Trojaner-Board - Summerblast-Problem als Telekom Rechnung getarnt

Hallo Timo,

ich konnte leider erst heute wieder arbeiten...
Hier das Ergebnis des Junkware Removel Tools:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.9 (11.15.2014:2)
OS: Microsoft Windows XP x86
Ran by gabi on 17.11.2014 at 14:06:29,04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL

~~~ Registry Keys

~~~ Files

Successfully deleted: [File] "C:\WINDOWS\wininit.ini"

~~~ Folders

~~~ FireFox

Successfully deleted the following from C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\mozilla\firefox\profiles\099mirur.default\prefs.js

user_pref("google.toolbar.button_option.cached.gtbSearchBlogs", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchBlogs\" t
user_pref("google.toolbar.button_option.cached.gtbSearchPhotos", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchPhotos\"
user_pref("google.toolbar.button_option.cached.gtbSearchScholar", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul\" id=\"gtbSearchScholar
user_pref("google.toolbar.button_option.cached.gtbstoolbar-google-com_CTK0Y7F4MTG6NKYH03WT-xml", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.o
user_pref("google.toolbar.button_option.cached.gtbstoolbar-google-com_J66T77NJDBMW4FEUU7FA-xml", "<toolbarbutton xmlns=\"hxxp://www.mozilla.org/keymaster/gatekeeper/there.is.o
user_pref("google.toolbar.search-icon", "data:image/x-icon;base64,AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.11.2014 at 14:15:06,07
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Hallo Timo,

darf ich meine Schutzsoftware wieder aktivieren?

Gruss
Gabi

Hallo Timo,

hier das Ergebnis von mbam...

Malwarebytes Anti-Malware
www.malwarebytes.org

Protection, 17.11.2014 14:26:10, SYSTEM, PC003, Protection, Malware Protection, Starting,
Protection, 17.11.2014 14:26:10, SYSTEM, PC003, Protection, Malware Protection, Started,
Protection, 17.11.2014 14:26:10, SYSTEM, PC003, Protection, Malicious Website Protection, Starting,
Update, 17.11.2014 14:26:13, SYSTEM, PC003, Manual, Rootkit Database, 2014.9.18.1, 2014.11.12.1,
Update, 17.11.2014 14:26:25, SYSTEM, PC003, Manual, Malware Database, 2014.9.19.5, 2014.11.17.3,
Protection, 17.11.2014 14:26:26, SYSTEM, PC003, Protection, Refresh, Starting,
Protection, 17.11.2014 14:26:35, SYSTEM, PC003, Protection, Malicious Website Protection, Started,
Protection, 17.11.2014 14:26:36, SYSTEM, PC003, Protection, Malicious Website Protection, Stopping,
Protection, 17.11.2014 14:26:36, SYSTEM, PC003, Protection, Malicious Website Protection, Stopped,
Protection, 17.11.2014 14:26:53, SYSTEM, PC003, Protection, Refresh, Success,
Protection, 17.11.2014 14:26:53, SYSTEM, PC003, Protection, Malicious Website Protection, Starting,
Protection, 17.11.2014 14:27:28, SYSTEM, PC003, Protection, Malicious Website Protection, Started,
Scan, 17.11.2014 14:52:12, SYSTEM, PC003, Manual, Start: % 1 "% 2", Dauer: % 1 min 24 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 4 Malwareerkennung, 3-Malwareerkennung,
Protection, 17.11.2014 14:52:13, SYSTEM, PC003, Protection, Malicious Website Protection, Stopping,
Protection, 17.11.2014 14:52:13, SYSTEM, PC003, Protection, Malicious Website Protection, Stopped,
Protection, 17.11.2014 14:52:13, SYSTEM, PC003, Protection, Malicious Website Protection, Starting,
Protection, 17.11.2014 14:52:58, SYSTEM, PC003, Protection, Malicious Website Protection, Started,
Protection, 17.11.2014 14:54:49, SYSTEM, PC003, Protection, Malware Protection, Starting,
Protection, 17.11.2014 14:54:49, SYSTEM, PC003, Protection, Malware Protection, Started,
Protection, 17.11.2014 14:54:49, SYSTEM, PC003, Protection, Malicious Website Protection, Starting,
Protection, 17.11.2014 14:56:02, SYSTEM, PC003, Protection, Malicious Website Protection, Started,

(end)

und das ergebnis des von frst:
FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-11-2014 03

Ran by gabi (administrator) on PC003 on 17-11-2014 15:04:12

Running from D:\rasselfisch\a_pdf

Loaded Profile: gabi (Available profiles: gabi & Administrator)

Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 8

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Acronis) C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe

(SingleClick Systems) C:\Programme\Dell Network Assistant\hnm_svc.exe

(Malwarebytes Corporation) C:\Programme\Malwarebytes Anti-Malware\mbamscheduler.exe

(CANON INC.) C:\WINDOWS\system32\CNAB4RPK.EXE

(Citrix Systems, Inc.) C:\Programme\Citrix\ICA Client\ssonsvr.exe

(Malwarebytes Corporation) C:\Programme\Malwarebytes Anti-Malware\mbamservice.exe

(Software 2000 Limited) C:\WINDOWS\system32\spool\drivers\w32x86\3\HP1006MC.EXE

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\McSvcHost\McSvHost.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe

(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE

(McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe

(XIMETA, Inc.) C:\Programme\NDAS\System\ndassvc.exe

(HP) C:\WINDOWS\system32\HPZipm12.exe

(McAfee, Inc.) C:\Programme\McAfee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\AMCore\mcshield.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\SystemCore\mfefire.exe

(Malwarebytes Corporation) C:\Programme\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe

() C:\Programme\Dell\Media Experience\DMXLauncher.exe

(InstallShield Software Corporation) C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe

(Sonic Solutions) C:\WINDOWS\system32\DLA\DLACTRLW.EXE

() C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe

(Hewlett-Packard Co.) C:\Programme\HP\HP Software Update\hpwuSchd2.exe

(Acronis) C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe

(Acronis) C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe

(Acronis) C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe

(Google Inc.) C:\Programme\Picasa2\PicasaMediaDetector.exe

(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe

(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe

(Hewlett-Packard Co.) C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe

(McAfee, Inc.) C:\Programme\McAfee Security Scan\3.8.150\SSScheduler.exe

(XIMETA, Inc.) C:\Programme\NDAS\System\ndasmgmt.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\Platform\McUICnt.exe

() C:\Programme\Google\Google Desktop Search\GoogleDesktopIndex.exe

() C:\Programme\Google\Google Desktop Search\GoogleDesktopDisplay.exe

(Hewlett-Packard Co.) C:\Programme\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

(Dropbox, Inc.) C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\Dropbox.exe

(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [DMXLauncher] => C:\Programme\Dell\Media Experience\DMXLauncher.exe [94208 2005-10-05] ()

HKLM\...\Run: [ISUSPM Startup] => C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\isuspm.exe [249856 2005-06-10] (InstallShield Software Corporation)

HKLM\...\Run: [ISUSScheduler] => C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [81920 2005-06-10] (InstallShield Software Corporation)

HKLM\...\Run: [DLA] => C:\WINDOWS\System32\DLA\DLACTRLW.EXE [122940 2005-09-08] (Sonic Solutions)

HKLM\...\Run: [Google Desktop Search] => C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe [169984 2006-08-29] ()

HKLM\...\Run: [HP Software Update] => C:\Programme\HP\HP Software Update\HPWuSchd2.exe [49152 2005-05-11] (Hewlett-Packard Co.)

HKLM\...\Run: [TrueImageMonitor.exe] => C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe [1176768 2006-09-22] (Acronis)

HKLM\...\Run: [AcronisTimounterMonitor] => C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe [1949912 2006-09-22] (Acronis)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe [82832 2006-09-22] (Acronis)

HKLM\...\Run: [Picasa Media Detector] => C:\Programme\Picasa2\PicasaMediaDetector.exe [366400 2006-12-12] (Google Inc.)

HKLM\...\Run: [Samsung PanelMgr] => C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe [520192 2007-05-30] ()

HKLM\...\Run: [] => [X]

HKLM\...\Run: [mcui_exe] => C:\Programme\McAfee.com\Agent\mcagent.exe [517392 2014-04-25] (McAfee, Inc.)

HKLM\...\Run: [igfxhkcmd] => C:\WINDOWS\system32\hkcmd.exe [77824 2005-10-14] (Intel Corporation)

HKLM\...\Run: [igfxpers] => C:\WINDOWS\system32\igfxpers.exe [114688 2005-10-14] (Intel Corporation)

HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM\...\Run: [mcpltui_exe] => C:\Programme\McAfee.com\Agent\mcagent.exe [517392 2014-04-25] (McAfee, Inc.)

