Trojaner-Board - 8000000cb.@

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - 8000000cb.@ (https://www.trojaner-board.de/122566-8000000cb.html)

Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
Starte die OTL.exe.
Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:

Ersetze die *** Sternchen wieder in den Benutzernamen zurück!

Code:

:OTL

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC 

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC 

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 

IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} 

IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 

IE - HKU\S-1-5-21-2522849197-3813269152-386840603-1000\..\SearchScopes,DefaultScope = {A8061948-BE64-4AD0-B549-6EE497484C23} 

IE - HKU\S-1-5-21-2522849197-3813269152-386840603-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC 

IE - HKU\S-1-5-21-2522849197-3813269152-386840603-1000\..\SearchScopes\{A8061948-BE64-4AD0-B549-6EE497484C23}: "URL" = http://www.google.de/search?q={searchTerms} 

IE - HKU\S-1-5-21-2522849197-3813269152-386840603-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 

FF - prefs.js..browser.startup.homepage: "http://asus.msn.com/" 

FF - prefs.js..network.proxy.type: 0 

FF - user.js - File not found 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_233.dll File not found 

O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. 

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. 

O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. 

O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. 

O3 - HKU\S-1-5-21-2522849197-3813269152-386840603-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. 

O4 - HKU\S-1-5-21-2522849197-3813269152-386840603-1000..\Run: [LicenseValidator] C:\Users\*** ***\AppData\Roaming\Identities\{99131863-2475-4CCB-A030-E7103529DCEF}\LicenseValidator.exe () 

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found 

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found 

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 

O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found 

O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found 

O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found 

O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found 

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found 

O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found 

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) 

O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) 

O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) 

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) 

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) 

O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found 

O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found 

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. 

O32 - HKLM CDRom: AutoRun - 1 

O33 - MountPoints2\{055cc081-cf97-11df-812e-e0cb4e2453ab}\Shell - "" = AutoRun 

O33 - MountPoints2\{055cc081-cf97-11df-812e-e0cb4e2453ab}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence 
 

[2012/08/22 21:43:05 | 000,247,655 | ---- | M] () -- C:\Users\*** ***\AppData\Roaming\Identities\{99131863-2475-4CCB-A030-E7103529DCEF}\LicenseValidator.exe 

@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:AB689DEA 

@Alternate Data Stream - 141 bytes -> C:\ProgramData\Temp:15024E60 

@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:734E442A 

@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:4CF61E54 

@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:B88E99C8 

@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:A724744F 
 

[2012/08/24 15:33:00 | 000,000,000 | ---D | C] -- C:\Users\*** ***\AppData\Local\{6F2F9469-C615-4E5A-A3B6-71DBF14CB18E} 

[2012/08/21 20:45:29 | 000,000,000 | ---D | C] -- C:\Users\*** ***\AppData\Local\{E11AB340-EDFF-487A-A8DC-3C69A2CFF082} 

[2012/08/21 19:45:46 | 000,023,552 | ---- | C] () -- C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\U\800000cb.@ 

[2012/08/21 19:45:46 | 000,016,896 | ---- | C] () -- C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\U\80000000.@ 

[2012/08/20 16:58:16 | 000,001,712 | ---- | C] () -- C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\U\00000001.@ 

[2012/01/11 11:04:49 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\@ 

[2012/01/11 11:04:49 | 000,002,048 | -HS- | C] () -- C:\Users\*** ***\AppData\Local\{c604f487-fb6f-9d3d-8015-262ef1f61359}\@ 
 

[2010/07/27 16:37:48 | 000,000,000 | -HSD | M] -- C:\Users\*** ***\AppData\Roaming\.# 
 

:Files

C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\

C:\Users\*** ***\AppData\Local\{c604f487-fb6f-9d3d-8015-262ef1f61359}\
 
 

C:\Users\*** ***\AppData\Local\{*}

C:\ProgramData\*.exe

C:\ProgramData\TEMP

C:\Users\*** ***\AppData\Local\Temp\*.exe

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache

ipconfig /flushdns /c

:Commands

[purity]

[emptytemp]

Schließe alle Programme.
Klicke auf den Fix Button.
Wenn OTL einen Neustart verlangt, bitte zulassen.
Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\<datum_nummer.log>

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

Habe ich gemacht, noch nen paar anmerkungen:

-> schöner nebeneffekt...auf einmal braucht mein laptop nur noch ein drittel der zeit um hochzufahren

-> avira ist nach dem hochfahren sofort wieder aktiv gewesen und hat das hier gefunden: LicenseValidator TR/Gataka.D.70 ... soll das in Quarantäne?

-> hier ist der code:

Code:

All processes killed

========== OTL ==========

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Registry key HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!

HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Registry key HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.

HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!

HKEY_USERS\S-1-5-21-2522849197-3813269152-386840603-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Registry key HKEY_USERS\S-1-5-21-2522849197-3813269152-386840603-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.

Registry key HKEY_USERS\S-1-5-21-2522849197-3813269152-386840603-1000\Software\Microsoft\Internet Explorer\SearchScopes\{A8061948-BE64-4AD0-B549-6EE497484C23}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A8061948-BE64-4AD0-B549-6EE497484C23}\ not found.

HKU\S-1-5-21-2522849197-3813269152-386840603-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!

Prefs.js: "hxxp://asus.msn.com/" removed from browser.startup.homepage

Prefs.js: 0 removed from network.proxy.type

64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.

64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.

Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.

Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.

Registry value HKEY_USERS\S-1-5-21-2522849197-3813269152-386840603-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.

Registry value HKEY_USERS\S-1-5-21-2522849197-3813269152-386840603-1000\Software\Microsoft\Windows\CurrentVersion\Run\\LicenseValidator deleted successfully.

C:\Users\*** ***\AppData\Roaming\Identities\{99131863-2475-4CCB-A030-E7103529DCEF}\LicenseValidator.exe moved successfully.

Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.

Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully.

64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\An OneNote s&enden\ deleted successfully.

64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\ deleted successfully.

64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Nach Microsoft E&xcel exportieren\ deleted successfully.

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\An OneNote s&enden\ not found.

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\ not found.

