Hallo liebe Community,
ich habe seit einigen Wochen ein Problem mit meinem Laptop. Und zwar ist der Computer bei Aktivierung und Deaktivierung des Internets ( egal ob mit Kabel oder per W-Lan) zu 100% ausgelastet, aufgefallen ist mir dies, da Musik verzerrt/schneller/langsamer wiedergegeben wird, sobald ich das Internet aktiviert hatte. Mit Hilfe des Process Explorers habe ich herausgefunden, dass eine der svchost.exe(n) diese hohe Auslastung verursacht. Ich hoffe das ich den Schädling ohne platt machen mit eurer Hilfe beseitigen kann .

Ich habe schon SpyBot S&D, und Kaspersky Pure durchlaufen lassen, Kapsersky hat schon ein trojanisches Programm aufgespürt und gelöscht ( 22.02.2011 17:29:02 Gefunden: Trojan-Downloader.Java.Agent.iw c:\Documents and Settings\Clemo\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\45def130-12b0acc7/vuln/Huvasi.class )


Hier meine Daten:

CC-Cleaner Programmliste

3DMark05 Futuremark 25.01.2010 1.3.0
Acrobat.com Adobe Systems Incorporated 31.01.2010 1.2.443
Adobe AIR Adobe Systems Inc. 31.01.2010 1.1.0.5790
Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 03.05.2010 10.0.45.2
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 14.11.2010 6,00MB 10.1.102.64
Adobe Media Player Adobe Systems Incorporated 31.01.2010 1.1
Adobe Reader 9.4.2 - Deutsch Adobe Systems Incorporated 13.02.2011 167,9MB 9.4.2
Advanced Audio FX Engine Creative Technology Ltd 21.01.2010 1.12.05
Apple Application Support Apple Inc. 19.11.2010 52,7MB 1.4.1
Apple Mobile Device Support Apple Inc. 31.01.2011 3.3.1.3
Apple Software Update Apple Inc. 25.01.2010 2,16MB 2.1.1.116
ATI Catalyst Control Center 21.01.2010 2.009.0729.2226
Audio Recorder Pro 3.70 06.08.2010
Battlefield Heroes EA Digital illusions 30.06.2010
BioShock 2K Games 12.02.2010 2.62.0000
CCleaner Piriform 29.05.2010 2.32
Cisco EAP-FAST Module Cisco Systems, Inc. 20.01.2010 1,55MB 2.2.14
Cisco LEAP Module Cisco Systems, Inc. 20.01.2010 0,63MB 1.0.19
Cisco PEAP Module Cisco Systems, Inc. 20.01.2010 1,24MB 1.1.6
ClassPad Manager v3 (30 Day Trial) CASIO COMPUTER CO., LTD. 28.04.2010 8,32MB 3.00.3510.2160
Command & Conquer 3 Ihr Firmenname 25.01.2010 1.000,0MB 1.00.0000
Command & Conquer(TM) Generäle Electronic Arts 26.01.2010 1.210,8MB 0.50.0000
Command and Conquer(TM) Generäle Die Stunde Null Electronic Arts 27.01.2010 1.00.0000
Compatibility Pack für 2007 Office System Microsoft Corporation 20.01.2010 63,0MB 12.0.4518.1014
Dell DataSafe Local Backup Dell 20.01.2010 9.3.44
Dell DataSafe Local Backup - Support Software Dell 20.01.2010 2.31
Dell DataSafe Online Dell, Inc. 27.01.2010 4,07MB 1.2.0009
Dell Dock Dell 21.01.2010 2.0.0
Dell Getting Started Guide Dell Inc. 20.01.2010 1.00.0000
Dell Support Center (Support Software) Dell 20.01.2010 2.5.09100
Dell Touchpad Synaptics Incorporated 20.01.2010 13.2.2.2
Dell Webcam Central Creative Technology Ltd 21.01.2010 1.40.05
Dell Wireless WLAN Card Utility Dell Inc. 20.01.2010 5.30.21.0
DivX Codec DivX, Inc. 28.01.2010 6.9.1
DivX Converter DivX, Inc. 28.01.2010 7.1.0
DivX Player DivX, Inc. 28.01.2010 7.2.0
DivX Plus DirectShow Filters DivX, Inc. 28.01.2010
DivX Web Player DivX,Inc. 28.01.2010 1.5.0
ElsterFormular Landesfinanzdirektion Thüringen 09.02.2010 4.034,4MB 11.1.3.3887
EVEREST Home Edition v2.20 Lavalys Inc 25.01.2010 2.20
Free Audio CD Burner version 1.3 DVDVideoSoft Limited. 15.05.2010 8,06MB
Free YouTube to MP3 Converter version 3.5 DVDVideoSoft Limited. 15.05.2010 31,4MB
GameSpy Arcade 25.01.2010
GIMP 2.6.8 17.03.2010
Guitar Pro 5.0 Arobas Music 28.01.2010
Heroes of Might and Magic V 04.02.2010
Heroes of Might and Magic® III Complete 14.03.2010
ICQ Toolbar ICQ 22.02.2010 3.0.0
ICQ7 ICQ 22.02.2010 7.0
IrfanView (remove only) 29.01.2010
iTunes Apple Inc. 31.01.2011 10.1.2.17
Java(TM) 6 Update 14 (64-bit) Sun Microsystems, Inc. 21.01.2010 6.0.140
Java(TM) 6 Update 19 Sun Microsystems, Inc. 20.01.2010 97,5MB 6.0.190
Kaspersky PURE Kaspersky Lab 21.02.2011 9.1.0.124
Live! Cam Avatar Creator Creative Technology Ltd 20.01.2010 4.6.3009.1
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 20.01.2010 4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 20.01.2010 4.0.30319
Microsoft Office PowerPoint Viewer 2007 (German) Microsoft Corporation 20.01.2010 87,0MB 12.0.4518.1014
Microsoft Office Suite Activation Assistant Microsoft Corporation 20.01.2010 8,37MB 2.9
Microsoft Office XP Professional mit FrontPage Microsoft Corporation 06.04.2010 375,6MB 10.0.2701.0
Microsoft Silverlight Microsoft Corporation 20.01.2010 14,9MB 3.0.40624.0
Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 20.01.2010 1,72MB 3.1.0000
Microsoft Sync Framework Runtime Native v1.0 (x86) Microsoft Corporation 20.01.2010 0,61MB 1.0.1215.0
Microsoft Sync Framework Services Native v1.0 (x86) Microsoft Corporation 20.01.2010 1,45MB 1.0.1215.0
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 12.02.2010 2,69MB 8.0.58299
Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 21.01.2010 8.0.56336
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 21.01.2010 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 07.02.2010 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 09.02.2010 0,58MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 11.11.2010 0,58MB 9.0.30729.4148
Microsoft Works Microsoft Corporation 27.03.2010 224,1MB 9.7.0621
Moovida Secure Digital Services 07.06.2010 49,00KB 1.00.0000
Mozilla Firefox (3.6.13) Mozilla 12.12.2010 3.6.13 (de)
Mozilla Thunderbird (3.1.4) Mozilla 10.10.2010 3.1.4 (de)
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 16.03.2010 1,28MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 16.03.2010 1,33MB 4.20.9876.0
MyTube Bigpack HD Free S.A.D. 26.11.2010 50,2MB 4.0.10.819
Phase 5 HTML-Editor Systemberatung Schommer 13.04.2010 3,72MB 5.6.2.3
Power Tab Editor 1.7 Power Tab Software 09.02.2010 3,59MB 1.7.0
PowerDVD DX CyberLink Corp. 20.01.2010 8.3.5424
Program-Link FA-CP1 CASIO COMPUTER CO., LTD. 28.04.2010 9,39MB 1.0.0.0
PunkBuster Services Even Balance, Inc. 18.12.2010 0.990
Quickset64 Dell Inc. 21.01.2010 9.6.6
QuickTime Apple Inc. 09.01.2011 73,7MB 7.69.80.9
Riding Star 17.02.2011
Roxio Burn Roxio 08.06.2010 36,1MB 1.01
Serious Sam: The Second Encounter 25.01.2010
Skype Toolbars Skype Technologies S.A. 01.06.2010 6,09MB 1.0.4051
Skype™ 5.1 Skype Technologies S.A. 08.02.2011 22,7MB 5.1.112
Sony Image Data Suite Sony Corporation 07.04.2010 3.1.03.06030
Sony Picture Utility Sony Corporation 07.04.2010 4.3.01.06180
Spybot - Search & Destroy Safer Networking Limited 19.02.2011 1.6.2
Söldner 15.10.2010
Tunatic 31.08.2010
UnderCoverXP 1.23 Wicked & Wild Inc. 11.04.2010 2,12MB
Uninstall 1.0.0.1 15.05.2010 10,5MB
VPN Client 10.10.2010
WAV MP3 Converter v4.2 build 1259 Hoo Technologies 17.11.2010 11,8MB
Windows Live Anmelde-Assistent Microsoft Corporation 20.01.2010 1,94MB 5.000.818.5
Windows Live Essentials Microsoft Corporation 21.01.2010 14.0.8089.0726
Windows Live Sync Microsoft Corporation 20.01.2010 2,79MB 14.0.8089.726
Windows Live-Uploadtool Microsoft Corporation 20.01.2010 0,22MB 14.0.8014.1029
Windows Media Player Firefox Plugin Microsoft Corp 06.02.2010 0,29MB 1.0.0.8
WinRAR 20.01.2010
WinUAE 2.0.1 Arabuusimiehet 31.08.2010 2.0.1
x64 Components v2.4.0 Shark007 07.02.2010 2.4.0
Xfire (remove only) 21.12.2010

