BKA Computersperre UCASH

IceTea

Mich hat der BKA Virus auch erwischt. Ich habe bereits eine OTL Datei erstellt:

OTL logfile created on: 4/26/2011 11:03:49 PM - Run
OTLPE by OldTimer - Version 3.1.46.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 87.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 34.23 Gb Total Space | 2.97 Gb Free Space | 8.68% Space Free | Partition Type: NTFS
Drive D: | 465.53 Gb Total Space | 348.36 Gb Free Space | 74.83% Space Free | Partition Type: FAT32
Drive E: | 338.37 Gb Total Space | 160.94 Gb Free Space | 47.56% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto] -- -- (OMSI download service)
SRV - File not found [On_Demand] -- -- (FirebirdServerMAGIXInstance)
SRV - File not found [Auto] -- -- (BlueSoleil Hid Service)
SRV - [2011/03/17 14:24:01 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/11/09 13:40:36 | 000,135,336 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009/03/06 18:09:41 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/02/10 12:01:49 | 000,116,104 | ---- | M] () [Auto] -- C:\Programme\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2008/12/04 15:29:22 | 000,603,904 | ---- | M] (TuneUp Software) [Auto] -- C:\WINDOWS\system32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc)
SRV - [2008/12/04 15:29:21 | 000,362,240 | ---- | M] (TuneUp Software) [On_Demand] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2008/11/24 07:19:54 | 000,027,904 | ---- | M] (TuneUp Software) [Auto] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2008/04/04 06:34:02 | 000,147,456 | ---- | M] (Saitek) [Auto] -- C:\Programme\Saitek\DirectOutput\DirectOutputService.exe -- (SaiDOutput)
SRV - [2006/02/17 10:26:32 | 000,073,728 | ---- | M] (Hewlett-Packard Company) [Auto] -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe -- (LightScribeService)
SRV - [2005/11/13 20:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2005/01/31 04:45:20 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (SetupNTGLM7X)
DRV - File not found [Kernel | On_Demand] -- -- (Ser2pl)
DRV - File not found [Kernel | On_Demand] -- -- (RushTopDevice)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (NTACCESS)
DRV - File not found [Kernel | On_Demand] -- -- (MSICPL)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand] -- -- (GMSIPCI)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2011/03/17 14:24:05 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/12/03 13:59:23 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/12/19 14:22:01 | 000,104,512 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2009/06/29 09:14:00 | 000,027,008 | ---- | M] (Cambridge Silicon Radio Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\csrbcxp.sys -- (CSRBC)
DRV - [2009/06/10 06:23:04 | 000,036,992 | ---- | M] (Saitek) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SaiBus.sys -- (SaiNtBus)
DRV - [2009/06/10 06:23:04 | 000,014,080 | ---- | M] (Saitek) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SaiMini.sys -- (SaiMini)
DRV - [2009/05/11 05:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008/05/16 06:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM)
DRV - [2008/05/16 06:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS)
DRV - [2008/05/16 06:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV - [2008/05/16 06:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm)
DRV - [2008/05/16 06:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM)
DRV - [2008/05/16 06:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex)
DRV - [2008/05/16 06:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM)
DRV - [2008/04/25 09:54:58 | 000,036,384 | ---- | M] (Thesycon GmbH, Germany) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\npusbio.sys -- (npusbio)
DRV - [2008/04/13 14:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008/04/04 12:12:04 | 000,136,832 | ---- | M] (Saitek) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SaiH0762.sys -- (SaiH0762)
DRV - [2008/02/15 10:31:46 | 000,039,472 | ---- | M] (Paragon Software Group) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\hotcore3.sys -- (hotcore3)
DRV - [2008/01/09 05:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2007/08/23 05:27:02 | 000,053,760 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\SSHDRV76.sys -- (SSHDRV76)
DRV - [2007/03/23 13:51:20 | 000,022,816 | ---- | M] (NaturalPoint) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\npusb.sys -- (NPUSB)
DRV - [2006/11/30 09:14:22 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\se45unic.sys -- (se45unic) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (WDM)
DRV - [2006/11/30 09:14:14 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\se45obex.sys -- (se45obex)
DRV - [2006/11/30 09:14:10 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\se45mgmt.sys -- (se45mgmt) Sony Ericsson Device 069 USB WMC Device Management Drivers (WDM)
DRV - [2006/11/30 09:14:10 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\se45nd5.sys -- (se45nd5) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (NDIS)
