Trojaner-Board - Whitescreen; "Warten Sie während die Verbindung hergestellt wird..."

OTL Logfile:
Code:
OTL logfile created on: 3/2/2012 9:33:48 PM - Run 

OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE

Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy

 

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 87.00% Memory free

2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 73.52 Gb Total Space | 4.44 Gb Free Space | 6.04% Space Free | Partition Type: NTFS

Drive G: | 3.81 Gb Total Space | 3.81 Gb Free Space | 99.99% Space Free | Partition Type: FAT32

Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: REATOGO | User Name: SYSTEM

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

Using ControlSet: ControlSet001

 
 ========== Win32 Services (SafeList) ==========

 

SRV - File not found [Disabled] --  -- (HidServ)

SRV - [2011/08/28 03:41:10 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2011/04/29 00:43:45 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2010/10/15 18:40:40 | 000,037,664 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)

SRV - [2009/05/06 12:53:50 | 001,220,608 | ---- | M] (MAGIX AG) [Auto] -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe -- (Fabs)

SRV - [2008/08/07 05:10:02 | 003,276,800 | ---- | M] (MAGIX®) [On_Demand] -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)

SRV - [2008/04/13 21:23:02 | 000,005,632 | ---- | M] (Oak Technology Inc.) [Auto] -- C:\WINDOWS\system32\digisptiservice.dll -- (uhcd)

SRV - [2006/12/13 20:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)

SRV - [2006/12/13 20:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)

SRV - [2006/12/13 19:46:16 | 000,057,344 | ---- | M] () [On_Demand] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)

SRV - [2004/10/21 21:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)

SRV - [2004/03/18 09:55:48 | 000,065,536 | ---- | M] (HP) [On_Demand] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)

SRV - [2003/07/28 05:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

SRV - [2003/06/19 16:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE -- (MDM)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand] --  -- (WDICA)

DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)

DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)

DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)

DRV - File not found [Kernel | System] --  -- (PCIDump)

DRV - File not found [Kernel | System] --  -- (lbrtfdc)

DRV - File not found [Kernel | System] --  -- (i2omgmt)

DRV - File not found [Kernel | On_Demand] --  -- (FsUsbExDisk)

DRV - File not found [Kernel | On_Demand] --  -- (ddxgb)

DRV - File not found [Kernel | On_Demand] --  -- (cpuz132)

DRV - File not found [Kernel | System] --  -- (Changer)

DRV - [2011/08/28 03:41:13 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)

DRV - [2011/08/28 03:41:13 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)

DRV - [2010/12/21 00:55:02 | 000,121,576 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)

DRV - [2010/12/21 00:55:02 | 000,098,560 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sscebus.sys -- (sscebus) SAMSUNG USB Composite Device V2 driver (WDM)

DRV - [2010/12/21 00:55:02 | 000,096,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)

DRV - [2010/12/21 00:55:02 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)

DRV - [2009/09/10 07:55:52 | 000,102,528 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)

DRV - [2009/07/24 11:33:24 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ewusbdev.sys -- (hwusbdev)

DRV - [2009/05/11 04:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)

DRV - [2009/05/11 02:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)

DRV - [2008/04/13 13:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)

DRV - [2008/04/13 13:40:46 | 000,062,976 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\cdrom.sys -- (Cdrom)

DRV - [2006/09/18 11:42:48 | 000,141,824 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (HdAudAddService)

DRV - [2005/05/09 14:08:40 | 000,033,792 | ---- | M] (Team H2O) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\cledx.sys -- (CLEDX)

DRV - [2004/08/04 07:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)

DRV - [2004/08/04 07:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)

DRV - [2004/08/03 16:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C)

DRV - [2001/04/09 08:03:56 | 000,017,784 | ---- | M] (Syncrosoft Hard- und Software GmbH) [Kernel | Auto] -- C:\WINDOWS\System32\drivers\NSynas32.sys -- (Nsynas32)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=d45f38f200000000000000e07d99ca5b&tlver=1.4.19.19&ss=1&affID=17395

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\Emanuel_Leuthner_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?SearchSource=10&ctid=CT2096149

IE - HKU\Emanuel_Leuthner_ON_C\..\URLSearchHook: {69b6939f-c70d-45c5-9bbd-e2e2cc3dd8e5} - C:\Programme\Eazel-DE\prxtbEaz0.dll (Conduit Ltd.)