HKLM\...\Policies\Explorer: [NoCDBurning] 0

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKLM\...\Policies\Explorer: [NoFolderOptions] 0

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Run: [MSMSGS] => C:\Programme\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Run: [updateMgr] => "C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Run: [hcjucfuf.exe] => C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Identities\hcjucfuf.exe [180736 2008-04-14] (Duplexed Lox)

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Policies\Explorer: [NoFolderOptions] 0

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoFolderOptions] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoControlPanel] 0

AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL => C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [111616 2006-08-29] ()

Lsa: [Authentication Packages] msv1_0 relog_ap

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Dell Network Assistant.lnk

ShortcutTarget: Dell Network Assistant.lnk ->  (No File)

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Programme\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\TrekStor NDAS-Geräte-Manager.lnk

ShortcutTarget: TrekStor NDAS-Geräte-Manager.lnk -> C:\Programme\NDAS\System\ndasmgmt.exe (XIMETA, Inc.)

Startup: C:\Dokumente und Einstellungen\gabi\Startmenü\Programme\Autostart\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search

SearchScopes: HKCU - DefaultScope {7C398219-0018-4A01-AF22-DCCE40C03297} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE739D20140113&p={SearchTerms}

SearchScopes: HKCU - {4B2B281D-39E9-40BE-82FA-EA3AB445A370} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}

SearchScopes: HKCU - {7C398219-0018-4A01-AF22-DCCE40C03297} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE739D20140113&p={SearchTerms}

BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Programme\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> c:\progra~1\mcafee\msk\mskapbho.dll No File

BHO: DriveLetterAccess -> {5CA3D70E-1895-11CF-8E15-001234567890} -> C:\WINDOWS\System32\DLA\DLASHX_W.DLL (Sonic Solutions)

BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

BHO: CBrowserHelperObject Object -> {CA6319C0-31B7-401E-A518-A07C3DB8F777} -> C:\Programme\BAE\BAE.dll (Dell Inc.)

Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Toolbar: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

Toolbar: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)

Toolbar: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} hxxp://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1357665689101

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)

Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programme\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll ()

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Programme\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Mozilla\Firefox\Profiles\099mirur.default

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()

FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPMGWRAP.DLL (Network Associates Inc)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\browser\plugins\ieatgpc.dll (Cisco WebEx LLC)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\browser\plugins\npatgpc.dll (Cisco WebEx LLC)

FF Plugin ProgramFiles/Appdata: C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)

FF SearchPlugin: C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Mozilla\Firefox\Profiles\099mirur.default\searchplugins\siteadvisor.xml

FF Extension: United States English Spellchecker - C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Mozilla\Firefox\Profiles\099mirur.default\Extensions\en-US@dictionaries.addons.mozilla.org [2013-03-24]

FF Extension: Google Toolbar for Firefox - C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Mozilla\Firefox\Profiles\099mirur.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2011-06-10]

FF Extension: Google Toolbar for Firefox - C:\Programme\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2014-11-11]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-18]

FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Programme\McAfee\SiteAdvisor

FF Extension: McAfee SiteAdvisor - C:\Programme\McAfee\SiteAdvisor [2014-01-13]

FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Programme\McAfee\MSK

FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Programme\McAfee\MSK [2014-01-13]
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Programme\McAfee\SiteAdvisor\McChPlg.crx [2014-01-13]
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AcrSch2Svc; C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe [226192 2006-09-22] (Acronis) [File not signed]

S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [135608 2006-12-04] (Google)

R2 hnmsvc; C:\Programme\Dell Network Assistant\hnm_svc.exe [111912 2007-08-27] (SingleClick Systems)

R2 HomeNetSvc; C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 MBAMScheduler; C:\Programme\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)

R2 MBAMService; C:\Programme\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)

R2 McAfee SiteAdvisor Service; C:\Programme\Gemeinsame Dateien\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.)

R2 McAPExe; C:\Programme\McAfee\MSC\McAPExe.exe [145568 2014-04-25] (McAfee, Inc.)

U2 mcbootdelaystartsvc; C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

S3 McComponentHostService; C:\Programme\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)

R2 McMPFSvc; C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Programme\McAfee\VirusScan\mcods.exe [472072 2014-09-04] (McAfee, Inc.)

R2 mcpltsvc; C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2003-06-19] (Microsoft Corporation)

R2 mfecore; C:\Programme\Gemeinsame Dateien\McAfee\AMCore\mcshield.exe [655936 2014-08-20] (McAfee, Inc.)

R2 mfefire; C:\Programme\Gemeinsame Dateien\McAfee\SystemCore\\mfefire.exe [169800 2014-06-20] (McAfee, Inc.)

R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [179600 2014-06-20] (McAfee, Inc.)

S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114288 2014-11-11] (Mozilla Foundation)

R2 MSK80Service; C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 ndassvc; C:\Programme\NDAS\System\ndassvc.exe [304640 2006-03-20] (XIMETA, Inc.) [File not signed]

S3 NetSvc; C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe [147456 2004-11-19] (Intel(R) Corporation) [File not signed]

S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)

R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [69632 2004-09-29] (HP) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S4 abp480n5; C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS [23552 2003-04-02] (Microsoft Corporation)

R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [62832 2014-06-20] (McAfee, Inc.)

S2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [41984 2006-06-12] (Samsung Electronics Co., Ltd.) [File not signed]

R2 DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [25628 2005-09-08] (Sonic Solutions) [File not signed]

R1 DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [5628 2005-08-25] (Sonic Solutions) [File not signed]

R2 DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2496 2005-09-08] (Sonic Solutions) [File not signed]

R2 DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [86524 2005-09-08] (Sonic Solutions) [File not signed]

R2 DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [14684 2005-09-08] (Sonic Solutions) [File not signed]

R2 DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [6364 2005-09-08] (Sonic Solutions) [File not signed]

R1 DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [22684 2005-08-25] (Sonic Solutions) [File not signed]

R2 DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [94332 2005-09-08] (Sonic Solutions) [File not signed]

R2 DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [87036 2005-09-08] (Sonic Solutions) [File not signed]

R0 DRVMCDB; C:\WINDOWS\System32\Drivers\DRVMCDB.SYS [89264 2005-09-12] (Sonic Solutions) [File not signed]

R2 DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [40544 2005-08-12] (Sonic Solutions) [File not signed]

S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [147912 2013-09-23] (McAfee, Inc.)

R0 lfsfilt; C:\WINDOWS\System32\DRIVERS\lfsfilt.sys [140160 2006-03-20] (XIMETA, Inc.) [File not signed]

R0 lpx; C:\WINDOWS\System32\DRIVERS\lpx.sys [44288 2006-03-20] (XIMETA, Inc.) [File not signed]

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-17] (Malwarebytes Corporation)

R3 mfeapfk; C:\WINDOWS\System32\drivers\mfeapfk.sys [135968 2014-06-20] (McAfee, Inc.)

R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [238176 2014-06-20] (McAfee, Inc.)

S3 mfebopk; C:\WINDOWS\System32\drivers\mfebopk.sys [67816 2014-06-20] (McAfee, Inc.)

R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [369248 2014-06-20] (McAfee, Inc.)

R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [576048 2014-06-20] (McAfee, Inc.)

R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [350240 2014-08-20] (McAfee, Inc.)

S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [81296 2014-08-20] (McAfee, Inc.)

S3 mfendisk; C:\WINDOWS\System32\DRIVERS\mfendisk.sys [87520 2014-06-20] (McAfee, Inc.)

R3 mfendiskmp; C:\WINDOWS\System32\DRIVERS\mfendisk.sys [87520 2014-06-20] (McAfee, Inc.)

R1 mfetdi2k; C:\WINDOWS\System32\drivers\mfetdi2k.sys [93624 2014-06-20] (McAfee, Inc.)

R3 ndasbus; C:\WINDOWS\System32\DRIVERS\ndasbus.sys [59136 2006-03-20] (XIMETA, Inc.) [File not signed]

S3 ndasscsi; C:\WINDOWS\System32\DRIVERS\ndasscsi.sys [115584 2006-03-20] (XIMETA, Inc.) [File not signed]

R2 Packet; C:\WINDOWS\System32\DRIVERS\packet.sys [12672 2006-12-18] (SingleClick Systems) [File not signed]

R0 PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [36560 2006-09-27] (Sonic Solutions) [File not signed]

R0 snapman; C:\WINDOWS\System32\DRIVERS\snapman.sys [107056 2006-11-21] (Acronis) [File not signed]

R3 STHDA; C:\WINDOWS\System32\drivers\sthda.sys [1107224 2006-02-10] (SigmaTel, Inc.)

