Trojaner-Board - "Poizei-Virus" plötzlich da

Habe schon so viel Positives von Euch gehört bzw. gelesen, dass ich fest überzeugt bin mit Eurer Hilfe diesen Quälgeist wieder los zu werden.
Das plötzliche Auftreten des Polizei-Virus, der mich heute heimgesucht hat, hat mich so erschreckt, dass ich die genaue Variante gar nicht genau erkennen konnte. Webcam war dabei.

Im abgesicherten Modus habe ich bereits wie hier schon oft beschrieben Malwarebytes Anti-Malware geladen und gestartet.

Malwarebytes Anti-Malware (Test) 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.08.29.05

Windows 7 Service Pack 1 x64 NTFS (Abgesichertenmodus/Netzwerkfähig)
Internet Explorer 9.0.8112.16421
User :: GANY3 [Administrator]

Schutz: Deaktiviert

29.08.2012 17:39:13
mbam-log-2012-08-29 (17-39-13).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 217571
Laufzeit: 53 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
D:\MeinTempOrdner\install_0_msi.exe (Trojan.PWS) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk (Trojan.Ransom.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Danach OTL gestartet:

OTL logfile created on: 29.08.2012 17:48:41 - Run 2
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\User\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy

3,99 Gb Total Physical Memory | 3,30 Gb Available Physical Memory | 82,59% Memory free
7,98 Gb Paging File | 7,34 Gb Available in Paging File | 91,93% Paging File free
Paging file location(s): d:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 55,80 Gb Total Space | 12,33 Gb Free Space | 22,10% Space Free | Partition Type: NTFS
Drive D: | 420,09 Gb Total Space | 172,60 Gb Free Space | 41,09% Space Free | Partition Type: NTFS
Drive G: | 14,95 Gb Total Space | 7,40 Gb Free Space | 49,49% Space Free | Partition Type: FAT32
Drive Z: | 511,42 Gb Total Space | 245,71 Gb Free Space | 48,05% Space Free | Partition Type: NTFS

Computer Name: GANY3 | User Name: User | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.08.29 17:01:46 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe

========== Modules (No Company Name) ==========

========== Services (SafeList) ==========

SRV:64bit: - [2010.07.07 03:50:54 | 000,203,264 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012.08.22 19:16:38 | 000,250,568 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- d:\Programme(x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.06.07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.06 09:15:30 | 000,185,856 | ---- | M] () [Auto | Stopped] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater)
SRV - [2012.06.04 11:50:20 | 001,766,464 | ---- | M] (G Data Software AG) [On_Demand | Stopped] -- C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe -- (GDFwSvc)
SRV - [2012.06.01 05:05:18 | 002,011,056 | ---- | M] (G Data Software AG) [Auto | Stopped] -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe -- (AVKWCtl)
SRV - [2012.05.25 14:19:24 | 001,540,120 | ---- | M] (G Data Software AG) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe -- (AVKProxy)
SRV - [2012.03.29 04:42:27 | 000,470,008 | ---- | M] (G Data Software AG) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe -- (GDScan)
SRV - [2012.01.31 21:36:52 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\SysWOW64\nlssrv32.exe -- (nlsX86cc)
SRV - [2012.01.27 04:43:34 | 000,468,472 | ---- | M] (G Data Software AG) [Auto | Stopped] -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe -- (AVKService)
SRV - [2011.11.25 16:32:36 | 000,687,400 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011.10.13 20:44:05 | 003,246,040 | ---- | M] (Acronis) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
SRV - [2011.03.28 22:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2011.02.01 22:53:54 | 001,112,736 | ---- | M] (Acronis) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2010.12.20 15:37:06 | 000,144,712 | ---- | M] (H+H Software GmbH) [Auto | Stopped] -- d:\Programme(x86)\Virtual CD V10\System\VC10SecS.exe -- (VC10SecS)
SRV - [2010.12.13 15:37:16 | 000,194,416 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programme\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV - [2010.09.06 03:19:58 | 000,169,408 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- D:\Programme(x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor9.0)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2010.03.08 09:38:42 | 000,517,416 | ---- | M] (Nero AG) [Auto | Stopped] -- D:\Programme(x86)\Nero\Nero MediaHome 4\NMMediaServerService.exe -- (NeroMediaHomeService.4)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012.05.14 13:28:16 | 000,065,912 | ---- | M] (G Data Software AG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\gdwfpcd64.sys -- (gdwfpcd)
DRV:64bit: - [2012.05.12 16:49:41 | 000,106,648 | ---- | M] (G Data Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\GRD.sys -- (GRD)
DRV:64bit: - [2012.05.12 16:21:44 | 000,059,768 | ---- | M] (G Data Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PktIcpt.sys -- (GDPkIcpt)
DRV:64bit: - [2012.05.12 16:21:36 | 000,122,744 | ---- | M] (G Data Software AG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\MiniIcpt.sys -- (GDMnIcpt)
DRV:64bit: - [2012.05.12 16:21:36 | 000,064,376 | ---- | M] (G Data Software AG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\HookCentre.sys -- (HookCentre)
DRV:64bit: - [2012.05.12 16:21:36 | 000,054,136 | ---- | M] (G Data Software AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\GDBehave.sys -- (GDBehave)
DRV:64bit: - [2012.04.25 12:11:36 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.03.05 16:35:49 | 000,017,280 | ---- | M] (Scott) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBDrv_AMD64.sys -- (usbUDisc)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.10.13 20:44:06 | 000,285,280 | ---- | M] (Acronis) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\afcdp.sys -- (afcdp)
DRV:64bit: - [2011.10.13 20:44:04 | 001,263,200 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tdrpm273.sys -- (tdrpman273)
DRV:64bit: - [2011.10.13 20:44:04 | 000,970,336 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter)
DRV:64bit: - [2011.07.29 13:54:56 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
DRV:64bit: - [2011.07.29 13:54:56 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
DRV:64bit: - [2011.07.13 13:59:54 | 000,072,240 | ---- | M] (Nero AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NBVol.sys -- (NBVol)
DRV:64bit: - [2011.07.13 13:59:54 | 000,015,920 | ---- | M] (Nero AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NBVolUp.sys -- (NBVolUp)
DRV:64bit: - [2011.06.10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.04.19 09:53:32 | 000,223,256 | ---- | M] (H+H Software GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\vdrv1000.sys -- (vdrv1000)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.03.09 16:27:52 | 000,277,088 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)
DRV:64bit: - [2010.12.02 23:30:36 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nx6000.sys -- (MSHUSBVideo)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.08.16 13:42:00 | 000,116,240 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2010.07.07 04:30:08 | 007,195,648 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2010.07.07 03:15:42 | 000,265,728 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010.05.24 21:07:58 | 000,253,728 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2010.03.19 04:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010.01.22 13:22:22 | 000,180,224 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2010.01.22 13:22:18 | 000,077,824 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.09 12:24:30 | 000,024,088 | ---- | M] (H+H Software GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HH10Help.sys -- (HH10Help.sys)
DRV:64bit: - [2009.06.17 10:54:30 | 000,057,872 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:64bit: - [2009.06.17 10:54:22 | 000,055,312 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2008.09.08 17:26:20 | 000,015,360 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Spyder3.sys -- (Spyder3)
DRV:64bit: - [2008.06.17 09:22:24 | 000,040,464 | ---- | M] (H+H Software GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vcd10bus.sys -- (vcd10bus)
DRV:64bit: - [2005.03.29 02:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV - [2012.01.14 20:52:53 | 000,021,712 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\DrvAgent64.SYS -- (DrvAgent64)
DRV - [2011.07.29 13:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
DRV - [2011.07.29 13:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2010.01.13 00:08:30 | 000,146,928 | ---- | M] (CyberLink Corp.) [2010/11/27 20:55:55] [Kernel | Auto | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD8\000.fcl -- ({FE4C91E7-22C2-4D0C-9F6B-82F1B7742054})
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [1999.05.05 06:22:00 | 000,008,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\USBSCAN.SYS -- (usbscan)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2736476