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Nach Microsoft E&xcel exportieren\ not found.

Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.

Starting removal of ActiveX control {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ not found.

Starting removal of ActiveX control {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\ not found.

Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.

Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}

C:\Windows\Downloaded Program Files\gp.inf not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.

64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.

64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{055cc081-cf97-11df-812e-e0cb4e2453ab}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{055cc081-cf97-11df-812e-e0cb4e2453ab}\ not found.

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{055cc081-cf97-11df-812e-e0cb4e2453ab}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{055cc081-cf97-11df-812e-e0cb4e2453ab}\ not found.

File F:\setup_vmc_lite.exe /checkApplicationPresence not found.

File C:\Users\*** ***\AppData\Roaming\Identities\{99131863-2475-4CCB-A030-E7103529DCEF}\LicenseValidator.exe not found.

ADS C:\ProgramData\Temp:AB689DEA deleted successfully.

ADS C:\ProgramData\Temp:15024E60 deleted successfully.

ADS C:\ProgramData\Temp:734E442A deleted successfully.

ADS C:\ProgramData\Temp:4CF61E54 deleted successfully.

ADS C:\ProgramData\Temp:B88E99C8 deleted successfully.

ADS C:\ProgramData\Temp:A724744F deleted successfully.

C:\Users\*** ***\AppData\Local\{6F2F9469-C615-4E5A-A3B6-71DBF14CB18E} folder moved successfully.

C:\Users\*** ***\AppData\Local\{E11AB340-EDFF-487A-A8DC-3C69A2CFF082} folder moved successfully.

C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\U\800000cb.@ moved successfully.

C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\U\80000000.@ moved successfully.

C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\U\00000001.@ moved successfully.

C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\@ moved successfully.

C:\Users\*** ***\AppData\Local\{c604f487-fb6f-9d3d-8015-262ef1f61359}\@ moved successfully.

C:\Users\*** ***\AppData\Roaming\.# folder moved successfully.

========== FILES ==========

C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\U folder moved successfully.

C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359}\L folder moved successfully.

C:\Windows\Installer\{c604f487-fb6f-9d3d-8015-262ef1f61359} folder moved successfully.

C:\Users\*** ***\AppData\Local\{c604f487-fb6f-9d3d-8015-262ef1f61359}\U folder moved successfully.

C:\Users\*** ***\AppData\Local\{c604f487-fb6f-9d3d-8015-262ef1f61359}\L folder moved successfully.

C:\Users\*** ***\AppData\Local\{c604f487-fb6f-9d3d-8015-262ef1f61359} folder moved successfully.

C:\Users\*** ***\AppData\Local\{00208F78-0A08-428F-9C67-321EB52FA368} folder moved successfully.

C:\Users\*** ***\AppData\Local\{03F1EBC3-381F-48C0-AEFE-98B26DBDD56F} folder moved successfully.

C:\Users\*** ***\AppData\Local\{05A957B8-8786-4B4B-9F1F-5E3D99200121} folder moved successfully.

C:\Users\*** ***\AppData\Local\{09D35D5F-BB0A-4000-BE44-00D7F7C94F8A} folder moved successfully.

C:\Users\*** ***\AppData\Local\{0CE02758-6CF0-4B57-AC91-5F98748B4D09} folder moved successfully.

C:\Users\*** ***\AppData\Local\{0D9F9262-64A5-43F8-8D94-165858E4F44C} folder moved successfully.

C:\Users\*** ***\AppData\Local\{12B8990D-71B1-4025-877F-65E025ED60CC} folder moved successfully.

C:\Users\*** ***\AppData\Local\{17323152-9018-496A-BEFA-FD031B412298} folder moved successfully.

C:\Users\*** ***\AppData\Local\{17BADC17-FFC0-4A68-B445-B8F47D0643BB} folder moved successfully.

C:\Users\*** ***\AppData\Local\{19263F0D-B7AA-4C57-BEB9-7C7C07CE6D56} folder moved successfully.

C:\Users\*** ***\AppData\Local\{198950CE-B565-4AF3-A5CC-0B9775BDA3D5} folder moved successfully.

C:\Users\*** ***\AppData\Local\{19B7E976-F8E6-454B-915D-3B18F8C12744} folder moved successfully.

C:\Users\*** ***\AppData\Local\{19F30864-F623-4612-8C76-1B3A814F6F49} folder moved successfully.

C:\Users\*** ***\AppData\Local\{1BAA6741-F4A1-4058-92D0-528F3B59535E} folder moved successfully.

C:\Users\*** ***\AppData\Local\{1F7946C5-3F52-4C8A-B4AF-7B6D5457AD48} folder moved successfully.

C:\Users\*** ***\AppData\Local\{1F7F4400-5123-46A9-9C94-BCD7FC242A02} folder moved successfully.

C:\Users\*** ***\AppData\Local\{1F854507-3003-4CA7-8E74-CD27204D25E1} folder moved successfully.

C:\Users\*** ***\AppData\Local\{20FD558E-B9F0-4925-A35B-F3C30824B21E} folder moved successfully.

C:\Users\*** ***\AppData\Local\{29C0EE46-3AA8-42B5-8A83-43163AF9112E} folder moved successfully.

C:\Users\*** ***\AppData\Local\{2CA9EB1F-1B0F-40D3-B8CB-811C4A297C88} folder moved successfully.

C:\Users\*** ***\AppData\Local\{2F0F3595-A406-4865-B5C3-CB4087474718} folder moved successfully.

C:\Users\*** ***\AppData\Local\{32DAAEFC-BACD-4628-8EF5-E97AACD6C92A} folder moved successfully.

C:\Users\*** ***\AppData\Local\{3533F20E-3329-46DD-891F-144069858DE6} folder moved successfully.

C:\Users\*** ***\AppData\Local\{35855F3B-034B-4F01-A866-8954FCFACFF6} folder moved successfully.

C:\Users\*** ***\AppData\Local\{37283D42-BD6F-4E11-9652-EB0CF6AD79BC} folder moved successfully.

C:\Users\*** ***\AppData\Local\{3C2C91F9-1376-4405-9483-C67A0F9BE532} folder moved successfully.

