\chprbdzi.sys -- (chprbdzi)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\bxgnoenu.sys -- (bxgnoenu)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\bpkcxdxm.sys -- (bpkcxdxm)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\boojjmxv.sys -- (boojjmxv)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\bhoczlre.sys -- (bhoczlre)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\bbuqkygk.sys -- (bbuqkygk)
DRV - File not found [Kernel | System] -- C:\WINDOWS\System32\drivers\adsqcbln.sys -- (adsqcbln)
DRV - [2010/12/20 11:37:36 | 000,135,096 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/11/23 01:59:21 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/05/11 04:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/05/11 02:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008/04/14 07:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008/04/14 07:00:00 | 000,063,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mf.sys -- (mf)
DRV - [2008/03/09 21:57:50 | 002,868,736 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008/01/29 22:28:36 | 004,725,760 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/01/03 09:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007/10/11 20:40:12 | 000,009,096 | R--- | M] (Advanced Micro Devices) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\amdide.sys -- (amdide)
DRV - [2006/11/22 03:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006/07/01 17:30:28 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006/02/23 11:16:36 | 000,264,704 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\fwlanusb.sys -- (FWLANUSB)
DRV - [2002/07/15 05:43:06 | 000,073,660 | ---- | M] (elmeg Kommunikationstechnik) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ElgTaDrv.sys -- (ElgTaDrv)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box
 
 
IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledItems: {987311C6-B504-4aa2-90BF-60CC49808D42}:2.2
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010/12/22 06:41:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010/12/22 06:41:38 | 000,000,000 | ---D | M]
 
[2009/01/19 08:29:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\mozilla\Extensions
[2010/12/27 04:13:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\mozilla\Firefox\Profiles\gstqwiym.default\extensions
[2010/12/20 12:04:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\mozilla\Firefox\Profiles\gstqwiym.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/12/20 10:51:13 | 000,000,000 | ---D | M] (BugMeNot) -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\mozilla\Firefox\Profiles\gstqwiym.default\extensions\{987311C6-B504-4aa2-90BF-60CC49808D42}
[2009/01/19 08:29:02 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2010/12/22 06:41:32 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010/12/22 06:41:33 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010/12/22 06:41:33 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010/12/22 06:41:33 | 000,000,986 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010/12/22 06:41:33 | 000,000,801 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2010/12/20 11:57:58 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AVMWlanClient] C:\Programme\avmwlanstick\FRITZWLANMini.exe (AVM Berlin GmbH)
O4 - HKLM..\Run: [HPUsageTracking] C:\Programme\HP\HP UT\bin\hppusg.exe ()
O4 - HKLM..\Run: [MSSE] C:\Programme\Microsoft Security Essentials\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\Administrator_ON_C..\Run: [{EB8D6009-2016-82F5-510F-81B892F8F0FB}] C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Vopouz\imor.exe File not found
O4 - HKU\Administrator_ON_C..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O4 - HKU\Administrator_ON_C..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKU\Administrator_ON_C..\Run: [Syscfgdb] File not found
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Pervasive.SQL Workgroup Engine.lnk = C:\PVSW\Bin\W3DBSMGR.EXE ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Google Sidewiki... - C:\Programme\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab (GMNRev Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Internet Explorer Wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/01/17 09:41:59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{096393f0-e4b4-11dd-bd04-0021851df775}\Shell - "" = AutoRun
O33 - MountPoints2\{096393f0-e4b4-11dd-bd04-0021851df775}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{096393f0-e4b4-11dd-bd04-0021851df775}\Shell\AutoRun\command - "" = G:\pushinst.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: charemon - (C:\WINDOWS\ckcninst.dll) - C:\WINDOWS\ckcninst.dll ()
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010/12/27 08:22:15 | 000,000,000 | ---D | C] -- C:\avrescue
[2010/12/21 08:32:16 | 000,000,000 | ---D | C] -- C:\Programme\windows