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = Z:\Downloads
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\URLSearchHook: {3eec3c07-13c6-4b41-87c6-40b425a0b0a2} - No CLSID value found
IE - HKCU\..\URLSearchHook: {7e111a5c-3d11-4f56-9463-5310c3c69025} - No CLSID value found
IE - HKCU\..\URLSearchHook: {990af1c2-5a27-4460-8149-ecc6bc122af3} - No CLSID value found
IE - HKCU\..\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {2A57145C-7886-4EFC-B4A3-5492F0E884C0}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0A070DE4-169F-4F84-BC83-39B77186DBE0}: "URL" = hxxp://suche.web.de/search/web/?su={searchTerms}&mc=searchplugin@suche@msie.suche@web&origin=searchplugin
IE - HKCU\..\SearchScopes\{2A57145C-7886-4EFC-B4A3-5492F0E884C0}: "URL" = hxxp://www.google.at/search?q={searchTerms}&rlz=
IE - HKCU\..\SearchScopes\{396256E3-52B9-4BF2-BE51-B5480E3CB6E5}: "URL" = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=amznsearch.de.ms-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
IE - HKCU\..\SearchScopes\{AD8A106B-AAEF-4275-A20B-5E41CFE843EA}: "URL" = hxxp://www.google.de/search?q={searchTerms}
IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = hxxp://mystart.incredimail.com/?search={searchTerms}&loc=search_box_fs
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:8080

========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.0: D:\Programme(x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programme(x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\Programme(x86)\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\User\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\User\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2012.08.14 20:54:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox [2012.08.14 20:54:14 | 000,000,000 | ---D | M]