C:\Users\*** ***\AppData\Local\{4D24AF2C-7407-48DB-92F7-EEEC00735484} folder moved successfully.

C:\Users\*** ***\AppData\Local\{517646EC-FA04-4A4A-9A4F-700BEBD6B857} folder moved successfully.

C:\Users\*** ***\AppData\Local\{526E733B-13C9-440F-90AB-D0CAD5A42F3D} folder moved successfully.

C:\Users\*** ***\AppData\Local\{53A1B9B2-06CC-4CF5-9AFE-EAD7EC977B36} folder moved successfully.

C:\Users\*** ***\AppData\Local\{549451C7-9F7D-4D20-825B-E2CA6D227A67} folder moved successfully.

C:\Users\*** ***\AppData\Local\{5AF2A003-93AF-4C70-B078-E69F1ADBD14D} folder moved successfully.

C:\Users\*** ***\AppData\Local\{5C0A56F4-B572-4C5B-82B6-883F261F4191} folder moved successfully.

C:\Users\*** ***\AppData\Local\{5C9099E6-1F77-4E8D-9304-B7C12FF5DFE7} folder moved successfully.

C:\Users\*** ***\AppData\Local\{5FCF4C0C-7E58-4683-A8D2-D4D7CEA4560A} folder moved successfully.

C:\Users\*** ***\AppData\Local\{6239D0C3-97A3-47E0-BDE9-2A03B026923F} folder moved successfully.

C:\Users\*** ***\AppData\Local\{62C75972-F78C-42B3-A5BC-9BF54D042056} folder moved successfully.

C:\Users\*** ***\AppData\Local\{6590E810-8301-461A-927C-B88203A5A6AD} folder moved successfully.

C:\Users\*** ***\AppData\Local\{66E5DC79-FAB9-45FC-B9E9-F2BB5D0C3F6E} folder moved successfully.

C:\Users\*** ***\AppData\Local\{67001C59-D6BF-4E2E-B787-DFD2D280449F} folder moved successfully.

C:\Users\*** ***\AppData\Local\{67C3C10E-ED8D-4DED-B9F1-AE9F35B70ECF} folder moved successfully.

C:\Users\*** ***\AppData\Local\{6881D76A-6B8D-4D17-A9FE-28E3422B8662} folder moved successfully.

C:\Users\*** ***\AppData\Local\{73B69EAA-A367-4961-B3CC-AE325B848131} folder moved successfully.

C:\Users\*** ***\AppData\Local\{74116172-3822-4E7D-999A-42520A3C6CA0} folder moved successfully.

C:\Users\*** ***\AppData\Local\{7529C15F-43BA-4A56-9BD9-34B316905774} folder moved successfully.

C:\Users\*** ***\AppData\Local\{7868E194-D2E4-43EB-8B13-4A7C49D206B7} folder moved successfully.

C:\Users\*** ***\AppData\Local\{788096C3-ACE2-49E1-8D84-0FD2EBDA65B1} folder moved successfully.

C:\Users\*** ***\AppData\Local\{7B9422F5-8F80-4A25-B37C-3211A90A0BEA} folder moved successfully.

C:\Users\*** ***\AppData\Local\{7F0BEA9B-119A-4F24-B74C-4AE3A21B7B72} folder moved successfully.

C:\Users\*** ***\AppData\Local\{7F8F9FE4-C128-455A-8A6C-648AB629F19D} folder moved successfully.

C:\Users\*** ***\AppData\Local\{7FDD06EC-77B2-441A-98B5-4D6D8B9EE647} folder moved successfully.

C:\Users\*** ***\AppData\Local\{81F18448-CEC2-4286-A25D-AE3F964C6996} folder moved successfully.

C:\Users\*** ***\AppData\Local\{85892BB8-A580-4F28-8EB4-A05A28A807D9} folder moved successfully.

C:\Users\*** ***\AppData\Local\{89297E32-51AE-4861-8042-2D69B8EC2750} folder moved successfully.

C:\Users\*** ***\AppData\Local\{8AAC7018-6B57-4FBC-97DD-E5F2211BA724} folder moved successfully.

C:\Users\*** ***\AppData\Local\{8EF651B6-3A1B-4776-A210-BEABDB5C8312} folder moved successfully.

C:\Users\*** ***\AppData\Local\{8F1EDC9A-B1FE-49F4-9519-09A8D96D20CA} folder moved successfully.

C:\Users\*** ***\AppData\Local\{925F9C88-1C49-4ED1-B610-4991B3F08227} folder moved successfully.

C:\Users\*** ***\AppData\Local\{93EEF0E0-2152-436E-ADFF-4BFF97BD1D5F} folder moved successfully.

C:\Users\*** ***\AppData\Local\{941D0642-B2EF-4547-9EF3-A96A056A49A1} folder moved successfully.

C:\Users\*** ***\AppData\Local\{973A9C94-9E77-43E4-A766-EB1B9A953B41} folder moved successfully.

C:\Users\*** ***\AppData\Local\{9859A472-B60E-4F60-84B1-32803F577780} folder moved successfully.

C:\Users\*** ***\AppData\Local\{993338F8-6079-4CD8-B274-CD32D7647F84} folder moved successfully.

C:\Users\*** ***\AppData\Local\{9A5BF31E-B762-469F-8264-A2DCDA74B605} folder moved successfully.

C:\Users\*** ***\AppData\Local\{9A92C716-D7A9-4E83-B945-8C98487E2C62} folder moved successfully.

C:\Users\*** ***\AppData\Local\{9E811875-AB40-4956-A802-3E4357A94A22} folder moved successfully.

C:\Users\*** ***\AppData\Local\{A489A178-C934-4D28-B621-BA0A8FEDBAC4} folder moved successfully.

C:\Users\*** ***\AppData\Local\{A6F7C4E5-9F3A-444B-BC3E-947A70FF3C94} folder moved successfully.

C:\Users\*** ***\AppData\Local\{AAD6C497-DFC8-4917-ACCC-D371E5102EA1} folder moved successfully.

C:\Users\*** ***\AppData\Local\{AADEF95F-E36B-426E-B7B1-70E7D4F6AA5B} folder moved successfully.

