Trojaner-Board - avast meldet Bösartige Website Blockiert

so also hier die geforderten Codes

Antimalware

Code:

Malwarebytes Anti-Malware 1.61.0.1400

www.malwarebytes.org
 

Datenbank Version: v2012.06.16.02
 

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 8.0.6001.18702

Ronny :: BIE [Administrator]
 

16.06.2012 13:25:22

mbam-log-2012-06-16 (13-25-22).txt
 

Art des Suchlaufs: Vollständiger Suchlauf

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 265650

Laufzeit: 1 Stunde(n), 6 Minute(n), 19 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 1

C:\WINXP\system32\dllcache\ctfmon.exe (Trojan.FakeMS) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

OTL

Code:

OTL logfile created on: 16.06.2012 14:49:21 - Run 2

OTL by OldTimer - Version 3.2.48.0     Folder = C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\Downloads\dez11

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

2,00 Gb Total Physical Memory | 1,30 Gb Available Physical Memory | 65,22% Memory free

3,85 Gb Paging File | 3,33 Gb Available in Paging File | 86,55% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme

Drive C: | 279,45 Gb Total Space | 203,56 Gb Free Space | 72,84% Space Free | Partition Type: NTFS

Drive D: | 74,52 Gb Total Space | 29,43 Gb Free Space | 39,49% Space Free | Partition Type: NTFS

 

Computer Name: BIE | User Name: Ronny | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

PRC - C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\Downloads\dez11\OTL.exe (OldTimer Tools)

PRC - C:\Programme\Alwil Software\Avast5\AvastUI.exe (AVAST Software)

PRC - C:\Programme\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)

PRC - C:\Programme\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE ()

PRC - C:\Programme\TomTom HOME 2\TomTomHOMEService.exe (TomTom)

PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()

PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software)

PRC - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)

PRC - C:\Programme\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)

PRC - C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)

PRC - C:\WINXP\explorer.exe (Microsoft Corporation)

PRC - C:\Programme\cFosSpeed\spd.exe (cFos Software GmbH)

PRC - C:\Programme\cFosSpeed\cfosspeed.exe (cFos Software GmbH)

PRC - C:\WINXP\system32\HPZipm12.exe (HP)

 

 
 ========== Modules (No Company Name) ==========

 

MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()

MOD - C:\Programme\Alwil Software\Avast5\defs\12061600\algo.dll ()

MOD - C:\Programme\FileZilla FTP Client\fzshellext.dll ()

MOD - C:\Programme\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE ()

MOD - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()

MOD - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU ()

MOD - C:\WINXP\system32\msdmo.dll ()

MOD - C:\WINXP\system32\P17.dll ()

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)

SRV - (avast! Antivirus) -- C:\Programme\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)

SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)

SRV - (HerculesDJControlMP3) -- C:\Programme\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE ()

SRV - (TomTomHOMEService) -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe (TomTom)

SRV - (TuneUp.Defrag) -- C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)

SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe ()

SRV - (TuneUp.UtilitiesSvc) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)

SRV - (UxTuneUp) -- C:\WINXP\system32\uxtuneup.dll (TuneUp Software)

SRV - (MSCamSvc) -- C:\Programme\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)

SRV - (McComponentHostService) -- C:\Programme\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)

SRV - (NMIndexingService) -- C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe (Nero AG)

SRV - (cFosSpeedS) -- C:\Programme\cFosSpeed\spd.exe (cFos Software GmbH)

SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)

SRV - (Pml Driver HPZ12) -- C:\WINXP\system32\HPZipm12.exe (HP)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - (WDICA) --  File not found

DRV - (sptd) -- C:\WINXP\\SystemRoot\System32\Drivers\sptd.sys File not found

DRV - (SetupNTGLM7X) -- E:\NTGLM7X.sys File not found

DRV - (PDRFRAME) --  File not found

DRV - (PDRELI) --  File not found

DRV - (PDFRAME) --  File not found

DRV - (PDCOMP) --  File not found

DRV - (PCIDump) --  File not found

DRV - (NTACCESS) -- E:\NTACCESS.sys File not found

DRV - (MSICPL) -- E:\install4\MSICPL.sys File not found

DRV - (lbrtfdc) --  File not found

DRV - (i2omgmt) --  File not found

DRV - (GMSIPCI) -- E:\INSTALL\GMSIPCI.SYS File not found

DRV - (Changer) --  File not found

DRV - (aswSnx) -- C:\WINXP\System32\drivers\aswSnx.sys (AVAST Software)

DRV - (aswSP) -- C:\WINXP\System32\drivers\aswSP.sys (AVAST Software)

DRV - (aswRdr) -- C:\WINXP\System32\drivers\aswRdr.sys (AVAST Software)

DRV - (aswTdi) -- C:\WINXP\System32\drivers\aswTdi.sys (AVAST Software)

DRV - (aswMon2) -- C:\WINXP\System32\drivers\aswmon2.sys (AVAST Software)

DRV - (aswFsBlk) -- C:\WINXP\System32\drivers\aswFsBlk.sys (AVAST Software)

DRV - (Aavmker4) -- C:\WINXP\System32\drivers\aavmker4.sys (AVAST Software)

DRV - (ssadmdm) -- C:\WINXP\system32\drivers\ssadmdm.sys (MCCI Corporation)

DRV - (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) -- C:\WINXP\system32\drivers\ssadbus.sys (MCCI Corporation)

DRV - (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM) -- C:\WINXP\system32\drivers\ssadserd.sys (MCCI Corporation)

DRV - (androidusb) -- C:\WINXP\system32\drivers\ssadadb.sys (Google Inc)

DRV - (ssadmdfl) SAMSUNG Android USB Modem (Filter) -- C:\WINXP\system32\drivers\ssadmdfl.sys (MCCI Corporation)

DRV - (dtsoftbus01) -- C:\WINXP\system32\drivers\dtsoftbus01.sys (DT Soft Ltd)

DRV - (HDJMidi) -- C:\WINXP\system32\drivers\HDJMidi.sys (© Guillemot R&D, 2011. All rights reserved.)

DRV - (Bulk) -- C:\WINXP\system32\drivers\HDJBulk.sys (© Guillemot R&D, 2010. All rights reserved.)

DRV - (HDJAsioK) -- C:\WINXP\system32\drivers\HDJAsioK.sys (© Guillemot R&D, 2010. All rights reserved.)

DRV - (UsbDiag) -- C:\WINXP\system32\drivers\lgusbdiag.sys (LG Electronics Inc.)

DRV - (USBModem) -- C:\WINXP\system32\drivers\lgusbmodem.sys (LG Electronics Inc.)

DRV - (usbbus) -- C:\WINXP\system32\drivers\lgusbbus.sys (LG Electronics Inc.)

DRV - (MSHUSBVideo) -- C:\WINXP\system32\drivers\nx6000.sys (Microsoft Corporation)

DRV - (TuneUpUtilitiesDrv) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software)

DRV - (tbhsd) -- C:\WINXP\system32\drivers\tbhsd.sys (RapidSolution Software AG)

DRV - (P17) -- C:\WINXP\system32\drivers\P17.sys (Creative Technology Ltd.)

DRV - (cFosSpeed) -- C:\WINXP\system32\drivers\cfosspeed.sys (cFos Software GmbH)

DRV - (ElbyCDFL) -- C:\WINXP\system32\drivers\ElbyCDFL.sys (SlySoft, Inc.)

DRV - (RTL8023xp) -- C:\WINXP\system32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation                           )

DRV - (videX32) -- C:\WINXP\system32\drivers\videX32.sys (VIA Technologies, Inc.)

DRV - (AmdK8) -- C:\WINXP\system32\drivers\AmdK8.sys (Advanced Micro Devices)

DRV - (ossrv) -- C:\WINXP\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)

DRV - (ctsfm2k) -- C:\WINXP\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)

DRV - (pfc) -- C:\WINXP\system32\drivers\pfc.sys (Padus, Inc.)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4

IE - HKLM\..\URLSearchHook:  - No CLSID value found

IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

IE - HKLM\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://startsear.ch/?aff=1&src=sp&cf=2bcf9da0-1920-11e1-a0c6-0019db496e4a&q={searchTerms}

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://start.icq.com/ [binary data]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.facemoods.com/?a=ddrnw

IE - HKCU\..\URLSearchHook:  - No CLSID value found

IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)

IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC

IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4

IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

IE - HKCU\..\SearchScopes\{69AB5005-3C29-4E8F-A204-B839D404900A}: "URL" = hxxp://isearch.avg.com/search?cid={8CB0307D-2245-48EB-88C4-7AC05C4DE04F}&mid=76793d5ad4f747d19919d1509dad87b9-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=tg027&pr=sa&d=2011-09-19 20:28:46&v=8.0.0.34&sap=dsp&q={searchTerms}

IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={8CB0307D-2245-48EB-88C4-7AC05C4DE04F}&mid=76793d5ad4f747d19919d1509dad87b9-06ce4fc639803a2e3563922518183d8e94088cb9&lang=en&ds=tg027&pr=sa&d=2011-09-19 20:28:46&v=10.0.0.7&sap=dsp&q={searchTerms}

IE - HKCU\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = hxxp://www.daemon-search.com/search?q={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultengine: "Web Search"

FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"

FF - prefs.js..browser.search.order.1: "Web Search"

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.search.update: false

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "about:home"

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3

FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9

FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.0.900

FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.0.900

FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2

FF - prefs.js..extensions.enabledItems: 5

FF - prefs.js..extensions.enabledItems: 3

FF - prefs.js..extensions.enabledItems: 1

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.4.0024

FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q="

 

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINXP\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINXP\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX OVS Helper,version=1.0.0: C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\WINXP\system32\TVUAx\npTVUAx.dll (TVU networks)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Programme\Veetle\plugins\npVeetle.dll (Veetle Inc)

FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Programme\Veetle\Player\npvlc.dll (Veetle Inc)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Programme\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Programme\DivX\DivX Plus Web Player\firefox\html5video [2010.12.19 18:19:22 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Programme\DivX\DivX Plus Web Player\firefox\wpa [2010.12.19 18:19:23 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\tunebite-firefox-surf-and-catch-extension@audials.com: C:\Programme\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ [2011.01.20 18:41:57 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Programme\Alwil Software\Avast5\WebRep\FF [2012.03.12 18:12:54 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.06.16 14:45:56 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012.05.02 13:08:46 | 000,000,000 | ---D | M]

 

[2012.01.10 14:34:32 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Extensions

[2012.01.10 14:34:32 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Extensions\home2@tomtom.com

[2012.05.02 11:51:10 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\extensions

[2011.11.27 19:50:07 | 000,000,000 | ---D | M] (VshareComplete - Speed up your search with your personal search suggestions tool) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\extensions\{3697b17c-b572-4862-a5e6-7f922c0f3403}