DRV - [2006/11/30 09:14:04 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\se45mdm.sys -- (se45mdm)
DRV - [2006/11/30 09:14:04 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\se45mdfl.sys -- (se45mdfl)
DRV - [2006/11/30 09:13:56 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\se45bus.sys -- (se45bus) Sony Ericsson Device 069 driver (WDM)
DRV - [2006/11/15 09:34:40 | 004,225,920 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/11/01 08:42:14 | 000,033,280 | ---- | M] (AMD, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2006/08/09 10:40:58 | 000,009,600 | R--- | M] (VMware, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2006/04/24 05:52:28 | 000,100,736 | R--- | M] (NVIDIA Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2006/03/22 02:24:02 | 000,018,944 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006/03/22 02:24:00 | 000,052,736 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2005/08/31 05:34:52 | 000,020,480 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2005/08/31 05:34:10 | 000,020,480 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2005/07/29 11:26:54 | 000,023,000 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2005/07/29 11:21:32 | 000,011,988 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2005/04/30 09:50:10 | 000,028,271 | ---- | M] (IVT Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2005/04/30 09:48:58 | 000,010,804 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BtNetDrv.sys -- (BT)
DRV - [2005/04/12 13:21:32 | 000,022,240 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2005/04/12 13:21:32 | 000,017,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WmHidLo.sys -- (WmHidLo)
DRV - [2005/04/12 13:21:28 | 000,010,144 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2005/04/12 13:21:28 | 000,005,600 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2005/04/12 13:21:26 | 000,045,504 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2005/03/25 12:18:48 | 000,082,148 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2005/03/09 02:53:00 | 000,036,352 | R--- | M] (Advanced Micro Devices) [Kernel | System] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004/12/16 11:32:54 | 000,013,304 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BTNetFilter.sys -- (BTNetFilter)
DRV - [2004/10/19 08:37:38 | 000,061,312 | ---- | M] (IVT Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2004/08/23 07:55:54 | 000,029,440 | ---- | M] (Siemens AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\actser.sys -- (actser)
DRV - [2004/04/30 03:37:02 | 000,160,640 | ---- | M] ( ) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\a347bus.sys -- (a347bus)
DRV - [2004/04/30 03:33:00 | 000,005,248 | ---- | M] ( ) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\a347scsi.sys -- (a347scsi)
DRV - [2004/02/06 16:40:02 | 000,012,160 | ---- | M] (Dhauzimmer) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\P8000f.sys -- (P8000f)
DRV - [2001/11/29 04:45:26 | 000,214,368 | R--- | M] (Divio Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pcam800.sys -- (DCamUSBNW800)
DRV - [2001/08/17 09:02:32 | 000,008,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\hidgame.sys -- (hidgame)
DRV - [2001/08/17 08:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
DRV - [2001/08/17 07:19:34 | 000,040,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\es1371mp.sys -- (es1371) Creative AudioPCI (ES1371,ES1373) (WDM)
DRV - [2001/08/17 07:14:24 | 000,444,416 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\fpcibase.sys -- (fpcibase)
DRV - [2001/08/17 07:13:48 | 000,037,568 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\avmwan.sys -- (AVMWAN)
DRV - [1998/08/06 19:00:00 | 000,069,840 | ---- | M] (AVM Berlin) [Kernel | Auto] -- C:\WINDOWS\System32\drivers\avmport.sys -- (AVMPORT)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\IceTea_ON_C\Software\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter =
IE - HKU\IceTea_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0






Hosts file not found
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - File not found
O2 - BHO: (bho2gr Class) - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - File not found
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programme\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKU\IceTea_ON_C\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Programme\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKU\IceTea_ON_C\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [amd_dc_opt] C:\Programme\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Programme\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Programme\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Programme\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe (CANON INC.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [ProfilerU] C:\Programme\Saitek\SD6\Software\ProfilerU.exe (Saitek)
O4 - HKLM..\Run: [QuickTime Task] File not found
O4 - HKLM..\Run: [SaiMfd] C:\Programme\Saitek\SD6\Software\SaiMfd.exe (Saitek)
O4 - HKU\IceTea_ON_C..\Run: [4E3E0230AEBB4E96] C:\Recycle.Bin\Recycle.Bin.exe (Macromedia, Inc.)