C:\Users\*** ***\AppData\Local\{AB021E86-31CA-403F-9321-AAB540555A3A} folder moved successfully.

C:\Users\*** ***\AppData\Local\{ABF9AAB8-568F-4148-846A-E057C85A292B} folder moved successfully.

C:\Users\*** ***\AppData\Local\{AD3BDB48-369A-418D-B734-43F2C1939793} folder moved successfully.

C:\Users\*** ***\AppData\Local\{AD8DBB1A-4631-42F1-BCF7-DCE6880DAD62} folder moved successfully.

C:\Users\*** ***\AppData\Local\{ADD192B5-9357-49E4-A137-74C6975F3162} folder moved successfully.

C:\Users\*** ***\AppData\Local\{B9F44021-7653-4CCE-9FB2-F9AC09F0737A} folder moved successfully.

C:\Users\*** ***\AppData\Local\{BAA41F9F-A206-4550-829A-A88B362FB0EC} folder moved successfully.

C:\Users\*** ***\AppData\Local\{C0810D1D-14E1-41D2-9EF9-CB5DEC519CD9} folder moved successfully.

C:\Users\*** ***\AppData\Local\{C26F6F41-AC46-4712-B1A9-233007EAC101} folder moved successfully.

C:\Users\*** ***\AppData\Local\{C36C25E5-50F3-4E1F-A926-495E0B4EC34D} folder moved successfully.

C:\Users\*** ***\AppData\Local\{C6D9BB5B-4124-4FCA-B7F1-0472E6EE5012} folder moved successfully.

C:\Users\*** ***\AppData\Local\{C870E324-6B68-4263-8E73-B1BA2C4FACDC} folder moved successfully.

C:\Users\*** ***\AppData\Local\{CA81A93F-71BC-4F90-A0EE-7480887591EB} folder moved successfully.

C:\Users\*** ***\AppData\Local\{CBFCB1A2-EC2E-43BF-9909-2830953DBE12} folder moved successfully.

C:\Users\*** ***\AppData\Local\{D14AEB1F-6373-4288-A565-113EAA1EEB2C} folder moved successfully.

C:\Users\*** ***\AppData\Local\{D5F275ED-C139-439F-8665-FAE753534DD9} folder moved successfully.

C:\Users\*** ***\AppData\Local\{DA17E795-D48D-425B-BAC6-E21048DF9000} folder moved successfully.

C:\Users\*** ***\AppData\Local\{DC1481E5-7C3D-465A-8F7D-AC5341971632} folder moved successfully.

C:\Users\*** ***\AppData\Local\{DD56AD57-D8A5-4B17-99AC-66B8A43D0193} folder moved successfully.

C:\Users\*** ***\AppData\Local\{E16E49AA-0241-4C15-AA60-BA760B92071A} folder moved successfully.

C:\Users\*** ***\AppData\Local\{E947CC3D-597F-4DDF-9A4A-CBD096DC49FC} folder moved successfully.

C:\Users\*** ***\AppData\Local\{EAC34A36-1AF5-469E-9516-B13CA070F5ED} folder moved successfully.

C:\Users\*** ***\AppData\Local\{EB18B5BE-4F69-4B19-9186-AF8056C5FF13} folder moved successfully.

C:\Users\*** ***\AppData\Local\{EB826020-91A7-48D0-9005-919095F4234D} folder moved successfully.

C:\Users\*** ***\AppData\Local\{F07190B7-517F-45A4-A0E5-D408B07B3375} folder moved successfully.

C:\Users\*** ***\AppData\Local\{F335F79E-0271-4818-81C6-8E58B080D6AD} folder moved successfully.

C:\Users\*** ***\AppData\Local\{F4FCDBD9-283A-4A26-BAD7-A142056BEF4A} folder moved successfully.

C:\Users\*** ***\AppData\Local\{F73F469C-C8A4-4C7B-A9B4-401487947E62} folder moved successfully.

C:\Users\*** ***\AppData\Local\{F831EF2D-87C9-49DA-AF5A-CFD19A55E71B} folder moved successfully.

C:\Users\*** ***\AppData\Local\{F8E76D44-F6CA-481C-BA1C-F843EFC7834D} folder moved successfully.

C:\Users\*** ***\AppData\Local\{FC662F66-45F1-484E-80DC-CC640F14807F} folder moved successfully.

C:\Users\*** ***\AppData\Local\{FD8A13BF-CBEE-4C36-A016-B9BE98F2D9A7} folder moved successfully.

C:\Users\*** ***\AppData\Local\{FED4C9B1-912B-4834-8D23-134F275258EE} folder moved successfully.

C:\ProgramData\FullRemove.exe moved successfully.

C:\ProgramData\Temp\{C59C179C-668D-49A9-B6EA-0121CCFC1243} folder moved successfully.

C:\ProgramData\Temp\{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41} folder moved successfully.

C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658} folder moved successfully.

C:\ProgramData\Temp folder moved successfully.

File\Folder C:\Users\*** ***\AppData\Local\Temp\*.exe not found.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\tmp folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\splash folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0 folder moved successfully.

C:\Users\*** ***\AppData\LocalLow\Sun\Java\Deployment\cache folder moved successfully.
 < ipconfig /flushdns /c >

Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

C:\Users\*** ***\Desktop\cmd.bat deleted successfully.

C:\Users\*** ***\Desktop\cmd.txt deleted successfully.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: All Users

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 33170 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: Public

 

User: *** ***

->Temp folder emptied: 970526871 bytes

->Temporary Internet Files folder emptied: 6257820 bytes

->FireFox cache emptied: 90027083 bytes

->Flash cache emptied: 529 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 0 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 97938 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 5889568 bytes

RecycleBin emptied: 1613800804 bytes

 

Total Files Cleaned = 2,562.00 mb

 

 

OTL by OldTimer - Version 3.2.58.1 log created on 08242012_222603
 

Files\Folders moved on Reboot...

File\Folder C:\Users\*** ***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\IGRV4RBU\ame=0&screen_res=182&ac=0&tz=2&tagid=ambient&owner=&specialtype=&adsize=&params[1].styles=&tile=654642546329543459338531750548&transactionID=654642546329543459338531750548 not found!