[2012.03.29 21:20:33 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}

[2011.11.10 12:55:54 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\extensions\avg@toolbar

[2011.04.23 10:55:15 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\extensions\DTToolbar@toolbarnet.com

[2011.12.16 00:26:34 | 000,000,000 | ---D | M] (Facemoods) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\extensions\ffxtlbr@Facemoods.com

[2010.12.22 21:42:47 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\extensions\firefox@tvunetworks.com

[2011.01.20 20:26:11 | 000,002,055 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\daemon-search.xml

[2011.10.30 20:27:26 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-1.xml

[2011.09.30 23:08:11 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-10.xml

[2011.11.07 21:16:30 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-11.xml

[2011.03.05 15:05:12 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-2.xml

[2011.03.21 22:42:24 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-3.xml

[2011.04.30 14:19:49 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-4.xml

[2011.05.09 14:11:04 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-5.xml

[2011.06.22 01:56:33 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-6.xml

[2011.08.16 21:23:42 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-7.xml

[2011.09.01 11:58:05 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-8.xml

[2011.09.07 11:38:41 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-9.xml

[2011.03.30 15:14:34 | 000,001,042 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin.xml

[2011.07.11 20:04:02 | 000,000,633 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\startsear.xml

[2011.09.15 22:01:21 | 000,001,565 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\web-search.xml

[2011.11.10 12:55:42 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2012.01.08 13:21:41 | 000,634,964 | ---- | M] () (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\RONNY\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\NKM0HWRU.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI

[2012.01.26 00:26:52 | 000,330,316 | ---- | M] () (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\RONNY\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\NKM0HWRU.DEFAULT\EXTENSIONS\PERSONAS@CHRISTOPHER.BEARD.XPI

[2012.03.12 18:12:54 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAMME\ALWIL SOFTWARE\AVAST5\WEBREP\FF

[2011.01.28 17:07:42 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINXP\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION

[2012.06.16 14:45:56 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll

[2011.01.10 23:15:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll

[2010.07.20 18:21:40 | 000,106,192 | ---- | M] ( ) -- C:\Programme\mozilla firefox\plugins\npstrlnk.dll

[2011.10.03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Programme\mozilla firefox\plugins\npvsharetvplg.dll

[2011.07.11 23:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Programme\mozilla firefox\plugins\npwachk.dll

[2012.02.11 16:10:56 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml

[2012.01.15 17:06:52 | 000,003,768 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\avg-secure-search.xml

[2012.02.11 16:10:56 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml

[2012.02.11 16:10:56 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml

[2011.12.16 00:26:35 | 000,002,048 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\fcmdSrch.xml

[2012.02.11 16:10:56 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml

[2012.02.11 16:10:56 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml

[2012.02.11 16:10:56 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

 
 ========== Chrome  ==========

 

CHR - default_search_provider: facemoods (Enabled)

CHR - default_search_provider: search_url = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4

CHR - default_search_provider: suggest_url = 

CHR - plugin: Shockwave Flash (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\gcswf32.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\WINXP\system32\Macromed\Flash\NPSWF32.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll

CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = C:\Programme\Java\jre6\bin\new_plugin\npdeployJava1.dll

CHR - plugin: Java(TM) Platform SE 6 U23 (Enabled) = C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll

CHR - plugin: Adobe Acrobat (Disabled) = C:\Programme\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll

CHR - plugin: DivX Web Player (Enabled) = C:\Programme\Mozilla Firefox\plugins\npdivx32.dll

CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programme\Windows Media Player\npdsplay.dll

CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Programme\Mozilla Firefox\plugins\NPOFF12.DLL

CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\pdf.dll

CHR - plugin: NapsterLink (Enabled) = C:\Programme\Mozilla Firefox\plugins\npstrlnk.dll

CHR - plugin: Winamp Application Detector (Enabled) = C:\Programme\Mozilla Firefox\plugins\npwachk.dll

CHR - plugin: Microsoft DRM (Enabled) = C:\Programme\Windows Media Player\npdrmv2.dll

CHR - plugin: Microsoft DRM (Enabled) = C:\Programme\Windows Media Player\npwmsdrm.dll

CHR - plugin: DivX OVS Helper Plug-in (Enabled) = C:\Programme\DivX\DivX OVS Helper\npovshelper.dll

CHR - plugin: Google Earth Plugin (Enabled) = C:\Programme\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Google Update (Enabled) = C:\Programme\Google\Update\1.3.21.69\npGoogleUpdate3.dll

CHR - plugin: Veetle TV Player (Enabled) = C:\Programme\Veetle\Player\npvlc.dll

CHR - plugin: Veetle TV Core (Enabled) = C:\Programme\Veetle\plugins\npVeetle.dll

CHR - plugin: TVU Web Player for FireFox (Enabled) = C:\WINXP\system32\TVUAx\npTVUAx.dll

CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

CHR - plugin: Default Plug-in (Enabled) = default_plugin

CHR - Extension: YouTube = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\

CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\

CHR - Extension: VshareComplete plugin for chrome = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\

CHR - Extension: DivX HiQ = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae\2.1.0.900_0\

CHR - Extension: avast! WebRep = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\

CHR - Extension: Facemoods = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.6.0_0\

CHR - Extension: Facemoods = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.6.0_0\facemoods\

CHR - Extension: vshare plugin = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\

CHR - Extension: DivX Plus Web Player HTML5 \\u003Cvideo\\u003E = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.0.900_0\

CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

 

O1 HOSTS File: ([2010.11.25 16:44:10 | 000,426,011 | R--- | M]) - C:\WINXP\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: 127.0.0.1        www.007guard.com

O1 - Hosts: 127.0.0.1        007guard.com

O1 - Hosts: 127.0.0.1        008i.com

O1 - Hosts: 127.0.0.1        www.008k.com

O1 - Hosts: 127.0.0.1        008k.com

O1 - Hosts: 127.0.0.1        www.00hq.com

O1 - Hosts: 127.0.0.1        00hq.com

O1 - Hosts: 127.0.0.1        010402.com

O1 - Hosts: 127.0.0.1        www.032439.com

O1 - Hosts: 127.0.0.1        032439.com

O1 - Hosts: 127.0.0.1        www.0scan.com

O1 - Hosts: 127.0.0.1        0scan.com

O1 - Hosts: 127.0.0.1        1000gratisproben.com

O1 - Hosts: 127.0.0.1        www.1000gratisproben.com

O1 - Hosts: 127.0.0.1        1001namen.com

O1 - Hosts: 127.0.0.1        www.1001namen.com

O1 - Hosts: 127.0.0.1        100888290cs.com

O1 - Hosts: 127.0.0.1        www.100888290cs.com

O1 - Hosts: 127.0.0.1        www.100sexlinks.com

O1 - Hosts: 127.0.0.1        100sexlinks.com

O1 - Hosts: 127.0.0.1        10sek.com

O1 - Hosts: 127.0.0.1        www.10sek.com

O1 - Hosts: 127.0.0.1        www.1-2005-search.com

O1 - Hosts: 127.0.0.1        1-2005-search.com

O1 - Hosts: 14674 more lines...

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Programme\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll (facemoods.com BHO)

O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll ()

O2 - BHO: (Tunebite_WebRipPlugin Class) - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Programme\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Programme\DAEMON Tools Toolbar\DTToolbar.dll ()

O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)

O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)

O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll ()

O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Programme\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll (facemoods.com)

O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Programme\DAEMON Tools Toolbar\DTToolbar.dll ()

O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [avast5] C:\Programme\Alwil Software\Avast5\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [cFosSpeed] C:\Programme\cFosSpeed\cfosspeed.exe (cFos Software GmbH)

O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found

O4 - HKLM..\Run: [NvCplDaemon] C:\WINXP\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [P17Helper] C:\WINXP\System32\P17.dll ()

O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.)

O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.)

O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O13 - gopher Prefix: missing

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8E7415E8-8704-4F4F-ACF7-5753ACE6C4A2}: DhcpNameServer = 192.168.2.1

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Programme\Gemeinsame Dateien\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll ()

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINXP\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINXP\system32\userinit.exe) - C:\WINXP\system32\userinit.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: C:\WINXP\Web\Wallpaper\PDC Remix.bmp

O24 - Desktop BackupWallPaper: C:\WINXP\Web\Wallpaper\PDC Remix.bmp

O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010.11.24 00:17:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.06.16 13:30:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\CCleaner

[2012.06.16 13:30:15 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner

[2012.06.14 20:49:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Malwarebytes

[2012.06.14 20:49:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware

[2012.06.14 20:49:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

[2012.06.14 20:49:30 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINXP\System32\drivers\mbam.sys

[2012.06.14 20:49:30 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware

[2012.06.13 13:54:53 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\jsdbgui.dll

[20 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.06.16 14:44:28 | 000,002,206 | ---- | M] () -- C:\WINXP\System32\wpa.dbl

[2012.06.16 14:43:30 | 000,001,084 | ---- | M] () -- C:\WINXP\tasks\GoogleUpdateTaskMachineCore.job

[2012.06.16 14:43:29 | 000,175,314 | ---- | M] () -- C:\WINXP\System32\nvapps.xml

[2012.06.16 14:43:20 | 000,002,048 | --S- | M] () -- C:\WINXP\bootstat.dat

[2012.06.16 14:43:15 | 2145,964,032 | -HS- | M] () -- C:\hiberfil.sys

[2012.06.16 14:22:06 | 000,001,088 | ---- | M] () -- C:\WINXP\tasks\GoogleUpdateTaskMachineUA.job

[2012.06.16 13:30:19 | 000,000,654 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk

[2012.06.14 21:26:55 | 000,000,020 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\defogger_reenable

[2012.06.14 20:49:33 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2012.06.14 20:18:12 | 000,134,072 | ---- | M] () -- C:\WINXP\System32\FNTCACHE.DAT

[2012.06.13 19:50:31 | 000,544,482 | ---- | M] () -- C:\WINXP\System32\perfh007.dat

[2012.06.13 19:50:31 | 000,495,936 | ---- | M] () -- C:\WINXP\System32\perfh009.dat

[2012.06.13 19:50:31 | 000,111,354 | ---- | M] () -- C:\WINXP\System32\perfc007.dat

[2012.06.13 19:50:31 | 000,084,524 | ---- | M] () -- C:\WINXP\System32\perfc009.dat

[2012.06.13 19:38:00 | 000,001,374 | ---- | M] () -- C:\WINXP\imsins.BAK

[2012.06.13 14:23:01 | 000,001,777 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Google Chrome.lnk

[2012.05.31 15:22:01 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\crypt32.dll