R2 tifsfilter; C:\WINDOWS\System32\DRIVERS\tifsfilt.sys [33488 2006-11-21] (Acronis) [File not signed]

R0 timounter; C:\WINDOWS\System32\DRIVERS\timntr.sys [397296 2006-11-21] (Acronis) [File not signed]

U0 mfewfpk; No ImagePath

U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)

S2 SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys [X]

U1 WS2IFSL; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-11-17 15:00 - 2014-11-17 15:00 - 00002177 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\mbam.txt

2014-11-17 14:59 - 2014-11-17 14:59 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\McAfee

2014-11-17 14:26 - 2014-11-17 14:56 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-11-17 14:25 - 2014-11-17 14:25 - 00000749 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

2014-11-17 14:25 - 2014-11-17 14:25 - 00000000 ____D () C:\Programme\Malwarebytes Anti-Malware

2014-11-17 14:25 - 2014-11-17 14:25 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes Anti-Malware

2014-11-17 14:25 - 2014-11-17 14:25 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

2014-11-17 14:25 - 2014-10-01 11:11 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2014-11-17 14:25 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-11-17 14:15 - 2014-11-17 14:15 - 00002184 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\JRT.txt

2014-11-14 09:26 - 2014-11-14 09:26 - 00008053 _____ () C:\WINDOWS\system32\hs_err_pid5936.log

2014-11-13 13:07 - 2014-11-13 13:07 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-11-12 12:55 - 2014-11-12 13:10 - 00000000 ____D () C:\AdwCleaner

2014-11-12 08:25 - 2014-11-12 08:25 - 00000253 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\Fixlist.txt

2014-11-11 12:40 - 2014-11-17 15:04 - 00000000 ____D () C:\FRST

2014-11-11 08:35 - 2014-11-11 08:36 - 00000000 ____D () C:\Programme\Mozilla Firefox
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-11-17 15:04 - 2006-09-07 08:19 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp

2014-11-17 15:02 - 2013-01-09 09:07 - 00000416 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{346AF10A-10C9-4231-BD9F-1AA42B3867E8}.job

2014-11-17 14:59 - 2011-11-16 15:02 - 00000000 ___RD () C:\Dokumente und Einstellungen\gabi\Eigene Dateien\Dropbox

2014-11-17 14:59 - 2011-11-16 14:59 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox

2014-11-17 14:59 - 2006-09-07 08:19 - 00000000 ___RD () C:\Dokumente und Einstellungen\gabi\Startmenü\Programme\Autostart

2014-11-17 14:59 - 2004-08-13 12:47 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme

2014-11-17 14:58 - 2011-11-16 15:00 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi\Startmenü\Programme\Dropbox

2014-11-17 14:55 - 2014-03-28 08:14 - 00000220 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job

2014-11-17 14:55 - 2004-08-13 12:53 - 01242158 _____ () C:\WINDOWS\WindowsUpdate.log

2014-11-17 14:55 - 2004-08-13 12:49 - 00000159 _____ () C:\WINDOWS\wiadebug.log

2014-11-17 14:55 - 2004-08-13 12:49 - 00000050 _____ () C:\WINDOWS\wiaservc.log

2014-11-17 14:54 - 2004-08-13 12:40 - 00013668 _____ () C:\WINDOWS\system32\wpa.dbl

2014-11-17 14:53 - 2004-08-13 13:00 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-11-17 14:52 - 2013-01-08 18:45 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB975558_WM8$

2014-11-17 14:52 - 2006-09-07 08:19 - 00000300 ___SH () C:\Dokumente und Einstellungen\gabi\ntuser.ini

2014-11-17 14:52 - 2006-09-07 08:19 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi

2014-11-17 14:52 - 2004-08-13 13:00 - 00032544 _____ () C:\WINDOWS\SchedLgU.Txt

2014-11-17 14:51 - 2012-03-30 07:44 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-11-17 14:25 - 2004-08-13 12:47 - 00000000 ___RD () C:\Programme

2014-11-17 08:31 - 2007-07-13 19:34 - 00271360 _____ () C:\Dokumente und Einstellungen\gabi\Eigene Dateien\Persönliche Ordner(1).pst

2014-11-14 11:49 - 2010-04-22 11:06 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sun

2014-11-13 08:51 - 2012-03-30 07:44 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe

2014-11-13 08:51 - 2011-07-07 07:11 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

2014-11-13 08:37 - 2013-08-14 17:11 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-11-13 08:23 - 2010-08-30 09:13 - 100445232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-11-12 08:13 - 2012-04-26 07:18 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service

2014-11-10 11:52 - 2006-09-09 12:40 - 00000056 __RSH () C:\WINDOWS\system32\45FD57CF33.sys

2014-11-10 11:52 - 2006-09-09 12:39 - 00005852 ___SH () C:\WINDOWS\system32\KGyGaAvL.sys

2014-11-10 11:52 - 2006-09-09 12:39 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi\Eigene Dateien\My PSP Files

2014-11-10 08:00 - 2013-03-05 16:07 - 00002249 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\SendBlaster.lnk

2014-11-08 15:00 - 2014-03-28 08:14 - 00000214 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job

2014-11-04 08:40 - 2014-01-27 08:23 - 00334991 _____ () C:\WINDOWS\setupapi.log

2014-11-04 08:38 - 2007-08-27 12:14 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\McAfee

2014-10-27 15:20 - 2006-08-29 14:57 - 00002509 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\Microsoft Office Word 2003.lnk

2014-10-27 09:39 - 2004-08-13 12:47 - 01194742 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
 

Some content of TEMP:

====================

C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp\0038541389599583mcinst.exe

C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpiitnwg.dll

C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp\install_flashplayer12x32au_mssa_awc_aih.exe

C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp\install_reader10_de_mssa_aih.exe

C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp\install_reader11_de_mssa_aih.exe

C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp\Quarantine.exe

C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
 

==================== End Of Log ============================

--- --- ---

--- --- ---

hallo timo,

bin leider erst jetzt wieder gesund am arbeitsplatz...
habe jetzt den eset onlie scanner noch einmal laufen lassen.
dies ist der log.txt dazu:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=3057273e3710354d81c3aeefbaf5a13c
# engine=21254
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-25 12:08:59
# local_time=2014-11-25 01:08:59 (+0100, Westeuropäische Normalzeit)
# country="Germany"
# lang=1031
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode_1='McAfee Anti-Virus and Anti-Spyware'
# compatibility_mode=5124 16777214 100 100 1749037 103332355 0 0
# scanned=78717
# found=1
# cleaned=0
# scan_time=2258
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Variante von Win32/Emotet.AB Trojaner" ac=I fn="${Memory}"

Und das ist das Ergebnis des FRST.logs:
FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-11-2014

Ran by gabi (administrator) on PC003 on 25-11-2014 13:20:38

Running from D:\rasselfisch\a_pdf

Loaded Profile: gabi (Available profiles: gabi & Administrator)

Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland)

Internet Explorer Version 8

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Acronis) C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe

(SingleClick Systems) C:\Programme\Dell Network Assistant\hnm_svc.exe

(Malwarebytes Corporation) C:\Programme\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Programme\Malwarebytes Anti-Malware\mbamservice.exe

(CANON INC.) C:\WINDOWS\system32\CNAB4RPK.EXE

(Software 2000 Limited) C:\WINDOWS\system32\spool\drivers\w32x86\3\HP1006MC.EXE

(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE

(McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe

(XIMETA, Inc.) C:\Programme\NDAS\System\ndassvc.exe

(HP) C:\WINDOWS\system32\HPZipm12.exe

(McAfee, Inc.) C:\Programme\McAfee\MSC\McAPExe.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\AMCore\mcshield.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\SystemCore\mfefire.exe

(Citrix Systems, Inc.) C:\Programme\Citrix\ICA Client\ssonsvr.exe

(Malwarebytes Corporation) C:\Programme\Malwarebytes Anti-Malware\mbam.exe

() C:\Programme\Dell\Media Experience\DMXLauncher.exe

(InstallShield Software Corporation) C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe

(Sonic Solutions) C:\WINDOWS\system32\DLA\DLACTRLW.EXE

() C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe

(Hewlett-Packard Co.) C:\Programme\HP\HP Software Update\hpwuSchd2.exe

(Acronis) C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe

() C:\Programme\Google\Google Desktop Search\GoogleDesktopIndex.exe

(Acronis) C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe

(Acronis) C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe

(Google Inc.) C:\Programme\Picasa2\PicasaMediaDetector.exe

() C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe

(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe

() C:\Programme\Google\Google Desktop Search\GoogleDesktopDisplay.exe

(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe

(Hewlett-Packard Co.) C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe

(McAfee, Inc.) C:\Programme\McAfee Security Scan\3.8.150\SSScheduler.exe

(XIMETA, Inc.) C:\Programme\NDAS\System\ndasmgmt.exe

(Dropbox, Inc.) C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\Dropbox.exe

(Hewlett-Packard Co.) C:\Programme\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\Platform\McUICnt.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\McSvcHost\McSvHost.exe

(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe

(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe

(McAfee, Inc.) C:\Programme\Gemeinsame Dateien\McAfee\Platform\Core\mchost.exe

(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [DMXLauncher] => C:\Programme\Dell\Media Experience\DMXLauncher.exe [94208 2005-10-05] ()

HKLM\...\Run: [ISUSPM Startup] => C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\isuspm.exe [249856 2005-06-10] (InstallShield Software Corporation)

HKLM\...\Run: [ISUSScheduler] => C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [81920 2005-06-10] (InstallShield Software Corporation)

HKLM\...\Run: [DLA] => C:\WINDOWS\System32\DLA\DLACTRLW.EXE [122940 2005-09-08] (Sonic Solutions)

HKLM\...\Run: [Google Desktop Search] => C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe [169984 2006-08-29] ()

HKLM\...\Run: [HP Software Update] => C:\Programme\HP\HP Software Update\HPWuSchd2.exe [49152 2005-05-11] (Hewlett-Packard Co.)

HKLM\...\Run: [TrueImageMonitor.exe] => C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe [1176768 2006-09-22] (Acronis)

HKLM\...\Run: [AcronisTimounterMonitor] => C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe [1949912 2006-09-22] (Acronis)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe [82832 2006-09-22] (Acronis)

HKLM\...\Run: [Picasa Media Detector] => C:\Programme\Picasa2\PicasaMediaDetector.exe [366400 2006-12-12] (Google Inc.)

