| hornmartin | 05.11.2012 15:51 |
1. Malwarebytes schon gestern gecheckt keine Funde!
2. OTL-Logfile Code:
OTL logfile created on: 05.11.2012 15:35:24 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\***\Desktop
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,25 Gb Total Physical Memory | 2,11 Gb Available Physical Memory | 64,85% Memory free
6,50 Gb Paging File | 5,31 Gb Available in Paging File | 81,70% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 80,01 Gb Total Space | 56,74 Gb Free Space | 70,91% Space Free | Partition Type: NTFS
Drive D: | 100,01 Gb Total Space | 87,70 Gb Free Space | 87,69% Space Free | Partition Type: NTFS
Drive E: | 20,01 Gb Total Space | 15,04 Gb Free Space | 75,15% Space Free | Partition Type: NTFS
Drive F: | 265,64 Gb Total Space | 256,92 Gb Free Space | 96,72% Space Free | Partition Type: NTFS
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe (Adobe Systems Incorporated)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - D:\Hilfsprogramme\Secure Banking\sbservice.exe ()
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
PRC - C:\Programme\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Sidebar\sidebar.exe (Microsoft Corporation)
========== Modules (No Company Name) ==========
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - D:\Hilfsprogramme\Secure Banking\sbservice.exe ()
MOD - D:\Hilfsprogramme\Secure Banking\SecureBanking.dll ()
MOD - D:\Hilfsprogramme\Secure Banking\funcs.dll ()
MOD - D:\Bearbeitungsprogramme\Notepad++\NppShell_04.dll ()
MOD - \\.\globalroot\systemroot\system32\mswsock.dll ()
MOD - D:\Hilfsprogramme\Unlocker\UnlockerCOM.dll ()
========== Services (SafeList) ==========
SRV - (gupdatem) -- C:\Program Files\Google\Update\GoogleUpdate.exe /medsvc File not found
SRV - (gupdate) -- C:\Program Files\Google\Update\GoogleUpdate.exe /svc File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (TeamViewer7) -- C:\Programme\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (SkypeUpdate) -- D:\Hilfsprogramme\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (wlidsvc) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (odserv) -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (AMD FUEL Service) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (StorSvc) -- C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (NTIOLib_1_0_4) -- C:\Program Files\MSI\Live Update 5\NTIOLib.sys File not found
DRV - (MSI_MSIBIOS_010507) -- C:\Program Files\MSI\Live Update 5\msibios32_100507.sys File not found
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (ManyCam) -- C:\Windows\System32\drivers\mcvidrv.sys (ManyCam LLC)
DRV - (mcaudrv_simple) -- C:\Windows\System32\drivers\mcaudrv.sys (ManyCam LLC)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (ssudmdm) -- C:\Windows\System32\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV - (dg_ssudbus) -- C:\Windows\System32\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV - (tbhsd) -- C:\Windows\System32\drivers\tbhsd.sys (RapidSolution Software AG)
DRV - (DroidCam) -- C:\Windows\System32\drivers\droidcam.sys (Dev47Apps)
DRV - (ssadmdm) -- C:\Windows\System32\drivers\ssadmdm.sys (MCCI Corporation)
DRV - (ssadbus) -- C:\Windows\System32\drivers\ssadbus.sys (MCCI Corporation)
DRV - (ssadmdfl) -- C:\Windows\System32\drivers\ssadmdfl.sys (MCCI Corporation)
DRV - (AtiHDAudioService) -- C:\Windows\System32\drivers\AtihdW73.sys (Advanced Micro Devices)
DRV - (amdkmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (amdkmdap) -- C:\Windows\System32\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV - (LVUVC) -- C:\Windows\System32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) -- C:\Windows\System32\drivers\lvrs.sys (Logitech Inc.)
DRV - (CompFilter) -- C:\Windows\System32\drivers\lvbusflt.sys (Logitech Inc.)
DRV - (nusb3xhc) -- C:\Windows\System32\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV - (nusb3hub) -- C:\Windows\System32\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV - (NTIOLib_1_0_6) -- C:\Programme\Setup Files\Ms7599vHI0\NTIOLib.sys (MSI)
DRV - (usbfilter) -- C:\Windows\System32\drivers\usbfilter.sys (Advanced Micro Devices)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (lvselsus) -- C:\Windows\System32\drivers\lvselsus.sys (Logitech Inc.)
DRV - (UnlockerDriver5) -- D:\Hilfsprogramme\Unlocker\UnlockerDriver5.sys ()
DRV - (AtiPcie) -- C:\Windows\System32\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV - (amdiox86) -- C:\Windows\System32\drivers\amdiox86.sys (Advanced Micro Devices)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\URLSearchHook: {7e111a5c-3d11-4f56-9463-5310c3c69025} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = Zbani
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\zbani: "URL" = hxxp://home.zbani.com/en/get/{searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D8 E7 02 B1 11 EC CC 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledAddons: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.15
FF - prefs.js..extensions.enabledAddons: secureLogin@blueimp.net:0.9.9
FF - prefs.js..extensions.enabledAddons: {1ced4832-f06e-413f-aa14-9eb63ad40ace}:1.0.2
FF - prefs.js..extensions.enabledAddons: status4evar@caligonstudios.com:2012.07.08.17
FF - prefs.js..extensions.enabledAddons: ich@maltegoetz.de:1.4.3
FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.11
FF - prefs.js..network.proxy.type: 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: File not found
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: D:\Hilfsprogramme\AmazonMP3Downloader\npAmazonMP3DownloaderPlugin1017325.dll (Amazon.com, Inc.)
FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\***\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.31 20:03:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.10.31 20:03:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012.10.31 20:03:59 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.10.31 20:03:59 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.10.31 20:03:59 | 000,000,000 | ---D | M]
[2012.10.26 18:51:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2012.11.05 04:46:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\cn4lu5bm.default-1352086885194\extensions
[2012.11.05 04:43:30 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\cn4lu5bm.default-1352086885194\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.11.05 04:43:30 | 000,000,000 | ---D | M] (Cookies Manager+) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\cn4lu5bm.default-1352086885194\extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d}
[2012.11.05 04:43:30 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\cn4lu5bm.default-1352086885194\extensions\ich@maltegoetz.de
[2012.07.06 13:53:17 | 000,123,385 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\extensions\elemhidehelper@adblockplus.org.xpi
[2012.09.19 01:25:05 | 000,083,513 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\extensions\secureLogin@blueimp.net.xpi
[2012.10.22 12:50:31 | 000,163,080 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\extensions\status4evar@caligonstudios.com.xpi
[2012.11.01 20:23:32 | 000,051,442 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\extensions\survey-remover@gmx.com.xpi
[2012.09.23 08:24:11 | 000,018,589 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\extensions\{1ced4832-f06e-413f-aa14-9eb63ad40ace}.xpi
[2012.07.24 21:38:56 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.09.13 01:39:27 | 000,698,867 | ---- | M] () (No name found) -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
[2012.11.01 17:22:36 | 000,002,549 | ---- | M] () -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\searchplugins\deviantart.xml
[2012.10.11 18:38:35 | 000,003,080 | ---- | M] () -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\searchplugins\ebay-de.xml
[2012.11.02 03:33:38 | 000,009,737 | ---- | M] () -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\searchplugins\iconfinder.xml
[2012.07.24 21:36:51 | 000,002,600 | ---- | M] () -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\searchplugins\kickasstorrents.xml
[2012.10.29 15:59:06 | 000,001,942 | ---- | M] () -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\searchplugins\mycroft-project.xml
[2012.10.29 15:59:07 | 000,001,042 | ---- | M] () -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\searchplugins\preissuchmaschine-de.xml
[2012.06.17 20:36:35 | 000,002,057 | ---- | M] () -- C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\cn4lu5bm.default-1352086885194\searchplugins\youtube-videosuche.xml
[2012.10.28 00:10:05 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.10.28 00:10:06 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.10.11 03:10:32 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.10.11 03:10:32 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.10.11 03:10:32 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.10.11 03:10:32 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.10.11 03:10:32 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.10.11 03:10:32 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2012.11.02 21:36:29 | 000,000,624 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 198.104.155.226
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7E111A5C-3D11-4F56-9463-5310C3C69025} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKCU..\Run: [Facebook Update] C:\Users\***\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk = C:\Users\***\AppData\Local\Facebook\Messenger\2.1.4651.0\FacebookMessenger.exe (Facebook)
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SecureBanking.lnk = D:\Hilfsprogramme\Secure Banking\SecureBanking.exe (Secure Banking)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStrCmpLogical = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoHotStart = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoManageMyComputerVerb = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL File not found
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A7E756CC-7F26-4879-BBCF-7FDBB8E8600B}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2012.11.05 15:14:01 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.11.03 21:57:19 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll
[2012.11.03 21:49:54 | 000,000,000 | ---D | C] -- C:\Program Files\Setup Files
[2012.11.03 21:08:24 | 000,000,000 | -HSD | C] -- C:\Windows\System32\%APPDATA%
[2012.11.03 20:51:57 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.11.03 20:51:57 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.11.02 22:56:49 | 000,000,000 | ---D | C] -- C:\Program Files\Axialis
[2012.11.02 21:54:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Axialis
[2012.11.02 21:54:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Axialis
[2012.11.02 21:14:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\CrashRpt
[2012.11.02 20:12:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Axialis Software
[2012.10.31 23:12:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2012.10.30 23:49:57 | 000,049,664 | ---- | C] (CamStudio Group) -- C:\Windows\System32\CamCodec.dll