O4 - HKU\IceTea_ON_C..\Run: [AnyDVD] File not found
O4 - HKU\IceTea_ON_C..\Run: [H/PC Connection Agent] File not found
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\BlueSoleil.lnk = File not found
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\IceTea\Startmenü\Programme\Autostart\DCS.bat ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\IceTea_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - File not found
O9 - Extra 'Tools' menuitem : Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - File not found
O9 - Extra Button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - File not found
O9 - Extra 'Tools' menuitem : PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - File not found
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Reg Error: Key error.)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab (System Requirements Lab Class)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} hxxp://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab (YInstStarter Class)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab (DLM Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1164491273796 (MUWebControl Class)
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} hxxp://www.moviegroup.tv/activex/DownloadMgr.cab (InetDownload Class)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Java Plug-in 1.5.0_09)
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mctp {d7b95390-b1c5-11d0-b111-0080c712fe82} - Reg Error: Key error. File not found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (C:\DOKUME~1\IceTea\LOKALE~1\Temp\1zu5iwsz.exe) - C:\Dokumente und Einstellungen\IceTea\Lokale Einstellungen\Temp\1zu5iwsz.exe ()
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/11/23 11:13:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{ba57198e-8acb-11df-8ea1-001617bf0c25}\Shell\AutoRun\command - "" = H:\Menu.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/04/26 12:18:32 | 000,143,360 | ---- | C] (Macromedia, Inc.) -- C:\WINDOWS\System32\null0.20446400493806582.exe
[2011/04/26 12:05:39 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\NetworkService\Favoriten
[2011/04/26 12:05:35 | 000,143,360 | ---- | C] (Macromedia, Inc.) -- C:\WINDOWS\System32\null0.5873088251353679.exe
[2011/04/26 12:05:35 | 000,143,360 | ---- | C] (Macromedia, Inc.) -- C:\WINDOWS\System32\null0.5126565617414302.exe
[2011/04/26 12:05:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Adobe
[2011/04/26 12:05:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Macromedia
[2011/04/26 12:05:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Adobe
[2011/04/26 12:04:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Sun
[2009/08/29 06:45:56 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpeE.dll
[2007/05/18 07:33:23 | 000,160,640 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347bus.sys
[2007/05/18 07:33:23 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347scsi.sys
[2004/11/24 15:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/04/26 12:56:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/04/26 12:33:59 | 000,013,762 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/04/26 12:30:33 | 000,097,792 | ---- | M] () -- C:\Dokumente und Einstellungen\IceTea\Desktop\null0.29003917652426414.exe
[2011/04/26 12:23:00 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/26 12:18:32 | 000,143,360 | ---- | M] (Macromedia, Inc.) -- C:\WINDOWS\System32\null0.20446400493806582.exe
[2011/04/26 12:05:37 | 000,143,360 | ---- | M] (Macromedia, Inc.) -- C:\WINDOWS\System32\null0.5873088251353679.exe
[2011/04/26 12:05:36 | 000,143,360 | ---- | M] (Macromedia, Inc.) -- C:\WINDOWS\System32\null0.5126565617414302.exe
[2011/04/26 12:04:21 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/04/26 12:00:01 | 000,000,494 | ---- | M] () -- C:\WINDOWS\tasks\1-Klick-Wartung.job
[2011/04/26 11:56:00 | 000,196,795 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/04/24 13:53:43 | 000,025,598 | ---- | M] () -- C:\WINDOWS\cdplayer.ini
[2011/04/23 13:23:00 | 000,001,084 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/23 06:10:45 | 000,002,479 | ---- | M] () -- C:\Dokumente und Einstellungen\IceTea\Desktop\Microsoft Outlook.lnk