[20 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012.06.16 13:30:19 | 000,000,654 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk

[2012.06.14 21:26:49 | 000,000,020 | ---- | C] () -- C:\Dokumente und Einstellungen\Ronny\defogger_reenable

[2012.06.14 20:49:33 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2012.02.21 17:15:39 | 000,265,096 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-1715567821-1450960922-682003330-1003-0.dat

[2012.02.21 17:15:39 | 000,131,898 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat

[2012.02.16 13:39:13 | 000,003,072 | ---- | C] () -- C:\WINXP\System32\iacenc.dll

[2012.01.31 19:15:44 | 000,030,568 | ---- | C] () -- C:\WINXP\MusiccityDownload.exe

[2012.01.31 19:15:42 | 000,974,848 | ---- | C] () -- C:\WINXP\System32\cis-2.4.dll

[2012.01.31 19:15:42 | 000,081,920 | ---- | C] () -- C:\WINXP\System32\issacapi_bs-2.3.dll

[2012.01.31 19:15:42 | 000,065,536 | ---- | C] () -- C:\WINXP\System32\issacapi_pe-2.3.dll

[2012.01.31 19:15:42 | 000,057,344 | ---- | C] () -- C:\WINXP\System32\issacapi_se-2.3.dll

[2011.05.22 23:28:37 | 000,053,248 | ---- | C] () -- C:\WINXP\System32\CommonDL.dll

[2011.05.22 23:28:37 | 000,002,413 | ---- | C] () -- C:\WINXP\System32\lgAxconfig.ini

[2011.02.26 23:22:38 | 000,000,126 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib

[2011.01.02 23:25:17 | 000,000,069 | ---- | C] () -- C:\WINXP\NeroDigital.ini

[2010.11.30 00:21:55 | 000,008,704 | ---- | C] () -- C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.11.27 22:57:13 | 000,000,056 | -H-- | C] () -- C:\WINXP\System32\ezsidmv.dat

[2010.11.25 00:39:27 | 000,068,865 | ---- | C] () -- C:\WINXP\hpoins05.dat

[2010.11.25 00:39:27 | 000,019,696 | ---- | C] () -- C:\WINXP\hpomdl05.dat

[2010.11.24 00:31:55 | 000,000,000 | ---- | C] () -- C:\WINXP\nsreg.dat

[2010.11.24 00:24:53 | 000,005,663 | ---- | C] () -- C:\WINXP\System32\ludap17.ini

[2010.11.24 00:24:53 | 000,000,075 | ---- | C] () -- C:\WINXP\System32\ctzapxx.ini

[2010.11.24 00:19:42 | 000,002,048 | --S- | C] () -- C:\WINXP\bootstat.dat

[2010.11.24 00:14:18 | 000,021,740 | ---- | C] () -- C:\WINXP\System32\emptyregdb.dat

[2010.11.24 00:09:29 | 000,004,073 | ---- | C] () -- C:\WINXP\ODBCINST.INI

[2010.11.24 00:08:23 | 000,134,072 | ---- | C] () -- C:\WINXP\System32\FNTCACHE.DAT

 
 ========== Alternate Data Streams ==========

 

@Alternate Data Stream - 24 bytes -> C:\WINXP:4C7535768510FBEE
 

< End of report >

Extras

Code:

OTL Extras logfile created on: 16.06.2012 14:49:21 - Run 2

OTL by OldTimer - Version 3.2.48.0     Folder = C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\Downloads\dez11

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

2,00 Gb Total Physical Memory | 1,30 Gb Available Physical Memory | 65,22% Memory free

3,85 Gb Paging File | 3,33 Gb Available in Paging File | 86,55% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme

Drive C: | 279,45 Gb Total Space | 203,56 Gb Free Space | 72,84% Space Free | Partition Type: NTFS

Drive D: | 74,52 Gb Total Space | 29,43 Gb Free Space | 39,49% Space Free | Partition Type: NTFS

 

Computer Name: BIE | User Name: Ronny | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

exefile [open] -- "%1" %*

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Programme\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

"UpdatesDisableNotify" = 0

"AntiVirusOverride" = 0

"FirewallOverride" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 
 ========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

"Start" = 2

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 0

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

"DisableUnicastResponsesToMulticastBroadcast" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

"DisableUnicastResponsesToMulticastBroadcast" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"C:\Programme\FlashFXP 4\FlashFXP.exe" = C:\Programme\FlashFXP 4\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (OpenSight Software, LLC)

"C:\Programme\ICQ7.6\ICQ.exe" = C:\Programme\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6 -- (ICQ, LLC.)

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Programme\mIRC\mirc.exe" = C:\Programme\mIRC\mirc.exe:*:Enabled:mIRC -- (mIRC Co. Ltd.)

"C:\Programme\SopCast\adv\SopAdver.exe" = C:\Programme\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com)

"C:\Programme\SopCast\SopCast.exe" = C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com)

"C:\Programme\Mozilla Firefox\firefox.exe" = C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)

"C:\Programme\Microsoft LifeCam\LifeCam.exe" = C:\Programme\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe -- (Microsoft Corporation)

"C:\Programme\Microsoft LifeCam\LifeEnC2.exe" = C:\Programme\Microsoft LifeCam\LifeEnC2.exe:*:Enabled:LifeEnC2.exe -- (Microsoft Corporation)

"C:\Programme\Microsoft LifeCam\LifeExp.exe" = C:\Programme\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe -- (Microsoft Corporation)

"C:\Programme\Microsoft LifeCam\LifeTray.exe" = C:\Programme\Microsoft LifeCam\LifeTray.exe:*:Enabled:LifeTray.exe -- (Microsoft Corporation)

"C:\Programme\TeamViewer\Version6\TeamViewer.exe" = C:\Programme\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)

"C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe" = C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH)

"C:\Programme\Java\jre6\bin\javaw.exe" = C:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)

"C:\Programme\FlashFXP 4\FlashFXP.exe" = C:\Programme\FlashFXP 4\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (OpenSight Software, LLC)

"C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)

"C:\Programme\ICQ7.6\ICQ.exe" = C:\Programme\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6 -- (ICQ, LLC.)

"C:\WINXP\system32\muzapp.exe" = C:\WINXP\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)

 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu

"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended

"{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform

"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23

"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in

"{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver

"{2C3CE8F0-F4AD-4D54-A520-975309C617E2}" = LG PC Suite III

"{33999F1F-EA46-4E55-A239-1BA803235396}" = Hercules DJ Products Series drivers

"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{5469D537-9B44-4c78-BF2D-5F9807564F74}" = HP PSC & OfficeJet 4.7

"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml

"{56F3E1FF-54FE-4384-A153-6CCABA097814}" = Creative MediaSource

"{5E1375CB-6792-4464-8715-CC3EC83D48FA}" = VirtualDJ Home FREE

"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053

"{5FC7AB5C-61FC-42DF-A923-5139BCF10D42}" = Microsoft LifeCam

"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM

"{63C30E47-B1D6-4BB3-BB76-DAB20DB9CAB8}" = Tunebite

"{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan

"{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}" = Apple Application Support

"{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}" = No23 Recorder

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies

"{7644E42D-B096-457F-8B5B-901238FC81AE}" = ICQ7.6

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)

"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}" = Napster Burn Engine

"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules

"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (German) 12

"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007

"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007

"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007

"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007

"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007

"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007

"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007

"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007

"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007

"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007

"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007

"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007

"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007

"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007

"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In

"{96E3AED5-3D0B-4BB0-84C2-1EDADB204487}" = FlashFXP v4.0

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{A20A58C4-6784-4B4B-86CC-94E2E3671031}" = Nero 7 Ultra Edition

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AC76BA86-7AD7-1031-7B44-A95000000001}" = Adobe Reader 9.5.1 - Deutsch

"{B2C3BB6B-E005-4246-B8E5-DF0A4D073CDC}" = PixiePack Codec Pack

"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation

"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy

"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars

"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player

"{BBBCAE4B-B416-4182-A6F2-438180894A81}" = Napster

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C0E18DC4-C74A-4889-AE3A-933471023787}" = LG PC Suite III

"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU

"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU

"{C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}" = ArcSoft VideoImpression 2

"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack

"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones

"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities

"{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3

"{ec4b6105-e039-42fb-8e18-c8aa393f0018}_is1" = VshareComplete

"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5

"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"5513-1208-7298-9440" = JDownloader 0.9

"82A44D22-9452-49FB-00FB-CEC7DCAF7E23" = EA SPORTS online 2004

"ABC Amber Audio Converter" = ABC Amber Audio Converter

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Photoshop 7.0" = Adobe Photoshop 7.0

"Adobe Shockwave Player" = Adobe Shockwave Player 11.6

"Adobe SVG Viewer" = Adobe SVG Viewer 3.0

"Anti-Twin 2010-12-14 18.10.50" = Anti-Twin (Installation 14.12.2010)

"Ashampoo Photo Optimizer FREE_is1" = Ashampoo Photo Optimizer FREE

"Audacity_is1" = Audacity 1.2.6

"avast" = avast! Free Antivirus

"AVG Secure Search" = AVG Security Toolbar

"Berlin Taxi" = Berlin Taxi

"CCleaner" = CCleaner

"cFosSpeed" = cFosSpeed v3.22

"CloneCD" = CloneCD

"DAEMON Tools Lite" = DAEMON Tools Lite

"DAEMON Tools Toolbar" = DAEMON Tools Toolbar

"Device Control" = Gerätesteuerung

"DRAGON" = DRAGON 1.6

"ENTERPRISE" = Microsoft Office Enterprise 2007

"facemoods" = Facemoods Toolbar

"FileZilla Client" = FileZilla Client 3.5.2

"German Truck Simulator" = German Truck Simulator 1.00

"Google Chrome" = Google Chrome

"HP Photo & Imaging" = HP Image Zone 4.7

"ICQToolbar" = ICQ Toolbar

"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager

"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.61.0.1400

"McAfee Security Scan" = McAfee Security Scan Plus

"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack

"mIRC" = mIRC

"Mozilla Firefox 13.0.1 (x86 de)" = Mozilla Firefox 13.0.1 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"Mp3tag" = Mp3tag v2.47b

"NVIDIA Drivers" = NVIDIA Drivers

"Seven Remix XP" = Seven Remix XP 2.41

"SHOUTcastDSP" = SHOUTcast Source DSP 1.9.1 (remove only)

"SopCast" = SopCast 3.2.9

"SopFilter" = SopFilter 3.0.5

"Streamripper" = Streamripper (Remove only)

"SystemRequirementsLab" = System Requirements Lab

"TeamSpeak 3 Client" = TeamSpeak 3 Client

"TeamViewer 6" = TeamViewer 6

"TomTom HOME" = TomTom HOME 2.8.2.2264

"TuneUp Utilities" = TuneUp Utilities

"Veetle TV" = Veetle TV 0.9.18

"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions

"VLC media player" = VLC media player 1.1.11

"vShare.tv plugin" = vShare.tv plugin 1.3

"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9

"Winamp" = Winamp

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"WinRAR archiver" = WinRAR

"WMFDist11" = Windows Media Format 11 runtime

"XP Codec Pack" = XP Codec Pack

"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Winamp Detect" = Winamp Erkennungs-Plug-in

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 02.12.2011 19:03:22 | Computer Name = BIE | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung mirc.exe, Version 7.15.0.0, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x3fff969d.