Malwarebytes Suchlaufergebnis:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 5838

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

22.02.2011 15:42:33
mbam-log-2011-02-22 (15-42-33).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 311213
Laufzeit: 46 Minute(n), 28 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Hijackthis-Log:
HiJackthis Logfile:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:40:40, on 22.02.2011
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Users\Clemo\Downloads\Internetprogramme\ab_18.11.10\HiJackThis204.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) -  - (no file)
F2 - REG:system.ini: UserInit=C:\Windows\SysWOW64\userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Clemo\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\ie_banner_deny.htm
O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Kaspersky PURE (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe
O23 - Service: Verwaltungsservice vom CryproStorage-System (CSObjectsSrv) - Infowatch - C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\RWTH Aachen\Cisco VPN Client\cvpnd.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13021 bytes
         

--- --- ---
OTL-Scan:OTL Logfile:

OTL logfile created on: 23.02.2011 14:27:20 - Run 1
OTL by OldTimer - Version 3.2.21.0     Folder = C:\Users\Clemo\Downloads\Internetprogramme\ab_18.11.10
64bit- An unknown product  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 56,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 267,12 Gb Free Space | 59,22% Space Free | Partition Type: NTFS
 
Computer Name: CLEMO-PC | User Name: Clemo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Clemo\Downloads\Internetprogramme\ab_18.11.10\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\iTunes\iTunes.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe (Kaspersky Lab)
PRC - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe (Apple Inc.)
PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Infowatch)
PRC - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
PRC - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (SoftThinks)
PRC - C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
PRC - C:\Programme\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\RWTH Aachen\Cisco VPN Client\cvpnd.exe (Cisco Systems, Inc.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Clemo\Downloads\Internetprogramme\ab_18.11.10\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (wltrysvc) -- C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE ()
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (STacSV) -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe (IDT, Inc.)
SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (WinHttpAutoProxySvc) -- winhttp.dll (Microsoft Corporation)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (AVP) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe (Kaspersky Lab)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe ()
SRV - (CSObjectsSrv) -- C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Infowatch)
SRV - (SftService) -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (SoftThinks)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (DockLoginService) -- C:\Programme\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) -- C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (CVPND) -- C:\Program Files (x86)\RWTH Aachen\Cisco VPN Client\cvpnd.exe (Cisco Systems, Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (KLIF) -- C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (Lbd) -- C:\Windows\SysNative\drivers\Lbd.sys (Lavasoft AB)
DRV:64bit: - (CSCrySec) -- C:\Windows\SysNative\drivers\CSCrySec.sys (Infowatch)
DRV:64bit: - (CSVirtualDiskDrv) -- C:\Windows\SysNative\drivers\CSVirtualDiskDrv.sys (Infowatch)
DRV:64bit: - (KLBG) -- C:\Windows\SysNative\drivers\klbg.sys (Kaspersky Lab)
DRV:64bit: - (klmouflt) -- C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab)
DRV:64bit: - (KLIM6) -- C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab)
DRV:64bit: - (kl1) -- C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (Acceler) -- C:\Windows\SysNative\drivers\Acceler.sys (ST Microelectronics)
DRV:64bit: - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (BCM42RLY) -- C:\Windows\SysNative\drivers\bcm42rly.sys (Broadcom Corporation)
DRV:64bit: - (BCM43XX) -- C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (RMCAST) -- C:\Windows\SysNative\drivers\rmcast.sys (Microsoft Corporation)
DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (rixdpcie) -- C:\Windows\SysNative\drivers\rixdpe64.sys (REDC)
DRV:64bit: - (rimspci) -- C:\Windows\SysNative\drivers\rimspe64.sys (REDC)
DRV:64bit: - (risdpcie) -- C:\Windows\SysNative\drivers\risdpe64.sys (REDC)
DRV:64bit: - (STHDA) -- C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (rimmptsk) -- C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV:64bit: - (rismxdp) -- C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimsptsk) -- C:\Windows\SysNative\drivers\rimspx64.sys (REDC)
DRV:64bit: - (CtClsFlt) -- C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (PVUSB) -- C:\Windows\SysWOW64\drivers\CESG502.SYS (Hitachi Semiconductor and Devices Sales Co.,Ltd.)
DRV - (CVPNDRVA) -- C:\Windows\SysWOW64\drivers\CVPNDRVA.sys (Cisco Systems, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.schueler.cc/index.php|hxxp://www.google.de/|hxxp://web.de/"
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:5.0.31.0
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.1.0.124
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.1&q="
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.01.10 14:27:33 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.02.14 19:02:01 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.01.10 14:27:33 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\THBExt [2011.02.22 15:55:02 | 000,000,000 | ---D | M]
 