[2010/12/20 11:57:49 | 000,000,000 | ---D | C] -- C:\_OTL
[2010/12/20 11:43:03 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
[2010/12/20 05:40:12 | 000,000,000 | ---D | C] -- C:\Programme\temp
[2010/12/17 07:39:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TeamViewer
[2010/12/17 07:39:14 | 000,000,000 | ---D | C] -- C:\Programme\TeamViewer
[2010/12/15 02:14:05 | 000,000,000 | ---D | C] -- C:\Programme\jTXTZNRd
[2010/12/14 10:31:14 | 000,041,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\uglsytwa.sys
[2010/12/14 10:21:04 | 000,041,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\uzsmxtgx.sys
[2010/12/14 10:06:52 | 000,041,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hoszvyfu.sys
[2010/12/14 09:43:54 | 000,041,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\xvyrsmuc.sys
[2010/12/14 09:17:44 | 000,041,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ivodbxge.sys
[2010/12/13 10:28:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Avira
[2010/12/13 02:51:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010/12/10 02:41:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\PCHealth
[2010/12/10 01:15:13 | 000,000,000 | ---D | C] -- C:\Programme\JUApYbaXT›1˜Ëdwqovcap.exe
[2010/12/07 14:28:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\compatWIdll32
[1 C:\Dokumente und Einstellungen\Administrator\*.tmp files -> C:\Dokumente und Einstellungen\Administrator\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2010/12/27 09:01:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/12/27 07:06:28 | 000,000,400 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/12/27 07:00:22 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/12/27 06:29:00 | 000,001,102 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/12/27 04:44:31 | 000,016,807 | ---- | M] () -- C:\WINDOWS\Werbas.ini
[2010/12/27 04:43:26 | 008,698,289 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator\Desktop\TrostPreisliste_00114888_00097775.zip
[2010/12/27 02:56:28 | 000,001,098 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/12/23 03:42:21 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/12/22 06:43:32 | 000,048,640 | -H-- | M] () -- C:\WINDOWS\ckcninst.dll
[2010/12/22 02:32:01 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/12/20 11:57:58 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2010/12/20 11:54:05 | 000,072,799 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator\Desktop\Scanbericht.rtf
[2010/12/20 11:43:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator\Desktop\OTL.exe
[2010/12/20 11:37:36 | 000,135,096 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010/12/20 11:27:16 | 000,000,552 | ---- | M] () -- C:\WINDOWS\System32\d3d8caps.dat
[2010/12/20 10:38:08 | 000,110,192 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/12/20 07:36:00 | 000,001,024 | ---- | M] () -- C:\MKDE.TRN
[2010/12/20 05:48:11 | 000,048,640 | -H-- | M] () -- C:\WINDOWS\System32\ckcninst.dll
[2010/12/18 14:40:28 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\dmlconf.dat
[2010/12/18 14:20:35 | 000,000,036 | ---- | M] () -- C:\WINDOWS\System32\complete.dat
[2010/12/16 06:02:48 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/12/14 10:31:21 | 000,041,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\uglsytwa.sys
[2010/12/14 10:21:06 | 000,041,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\uzsmxtgx.sys
[2010/12/14 10:06:53 | 000,041,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hoszvyfu.sys
[2010/12/14 09:43:54 | 000,041,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\xvyrsmuc.sys
[2010/12/14 09:17:45 | 000,041,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ivodbxge.sys
[2010/12/11 03:03:11 | 000,000,032 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\abpzlw.dat
[2010/12/09 03:44:01 | 000,000,012 | ---- | M] () -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\abpzlw.dat
[2010/12/09 03:43:57 | 000,000,004 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\avdrn.dat
[1 C:\Dokumente und Einstellungen\Administrator\*.tmp files -> C:\Dokumente und Einstellungen\Administrator\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010/12/27 04:43:07 | 008,698,289 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Desktop\TrostPreisliste_00114888_00097775.zip
[2010/12/20 11:54:05 | 000,072,799 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Desktop\Scanbericht.rtf
[2010/12/20 11:27:16 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2010/12/18 14:20:35 | 000,000,036 | ---- | C] () -- C:\WINDOWS\System32\complete.dat
[2010/12/18 14:20:28 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\dmlconf.dat
[2010/12/18 04:52:11 | 000,048,640 | -H-- | C] () -- C:\WINDOWS\ckcninst.dll
[2010/12/17 03:19:05 | 000,048,640 | -H-- | C] () -- C:\WINDOWS\System32\ckcninst.dll
[2010/12/09 05:24:27 | 000,000,032 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\abpzlw.dat