C:\Users\*** ***\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

File\Folder C:\Users\*** ***\AppData\Local\Temp\~DF1401AB2200E7147A.TMP not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~DF586A3D27ABF1F9C5.TMP not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~DF7063E24F75D1BACD.TMP not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~DF8096B0B857F1FF7F.TMP not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~DF8CF7357B1D4C8C44.TMP not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~DF98A3F0A4D745554C.TMP not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~DFDAACE236A55A1245.TMP not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~DFF90737956C78C917.TMP not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~LC36AA.tmp not found!

File\Folder C:\Users\*** ***\AppData\Local\Temp\~LM390C.tmp not found!
 

PendingFileRenameOperations files...
 

Registry entries deleted on Reboot...

Sehr gut! :daumenhoc

1. Schritt

Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktualisiere die Datenbank!
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

danach:

2. Schritt

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Search.
Nach Ende des Suchlaufs öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

vielen dank, werde das alles nach einem pc freien wochenende am montag umsetzen und logs posten!

1. Schritt:

Code:

Malwarebytes Anti-Malware 1.62.0.1300

www.malwarebytes.org
 

Datenbank Version: v2012.08.26.05
 

Windows 7 x64 NTFS

Internet Explorer 8.0.7600.16385

*** :: *** [Administrator]
 

26.08.2012 21:59:20

mbam-log-2012-08-26 (21-59-20).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 395129

Laufzeit: 1 Stunde(n), 53 Minute(n), 22 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 1

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|LicenseValidator (Trojan.Proxy) -> Daten: C:\Users\*** ***\AppData\Roaming\Identities\{31D2478F-C344-43A5-8843-B4F8FE9FB2EB}\LicenseValidator.exe -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

PS: auch avira hat den fund gefunden^^

2. Schritt:

ich habe nur die log datei kopiert, aber nicht auf "delete" geklickt.

Code:

# AdwCleaner v1.801 - Logfile created 08/27/2012 at 00:07:38

# Updated 14/08/2012 by Xplode

# Operating system : Windows 7 Home Premium  (64 bits)

# User : *** *** 

# Boot Mode : Normal

# Running from : C:\Users *** *** \Desktop\adwcleaner.exe

# Option [Search]
 
 

***** [Services] *****
 
 

***** [Files / Folders] *****
 
 

***** [Registry] *****
 

Key Found : HKCU\Software\Softonic

[x64] Key Found : HKCU\Software\Softonic
 

***** [Registre - GUID] *****
 

Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
 

***** [Internet Browsers] *****
 

-\\ Internet Explorer v8.0.7600.16385
 

[OK] Registry is clean.
 

-\\ Mozilla Firefox v14.0.1 (de)
 

Profile name : default 

File : C:\Users\*** ***\AppData\Roaming\Mozilla\Firefox\Profiles\q47jcatb.default\prefs.js
 

[OK] File is clean.
 

*************************
 

AdwCleaner[R1].txt - [899 octets] - [27/08/2012 00:07:38]
 

########## EOF - C:\AdwCleaner[R1].txt - [1026 octets] ##########

Erwähnen will ich noch, dass mich firefox vor einem add on gewarnt hat...wusste aber nicht, ob ich es deaktivieren sollte oder nicht.

Malware mit Combofix beseitigen

Lade Combofix von einem der folgenden Download-Spiegel herunter:

BleepingComputer.com - ForoSpyware.com

und speichere das Programm auf den Desktop, nicht woanders hin, das ist wichtig!
Beachte die ausführliche Original-Anleitung.

Zurzeit ist Combofix auf folgenden Windows-Versionen lauffähig:

Windows XP (nur 32-bit)
Windows Vista (32-bit/64-bit)
Windows 7 (32-bit/64-bit)

Vorbereitung und wichtige Hinweise

Bitte während des Scans mit Combofix Antiviren- sowie Antispy-Programme, die Firewall und evtl. vorhandenes Skript-Blocking (Norton) deaktivieren.
Liste der zu deaktivierenden Programme.
Bei Unklarheiten bitte fragen.

ComboFix wird Deine Einstellungen in Bezug auf den Bildschirmschoner zurücksetzen.
Diese Einstellungen kannst Du nach Beendigung unserer Bereinigung wieder ändern.
Mache nichts anderes, wenn es Dir nicht gelungen ist, Combofix laufen zu lassen.
Teile uns das mit und warte auf unsere Anweisungen.

Starte die Combofix.exe mit Rechtsklick => Als Administrator ausführen und folge den Anweisungen.
Während des Laufs von Combofix nichts anderes am Computer machen!
Akzeptiere die Bedingungen (Disclaimer) mit "Ja".

Sollte Combofix eine aktuellere Version anbieten, Downlaod erlauben.
Klicke "Ja", um mit dem Suchlauf nach Malware fortzufahren.
Es erscheint eine blaue Eingabeaufforderung, Combofix wird für den Suchlauf vorbereitet.
Bitte nicht in dieses Combofix-Fenster klicken.
Das könnte Dein System einfrieren oder hängen bleiben lassen.
Es wird ein Backup Deiner Registry erstellt.
Nun werden die einzelnen Stufen des Programms abgearbeitet, das kann eine Weile dauern.

Wenn ComboFix fertig ist, wird es ein Log erstellen (bitte warten, das dauert einen Moment).
Unbedingt warten, bis sich das Combofix-Fenster geschlossen hat und das Logfile im Editor erscheint.
Bitte poste die Log-Dateien C:\ComboFix.txt und C:\Qoobox\Add-Remove Programs.txt in Code-Tags hier in den Thread.

Hinweis: Combofix macht aus verschiedenen Gründen den Internet Explorer zum Standard-Browser und erstellt ein IE-Icon auf dem Desktop.
Das IE-Desktop-Icon kannst Du nach der Bereinigung wieder löschen und Deinen bevorzugten Browser wieder als Standard-Browser einstellen.

Combofix nicht auf eigene Faust einsetzen. Wenn keine entsprechende Infektion vorliegt, kann das den Rechner lahmlegen und/oder nachhaltig schädigen!