[2010.10.11 19:11:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Clemo\AppData\Roaming\mozilla\Extensions
[2010.10.11 19:11:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Clemo\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011.02.23 14:24:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Clemo\AppData\Roaming\mozilla\Firefox\Profiles\9eyk0e7h.default\extensions
[2010.10.05 19:17:31 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\Clemo\AppData\Roaming\mozilla\Firefox\Profiles\9eyk0e7h.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010.10.05 19:17:30 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Clemo\AppData\Roaming\mozilla\Firefox\Profiles\9eyk0e7h.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.05.16 13:16:23 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Clemo\AppData\Roaming\mozilla\Firefox\Profiles\9eyk0e7h.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.09.02 06:53:37 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Users\Clemo\AppData\Roaming\mozilla\Firefox\Profiles\9eyk0e7h.default\extensions\battlefieldheroespatcher@ea.com
[2010.02.08 19:02:16 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Users\Clemo\AppData\Roaming\mozilla\Firefox\Profiles\9eyk0e7h.default\extensions\moveplayer@movenetworks.com
[2011.02.22 15:57:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.06.02 15:11:44 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2011.02.22 15:57:23 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru
[2010.10.22 09:40:46 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.10.22 09:40:46 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.10.22 09:40:46 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.10.22 09:40:46 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.10.22 09:40:46 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.02.20 19:20:05 | 000,430,078 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 127.0.0.1	1-2005-search.com
O1 - Hosts: 127.0.0.1	123fporn.info
O1 - Hosts: 14802 more lines...
O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\ievkbd.dll (Kaspersky Lab)
O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll (Kaspersky Lab)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O4:64bit: - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Programme\Dell\Dell Wireless WLAN Card\WLTRAY.EXE (Dell Inc.)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Programme\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [RESTART_STICKY_NOTES]  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Clemo\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8:64bit: - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\ie_banner_deny.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Clemo\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\ie_banner_deny.htm ()
O9:64bit: - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\klwtbbho.dll (Kaspersky Lab)
O9:64bit: - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe (ICQ, Inc.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe (ICQ, Inc.)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll (Kaspersky Lab)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll (Kaspersky Lab)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll (Kaspersky Lab)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:64bit: - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.02.22 15:55:47 | 000,085,048 | ---- | C] (Infowatch) -- C:\Windows\SysNative\drivers\CSCrySec.sys
[2011.02.22 15:55:47 | 000,066,104 | ---- | C] (Infowatch) -- C:\Windows\SysNative\drivers\CSVirtualDiskDrv.sys
[2011.02.22 15:54:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InfoWatch
[2011.02.22 15:54:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky PURE
[2011.02.22 15:54:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2011.02.22 15:54:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab
[2011.02.22 15:54:17 | 000,353,296 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2011.02.22 15:52:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files
[2011.02.22 14:51:22 | 000,000,000 | ---D | C] -- C:\Users\Clemo\Desktop\Neuer Ordner
[2011.02.22 14:30:35 | 008,417,616 | ---- | C] (Mozilla) -- C:\Users\Clemo\Desktop\Firefox_Setup_3.6.13.exe
[2011.02.20 12:40:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2011.02.20 12:40:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2011.02.20 12:40:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2011.02.20 12:35:35 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2011.02.20 12:33:13 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2011.02.18 13:20:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riding Star
[2011.02.18 13:20:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Midas
[2011.02.09 08:10:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011.02.09 08:10:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2011.02.09 07:50:16 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.02.09 07:50:15 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.02.09 07:50:15 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.02.09 07:50:15 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.02.09 07:50:15 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.02.09 07:50:15 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.02.09 07:50:15 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.02.09 07:50:15 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.02.09 07:50:15 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.02.09 07:50:15 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.02.09 07:50:14 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.02.09 07:50:14 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.02.09 07:50:02 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2011.02.09 07:50:01 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2011.02.09 07:50:00 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2011.02.09 07:50:00 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2011.02.09 07:49:59 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll
[2011.02.09 07:49:59 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2011.02.09 07:49:59 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2011.02.09 07:49:59 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2011.02.09 07:49:56 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2011.02.09 07:49:54 | 000,265,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011.02.09 07:49:54 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.02.09 07:49:52 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.02.09 07:49:52 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.02.09 07:49:51 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.02.09 07:49:47 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.02.09 07:49:46 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2011.02.09 07:49:45 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.02.09 07:49:45 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.02.09 07:49:44 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.02.09 07:49:43 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.02.09 07:49:43 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.02.09 07:49:43 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.02.01 11:53:30 | 000,000,000 | ---D | C] -- C:\Users\Clemo\Desktop\ambience
[2011.01.31 16:34:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011.01.31 16:33:46 | 000,000,000 | ---D | C] -- C:\Programme\iTunes
[2011.01.31 16:33:46 | 000,000,000 | ---D | C] -- C:\Programme\iPod
[2010.01.28 16:53:22 | 008,653,312 | ---- | C] (Dell, Inc.                                                   ) -- C:\Users\Clemo\AppData\Roaming\DataSafeDotNet.exe
 