 

Error - 11.12.2011 19:02:42 | Computer Name = BIE | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung mirc.exe, Version 7.15.0.0, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x3fff969d.

 

Error - 10.01.2012 08:34:25 | Computer Name = BIE | Source = TomTomHOMEService | ID = 10000

Description = 

 

Error - 10.01.2012 08:37:07 | Computer Name = BIE | Source = TomTomHOMEService | ID = 10000

Description = 

 

Error - 11.01.2012 11:50:27 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 14.01.2012 19:41:02 | Computer Name = BIE | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung mirc.exe, Version 7.15.0.0, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x3fff941d.

 

Error - 17.02.2012 11:29:00 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 14.04.2012 05:37:03 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 12.05.2012 07:30:22 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 14.06.2012 14:20:41 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

[ System Events ]

Error - 13.06.2012 09:56:37 | Computer Name = BIE | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "WSearch"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

 

Error - 13.06.2012 11:07:28 | Computer Name = BIE | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "WSearch"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

 

Error - 13.06.2012 12:41:13 | Computer Name = BIE | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "WSearch"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

 

Error - 14.06.2012 15:09:40 | Computer Name = BIE | Source = Service Control Manager | ID = 7026

Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:

   ViaIde

 

Error - 14.06.2012 15:20:08 | Computer Name = BIE | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "WSearch"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

 

Error - 15.06.2012 06:57:43 | Computer Name = BIE | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "WSearch"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

 

Error - 15.06.2012 10:06:36 | Computer Name = BIE | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "WSearch"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

 

Error - 15.06.2012 13:04:00 | Computer Name = BIE | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "WSearch"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

 

Error - 15.06.2012 14:06:46 | Computer Name = BIE | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "WSearch"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

 

Error - 16.06.2012 08:44:01 | Computer Name = BIE | Source = Service Control Manager | ID = 7026

Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:

   ViaIde

 

 

< End of report >

cccleaner

Code:

ABC Amber Audio Converter                19.01.2011                

Adobe Flash Player 10 Plugin        Adobe Systems Incorporated        23.11.2010                10.3.183.10

Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        23.11.2010                11.1.102.55

Adobe Photoshop 7.0        Adobe Systems, Inc.        27.01.2011                7.0

Adobe Reader 9.5.1 - Deutsch        Adobe Systems Incorporated        02.05.2012        124,8MB        9.5.1

Adobe Shockwave Player 11.6        Adobe Systems, Inc.        06.11.2011                11.6.1.629

Adobe SVG Viewer 3.0                22.10.2011                 3.0

Anti-Twin (Installation 14.12.2010)        Joerg Rosenthal, Germany        14.12.2010                

Apple Application Support        Apple Inc.        02.09.2011        61,8MB        2.0.1

ArcSoft VideoImpression 2        ArcSoft        24.11.2010                

Ashampoo Photo Optimizer FREE        Ashampoo GmbH & Co. KG        21.02.2012                1.2.0

Audacity 1.2.6                19.01.2011                

avast! Free Antivirus        AVAST Software        23.11.2010                7.0.1426.0

AVG Security Toolbar        AVG Technologies        19.09.2011                10.0.0.7

Berlin Taxi                21.12.2011                

CCleaner        Piriform        23.05.2012                3.19

cFosSpeed v3.22        cFos Software GmbH, Bonn        23.11.2010                3.22

CloneCD        SlySoft        25.02.2011                

Creative MediaSource                22.01.2011                

DAEMON Tools Lite        DT Soft Ltd        05.12.2011                4.45.1.0236

DAEMON Tools Toolbar        DT Soft Ltd        20.01.2011                1.1.4.0024

DivX Web Player        DivX,Inc.        30.03.2011                1.5.0

DRAGON 1.6        PREPAID-USENET LIMITED        24.01.2011                1.6

EA SPORTS online 2004                18.01.2011                

Facemoods Toolbar                13.06.2012                

FileZilla Client 3.5.2        FileZilla Project        27.11.2010                3.5.2

FlashFXP v4.0        OpenSight Software, LLC        18.04.2011                4.0.0.1510

German Truck Simulator 1.00                19.09.2011                1.00

Gerätesteuerung                23.11.2010                

Google Chrome        Google Inc.        16.01.2011                19.0.1084.56

Google Earth Plug-in        Google        10.11.2011        40,9MB        6.1.0.5001

Hercules DJ Products Series drivers        Hercules        15.07.2011                3.HDJS.2011

HP Image Zone 4.7        HP        24.11.2010                4.7

HP PSC & OfficeJet 4.7        HP        24.11.2010                

ICQ Toolbar        ICQ        24.11.2010                3.0.0

ICQ7.6        ICQ        04.11.2011                7.6

Java(TM) 6 Update 23        Oracle        10.01.2011        91,1MB        6.0.230

JDownloader 0.9        AppWork GmbH        27.03.2011                0.9

LG PC Suite III        LG Electronics        22.05.2011                1.0.0.0

LG United Mobile Driver        LG Electronics        11.02.2012                3.6.0.0

Malwarebytes Anti-Malware Version 1.61.0.1400        Malwarebytes Corporation        14.06.2012                1.61.0.1400

McAfee Security Scan Plus        McAfee, Inc.        30.10.2011                2.0.181.2

Microsoft .NET Framework 2.0 Service Pack 2        Microsoft Corporation        13.06.2012        182,9MB        2.2.30729

Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU        Microsoft Corporation        27.01.2011        6,30MB        2.2.30729

Microsoft .NET Framework 3.0 Service Pack 2        Microsoft Corporation        10.05.2012        239MB        3.2.30729

Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU        Microsoft Corporation        27.01.2011        37,2MB        3.2.30729

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU        Microsoft Corporation        14.06.2012                

Microsoft .NET Framework 3.5 SP1        Microsoft Corporation        10.05.2012                

Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        13.06.2012                4.0.30319

Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        15.06.2011                4.0.30319

Microsoft .NET Framework 4 Extended        Microsoft Corporation        11.01.2012                4.0.30319

Microsoft .NET Framework 4 Extended DEU Language Pack        Microsoft Corporation        23.11.2010                4.0.30319

Microsoft LifeCam        Microsoft Corporation        27.01.2011        50,0MB        3.22.270.0

Microsoft Office Enterprise 2007        Microsoft Corporation        13.06.2012                12.0.6612.1000

Microsoft Office File Validation Add-In        Microsoft Corporation        15.09.2011        11,2MB        14.0.5130.5003

Microsoft Office Live Add-in 1.5        Microsoft Corporation        17.04.2012        0,49MB        2.0.4024.1

Microsoft Silverlight        Microsoft Corporation        10.05.2012        58,2MB        4.1.10329.0

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        21.01.2011        0,11MB        8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        15.06.2011        5,28MB        8.0.61001

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        08.12.2010        9,64MB        9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        23.11.2010        10,2MB        9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        15.06.2011        10,2MB        9.0.30729.6161

mIRC        mIRC Co. Ltd.        23.11.2010                7.15

Mozilla Firefox 13.0 (x86 de)        Mozilla        23.11.2010                13.0

Mozilla Maintenance Service        Mozilla        02.05.2012                13.0

Mp3tag v2.47b        Florian Heidenreich        11.01.2011                v2.47b

MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        22.12.2010        1,42MB        4.20.9870.0

MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        22.12.2010        2,77MB        4.20.9876.0

Napster        Napster        11.01.2011                4.6.4.0

Nero 7 Ultra Edition        Nero AG        20.12.2010        246MB        7.02.8637

No23 Recorder        No23        25.01.2011        3,17MB        2.1.0.3

NVIDIA Drivers                14.06.2012                

PixiePack Codec Pack        None        20.01.2011        11,4MB        1.0.100.0

QuickTime        Apple Inc.        02.09.2011        73,0MB        7.70.80.34

Samsung Kies        Samsung Electronics Co., Ltd.        21.02.2012                2.2.0.12014_18

SAMSUNG USB Driver for Mobile Phones        SAMSUNG Electronics Co., Ltd.        13.06.2012                1.4.103.0

Security Update for Windows Search 4 - KB963093        Microsoft Corporation        25.11.2010                

Seven Remix XP 2.41        NiwradSoft        23.11.2010                2.41

SHOUTcast Source DSP 1.9.1 (remove only)                13.06.2012                

Skype Toolbars        Skype Technologies S.A.        11.03.2012        5,86MB        5.3.7555

Skype™ 5.3        Skype Technologies S.A.        11.03.2012        16,6MB        5.3.120

SopCast 3.2.9        www.sopcast.com        04.12.2010                3.2.9

SopFilter 3.0.5        SopCast.com        13.06.2012                3.0.5

Spybot - Search & Destroy        Safer Networking Limited        25.11.2010                1.6.2

Streamripper (Remove only)                17.09.2011                

System Requirements Lab                13.06.2012                

TeamSpeak 3 Client        TeamSpeak Systems GmbH        08.12.2010                

TeamViewer 6        TeamViewer GmbH        30.01.2011                6.0.10194

TomTom HOME 2.8.2.2264        TomTom        10.01.2012                2.8.2.2264

TomTom HOME Visual Studio Merge Modules        TomTom International B.V.        10.01.2012        1,63MB        1.0.2

Tunebite        RapidSolution Software AG        20.01.2011        97,8MB        6.0.28922.2200

TuneUp Utilities        TuneUp Software        16.01.2011                9.0.5100.2

Update für Windows XP (KB943729)        Microsoft Corporation        23.11.2010                

Veetle TV 0.9.18        Veetle, Inc        16.01.2011                0.9.18

VIA Platform Device Manager        VIA Technologies, Inc.        23.11.2010                1.21

Virtual DJ - Atomix Productions                24.11.2010                

VirtualDJ Home FREE        Atomix Productions        25.03.2012        48,4MB        7.0.5

VLC media player 1.1.11        VideoLAN        24.03.2011                1.1.11

vShare.tv plugin 1.3        vShare.tv, Inc.        27.11.2011                1.3

VshareComplete        VshareComplete        27.11.2011                

Winamp        Nullsoft, Inc        23.11.2010                5.621 

Winamp Erkennungs-Plug-in        Nullsoft, Inc        25.07.2011                1.0.0.1

Windows Media Format 11 runtime                23.11.2010                

Windows Search 4.0        Microsoft Corporation        24.11.2010                04.00.6001.503

WinRAR                26.11.2010                

XP Codec Pack                29.11.2010

so ich hoffe ich habe alles und bedanke mich schonmal im Vorraus für die Hilfe

1. Spybot habe ich runtergeschmissen
2. Allee Toolbars und Progs im schritt 2-4 wurden deinstalliert
3. Mit OTL gefixt

Code:

All processes killed

========== OTL ==========

HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!

HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ deleted successfully.

C:\Programme\ICQ6Toolbar\ICQToolBar.dll moved successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.

HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully!

HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!

Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.

Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.

File C:\Programme\ICQ6Toolbar\ICQToolBar.dll not found.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0D7562AE-8EF6-416d-A838-AB665251703A}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{69AB5005-3C29-4E8F-A204-B839D404900A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{69AB5005-3C29-4E8F-A204-B839D404900A}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ not found.

Prefs.js: "Web Search" removed from browser.search.defaultengine

Prefs.js: "AVG Secure Search" removed from browser.search.defaultenginename

Prefs.js: "Web Search" removed from browser.search.order.1

Prefs.js: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9 removed from extensions.enabledItems

Prefs.js: DTToolbar@toolbarnet.com:1.1.4.0024 removed from extensions.enabledItems

Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.6&q=" removed from keyword.URL

Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.

C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll moved successfully.

Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.

File C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll not found.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\daemon-search.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-1.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-10.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-11.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-2.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-3.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-4.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-5.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-6.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-7.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-8.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin-9.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\icqplugin.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\startsear.xml moved successfully.

C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\searchplugins\web-search.xml moved successfully.

C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml moved successfully.

C:\Programme\Mozilla Firefox\searchplugins\avg-secure-search.xml moved successfully.

C:\Programme\Mozilla Firefox\searchplugins\bing.xml moved successfully.

C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml moved successfully.

C:\Programme\Mozilla Firefox\searchplugins\fcmdSrch.xml moved successfully.

C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml moved successfully.

C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml moved successfully.

Unable to fix default_search_provider items.

Unable to fix default_search_provider items.

C:\WINXP\tasks\GoogleUpdateTaskMachineCore.job moved successfully.

C:\WINXP\tasks\GoogleUpdateTaskMachineUA.job moved successfully.

ADS C:\WINXP:4C7535768510FBEE deleted successfully.

========== FILES ==========
 < ipconfig /flushdns /c >

Windows-IP-Konfiguration

Der DNS-Auflösungscache wurde geleert.

C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\Downloads\dez11\cmd.bat deleted successfully.

C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\Downloads\dez11\cmd.txt deleted successfully.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: All Users

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

 

User: LocalService

->Temp folder emptied: 66016 bytes

->Temporary Internet Files folder emptied: 33170 bytes

 

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

 

User: Ronny

->Temp folder emptied: 1359015868 bytes

->Temporary Internet Files folder emptied: 52283209 bytes

->Java cache emptied: 2555670 bytes

->FireFox cache emptied: 51596727 bytes

->Google Chrome cache emptied: 331285864 bytes

->Flash cache emptied: 91723 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 37049735 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 289081 bytes

RecycleBin emptied: 1504418629 bytes

 

Total Files Cleaned = 3.184,00 mb

 

 

OTL by OldTimer - Version 3.2.48.0 log created on 06172012_124552
 

Files\Folders moved on Reboot...
 

Registry entries deleted on Reboot...

4. Java aund Adobe Aktualisiert.

5.System mit cc Cleaner gereinigt

6. Suchlauf mit SuperAntispyware erfolgt

Code:

SUPERAntiSpyware Scan Log

hxxp://www.superantispyware.com
 

Generated 06/17/2012 at 01:53 PM
 

Application Version : 5.1.1002
 

Core Rules Database Version : 8750

Trace Rules Database Version: 6562
 

Scan type       : Complete Scan

Total Scan Time : 00:48:08
 

Operating System Information

Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)

Administrator
 

Memory items scanned      : 479

Memory threats detected   : 0

Registry items scanned    : 35283

Registry threats detected : 0

File items scanned        : 35940

File threats detected     : 3
 

Heuristic.Agent/Gen-Dropper

        D:\SYSTEM VOLUME INFORMATION\_RESTORE{F7FA3316-424E-4EB7-BE44-9B46EA4E2645}\RP517\A0092018.EXE
 

Trojan.Agent/Gen-Decay

        C:\PROGRAMME\ADOBE\READER 10.0\READER\READER_SL.EXE

        C:\WINXP\INSTALLER\$PATCHCACHE$\MANAGED\68AB67CA7DA71301B744AA0100000010\10.1.0\READER_SL.EXE

7. Online Scanner durchlaufen 3 funde diese in quarantäe gesteckt und gelöscht

8. OTL scan durchgeführt

Code:

OTL logfile created on: 17.06.2012 16:06:48 - Run 3

OTL by OldTimer - Version 3.2.48.0     Folder = C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\Downloads\dez11

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

2,00 Gb Total Physical Memory | 1,14 Gb Available Physical Memory | 57,04% Memory free

3,85 Gb Paging File | 3,01 Gb Available in Paging File | 78,31% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme

Drive C: | 279,45 Gb Total Space | 205,87 Gb Free Space | 73,67% Space Free | Partition Type: NTFS

Drive D: | 74,52 Gb Total Space | 29,43 Gb Free Space | 39,49% Space Free | Partition Type: NTFS

Drive G: | 14,63 Gb Total Space | 14,63 Gb Free Space | 100,00% Space Free | Partition Type: FAT32

Drive I: | 14,83 Gb Total Space | 3,90 Gb Free Space | 26,33% Space Free | Partition Type: FAT32

 

Computer Name: BIE | User Name: Ronny | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.06.17 12:54:08 | 000,161,776 | ---- | M] (Oracle Corporation) -- C:\Programme\Java\jre7\bin\jqs.exe

PRC - [2012.06.16 14:45:56 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe

PRC - [2012.06.14 21:31:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\Downloads\dez11\OTL.exe

PRC - [2012.06.11 18:26:06 | 003,905,408 | ---- | M] (SUPERAntiSpyware.com) -- C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe

PRC - [2012.03.07 02:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Programme\Alwil Software\Avast5\AvastUI.exe

PRC - [2012.03.07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Programme\Alwil Software\Avast5\AvastSvc.exe

PRC - [2011.08.12 01:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Programme\SUPERAntiSpyware\SASCore.exe

PRC - [2011.06.07 10:26:10 | 000,020,480 | ---- | M] () -- C:\Programme\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE

PRC - [2011.04.22 14:21:10 | 000,092,592 | ---- | M] (TomTom) -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe

PRC - [2010.11.21 11:49:24 | 000,247,608 | ---- | M] () -- C:\Programme\ICQ6Toolbar\ICQ Service.exe

PRC - [2010.11.19 16:32:52 | 000,743,232 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe

PRC - [2010.11.19 16:31:52 | 001,051,968 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

PRC - [2010.05.20 16:27:24 | 000,139,632 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft LifeCam\MSCamS32.exe

PRC - [2008.04.14 11:00:00 | 001,544,192 | ---- | M] (Microsoft Corporation) -- C:\WINXP\explorer.exe

PRC - [2007.03.13 18:30:24 | 000,302,296 | R--- | M] (cFos Software GmbH) -- C:\Programme\cFosSpeed\spd.exe

PRC - [2007.03.13 18:30:20 | 000,834,776 | R--- | M] (cFos Software GmbH) -- C:\Programme\cFosSpeed\cfosspeed.exe

PRC - [2004.09.29 13:14:36 | 000,069,632 | ---- | M] (HP) -- C:\WINXP\system32\HPZipm12.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2012.06.17 13:05:04 | 000,117,760 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL

MOD - [2012.06.17 13:05:04 | 000,065,024 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll

MOD - [2012.06.17 13:05:04 | 000,052,736 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll

MOD - [2012.06.17 13:05:04 | 000,052,224 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll

MOD - [2012.06.17 07:55:36 | 001,769,984 | ---- | M] () -- C:\Programme\Alwil Software\Avast5\defs\12061700\algo.dll

MOD - [2012.06.16 14:45:55 | 002,042,848 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll

MOD - [2012.04.04 07:53:56 | 000,301,056 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.DEU

MOD - [2011.06.07 10:26:10 | 000,020,480 | ---- | M] () -- C:\Programme\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE

MOD - [2010.11.21 11:49:24 | 000,247,608 | ---- | M] () -- C:\Programme\ICQ6Toolbar\ICQ Service.exe

MOD - [2008.04.14 11:00:00 | 000,014,336 | ---- | M] () -- C:\WINXP\system32\msdmo.dll

MOD - [2005.05.03 20:38:42 | 000,064,512 | ---- | M] () -- C:\WINXP\system32\P17.dll

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - [2012.06.17 12:54:08 | 000,161,776 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Programme\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)

SRV - [2012.06.16 14:45:55 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.03.07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)

SRV - [2011.08.12 01:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Programme\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)

SRV - [2011.07.20 06:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)

SRV - [2011.06.07 10:26:10 | 000,020,480 | ---- | M] () [Auto | Running] -- C:\Programme\Hercules\Audio\DJ Console Series\drivers\x86\HerculesDJControlMP3.EXE -- (HerculesDJControlMP3)

SRV - [2011.04.22 14:21:10 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)

SRV - [2011.01.16 19:08:34 | 000,435,008 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)

SRV - [2010.11.21 11:49:24 | 000,247,608 | ---- | M] () [Auto | Running] -- C:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)

SRV - [2010.11.19 16:31:52 | 001,051,968 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)

SRV - [2010.11.19 16:29:54 | 000,030,016 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINXP\system32\uxtuneup.dll -- (UxTuneUp)

SRV - [2010.05.20 16:27:24 | 000,139,632 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft LifeCam\MSCamS32.exe -- (MSCamSvc)

SRV - [2007.05.16 10:27:28 | 000,271,920 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService)

SRV - [2007.03.13 18:30:24 | 000,302,296 | R--- | M] (cFos Software GmbH) [Auto | Running] -- C:\Programme\cFosSpeed\spd.exe -- (cFosSpeedS)

SRV - [2006.10.26 15:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

SRV - [2004.09.29 13:14:36 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- C:\WINXP\system32\HPZipm12.exe -- (Pml Driver HPZ12)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)