HKLM\...\Run: [Samsung PanelMgr] => C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe [520192 2007-05-30] ()

HKLM\...\Run: [] => [X]

HKLM\...\Run: [mcui_exe] => C:\Programme\McAfee.com\Agent\mcagent.exe [517392 2014-04-25] (McAfee, Inc.)

HKLM\...\Run: [igfxhkcmd] => C:\WINDOWS\system32\hkcmd.exe [77824 2005-10-14] (Intel Corporation)

HKLM\...\Run: [igfxpers] => C:\WINDOWS\system32\igfxpers.exe [114688 2005-10-14] (Intel Corporation)

HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM\...\Run: [mcpltui_exe] => C:\Programme\McAfee.com\Agent\mcagent.exe [517392 2014-04-25] (McAfee, Inc.)

HKLM\...\Policies\Explorer: [NoCDBurning] 0

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKLM\...\Policies\Explorer: [NoFolderOptions] 0

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Run: [MSMSGS] => C:\Programme\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Run: [updateMgr] => "C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Run: [hcjucfuf.exe] => C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Identities\hcjucfuf.exe [172032 2008-04-14] ()

HKU\S-1-5-18\...\Policies\Explorer: [NoFolderOptions] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoControlPanel] 0

AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL => C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [111616 2006-08-29] ()

Lsa: [Authentication Packages] msv1_0 relog_ap

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Dell Network Assistant.lnk

ShortcutTarget: Dell Network Assistant.lnk ->  (No File)

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Programme\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\TrekStor NDAS-Geräte-Manager.lnk

ShortcutTarget: TrekStor NDAS-Geräte-Manager.lnk -> C:\Programme\NDAS\System\ndasmgmt.exe (XIMETA, Inc.)

Startup: C:\Dokumente und Einstellungen\gabi\Startmenü\Programme\Autostart\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\DropboxExt.22.dll No File

ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\DropboxExt.22.dll No File

ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\DropboxExt.22.dll No File

ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\DropboxExt.22.dll No File

ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\Software\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome

HKU\S-1-5-21-4224918936-2246675992-548615425-1006\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Bing

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Bing

SearchScopes: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> DefaultScope {7C398219-0018-4A01-AF22-DCCE40C03297} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE739D20140113&p={SearchTerms}

SearchScopes: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> {4B2B281D-39E9-40BE-82FA-EA3AB445A370} URL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7

SearchScopes: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}

SearchScopes: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> {7C398219-0018-4A01-AF22-DCCE40C03297} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE739D20140113&p={SearchTerms}

BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Programme\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> c:\progra~1\mcafee\msk\mskapbho.dll No File

BHO: DriveLetterAccess -> {5CA3D70E-1895-11CF-8E15-001234567890} -> C:\WINDOWS\System32\DLA\DLASHX_W.DLL (Sonic Solutions)

BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

BHO: CBrowserHelperObject Object -> {CA6319C0-31B7-401E-A518-A07C3DB8F777} -> C:\Programme\BAE\BAE.dll (Dell Inc.)

Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Toolbar: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

Toolbar: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)

Toolbar: HKU\S-1-5-21-4224918936-2246675992-548615425-1006 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File

DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} hxxp://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1357665689101

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)

Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Programme\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)

Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programme\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll ()

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Programme\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Mozilla\Firefox\Profiles\099mirur.default

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll ()

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()

FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPMGWRAP.DLL (Network Associates Inc)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\browser\plugins\ieatgpc.dll (Cisco WebEx LLC)

FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\browser\plugins\npatgpc.dll (Cisco WebEx LLC)

FF Plugin ProgramFiles/Appdata: C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\mozilla\plugins\npatgpc.dll (Cisco WebEx LLC)

FF SearchPlugin: C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Mozilla\Firefox\Profiles\099mirur.default\searchplugins\siteadvisor.xml

FF Extension: United States English Spellchecker - C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Mozilla\Firefox\Profiles\099mirur.default\Extensions\en-US@dictionaries.addons.mozilla.org [2013-03-24]

FF Extension: Google Toolbar for Firefox - C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Mozilla\Firefox\Profiles\099mirur.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2011-06-10]

FF Extension: Google Toolbar for Firefox - C:\Programme\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2014-11-11]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-18]

FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Programme\McAfee\SiteAdvisor

FF Extension: McAfee SiteAdvisor - C:\Programme\McAfee\SiteAdvisor [2014-01-13]

FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Programme\McAfee\MSK

FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Programme\McAfee\MSK [2014-01-13]

FF HKU\.DEFAULT\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

FF Extension: McAfee Security Scan Plus - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

FF HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Programme\McAfee\SiteAdvisor\McChPlg.crx [2014-01-13]
 

========================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 0273781416900248mcinstcleanup; C:\WINDOWS\TEMP\027378~1.EXE [827456 2012-01-09] (McAfee, Inc.)

R2 AcrSch2Svc; C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe [226192 2006-09-22] (Acronis) [File not signed]

S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [135608 2006-12-04] (Google)

R2 hnmsvc; C:\Programme\Dell Network Assistant\hnm_svc.exe [111912 2007-08-27] (SingleClick Systems)

R2 HomeNetSvc; C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 MBAMScheduler; C:\Programme\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)

R2 MBAMService; C:\Programme\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)

R2 McAfee SiteAdvisor Service; C:\Programme\Gemeinsame Dateien\Mcafee\McSvcHost\McSvHost.exe [167784 2012-08-31] (McAfee, Inc.)

R2 McAPExe; C:\Programme\McAfee\MSC\McAPExe.exe [145568 2014-04-25] (McAfee, Inc.)

U2 mcbootdelaystartsvc; C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

S3 McComponentHostService; C:\Programme\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)

R2 McMPFSvc; C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 McNaiAnn; C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

S3 McODS; C:\Programme\McAfee\VirusScan\mcods.exe [472072 2014-09-04] (McAfee, Inc.)

R2 mcpltsvc; C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 McProxy; C:\Programme\Gemeinsame Dateien\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2003-06-19] (Microsoft Corporation)

R2 mfecore; C:\Programme\Gemeinsame Dateien\McAfee\AMCore\mcshield.exe [655936 2014-08-20] (McAfee, Inc.)

R2 mfefire; C:\Programme\Gemeinsame Dateien\McAfee\SystemCore\\mfefire.exe [169800 2014-06-20] (McAfee, Inc.)

R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [179600 2014-06-20] (McAfee, Inc.)

S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114288 2014-11-11] (Mozilla Foundation)

R2 MSK80Service; C:\Programme\Gemeinsame Dateien\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)

R2 ndassvc; C:\Programme\NDAS\System\ndassvc.exe [304640 2006-03-20] (XIMETA, Inc.) [File not signed]

S3 NetSvc; C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe [147456 2004-11-19] (Intel(R) Corporation) [File not signed]

S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)

R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [69632 2004-09-29] (HP) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S4 abp480n5; C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS [23552 2003-04-02] (Microsoft Corporation)

R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [62832 2014-06-20] (McAfee, Inc.)

S2 DgiVecp; C:\WINDOWS\system32\Drivers\DgiVecp.sys [41984 2006-06-12] (Samsung Electronics Co., Ltd.) [File not signed]

R2 DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [25628 2005-09-08] (Sonic Solutions) [File not signed]

R1 DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [5628 2005-08-25] (Sonic Solutions) [File not signed]

R2 DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2496 2005-09-08] (Sonic Solutions) [File not signed]

R2 DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [86524 2005-09-08] (Sonic Solutions) [File not signed]

R2 DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [14684 2005-09-08] (Sonic Solutions) [File not signed]

R2 DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [6364 2005-09-08] (Sonic Solutions) [File not signed]

R1 DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [22684 2005-08-25] (Sonic Solutions) [File not signed]

R2 DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [94332 2005-09-08] (Sonic Solutions) [File not signed]

R2 DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [87036 2005-09-08] (Sonic Solutions) [File not signed]

R0 DRVMCDB; C:\WINDOWS\System32\Drivers\DRVMCDB.SYS [89264 2005-09-12] (Sonic Solutions) [File not signed]

R2 DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [40544 2005-08-12] (Sonic Solutions) [File not signed]

S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [147912 2013-09-23] (McAfee, Inc.)

R0 lfsfilt; C:\WINDOWS\System32\DRIVERS\lfsfilt.sys [140160 2006-03-20] (XIMETA, Inc.) [File not signed]

R0 lpx; C:\WINDOWS\System32\DRIVERS\lpx.sys [44288 2006-03-20] (XIMETA, Inc.) [File not signed]

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-25] (Malwarebytes Corporation)

R3 mfeapfk; C:\WINDOWS\System32\drivers\mfeapfk.sys [135968 2014-06-20] (McAfee, Inc.)

R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [238176 2014-06-20] (McAfee, Inc.)

S3 mfebopk; C:\WINDOWS\System32\drivers\mfebopk.sys [67816 2014-06-20] (McAfee, Inc.)

R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [369248 2014-06-20] (McAfee, Inc.)