========== Files - Modified Within 30 Days ==========
 
[2011.02.23 14:19:14 | 000,014,032 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.02.23 14:19:14 | 000,014,032 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.02.23 14:13:51 | 000,000,436 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics
[2011.02.23 14:11:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.02.23 14:11:18 | 3212,185,600 | -HS- | M] () -- C:\hiberfil.sys
[2011.02.22 17:29:12 | 000,007,602 | ---- | M] () -- C:\Users\Clemo\AppData\Local\Resmon.ResmonCfg
[2011.02.22 16:45:53 | 000,150,083 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat
[2011.02.22 16:45:53 | 000,107,075 | ---- | M] () -- C:\Windows\SysNative\drivers\klick.dat
[2011.02.22 15:54:17 | 000,353,296 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys
[2011.02.22 14:46:44 | 000,030,208 | ---- | M] () -- C:\Users\Clemo\Desktop\WILLKOMMEN IM FORUM.doc
[2011.02.22 14:30:35 | 008,417,616 | ---- | M] (Mozilla) -- C:\Users\Clemo\Desktop\Firefox_Setup_3.6.13.exe
[2011.02.21 21:52:16 | 002,359,350 | ---- | M] () -- C:\Users\Clemo\Desktop\BFH 120000 Punkte.bmp
[2011.02.21 19:49:20 | 000,270,240 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2011.02.21 19:49:20 | 000,270,240 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.02.20 19:20:05 | 000,430,078 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2011.02.20 13:08:31 | 000,430,078 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20110220-192005.backup
[2011.02.15 21:38:06 | 000,004,440 | ---- | M] () -- C:\Users\Clemo\AppData\Roaming\wklnhst.dat
[2011.02.14 20:01:55 | 000,270,240 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2011.02.14 15:33:15 | 001,525,858 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.02.14 15:33:15 | 000,663,842 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.02.14 15:33:15 | 000,624,292 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.02.14 15:33:15 | 000,135,078 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.02.14 15:33:15 | 000,110,276 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.02.09 12:04:29 | 002,946,344 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.01.26 07:53:10 | 000,265,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011.01.26 07:31:20 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
 
========== Files Created - No Company Name ==========
 
[2011.02.22 15:57:19 | 000,150,083 | ---- | C] () -- C:\Windows\SysNative\drivers\klin.dat
[2011.02.22 15:57:19 | 000,107,075 | ---- | C] () -- C:\Windows\SysNative\drivers\klick.dat
[2011.02.22 14:46:43 | 000,030,208 | ---- | C] () -- C:\Users\Clemo\Desktop\WILLKOMMEN IM FORUM.doc
[2011.02.21 21:49:03 | 002,359,350 | ---- | C] () -- C:\Users\Clemo\Desktop\BFH 120000 Punkte.bmp
[2011.02.20 11:49:20 | 000,007,602 | ---- | C] () -- C:\Users\Clemo\AppData\Local\Resmon.ResmonCfg
[2010.10.11 18:59:24 | 000,139,104 | ---- | C] () -- C:\Windows\SysWow64\CSGina.dll
[2010.07.15 07:46:56 | 000,286,720 | ---- | C] () -- C:\Windows\SysWow64\EMRegSys.dll
[2010.07.09 20:00:32 | 000,041,872 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
[2010.04.29 08:12:07 | 000,000,008 | ---- | C] () -- C:\Windows\SysWow64\tcdl2.dll
[2010.04.29 08:12:07 | 000,000,008 | ---- | C] () -- C:\Windows\SysWow64\ctsn32.dll
[2010.04.07 13:49:15 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2010.02.24 20:24:23 | 000,004,440 | ---- | C] () -- C:\Users\Clemo\AppData\Roaming\wklnhst.dat
[2010.02.07 13:42:52 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
[2010.01.26 17:08:36 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2006.02.23 17:37:18 | 000,047,104 | ---- | C] () -- C:\Windows\SysWow64\dsfFLACEncoder.dll
[2006.02.23 16:37:06 | 000,047,616 | ---- | C] () -- C:\Windows\SysWow64\dsfVorbisDecoder.dll
[2006.02.23 16:36:22 | 000,102,400 | ---- | C] () -- C:\Windows\SysWow64\dsfOggDemux2.dll
[2006.02.23 16:35:56 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\dsfOGMDecoder.dll
[2006.02.23 16:35:44 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\dsfNativeFLACSource.dll
[2006.02.23 16:35:40 | 000,049,664 | ---- | C] () -- C:\Windows\SysWow64\dsfFLACDecoder.dll
[2006.02.23 16:34:58 | 000,083,456 | ---- | C] () -- C:\Windows\SysWow64\libFLAC++.dll
[2006.02.23 16:34:56 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\libFishSound.dll
[2006.02.23 16:34:38 | 000,029,696 | ---- | C] () -- C:\Windows\SysWow64\libOOOggSeek.dll
[2006.02.23 16:34:26 | 001,108,480 | ---- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2006.02.23 16:34:16 | 000,049,152 | ---- | C] () -- C:\Windows\SysWow64\libOOogg.dll
[2006.02.23 16:33:54 | 000,140,288 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll

< End of report >
         

--- --- ---
OTL Logfile:

OTL Extras logfile created on: 23.02.2011 14:27:20 - Run 1
OTL by OldTimer - Version 3.2.21.0     Folder = C:\Users\Clemo\Downloads\Internetprogramme\ab_18.11.10
64bit- An unknown product  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 56,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451,07 Gb Total Space | 267,12 Gb Free Space | 59,22% Space Free | Partition Type: NTFS
 