[2011/04/15 12:27:49 | 002,566,664 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/15 11:35:25 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/04/15 11:34:48 | 000,459,588 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2011/04/15 11:34:48 | 000,441,696 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/04/15 11:34:48 | 000,084,966 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2011/04/15 11:34:48 | 000,071,632 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/04/26 12:30:32 | 000,097,792 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\Desktop\null0.29003917652426414.exe
[2011/04/26 12:04:21 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/02/19 11:52:50 | 001,060,864 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2011/02/19 11:52:50 | 000,909,312 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2011/02/19 11:52:50 | 000,544,256 | ---- | C] () -- C:\WINDOWS\System32\janGraphics.dll
[2011/02/19 11:52:50 | 000,454,656 | ---- | C] () -- C:\WINDOWS\System32\PaintX.dll
[2011/02/19 11:52:50 | 000,182,784 | ---- | C] () -- C:\WINDOWS\System32\DGVorbis.dll
[2011/02/19 11:52:50 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\MP3DEE.DLL
[2011/02/19 11:52:50 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2011/02/19 11:52:49 | 000,029,184 | ---- | C] () -- C:\WINDOWS\System32\kwab.dll
[2011/01/02 14:35:37 | 000,000,940 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\.recently-used.xbel
[2010/12/27 14:53:15 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\nY.exe
[2010/12/27 14:49:40 | 000,851,968 | ---- | C] () -- C:\WINDOWS\System32\SaiC0762.Dll
[2010/12/27 14:49:40 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\SaiC0762_0C.dll
[2010/12/27 14:49:40 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\SaiC0762_10.dll
[2010/12/27 14:49:40 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\SaiC0762_0A.dll
[2010/12/27 14:49:40 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\SaiC0762_07.dll
[2010/12/27 14:49:40 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\SaiC0762_09.dll
[2010/12/27 14:49:40 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\SaiC0762_0402.dll
[2010/12/27 14:49:40 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\SaiC0762_11.dll
[2010/12/05 09:39:02 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010/11/08 13:34:50 | 000,039,095 | ---- | C] () -- C:\WINDOWS\iccsigs.dat
[2010/10/20 14:25:31 | 000,080,896 | ---- | C] () -- C:\WINDOWS\cadkasdeinst01.exe
[2010/09/09 09:52:11 | 000,045,400 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\mdbu.bin
[2010/08/07 12:07:27 | 000,000,029 | ---- | C] () -- C:\WINDOWS\Battle.ini
[2010/07/04 09:40:24 | 000,000,021 | ---- | C] () -- C:\WINDOWS\progman.ini
[2010/06/11 04:57:08 | 000,024,456 | ---- | C] () -- C:\WINDOWS\System32\TALDM32A.dll
[2010/06/11 04:57:06 | 000,052,616 | ---- | C] () -- C:\WINDOWS\System32\TAL12832.DLL
[2010/06/11 04:57:06 | 000,022,920 | ---- | C] () -- C:\WINDOWS\System32\TALDM32.DLL
[2010/06/11 04:56:58 | 000,255,368 | ---- | C] () -- C:\WINDOWS\System32\SBSPAIN3.DLL
[2010/06/11 04:56:54 | 000,075,656 | ---- | C] () -- C:\WINDOWS\System32\ENCODE32.DLL
[2010/03/19 09:27:23 | 000,000,112 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\Mediaport.conf
[2009/01/14 12:29:42 | 000,000,958 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\desinstart.bat
[2009/01/14 12:29:42 | 000,000,665 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\desinst.bat
[2009/01/14 12:29:42 | 000,000,612 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\dialogysMPFuser.prf
[2009/01/14 12:29:42 | 000,000,189 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\save_uninst.bat
[2009/01/14 12:29:42 | 000,000,185 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\dialogysClip.prf
[2009/01/14 12:29:42 | 000,000,130 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\dialogysInstall.prf
[2009/01/03 15:50:59 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2008/11/30 17:09:28 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys
[2008/10/02 14:37:48 | 000,014,852 | ---- | C] () -- C:\Programme\settings.dat
[2008/07/09 12:23:10 | 000,042,296 | ---- | C] () -- C:\WINDOWS\System32\SBSPAINT.DLL
[2008/07/09 12:23:06 | 000,050,488 | ---- | C] () -- C:\WINDOWS\System32\SBSPAIN2.DLL
[2008/05/18 08:25:27 | 000,000,320 | ---- | C] () -- C:\WINDOWS\game.ini
[2008/05/18 07:00:35 | 004,244,744 | ---- | C] () -- C:\WINDOWS\System32\qtp-mt334.dll