[2012.10.30 23:49:57 | 000,000,000 | ---D | C] -- C:\Program Files\CamStudio 2.6b
[2012.10.28 00:10:04 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012.10.26 18:51:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Mozilla
[2012.10.26 18:48:27 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012.10.24 16:58:00 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpvideominiport.sys
[2012.10.24 16:58:00 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2012.10.24 16:58:00 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RdpGroupPolicyExtension.dll
[2012.10.24 16:58:00 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
[2012.10.24 16:57:59 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
[2012.10.24 16:57:58 | 002,739,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2012.10.24 16:57:58 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
[2012.10.24 16:57:58 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2012.10.24 16:57:58 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
[2012.10.24 16:57:58 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpendp_winip.dll
[2012.10.24 16:57:58 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWbPrxy.exe
[2012.10.24 16:57:58 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsRdpWebAccess.dll
[2012.10.24 16:57:58 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2012.10.24 16:57:58 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
[2012.10.24 16:57:58 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprtPS.dll
[2012.10.24 16:57:38 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2012.10.24 16:45:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.10.24 16:45:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2012.10.21 03:03:42 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\inkscape
[2012.10.20 23:00:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
[2012.10.18 23:45:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\PersBackup5
[2012.10.15 22:10:05 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Amazon
[2012.10.15 22:09:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
[2012.10.14 22:07:24 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\Camstudio
[2012.10.13 22:40:27 | 000,164,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMCT232.ocx
[2012.10.10 13:47:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012.10.10 13:47:15 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2012.10.10 13:47:15 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2012.10.10 13:47:15 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2012.10.10 13:47:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.10.10 13:47:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2012.10.10 13:47:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2012.10.10 13:47:15 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2012.10.10 13:47:14 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2012.10.10 13:47:14 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2012.10.10 13:47:14 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2012.10.10 13:47:14 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2012.10.10 13:47:14 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2012.10.10 13:47:04 | 003,968,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012.10.10 13:47:04 | 003,914,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012.10.08 03:23:42 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\GrabPro
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.11.05 15:25:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.11.05 15:05:00 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1434111493-151782220-1701754169-1000UA.job
[2012.11.05 15:03:12 | 000,015,184 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.05 15:03:12 | 000,015,184 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.05 15:00:19 | 000,696,620 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.11.05 15:00:19 | 000,651,938 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.11.05 15:00:19 | 000,147,916 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.11.05 15:00:19 | 000,120,870 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.11.05 14:56:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.05 05:08:04 | 000,001,176 | ---- | M] () -- C:\Users\***\Desktop\SystemExplorer.lnk
[2012.11.05 03:44:36 | 000,001,000 | ---- | M] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SecureBanking.lnk
[2012.11.04 23:14:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.11.03 20:58:17 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.11.03 20:58:17 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.11.03 20:53:39 | 000,001,074 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.11.03 00:58:24 | 000,000,020 | ---- | M] () -- C:\ProgramData\droidcam-settings
[2012.11.02 23:57:04 | 000,000,709 | ---- | M] () -- C:\Users\***\Desktop\DroidCamApp.exe - Kopie.lnk
[2012.11.02 23:04:51 | 000,001,207 | ---- | M] () -- C:\Users\***\Desktop\IconWorkshop.lnk
[2012.11.02 21:36:29 | 000,000,624 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012.11.02 21:31:01 | 000,339,112 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.11.02 20:34:10 | 000,000,624 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts_Backup_20121102_093629