========== Chrome ==========

CHR - homepage:
CHR - default_search_provider: Google \u00D6sterreich (Enabled)
CHR - default_search_provider: search_url = hxxp://www.google.at/search?q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage:
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\User\AppData\Local\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\User\AppData\Local\Google\Chrome\Application\21.0.1180.83\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\User\AppData\Local\Google\Chrome\Application\21.0.1180.83\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\User\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Nero Kwik Media Helper (Enabled) = C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Google Update (Enabled) = C:\Users\User\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - plugin: Picasa (Enabled) = D:\Programme(x86)\Picasa3\npPicasa3.dll
CHR - Extension: YouTube = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Web Assistant = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.457_0\
CHR - Extension: Google Mail = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension64.dll ()
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Programme(x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Programme(x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll ()
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (G Data BankGuard) - {BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} - C:\Program Files (x86)\Common Files\G DATA\AVKProxy\BanksafeBHO.dll (G Data Software AG)
O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {3EEC3C07-13C6-4B41-87C6-40B425A0B0A2} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com)
O4:64bit: - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ArcSimHDHook] C:\Program Files (x86)\ArcSoft\SimHD IM Plug-In\ArcSoft SimHD IM Plug-In.exe (ArcSoft)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink)
O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG)
O4 - HKLM..\Run: [Garmin Lifetime Updater] D:\Programme(x86)\Garmin\Lifetime Updater\GarminLifetime.exe (Garmin)
O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG)
O4 - HKLM..\Run: [iSaverCtrl] C:\Program Files (x86)\iSaver\iSaverCtrl.exe (infoMantis GmbH)
O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NBAgent] D:\Programme(x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKLM..\Run: [Nero MediaHome 4] D:\Programme(x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe (Nero AG)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl8] C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SAOB Monitor] C:\Program Files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe (Acronis)
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
O4 - HKLM..\Run: [VC10Player] d:\Programme(x86)\Virtual CD V10\System\VC10Play.exe (H+H Software GmbH)
O4 - HKCU..\Run: [ApplePhotoStreams] D:\Programme(x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKCU..\Run: [iCloudServices] D:\Programme(x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKCU..\Run: [IncrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.)
O4 - HKCU..\Run: [MobileDocuments] D:\Programme(x86)\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
O4 - HKCU..\Run: [ProcessExplorer] Z:\Downloads\ProcessExplorer\procexp.exe (Sysinternals - www.sysinternals.com)
O4 - HKCU..\Run: [SMASH] D:\Programme(x86)\SoftMaker Office 2010\SMASH.EXE (SoftMaker Software GmbH)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] d:\Programme(x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: &Add animation to IncrediMail Style Box - D:\PROGRAMME\IncrediMail\bin\resources\WebMenuImg.htm File not found
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - D:\PROGRAMME\IncrediMail\bin\resources\WebMenuImg.htm File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/4.0.3.0/GarminAxControl_64.CAB (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/3.0.1.0/GarminAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{309E4477-7614-4BFE-820E-A4EC16159762}: DhcpNameServer = 10.0.0.138
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.08.29 17:38:01 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Malwarebytes
[2012.08.29 17:37:55 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.08.29 17:37:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.08.29 17:37:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.08.29 17:20:12 | 000,000,000 | R--D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 8
[2012.08.29 17:01:40 | 000,598,528 | ---- | C] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
[2012.08.27 22:37:23 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Apple Computer
[2012.08.27 22:37:23 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Apple Computer
[2012.08.27 22:37:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.08.27 22:37:11 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.08.27 22:37:11 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.08.27 22:37:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2012.08.27 22:37:11 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2012.08.27 22:37:06 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Apple
[2012.08.27 22:37:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2012.08.27 22:36:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2012.08.27 22:36:54 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2012.08.27 22:36:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2012.08.27 22:36:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2012.08.27 22:36:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2012.08.14 20:54:14 | 000,000,000 | ---D | C] -- C:\Program Files\Web Assistant
[2012.08.13 21:57:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle
[2012.08.13 21:43:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012.08.04 21:22:39 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoZoom Classic 4
[2012.08.03 21:30:50 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2012.08.02 16:39:01 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Newsbin6
[2012.08.01 12:19:27 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Nik Software
[2012.08.01 12:18:31 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\ColorEfexPro4
[2004.04.20 08:37:24 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Program Files (x86)\dao360.dll
[1998.04.27 00:00:00 | 000,570,128 | ---- | C] (Microsoft Corporation) -- C:\Program Files (x86)\Dao350.dll
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.08.29 17:43:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.08.29 17:37:55 | 000,000,769 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.08.29 17:22:12 | 000,015,376 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.08.29 17:22:12 | 000,015,376 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.08.29 17:20:12 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.08.29 17:01:46 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\User\Desktop\OTL.exe
[2012.08.29 16:59:58 | 000,000,000 | ---- | M] () -- C:\Users\User\defogger_reenable
[2012.08.29 15:19:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.08.29 14:45:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.08.29 14:40:00 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3898529061-575225583-3505721209-1000UA.job
[2012.08.29 13:03:59 | 083,023,306 | ---- | M] () -- C:\ProgramData\ism_0_llatsni.pad
[2012.08.29 12:42:53 | 000,780,277 | ---- | M] () -- C:\Windows\SysWow64\sig.bin
[2012.08.29 12:42:53 | 000,043,531 | ---- | M] () -- C:\Windows\SysWow64\nmp.map
[2012.08.29 12:40:00 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3898529061-575225583-3505721209-1000Core.job
[2012.08.28 21:58:53 | 000,092,120 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat
[2012.08.28 00:40:55 | 000,000,628 | ---- | M] () -- C:\Windows\SysNative\mapisvc.inf
[2012.08.27 23:09:55 | 000,203,776 | ---- | M] () -- C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.08.27 22:50:20 | 000,000,966 | ---- | M] () -- C:\Users\Public\Desktop\calibre - E-book management.lnk
[2012.08.27 22:37:22 | 000,001,561 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.08.26 21:16:50 | 000,000,432 | ---- | M] () -- C:\Windows\BRWMARK.INI
[2012.08.22 14:41:08 | 000,002,412 | ---- | M] () -- C:\Users\User\Desktop\Google Chrome.lnk
[2012.08.17 09:27:54 | 000,001,756 | ---- | M] () -- C:\Users\Public\Desktop\Browserwahl.lnk
[2012.08.16 20:46:58 | 004,833,824 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.08.14 20:54:01 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\IncrediMail.lnk
[2012.08.04 21:22:39 | 000,000,760 | ---- | M] () -- C:\Users\User\Desktop\PhotoZoom Classic 4.lnk
[2012.08.02 16:39:01 | 000,000,735 | ---- | M] () -- C:\Users\User\Desktop\Newsbin Pro 64.lnk
[2012.07.31 22:45:09 | 000,000,788 | ---- | M] () -- C:\Users\User\Desktop\IrfanView Thumbnails.lnk
[2012.07.31 22:45:09 | 000,000,694 | ---- | M] () -- C:\Users\User\Desktop\IrfanView.lnk
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.08.29 17:37:55 | 000,000,769 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.08.29 16:59:58 | 000,000,000 | ---- | C] () -- C:\Users\User\defogger_reenable
[2012.08.29 13:01:53 | 083,023,306 | ---- | C] () -- C:\ProgramData\ism_0_llatsni.pad
[2012.08.28 00:40:55 | 000,000,628 | ---- | C] () -- C:\Windows\SysNative\mapisvc.inf
[2012.08.27 22:37:22 | 000,001,561 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012.08.27 22:37:06 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2012.08.17 09:27:54 | 000,001,756 | ---- | C] () -- C:\Users\Public\Desktop\Browserwahl.lnk
[2012.08.04 21:22:39 | 000,000,760 | ---- | C] () -- C:\Users\User\Desktop\PhotoZoom Classic 4.lnk
[2012.08.03 21:30:45 | 000,001,106 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.08.03 21:30:44 | 000,001,102 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.05.07 18:48:42 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll
[2012.05.07 18:48:41 | 002,469,760 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe
[2012.05.07 18:48:41 | 000,086,408 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe
[2012.05.07 18:48:41 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys
[2012.05.07 18:48:41 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys
[2012.02.23 05:26:34 | 000,326,144 | ---- | C] () -- C:\Windows\SysWow64\Viveza2FC32.dll
[2012.01.31 21:36:50 | 000,326,144 | ---- | C] () -- C:\Windows\SysWow64\ColorEfexPro4FC32.dll
[2011.10.24 21:55:18 | 000,003,254 | R--- | C] () -- C:\Windows\SysWow64\hptcpmon.ini
[2011.10.19 16:12:06 | 000,004,440 | ---- | C] () -- C:\Windows\jnkvt_f.ini
[2011.10.19 16:12:06 | 000,001,441 | ---- | C] () -- C:\Windows\cbtfw_zf24.ini
[2011.10.12 21:28:39 | 000,001,588 | ---- | C] () -- C:\Windows\debugrcfile.ini
[2011.08.19 15:51:43 | 000,887,296 | ---- | C] () -- C:\Windows\SysWow64\libeay32.dll
[2011.08.19 15:51:43 | 000,172,032 | ---- | C] () -- C:\Windows\SysWow64\libssl32.dll
[2011.08.18 15:21:15 | 000,020,531 | -H-- | C] () -- C:\ProgramData\W77X4
[2011.08.18 14:49:39 | 000,000,000 | ---- | C] () -- C:\Windows\prestopm.INI
[2011.08.18 14:25:40 | 000,040,960 | ---- | C] () -- C:\Windows\SysWow64\IPPCPUID.DLL
[2011.08.18 14:25:24 | 000,011,776 | ---- | C] () -- C:\Windows\SysWow64\pmsbfn32.dll
[2011.08.18 14:24:59 | 000,000,133 | ---- | C] () -- C:\Windows\A11U.INI
[2011.08.01 23:11:24 | 000,007,609 | ---- | C] () -- C:\Users\User\AppData\Local\Resmon.ResmonCfg
[2011.05.28 20:01:36 | 000,780,277 | ---- | C] () -- C:\Windows\SysWow64\sig.bin
[2011.04.10 20:05:21 | 005,000,967 | ---- | C] () -- C:\Users\User\AppData\Local\TempIMG_2438.jpg
[2011.04.10 20:04:53 | 003,553,974 | ---- | C] () -- C:\Users\User\AppData\Local\TempIMG_2421.jpg
[2011.04.10 20:04:49 | 004,429,222 | ---- | C] () -- C:\Users\User\AppData\Local\TempIMG_2420.jpg
[2011.04.10 20:04:33 | 004,618,413 | ---- | C] () -- C:\Users\User\AppData\Local\TempIMG_2417.jpg
[2011.04.10 20:00:34 | 004,444,651 | ---- | C] () -- C:\Users\User\AppData\Local\TempIMG_2414.jpg
[2011.04.10 20:00:06 | 004,625,511 | ---- | C] () -- C:\Users\User\AppData\Local\TempIMG_2441.jpg
[2011.03.31 22:17:14 | 000,000,000 | ---- | C] () -- C:\Windows\Bench32.INI
[2011.03.20 15:40:15 | 000,000,010 | ---- | C] () -- C:\Windows\WININIT.INI
[2011.03.12 22:00:12 | 000,098,344 | ---- | C] () -- C:\Windows\unTMV.exe
[2011.03.10 22:51:45 | 006,713,765 | ---- | C] () -- C:\Users\User\AppData\Local\TempIMG_2148_bearbeitet-10.jpg
[2011.03.10 22:47:07 | 006,713,765 | ---- | C] () -- C:\Users\User\AppData\Local\TempIMG_2148_bearbeitet-1.jpg
[2011.03.10 20:34:24 | 000,092,120 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2011.01.02 19:51:57 | 000,000,022 | -HS- | C] () -- C:\Users\User\AppData\Roaming\Sys6925.Config Collection.sys
[2011.01.02 19:51:57 | 000,000,022 | -HS- | C] () -- C:\Windows\Sys3390 SettingsCollection.bin
[2010.12.06 20:22:37 | 000,203,776 | ---- | C] () -- C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.30 22:13:59 | 000,749,568 | R--- | C] () -- C:\Windows\SysWow64\agissi.dll
[2010.11.30 22:13:59 | 000,348,160 | R--- | C] () -- C:\Windows\SysWow64\zshp2600.exe
[2010.11.30 22:13:55 | 011,206,656 | R--- | C] () -- C:\Windows\SysWow64\zhhp_res.dll
[2010.11.30 22:13:55 | 000,299,008 | R--- | C] () -- C:\Windows\SysWow64\zhhp2600.exe
[2010.11.30 22:12:40 | 000,000,573 | ---- | C] () -- C:\Windows\hpntwksetup.ini
[2010.11.22 19:54:38 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2010.11.19 23:08:29 | 000,000,034 | ---- | C] () -- C:\Windows\SysWow64\bd2030.dat
[2010.11.19 23:04:34 | 000,000,432 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2010.11.19 23:04:33 | 000,000,152 | ---- | C] () -- C:\Windows\BRVIDEO.INI
[2010.11.19 23:04:33 | 000,000,114 | ---- | C] () -- C:\Windows\SysWow64\brlmw03a.ini
[2010.11.19 23:04:33 | 000,000,000 | ---- | C] () -- C:\Windows\brmx2001.ini
[2010.11.19 23:04:32 | 000,009,030 | ---- | C] () -- C:\Windows\HL-2070N.INI
[2010.11.19 23:00:00 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\bd2070n.dat
[2010.11.19 22:59:22 | 000,000,228 | ---- | C] () -- C:\Windows\Brownie.ini
[2010.11.15 15:08:22 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.11.10 14:33:07 | 000,002,857 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