Computer Name: CLEMO-PC | User Name: Clemo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.js [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
.txt [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [open] -- Reg Error: Value error.
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
jsfile [open] -- Reg Error: Value error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java(TM) 6 Update 14 (64-bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{76823D20-E32E-B465-381C-8C92FA069BA5}" = ccc-utility64
"{77B8B4A5-EE79-4907-A318-2DA86325B8D7}" = iTunes
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{E5C95CA5-4565-4B9D-97ED-05088D775614}" = Apple Mobile Device Support
"{E60B7350-EA5F-41E0-9D6F-E508781E36D2}" = Dell Dock
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Dell Wireless WLAN Card Utility" = Dell Wireless WLAN Card Utility
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"SynTPDeinstKey" = Dell Touchpad
"WinRAR archiver" = WinRAR
"x64 Components_is1" = x64 Components v2.4.0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0189BB43-B5CA-E8CC-BD89-1E68D9F1F565}" = CCC Help Italian
"{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}" = Microsoft Visual C++ 2005 Redistributable
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{06F80017-8F98-4C94-B868-52358569FC32}" = Command & Conquer(TM) Generäle
"{0CB7380D-6195-76E4-D2A7-2C88D60FC4B8}" = CCC Help Japanese
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{10D0FAA7-1550-8075-1119-B425C689F33B}" = Skins
"{11E894DE-AF44-4626-87D5-076C1818C2E6}" = Moovida
"{13766F76-6C8C-4E57-A9F3-3212D1C6E0D1}" = Dell DataSafe Online
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{1A59064A-12A9-469F-99F6-04BF118DBCFF}" = Kaspersky PURE
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20071984-5EB1-4881-8EDB-082532ACEC6D}" = Heroes of Might and Magic V
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{20B1B020-DEAE-48D1-9960-D4C3185D758B}" = Phase 5 HTML-Editor
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 19
"{29DB4249-1C8D-CC69-786B-B8BD77C905EC}" = Catalyst Control Center Core Implementation
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{2C8C573C-5FB6-0403-46E9-C73E7ECC865B}" = ccc-core-static
"{2DF7B278-D3B6-40A4-B25C-0E7149F439EA}" = 3DMark05
"{359FCAA7-B544-4147-AE3B-8C8A526E2427}" = Sony Image Data Suite
"{3869EC36-45E2-B172-4C31-899E0D9EF965}" = CCC Help Portuguese
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{3FEDEF45-26AB-20C8-EBF1-5F55700C968E}" = Catalyst Control Center Graphics Full New
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{47CACE54-FFF0-A795-E615-297661EF1AF7}" = CCC Help Danish
"{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works
"{50A5D540-6F0C-A5D7-B4EF-0C1C6A6FCA54}" = Catalyst Control Center Graphics Previews Common
"{511ADEDD-2607-260A-FC55-04A8DA8A1508}" = CCC Help Chinese Standard
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{53FB84B2-23CC-47BE-903F-EC1841459509}" = Program-Link FA-CP1
"{5624C000-B109-11D4-9DB4-00E0290FCAC5}" = VPN Client
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5BDAA2F7-8E48-4AFF-AA92-B559D0CDF1AD}" = Serious Sam: The Second Encounter
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{5FD7FD46-FB2F-132E-1CC2-101537955307}" = CCC Help Spanish
"{6084C211-01A1-464E-97A0-09772E122B50}" = Moovida
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{67CB3049-7EE2-D8B5-7CED-504B38957E82}" = CCC Help Norwegian
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX
"{69533745-1E2D-4C98-8B4A-B7643EF9E1A2}" = Catalyst Control Center - Branding
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B3CA80E-6AC0-4725-BABF-9B0FEF880CB3}" = Power Tab Editor 1.7
"{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar
"{70E4F778-5467-8E2E-E920-7F85F6BC0AE7}" = CCC Help German
"{71F205E9-C01C-47C5-B029-8AAC14AF03F1}" = ClassPad Manager v3  (30 Day Trial)
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{77CF0818-2DEA-29F0-7B31-8BBC7BCB66F1}" = CCC Help Finnish
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{829275D3-1865-E7FC-32B8-CE88AA1780BE}" = CCC Help English
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{9082912F-1761-94CF-5777-1A81DBD6FD41}" = Catalyst Control Center Graphics Previews Vista
"{93F3E45F-65DF-DEEA-D4B3-5166DEAAFD79}" = Catalyst Control Center Graphics Full Existing
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack
"{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn
"{A4A14B15-F25D-44F8-8483-291C1DF7C548}_is1" = WAV MP3 Converter v4.2 build 1259
"{A4E376AA-A720-9009-1C08-317969CD99B4}" = Catalyst Control Center InstallProxy
"{A66F423F-3AE6-F84C-8ACC-30AE9FBDE0ED}" = CCC Help Chinese Traditional
"{A80AC620-12FA-11D5-B287-0050DA4BBA2C}" = Riding Star
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.2 - Deutsch
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}" = Roxio Burn
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BA023BBC-805C-9127-973D-E64F02E20882}" = CCC Help Russian
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B}" = Acrobat.com
"{CE4BEC4E-FA7F-FF0A-634C-54E0DA71535F}" = CCC Help Swedish
"{D2035FAA-E906-28A8-C3A6-0D9CA592B44B}" = CCC Help Dutch
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{D848E062-BA12-4855-0001-E7C196D614BE}" = MyTube Bigpack HD Free
"{DABF43D9-1104-4764-927B-5BED1274A3B0}" = Runtime
"{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}" = Command & Conquer 3
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E280923D-C5D9-4728-8C79-AC9A0DC75875}" = BioShock
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{EB979754-D9D6-6DF4-611D-81F5510B5C4F}" = Catalyst Control Center Localization All
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F32F7FBC-8DB0-295A-5BF7-9C6572C096D0}" = CCC Help Korean
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}" = Command and Conquer(TM) Generäle Die Stunde Null 
"{F6D29654-7B5A-2D7A-517C-BA865921C0BE}" = CCC Help French
"{F715640E-084D-9C3E-D83C-582C78792F9A}" = Catalyst Control Center Graphics Light
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Audio Recorder Pro_is1" = Audio Recorder Pro 3.70
"CCleaner" = CCleaner
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Dell Webcam Central" = Dell Webcam Central
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"ElsterFormular 11.1.3.3887" = ElsterFormular
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.3
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.5
"GameSpy Arcade" = GameSpy Arcade
"Guitar Pro 5_is1" = Guitar Pro 5.0
"Heroes of Might and Magic® III" = Heroes of Might and Magic® III Complete
"ICQToolbar" = ICQ Toolbar
"InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}" = Command & Conquer(TM) Generäle
"InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}" = Command and Conquer(TM) Generäle Die Stunde Null 
"InstallWIX_{1A59064A-12A9-469F-99F6-04BF118DBCFF}" = Kaspersky PURE
"IrfanView" = IrfanView (remove only)
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"Mozilla Thunderbird (3.1.4)" = Mozilla Thunderbird (3.1.4)
"PunkBusterSvc" = PunkBuster Services
"Söldner" = Söldner
"Tunatic" = Tunatic
"UnderCoverXP_is1" = UnderCoverXP 1.23
"Uninstall_is1" = Uninstall 1.0.0.1
"WinGimp-2.0_is1" = GIMP 2.6.8
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinUAE" = WinUAE 2.0.1
"Xfire" = Xfire (remove only)
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 23.10.2010 12:20:45 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:20:45 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:20:45 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:20:45 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:40:25 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:40:25 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:40:25 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:40:25 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:40:25 | Computer Name = Clemo-PC | Source = Bonjour Service | ID = 100
Description = 
 