IE - HKU\Emanuel_Leuthner_ON_C\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)

IE - HKU\Emanuel_Leuthner_ON_C\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)

IE - HKU\Emanuel_Leuthner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1

IE - HKU\Emanuel_Leuthner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\Emanuel_Leuthner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:49273

 

 

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultengine: "Ask.com"

FF - prefs.js..browser.search.defaultenginename: "Web Search"

FF - prefs.js..browser.search.defaultthis.engineName: "Eazel-DE Customized Web Search"

FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2096149&SearchSource=3&q={searchTerms}"

FF - prefs.js..browser.search.order.1: "Web Search"

FF - prefs.js..browser.search.selectedEngine: "Web Search"

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "hxxp://forestle.at/"

FF - prefs.js..extensions.enabledItems: {69b6939f-c70d-45c5-9bbd-e2e2cc3dd8e5}:3.3.0.19

FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0

FF - prefs.js..keyword.URL: "hxxp://www.searchqu.com//web?src=ffb&appid=0&systemid=410&sr=0&q="

FF - prefs.js..network.proxy.http: "127.0.0.1"

FF - prefs.js..network.proxy.http_port: 49273

FF - prefs.js..network.proxy.type: 0

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Oracle)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmdownloader@gmail.com: C:\Programme\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ [2012/02/09 16:46:15 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/02/18 05:14:26 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012/02/23 13:29:42 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}: C:\Programme\PriceGong\2.1.0\FF [2010/07/02 11:48:46 | 000,000,000 | ---D | M]

 

[2010/09/23 14:04:59 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mozilla\Extensions

[2010/09/23 14:04:59 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mozilla\Extensions\mozswing@mozswing.org

[2012/02/14 16:33:21 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mozilla\Firefox\Profiles\jl97i693.default\extensions

[2012/01/08 15:49:42 | 000,000,000 | ---D | M] (Eazel-DE Community Toolbar) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mozilla\Firefox\Profiles\jl97i693.default\extensions\{69b6939f-c70d-45c5-9bbd-e2e2cc3dd8e5}

[2011/09/23 11:16:44 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mozilla\Firefox\Profiles\jl97i693.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}

[2010/12/04 18:07:59 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mozilla\Firefox\Profiles\jl97i693.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2010/07/02 11:39:41 | 000,000,000 | ---D | M] (DVDVideoSoft Toolbar) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mozilla\Firefox\Profiles\jl97i693.default\extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}

[2011/05/04 13:06:57 | 000,002,398 | ---- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Mozilla\Firefox\Profiles\jl97i693.default\searchplugins\askcom.xml

[2011/01/14 13:53:20 | 000,000,921 | ---- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Mozilla\Firefox\Profiles\jl97i693.default\searchplugins\conduit.xml

[2011/09/23 11:16:29 | 000,002,503 | ---- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Mozilla\Firefox\Profiles\jl97i693.default\searchplugins\SearchResults.xml

[2011/11/09 04:48:16 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

File not found (No name found) -- 

() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\EMANUEL LEUTHNER\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\JL97I693.DEFAULT\EXTENSIONS\{C0C9A2C7-2E5C-4447-BC53-97718BC91E1B}.XPI

[2012/02/18 05:14:26 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll

[2010/09/05 02:39:22 | 000,423,656 | ---- | M] (Oracle) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll

[2011/11/04 22:38:54 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml

[2011/11/04 22:32:18 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml

[2011/11/04 22:38:54 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml

[2011/11/04 22:38:54 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml

[2011/09/23 11:16:29 | 000,002,503 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\SearchResults.xml

[2011/11/04 22:38:54 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml

[2011/11/04 22:38:54 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

 

Hosts file not found

O2 - BHO: (PriceGongBHO Class) - {1631550F-191D-4826-B069-D9439253D926} - C:\Programme\PriceGong\2.1.0\PriceGongIE.dll (PriceGong)

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O2 - BHO: (Eazel-DE Toolbar) - {69b6939f-c70d-45c5-9bbd-e2e2cc3dd8e5} - C:\Programme\Eazel-DE\prxtbEaz0.dll (Conduit Ltd.)

O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)

O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Programme\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()

O2 - BHO: (Loader Class) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Programme\Windows Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)

O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)

O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Programme\kikin\ie_kikin.dll (kikin)

O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (Eazel-DE Toolbar) - {69b6939f-c70d-45c5-9bbd-e2e2cc3dd8e5} - C:\Programme\Eazel-DE\prxtbEaz0.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Programme\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()

O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.

O3 - HKU\Emanuel_Leuthner_ON_C\..\Toolbar\WebBrowser: (Eazel-DE Toolbar) - {69B6939F-C70D-45C5-9BBD-E2E2CC3DD8E5} - C:\Programme\Eazel-DE\prxtbEaz0.dll (Conduit Ltd.)

O3 - HKU\Emanuel_Leuthner_ON_C\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)

O3 - HKU\Emanuel_Leuthner_ON_C\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)

O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [AppleSyncNotifier] C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)

O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [DATAMNGR] C:\Programme\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)

O4 - HKLM..\Run: [DivXUpdate] C:\Programme\DivX\DivX Update\DivXUpdate.exe ()

O4 - HKLM..\Run: [H2O] C:\Programme\Syncrosoft\POS\H2O\cledx.exe (Team H2O)

O4 - HKLM..\Run: [HP Software Update] C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)

O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe (HP)

O4 - HKLM..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe (Hewlett-Packard)

O4 - HKLM..\Run: [HPHUPD05] C:\Programme\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe ()

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz]  File not found

O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

O4 - HKLM..\Run: [VX2bt1oYNKCLnkO] C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe (Cutting Edge Software Inc.)

O4 - HKU\Emanuel_Leuthner_ON_C..\Run: [KiesPDLR] C:\Programme\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()

O4 - HKU\Emanuel_Leuthner_ON_C..\Run: [mediaplayer] C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mediaplayer\mediaplayer.exe ()

O4 - HKU\Emanuel_Leuthner_ON_C..\Run: [msnmsgr]  File not found

O4 - HKU\Emanuel_Leuthner_ON_C..\Run: [VX2bt1oYNKCLnkO] C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe (Cutting Edge Software Inc.)

O4 - Startup: C:\Dokumente und Einstellungen\Emanuel Leuthner\Startmenü\Programme\Autostart\0.43829912067954735g8j8.exe.lnk = X:\I386\SYSTEM32\RUNDLL32.EXE (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\Emanuel_Leuthner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\Emanuel_Leuthner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0

O7 - HKU\Emanuel_Leuthner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1

O7 - HKU\Emanuel_Leuthner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1

O7 - HKU\Emanuel_Leuthner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1

O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()

O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()

O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Programme\kikin\ie_kikin.dll (kikin)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000009 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000010 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000011 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000012 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000013 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000014 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000015 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000016 -  File not found

O10 - Protocol_Catalog9\Catalog_Entries\000000000017 -  File not found

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Programme\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)

O20 - AppInit_DLLs: (C:\PROGRA~1\WI9130~1\Datamngr\datamngr.dll) - C:\Programme\Windows Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)

O20 - HKLM Winlogon: Shell - (C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe) - C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe (Cutting Edge Software Inc.)