[2010/12/09 03:44:01 | 000,000,012 | ---- | C] () -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\abpzlw.dat
[2010/12/09 03:43:57 | 000,000,004 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\avdrn.dat
[2009/01/30 08:01:53 | 000,000,792 | ---- | C] () -- C:\WINDOWS\hpntwksetup.ini
[2009/01/28 05:15:52 | 000,000,115 | ---- | C] () -- C:\WINDOWS\tcd32.ini
[2009/01/26 08:24:53 | 000,000,126 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/01/26 08:24:43 | 000,000,052 | ---- | C] () -- C:\WINDOWS\WUCADMIN.INI
[2009/01/26 08:24:43 | 000,000,052 | ---- | C] () -- C:\WINDOWS\W32UCADM.INI
[2009/01/19 10:06:49 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009/01/19 10:06:44 | 000,004,608 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/01/19 05:38:46 | 000,001,115 | ---- | C] () -- C:\WINDOWS\BTI.INI
[2009/01/19 05:38:44 | 000,016,807 | ---- | C] () -- C:\WINDOWS\Werbas.ini
[2009/01/19 05:17:02 | 000,235,520 | ---- | C] () -- C:\WINDOWS\System32\W048T32W.DLL
[2009/01/19 05:17:02 | 000,202,752 | ---- | C] () -- C:\WINDOWS\System32\W042T32W.DLL
[2009/01/19 05:17:02 | 000,168,960 | ---- | C] () -- C:\WINDOWS\System32\W037T32W.DLL
[2009/01/19 05:17:02 | 000,163,328 | ---- | C] () -- C:\WINDOWS\System32\W033T32W.DLL
[2009/01/19 05:17:02 | 000,158,208 | ---- | C] () -- C:\WINDOWS\System32\XISCNV32.DLL
[2009/01/19 05:17:02 | 000,140,288 | ---- | C] () -- C:\WINDOWS\System32\W108T32W.DLL
[2009/01/19 05:17:02 | 000,137,216 | ---- | C] () -- C:\WINDOWS\System32\W043T32W.DLL
[2009/01/19 05:17:02 | 000,128,000 | ---- | C] () -- C:\WINDOWS\System32\W046T32W.DLL
[2009/01/19 05:17:02 | 000,117,760 | ---- | C] () -- C:\WINDOWS\System32\W020T32W.DLL
[2009/01/19 05:17:02 | 000,099,328 | ---- | C] () -- C:\WINDOWS\System32\W021T32W.DLL
[2009/01/19 05:17:02 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\W040T32W.DLL
[2009/01/19 05:17:02 | 000,083,968 | ---- | C] () -- C:\WINDOWS\System32\W770T32W.DLL
[2009/01/19 05:17:01 | 000,202,240 | ---- | C] () -- C:\WINDOWS\System32\W019T32W.DLL
[2009/01/19 05:17:01 | 000,185,344 | ---- | C] () -- C:\WINDOWS\System32\W007T32W.DLL
[2009/01/19 05:17:01 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\W001T32W.DLL
[2009/01/19 05:17:01 | 000,105,984 | ---- | C] () -- C:\WINDOWS\System32\W008T32W.DLL
[2009/01/19 05:17:01 | 000,105,472 | ---- | C] () -- C:\WINDOWS\System32\W010T32W.DLL
[2009/01/19 05:17:01 | 000,101,888 | ---- | C] () -- C:\WINDOWS\System32\W015T32W.DLL
[2009/01/19 05:17:01 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\W006T32W.DLL
[2009/01/19 05:17:00 | 000,338,944 | ---- | C] () -- C:\WINDOWS\System32\LFFPX7.DLL
[2009/01/19 05:17:00 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\LFKODAK.DLL
[2009/01/19 05:00:17 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2009/01/19 04:35:16 | 000,006,836 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.INI
[2009/01/19 03:55:52 | 000,000,162 | ---- | C] () -- C:\WINDOWS\ETOSP.INI
[2009/01/17 12:45:24 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\hpsfs.dll
[2009/01/17 12:45:23 | 000,000,148 | ---- | C] () -- C:\WINDOWS\System32\AddPort.ini
[2009/01/17 12:30:00 | 000,001,046 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\FASTWiz.html
[2009/01/17 11:43:20 | 000,001,024 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\.rnd
[2009/01/17 11:28:57 | 000,079,353 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\FASTWiz.log
[2009/01/17 09:21:45 | 000,004,501 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/02/07 04:05:18 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\hppatusg01.dll
[2001/07/06 22:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
 
========== LOP Check ==========
 
[2010/12/23 00:22:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Aldi
[2009/01/17 12:29:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\FRITZ!
[2009/01/19 08:00:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\GnuPG
[2010/08/06 15:25:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Helequ
[2009/01/31 07:55:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\MSNInstaller
[2010/12/17 07:39:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TeamViewer
[2010/12/22 14:14:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Vogao
[2010/12/23 00:35:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Vopouz
[2010/12/27 07:06:28 | 000,000,400 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 936 bytes -> C:\WINDOWS\System32\drivers\hoszvyfu.sys:changelist
@Alternate Data Stream - 702 bytes -> C:\WINDOWS\System32\drivers\xvyrsmuc.sys:changelist
@Alternate Data Stream - 624 bytes -> C:\WINDOWS\System32\drivers\uzsmxtgx.sys:changelist
@Alternate Data Stream - 624 bytes -> C:\WINDOWS\System32\drivers\uglsytwa.sys:changelist
@Alternate Data Stream - 496 bytes -> C:\WINDOWS\System32\drivers\ivodbxge.sys:changelist
< End of report >