Error - 23.10.2010 12:40:37 | Computer Name = Clemo-PC | Source = EventSystem | ID = 4621
Description = 
 
[ Broadcom Wireless LAN Events ]
Error - 29.12.2010 04:39:55 | Computer Name = Clemo-PC | Source = WLAN-Tray | ID = 0
Description = 09:39:48, Wed, Dec 29, 10 Error - Unable to gain access to user store

 
Error - 03.01.2011 03:34:39 | Computer Name = Clemo-PC | Source = WLAN-Tray | ID = 0
Description = 08:34:39, Mon, Jan 03, 11 Error - Unable to gain access to user store

 
Error - 04.01.2011 09:41:05 | Computer Name = Clemo-PC | Source = WLAN-Tray | ID = 0
Description = 14:41:05, Tue, Jan 04, 11 Error - Unable to gain access to user store

 
Error - 13.01.2011 05:45:47 | Computer Name = Clemo-PC | Source = WLAN-Tray | ID = 0
Description = 10:45:47, Thu, Jan 13, 11 Error - Unable to gain access to user store

 
Error - 16.01.2011 11:30:58 | Computer Name = Clemo-PC | Source = WLAN-Tray | ID = 0
Description = 16:30:58, Sun, Jan 16, 11 Error - Unable to gain access to user store

 
Error - 22.01.2011 11:11:29 | Computer Name = Clemo-PC | Source = WLAN-Tray | ID = 0
Description = 16:11:29, Sat, Jan 22, 11 Error - Unable to gain access to user store

 
Error - 10.02.2011 05:51:52 | Computer Name = Clemo-PC | Source = WLAN-Tray | ID = 0
Description = 10:51:52, Thu, Feb 10, 11 Error - Unable to gain access to user store

 
Error - 20.02.2011 07:25:51 | Computer Name = Clemo-PC | Source = WLAN-Tray | ID = 0
Description = 12:25:51, Sun, Feb 20, 11 Error - Unable to gain access to user store

 
[ Media Center Events ]
Error - 13.04.2010 02:37:10 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 08:37:08 - Fehler beim Herstellen der Internetverbindung.  08:37:08 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 14.04.2010 05:15:56 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 11:15:56 - Fehler beim Herstellen der Internetverbindung.  11:15:56 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 14.04.2010 05:16:04 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 11:16:01 - Fehler beim Herstellen der Internetverbindung.  11:16:01 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 14.04.2010 06:16:11 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 12:16:11 - Fehler beim Herstellen der Internetverbindung.  12:16:11 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 14.04.2010 06:16:20 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 12:16:16 - Fehler beim Herstellen der Internetverbindung.  12:16:16 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 14.04.2010 07:45:46 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 13:45:46 - Fehler beim Herstellen der Internetverbindung.  13:45:46 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 14.04.2010 07:46:01 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 13:45:51 - Fehler beim Herstellen der Internetverbindung.  13:45:51 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.05.2010 01:56:35 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 07:56:35 - Fehler beim Herstellen der Internetverbindung.  07:56:35 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 11.05.2010 01:56:55 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 07:56:41 - Fehler beim Herstellen der Internetverbindung.  07:56:41 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 22.02.2011 08:52:32 | Computer Name = Clemo-PC | Source = MCUpdate | ID = 0
Description = 13:52:32 - Fehler beim Herstellen der Internetverbindung.  13:52:32 
-     Serververbindung konnte nicht hergestellt werden..  
 
 
========== Last 10 Event Log Errors ==========
 
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
 
< End of report >
         

--- --- ---

Process Explorer bei Internetaktivierung/Deaktivierung:

Process PID CPU Private Bytes Working Set Description Company Name
svchost.exe 1636 29.25 29.768 K 29.300 K Hostprozess für Windows-Dienste Microsoft Corporation
svchost.exe 4060 25.87 16.192 K 20.988 K Hostprozess für Windows-Dienste Microsoft Corporation
svchost.exe 1036 14.44 46.804 K 62.484 K Hostprozess für Windows-Dienste Microsoft Corporation
firefox.exe 5400 5.81 57.868 K 77.444 K Firefox Mozilla Corporation
avp.exe 1048 5.62 72.592 K 7.996 K Kaspersky Anti-Virus Kaspersky Lab
svchost.exe 1948 4.69 11.552 K 14.872 K Hostprozess für Windows-Dienste Microsoft Corporation
svchost.exe 4040 4.12 3.912 K 7.512 K Hostprozess für Windows-Dienste Microsoft Corporation
svchost.exe 1248 3.94 14.020 K 20.048 K Hostprozess für Windows-Dienste Microsoft Corporation
procexp64.exe 6020 2.06 27.620 K 45.924 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
svchost.exe 444 0.94 127.892 K 136.804 K Hostprozess für Windows-Dienste Microsoft Corporation
audiodg.exe 1164 0.75 22.732 K 23.360 K Windows Graphisolierung für Audiogeräte Microsoft Corporation
iTunes.exe 2400 0.56 69.868 K 76.708 K iTunes Apple Inc.
csrss.exe 612 0.37 3.168 K 6.840 K Client-Server-Laufzeitprozess Microsoft Corporation
svchost.exe 540 0.19 27.832 K 25.500 K Hostprozess für Windows-Dienste Microsoft Corporation
svchost.exe 864 0.19 6.296 K 10.868 K Hostprozess für Windows-Dienste Microsoft Corporation
dwm.exe 2540 0.19 35.288 K 33.740 K Desktopfenster-Manager Microsoft Corporation
wmpnetwk.exe 4500 6.020 K 6.984 K Windows Media Player-Netzwerkfreigabedienst Microsoft Corporation
WmiPrvSE.exe 3352 4.696 K 9.288 K WMI Provider Host Microsoft Corporation
WmiPrvSE.exe 2152 4.124 K 8.052 K WMI Provider Host Microsoft Corporation
WLTRYSVC.EXE 1728 2.088 K 4.336 K
WLTRAY.EXE 2232 46.316 K 37.244 K Dell Wireless WLAN Card Wireless Network Tray Applet Dell Inc.
wlanext.exe 1768 4.076 K 6.944 K Windows-Drahtlos-LAN 802.11-Extensibilitätsframework Microsoft Corporation
winlogon.exe 708 4.160 K 8.476 K Windows-Anmeldeanwendung Microsoft Corporation
wininit.exe 592 2.132 K 5.120 K Windows-Startanwendung Microsoft Corporation
WebcamDell2.exe 4988 31.496 K 9.828 K WebcamDell2.exe Creative Technology Ltd
TrustedInstaller.exe 5600 9.956 K 15.616 K Windows Modules Installer Microsoft Corporation
taskmgr.exe 1104 3.768 K 10.696 K Windows Task-Manager Microsoft Corporation
taskhost.exe 2416 4.420 K 8.728 K Hostprozess für Windows-Aufgaben Microsoft Corporation
System Idle Process 0 0 K 24 K
System 4 120 K 764 K
SynTPHelper.exe 4768 2.376 K 4.680 K Synaptics Pointing Device Helper Synaptics Incorporated
SynTPEnh.exe 2824 5.812 K 14.332 K Synaptics TouchPad Enhancements Synaptics Incorporated
svchost.exe 952 6.872 K 10.884 K Hostprozess für Windows-Dienste Microsoft Corporation
svchost.exe 2656 2.468 K 6.016 K Hostprozess für Windows-Dienste Microsoft Corporation
svchost.exe 2760 67.668 K 8.824 K Hostprozess für Windows-Dienste Microsoft Corporation
sttray64.exe 3404 9.416 K 18.432 K IDT PC Audio IDT, Inc.
StikyNot.exe 3852 7.316 K 13.924 K Kurznotizen Microsoft Corporation
stacsv64.exe 1108 14.084 K 9.704 K IDT PC Audio IDT, Inc.
sprtsvc.exe 3380 5.836 K 1.100 K SupportSoft Agent Service SupportSoft, Inc.
sprtcmd.exe 5008 16.060 K 1.056 K Dell Support Center Updates SupportSoft, Inc.
spoolsv.exe 1904 9.304 K 14.584 K Spoolersubsystem-Anwendung Microsoft Corporation
smss.exe 396 736 K 1.440 K Windows-Sitzungs-Manager Microsoft Corporation
SftService.exe 2568 4.140 K 7.672 K SoftThinks Agent Service SoftThinks
services.exe 664 8.356 K 11.656 K Anwendung für Dienste und Controller Microsoft Corporation
SearchProtocolHost.exe 740 3.528 K 9.076 K Microsoft Windows Search Protocol Host Microsoft Corporation
SearchIndexer.exe 1224 33.776 K 19.720 K Microsoft Windows Search-Indexerstellung Microsoft Corporation
SearchFilterHost.exe 2672 4.248 K 8.084 K Microsoft Windows Search Filter Host Microsoft Corporation
SeaPort.exe 2236 7.676 K 13.096 K Microsoft SeaPort Search Enhancement Broker Microsoft Corp.
RoxioBurnLauncher.exe 5016 3.484 K 9.052 K Roxio Burn Launcher
quickset.exe 3408 9.624 K 13.300 K QuickSet Dell Inc.
ProtectedObjectsSrv.exe 760 1.712 K 5.076 K InfoWatch CryptoStorage Protected objects controller service Infowatch
procexp.exe 3868 1.972 K 6.324 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
PnkBstrA.exe 2176 1.356 K 4.408 K
plugin-container.exe 5712 10.240 K 12.344 K Plugin Container for Firefox Mozilla Corporation
PDVDDXSrv.exe 4976 4.624 K 9.460 K CyberLink PowerDVD Resident Program CyberLink Corp.
MOM.exe 5032 42.596 K 6.188 K Catalyst Control Center: Monitoring program Advanced Micro Devices Inc.
mdm.exe 2108 2.488 K 5.824 K Machine Debug Manager Microsoft Corporation
lsm.exe 716 3.220 K 4.924 K Lokaler Sitzungs-Manager-Dienst Microsoft Corporation
lsass.exe 692 4.720 K 11.056 K Local Security Authority Process Microsoft Corporation
klwtblfs.exe 5240 2.992 K 7.020 K WebToolBar component Kaspersky Lab
iTunesHelper.exe 2536 13.804 K 20.488 K iTunesHelper Apple Inc.
iPodService.exe 4632 4.268 K 8.548 K iPodService Module (64-bit) Apple Inc.
Interrupts n/a 0 K 0 K Hardware Interrupts
ICQ Service.exe 1404 3.408 K 6.932 K ICQIEUpdater Module
explorer.exe 2592 49.120 K 70.584 K Windows-Explorer Microsoft Corporation
DPCs n/a 0 K 0 K Deferred Procedure Calls
DockLogin.exe 1360 1.280 K 4.128 K Dock Login Service Stardock Corporation
distnoted.exe 3144 1.892 K 5.884 K distnoted Apple Inc.
DataSafeOnline.exe 4952 33.760 K 45.636 K DataSafeOnline
csrss.exe 528 2.852 K 5.676 K Client-Server-Laufzeitprozess Microsoft Corporation
conhost.exe 1776 1.504 K 3.284 K Host für Konsolenfenster Microsoft Corporation
conhost.exe 4948 2.084 K 4.320 K Host für Konsolenfenster Microsoft Corporation
conhost.exe 3128 2.068 K 4.228 K Host für Konsolenfenster Microsoft Corporation
CCC.exe 4496 60.320 K 16.192 K Catalyst Control Centre: Host application ATI Technologies Inc.
BCMWLTRY.EXE 1760 66.192 K 53.112 K Dell Wireless WLAN Card Wireless Network Controller Dell Inc.
avp.exe 1444 19.552 K 6.192 K Kaspersky Anti-Virus Kaspersky Lab
atiesrxx.exe 152 2.336 K 5.220 K AMD External Events Service Module AMD
atieclxx.exe 1344 3.120 K 6.596 K AMD External Events Client Module AMD
AppleMobileDeviceService.exe 1668 2.732 K 7.968 K MobileDeviceService Apple Inc.
AppleMobileDeviceHelper.exe 3396 3.616 K 10.984 K MobileDeviceHelper Apple Inc.
alg.exe 3804 2.144 K 5.632 K Gatewaydienst auf Anwendungsebene Microsoft Corporation



Ich danke euch schon jetzt im Voraus, wenn noch irgendwas fehlt, einfach sagen, ich reiche es dann so schnell wie möglich nach =).

Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.

Hallo,
ja gibt es, ich poste sie jetzt =). Ich habe jede neue Log Datei der Übersichtlichkeit halber fett gedruckt.