========== LOP Check ==========

[2011.08.08 20:53:05 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\9B25F289-C7DC-4D5B-B7E6-988B9B4B7C1A
[2011.03.09 23:56:35 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Acronis
[2011.05.19 00:52:30 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Athentech
[2012.02.28 01:40:56 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Babylon
[2012.08.28 00:03:34 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\calibre
[2010.12.02 22:36:09 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012.08.01 12:18:31 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\ColorEfexPro4
[2012.04.02 15:52:45 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\com.adobe.DC3Module.AdobeADC
[2012.07.18 15:36:01 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Cuobce
[2011.07.23 17:44:32 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Cuttermaran
[2012.01.14 21:31:21 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Device Doctor
[2011.10.13 20:44:06 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\E29450DB-C5D6-4CDF-BF4F-340562724E26
[2011.11.09 22:18:40 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\eM Client for SoftMaker
[2012.07.14 22:56:44 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\foobar2000
[2012.06.20 21:30:07 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\GARMIN
[2010.12.08 19:40:36 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\GHISLER
[2011.03.07 17:31:23 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Imagenomic
[2012.02.07 15:25:51 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\IrfanView
[2012.07.18 15:36:09 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Ixmoyd
[2012.02.27 20:05:04 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Kalenderchen
[2012.01.06 21:12:00 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Lasersoft Imaging
[2010.11.19 22:50:25 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Leadertech
[2011.07.26 19:42:30 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\mediAvatar
[2012.02.27 22:07:53 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\mkvtoolnix
[2012.07.27 16:21:03 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\Mp3tag
[2012.01.06 21:20:57 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\mresreg
[2011.08.18 14:49:11 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\NewSoft
[2011.08.18 14:49:33 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\NSBackup
[2011.03.12 13:38:01 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\ScreeNet iSaver
[2011.12.04 16:26:40 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\SoftMaker
[2012.04.02 19:19:31 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011.03.31 22:56:08 | 000,000,000 | --SD | M] -- C:\Users\User\AppData\Roaming\Virtual CD v10
[2012.05.17 21:45:12 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\VoipBuster
[2012.02.08 17:59:36 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\XnView
[2011.03.30 23:25:34 | 000,000,000 | ---D | M] -- C:\Users\User\AppData\Roaming\YoWindow
[2012.08.15 12:20:07 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 384 bytes -> C:\Windows:nlsPreferences
@Alternate Data Stream - 320 bytes -> C:\Users\Public\Documents\Spoerl, Heinrich - Die Feuerzangenbowle-(0001).pdf:SummaryInformation
@Alternate Data Stream - 1117 bytes -> C:\Users\User\Documents\[Spamverdacht] Ihre BestellungReservierung bei www_DiTech_at vom 01_12_2010 2035.eml:OECustomProperty

< End of report >

Jetzt warte ich zuversichtlich auf Hilfe und bedanke mich vorweg schon herzlich.

Heli

hallo,
hier das Combofix Ergebnis:
Combofix Logfile:

Code:

ComboFix 12-08-30.05 - User 31.08.2012  19:05:43.1.4 - x64 NETWORK

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.4087.3393 [GMT 2:00]

ausgeführt von:: c:\users\User\Desktop\ComboFix.exe

AV: G Data InternetSecurity 2013 *Disabled/Updated* {39B780B4-63C2-05B0-3B40-8F7A21E4F496}

FW: G Data Personal Firewall *Disabled* {018C0191-29AD-04E8-101F-264FDF37B3ED}

SP: G Data InternetSecurity 2013 *Disabled/Updated* {82D66150-45F8-0A3E-01F0-B4085A63BE2B}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.
  ADS - Windows: deleted 384 bytes in 1 streams. 

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\4320_2340311_MVM_11.tmp

C:\9880697_MVM_13.tmp

c:\program files\Web Assistant\ExTEnsion32.dll

c:\programdata\ism_0_llatsni.pad

c:\users\User\AppData\Roaming\Cuobce

c:\users\User\AppData\Roaming\Cuobce\nyilo.sin

c:\windows\pkunzip.pif

c:\windows\pkzip.pif

Z:\install.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-07-28 bis 2012-08-31  ))))))))))))))))))))))))))))))

.

.

2012-08-31 17:08 . 2012-08-31 17:08        --------        d-----w-        c:\users\User\AppData\Local\temp

2012-08-31 17:08 . 2012-08-31 17:08        --------        d-----w-        c:\users\NeroMediaHomeUser.4\AppData\Local\temp

2012-08-31 17:08 . 2012-08-31 17:08        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-08-29 15:38 . 2012-08-29 15:38        --------        d-----w-        c:\users\User\AppData\Roaming\Malwarebytes

2012-08-29 15:37 . 2012-08-29 15:37        --------        d-----w-        c:\programdata\Malwarebytes

2012-08-29 15:37 . 2012-07-03 11:46        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-08-28 19:16 . 2012-08-23 08:26        9310152        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{A6C3C766-27D8-446C-A9DA-7391420B8E14}\mpengine.dll

2012-08-27 20:37 . 2012-08-27 22:48        --------        d-----w-        c:\users\User\AppData\Roaming\Apple Computer

2012-08-27 20:37 . 2012-08-27 22:42        --------        d-----w-        c:\users\User\AppData\Local\Apple Computer

2012-08-16 18:51 . 2010-02-23 08:16        294912        ----a-w-        c:\windows\system32\browserchoice.exe

2012-08-15 22:42 . 2012-06-29 03:50        499200        ----a-w-        c:\program files\Internet Explorer\jsdbgui.dll

2012-08-15 19:33 . 2012-05-05 08:36        503808        ----a-w-        c:\windows\system32\srcore.dll

2012-08-15 19:33 . 2012-05-05 07:46        43008        ----a-w-        c:\windows\SysWow64\srclient.dll

2012-08-15 19:33 . 2012-02-11 06:43        751104        ----a-w-        c:\windows\system32\win32spl.dll

2012-08-15 19:33 . 2012-02-11 06:36        559104        ----a-w-        c:\windows\system32\spoolsv.exe

2012-08-15 19:33 . 2012-02-11 06:36        67072        ----a-w-        c:\windows\splwow64.exe