Jetzt kann ich auch mein Wartungscenter wieder öffnen. Ich habe auch die Windows Firewall und Avira wieder aktiviert, nachdem ComboFix fertig war.

Code:

ComboFix 12-08-25.04 - *** *** 27.08.2012  19:12:59.1.2 - x64

Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.3327.1908 [GMT 2:00]

ausgeführt von:: c:\users\*** ***\Desktop\ComboFix.exe

AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\autorun.inf

c:\program files (x86)\driver

c:\program files (x86)\driver\Jeilin\Setup.exe

c:\program files (x86)\driver\Mars\SETUP.EXE

c:\program files (x86)\Setup.exe

c:\users\*** ***\AppData\Roaming\Help\coredb\storage

c:\windows\msvcr71.dll

c:\windows\SysWow64\FlashPlayerInstaller.exe

D:\install.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-07-27 bis 2012-08-27  ))))))))))))))))))))))))))))))

.

.

2012-08-27 17:29 . 2012-08-27 17:29        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-08-24 20:26 . 2012-08-24 20:26        --------        d-----w-        C:\_OTL

2012-08-21 16:26 . 2012-08-21 16:26        --------        d-----w-        c:\users\*** ***\AppData\Roaming\Malwarebytes

2012-08-21 16:26 . 2012-08-21 16:26        --------        d-----w-        c:\programdata\Malwarebytes

2012-08-21 16:26 . 2012-08-21 16:29        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-08-21 16:26 . 2012-07-03 11:46        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-08-20 15:04 . 2012-08-20 15:04        --------        d-sh--w-        c:\windows\system32\%APPDATA%

2012-08-20 14:57 . 2012-08-20 14:57        --------        d-----w-        c:\users\*** ***\AppData\Roaming\Microsoft Corporation

2012-08-16 20:25 . 2012-08-16 20:25        --------        d-----w-        c:\users\*** ***\AppData\Roaming\Dropbox

2012-08-14 16:04 . 2012-08-14 16:04        --------        d-----w-        c:\users\*** ***\AppData\Roaming\Windows Search

2012-08-13 16:38 . 2012-08-13 16:38        --------        d-----w-        c:\users\*** ***\AppData\Roaming\TeamViewer

2012-07-30 18:24 . 2012-07-30 18:24        770384        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcr100.dll

2012-07-30 18:24 . 2012-07-30 18:24        421200        ----a-w-        c:\program files (x86)\Mozilla Firefox\msvcp100.dll

2012-07-29 08:49 . 2012-08-01 20:01        --------        d-----w-        c:\users\*** ***\AppData\Roaming\Skype

2012-07-29 08:48 . 2012-07-29 08:49        --------        d-----r-        c:\program files (x86)\Skype

2012-07-29 08:48 . 2012-07-29 08:48        --------        d-----w-        c:\program files (x86)\Common Files\Skype

2012-07-29 08:48 . 2012-07-29 08:49        --------        d-----w-        c:\programdata\Skype

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-08-27 15:45 . 2009-12-26 17:06        45056        ----a-w-        c:\windows\system32\acovcnt.exe

2012-08-21 15:34 . 2009-07-13 23:19        328704        ----a-w-        c:\windows\system32\services.exe

2012-08-15 20:07 . 2009-12-24 21:08        62134624        ----a-w-        c:\windows\system32\MRT.exe

2012-07-31 20:39 . 2012-04-04 17:26        426184        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-07-31 20:39 . 2011-05-19 20:20        70344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-06-21 20:45 . 2011-03-28 16:36        19736        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2012-06-09 05:30 . 2012-07-11 04:38        14165504        ----a-w-        c:\windows\system32\shell32.dll

2012-06-06 06:49 . 2012-06-06 06:49        1070152        ----a-w-        c:\windows\SysWow64\MSCOMCTL.OCX

2012-06-06 05:50 . 2012-07-11 04:38        2003968        ----a-w-        c:\windows\system32\msxml6.dll

2012-06-06 05:50 . 2012-07-11 04:38        1880064        ----a-w-        c:\windows\system32\msxml3.dll

2012-06-06 05:09 . 2012-07-11 04:38        1389568        ----a-w-        c:\windows\SysWow64\msxml6.dll

2012-06-06 05:09 . 2012-07-11 04:38        1236992        ----a-w-        c:\windows\SysWow64\msxml3.dll

2012-06-02 22:19 . 2012-06-21 12:34        38424        ----a-w-        c:\windows\system32\wups.dll

2012-06-02 22:19 . 2012-06-21 12:34        2428952        ----a-w-        c:\windows\system32\wuaueng.dll

2012-06-02 22:19 . 2012-06-21 12:34        57880        ----a-w-        c:\windows\system32\wuauclt.exe

2012-06-02 22:19 . 2012-06-21 12:34        44056        ----a-w-        c:\windows\system32\wups2.dll

2012-06-02 22:19 . 2012-06-21 12:34        701976        ----a-w-        c:\windows\system32\wuapi.dll

2012-06-02 22:15 . 2012-06-21 12:34        2622464        ----a-w-        c:\windows\system32\wucltux.dll

2012-06-02 22:15 . 2012-06-21 12:34        99840        ----a-w-        c:\windows\system32\wudriver.dll

2012-06-02 13:19 . 2012-06-21 12:33        186752        ----a-w-        c:\windows\system32\wuwebv.dll

2012-06-02 13:15 . 2012-06-21 12:33        36864        ----a-w-        c:\windows\system32\wuapp.exe

2012-06-02 05:38 . 2012-07-11 04:38        95088        ----a-w-        c:\windows\system32\drivers\ksecdd.sys

2012-06-02 05:38 . 2012-07-11 04:38        152432        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2012-06-02 05:37 . 2012-07-11 04:38        459216        ----a-w-        c:\windows\system32\drivers\cng.sys

2012-06-02 05:27 . 2012-07-11 04:38        340992        ----a-w-        c:\windows\system32\schannel.dll

2012-06-02 05:27 . 2012-07-11 04:38        307200        ----a-w-        c:\windows\system32\ncrypt.dll