R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [576048 2014-06-20] (McAfee, Inc.)

R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [350240 2014-08-20] (McAfee, Inc.)

S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [81296 2014-08-20] (McAfee, Inc.)

S3 mfendisk; C:\WINDOWS\System32\DRIVERS\mfendisk.sys [87520 2014-06-20] (McAfee, Inc.)

R3 mfendiskmp; C:\WINDOWS\System32\DRIVERS\mfendisk.sys [87520 2014-06-20] (McAfee, Inc.)

R1 mfetdi2k; C:\WINDOWS\System32\drivers\mfetdi2k.sys [93624 2014-06-20] (McAfee, Inc.)

R3 ndasbus; C:\WINDOWS\System32\DRIVERS\ndasbus.sys [59136 2006-03-20] (XIMETA, Inc.) [File not signed]

S3 ndasscsi; C:\WINDOWS\System32\DRIVERS\ndasscsi.sys [115584 2006-03-20] (XIMETA, Inc.) [File not signed]

R2 Packet; C:\WINDOWS\System32\DRIVERS\packet.sys [12672 2006-12-18] (SingleClick Systems) [File not signed]

R0 PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [36560 2006-09-27] (Sonic Solutions) [File not signed]

R0 snapman; C:\WINDOWS\System32\DRIVERS\snapman.sys [107056 2006-11-21] (Acronis) [File not signed]

R3 STHDA; C:\WINDOWS\System32\drivers\sthda.sys [1107224 2006-02-10] (SigmaTel, Inc.)

R2 tifsfilter; C:\WINDOWS\System32\DRIVERS\tifsfilt.sys [33488 2006-11-21] (Acronis) [File not signed]

R0 timounter; C:\WINDOWS\System32\DRIVERS\timntr.sys [397296 2006-11-21] (Acronis) [File not signed]

U0 mfewfpk; No ImagePath

U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)

S2 SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys [X]

U1 WS2IFSL; No ImagePath
 

==================== NetSvcs (Whitelisted) ===================
 
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-11-25 08:25 - 2014-11-25 08:25 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\McAfee

2014-11-25 08:23 - 2014-11-25 08:23 - 00000000 ____D () C:\WINDOWS\LastGood

2014-11-19 08:25 - 2014-11-19 08:25 - 00854448 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\SecurityCheck.exe

2014-11-18 15:31 - 2014-11-18 15:31 - 00001991 _____ () C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\mailpv.xml

2014-11-18 10:20 - 2014-11-18 11:06 - 00002226 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\mbam.txt

2014-11-17 14:26 - 2014-11-25 13:19 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-11-17 14:25 - 2014-11-17 14:25 - 00000749 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

2014-11-17 14:25 - 2014-11-17 14:25 - 00000000 ____D () C:\Programme\Malwarebytes Anti-Malware

2014-11-17 14:25 - 2014-11-17 14:25 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes Anti-Malware

2014-11-17 14:25 - 2014-11-17 14:25 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

2014-11-17 14:25 - 2014-10-01 11:11 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2014-11-17 14:25 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-11-17 14:15 - 2014-11-17 14:15 - 00002184 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\JRT.txt

2014-11-14 09:26 - 2014-11-14 09:26 - 00008053 _____ () C:\WINDOWS\system32\hs_err_pid5936.log

2014-11-13 13:07 - 2014-11-13 13:07 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-11-12 12:55 - 2014-11-12 13:10 - 00000000 ____D () C:\AdwCleaner

2014-11-12 08:25 - 2014-11-12 08:25 - 00000253 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\Fixlist.txt

2014-11-11 12:40 - 2014-11-25 13:20 - 00000000 ____D () C:\FRST

2014-11-11 08:35 - 2014-11-11 08:36 - 00000000 ____D () C:\Programme\Mozilla Firefox
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-11-25 13:21 - 2006-09-07 08:19 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp

2014-11-25 13:20 - 2013-01-09 09:07 - 00000416 ____H () C:\WINDOWS\Tasks\User_Feed_Synchronization-{346AF10A-10C9-4231-BD9F-1AA42B3867E8}.job

2014-11-25 13:19 - 2004-08-13 12:53 - 01317144 _____ () C:\WINDOWS\WindowsUpdate.log

2014-11-25 13:17 - 2004-08-13 12:47 - 00000000 ___RD () C:\Programme

2014-11-25 12:51 - 2012-03-30 07:44 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-11-25 08:25 - 2004-08-13 12:47 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme

2014-11-25 08:19 - 2011-11-16 15:02 - 00000000 ___RD () C:\Dokumente und Einstellungen\gabi\Eigene Dateien\Dropbox

2014-11-25 08:19 - 2011-11-16 14:59 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox

2014-11-25 08:19 - 2007-07-13 19:34 - 00271360 _____ () C:\Dokumente und Einstellungen\gabi\Eigene Dateien\Persönliche Ordner(1).pst

2014-11-25 08:19 - 2004-08-13 12:49 - 00000157 _____ () C:\WINDOWS\wiadebug.log

2014-11-25 08:19 - 2004-08-13 12:49 - 00000050 _____ () C:\WINDOWS\wiaservc.log

2014-11-25 08:18 - 2014-03-28 08:14 - 00000220 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job

2014-11-25 08:18 - 2004-08-13 12:40 - 00013668 _____ () C:\WINDOWS\system32\wpa.dbl

2014-11-25 08:15 - 2004-08-13 13:00 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-11-24 16:20 - 2004-08-13 13:00 - 00032488 _____ () C:\WINDOWS\SchedLgU.Txt

2014-11-24 08:26 - 2004-08-13 13:00 - 00000000 __SHD () C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Verlauf

2014-11-19 13:13 - 2006-09-07 08:19 - 00000300 ___SH () C:\Dokumente und Einstellungen\gabi\ntuser.ini

2014-11-19 13:12 - 2006-09-07 08:19 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi

2014-11-19 10:54 - 2014-01-27 08:23 - 00340863 _____ () C:\WINDOWS\setupapi.log

2014-11-19 08:40 - 2006-09-07 08:19 - 00000000 __SHD () C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Verlauf

2014-11-19 08:39 - 2004-08-13 13:00 - 00000000 __SHD () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Verlauf

2014-11-19 08:34 - 2004-08-13 12:47 - 00000000 __SHD () C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Verlauf

2014-11-18 14:50 - 2004-08-13 12:42 - 00000000 ____D () C:\WINDOWS\pchealth

2014-11-17 14:59 - 2006-09-07 08:19 - 00000000 ___RD () C:\Dokumente und Einstellungen\gabi\Startmenü\Programme\Autostart

2014-11-17 14:58 - 2011-11-16 15:00 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi\Startmenü\Programme\Dropbox

2014-11-17 14:53 - 2013-01-08 18:45 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB975558_WM8$

2014-11-14 11:49 - 2010-04-22 11:06 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sun

2014-11-13 08:51 - 2012-03-30 07:44 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe

2014-11-13 08:51 - 2011-07-07 07:11 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

2014-11-13 08:37 - 2013-08-14 17:11 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-11-13 08:23 - 2010-08-30 09:13 - 100445232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-11-12 08:13 - 2012-04-26 07:18 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service

2014-11-10 11:52 - 2006-09-09 12:40 - 00000056 __RSH () C:\WINDOWS\system32\45FD57CF33.sys

2014-11-10 11:52 - 2006-09-09 12:39 - 00005852 ___SH () C:\WINDOWS\system32\KGyGaAvL.sys

2014-11-10 11:52 - 2006-09-09 12:39 - 00000000 ____D () C:\Dokumente und Einstellungen\gabi\Eigene Dateien\My PSP Files

2014-11-10 08:00 - 2013-03-05 16:07 - 00002249 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\SendBlaster.lnk

2014-11-08 15:00 - 2014-03-28 08:14 - 00000214 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job

2014-11-04 08:38 - 2007-08-27 12:14 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\McAfee

2014-10-27 15:20 - 2006-08-29 14:57 - 00002509 _____ () C:\Dokumente und Einstellungen\gabi\Desktop\Microsoft Office Word 2003.lnk

2014-10-27 09:39 - 2004-08-13 12:47 - 01194742 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
 

Some content of TEMP:

====================

C:\Dokumente und Einstellungen\gabi\Lokale Einstellungen\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp4lzk_2.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

und dann hat sich direkt auch ein Addition.txt geöffnet.
Der Inhalt ist:FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-11-2014

Ran by gabi at 2014-11-25 13:22:31

Running from D:\rasselfisch\a_pdf

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}

FW: McAfee Firewall (Disabled) {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Acronis*True*Image*Home (HKLM\...\{3D2975E7-DD28-4145-811A-225140FF87F0}) (Version: 10.0.4827 - Acronis)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.223 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)

AiO_Scan (Version: 50.0.206.000 - Hewlett-Packard) Hidden

AiOSoftware (Version: 50.0.206.000 - Hewlett-Packard) Hidden

ARTEuro (HKLM\...\{1D3C662A-F6C6-4767-A788-7AA43A9A1317}) (Version: 1.00.0000 - Dell)

BufferChm (Version: 53.0.13.000 - Hewlett-Packard) Hidden

Canon LBP2900 (HKLM\...\Canon LBP2900) (Version:  - )

Cisco WebEx Meetings (HKLM\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)

Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6021.5000 - Microsoft Corporation)

Corel Paint Shop Pro X (HKLM\...\{1A15507A-8551-4626-915D-3D5FA095CC1B}) (Version: 10.0 - Corel Inc)

CP_Package_Variety1 (Version: 53.0.13.000 - Hewlett-Packard) Hidden

CP_Package_Variety2 (Version: 53.0.13.000 - Hewlett-Packard) Hidden

CP_Package_Variety3 (Version: 53.0.13.000 - Hewlett-Packard) Hidden

Dell CinePlayer (HKLM\...\{43CAC9A1-1993-4F65-9096-7C9AFC2BBF54}) (Version: 3.0 - Dell)

Dell Driver Reset Tool (HKLM\...\{5905F42D-3F5F-4916-ADA6-94A3646AEE76}) (Version: 1.02.0000 - Dell Inc.)