2012-08-15 19:33 . 2012-02-11 05:43        492032        ----a-w-        c:\windows\SysWow64\win32spl.dll

2012-08-15 19:33 . 2012-07-04 22:16        73216        ----a-w-        c:\windows\system32\netapi32.dll

2012-08-15 19:33 . 2012-07-04 22:13        59392        ----a-w-        c:\windows\system32\browcli.dll

2012-08-15 19:33 . 2012-07-04 22:13        136704        ----a-w-        c:\windows\system32\browser.dll

2012-08-15 19:33 . 2012-07-04 21:14        41984        ----a-w-        c:\windows\SysWow64\browcli.dll

2012-08-15 19:33 . 2012-07-18 18:15        3148800        ----a-w-        c:\windows\system32\win32k.sys

2012-08-15 19:33 . 2012-05-14 05:26        956928        ----a-w-        c:\windows\system32\localspl.dll

2012-08-14 19:59 . 2012-08-14 19:59        32768        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Driver\10\Intel 32\objpscnv.dll

2012-08-14 19:59 . 2012-08-14 19:59        262144        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Driver\10\Intel 32\IScrCnv.dll

2012-08-14 19:59 . 2012-08-14 19:59        180224        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Driver\10\Intel 32\iGdiCnv.dll

2012-08-14 19:59 . 2012-08-14 19:59        761856        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Driver\10\Intel 32\IDriver.exe

2012-08-14 19:59 . 2012-08-14 19:59        540772        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Driver\10\Intel 32\_ISRES1033.dll

2012-08-14 19:59 . 2012-08-14 19:59        409600        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Driver\10\Intel 32\ISRT.dll

2012-08-14 19:59 . 2012-08-14 19:59        172032        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Driver\10\Intel 32\IUserCnv.dll

2012-08-14 18:54 . 2012-08-31 17:07        --------        d-----w-        c:\program files\Web Assistant

2012-08-13 19:57 . 2012-08-13 19:57        --------        d-----w-        c:\program files (x86)\Oracle

2012-08-13 19:49 . 2012-08-13 19:49        955888        ----a-w-        c:\windows\system32\npDeployJava1.dll

2012-08-13 19:49 . 2012-08-13 19:49        839152        ----a-w-        c:\windows\system32\deployJava1.dll

2012-08-13 19:49 . 2012-08-13 19:49        268784        ----a-w-        c:\windows\system32\javaws.exe

2012-08-13 19:43 . 2012-08-13 19:43        --------        d-----w-        c:\program files (x86)\Common Files\Java

2012-08-13 19:43 . 2012-07-05 20:06        772544        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll

2012-08-03 19:30 . 2012-08-04 10:20        --------        d-----w-        c:\program files\Google

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-08-22 17:16 . 2012-04-09 15:47        696520        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-08-22 17:16 . 2011-06-03 15:45        73416        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-08-15 19:33 . 2010-11-15 13:13        62134624        ----a-w-        c:\windows\system32\MRT.exe

2012-07-05 20:06 . 2010-11-20 23:17        687544        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2012-06-27 02:14 . 2012-06-27 02:14        4472832        ----a-w-        c:\windows\SysWow64\GPhotos.scr

2012-06-11 19:20 . 2012-06-11 19:20        16504        ----a-w-        c:\windows\system32\drivers\GdPhyMem.sys

2012-06-09 05:43 . 2012-07-12 18:39        14172672        ----a-w-        c:\windows\system32\shell32.dll

2012-06-06 06:06 . 2012-07-12 18:39        2004480        ----a-w-        c:\windows\system32\msxml6.dll

2012-06-06 06:06 . 2012-07-12 18:39        1881600        ----a-w-        c:\windows\system32\msxml3.dll

2012-06-06 06:02 . 2012-07-12 18:39        1133568        ----a-w-        c:\windows\system32\cdosys.dll

2012-06-06 05:05 . 2012-07-12 18:39        1390080        ----a-w-        c:\windows\SysWow64\msxml6.dll

2012-06-06 05:05 . 2012-07-12 18:39        1236992        ----a-w-        c:\windows\SysWow64\msxml3.dll

2012-06-06 05:03 . 2012-07-12 18:39        805376        ----a-w-        c:\windows\SysWow64\cdosys.dll

2012-06-02 22:19 . 2012-06-22 14:16        38424        ----a-w-        c:\windows\system32\wups.dll

2012-06-02 22:19 . 2012-06-22 14:17        2428952        ----a-w-        c:\windows\system32\wuaueng.dll

2012-06-02 22:19 . 2012-06-22 14:17        57880        ----a-w-        c:\windows\system32\wuauclt.exe

2012-06-02 22:19 . 2012-06-22 14:17        44056        ----a-w-        c:\windows\system32\wups2.dll

2012-06-02 22:19 . 2012-06-22 14:16        701976        ----a-w-        c:\windows\system32\wuapi.dll

2012-06-02 22:15 . 2012-06-22 14:17        2622464        ----a-w-        c:\windows\system32\wucltux.dll

2012-06-02 22:15 . 2012-06-22 14:16        99840        ----a-w-        c:\windows\system32\wudriver.dll

2009-07-14 01:15 . 2004-04-20 06:37        610304        ----a-w-        c:\program files (x86)\dao360.dll

1998-04-26 22:00 . 1998-04-26 22:00        570128        ----a-w-        c:\program files (x86)\Dao350.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

2010-05-21 11:17        1233288        ----a-w-        c:\program files (x86)\Ask.com\GenericAskToolbar.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-05-21 1233288]

.

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]

[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]

[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]

[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IncrediMail"="c:\program files (x86)\IncrediMail\bin\IncMail.exe" [2012-08-14 366576]

"ProcessExplorer"="z:\downloads\ProcessExplorer\procexp.exe" [2011-07-25 4766000]

"SMASH"="d:\programme(x86)\SoftMaker Office 2010\SMASH.EXE" [2010-05-21 229411]

"MobileDocuments"="d:\programme(x86)\Common Files\Apple\Internet Services\ubd.exe" [2012-02-23 59240]

"iCloudServices"="d:\programme(x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2012-02-23 59240]

"ApplePhotoStreams"="d:\programme(x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2012-02-24 59240]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2009-08-28 75048]

"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]

"PDVD8LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD8\Language\Language.exe" [2009-04-15 50472]

"RemoteControl8"="c:\program files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe" [2009-07-16 91432]

"SAOB Monitor"="c:\program files (x86)\Acronis\TrueImageHome\OnlineBackupStandalone\TrueImageMonitor.exe" [2011-09-22 2571032]

"StartCCC"="c:\programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-07-06 98304]

"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2011-09-22 5587832]

"VC10Player"="d:\programme(x86)\Virtual CD v10\System\VC10Play.exe" [2010-12-20 411976]

"iSaverCtrl"="c:\program files (x86)\iSaver\iSaverCtrl.exe" [2009-06-08 1160192]

"ArcSimHDHook"="c:\program files (x86)\ArcSoft\SimHD IM Plug-In\ArcSoft SimHD IM Plug-In.exe" [2009-05-27 110592]

"G Data AntiVirus Tray Application"="c:\program files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe" [2012-05-24 985624]

"GDFirewallTray"="c:\program files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe" [2012-01-27 1470968]

"Nero MediaHome 4"="d:\programme(x86)\Nero\Nero MediaHome 4\NeroMediaHome.exe" [2010-03-08 5174568]