[2008/05/18 07:00:35 | 000,247,560 | ---- | C] () -- C:\WINDOWS\System32\prgiso.dll
[2008/05/18 07:00:35 | 000,013,576 | ---- | C] () -- C:\WINDOWS\System32\wnaspi32.dll
[2008/02/03 13:13:08 | 000,003,536 | ---- | C] () -- C:\WINDOWS\nero.INI
[2008/02/02 14:09:20 | 000,000,107 | ---- | C] () -- C:\WINDOWS\IfoEdit.INI
[2008/01/31 14:46:52 | 000,002,508 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\$_hpcst$.hpc
[2007/11/02 05:24:57 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2007/11/02 05:24:57 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2007/11/02 05:24:32 | 000,185,344 | ---- | C] () -- C:\WINDOWS\patchw32.dll
[2007/10/13 12:51:54 | 000,036,864 | R--- | C] () -- C:\WINDOWS\jpgl.dll
[2007/10/13 12:51:54 | 000,032,768 | R--- | C] () -- C:\WINDOWS\div_iyuv.dll
[2007/09/17 16:03:00 | 000,038,332 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Microsoft Excel.ADR
[2007/09/17 14:59:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI
[2007/09/17 12:08:00 | 000,000,041 | ---- | C] () -- C:\WINDOWS\pos.ini
[2007/09/12 09:01:40 | 000,003,063 | ---- | C] () -- C:\WINDOWS\tm.ini
[2007/09/12 08:11:36 | 000,000,516 | ---- | C] () -- C:\WINDOWS\wiso.ini
[2007/09/12 08:06:58 | 000,000,276 | ---- | C] () -- C:\WINDOWS\BUHL.INI
[2007/08/23 05:27:02 | 000,053,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\SSHDRV76.sys
[2007/07/28 08:58:30 | 000,006,537 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2007/06/16 08:49:16 | 000,188,416 | ---- | C] () -- C:\WINDOWS\AppTextG.dll
[2007/04/29 06:55:48 | 000,025,598 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2007/04/04 11:46:36 | 000,000,952 | ---- | C] () -- C:\WINDOWS\uninstall_RG3.ini
[2007/03/27 12:40:35 | 000,000,061 | -HS- | C] () -- C:\WINDOWS\cnerolf.dat
[2007/03/17 05:47:05 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\mrvtcl.dll
[2007/03/17 05:46:54 | 000,001,397 | ---- | C] () -- C:\WINDOWS\SimView.ini
[2007/03/17 05:46:54 | 000,000,107 | ---- | C] () -- C:\WINDOWS\Jeppesen.ini
[2007/03/10 06:00:14 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\sh33w32.dll
[2007/02/07 17:23:32 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\$_hpcst$.hpc
[2007/01/11 14:32:25 | 000,000,043 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
[2007/01/03 13:56:56 | 000,037,376 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/12/15 13:25:21 | 000,000,029 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\B50LOAD.DAT
[2006/12/02 15:18:45 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/12/02 12:55:41 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\SI.bin
[2006/12/02 06:35:33 | 000,040,960 | ---- | C] () -- C:\Programme\Uninstall_CDS.exe
[2006/12/02 06:14:33 | 000,000,125 | -HS- | C] () -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\.zreglib
[2006/11/29 12:51:56 | 000,000,139 | ---- | C] () -- C:\Dokumente und Einstellungen\IceTea\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2006/11/25 11:45:24 | 000,373,248 | ---- | C] () -- C:\WINDOWS\EyeCand3.INI
[2006/11/25 11:34:00 | 000,026,112 | R--- | C] () -- C:\WINDOWS\RunUnDrv.exe
[2006/11/25 10:00:54 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\TelPort.dll
[2006/11/25 09:49:59 | 000,283,648 | ---- | C] () -- C:\WINDOWS\unin0407.exe
[2006/11/24 10:28:14 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2006/11/23 18:43:05 | 000,217,088 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll
[2006/11/23 15:51:46 | 000,006,702 | ---- | C] () -- C:\WINDOWS\System32\drivers\FlashSys.sys
[2006/11/23 15:24:26 | 000,006,656 | ---- | C] () -- C:\WINDOWS\System32\CNMVS5m.DLL
[2006/11/23 13:22:45 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/11/23 12:02:58 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2006/11/23 11:37:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\msicpl.ini
[2006/11/23 11:22:45 | 000,200,704 | R--- | C] () -- C:\WINDOWS\System32\WinSys.exe
[2006/11/23 11:22:45 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\sw24.exe
[2006/11/23 11:22:45 | 000,009,728 | R--- | C] () -- C:\WINDOWS\System32\sysinfoX64.sys
[2006/11/23 11:22:45 | 000,008,192 | R--- | C] () -- C:\WINDOWS\System32\sysinfo.sys
[2006/11/23 11:22:44 | 000,208,896 | R--- | C] () -- C:\WINDOWS\System32\sw20.exe