DRV - File not found [Kernel | Disabled | Stopped] -- C:\WINXP\\SystemRoot\System32\Drivers\sptd.sys -- (sptd)

DRV - File not found [Kernel | On_Demand | Stopped] -- E:\NTGLM7X.sys -- (SetupNTGLM7X)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)

DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)

DRV - File not found [Kernel | On_Demand | Stopped] -- E:\NTACCESS.sys -- (NTACCESS)

DRV - File not found [Kernel | On_Demand | Stopped] -- E:\install4\MSICPL.sys -- (MSICPL)

DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)

DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)

DRV - File not found [Kernel | On_Demand | Stopped] -- E:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)

DRV - File not found [Kernel | System | Stopped] --  -- (Changer)

DRV - [2012.03.07 02:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINXP\System32\drivers\aswSnx.sys -- (aswSnx)

DRV - [2012.03.07 02:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINXP\System32\drivers\aswSP.sys -- (aswSP)

DRV - [2012.03.07 02:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINXP\System32\drivers\aswRdr.sys -- (aswRdr)

DRV - [2012.03.07 02:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINXP\System32\drivers\aswTdi.sys -- (aswTdi)

DRV - [2012.03.07 02:01:39 | 000,095,704 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINXP\System32\drivers\aswmon2.sys -- (aswMon2)

DRV - [2012.03.07 02:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINXP\System32\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV - [2012.03.07 01:58:29 | 000,024,920 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINXP\System32\drivers\aavmker4.sys -- (Aavmker4)

DRV - [2011.12.08 06:22:26 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ssadmdm.sys -- (ssadmdm)

DRV - [2011.12.08 06:22:26 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)

DRV - [2011.12.08 06:22:26 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)

DRV - [2011.12.08 06:22:26 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ssadadb.sys -- (androidusb)

DRV - [2011.12.08 06:22:26 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)

DRV - [2011.12.06 12:34:09 | 000,239,168 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINXP\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)

DRV - [2011.07.22 18:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)

DRV - [2011.07.12 23:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)

DRV - [2011.04.28 09:34:06 | 000,225,408 | ---- | M] (© Guillemot R&D, 2011. All rights reserved.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\HDJMidi.sys -- (HDJMidi)

DRV - [2011.04.28 09:34:02 | 000,160,000 | ---- | M] (© Guillemot R&D, 2010. All rights reserved.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\HDJBulk.sys -- (Bulk)

DRV - [2011.04.28 09:34:00 | 000,220,416 | ---- | M] (© Guillemot R&D, 2010. All rights reserved.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\HDJAsioK.sys -- (HDJAsioK)

DRV - [2011.02.14 03:42:36 | 000,020,864 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\lgusbdiag.sys -- (UsbDiag)

DRV - [2011.02.14 03:42:34 | 000,025,216 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\lgusbmodem.sys -- (USBModem)

DRV - [2011.02.14 03:42:32 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\lgusbbus.sys -- (usbbus)

DRV - [2010.05.20 16:27:24 | 000,030,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\nx6000.sys -- (MSHUSBVideo)

DRV - [2010.02.24 15:41:50 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)

DRV - [2008.10.15 16:19:52 | 000,043,552 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\tbhsd.sys -- (tbhsd)

DRV - [2007.06.15 11:47:26 | 001,127,936 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\P17.sys -- (P17)

DRV - [2007.03.13 18:30:28 | 000,649,432 | R--- | M] (cFos Software GmbH) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\cfosspeed.sys -- (cFosSpeed)

DRV - [2007.02.16 02:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)

DRV - [2006.10.13 10:16:36 | 000,081,664 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\Rtnicxp.sys -- (RTL8023xp)

DRV - [2006.02.23 05:38:32 | 000,009,728 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINXP\system32\drivers\videX32.sys -- (videX32)

DRV - [2005.03.09 08:53:00 | 000,036,352 | R--- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINXP\system32\drivers\AmdK8.sys -- (AmdK8)

DRV - [2005.01.10 19:15:30 | 000,106,496 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\ctoss2k.sys -- (ossrv)

DRV - [2005.01.10 19:15:24 | 000,138,752 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\ctsfm2k.sys -- (ctsfm2k)

DRV - [2003.09.19 16:45:48 | 000,021,248 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\pfc.sys -- (pfc)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 

IE - HKLM\..\URLSearchHook:  - No CLSID value found

IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found

IE - HKLM\..\SearchScopes,DefaultScope = 

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 

IE - HKCU\..\SearchScopes,DefaultScope = ??Ph??

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultengine: ""

FF - prefs.js..browser.search.defaultenginename: "Google"

FF - prefs.js..browser.search.order.1: ""

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.search.update: false

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "about:home"

 

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINXP\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINXP\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX OVS Helper,version=1.0.0: C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\WINXP\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\WINXP\system32\TVUAx\npTVUAx.dll (TVU networks)

FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Programme\Veetle\plugins\npVeetle.dll (Veetle Inc)

FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Programme\Veetle\Player\npvlc.dll (Veetle Inc)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Programme\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Programme\DivX\DivX Plus Web Player\firefox\html5video [2010.12.19 18:19:22 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Programme\DivX\DivX Plus Web Player\firefox\wpa [2010.12.19 18:19:23 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\tunebite-firefox-surf-and-catch-extension@audials.com: C:\Programme\RapidSolution\Tunebite\plugins\GeckoBased\tunebite-firefox-surf-and-catch-extension@audials.com\ [2011.01.20 18:41:57 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Programme\Alwil Software\Avast5\WebRep\FF [2012.03.12 18:12:54 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.06.16 14:45:56 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012.06.17 12:58:00 | 000,000,000 | ---D | M]

 

[2012.01.10 14:34:32 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Extensions

[2012.01.10 14:34:32 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Extensions\home2@tomtom.com

[2012.06.17 13:25:55 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mozilla\Firefox\Profiles\nkm0hwru.default\extensions

[2011.11.10 12:55:42 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2012.01.08 13:21:41 | 000,634,964 | ---- | M] () (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\RONNY\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\NKM0HWRU.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI

[2012.01.26 00:26:52 | 000,330,316 | ---- | M] () (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\RONNY\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\NKM0HWRU.DEFAULT\EXTENSIONS\PERSONAS@CHRISTOPHER.BEARD.XPI

[2011.01.28 17:07:42 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINXP\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION

[2012.06.16 14:45:56 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll

[2010.07.20 18:21:40 | 000,106,192 | ---- | M] ( ) -- C:\Programme\mozilla firefox\plugins\npstrlnk.dll

[2011.07.11 23:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Programme\mozilla firefox\plugins\npwachk.dll

[2012.02.11 16:10:56 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml

 
 ========== Chrome  ==========

 

CHR - default_search_provider: facemoods (Enabled)

CHR - default_search_provider: search_url = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4

CHR - default_search_provider: suggest_url = 

CHR - plugin: Shockwave Flash (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\gcswf32.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\WINXP\system32\Macromed\Flash\NPSWF32.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll

CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = C:\Programme\Java\jre6\bin\new_plugin\npdeployJava1.dll

CHR - plugin: Java(TM) Platform SE 6 U23 (Enabled) = C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll

CHR - plugin: Adobe Acrobat (Disabled) = C:\Programme\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll

CHR - plugin: DivX Web Player (Enabled) = C:\Programme\Mozilla Firefox\plugins\npdivx32.dll

CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programme\Windows Media Player\npdsplay.dll

CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Programme\Mozilla Firefox\plugins\NPOFF12.DLL

CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programme\Google\Chrome\Application\19.0.1084.56\pdf.dll

CHR - plugin: NapsterLink (Enabled) = C:\Programme\Mozilla Firefox\plugins\npstrlnk.dll

CHR - plugin: Winamp Application Detector (Enabled) = C:\Programme\Mozilla Firefox\plugins\npwachk.dll

CHR - plugin: Microsoft DRM (Enabled) = C:\Programme\Windows Media Player\npdrmv2.dll

CHR - plugin: Microsoft DRM (Enabled) = C:\Programme\Windows Media Player\npwmsdrm.dll

CHR - plugin: DivX OVS Helper Plug-in (Enabled) = C:\Programme\DivX\DivX OVS Helper\npovshelper.dll

CHR - plugin: Google Earth Plugin (Enabled) = C:\Programme\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Google Update (Enabled) = C:\Programme\Google\Update\1.3.21.69\npGoogleUpdate3.dll

CHR - plugin: Veetle TV Player (Enabled) = C:\Programme\Veetle\Player\npvlc.dll

CHR - plugin: Veetle TV Core (Enabled) = C:\Programme\Veetle\plugins\npVeetle.dll

CHR - plugin: TVU Web Player for FireFox (Enabled) = C:\WINXP\system32\TVUAx\npTVUAx.dll

CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

CHR - plugin: Default Plug-in (Enabled) = default_plugin

CHR - Extension: YouTube = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\

CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\

CHR - Extension: VshareComplete plugin for chrome = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\

CHR - Extension: DivX HiQ = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae\2.1.0.900_0\

CHR - Extension: avast! WebRep = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\

CHR - Extension: Facemoods = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.6.0_0\

CHR - Extension: Facemoods = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.6.0_0\facemoods\

CHR - Extension: vshare plugin = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\

CHR - Extension: DivX Plus Web Player HTML5 \\u003Cvideo\\u003E = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.0.900_0\

CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

 

O1 HOSTS File: ([2010.11.25 16:44:10 | 000,426,011 | R--- | M]) - C:\WINXP\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: 127.0.0.1        www.007guard.com

O1 - Hosts: 127.0.0.1        007guard.com

O1 - Hosts: 127.0.0.1        008i.com

O1 - Hosts: 127.0.0.1        www.008k.com

O1 - Hosts: 127.0.0.1        008k.com

O1 - Hosts: 127.0.0.1        www.00hq.com

O1 - Hosts: 127.0.0.1        00hq.com

O1 - Hosts: 127.0.0.1        010402.com

O1 - Hosts: 127.0.0.1        www.032439.com

O1 - Hosts: 127.0.0.1        032439.com

O1 - Hosts: 127.0.0.1        www.0scan.com

O1 - Hosts: 127.0.0.1        0scan.com

O1 - Hosts: 127.0.0.1        1000gratisproben.com

O1 - Hosts: 127.0.0.1        www.1000gratisproben.com

O1 - Hosts: 127.0.0.1        1001namen.com

O1 - Hosts: 127.0.0.1        www.1001namen.com

O1 - Hosts: 127.0.0.1        100888290cs.com

O1 - Hosts: 127.0.0.1        www.100888290cs.com

O1 - Hosts: 127.0.0.1        www.100sexlinks.com

O1 - Hosts: 127.0.0.1        100sexlinks.com

O1 - Hosts: 127.0.0.1        10sek.com

O1 - Hosts: 127.0.0.1        www.10sek.com

O1 - Hosts: 127.0.0.1        www.1-2005-search.com

O1 - Hosts: 127.0.0.1        1-2005-search.com

O1 - Hosts: 14674 more lines...