"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536]

"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]

"AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" [2011-01-12 1523360]

"NBAgent"="d:\programme(x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [2011-04-28 1406248]

"Garmin Lifetime Updater"="d:\programme(x86)\Garmin\Lifetime Updater\GarminLifetime.exe" [2012-06-04 1466760]

"ArcSoft Connection Service"="c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]

"iTunesHelper"="d:\programme(x86)\iTunes\iTunesHelper.exe" [2012-06-07 421776]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]

"Malwarebytes Anti-Malware"="d:\programme(x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]

"Malwarebytes Anti-Malware (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll" [2012-07-03 1085000]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

QuickScan (OpticFilm 7200).lnk - d:\programme(x86)\Plustek\OpticFilm 7200\QuickScan.exe [2011-8-19 339968]

SetPointII.lnk - c:\program files\Logitech\SetPoint II\SetPointII.exe [2009-7-21 815104]

Spyder3Utility.lnk - d:\programme(x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe [2009-8-11 6798714]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

"EnableLinkedConnections"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer3"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

R1 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys [2012-05-12 122744]

R1 gdwfpcd;G Data WFP CD;c:\windows\system32\drivers\gdwfpcd64.sys [2012-05-14 65912]

R1 GRD;G Data Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys [2012-05-12 106648]

R1 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys [2012-05-12 64376]

R1 vdrv1000;vdrv1000;c:\windows\system32\DRIVERS\vdrv1000.sys [2011-04-19 223256]

R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};Power Control [2010/11/27 20:55];c:\program files (x86)\CyberLink\PowerDVD8\000.fcl [2010-01-12 22:08 146928]

R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;d:\programme(x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-06 169408]

R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]

R2 afcdpsrv;Acronis Nonstop Backup-Dienst;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2011-10-13 3246040]

R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-07-07 203264]

R2 AVKProxy;G Data AntiVirus Proxy;c:\program files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2012-05-25 1540120]

R2 AVKService;G Data Scheduler;c:\program files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [2012-01-27 468472]

R2 AVKWCtl;G Data Dateisystem Wächter;c:\program files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2012-06-01 2011056]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-03 136176]

R2 MBAMService;MBAMService;d:\programme(x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]

R2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]

R2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe [2012-01-31 66560]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-06-07 160944]

R2 VC10SecS;Virtual CD v10 Management Service;d:\programme(x86)\Virtual CD V10\System\VC10SecS.exe [2010-12-20 144712]

R2 Web Assistant Updater;Web Assistant Updater;c:\program files\Web Assistant\ExtensionUpdaterService.exe [2012-06-06 185856]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-22 250568]

R3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2011-10-13 285280]

R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-07-07 7195648]

R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-07-07 265728]

R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-08-16 116240]

R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2012-01-14 21712]

R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2011-07-29 16776]

R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2011-07-29 9096]

R3 GDFwSvc;G Data Personal Firewall;c:\program files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2012-06-04 1766464]

R3 GDPkIcpt;GDPkIcpt;c:\windows\system32\drivers\PktIcpt.sys [2012-05-12 59768]

R3 GDScan;G Data Scanner;c:\program files (x86)\Common Files\G Data\GDScan\GDScan.exe [2012-03-29 470008]

R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-03 136176]

R3 HH10Help.sys;HH10Help.sys;c:\windows\system32\drivers\HH10Help.sys [2009-07-09 24088]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]

R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys [2010-12-02 31744]

R3 Spyder3;Datacolor Spyder3;c:\windows\system32\DRIVERS\Spyder3.sys [2008-09-08 15360]

R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-04-25 52736]

R3 usbUDisc;usbUDisc;c:\windows\system32\DRIVERS\USBDrv_AMD64.sys [2012-03-05 17280]

R3 vcd10bus;Virtual CD v10 Bus Enumerator;c:\windows\system32\DRIVERS\vcd10bus.sys [2008-06-17 40464]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2010-11-15 1255736]

S0 GDBehave;GDBehave;c:\windows\system32\drivers\GDBehave.sys [2012-05-12 54136]

S0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\DRIVERS\NBVol.sys [2011-07-13 72240]

S0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\DRIVERS\NBVolUp.sys [2011-07-13 15920]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]

S0 tdrpman273;Acronis Try&Decide and Restore Points filter (build 273);c:\windows\system32\DRIVERS\tdrpm273.sys [2011-10-13 1263200]

S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-01-22 77824]

S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-01-22 180224]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

Inhalt des "geplante Tasks" Ordners

.

2012-08-29 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-09 17:16]

.

2012-08-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-03 19:30]

.

2012-08-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-08-03 19:30]

.

2012-08-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3898529061-575225583-3505721209-1000Core.job

- c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-23 22:30]

.

2012-08-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3898529061-575225583-3505721209-1000UA.job

- c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-23 22:30]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]

2012-06-06 07:15        201728        ----a-w-        c:\program files\Web Assistant\Extension64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2011-02-01 391232]

"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-03-15 499608]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]

"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2009-08-13 4195848]

"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2009-08-13 415752]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = about:blank

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyServer = 127.0.0.1:8080

uInternet Settings,ProxyOverride = *.local

IE: &Add animation to IncrediMail Style Box - d:\programme\IncrediMail\bin\resources\WebMenuImg.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

TCP: DhcpNameServer = 10.0.0.138

DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/3.0.1.0/GarminAxControl.CAB

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

URLSearchHooks-{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - (no file)

URLSearchHooks-{7e111a5c-3d11-4f56-9463-5310c3c69025} - (no file)

URLSearchHooks-{990af1c2-5a27-4460-8149-ecc6bc122af3} - (no file)

URLSearchHooks-{3eec3c07-13c6-4b41-87c6-40b425a0b0a2} - (no file)

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

WebBrowser-{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - (no file)

WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)

WebBrowser-{3EEC3C07-13C6-4B41-87C6-40B425A0B0A2} - (no file)

AddRemove-Intel® Integrated Performance Primitives 1.1 - c:\windows\system32\UninstIPP.isu

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]

"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD8\000.fcl"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2012-08-31  19:11:15 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2012-08-31 17:11

.

Vor Suchlauf: 7 Verzeichnis(se), 13.156.495.360 Bytes frei

Nach Suchlauf: 11 Verzeichnis(se), 18.377.924.608 Bytes frei

.