[2012.11.02 15:13:30 | 000,005,754 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2012.11.02 14:42:21 | 000,000,597 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts_Backup_20121102_083410
[2012.11.02 11:42:58 | 000,000,218 | ---- | M] () -- C:\Users\***\.recently-used.xbel
[2012.11.02 03:40:03 | 000,002,507 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2012.11.02 03:35:42 | 000,001,160 | ---- | M] () -- C:\Users\***\Desktop\FoldericoDrop.lnk
[2012.11.02 01:50:24 | 000,001,280 | ---- | M] () -- C:\Users\***\Desktop\VisualBoyAdvance.lnk
[2012.11.01 21:35:42 | 000,000,678 | ---- | M] () -- C:\Users\***\Desktop\CyanogenMod.lnk
[2012.11.01 02:13:12 | 004,982,966 | ---- | M] () -- C:\Users\***\Desktop\lv.mp3
[2012.10.31 23:12:15 | 000,002,177 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012.10.30 23:30:13 | 000,133,824 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avipbb.sys
[2012.10.24 17:59:12 | 000,001,445 | ---- | M] () -- C:\Users\***\Desktop\ManyCam.lnk
[2012.10.24 17:44:37 | 000,001,054 | ---- | M] () -- C:\Users\Public\Desktop\ManyCam.lnk
[2012.10.21 03:15:53 | 001,349,478 | ---- | M] () -- C:\Users\***\Desktop\2vufs0m.png
[2012.10.20 23:00:53 | 000,001,286 | ---- | M] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
[2012.10.18 23:29:26 | 000,001,135 | ---- | M] () -- C:\Users\***\Desktop\Audiograbber.lnk
[2012.10.13 22:59:14 | 000,000,656 | ---- | M] () -- C:\Users\***\Desktop\ClipGrab.lnk
[2012.10.13 20:19:53 | 000,000,661 | ---- | M] () -- C:\Users\***\Desktop\Exif Tag Remover.lnk
[2012.10.11 04:08:38 | 000,034,432 | ---- | M] (ManyCam LLC) -- C:\Windows\System32\drivers\mcvidrv.sys
[2012.10.11 04:08:36 | 000,025,088 | ---- | M] (ManyCam LLC) -- C:\Windows\System32\drivers\mcaudrv.sys
[2012.10.09 20:28:12 | 000,001,137 | ---- | M] () -- C:\Users\***\Desktop\AlfBanCo5.lnk
[2012.10.08 03:02:42 | 000,001,038 | ---- | M] () -- C:\Users\***\Desktop\Photoshop CS5.lnk
[2012.10.07 21:16:56 | 000,000,040 | -H-- | M] () -- C:\D96B82F91BFB
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.11.05 05:08:04 | 000,001,176 | ---- | C] () -- C:\Users\***\Desktop\SystemExplorer.lnk
[2012.11.05 03:44:36 | 000,001,000 | ---- | C] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SecureBanking.lnk
[2012.11.03 20:51:58 | 000,001,074 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.11.03 00:58:24 | 000,000,020 | ---- | C] () -- C:\ProgramData\droidcam-settings
[2012.11.02 23:56:43 | 000,000,709 | ---- | C] () -- C:\Users\***\Desktop\DroidCamApp.exe - Kopie.lnk
[2012.11.02 21:30:53 | 000,339,112 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.11.02 15:12:23 | 000,005,754 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012.11.02 11:42:58 | 000,000,218 | ---- | C] () -- C:\Users\***\.recently-used.xbel
[2012.11.02 03:44:26 | 004,982,966 | ---- | C] () -- C:\Users\***\Desktop\lv.mp3
[2012.11.02 03:35:42 | 000,001,160 | ---- | C] () -- C:\Users\***\Desktop\FoldericoDrop.lnk
[2012.10.31 23:12:15 | 000,002,177 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012.10.24 17:59:12 | 000,001,445 | ---- | C] () -- C:\Users\***\Desktop\ManyCam.lnk
[2012.10.24 17:44:37 | 000,001,054 | ---- | C] () -- C:\Users\Public\Desktop\ManyCam.lnk
[2012.10.24 16:45:59 | 000,002,507 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2012.10.21 03:22:30 | 001,349,478 | ---- | C] () -- C:\Users\***\Desktop\2vufs0m.png
[2012.10.20 23:00:53 | 000,001,286 | ---- | C] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
[2012.10.18 23:29:26 | 000,001,135 | ---- | C] () -- C:\Users\***\Desktop\Audiograbber.lnk
[2012.10.13 22:59:14 | 000,000,656 | ---- | C] () -- C:\Users\***\Desktop\ClipGrab.lnk
[2012.10.13 20:19:53 | 000,000,661 | ---- | C] () -- C:\Users\***\Desktop\Exif Tag Remover.lnk
[2012.10.09 20:28:12 | 000,001,137 | ---- | C] () -- C:\Users\***\Desktop\AlfBanCo5.lnk
[2012.10.07 21:16:56 | 000,000,040 | -H-- | C] () -- C:\D96B82F91BFB
[2012.09.29 21:02:42 | 000,000,277 | -H-- | C] () -- C:\Users\***\AppData\Roaming\xpy.ini
[2012.08.11 20:11:23 | 000,293,889 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2012.08.04 02:15:39 | 000,000,055 | ---- | C] () -- C:\Windows\clickEXE.ini
[2012.06.05 19:51:55 | 000,150,940 | ---- | C] () -- C:\Windows\hpoins51.dat
[2012.06.05 19:51:55 | 000,000,572 | ---- | C] () -- C:\Windows\hpomdl51.dat
[2012.06.05 01:13:31 | 000,150,465 | ---- | C] () -- C:\Windows\hpoins51.dat.temp
[2012.06.05 01:13:31 | 000,000,572 | ---- | C] () -- C:\Windows\hpomdl51.dat.temp
[2012.06.04 21:14:08 | 000,003,584 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.06.04 01:14:03 | 000,000,036 | ---- | C] () -- C:\Windows\Uniformula.ini
[2012.05.17 23:30:40 | 000,000,218 | ---- | C] () -- C:\Users\***\AppData\Local\recently-used.xbel
[2012.05.14 11:38:32 | 000,043,976 | ---- | C] () -- C:\Users\***\AppData\Local\save_en.bmp
[2012.05.14 11:38:08 | 000,043,976 | ---- | C] () -- C:\Users\***\AppData\Local\save_es.bmp
[2012.04.10 02:17:13 | 000,015,873 | ---- | C] () -- C:\Windows\System32\Inetde.dll
[2012.03.24 23:54:42 | 000,000,033 | ---- | C] () -- C:\Users\***\AppData\Local\rssbuilder.ftpconfig
[2012.03.24 23:46:46 | 000,000,123 | ---- | C] () -- C:\Users\***\AppData\Local\rssbuilder.config
[2012.03.24 23:35:00 | 000,338,432 | ---- | C] () -- C:\Windows\System32\sqlite36_engine.dll