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (Tunebite_WebRipPlugin Class) - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Programme\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.

O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.

O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [avast5] C:\Programme\Alwil Software\Avast5\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [cFosSpeed] C:\Programme\cFosSpeed\cfosspeed.exe (cFos Software GmbH)

O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found

O4 - HKLM..\Run: [NvCplDaemon] C:\WINXP\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [P17Helper] C:\WINXP\System32\P17.dll ()

O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.)

O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Programme\ICQ7.6\ICQ.exe (ICQ, LLC.)

O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O13 - gopher Prefix: missing

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8E7415E8-8704-4F4F-ACF7-5753ACE6C4A2}: DhcpNameServer = 192.168.2.1

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINXP\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINXP\system32\userinit.exe) - C:\WINXP\system32\userinit.exe (Microsoft Corporation)

O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Programme\SUPERAntiSpyware\SASWINLO.DLL) - C:\Programme\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: C:\WINXP\Web\Wallpaper\PDC Remix.bmp

O24 - Desktop BackupWallPaper: C:\WINXP\Web\Wallpaper\PDC Remix.bmp

O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)

O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2010.11.24 00:17:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.06.17 14:06:54 | 000,000,000 | ---D | C] -- C:\Programme\ESET

[2012.06.17 13:04:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\SUPERAntiSpyware.com

[2012.06.17 13:04:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com

[2012.06.17 13:04:06 | 000,000,000 | ---D | C] -- C:\Programme\SUPERAntiSpyware

[2012.06.17 12:59:58 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Ronny\Recent

[2012.06.17 12:54:40 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java

[2012.06.17 12:54:31 | 000,772,592 | ---- | C] (Oracle Corporation) -- C:\WINXP\System32\npDeployJava1.dll

[2012.06.17 12:54:31 | 000,227,824 | ---- | C] (Oracle Corporation) -- C:\WINXP\System32\javaws.exe

[2012.06.17 12:54:19 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\WINXP\System32\javaw.exe

[2012.06.17 12:54:19 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\WINXP\System32\java.exe

[2012.06.17 12:45:52 | 000,000,000 | ---D | C] -- C:\_OTL

[2012.06.16 13:30:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\CCleaner

[2012.06.16 13:30:15 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner

[2012.06.14 20:49:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Malwarebytes

[2012.06.14 20:49:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware

[2012.06.14 20:49:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

[2012.06.14 20:49:30 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINXP\System32\drivers\mbam.sys

[2012.06.14 20:49:30 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware

[2012.06.13 13:54:53 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\jsdbgui.dll

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.06.17 13:04:11 | 000,001,642 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk

[2012.06.17 13:03:15 | 000,096,492 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\cc_20120617_130308.reg

[2012.06.17 12:58:00 | 000,001,710 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader X.lnk

[2012.06.17 12:54:08 | 000,227,824 | ---- | M] (Oracle Corporation) -- C:\WINXP\System32\javaws.exe

[2012.06.17 12:54:08 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\WINXP\System32\javaw.exe

[2012.06.17 12:54:08 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\WINXP\System32\java.exe

[2012.06.17 12:54:08 | 000,143,872 | ---- | M] (Oracle Corporation) -- C:\WINXP\System32\javacpl.cpl

[2012.06.17 12:54:07 | 000,772,592 | ---- | M] (Oracle Corporation) -- C:\WINXP\System32\npDeployJava1.dll

[2012.06.17 12:54:07 | 000,687,600 | ---- | M] (Oracle Corporation) -- C:\WINXP\System32\deployJava1.dll

[2012.06.17 12:50:18 | 000,175,314 | ---- | M] () -- C:\WINXP\System32\nvapps.xml

[2012.06.17 12:50:07 | 000,002,206 | ---- | M] () -- C:\WINXP\System32\wpa.dbl

[2012.06.17 12:48:46 | 000,002,048 | --S- | M] () -- C:\WINXP\bootstat.dat

[2012.06.17 12:48:41 | 2145,964,032 | -HS- | M] () -- C:\hiberfil.sys

[2012.06.16 16:12:21 | 000,007,445 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\Desktop\gmer.zip

[2012.06.16 13:30:19 | 000,000,654 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk

[2012.06.14 21:26:55 | 000,000,020 | ---- | M] () -- C:\Dokumente und Einstellungen\Ronny\defogger_reenable

[2012.06.14 20:49:33 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2012.06.14 20:18:12 | 000,134,072 | ---- | M] () -- C:\WINXP\System32\FNTCACHE.DAT

[2012.06.13 19:50:31 | 000,544,482 | ---- | M] () -- C:\WINXP\System32\perfh007.dat

[2012.06.13 19:50:31 | 000,495,936 | ---- | M] () -- C:\WINXP\System32\perfh009.dat

[2012.06.13 19:50:31 | 000,111,354 | ---- | M] () -- C:\WINXP\System32\perfc007.dat

[2012.06.13 19:50:31 | 000,084,524 | ---- | M] () -- C:\WINXP\System32\perfc009.dat

[2012.06.13 14:23:01 | 000,001,777 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Google Chrome.lnk

[2012.05.31 15:22:01 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\crypt32.dll

 
 ========== Files Created - No Company Name ==========

 

[2012.06.17 13:04:11 | 000,001,642 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk

[2012.06.17 13:03:11 | 000,096,492 | ---- | C] () -- C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\cc_20120617_130308.reg

[2012.06.17 12:58:00 | 000,001,800 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader X.lnk

[2012.06.17 12:58:00 | 000,001,710 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader X.lnk

[2012.06.16 16:12:21 | 000,007,445 | ---- | C] () -- C:\Dokumente und Einstellungen\Ronny\Desktop\gmer.zip

[2012.06.16 13:30:19 | 000,000,654 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk

[2012.06.14 21:26:49 | 000,000,020 | ---- | C] () -- C:\Dokumente und Einstellungen\Ronny\defogger_reenable

[2012.06.14 20:49:33 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2012.02.21 17:15:39 | 000,265,096 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-1715567821-1450960922-682003330-1003-0.dat

[2012.02.21 17:15:39 | 000,131,898 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat

[2012.02.16 13:39:13 | 000,003,072 | ---- | C] () -- C:\WINXP\System32\iacenc.dll

[2012.01.31 19:15:44 | 000,030,568 | ---- | C] () -- C:\WINXP\MusiccityDownload.exe

[2012.01.31 19:15:42 | 000,974,848 | ---- | C] () -- C:\WINXP\System32\cis-2.4.dll

[2012.01.31 19:15:42 | 000,081,920 | ---- | C] () -- C:\WINXP\System32\issacapi_bs-2.3.dll

[2012.01.31 19:15:42 | 000,065,536 | ---- | C] () -- C:\WINXP\System32\issacapi_pe-2.3.dll

[2012.01.31 19:15:42 | 000,057,344 | ---- | C] () -- C:\WINXP\System32\issacapi_se-2.3.dll

[2011.05.22 23:28:37 | 000,053,248 | ---- | C] () -- C:\WINXP\System32\CommonDL.dll

[2011.05.22 23:28:37 | 000,002,413 | ---- | C] () -- C:\WINXP\System32\lgAxconfig.ini

[2011.02.26 23:22:38 | 000,000,126 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib

[2011.01.02 23:25:17 | 000,000,069 | ---- | C] () -- C:\WINXP\NeroDigital.ini

[2010.11.30 00:21:55 | 000,008,704 | ---- | C] () -- C:\Dokumente und Einstellungen\Ronny\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.11.27 22:57:13 | 000,000,056 | -H-- | C] () -- C:\WINXP\System32\ezsidmv.dat

[2010.11.25 00:39:27 | 000,068,865 | ---- | C] () -- C:\WINXP\hpoins05.dat

[2010.11.25 00:39:27 | 000,019,696 | ---- | C] () -- C:\WINXP\hpomdl05.dat

[2010.11.24 00:31:55 | 000,000,000 | ---- | C] () -- C:\WINXP\nsreg.dat

[2010.11.24 00:24:53 | 000,005,663 | ---- | C] () -- C:\WINXP\System32\ludap17.ini

[2010.11.24 00:24:53 | 000,000,075 | ---- | C] () -- C:\WINXP\System32\ctzapxx.ini

[2010.11.24 00:19:42 | 000,002,048 | --S- | C] () -- C:\WINXP\bootstat.dat

[2010.11.24 00:14:18 | 000,021,740 | ---- | C] () -- C:\WINXP\System32\emptyregdb.dat

[2010.11.24 00:09:29 | 000,004,073 | ---- | C] () -- C:\WINXP\ODBCINST.INI

[2010.11.24 00:08:23 | 000,134,072 | ---- | C] () -- C:\WINXP\System32\FNTCACHE.DAT

 
 ========== LOP Check ==========

 

[2010.11.24 00:50:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Alwil Software

[2011.09.19 20:28:12 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files

[2011.01.28 16:53:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite

[2011.04.18 21:15:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FlashFXP

[2011.05.09 14:10:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ

[2011.05.22 23:28:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LGMOBILEAX

[2011.01.11 22:51:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Napster

[2011.01.20 18:44:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RapidSolution

[2012.02.21 13:13:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung

[2011.03.29 11:21:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft

[2012.01.10 14:35:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TomTom

[2010.11.24 01:06:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software

[2010.11.24 01:05:41 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}

[2012.06.17 13:00:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\DAEMON Tools Lite

[2011.08.19 16:07:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\DVDVideoSoftIEHelpers

[2011.11.18 02:05:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\FileZilla

[2012.02.03 00:57:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\ICQ

[2011.05.22 23:58:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\LG Electronics

[2010.12.19 18:19:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Local

[2011.01.11 19:37:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Mp3tag

[2011.09.19 20:25:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\OpenCandy

[2011.07.13 17:02:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Qlikworld

[2012.02.21 13:15:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Samsung

[2011.09.17 00:27:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\streamripper

[2011.01.30 22:07:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\TeamViewer

[2012.01.10 14:34:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\TomTom

[2012.06.17 13:00:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\TS3Client

[2010.11.24 01:07:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\TuneUp Software

[2010.11.25 00:16:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Windows Desktop Search

[2010.11.26 22:00:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\Windows Search

[2011.06.17 11:00:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ronny\Anwendungsdaten\XnView

 
 ========== Purity Check ==========

 

 
 

< End of report >

Code:

OTL Extras logfile created on: 17.06.2012 16:06:48 - Run 3

OTL by OldTimer - Version 3.2.48.0     Folder = C:\Dokumente und Einstellungen\Ronny\Eigene Dateien\Downloads\dez11

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

2,00 Gb Total Physical Memory | 1,14 Gb Available Physical Memory | 57,04% Memory free

3,85 Gb Paging File | 3,01 Gb Available in Paging File | 78,31% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme

Drive C: | 279,45 Gb Total Space | 205,87 Gb Free Space | 73,67% Space Free | Partition Type: NTFS

Drive D: | 74,52 Gb Total Space | 29,43 Gb Free Space | 39,49% Space Free | Partition Type: NTFS

Drive G: | 14,63 Gb Total Space | 14,63 Gb Free Space | 100,00% Space Free | Partition Type: FAT32

Drive I: | 14,83 Gb Total Space | 3,90 Gb Free Space | 26,33% Space Free | Partition Type: FAT32

 

Computer Name: BIE | User Name: Ronny | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

exefile [open] -- "%1" %*

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Programme\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"UpdatesDisableNotify" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 
 ========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]

"Start" = 2

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 0

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

"DisableUnicastResponsesToMulticastBroadcast" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

"DisableUnicastResponsesToMulticastBroadcast" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"C:\Programme\FlashFXP 4\FlashFXP.exe" = C:\Programme\FlashFXP 4\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (OpenSight Software, LLC)

"C:\Programme\ICQ7.6\ICQ.exe" = C:\Programme\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6 -- (ICQ, LLC.)