- - End Of File - - 3A640E65EF8EF69DE18E0656800C8F84

--- --- ---

Die bearbeitete CCleaner Programmliste ist leider etwas unübersichtlich:

Code:

7-Zip 9.16 (x64 edition)        Igor Pavlov        21.11.2010        4,47MB        9.16.00.0                        notwendig

Acronis*True*Image*Home 2011        Acronis        13.10.2011        248MB        14.0.6942                                notwendig

Adobe AIR        Adobe Systems Incorporated        25.06.2012                3.3.0.3650                       notwendig

Adobe Community Help        Adobe Systems Incorporated.        09.05.2011                3.5.23                   notwendig

Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        22.08.2012        6,00MB        11.4.402.265     notwendig

Adobe Photoshop CS5.1        Adobe Systems Incorporated        02.04.2012        2,12GB        12.1                     notwendig

Adobe Photoshop Elements 9        Adobe Systems Incorporated        20.04.2011        2,60GB        9.0.3.0          notwendig

Adobe Reader X (10.1.4) - Deutsch        Adobe Systems Incorporated        14.08.2012        168MB        10.1.4   notwendig

Apple Application Support        Apple Inc.        27.08.2012        61,0MB        2.1.9              notwendig

Apple Mobile Device Support        Apple Inc.        27.08.2012        24,9MB        5.2.0.6            notwendig

Apple Software Update        Apple Inc.        27.08.2012        2,38MB        2.1.3.127                  notwendig

ArcSoft SimHD IM Plug-In        ArcSoft        19.11.2010                1.2.1.4                    unnötig

ArcSoft TotalMedia Extreme        ArcSoft        09.07.2012                2.0.36.1                   unnötig

ATI Catalyst Install Manager        ATI Technologies, Inc.        15.11.2010        22,4MB        3.0.795.0  notwendig

ATI Stream SDK v2 Developer        ATI Technologies Inc.        15.11.2010        42,9MB        2.2.0.0    notwendig

Babylon toolbar on IE                28.02.2012                                                   notwendig

BenVista PhotoZoom Classic 4.1.4        BenVista Ltd.        04.08.2012        11,0MB        4.1.4      notwendig

Bonjour        Apple Inc.        27.08.2012        2,00MB        3.0.0.10                                   unbekannt

Brother HL-2070N        Brother        19.11.2010                1.00                               notwendig

calibre        Kovid Goyal        27.08.2012        136MB        0.8.66                                     notwendig

Canon SELPHY CP760                20.03.2011                                                   notwendig

CCleaner        Piriform        22.08.2012                3.22                               notwendig

Color Efex Pro 4        Nik Software, Inc.        01.08.2012                4.0.0.2            notwendig

Color LaserJet 2600n                30.11.2010                                                   notwendig

Comical 0.8        James Athey        11.08.2011                                                 unnötig                                                   

Cuttermaran 1.70        toarnold        23.07.2011        5,19MB        1.7.0                      notwendig

CyberLink PowerDVD 8        CyberLink Corp.        27.11.2010        143MB        8.0.3228g                  notwendig

Defraggler        Piriform        22.02.2012                2.09                               notwendig

Device Doctor v2.1        Device Doctor Software Inc.        14.01.2012        33,7MB        2.1        unnötig

DriverAgent by eSupport.com                14.01.2012                                           unnötig

DVD Profiler Version 3.7.2                16.01.2012        22,6MB                                   unnötig

EASEUS Partition Master 9.1.1 Home Edition        EASEUS        07.05.2012        45,1MB                   notwendig

foobar2000 v1.1.13        Peter Pawlowski        06.07.2012        8,05MB        1.1.13                     notwendig

G Data InternetSecurity 2013        G Data Software AG        12.05.2012        79,8MB        23.0.0.0   notwendig

Garmin Communicator Plugin        Garmin Ltd or its subsidiaries        20.06.2012        14,6MB        4.0.1 unnötig

Garmin Communicator Plugin x64        Garmin Ltd or its subsidiaries        20.06.2012        22,7MB        4.0.1 notwendig

Garmin Lifetime Updater        Garmin        15.06.2012        43,0MB        2.1.11                                notwendig

Garmin USB Drivers        Garmin Ltd or its subsidiaries        20.06.2012        573KB        2.3.1.0       notwendig

Garmin WebUpdater        Garmin Ltd or its subsidiaries        20.06.2012        15,6MB        2.5.6         notwendig

Google Chrome        Google Inc.        23.03.2012                21.0.1180.83                          notwendig

HOFER Bestellsoftware 4.9        ORWO Net        08.04.2011                4.9                   unnötig

HP Product Detection        Hewlett-Packard Company        30.11.2010        1,90MB        10.7.9.0              notwendig

iCloud        Apple Inc.        28.08.2012        33,2MB        1.1.0.40                                      notwendig

IncrediMail 2.0        IncrediMail Ltd.        14.08.2012                6.2.9.5229                    notwendig

Intel(R) Integrated Performance Primitives RTI 4.0        Intel Corporation        18.08.2011        59,1MB        4.0.23   notwendig

IrfanView (remove only)        Irfan Skiljan        31.07.2012        1,50MB        4.32                          notwendig

iTunes        Apple Inc.        27.08.2012        184MB        10.6.3.25                                     notwendig 

Java(TM) 6 Update 31        Oracle        18.02.2012        95,1MB        6.0.310                               unnötig

Java(TM) 7 Update 5        Oracle        13.08.2012        99,3MB        7.0.50                                notwendig

JavaFX 2.1.1        Oracle Corporation        13.08.2012        20,8MB        2.1.1                         notwendig

JDownloader        AppWork UG (haftungsbeschränkt)        21.11.2010                                    notwendig                

jv16 PowerTools 2012        Macecraft Software        01.05.2012                                      notwendig

Kalenderchen 5        Daniel Manger        03.06.2011        4,99MB                                              notwendig

Logitech GamePanel Software 3.03.133        Logitech Inc.        19.11.2010        53,8MB        3.03.133      notwendig

Logitech Harmony Remote Software 7        Logitech        15.04.2011                7.7.0.0       notwendig

Logitech SetPoint 5.20        Logitech        19.11.2010        23,3MB        5.20                          notwendig

Malwarebytes Anti-Malware Version 1.62.0.1300        Malwarebytes Corporation        29.08.2012        18,7MB        1.62.0.1300   notwendig

MediaInfo 0.7.58        MediaArea.net        05.06.2012        10,7MB        0.7.58                        notwendig

mediAvatar PDF to EPUB Converter        mediAvatar        26.07.2011                1.0.5.0601    notwendig

Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        15.11.2010        38,8MB        4.0.30319  notwendig

Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        15.11.2010        2,93MB        4.0.30319  notwendig

Microsoft Camera Codec Pack        Microsoft Corporation        07.09.2011        16,9MB        16.0.0652.0621   notwendig

Microsoft LifeCam        Microsoft Corporation        16.01.2012        33,2MB        3.60.253.0               notwendig

Microsoft Money 2000                03.12.2010                                                         notwendig

Microsoft Office Excel Viewer        Microsoft Corporation        15.08.2012        207MB        12.0.6612.1000   notwendig

Microsoft PowerPoint Viewer        Microsoft Corporation        15.08.2012        212MB        14.0.6029.1000   notwendig

Microsoft Silverlight        Microsoft Corporation        17.05.2012        50,6MB        5.1.10411.0              notwendig

Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        14.06.2011        300KB        8.0.59193   notwendig

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570        Microsoft Corporation        28.04.2011        790KB        9.0.30729.5570  notwendig

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        28.04.2011        598KB        9.0.30729.5570  notwendig

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729        Microsoft Corporation        02.04.2012        242KB        9.0.30729                       notwendig

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17        Microsoft Corporation        14.02.2012        250KB        9.0.30729                       notwendig

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148        Microsoft Corporation        19.11.2010        788KB        9.0.30729.4148                  notwendig

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161        Microsoft Corporation        14.06.2011        788KB        9.0.30729.6161                  notwendig

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022        Microsoft Corporation        19.05.2011        2,86MB        9.0.21022                       notwendig

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411        Microsoft Corporation        11.02.2011        1,46MB        9.0.30411                       notwendig

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729        Microsoft Corporation        02.04.2012        230KB        9.0.30729                       notwendig

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        21.11.2010        596KB        9.0.30729                       notwendig

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        21.11.2010        596KB        9.0.30729.4148                  notwendig

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        14.06.2011        600KB        9.0.30729.6161                  notwendig