[2012.01.31 18:15:42 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2012.01.31 18:15:42 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2012.01.31 18:15:42 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2012.01.31 18:15:42 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2012.01.27 01:56:04 | 000,000,628 | ---- | C] () -- C:\Users\***\AppData\Roaming\vispa.ini
[2012.01.24 11:36:51 | 000,307,200 | ---- | C] () -- C:\Windows\SetACL.exe
[2012.01.23 21:34:58 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2012.01.23 21:06:58 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.01.23 21:03:51 | 000,233,765 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012.01.23 21:03:51 | 000,003,929 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2012.01.18 10:54:52 | 004,790,272 | ---- | C] () -- C:\Windows\System32\x264vfw.dll
[2011.12.07 19:32:24 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll
[2011.07.12 15:56:50 | 000,074,752 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011.06.07 22:03:12 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
[2011.04.01 05:07:02 | 010,877,272 | ---- | C] () -- C:\Windows\System32\LogiDPP.dll
[2011.04.01 05:07:02 | 000,102,744 | ---- | C] () -- C:\Windows\System32\LogiDPPApp.exe
[2011.04.01 05:06:56 | 000,331,608 | ---- | C] () -- C:\Windows\System32\DevManagerCore.dll
[2011.04.01 04:56:00 | 000,027,872 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini
[2011.01.04 13:28:18 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
========== ZeroAccess Check ==========
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 04:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\Windows\$NtUninstallKB36042$] -> Error: Cannot create file handle -> Unknown point type
========== Alternate Data Streams ==========
@Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:3B71D0B4
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8CE646EE
< End of report >
3.Extras-Logfile Code:
OTL Extras logfile created on: 05.11.2012 15:35:24 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\***\Desktop
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,25 Gb Total Physical Memory | 2,11 Gb Available Physical Memory | 64,85% Memory free
6,50 Gb Paging File | 5,31 Gb Available in Paging File | 81,70% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 80,01 Gb Total Space | 56,74 Gb Free Space | 70,91% Space Free | Partition Type: NTFS
Drive D: | 100,01 Gb Total Space | 87,70 Gb Free Space | 87,69% Space Free | Partition Type: NTFS
Drive E: | 20,01 Gb Total Space | 15,04 Gb Free Space | 75,15% Space Free | Partition Type: NTFS
Drive F: | 265,64 Gb Total Space | 256,92 Gb Free Space | 96,72% Space Free | Partition Type: NTFS
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "D:\Bearbeitungsprogramme\Media Monkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Program Files\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
========== Firewall Settings ==========
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{02C11FB8-80F5-780E-D162-FF48F58E3DD5}" = CCC Help Portuguese
"{0360D8F0-626A-4E87-8A16-938BD0BEBCC5}" = 32 Bit HP CIO Components Installer
"{03CC9D58-B132-4CC0-A521-4F3660AA43C7}" = Movie Maker
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan
"{0844CC2A-512E-4BA1-872B-02887E7A2672}" = FILSHtray
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0EDCC1B7-76FB-88DA-BF2C-9B64AF946E2B}" = CCC Help Greek
"{11B30564-C98C-3DCA-E796-FFD5204999EC}" = CCC Help Czech
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{17D26CDD-B87C-412B-92F0-2D5DD4313522}" = Facebook Messenger 2.1.4651.0
"{1B7710D4-9D75-D5E5-4B6D-40F471E70398}" = HydraVision
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox
"{2E46D5AD-6B32-78E0-61E1-12A51284A21F}" = ATI Catalyst Install Manager
"{2FB1052B-2F3D-48CE-A65D-006240516ECE}_is1" = Alternative Flash Player Auto-Updater
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CBD94C1-BA15-488C-888B-D8DD296CC6DC}" = Fotogalerie
"{3D480277-7CED-2437-5234-BABEEFDCB351}" = CCC Help Swedish
"{3DD8DC4E-B908-4CC6-9F42-ACEF950D8797}" = LightScribe Template Labeler
"{3E8A20E1-223F-11E2-9116-B8AC6F98CCE3}" = Google Earth
"{4442AB48-DEC4-4B39-B067-1F75BF8017E7}" = Creative Centrale
"{45C57CA6-4F31-E69B-CFD9-6FB577DF42D1}" = CCC Help Danish
"{471CE240-A1E5-56ED-C3FE-6A9BF4FB198B}" = ATI AVIVO Codecs
"{4AE59E41-5549-DAF0-A02E-719CB0E9068C}" = CCC Help English
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{502DC8CD-2E65-998E-7B83-48FC23A2C86D}" = CCC Help Spanish
"{505522F8-9BAF-4CB4-8767-EE074BB0ECE1}" = PS_AIO_07_B010_SW_Min
"{50B93225-3F76-F555-27A2-A1EAEC83C527}" = Catalyst Control Center InstallProxy
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{690F5BA3-5DEB-42CD-962B-F687EE59FAA7}" = Windows Live Essentials
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6E68420D-A9FF-9BDC-245E-C7B572B815D9}" = CCC Help Japanese
"{6F1D5994-5C96-FC75-CED5-725D47471748}" = CCC Help Finnish
"{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1" = Super-Charger
"{7D8B9DA5-370A-48B6-AD8D-63574C974AAC}" = LightScribe Applications
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{81830FEF-866C-4DC0-9435-B6287B1EDD8A}" = HP Photosmart B010 All-In-One Driver 14.0 Rel. 7
"{8256F87F-8554-4457-8C3D-3F3324697D9F}" = Windows Live ID Sign-in Assistant
"{84092D1A-0C60-52E1-9E0B-13307163A730}" = CCC Help Norwegian
"{8427AFC8-EB58-23CF-461E-28F75B8D4F92}" = Catalyst Control Center Profiles Mobile
"{85AF1EEE-B3B1-402F-553F-B09A554CAB96}" = CCC Help French
"{85CE6169-3FF6-48B9-22D2-DA45B71B740B}" = CCC Help Thai