O20 - HKLM Winlogon: UserInit - (C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe) - C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe (Cutting Edge Software Inc.)

O20 - HKU\Emanuel_Leuthner_ON_C Winlogon: Shell - (C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe) - C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe (Cutting Edge Software Inc.)

O20 - HKU\Emanuel_Leuthner_ON_C Winlogon: UserInit - (C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe) - C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe (Cutting Edge Software Inc.)

O20 - Winlogon\Notify\gyeuses: DllName - Reg Error: Value error. - Reg Error: Value error. File not found

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: 

O24 - Desktop BackupWallPaper: 

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010/04/11 09:06:50 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]

O33 - MountPoints2\{012cab7a-99a8-11e0-bee6-00e07d99ca5b}\Shell - "" = AutoRun

O33 - MountPoints2\{012cab7a-99a8-11e0-bee6-00e07d99ca5b}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{012cab7a-99a8-11e0-bee6-00e07d99ca5b}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O33 - MountPoints2\{012cab7e-99a8-11e0-bee6-00e07d99ca5b}\Shell - "" = AutoRun

O33 - MountPoints2\{012cab7e-99a8-11e0-bee6-00e07d99ca5b}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{012cab7e-99a8-11e0-bee6-00e07d99ca5b}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O33 - MountPoints2\{012cab80-99a8-11e0-bee6-00e07d99ca5b}\Shell - "" = AutoRun

O33 - MountPoints2\{012cab80-99a8-11e0-bee6-00e07d99ca5b}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{012cab80-99a8-11e0-bee6-00e07d99ca5b}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O33 - MountPoints2\{012cab82-99a8-11e0-bee6-00e07d99ca5b}\Shell - "" = AutoRun

O33 - MountPoints2\{012cab82-99a8-11e0-bee6-00e07d99ca5b}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{012cab82-99a8-11e0-bee6-00e07d99ca5b}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O34 - HKLM BootExecute: (autocheck autochk *) -  File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)

ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4

ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe

ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {5ueDxYLo-I543-1otK-kGTs-C9Y55G4HYphK} - 

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework

ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner

ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1

ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

 

NetSvcs: 6to4 -  File not found

NetSvcs: HidServ -  File not found

NetSvcs: Ias -  File not found

NetSvcs: Iprip -  File not found

NetSvcs: Irmon -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: uhcd - C:\WINDOWS\system32\digisptiservice.dll (Oak Technology Inc.)

NetSvcs: WmdmPmSp -  File not found

 

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012/03/02 11:27:38 | 000,304,128 | ---- | C] (Cutting Edge Software Inc.) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe

[2012/03/02 07:27:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\Alexander

[2012/02/27 17:10:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\Programme

[2012/02/23 13:28:47 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Adobe

[2012/02/23 13:28:47 | 000,000,000 | ---D | C] -- C:\Programme\Adobe

[2012/02/23 02:44:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mediaplayer

[2012/02/19 11:51:53 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\IECompatCache

[2012/02/14 17:12:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\xml_param

[2012/02/14 17:11:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Eigene Dateien\Aimersoft Video Converter Std

[2012/02/14 17:11:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Aimersoft Video Converter Std

[2012/02/14 17:11:16 | 000,892,928 | ---- | C] (Free Software Foundation) -- C:\WINDOWS\System32\iconv.dll

[2012/02/14 17:11:13 | 000,000,000 | ---D | C] -- C:\Programme\Aimersoft

[2012/02/12 04:42:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\YouTube Downloader

[2012/02/12 04:42:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\YouTube Downloader

[2012/02/12 04:42:22 | 000,000,000 | ---D | C] -- C:\Programme\YouTube Downloader

[2012/02/09 16:46:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Eigene Dateien\Freemake

[2012/02/09 16:46:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Freemake

[2012/02/09 16:44:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Startmenü\Programme\Freemake