2012-06-02 04:48 . 2012-07-11 04:38        22016        ----a-w-        c:\windows\SysWow64\secur32.dll

2012-06-02 04:48 . 2012-07-11 04:38        225280        ----a-w-        c:\windows\SysWow64\schannel.dll

2012-06-02 04:47 . 2012-07-11 04:38        219136        ----a-w-        c:\windows\SysWow64\ncrypt.dll

2012-06-02 04:42 . 2012-07-11 04:38        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"OfficeSyncProcess"="c:\program files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" [2012-01-20 719672]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]

"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-12-04 218408]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-30 98304]

"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2009-07-13 2244096]

"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]

"ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-08-17 6859392]

"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-20 170624]

"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]

"tsnpstd3"="c:\windows\tsnpstd3.exe" [2005-11-04 90112]

"UIExec"="c:\program files (x86)\Join Air\UIExec.exe" [2009-08-31 132608]

"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]

"MobileConnect"="c:\program files (x86)\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2009-04-20 2327552]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-08-08 348664]

"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2011-12-16 220744]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]

.

c:\users\*** ***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Microsoft SharePoint Workspace.lnk - c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-6-12 31125880]

OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

FancyStart daemon.lnk - c:\windows\Installer\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}\_A1DDD39913A1970387B7B3.exe [2009-11-29 12862]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 KMService;KMService;c:\windows\system32\srvany.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]

R2 UI Assistant Service;UI Assistant Service;c:\program files (x86)\Join Air\AssistantServices.exe [2009-08-31 241664]

R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [2009-05-26 40448]

R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-04-01 183560]

R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2009-04-09 11776]

R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-08-03 113120]

R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]

R3 ZTEusbnet;ZTE USB-NDIS miniport;c:\windows\system32\DRIVERS\ZTEusbnet.sys [2009-04-09 167424]

R3 ZTEusbvoice;ZTE VoUSB Port;c:\windows\system32\DRIVERS\ZTEusbvoice.sys [2009-04-09 150784]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2011-10-11 27760]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]

S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [2009-09-17 359552]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-29 203264]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-08 86224]

S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]

S2 OberonGameConsoleService;Oberon Media Game Console service;c:\program files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe [2009-09-15 44312]

S2 VMCService;Vodafone Mobile Connect Service;c:\program files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-04-20 9216]

S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2009-07-09 140800]

S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]

S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2009-07-09 1222144]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

Inhalt des "geplante Tasks" Ordners

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-07-30 617856]

"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-04-09 320000]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://google.de/

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: &Citavi Picker... - file://c:\programdata\Swiss Academic Software\Citavi Picker\Internet Explorer\ShowContextMenu.html

IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files (x86)\ICQ7.1\ICQ.exe

TCP: DhcpNameServer = 192.168.178.1

FF - ProfilePath - c:\users\*** ***\AppData\Roaming\Mozilla\Firefox\Profiles\q47jcatb.default\

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKLM-Run-Setwallpaper - c:\programdata\SetWallpaper.cmd

HKLM-Run-EeeStorageBackup - c:\program files (x86)\ASUS\Asus WebStorage\BackupService.exe

AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe

AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]

@Denied: (2) (LocalSystem)

"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,12,65,f8,b2,a3,3e,14,43,87,fd,08,\

"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

   d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,12,65,f8,b2,a3,3e,14,43,87,fd,08,\

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe

c:\program files\ATKGFNEX\GFNEXSrv.exe

c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe

c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe

c:\program files (x86)\ASUS\ATK Hotkey\HControl.exe

c:\program files (x86)\ASUS\ATK Hotkey\Atouch64.exe

c:\program files (x86)\ASUS\ATK Hotkey\ATKOSD.exe

c:\program files (x86)\ASUS\ATK Hotkey\KBFiltr.exe

c:\program files (x86)\ASUS\ATK Hotkey\WDC.exe

c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\CDBurnerXP\NMSAccessU.exe

c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE

c:\windows\AsScrPro.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2012-08-27  20:01:24 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2012-08-27 18:01

.

Vor Suchlauf: 8 Verzeichnis(se), 20.189.188.096 Bytes frei

Nach Suchlauf: 16 Verzeichnis(se), 19.828.695.040 Bytes frei

.

- - End Of File - - 713338AB7ED163D045827398D8720586

Code:

Acrobat.com

Activation Assistant for the 2007 Microsoft Office suites

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Reader X (10.1.4) - Deutsch

Adobe Shockwave Player 11.6

Alcor Micro USB Card Reader

Alice Greenfingers

AMD USB Filter Driver

ASUS AI Recovery

ASUS FancyStart

ASUS LifeFrame3

ASUS Live Update

ASUS MultiFrame

ASUS SmartLogon

ASUS Splendid Video Enhancement Technology

ASUS Virtual Camera

ASUS_Screensaver

Atheros Client Installation Program

Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver

ATK Generic Function Service

ATK Hotkey

ATK Media

ATKOSD2

Avira Free Antivirus

Bing Bar

Catalyst Control Center Core Implementation

Catalyst Control Center Graphics Full Existing

Catalyst Control Center Graphics Full New

Catalyst Control Center Graphics Light

Catalyst Control Center Graphics Previews Vista

Catalyst Control Center InstallProxy

Catalyst Control Center Localization All

ccc-core-static

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

CDBurnerXP

Chicken Invaders 2

Citavi

ControlDeck

CyberLink LabelPrint

CyberLink Power2Go

D3DX10

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

Dream Day Wedding Married in Manhattan

FastStone Image Viewer 4.2

FreeRIP v3.6

Game Park Console

ICQ7.1

Island Wars 2

Java Auto Updater

Java(TM) 6 Update 18

Java(TM) 6 Update 31

Join Air

Junk Mail filter update

Malwarebytes Anti-Malware Version 1.62.0.1300

Microsoft Digital Image Library 9 - Blocker

Microsoft Digital Image Starter Edition 2006

Microsoft Digital Image Starter Edition 2006 Editor

Microsoft Digital Image Starter Edition 2006 Library

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (German) 2010

Microsoft Office Excel MUI (German) 2010

Microsoft Office Groove MUI (German) 2010

Microsoft Office InfoPath MUI (German) 2010

Microsoft Office OneNote MUI (German) 2010

Microsoft Office Outlook MUI (German) 2010

Microsoft Office PowerPoint MUI (German) 2010

Microsoft Office Professional Plus 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (German) 2010