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Programme\mIRC\mirc.exe" = C:\Programme\mIRC\mirc.exe:*:Enabled:mIRC -- (mIRC Co. Ltd.)

"C:\Programme\SopCast\adv\SopAdver.exe" = C:\Programme\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com)

"C:\Programme\SopCast\SopCast.exe" = C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com)

"C:\Programme\Mozilla Firefox\firefox.exe" = C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)

"C:\Programme\Microsoft LifeCam\LifeCam.exe" = C:\Programme\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe -- (Microsoft Corporation)

"C:\Programme\Microsoft LifeCam\LifeEnC2.exe" = C:\Programme\Microsoft LifeCam\LifeEnC2.exe:*:Enabled:LifeEnC2.exe -- (Microsoft Corporation)

"C:\Programme\Microsoft LifeCam\LifeExp.exe" = C:\Programme\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe -- (Microsoft Corporation)

"C:\Programme\Microsoft LifeCam\LifeTray.exe" = C:\Programme\Microsoft LifeCam\LifeTray.exe:*:Enabled:LifeTray.exe -- (Microsoft Corporation)

"C:\Programme\TeamViewer\Version6\TeamViewer.exe" = C:\Programme\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)

"C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe" = C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH)

"C:\Programme\Java\jre6\bin\javaw.exe" = C:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)

"C:\Programme\FlashFXP 4\FlashFXP.exe" = C:\Programme\FlashFXP 4\FlashFXP.exe:*:Enabled:FlashFXP v3 -- (OpenSight Software, LLC)

"C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)

"C:\Programme\ICQ7.6\ICQ.exe" = C:\Programme\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6 -- (ICQ, LLC.)

"C:\WINXP\system32\muzapp.exe" = C:\WINXP\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)

 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu

"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended

"{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform

"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 23

"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5

"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in

"{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver

"{2C3CE8F0-F4AD-4D54-A520-975309C617E2}" = LG PC Suite III

"{33999F1F-EA46-4E55-A239-1BA803235396}" = Hercules DJ Products Series drivers

"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{5469D537-9B44-4c78-BF2D-5F9807564F74}" = HP PSC & OfficeJet 4.7

"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml

"{56F3E1FF-54FE-4384-A153-6CCABA097814}" = Creative MediaSource

"{5E1375CB-6792-4464-8715-CC3EC83D48FA}" = VirtualDJ Home FREE

"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053

"{5FC7AB5C-61FC-42DF-A923-5139BCF10D42}" = Microsoft LifeCam

"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM

"{63C30E47-B1D6-4BB3-BB76-DAB20DB9CAB8}" = Tunebite

"{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan

"{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}" = Apple Application Support

"{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}" = No23 Recorder

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies

"{7644E42D-B096-457F-8B5B-901238FC81AE}" = ICQ7.6

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)

"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}" = Napster Burn Engine

"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules

"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (German) 12

"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007

"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007

"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007

"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007

"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007

"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007

"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007

"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007

"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007

"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007

"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007

"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007

"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007

"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007

"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In

"{96E3AED5-3D0B-4BB0-84C2-1EDADB204487}" = FlashFXP v4.0

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{A20A58C4-6784-4B4B-86CC-94E2E3671031}" = Nero 7 Ultra Edition

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Deutsch

"{B2C3BB6B-E005-4246-B8E5-DF0A4D073CDC}" = PixiePack Codec Pack

"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation

"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars

"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player

"{BBBCAE4B-B416-4182-A6F2-438180894A81}" = Napster

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C0E18DC4-C74A-4889-AE3A-933471023787}" = LG PC Suite III

"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU

"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU

"{C765D9FF-4A34-4BF1-9F91-E9A3C60C86FC}" = ArcSoft VideoImpression 2

"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack

"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime

"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones

"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities

"{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3

"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5

"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"5513-1208-7298-9440" = JDownloader 0.9

"82A44D22-9452-49FB-00FB-CEC7DCAF7E23" = EA SPORTS online 2004

"ABC Amber Audio Converter" = ABC Amber Audio Converter

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Adobe Photoshop 7.0" = Adobe Photoshop 7.0

"Adobe Shockwave Player" = Adobe Shockwave Player 11.6

"Adobe SVG Viewer" = Adobe SVG Viewer 3.0

"Anti-Twin 2010-12-14 18.10.50" = Anti-Twin (Installation 14.12.2010)

"Ashampoo Photo Optimizer FREE_is1" = Ashampoo Photo Optimizer FREE

"Audacity_is1" = Audacity 1.2.6

"avast" = avast! Free Antivirus

"CCleaner" = CCleaner

"cFosSpeed" = cFosSpeed v3.22

"CloneCD" = CloneCD

"DAEMON Tools Lite" = DAEMON Tools Lite

"Device Control" = Gerätesteuerung

"DRAGON" = DRAGON 1.6

"ENTERPRISE" = Microsoft Office Enterprise 2007

"ESET Online Scanner" = ESET Online Scanner v3

"FileZilla Client" = FileZilla Client 3.5.2

"German Truck Simulator" = German Truck Simulator 1.00

"Google Chrome" = Google Chrome

"HP Photo & Imaging" = HP Image Zone 4.7

"ICQToolbar" = ICQ Toolbar

"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager

"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.61.0.1400

"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack

"mIRC" = mIRC

"Mozilla Firefox 13.0.1 (x86 de)" = Mozilla Firefox 13.0.1 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"Mp3tag" = Mp3tag v2.47b

"NVIDIA Drivers" = NVIDIA Drivers

"Seven Remix XP" = Seven Remix XP 2.41

"SHOUTcastDSP" = SHOUTcast Source DSP 1.9.1 (remove only)

"SopCast" = SopCast 3.2.9

"SopFilter" = SopFilter 3.0.5

"Streamripper" = Streamripper (Remove only)

"SystemRequirementsLab" = System Requirements Lab

"TeamSpeak 3 Client" = TeamSpeak 3 Client

"TeamViewer 6" = TeamViewer 6

"TomTom HOME" = TomTom HOME 2.8.2.2264

"TuneUp Utilities" = TuneUp Utilities

"Veetle TV" = Veetle TV 0.9.18

"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions

"VLC media player" = VLC media player 1.1.11

"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9

"Winamp" = Winamp

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"WinRAR archiver" = WinRAR

"WMFDist11" = Windows Media Format 11 runtime

"XP Codec Pack" = XP Codec Pack

"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Winamp Detect" = Winamp Erkennungs-Plug-in

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 10.01.2012 08:34:25 | Computer Name = BIE | Source = TomTomHOMEService | ID = 10000

Description = 

 

Error - 10.01.2012 08:37:07 | Computer Name = BIE | Source = TomTomHOMEService | ID = 10000

Description = 

 

Error - 11.01.2012 11:50:27 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 14.01.2012 19:41:02 | Computer Name = BIE | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung mirc.exe, Version 7.15.0.0, fehlgeschlagenes

 Modul unknown, Version 0.0.0.0, Fehleradresse 0x3fff941d.

 

Error - 17.02.2012 11:29:00 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 14.04.2012 05:37:03 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 12.05.2012 07:30:22 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 14.06.2012 14:20:41 | Computer Name = BIE | Source = .NET Runtime Optimization Service | ID = 1103

Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)

 - Tried to start a service that wasn't the latest version of CLR Optimization service.

 Will shutdown 

 

Error - 17.06.2012 08:06:21 | Computer Name = BIE | Source = crypt32 | ID = 131083

Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen

 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>

 ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich 

nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel

 in der signierten Datei.  .

 

Error - 17.06.2012 08:06:21 | Computer Name = BIE | Source = crypt32 | ID = 131083

Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen

 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>

 ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich 

nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel

 in der signierten Datei.  .

 

[ System Events ]

Error - 17.06.2012 06:45:53 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "Creative Service for CDROM Access" wurde unerwartet beendet.

 Dies ist bereits 1 Mal passiert.

 

Error - 17.06.2012 06:45:53 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "Hercules DJ Control MP3" wurde unerwartet beendet. Dies ist

 bereits 1 Mal passiert.

 

Error - 17.06.2012 06:45:53 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "cFosSpeed System Service" wurde unerwartet beendet. Dies ist

 bereits 1 Mal passiert.

 

Error - 17.06.2012 06:45:53 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "ICQ Service" wurde unerwartet beendet. Dies ist bereits 1 

Mal passiert.

 

Error - 17.06.2012 06:45:53 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "MSCamSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal

 passiert.

 

Error - 17.06.2012 06:45:53 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies

 ist bereits 1 Mal passiert.

 

Error - 17.06.2012 06:45:53 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "Pml Driver HPZ12" wurde unerwartet beendet. Dies ist bereits

 1 Mal passiert.

 

Error - 17.06.2012 06:45:53 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "TomTomHOMEService" wurde unerwartet beendet. Dies ist bereits

 1 Mal passiert.

 

Error - 17.06.2012 06:45:55 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "TuneUp Utilities Service" wurde unerwartet beendet. Dies ist

 bereits 1 Mal passiert.

 

Error - 17.06.2012 06:45:55 | Computer Name = BIE | Source = Service Control Manager | ID = 7034

Description = Dienst "Java Quick Starter" wurde unerwartet beendet. Dies ist bereits

 1 Mal passiert.

 

 

< End of report >

danke