[2012/02/09 16:44:02 | 000,000,000 | ---D | C] -- C:\Programme\Freemake

[2012/02/09 16:44:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Freemake

[2012/02/07 08:31:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\Autounfall

[2012/02/07 07:20:59 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\PrivacIE

[2012/02/07 07:18:36 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\IETldCache

[2012/02/07 06:53:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM

[2012/02/07 06:52:34 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8

[2012/02/07 06:38:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\searchquband

[2012/02/03 09:39:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe

[2010/04/11 11:38:19 | 008,188,856 | ---- | C] (Mozilla) -- C:\Programme\Firefox Setup 3.6.3.exe

[2010/04/11 10:28:48 | 000,562,856 | ---- | C] (Google Inc.) -- C:\Programme\ChromeSetup.exe

[2010/04/11 10:04:08 | 023,525,568 | ---- | C] (Hewlett-Packard Company                            ) -- C:\Programme\hp_53_deu.exe

[2007/08/13 11:46:00 | 000,102,912 | ---- | C] (Albert L Faber) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\CDRip.dll

[2007/01/18 15:09:54 | 000,623,616 | ---- | C] (Ivan Bischof ©2003 - 2005) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\No23 Recorder.exe

[2006/12/11 13:13:14 | 000,013,872 | ---- | C] (Un4seen Developments) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\basscd.dll

[2006/12/11 13:13:12 | 000,097,336 | ---- | C] (Un4seen Developments) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\bass.dll

[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[1 C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\*.tmp files -> C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012/03/02 15:04:35 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2012/03/02 13:00:39 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2012/03/02 13:00:38 | 000,001,106 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2012/03/02 13:00:38 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\OGALogon.job

[2012/03/02 12:41:43 | 000,000,000 | -HS- | M] () -- C:\WINDOWS\System32\dds_trash_log.cmd

[2012/03/02 12:32:10 | 000,001,110 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2012/03/02 11:27:36 | 000,304,128 | ---- | M] (Cutting Edge Software Inc.) -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\h6s5ruij653.exe

[2012/03/02 11:07:00 | 000,000,358 | ---- | M] () -- C:\WINDOWS\tasks\HP Usg Daily.job

[2012/03/02 09:33:55 | 000,276,202 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml

[2012/03/02 09:04:05 | 000,000,798 | ---- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Startmenü\Programme\Autostart\0.43829912067954735g8j8.exe.lnk

[2012/03/01 11:32:21 | 000,000,302 | ---- | M] () -- C:\WINDOWS\tasks\photostageShakeIcon.job

[2012/03/01 11:32:21 | 000,000,302 | ---- | M] () -- C:\WINDOWS\tasks\photostageDowngrade.job

[2012/02/23 13:29:42 | 000,001,804 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader X.lnk

[2012/02/23 13:08:25 | 000,000,501 | ---- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\Bewerbungen 2012.lnk

[2012/02/20 14:03:25 | 000,000,028 | ---- | M] () -- C:\WINDOWS\Robota.INI

[2012/02/20 09:11:12 | 000,013,312 | -H-- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\photothumb.db

[2012/02/14 17:13:29 | 000,041,984 | ---- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012/02/14 17:02:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DVDVideoSoft

[2012/02/12 04:42:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\YouTube Downloader

[2012/02/10 04:34:00 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[2012/02/09 16:46:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Freemake

[2012/02/07 07:18:41 | 000,000,795 | ---- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Browser starten.lnk

[2012/02/06 20:29:38 | 000,000,384 | ---- | M] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\burnaware.ini

[2012/02/04 18:17:11 | 000,701,880 | ---- | M] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat

[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[1 C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\*.tmp files -> C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012/03/02 09:04:05 | 000,000,798 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Startmenü\Programme\Autostart\0.43829912067954735g8j8.exe.lnk

[2012/02/25 02:54:22 | 000,000,000 | -HS- | C] () -- C:\WINDOWS\System32\dds_trash_log.cmd