[2006/11/23 11:14:58 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2006/11/23 11:10:33 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2006/11/23 11:01:06 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006/11/23 11:00:05 | 002,566,664 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2006/11/02 12:10:16 | 000,080,912 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe
[2006/10/28 14:10:44 | 000,016,384 | ---- | C] () -- C:\WINDOWS\System32\ac3config.exe
[2006/08/08 02:54:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006/08/08 02:54:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2006/08/08 02:54:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006/08/08 02:54:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2006/08/08 02:54:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006/08/08 02:54:00 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/08/08 02:54:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006/08/08 02:54:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2006/08/08 02:54:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2006/08/08 02:54:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/02/28 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2006/02/28 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2006/02/28 08:00:00 | 000,459,588 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2006/02/28 08:00:00 | 000,441,696 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2006/02/28 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2006/02/28 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2006/02/28 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2006/02/28 08:00:00 | 000,084,966 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2006/02/28 08:00:00 | 000,071,632 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2006/02/28 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2006/02/28 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2006/02/28 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2006/02/28 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006/02/28 08:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2006/02/28 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2006/02/28 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2005/07/29 11:21:32 | 000,011,988 | ---- | C] () -- C:\WINDOWS\System32\drivers\vbtenum.sys
[2004/12/16 11:32:54 | 000,013,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\BTNetFilter.sys
[2004/10/12 02:40:58 | 002,255,360 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2004/10/12 02:39:48 | 000,028,160 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll
[2004/10/12 02:39:08 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2004/10/09 02:40:16 | 000,454,144 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll
[2004/10/05 04:16:08 | 000,395,776 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2004/10/03 13:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll
[2004/07/11 15:41:53 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2004/07/11 15:41:52 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\vbpng.dll
[2002/09/17 19:45:00 | 000,119,808 | ---- | C] () -- C:\WINDOWS\lsb_un20.exe

========== LOP Check ==========

[2009/02/17 17:18:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Azureus
[2011/02/16 20:36:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\BitTorrent
[2008/09/07 14:05:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Buhl Data Service
[2010/10/20 14:25:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\CAD-KAS
[2010/08/14 12:08:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Cambridge Silicon Radio
[2010/12/13 15:56:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Canon
[2010/12/03 14:34:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Canon Easy-WebPrint EX
[2007/09/12 13:59:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\CD-LabelPrint
[2009/12/08 10:37:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Desktopicon
[2011/03/05 12:44:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Dropbox
[2006/12/02 06:20:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Elaborate Bytes
[2011/02/28 16:04:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Elsay
[2010/01/04 15:02:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\FileZilla
[2010/02/10 16:26:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\FRITZ!