Dell Network Assistant (HKLM\...\{0240BDFB-2995-4A3F-8C96-18D41282B716}) (Version: 3.0.0.0 - Dell Inc.)

Dell System Restore (HKLM\...\{74F7662C-B1DB-489E-A8AC-07A06B24978B}) (Version: 2.00.0000 - Ihr Firmenname)

Destinations (Version: 53.0.13.000 - Hewlett-Packard) Hidden

DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

DocProc (Version: 5.2.0.0 - Hewlett-Packard) Hidden

Dropbox (HKU\S-1-5-21-4224918936-2246675992-548615425-1006\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)

eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

Fax (Version: 50.0.206.000 - Hewlett-Packard) Hidden

Google Desktop (HKLM\...\Google Desktop) (Version: - - Google)

Hotfix für Windows XP (KB2779562) (HKLM\...\KB2779562) (Version: 1 - Microsoft Corporation)

Hotfix für Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation)

Hotfix für Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation)

HP Image Zone Express (HKLM\...\{FE64AE29-0883-4C70-8388-DC026019C900}) (Version: 1.5.1.29 - Hewlett-Packard)

HP Imaging Device Functions 5.3 (HKLM\...\HP Imaging Device Functions) (Version: 5.3 - HP)

HP LaserJet P1000 series (HKLM\...\HP LaserJet P1000 series) (Version:  - )

HP PSC & OfficeJet 5.3.B (HKLM\...\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}) (Version:  - HP)

HP Solution Center & Imaging Support Tools 5.3 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 5.3 - HP)

hppMSRedist (Version: 1.00.0000 - Hewlett-Packard) Hidden

HPProductAssistant (Version: 53.0.13.000 - Hewlett-Packard) Hidden

hppusgP1000 (Version: 000.000.00003 - Hewlett-Packard) Hidden

HPSSupply (HKLM\...\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}) (Version: 2.1.1.0000 - Ihr Firmenname)

Intel(R) Graphics Media Accelerator Driver (HKLM\...\{8A708DD8-A5E6-11D4-A706-000629E95E20}) (Version: 6.14.10.4410 - )

Intel(R) PRO Network Connections Drivers (HKLM\...\PROSet) (Version:  - )

Intel(R) PROSet for Wired Connections (HKLM\...\{83F793B5-8BBF-42FD-A8A6-868CB3E2AAEA}) (Version: 9.20.0000 - Dell)

LiveUpdate 2.6 (Symantec Corporation) (HKLM\...\LiveUpdate) (Version: 2.6.14.0 - Symantec Corporation)

Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

MarketResearch (Version: 90.0.142.000 - Hewlett-Packard) Hidden

McAfee Internet Security (HKLM\...\MSC) (Version: 12.8.992 - McAfee, Inc.)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

McAfee SiteAdvisor (HKLM\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.154 - McAfee, Inc.)

McAfee-Deinstallationsprogramm (HKLM\...\McAfee Uninstall Utility) (Version:  - )

MCU (Version: 1.00.0000 - Dell) Hidden

MetaFrame Presentation Server Client (HKLM\...\{4E21223F-8D6C-446E-9CD3-587D206A8400}) (Version: 9.00.32649 - Citrix Systems, Inc.)

Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft .NET Framework 1.1 German Language Pack (HKLM\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft)

Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version:  - )

Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version:  - )

Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)

Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Office Basic Edition 2003 (HKLM\...\{91130407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.7969.0 - Microsoft Corporation)

Microsoft Office Live Meeting 2007 (HKLM\...\{E30E7561-A466-4393-B8BF-FD93E733EF3C}) (Version: 8.0.6362.202 - Microsoft Corporation)

Mozilla Firefox 33.1 (x86 de) (HKLM\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MrvlUsgTracking (HKLM\...\{A82D052A-0806-42DF-80CD-1730A1AC0ED3}) (Version: 1.0.7 - Marvell)

MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

NewCopy (Version: 50.0.206.000 - Hewlett-Packard) Hidden

Notepad++ (HKLM\...\Notepad++) (Version: 5.6.8 - )

PDF reDirect (remove only) (HKLM\...\PDF reDirect) (Version: v2.2.8 - EXP Systems LLC)

Picasa 2 (HKLM\...\Picasa2) (Version: 2.0 - Google, Inc.)

Readme (Version: 50.0.206.000 - Hewlett-Packard) Hidden

Roxio DLA (HKLM\...\{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}) (Version: 5.2.0 - Roxio)

Samsung CLP-300 Series (HKLM\...\Samsung CLP-300 Series) (Version:  - )

Scan (Version: 5.2.0.0 - Hewlett-Packard) Hidden

ScannerCopy (Version: 5.2.0.0 - Hewlett-Packard) Hidden

Search Assist (HKLM\...\{DF6A589A-7A1A-430C-9FF2-A0BDB42669DC}) (Version: 1.00.0000 - Dell)

SendBlaster (HKLM\...\{6C6E880E-FFD4-47C4-A5CE-DFE225662995}) (Version: 1.05.0005 - eDisplay srl)

Shared C Run-time for x86 (Version: 10.0.0 - McAfee) Hidden

Sicherheitsupdate für Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version:  - Microsoft Corporation)

Sicherheitsupdate für Step by Step Interactive Training (KB898458) (HKLM\...\KB898458) (Version: 20050502.101010 - Microsoft Corporation)

Sicherheitsupdate für Step by Step Interactive Training (KB923723) (HKLM\...\KB923723) (Version: 20050502.101010 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2544521) (HKLM\...\KB2544521-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2761465) (HKLM\...\KB2761465-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2792100) (HKLM\...\KB2792100-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2797052) (HKLM\...\KB2797052-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2799329) (HKLM\...\KB2799329-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2809289) (HKLM\...\KB2809289-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2817183) (HKLM\...\KB2817183-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2829530) (HKLM\...\KB2829530-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2838727) (HKLM\...\KB2838727-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2846071) (HKLM\...\KB2846071-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2847204) (HKLM\...\KB2847204-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2862772) (HKLM\...\KB2862772-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2870699) (HKLM\...\KB2870699-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2879017) (HKLM\...\KB2879017-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2888505) (HKLM\...\KB2888505-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2898785) (HKLM\...\KB2898785-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2909210) (HKLM\...\KB2909210-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2909921) (HKLM\...\KB2909921-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2925418) (HKLM\...\KB2925418-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2936068) (HKLM\...\KB2936068-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Internet Explorer 8 (KB2964358) (HKLM\...\KB2964358-IE8) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows Media Player (KB2378111) (HKLM\...\KB2378111_WM9) (Version:  - Microsoft Corporation)

Sicherheitsupdate für Windows Media Player (KB2834902) (HKLM\...\KB2834902_WM10) (Version:  - Microsoft Corporation)

Sicherheitsupdate für Windows Media Player (KB2834902-v2) (HKLM\...\KB2834902-v2_WM10) (Version:  - Microsoft Corporation)

Sicherheitsupdate für Windows Media Player (KB973540) (HKLM\...\KB973540_WM9) (Version:  - Microsoft Corporation)

Sicherheitsupdate für Windows Media Player (KB975558) (HKLM\...\KB975558_WM8) (Version:  - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2360937) (HKLM\...\KB2360937) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2440591) (HKLM\...\KB2440591) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2476490) (HKLM\...\KB2476490) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2491683) (HKLM\...\KB2491683) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2510581) (Version: 1 - Microsoft Corporation) Hidden

Sicherheitsupdate für Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2544521) (Version: 1 - Microsoft Corporation) Hidden