[2012/02/23 13:29:42 | 000,001,804 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader X.lnk

[2012/02/23 13:08:25 | 000,000,501 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Desktop\Bewerbungen 2012.lnk

[2012/02/14 17:11:17 | 000,496,640 | ---- | C] () -- C:\WINDOWS\System32\xvid.ax

[2012/02/14 17:11:16 | 000,675,840 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax

[2011/09/23 11:16:24 | 000,484,352 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll

[2011/06/13 12:32:53 | 000,017,905 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\73CA.754

[2011/04/22 06:35:20 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat

[2011/02/09 13:34:03 | 000,000,000 | ---- | C] () -- C:\WINDOWS\musiceditor.INI

[2011/02/05 09:33:44 | 000,701,880 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat

[2011/02/02 08:53:35 | 000,000,028 | ---- | C] () -- C:\WINDOWS\Robota.INI

[2011/01/14 13:31:59 | 000,532,480 | ---- | C] () -- C:\WINDOWS\System32\CddbPlaylist2Sony.dll

[2011/01/09 12:40:08 | 000,000,032 | ---- | C] () -- C:\WINDOWS\System32\mnprxpd2a.bin

[2011/01/04 10:10:56 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll

[2011/01/04 10:10:56 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll

[2011/01/04 10:10:56 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll

[2011/01/04 10:10:56 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll

[2011/01/02 13:42:51 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\mgxasio2.dll

[2011/01/02 13:41:56 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll

[2011/01/02 13:41:35 | 000,007,119 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini

[2011/01/02 13:34:34 | 000,001,433 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\RecConfig.xml

[2010/08/30 08:08:03 | 000,061,932 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat

[2010/07/20 05:15:37 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll

[2010/07/18 11:04:56 | 000,000,166 | ---- | C] () -- C:\WINDOWS\disney.ini

[2010/07/18 10:43:54 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll

[2010/07/02 11:47:09 | 000,000,384 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\burnaware.ini

[2010/06/04 06:52:18 | 000,041,984 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010/04/11 12:29:36 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2010/04/11 11:42:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2010/04/11 10:04:58 | 000,019,900 | ---- | C] () -- C:\WINDOWS\HPHins02.dat

[2010/04/11 10:04:58 | 000,004,308 | ---- | C] () -- C:\WINDOWS\hphmdl02.dat

[2010/04/11 10:04:43 | 000,364,544 | ---- | C] () -- C:\WINDOWS\System32\hphped05.exe

[2010/04/11 10:04:37 | 000,006,478 | ---- | C] () -- C:\WINDOWS\System32\hphmon05.dat

[2010/04/11 09:46:03 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2010/04/11 09:44:31 | 000,298,848 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2010/04/11 09:37:27 | 042,341,360 | ---- | C] () -- C:\Programme\avira_antivir_personal_de.exe

[2010/04/11 09:09:00 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2010/04/11 09:02:50 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2010/04/03 15:55:32 | 002,183,470 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin

[2009/10/06 02:16:00 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2009/08/03 08:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll

[2009/08/03 08:07:42 | 000,230,768 | ---- | C] () -- C:\WINDOWS\System32\OGAEXEC.exe

[2007/08/13 11:46:00 | 000,155,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\lame_enc.dll

[2006/10/25 19:06:48 | 000,064,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\vorbisenc.dll

[2006/10/25 19:06:48 | 000,019,456 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\vorbisfile.dll

[2006/10/25 19:06:46 | 000,143,872 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\vorbis.dll

[2006/10/25 19:06:36 | 000,015,872 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\ogg.dll

[2005/08/23 16:34:06 | 000,029,184 | ---- | C] () -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Lokale Einstellungen\Anwendungsdaten\no23xwrapper.dll

[2004/08/04 07:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2004/08/04 07:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2004/08/04 07:00:00 | 000,448,470 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat

[2004/08/04 07:00:00 | 000,432,356 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2004/08/04 07:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2004/08/04 07:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat

[2004/08/04 07:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2004/08/04 07:00:00 | 000,079,910 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat

[2004/08/04 07:00:00 | 000,067,312 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2004/08/04 07:00:00 | 000,062,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\cdrom.sys

[2004/08/04 07:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2004/08/04 07:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat

[2004/08/04 07:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2004/08/04 07:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2004/08/04 07:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[2004/08/04 07:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin

[2004/08/04 07:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

[2003/02/20 10:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI

 
 ========== LOP Check ==========

 

[2012/02/14 17:11:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Aimersoft Video Converter Std

[2011/11/08 16:17:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Azureus

[2011/04/05 14:43:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\BabylonToolbar

[2012/02/14 17:02:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\DVDVideoSoft

[2011/03/14 10:54:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\DVDVideoSoftIEHelpers

[2011/09/23 11:16:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\FreeAudioPack

[2011/04/19 14:04:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Guitar Pro 6

[2011/01/14 13:53:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\kikin

[2011/02/06 08:42:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\LEGO Media

[2011/01/09 13:13:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\MAGIX

[2012/02/23 02:44:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\mediaplayer

[2010/04/12 16:14:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\MSNInstaller

[2011/02/17 12:01:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\PearlMountainSoft

[2011/03/21 15:17:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\PhotoScape

[2012/03/02 09:29:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\PriceGong

[2012/02/04 18:01:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Samsung

[2012/02/07 06:38:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\searchquband

[2012/02/07 06:47:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\searchqutoolbar

[2012/02/04 17:58:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\uTorrent

[2011/12/07 08:32:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Emanuel Leuthner\Anwendungsdaten\Youtube Downloader HD

[2011/09/24 11:52:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\boost_interprocess

[2010/04/13 13:25:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Driver Whiz

[2012/02/09 16:46:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Freemake

[2011/04/19 14:04:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Guitar Pro 6

[2011/04/29 07:15:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\iN01803EhJdJ01803

[2011/01/09 15:59:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX

[2010/04/21 14:38:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Drivers HeadQuarters

[2011/02/17 12:01:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PearlMountainSoft

[2012/02/14 17:12:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\xml_param

[2012/02/12 04:42:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\YouTube Downloader

[2010/08/21 05:32:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

[2012/03/02 13:00:38 | 000,000,236 | ---- | M] () -- C:\WINDOWS\Tasks\OGALogon.job

[2012/03/01 11:32:21 | 000,000,302 | ---- | M] () -- C:\WINDOWS\Tasks\photostageDowngrade.job

[2012/03/01 11:32:21 | 000,000,302 | ---- | M] () -- C:\WINDOWS\Tasks\photostageShakeIcon.job

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 

 
 < %SYSTEMDRIVE%\*. >

[2010/04/19 11:55:43 | 000,000,000 | ---D | M] -- C:\02c2fa361fcf3e02f4b971

[2010/04/21 14:47:28 | 000,000,000 | ---D | M] -- C:\7337a6dea472d3744f9d2620

[2012/02/23 13:29:48 | 000,000,000 | -HSD | M] -- C:\Config.Msi

[2011/01/29 12:28:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen

[2010/04/11 12:26:14 | 000,000,000 | RH-D | M] -- C:\MSOCache

[2012/03/02 07:32:37 | 000,000,000 | R--D | M] -- C:\Programme

[2009/02/09 05:51:43 | 000,000,000 | -H-D | M] -- C:\Recycle.Bin

[2011/01/29 12:28:43 | 000,000,000 | -HSD | M] -- C:\RECYCLER

[2011/06/15 23:09:05 | 000,000,000 | -HSD | M] -- C:\System Volume Information

[2011/02/05 07:15:26 | 000,000,000 | ---D | M] -- C:\Temp

[2012/02/25 02:21:54 | 000,000,000 | ---D | M] -- C:\WINDOWS

 
 < %PROGRAMFILES%\*.exe >

[2010/04/11 09:40:56 | 042,341,360 | ---- | M] () -- C:\Programme\avira_antivir_personal_de.exe