"{86604C06-DA30-425E-AECE-47304FE81C45}" = Creative Software Update
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8A1033B0-EF33-4FB5-97A1-C47A7DCDD7E6}_is1" = ClipGrab 3.2.0.9
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90538B62-F392-4DE1-B886-7B48123866E9}" = LightScribe System Software
"{9299BBEF-C1FC-CF2D-01E5-2D5A4D5DF88B}" = AMD VISION Engine Control Center
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A33A8A97-A9AA-03EA-F8F4-590F850CFBBF}" = CCC Help Turkish
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB21F03F-5214-E3A0-6611-4732290D3BB6}" = AMD Fuel
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X Lite - Deutsch
"{AE364ACC-B9DF-466B-B4EA-AEECD0CD581E}" = Windows Live Messenger
"{AE83F348-E6E4-87E9-8CCF-349221A275F5}" = ccc-utility
"{B727564C-47D3-473A-AC9E-F4BE7B1BD5D3}" = Windows Live UX Platform Language Pack
"{BB8D1A11-6459-E191-CDC1-05B5E730FB9A}" = CCC Help Chinese Standard
"{BBC2D638-279B-6AFD-D34D-AD61CE31521E}" = CCC Help Dutch
"{BC97C77A-7E36-C870-D76B-8931CFE59135}" = CCC Help Polish
"{BFD5C87F-8E34-98FD-5E95-C687F285A6EC}" = CCC Help Chinese Traditional
"{C39601A7-9FF4-4148-A41B-93181E35D122}_is1" = VVVVVV version 2.0
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C99717E5-C678-BA9A-3CF7-D3F54CBE0017}" = CCC Help Italian
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{CBCFD97D-FE82-43F4-A978-996CACF71E6B}_is1" = UBitMenuDE
"{CD715A32-2440-5B45-86E5-932D07BD1242}" = Catalyst Control Center Localization All
"{D00139CF-BCA9-C820-F50D-EFACD16E8D7B}" = CCC Help Russian
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D0A6EEA6-4B00-4F07-A0B4-C7A3DA2634EA}" = Easy QR Maker
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech-Webkamera-Treiber
"{D40F6104-6988-47C0-93F2-A66D5DA120A2}" = Facebook Update Helper
"{D7746FF0-D0E4-F09E-132C-F92CDD88F2AD}" = CCC Help Hungarian
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E1203F8C-FF34-4968-A4A5-B4F1F8533DAB}" = Photo Common
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2192482-0BBD-42D4-3BE3-9663C5ADBCAA}" = CCC Help German
"{F2235E5E-7881-4293-9B6F-04B2609FBFF0}" = Windows Live Messenger
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F94BBBFB-6FBC-B680-01E1-DA2D07FA51B8}" = CCC Help Korean
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"7-Zip" = 7-Zip 9.20
"Abloadtool" = Abloadtool
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Alf-BanCo5_is1" = ALF-BanCo 5
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.17
"Audiograbber-Lame" = Audiograbber MP3-Plugin
"Avira AntiVir Desktop" = Avira Free Antivirus
"Camfrog 6.3" = Camfrog Video Chat 6.3
"click.EXE 4.0.6.3" = click.EXE 4.0.6.3
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Exif Tag Remover_is1" = Exif Tag Remover 2.0
"FileZilla Client" = FileZilla Client 3.5.3
"Free Video to Android Converter_is1" = Free Video to Android Converter version 5.0.17.903
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.65.1.1000
"ManyCam" = ManyCam 3.0.92 (remove only)
"Messenger Plus!" = Messenger Plus! 6
"Mozilla Firefox 16.0.2 (x86 de)" = Mozilla Firefox 16.0.2 (x86 de)
"Mozilla Thunderbird 11.0.1 (x86 de)" = Mozilla Thunderbird 11.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Notepad++" = Notepad++
"ResetDRM" = Windows Media DRM Reset
"TeamViewer 7" = TeamViewer 7
"Unlocker" = Unlocker 1.9.1
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.3
"WinLiveSuite" = Windows Live Essentials
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 30.10.2012 18:48:27 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Recorder.exe, Version: 2.6.0.0, Zeitstempel:
0x4cc36859 Name des fehlerhaften Moduls: lvcodec2.dll, Version: 13.25.1014.0, Zeitstempel:
0x4d955ca7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001a331 ID des fehlerhaften Prozesses:
0x674 Startzeit der fehlerhaften Anwendung: 0x01cdb6f031f341ea Pfad der fehlerhaften
Anwendung: D:\Hilfsprogramme\CamStudio\Recorder.exe Pfad des fehlerhaften Moduls:
C:\Windows\system32\lvcodec2.dll Berichtskennung: eae39f00-22e3-11e2-996f-8c89a560f73a
Error - 31.10.2012 21:04:11 | Computer Name = ***-PC | Source = MsiInstaller | ID = 10005
Description =
Error - 31.10.2012 21:06:43 | Computer Name = ***-PC | Source = MsiInstaller | ID = 10005
Description =
Error - 01.11.2012 22:22:04 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Unlocker.exe, Version: 0.0.0.0, Zeitstempel:
0x4d9ea1b4 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel:
0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00710070 ID des fehlerhaften Prozesses:
0x630 Startzeit der fehlerhaften Anwendung: 0x01cdb8a0d1b5f96f Pfad der fehlerhaften
Anwendung: D:\Hilfsprogramme\Unlocker\Unlocker.exe Pfad des fehlerhaften Moduls:
unknown Berichtskennung: 17383225-2494-11e2-899c-8c89a560f73a
Error - 01.11.2012 22:23:44 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Unlocker.exe, Version: 0.0.0.0, Zeitstempel:
0x4d9ea1b4 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel:
0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00710070 ID des fehlerhaften Prozesses:
0x808 Startzeit der fehlerhaften Anwendung: 0x01cdb8a115012bc5 Pfad der fehlerhaften
Anwendung: D:\Hilfsprogramme\Unlocker\Unlocker.exe Pfad des fehlerhaften Moduls:
unknown Berichtskennung: 52d48829-2494-11e2-899c-8c89a560f73a
Error - 01.11.2012 22:45:03 | Computer Name = ***-PC | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "E:\rcsetup143\recuva64.exe".