Sicherheitsupdate für Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2584146) (HKLM\...\KB2584146) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2585542) (HKLM\...\KB2585542) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2598479) (HKLM\...\KB2598479) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2603381) (HKLM\...\KB2603381) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2618451) (HKLM\...\KB2618451) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2619339) (HKLM\...\KB2619339) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2620712) (HKLM\...\KB2620712) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2624667) (HKLM\...\KB2624667) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2631813) (HKLM\...\KB2631813) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2646524) (HKLM\...\KB2646524) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2653956) (HKLM\...\KB2653956) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2655992) (HKLM\...\KB2655992) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2659262) (HKLM\...\KB2659262) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2661637) (HKLM\...\KB2661637) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2676562) (HKLM\...\KB2676562) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2686509) (HKLM\...\KB2686509) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2691442) (HKLM\...\KB2691442) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2698365) (HKLM\...\KB2698365) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2705219-v2) (HKLM\...\KB2705219-v2) (Version: 2 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2712808) (HKLM\...\KB2712808) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2719985) (HKLM\...\KB2719985) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2723135-v2) (HKLM\...\KB2723135-v2) (Version: 2 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2724197) (HKLM\...\KB2724197) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2727528) (HKLM\...\KB2727528) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2753842-v2) (HKLM\...\KB2753842-v2) (Version: 2 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2757638) (HKLM\...\KB2757638) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2758857) (HKLM\...\KB2758857) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2761465) (HKLM\...\KB2761465) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2770660) (HKLM\...\KB2770660) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2778344) (HKLM\...\KB2778344) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2779030) (HKLM\...\KB2779030) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2780091) (HKLM\...\KB2780091) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2799494) (HKLM\...\KB2799494) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2802968) (HKLM\...\KB2802968) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2807986) (HKLM\...\KB2807986) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2808735) (HKLM\...\KB2808735) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2813170) (HKLM\...\KB2813170) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2813345) (HKLM\...\KB2813345) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2820197) (HKLM\...\KB2820197) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2820917) (HKLM\...\KB2820917) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2829361) (HKLM\...\KB2829361) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2834886) (HKLM\...\KB2834886) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2839229) (HKLM\...\KB2839229) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2845187) (HKLM\...\KB2845187) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2847311) (HKLM\...\KB2847311) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2849470) (HKLM\...\KB2849470) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2850851) (HKLM\...\KB2850851) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2850869) (HKLM\...\KB2850869) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2859537) (HKLM\...\KB2859537) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2862152) (HKLM\...\KB2862152) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2862330) (HKLM\...\KB2862330) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2862335) (HKLM\...\KB2862335) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2864063) (HKLM\...\KB2864063) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2868038) (HKLM\...\KB2868038) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2868626) (HKLM\...\KB2868626) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2876217) (HKLM\...\KB2876217) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2876315) (HKLM\...\KB2876315) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2876331) (HKLM\...\KB2876331) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2883150) (HKLM\...\KB2883150) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2892075) (HKLM\...\KB2892075) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2893294) (HKLM\...\KB2893294) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2893984) (HKLM\...\KB2893984) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2898715) (HKLM\...\KB2898715) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2900986) (HKLM\...\KB2900986) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2914368) (HKLM\...\KB2914368) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2916036) (HKLM\...\KB2916036) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2922229) (HKLM\...\KB2922229) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2929961) (HKLM\...\KB2929961) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB2930275) (HKLM\...\KB2930275) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB923789) (HKLM\...\KB923789) (Version:  - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB941569) (HKLM\...\KB941569) (Version:  - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB956744) (HKLM\...\KB956744) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB975713) (Version: 1 - Microsoft Corporation) Hidden

Sicherheitsupdate für Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB981322) (HKLM\...\KB981322) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation)

Sicherheitsupdate für Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation)

SolutionCenter (Version: 50.0.152.000 - Hewlett-Packard) Hidden

Sonic Activation Module (Version: 1.0 - Sonic Solutions) Hidden

Sonic Update Manager (HKLM\...\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}) (Version: 3.0.0 - Sonic Solutions)

SSH Secure Shell (HKLM\...\{74E2CD0C-D4A2-11D3-95A6-0000E86CFDE5}) (Version:  - )

StarMoney (Version: 4.0.4.16 - StarFinanz) Hidden

Status (Version: 53.0.13.000 - Hewlett-Packard) Hidden

Tiscali Internet (HKLM\...\{58B2B6D3-E5FF-4D16-87AC-52CC5717C7C6}) (Version: 1.0.0.25 - Tiscali)

TrayApp (Version: 53.0.13.000 - Hewlett-Packard) Hidden

TrekStor NDAS-Software 3.11.1327 (HKLM\...\{A12A36EB-ACB7-11D9-8E75-000D614181EB}) (Version: 3.11.1327 - TrekStor GmbH & Co. KG and XIMETA, Inc.)

Unload (Version: 5.0.0 - Hewlett-Packard) Hidden

Update für Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB2661254-v2) (HKLM\...\KB2661254-v2) (Version: 2 - Microsoft Corporation)

Update für Windows XP (KB2736233) (HKLM\...\KB2736233) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB2863058) (HKLM\...\KB2863058) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB951978) (Version: 1 - Microsoft Corporation) Hidden

Update für Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)

Update für Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)

URL Assistant (HKLM\...\{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}) (Version:  - )

WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden

WebReg (Version: 53.0.13.000 - Hewlett-Packard) Hidden

Windows Driver Package - Microsoft Corporation (usbvideo) Image  (05/25/2007 1.0.3656.0) (HKLM\...\EB88B6218325D2AB47CFFBF7170236B60A6198FF) (Version: 05/25/2007 1.0.3656.0 - Microsoft Corporation)

Windows Genuine Advantage Notifications (KB905474) (HKLM\...\WgaNotify) (Version: 1.9.0040.0 - Microsoft Corporation)

Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)

Windows Media Format Runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-4224918936-2246675992-548615425-1006_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4224918936-2246675992-548615425-1006_Classes\CLSID\{E69341A3-E6D2-4175-B60C-C9D3D6FA40F6}\localserver32 -> C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-4224918936-2246675992-548615425-1006_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\DropboxExt.22.dll No File

CustomCLSID: HKU\S-1-5-21-4224918936-2246675992-548615425-1006_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\DropboxExt.22.dll No File

CustomCLSID: HKU\S-1-5-21-4224918936-2246675992-548615425-1006_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\DropboxExt.22.dll No File

CustomCLSID: HKU\S-1-5-21-4224918936-2246675992-548615425-1006_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\DropboxExt.22.dll No File
 

==================== Restore Points  =========================
 

28-08-2014 08:28:48 Systemprüfpunkt

29-08-2014 15:27:43 Systemprüfpunkt

30-08-2014 15:43:32 Systemprüfpunkt

31-08-2014 16:43:32 Systemprüfpunkt

02-09-2014 07:54:42 Systemprüfpunkt

04-09-2014 07:42:52 Systemprüfpunkt

08-09-2014 07:30:05 Systemprüfpunkt

09-09-2014 07:43:08 Systemprüfpunkt

10-09-2014 10:33:59 Systemprüfpunkt

10-09-2014 12:18:54 Software Distribution Service 3.0

15-09-2014 06:51:39 Systemprüfpunkt

16-09-2014 10:50:58 Systemprüfpunkt

18-09-2014 08:26:35 Systemprüfpunkt

19-09-2014 09:01:20 Systemprüfpunkt

22-09-2014 07:09:14 Systemprüfpunkt

23-09-2014 11:38:25 Systemprüfpunkt

25-09-2014 07:46:25 Systemprüfpunkt

26-09-2014 08:18:39 Systemprüfpunkt

29-09-2014 06:30:29 Systemprüfpunkt

30-09-2014 06:55:26 Systemprüfpunkt

01-10-2014 07:42:34 Systemprüfpunkt

02-10-2014 08:56:04 Systemprüfpunkt

06-10-2014 09:10:12 Systemprüfpunkt

07-10-2014 09:51:26 Systemprüfpunkt

09-10-2014 11:13:08 Systemprüfpunkt

13-10-2014 09:25:22 Systemprüfpunkt

14-10-2014 12:01:10 Systemprüfpunkt

15-10-2014 11:40:03 Software Distribution Service 3.0

16-10-2014 12:53:37 Systemprüfpunkt

21-10-2014 07:30:34 Systemprüfpunkt

22-10-2014 07:57:37 Systemprüfpunkt

23-10-2014 09:20:46 Systemprüfpunkt

24-10-2014 13:18:15 Systemprüfpunkt

27-10-2014 09:15:20 Systemprüfpunkt

28-10-2014 10:15:13 Systemprüfpunkt

30-10-2014 08:41:34 Systemprüfpunkt

03-11-2014 07:33:12 Systemprüfpunkt

04-11-2014 07:36:56 Systemprüfpunkt

05-11-2014 11:02:51 Systemprüfpunkt

06-11-2014 11:41:49 Systemprüfpunkt

07-11-2014 12:23:16 Systemprüfpunkt

08-11-2014 13:22:10 Systemprüfpunkt

09-11-2014 14:22:10 Systemprüfpunkt

10-11-2014 15:23:10 Systemprüfpunkt

11-11-2014 16:23:10 Systemprüfpunkt

13-11-2014 07:23:39 Software Distribution Service 3.0

14-11-2014 08:11:23 Removed Java(TM) SE Development Kit 6 Update 20

14-11-2014 08:25:42 Removed Java(TM) 6 Update 20

14-11-2014 10:48:02 J2SE Runtime Environment 5.0 Update 6 wird entfernt

14-11-2014 10:49:26 Removed Java DB 10.5.3.0

17-11-2014 08:40:59 Systemprüfpunkt

18-11-2014 11:26:12 Systemprüfpunkt

24-11-2014 08:21:18 Systemprüfpunkt

25-11-2014 09:20:45 Systemprüfpunkt
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2004-08-13 12:40 - 2004-08-04 14:00 - 00000820 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 
 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job => C:\WINDOWS\system32\xp_eos.exe

Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job => C:\WINDOWS\system32\xp_eos.exe

Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{346AF10A-10C9-4231-BD9F-1AA42B3867E8}.job => C:\WINDOWS\system32\msfeedssync.exe
 

==================== Loaded Modules (whitelisted) =============
 

2008-08-05 07:07 - 2008-08-05 07:07 - 00065216 _____ () C:\WINDOWS\system32\PDFreDirectMonNT.dll

2006-08-29 15:05 - 2006-08-29 15:05 - 00140800 _____ () C:\Programme\Google\Google Desktop Search\GoogleDesktopDeskbar2.dll

2006-08-29 15:05 - 2006-08-29 15:05 - 00143872 _____ () C:\Programme\Google\Google Desktop Search\GoogleDesktopHyper.dll

2006-08-29 15:05 - 2006-08-29 15:05 - 00589824 _____ () C:\Programme\Google\Google Desktop Search\GoogleDesktopResources_de.dll

2009-11-04 01:14 - 2009-11-04 01:14 - 00054272 _____ () C:\Programme\Notepad++\NppShell_01.dll

2005-10-05 03:12 - 2005-10-05 03:12 - 00094208 _____ () C:\Programme\Dell\Media Experience\DMXLauncher.exe

2006-08-29 15:05 - 2006-08-29 15:05 - 00169984 _____ () C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe

2006-09-22 00:38 - 2006-09-22 00:38 - 00045968 _____ () C:\Programme\Gemeinsame Dateien\Acronis\Common\gc.dll

2006-08-29 15:05 - 2006-08-29 15:05 - 00555008 _____ () C:\Programme\Google\Google Desktop Search\GoogleDesktopIndex.exe

2007-11-09 09:30 - 2007-05-30 00:21 - 00520192 _____ () C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe

2006-08-29 15:05 - 2006-08-29 15:05 - 00415744 _____ () C:\Programme\Google\Google Desktop Search\GoogleDesktopDisplay.exe

2006-05-17 10:48 - 2006-05-17 10:48 - 00250368 _____ () C:\Programme\NDAS\System\ndasmgmt.deu.dll

2014-11-25 08:19 - 2014-11-25 08:19 - 00043008 _____ () c:\dokumente und einstellungen\gabi\lokale einstellungen\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp4lzk_2.dll

2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Dokumente und Einstellungen\gabi\Anwendungsdaten\Dropbox\bin\libcef.dll

2006-08-29 15:05 - 2006-08-29 15:05 - 00111616 _____ () C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll

2014-11-11 08:35 - 2014-11-11 08:36 - 03649648 _____ () C:\Programme\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:BEB71B81
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-4224918936-2246675992-548615425-500 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Administrator

gabi (S-1-5-21-4224918936-2246675992-548615425-1006 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\gabi

Gast (S-1-5-21-4224918936-2246675992-548615425-501 - Limited - Enabled)

Hilfeassistent (S-1-5-21-4224918936-2246675992-548615425-1005 - Limited - Disabled)

SUPPORT_388945a0 (S-1-5-21-4224918936-2246675992-548615425-1002 - Limited - Disabled)
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (11/25/2014 08:18:13 AM) (Source: Userenv) (EventID: 1505) (User: NT-AUTORITÄT)

Description: Das Profil konnte nicht erfolgreich geladen werden, aber Sie wurden mit dem standardmäßigen Profil für das System angemeldet. 
 
 

Details - Unzulässige Funktion.
 

Error: (11/24/2014 08:28:36 AM) (Source: Userenv) (EventID: 1505) (User: PC003)

Description: Das Profil konnte nicht erfolgreich geladen werden, aber Sie wurden mit dem standardmäßigen Profil für das System angemeldet. 
 
 

Details - Unzulässige Funktion.
 

Error: (11/19/2014 08:40:11 AM) (Source: Userenv) (EventID: 1505) (User: PC003)

Description: Das Profil konnte nicht erfolgreich geladen werden, aber Sie wurden mit dem standardmäßigen Profil für das System angemeldet. 
 
 

Details - Unzulässige Funktion.
 

Error: (11/19/2014 08:13:41 AM) (Source: Userenv) (EventID: 1505) (User: NT-AUTORITÄT)

Description: Das Profil konnte nicht erfolgreich geladen werden, aber Sie wurden mit dem standardmäßigen Profil für das System angemeldet. 
 
 

Details - Unzulässige Funktion.
 

Error: (11/18/2014 02:58:23 PM) (Source: Userenv) (EventID: 1505) (User: PC003)

Description: Das Profil konnte nicht erfolgreich geladen werden, aber Sie wurden mit dem standardmäßigen Profil für das System angemeldet. 
 
 

Details - Unzulässige Funktion.
 

Error: (11/18/2014 08:17:20 AM) (Source: Userenv) (EventID: 1505) (User: PC003)

Description: Das Profil konnte nicht erfolgreich geladen werden, aber Sie wurden mit dem standardmäßigen Profil für das System angemeldet. 
 
 

Details - Unzulässige Funktion.
 

Error: (11/17/2014 03:14:31 PM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost (1684) Versuch, Datei "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 

Error: (11/17/2014 03:14:30 PM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost (1684) Versuch, Datei "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 

Error: (11/17/2014 03:14:29 PM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost (1684) Versuch, Datei "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 

Error: (11/17/2014 02:54:35 PM) (Source: Userenv) (EventID: 1505) (User: NT-AUTORITÄT)

Description: Das Profil konnte nicht erfolgreich geladen werden, aber Sie wurden mit dem standardmäßigen Profil für das System angemeldet. 
 
 

Details - Unzulässige Funktion.
 
 

System errors:

=============

Error: (11/25/2014 08:21:51 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "McAfee Boot Delay Start Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Starten Sie den Dienst neu..
 

Error: (11/25/2014 08:21:09 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: Der Server "{209500FC-6B45-4693-8871-6296C4843751}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (11/25/2014 08:17:25 AM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "McAfee Boot Delay Start Service" wurde nicht ordnungsgemäß gestartet.
 

Error: (11/25/2014 08:16:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (11/25/2014 08:16:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%20
 

Error: (11/25/2014 08:15:59 AM) (Source: Print) (EventID: 19) (User: NT-AUTORITÄT)

Description: Freigabe des Druckers fehlgeschlagen (+ 1722). Drucker Samsung CLP-300 Series, Freigabename SamsungC.
 

Error: (11/24/2014 08:35:35 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: Der Server "{6DFC2D17-579D-4C1C-93B7-B05B7DCCD766}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (11/24/2014 08:34:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee Boot Delay Start Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (11/24/2014 08:34:49 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst McAfee Boot Delay Start Service.
 

Error: (11/24/2014 08:32:59 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "McAfee Boot Delay Start Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Starten Sie den Dienst neu..
 
 

Microsoft Office Sessions:

=========================

Error: (11/25/2014 08:18:13 AM) (Source: Userenv) (EventID: 1505) (User: NT-AUTORITÄT)

Description: Unzulässige Funktion.
 

Error: (11/24/2014 08:28:36 AM) (Source: Userenv) (EventID: 1505) (User: PC003)

Description: Unzulässige Funktion.
 

Error: (11/19/2014 08:40:11 AM) (Source: Userenv) (EventID: 1505) (User: PC003)

Description: Unzulässige Funktion.
 

Error: (11/19/2014 08:13:41 AM) (Source: Userenv) (EventID: 1505) (User: NT-AUTORITÄT)

Description: Unzulässige Funktion.
 

Error: (11/18/2014 02:58:23 PM) (Source: Userenv) (EventID: 1505) (User: PC003)

Description: Unzulässige Funktion.
 

Error: (11/18/2014 08:17:20 AM) (Source: Userenv) (EventID: 1505) (User: PC003)

Description: Unzulässige Funktion.
 

Error: (11/17/2014 03:14:31 PM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost1684C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 

Error: (11/17/2014 03:14:30 PM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost1684C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 

Error: (11/17/2014 03:14:29 PM) (Source: ESENT) (EventID: 490) (User: )

Description: svchost1684C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 

Error: (11/17/2014 02:54:35 PM) (Source: Userenv) (EventID: 1505) (User: NT-AUTORITÄT)

Description: Unzulässige Funktion.
 
 

==================== Memory info =========================== 
 

Processor:  Intel(R) Pentium(R) 4 CPU 3.00GHz

Percentage of memory in use: 58%

Total physical RAM: 2038.07 MB

Available physical RAM: 839.23 MB

Total Pagefile: 3929.88 MB

Available Pagefile: 2803.7 MB

Total Virtual: 2047.88 MB

Available Virtual: 1933.59 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:108.58 GB) (Free:72.27 GB) NTFS ==>[Drive with boot components (Windows XP)]

Drive d: (Sichern) (Fixed) (Total:37.24 GB) (Free:31.77 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 149 GB) (Disk ID: 23F12D67)

Partition 1: (Not Active) - (Size=47 MB) - (Type=DE)

Partition 2: (Active) - (Size=108.6 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=37.2 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=3.1 GB) - (Type=DB)
 

==================== End Of Log ============================

--- --- ---