[2010/02/16 10:54:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\FRITZ!fax für FRITZ!Box
[2007/01/02 09:18:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\GetRightToGo
[2009/09/30 15:12:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\GoPal Assistant
[2010/10/20 14:41:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\gtk-2.0
[2010/07/04 09:40:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\HaCon
[2007/07/28 09:30:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\MAGIX
[2008/02/26 14:34:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Mobile Master
[2008/12/27 06:02:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Mp3tag
[2008/12/28 15:06:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\MrJobs
[2011/01/05 14:46:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\MyPhoneExplorer
[2009/01/03 08:56:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Notepad++
[2006/12/02 06:15:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\SlySoft
[2007/09/17 14:56:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Teleca
[2010/11/24 17:31:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\TS3Client
[2006/11/25 13:36:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\TuneUp Software
[2007/11/02 05:24:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\ubi.com
[2008/02/05 12:11:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Ulead Systems
[2011/03/02 15:12:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\Umonyk
[2008/05/17 12:52:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\IceTea\Anwendungsdaten\XCPCSync.OEM
[2010/10/30 07:47:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\FRITZ!
[2010/09/09 09:27:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aldi Sued Fotoservice
[2010/02/06 07:53:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Bluetooth
[2008/09/07 14:05:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Buhl Data Service GmbH
[2010/12/03 14:29:51 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2011/01/26 15:03:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJ
[2010/12/03 14:51:46 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJEGV
[2010/12/13 16:31:35 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJEPPEX
[2010/12/05 14:50:15 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJMyPrinter
[2011/04/15 10:44:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJPLM
[2010/12/13 15:58:30 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJScan
[2010/12/05 14:50:19 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJSolutionMenu
[2007/01/18 13:49:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Elaborate Bytes
[2010/07/04 09:40:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HaCon
[2010/02/16 10:54:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ISDNWatch
[2007/07/28 09:00:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2010/12/29 16:43:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Saitek
[2007/04/13 08:16:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft
[2008/02/05 12:08:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SmartSound Software Inc
[2010/09/09 08:53:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\STAMPIT
[2011/02/16 16:41:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2006/11/25 13:35:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2008/02/05 12:11:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ulead Systems
[2007/03/22 14:04:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WinZip
[2010/01/05 11:14:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WOP
[2008/12/04 15:28:56 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{55A29068-F2CE-456C-9148-C869879E2357}
[2011/04/26 12:00:01 | 000,000,494 | ---- | M] () -- C:\WINDOWS\Tasks\1-Klick-Wartung.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 24 bytes -> C:\WINDOWS:E72A738A8FCD6DE6
@Alternate Data Stream - 229 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:8FF81EB0
@Alternate Data Stream - 164 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A5B56640
< End of report >

Ich hoffe Ihr koennt mir helfen und sage schon mal vielen Dank.