Vielen Dank und viele Grüße

Clemo

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4063

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

04.05.2010 07:46:59
mbam-log-2010-05-04 (07-46-59).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 121023
Laufzeit: 2 Minute(n), 31 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4063

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

04.05.2010 09:49:17
mbam-log-2010-05-04 (09-49-17).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 374080
Laufzeit: 45 Minute(n), 7 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4092

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

12.05.2010 12:56:02
mbam-log-2010-05-12 (12-56-02).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 375821
Laufzeit: 43 Minute(n), 58 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4137

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

24.05.2010 15:44:21
mbam-log-2010-05-24 (15-44-21).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 116156
Laufzeit: 32 Minute(n), 27 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 5838

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

22.02.2011 15:42:33
mbam-log-2011-02-22 (15-42-33).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 311213
Laufzeit: 46 Minute(n), 28 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Ist unauffällig. Ich würd mal zusehen, alle Updates zu installieren für dein Windows7.
Entweder über den Updater von Windows 7 oder du ziehst es einmal komplett und installierst es manuell => http://www.microsoft.com/downloads/d...displayLang=de

Vielen Dank für die schnelle Antwort. Ich lade mir gerade das von dir empfohlene SP für Win7 herunter. Allerdings kann ich mir aber irgendwie nicht so richtig vorstellen, dass das nur an diesem Update liegt, oder doch? Hab ich "einfach" nur eine Sicherheitslücke oder verbirgt sich doch irgendwo ein Schädling auf meinem System, ich bange um meine Spiegelreflexbilder .

Viele Grüße

Clemo

EDIT: In meinem Taskmanager sind die Dateien
winlogon.exe und csrss.exe nicht über den Menüpunkt "Dateipfad öffnen" zu lokalisieren, hat das was zu bedeuten?

Wenn Updates fehlen sorgt der Updater von Windows für eine Übertragung im Hintergrund. Die Suche benötigt etwas Rechnerpower, das Downloaden im Hintergrund krallt sicht logischerweise Bandbreite!

ich bange um meine Spiegelreflexbilder

Und wieso macht man keine Backups wenn das so wichtig ist?

Hi,
aber doch nicht 100% der Rechnerleistung eines i7 720M, oder ? Zudem hatte ich vor einigen Wochen das Problem noch nicht und mein Antivirenprog. fand einige Schädlinge und dann begann dieses ganze Dilemma.
Wenn es aber da dran liegt bin ich auch froh . Ich lad es grad runter, ich melde mich wenn ich es installiert habe und sagen kann, ob es sich bessert oder nicht =). Sind die winlogon und csrss Dateien eine Gefahr?

Grüße

Clemo

Edit: Ich hab schon ext. HDD bestellt =).

Zudem hatte ich vor einigen Wochen das Problem noch nicht und mein Antivirenprog. fand einige Schädlinge

Log bitte komplett nachreichen.

Hi,
die Logs sind leider nicht mehr auffindbar, hab grad alles abgesucht... .
Ich hoffe, dass dieser Spuk mit dem Update vorüber ist, oder gibt es noch irgendwelche Maßnahmen, welche ich zur Auffindung div. Schädlinge nutzen kann? Ich möchte ganz sicher gehen, da irgendwas die Systemleistung während des Online-Gehens und -Seins stark beansprucht.

Vielen Dank schonmal für deine schnelle Hilfe

Grüße

Clemo

Ich möchte ganz sicher gehen,

Ganz sichergehen kann man nicht. Da führt an FORMAT C nichts vorbei. Allein nur durch Analysen kommst du nicht auf 100% Erkennung, es ist unmöglich die Abwesenheit von Schädlingen zu beweisen.

So,
ich habe das Sp1 erfolgreich installiert. Allerdings gab es nach der Installation des Zusatzupdates "Update für Windows 7 für x64-basierte Systeme (KB2488113)" einen Bluescreen und Win7 konnte nicht mehr gestartet werden --> Systemreparatur... . Der Bluescreen sah wie folgt aus:

Problemsignatur:
Problemereignisname: BlueScreen
Betriebsystemversion: xxx (kann ich diese Info in's Forum stellen?!)
Gebietsschema-ID: 1031

Zusatzinformationen zum Problem:
BCCode: c000021a
BCP1: FFFFF8A000A1B460
BCP2: 0000000000000000
BCP3: FFFFFFFFC0000001
BCP4: 0000000000110648
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Dateien, die bei der Beschreibung des Problems hilfreich sind:
C:\Windows\Minidump\022311-31200-01.dmp
C:\Users\Clemo\AppData\Local\Temp\WER-118326-0.sysdata.xml

Lesen Sie unsere Datenschutzbestimmungen online:
hxxp://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0407

Wenn die Onlinedatenschutzbestimmungen nicht verfügbar sind, lesen Sie unsere Datenschutzbestimmungen offline:
C:\Windows\system32\de-DE\erofflps.txt


Mh...... bin etwas ratlos.... achja, das Problem besteht allem Anschein nach immer noch .

Viele Grüße

Clemo

Dein Win7 bootet aber wieder??
Wenn man eine svchost-Instanz nicht zuordnen kann und wissen möchte, was da genau diesen allgemeinen Hostprozess in Anspruch nimmt, müsste man mal dieses Tool anwenden => Svchost Process Analyzer - a svchost.exe file checker

Ja, zum Glück läuft er wieder =), aber das Problem besteht weiterhin... ich lade mir mal die von dir vorgeschlagene Software herunter und analisier das ganze weiter, ich habe zum Glück noch einen Zweitrechner .

Grüße

Clemo

EDIT: Hab ich durchlaufen lassen, gibt es da auch irgendein Logfile oder was muss ich jetzt machen? Eine svchost.exe kann nicht zugeordnet werden und ist mit Ausrufezeichen versehen (ich soll sie mit Secure Tas Manager überprüfen). Was soll ich jetzt tun?

Hast du das Tool als Admin per Rechtsklick ausgeführt?
So aus dem Stehgreif kann ich dir das Programm und dessen Bedienung leider nicht erklären, mach erstmal einen Screenshot von den Ergebnissen.

So, ich hab nicht nur einen Screenshot gemacht, da ma auf jede svchost.exe Datei klicken kann und sich neue Abgründe, sprich ein Fenster, auftun .
Die letzte svchost.exe ist deaktiviert, darum hab ich mir die erstmal erspart zu uploaden, ich reiche sie aber nach, wenn ich im Verlaufe des Tages nochml Zeit habe =).

Reihenfolge ist 1;2,1;2,2;3;...;12


Shot at 2011-02-24


Shot at 2011-02-24


Shot at 2011-02-24


Shot at 2011-02-24



Shot at 2011-02-24


Shot at 2011-02-24


Shot at 2011-02-24


Shot at 2011-02-24


Shot at 2011-02-24


Shot at 2011-02-24


Shot at 2011-02-24





Viele Grüße

Clemo