Die
abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm
"sxstrace.exe".
Error - 02.11.2012 15:30:18 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Windows7FirewallControl.exe, Version:
5.1.7.69, Zeitstempel: 0x505c5014 Name des fehlerhaften Moduls: ole32.dll, Version:
6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x0013d405
ID
des fehlerhaften Prozesses: 0x1634 Startzeit der fehlerhaften Anwendung: 0x01cdb92fe4178d95
Pfad
der fehlerhaften Anwendung: C:\Program Files\Windows7FirewallControl\Windows7FirewallControl.exe
Pfad
des fehlerhaften Moduls: C:\Windows\system32\ole32.dll Berichtskennung: bb579b7a-2523-11e2-9808-8c89a560f73a
Error - 02.11.2012 19:08:33 | Computer Name = ***-PC | Source = Google Update | ID = 20
Description =
Error - 02.11.2012 20:47:12 | Computer Name = ***-PC | Source = Microsoft-Windows-RestartManager | ID = 10006
Description = Die Anwendung oder der Dienst "Windows-Explorer" konnte nicht heruntergefahren
werden.
Error - 02.11.2012 20:47:12 | Computer Name = ***-PC | Source = Microsoft-Windows-RestartManager | ID = 10006
Description = Die Anwendung oder der Dienst "Windows-Explorer" konnte nicht heruntergefahren
werden.
Error - 05.11.2012 10:15:09 | Computer Name = ***-PC | Source = MsiInstaller | ID = 11723
Description =
[ System Events ]
Error - 04.11.2012 23:01:42 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
Error - 04.11.2012 23:01:43 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem
Fehler beendet: %%-2147024891
Error - 05.11.2012 00:05:28 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "TeamViewer 7" wurde unerwartet beendet. Dies ist bereits
1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 2000 Millisekunden durchgeführt:
Neustart des Diensts.
Error - 05.11.2012 00:15:00 | Computer Name = ***-PC | Source = DCOM | ID = 10010
Description =
Error - 05.11.2012 09:56:02 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
Error - 05.11.2012 09:56:02 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7003
Description = Der Dienst "IKE- und AuthIP IPsec-Schlüsselerstellungsmodule" ist
von folgendem Dienst abhängig: BFE. Dieser Dienst ist eventuell nicht installiert.
Error - 05.11.2012 09:56:02 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7003
Description = Der Dienst "IPsec-Richtlinien-Agent" ist von folgendem Dienst abhängig:
BFE. Dieser Dienst ist eventuell nicht installiert.