[2010/04/11 10:29:01 | 000,562,856 | ---- | M] (Google Inc.) -- C:\Programme\ChromeSetup.exe

[2010/04/11 11:41:16 | 008,188,856 | ---- | M] (Mozilla) -- C:\Programme\Firefox Setup 3.6.3.exe

[2010/04/11 10:04:32 | 023,525,568 | ---- | M] (Hewlett-Packard Company                            ) -- C:\Programme\hp_53_deu.exe

 

Invalid Environment Variable: %LOCALAPPDATA%\*.exe

 
 < %systemroot%\*. /mp /s >

 

 
 < MD5 for: AGP440.SYS  >

[2004/08/04 07:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys

[2010/04/21 13:51:09 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys

[2010/04/21 13:51:09 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys

[2008/04/13 13:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys

[2008/04/13 13:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

 
 < MD5 for: ATAPI.SYS  >

[2004/08/04 07:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys

[2010/04/21 13:51:09 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys

[2010/04/21 13:51:09 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys

[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys

[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

[2004/08/04 07:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

 
 < MD5 for: EVENTLOG.DLL  >

[2008/04/13 21:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll

[2008/04/13 21:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll

[2004/08/04 07:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

 
 < MD5 for: EXPLORER.EXE  >

[2004/08/04 07:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) MD5=22FE1BE02EADDE1632E478E4125639E0 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

[2008/04/13 21:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\explorer.exe

[2008/04/13 21:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe

 
 < MD5 for: NETLOGON.DLL  >

[2008/04/13 21:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll

[2008/04/13 21:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll

[2004/08/04 07:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll

[2009/02/06 13:46:10 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=ED4BBAD725A21632FB205452749FC8F5 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll

[2009/02/06 13:46:10 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=ED4BBAD725A21632FB205452749FC8F5 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll

 
 < MD5 for: SCECLI.DLL  >

[2008/04/13 21:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll

[2008/04/13 21:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll

[2004/08/04 07:00:00 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2004/08/04 07:00:00 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=56785FD5236D7B22CF471A6DA9DB46D8 -- C:\WINDOWS\$NtServicePackUninstall$\user32.dll

[2008/04/13 21:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\ServicePackFiles\i386\user32.dll

[2008/04/13 21:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2008/04/13 21:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe

[2008/04/13 21:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe

[2004/08/04 07:00:00 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

 
 < MD5 for: WINLOGON.EXE  >

[2004/08/04 07:00:00 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe

[2008/04/13 21:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe

[2008/04/13 21:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2004/08/04 07:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys

[2004/08/04 07:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

[2010/04/11 10:43:39 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav

[2010/04/11 10:43:39 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav

[2010/04/11 10:43:39 | 000,454,656 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

 
 < %systemroot%\system32\*.dll /lockedfiles >

[2008/06/20 12:46:10 | 000,147,968 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\dnsapi.dll

[2009/03/07 22:39:48 | 011,063,808 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\ieframe.dll

[2009/03/07 22:32:22 | 001,985,024 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\iertutil.dll

[2008/04/13 21:22:18 | 000,280,064 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\mstask.dll

[2008/04/13 21:22:20 | 000,067,072 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\ntdsapi.dll

[2008/06/17 14:00:59 | 008,502,272 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\shell32.dll

[7 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

 

Invalid Environment Variable: %USERPROFILE%\*.*

 

Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.exe

 

Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.dll

 

Invalid Environment Variable: %USERPROFILE%\Application Data\*.exe

 
 ========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========

[C:\WINDOWS\$NtUninstallKB20986$] ->  -> Unknown point type

< End of report >
--- --- ---