Microsoft Office Proof (Italian) 2010

Microsoft Office Proofing (German) 2010

Microsoft Office Publisher MUI (German) 2010

Microsoft Office Shared MUI (German) 2010

Microsoft Office Word MUI (German) 2010

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Mozilla Firefox 14.0.1 (x86 de)

Mozilla Maintenance Service

MSVCRT

MSVCRT_amd64

OpenOffice.org 3.2

PC Camera-168

PDF24 Creator 4.1.2

Piggly

Platform

QuarkXPress 6.1

RI-CAD Version 2.0.3

SDV i5

Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft Excel 2010 (KB2597166) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2553322) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2553431) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553091)

Security Update for Microsoft Office 2010 (KB2553096)

Security Update for Microsoft Office 2010 (KB2553260) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2589322) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition

Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition

Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)

Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition

Skype™ 5.10

Smileyville

Spybot - Search & Destroy

swMSM

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft Office 2010 (KB2494150)

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553092)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553272) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

Update for Microsoft Office 2010 (KB2598289) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

VIA Platform Device Manager

VLC media player 1.0.3

Vodafone Mobile Connect Lite

Windows Live Communications Platform

Windows Live Essentials

Windows Live Fotogalerie

Windows Live Installer

Windows Live Mail

Windows Live Messenger

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live Sync

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinFlash

WinRAR

Wireless Console 3

Sehr gut! :daumenhoc

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Delete.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.

danach:

Malware-Scan mit Emsisoft Anti-Malware

Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm.
Lade über Jetzt Updaten die aktuellen Signaturen herunter.
Wähle den Freeware-Modus aus.

Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers.
Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten.

Anleitung: http://www.trojaner-board.de/103809-...i-malware.html

1. Schritt:

Code:

# AdwCleaner v1.801 - Logfile created 08/29/2012 at 06:28:05

# Updated 14/08/2012 by Xplode

# Operating system : Windows 7 Home Premium  (64 bits)

# User : *** *** - ******-PC

# Boot Mode : Normal

# Running from : C:\Users\*** ***\Desktop\adwcleaner.exe

# Option [Delete]
 
 

***** [Services] *****
 
 

***** [Files / Folders] *****
 
 

***** [Registry] *****
 

Key Deleted : HKCU\Software\Softonic
 

***** [Registre - GUID] *****
 

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
 

***** [Internet Browsers] *****
 

-\\ Internet Explorer v8.0.7600.16385
 

[OK] Registry is clean.
 

-\\ Mozilla Firefox v14.0.1 (de)
 

Profile name : default 

File : C:\Users\*** ***\AppData\Roaming\Mozilla\Firefox\Profiles\q47jcatb.default\prefs.js
 

[OK] File is clean.
 

*************************
 

AdwCleaner[R1].txt - [1025 octets] - [27/08/2012 00:07:38]

AdwCleaner[S1].txt - [919 octets] - [29/08/2012 06:28:05]
 

########## EOF - C:\AdwCleaner[S1].txt - [1046 octets] ##########

2. Schritt:

Ich habe bemerkt, dass mein Windows 7 das Service Pack 1 nicht drauf hat und deshalb Emisoft nicht funktioniert.
Als ich es heute aktualisieren wollte, kam der Fehlercode: 80246008

...habe mal im Netz rumgeschaut, aber so richtig passt da nichts auf mein Problem.

Hmh, ich habe jetzt noch drei Tage bis ich meine Arbeit abgebe, es ist wahrscheinlich am leichtesten, wenn ich mir dann einfach das neue Windows 7 draufziehe, oder?

Oder gibt es eine gute Alternative zu Emisoft? Klar, eigentlich müsste ich eher versuchen das Service Pack 1 drauf zu bekommen und dann Emisoft anzuwenden, aber das scheint nicht so leicht machbar zu sein.

Bei mir fehlt der "Intelligenter Hintergrundübertragungsdienst" in den Diensten. Deshalb schlägt das Update wohl fehl.

Windows Repair Tool (AIO)

Downloade Windows repair tool
Entpacke das Zip und starte Repair_Windows.exe
Klicke auf Start repairs Tab dann: Start

folgende Punkte auswählen

Register System Files
Repair WMI
Repair Windows Firewall
Repair Winsock & DNS Cache
Remove Temp Files
Repair Proxy Settings
Unhide Non System Files
Repair Windows Updates
Set Windows Services To Default Startup
Repair MSI (Installer)

Auswählen: Restart System When Finished
Dann Start Button klicken.

Danke für den Tipp. Daraufhin wurde nach Updates gesucht. Es wurde wieder das Service Pack 1 gefunden. An dem Fehlercode hat das Programm leider nichts geändert. Der Dienst ist immer noch verschwunden und das Update schlägt immer noch fehl.

Ersteres hatte ich selber gelesen und bin deshalb auf das Fehlen des "Intelligenter Hintergrundübertragungsdienst" gestoßen. Dieser Dienst fehlt bei mir immernoch.

Das Windows-Ereignisprotokolldienst (Dienst) ist bei mir gestartet und passt auch mir den Einstellungen wie auf der windows hilfe seite beschrieben ist. Komisch ist bei dem dienst aber auch, dass ich ihn nicht neu starten kann oder beenden, da "Fehler 5: Zugriff verweigert"...auch ein Neustart des PCs brachte nichts.

Trotzdem habe ich mir auch mal deinen zweiten Tpp angesehen und rage mich, ob ich dann das Paket ohne Service Pack nehmen sollte, um erstmal alle anderen Updates drauf zu bekommen? Denn der Download für Windows mit Service Pack würde bei mir ja nichts bringen, da das ja fehlt.
...soll ich es also probieren, obwohl die oben beschriebenen Dineste (anscheind) nicht richtig arbeiten?

Wenn die Updates nicht gehen, wirst du Windows neuaufsetzen muessen.