Error - 05.11.2012 09:56:18 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
Error - 05.11.2012 09:56:18 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem
Fehler beendet: %%-2147024891
Error - 05.11.2012 09:58:11 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden
Fehlers nicht gestartet: %%2
< End of report >
4. CCleaner installierte Programme - Logfile Code:
7-Zip 9.20 23.01.2012
ATI Catalyst Install Manager ATI Technologies, Inc. 23.01.2012 16,6MB 3.0.829.0
Renesas Electronics USB 3.0 Host Controller Driver Renesas Electronics Corporation 23.01.2012 969KB 2.0.34.0
Super-Charger MSI 23.01.2012 6,46MB 1.0.110
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 24.01.2012 12,2MB 10.0.40219
Win7codecs Shark007 24.01.2012 64,3MB 3.4.0
Microsoft Office Enterprise 2007 Microsoft Corporation 27.01.2012 12.0.6612.1000
Microsoft Office File Validation Add-In Microsoft Corporation 30.01.2012 7,95MB 14.0.5130.5003
Logitech-Webkamera-Treiber Logitech Inc. 03.02.2012 2.0
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 05.02.2012 1,27MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 05.02.2012 1,33MB 4.20.9876.0
VVVVVV version 2.0 Terry Cavanagh 11.02.2012 76,0MB 2.0
Windows Media Player Firefox Plugin Microsoft Corp 24.02.2012 296KB 1.0.0.8
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 02.03.2012 600KB 9.0.30729.6161
FileZilla Client 3.5.3 FileZilla Project 24.03.2012 16,3MB 3.5.3
Mozilla Thunderbird 11.0.1 (x86 de) Mozilla 11.04.2012 37,4MB 11.0.1
FILSHtray FILSH Media GmbH 21.04.2012 15,3MB 0.12
µTorrent 25.04.2012 3.1.3
UBitMenuDE UBit Schweiz AG 29.04.2012 01.04
Notepad++ 15.05.2012 6.1.2
HP Photosmart B010 All-In-One Driver 14.0 Rel. 7 HP 05.06.2012 14.0
Easy QR Maker VSHSystem 09.06.2012 37,3MB 1.2.1
Alternative Flash Player Auto-Updater pXc-coding.com 21.06.2012 1,31MB 1.0.2.1
SAMSUNG USB Driver for Mobile Phones SAMSUNG Electronics Co., Ltd. 13.07.2012 42,2MB 1.5.6.0
ALF-BanCo 5 ALF AG 24.07.2012 55,9MB
Abloadtool Tim Demkowsky 28.07.2012
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 28.07.2012 238KB 9.0.30729
click.EXE 4.0.6.3 S.A.Dittrich 04.08.2012
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 11.08.2012 6.0.1.6662
Windows Media DRM Reset 11.08.2012
Java 7 Update 7 Oracle 02.09.2012 128MB 7.0.70
ooVoo ooVoo LLC. 02.09.2012 1,71MB 3.5.3018
Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 05.09.2012 1,69MB 3.1.0000
CDBurnerXP CDBurnerXP 08.09.2012 12,1MB 4.4.1.3341
LightScribe Applications LightScribe 08.09.2012 13,7MB 1.18.26.7
LightScribe System Software LightScribe 08.09.2012 26,3MB 1.18.26.7
LightScribe Template Labeler LightScribe 08.09.2012 22,6MB 1.18.26.7
Adobe Reader X Lite - Deutsch Adobe Systems Incorporated 22.09.2012 81,1MB 10.1.4
Unlocker 1.9.1 Cedrick Collomb 22.09.2012 1.9.1
VLC media player 2.0.3 VideoLAN 22.09.2012 2.0.3
PDFCreator Frank Heindörfer, Philip Chinery 23.09.2012 1.5.0
ClipGrab 3.2.0.9 Philipp Schmieder Medien 24.09.2012 52,3MB
Windows Installer Clean Up Microsoft Corporation 27.09.2012 305KB 3.00.00.0000
Camfrog Video Chat 6.3 Camshare Inc. 02.10.2012 6.3.218
Free Video to Android Converter version 5.0.17.903 DVDVideoSoft Ltd. 03.10.2012 74,0MB 5.0.17.903
Windows Live Essentials Microsoft Corporation 04.10.2012 16.4.3505.0912
Adobe Flash Player 11 Plugin Adobe Systems Incorporated 09.10.2012 6,00MB 11.4.402.287
Exif Tag Remover 2.0 RL Vision 13.10.2012
Messenger Plus! 6 Yuna Software 14.10.2012 6.00.0.773
Amazon MP3-Downloader 1.0.17 Amazon Services LLC 15.10.2012 1.0.17
Audiograbber MP3-Plugin AG 18.10.2012 1.0
Facebook Messenger 2.1.4651.0 Facebook 21.10.2012 34,9MB 2.1.4651.0
ManyCam 3.0.92 (remove only) ManyCam LLC 24.10.2012 3.0.92
Skype™ 6.0 Skype Technologies S.A. 24.10.2012 37,3MB 6.0.120
TeamViewer 7 TeamViewer 25.10.2012 7.0.15723
Mozilla Firefox 16.0.2 (x86 de) Mozilla 28.10.2012 38,8MB 16.0.2
Mozilla Maintenance Service Mozilla 28.10.2012 329KB 16.0.2
Avira Free Antivirus Avira 30.10.2012 121MB 13.0.0.2735
Google Earth Google 31.10.2012 171MB 7.0.1.8244
Adobe Flash Player 11 ActiveX Adobe Systems Incorporated 03.11.2012 6,00MB 11.4.402.287
Malwarebytes Anti-Malware Version 1.65.1.1000 Malwarebytes Corporation 03.11.2012 19,4MB 1.65.1.1000
Realtek Ethernet Controller Driver Realtek 03.11.2012 7.53.216.2012
Weitere Info!
Wenn ich sobald mit Internet Explorer auf postbank.de gehe und anschließend auf online Banking dort sagt er Die Webseite kann nicht angezeigt werden, und leitet innerhalb von 5 sekundenSekunden auf fremde Webseiten um!
bei Firefox leitet er um wenn ich vom Google-Treffersuche ein Link klicke passiert manchmal das er umgeleitet wird! |