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219        Microsoft Corporation        11.10.2011        13,8MB        10.0.40219                      notwendig

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219        Microsoft Corporation        11.10.2011        15,0MB        10.0.40219                      notwendig

MKVToolNix 5.3.0        Moritz Bunkus        27.02.2012                5.3.0                                                                           unnötig

Mp3tag v2.52        Florian Heidenreich        27.07.2012                v2.52                                                                           notwendig

MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        13.07.2011        1,27MB        4.20.9870.0                                                     notwendig

MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        13.07.2011        1,33MB        4.20.9876.0                                                     notwendig

NEC Electronics USB 3.0 Host Controller Driver        NEC Electronics Corporation        20.11.2010        993KB        1.0.19.0                                notwendig

Nero 10 ClipartPack        Nero AG        29.04.2011        26,5MB        10.6.10000.11.0          notwendig

Nero 10 Kwik Themes 1        Nero AG        29.04.2011        25,9MB        10.6.10000.1.0           notwendig

Nero 10 Kwik Themes 2        Nero AG        29.04.2011        161MB        10.6.10000.2.0           notwendig

Nero 10 Kwik Themes 3        Nero AG        29.04.2011        164MB        10.6.10000.1.0           notwendig

Nero 10 Kwik Themes 4        Nero AG        23.04.2012        80,2MB        10.6.10100.1.0           notwendig

Nero 10 Menu TemplatePack 1        Nero AG        29.04.2011        59,7MB        10.6.10000.0.0   notwendig

Nero 10 Menu TemplatePack 2        Nero AG        29.04.2011        182MB        10.6.10000.0.0   notwendig

Nero 10 Menu TemplatePack 3        Nero AG        29.04.2011        241MB        10.6.10000.1.0   notwendig

Nero 10 PiP EffectPack 1        Nero AG        29.04.2011        73,9MB        10.6.10000.0.0   notwendig

Nero 10 Sample ImagePack        Nero AG        29.04.2011        5,85MB        10.6.10000.11.0  notwendig

Nero 10 Sample Videos        Nero AG        29.04.2011        42,0MB        10.6.10000.11.0          notwendig

Nero 10 Video TransitionPack 1        Nero AG        29.04.2011        32,6MB        10.6.10000.0.0   notwendig

Nero 11        Nero AG        10.10.2011        2,49GB        11.0.15500                               notwendig    

Nero BackItUp 10        Nero AG        23.04.2012        117MB        5.8.10600.6.100          notwendig

Nero Backup Drivers        Nero AG        10.10.2011        94,0KB        1.0.10000.1.0            notwendig

Nero Burning ROM 10        Nero AG        23.04.2012        168MB        10.6.10700.5.100         notwendig

Nero BurnRights 10        Nero AG        23.04.2012        6,15MB        4.4.10400.2.100          notwendig

Nero CoverDesigner 10        Nero AG        23.04.2012        91,4MB        5.6.10600.4.100          notwendig

Nero DiscSpeed 10        Nero AG        23.04.2012        7,21MB        6.4.10500.1.100          notwendig

Nero Express 10        Nero AG        23.04.2012        165MB        10.6.10800.6.100                 notwendig

Nero InfoTool 10        Nero AG        23.04.2012        8,07MB        7.4.10300.1.100          notwendig

Nero MediaHome 4        Nero AG        10.10.2011                                         notwendig

Nero Multimedia Suite 10 Platinum HD        Nero AG        29.04.2011        2,53GB        10.6.11800  notwendig

Nero Prerequisite Installer 1.0        Nero AG        15.04.2012        1,00MB        11.0.11500       notwendig

Nero Recode 10        Nero AG        23.04.2012        79,3MB        4.10.10700.5.100                 notwendig

Nero RescueAgent 10        Nero AG        29.04.2011        6,53MB        3.6.10500.3.100          notwendig

Nero SoundTrax 10        Nero AG        23.04.2012        98,2MB        4.10.10500.4.100         notwendig

Nero StartSmart 10        Nero AG        23.04.2012        143MB        10.6.10500.3.100         notwendig

Nero Toolbar        Ask.com        21.11.2010        1,65MB        1.6.9.0                          notwendig

Nero Vision 10        Nero AG        23.04.2012        223MB        7.4.11000.9.100                  notwendig

Nero WaveEditor 10        Nero AG        23.04.2012        79,1MB        5.10.10700.6.100         notwendig

Newsbin Pro        DJI Interprises, LLC        02.08.2012                6.40             notwendig

Noiseware Professional Plug-in        Imagenomic        07.03.2011        3,02MB        4.0.1.0  notwendig

OpticFilm 7200                19.08.2011                3.2.0                            notwendig

Perfectly Clear Plugin 1.6.0        Athentech        18.05.2012                1.6.0    notwendig

Photo Notifier and Animation Creator        IncrediMail Ltd.        23.01.2011                1.0.0.1009 unnötig

Picasa 3        Google, Inc.        25.12.2011                3.8                      notwendig

QuickPar 0.9        Peter B. Clements        09.07.2011                0.9              notwendig

QuickSFV        Totally Useful Software, Inc.        01.02.2011        247KB        3.0.0    notwendig

RapidShare Manager        RapidShare AG        15.01.2011                0.1              notwendig

Realtek Ethernet Controller Driver        Realtek        15.11.2010                7.27.920.2010  notwendig

Realtek HDMI Audio Driver for ATI        Realtek Semiconductor Corp.        15.11.2010                6.0.1.6121  notwendig

Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        15.11.2010                6.0.1.6215  notwendig

Remote Control USB Driver                15.04.2011                2.3.2.317      notwendig

Shadow Illuminator Pro        Intrigue Technologies, Inc.        25.05.2011        7,06MB        2.01.0008  notwendig

SilverFast UScan-SE        LaserSoft Imaging, Inc.        19.08.2011                                   notwendig        

Skype™ 5.10        Skype Technologies S.A.        23.07.2012        19,3MB        5.10.116                   notwendig

SoftMaker Office 2010        SoftMaker Software GmbH        16.05.2011        132MB        10.0.591           notwendig

SoftMaker Office Professional 2012        SoftMaker Software GmbH        02.11.2011        236MB        12.0.645  notwendig

Spyder3Express                20.07.2011        notwendig        

TextMaker Viewer        SoftMaker Software GmbH        12.03.2011        notwendig        

Total Commander 64-bit (Remove or Repair)        Ghisler Software GmbH        04.08.2012                8.01  notwendig

UScan-SE TWAIN        LaserSoft Imaging, Inc.        19.08.2011                                                      notwendig

User's Guides        Logitech        19.11.2010        43,3MB        1.20.0000                                     notwendig

Virtual CD v10        H+H Software GmbH        07.11.2011                10.10.14                              notwendig

Viveza 2        Nik Software, Inc.        27.04.2012                2.0.0.7                               notwendig

VLC media player 1.1.8        VideoLAN        24.03.2012                1.1.8                                 notwendig

VoipBuster        Finarea S.A. Switzerland        17.05.2012        20,9MB        4.09 build 662                notwendig

Web Assistant 2.0.0.457        IncrediBar        14.08.2012        2,02MB                                              unnötig

Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0)        Garmin        20.06.2012                04/19/2012 2.3.1.0  notwendig

Windows Live Essentials        Microsoft Corporation        16.01.2012                15.4.3538.0513    notwendig

WinRAR                22.11.2010                                                                  notwendig

XnView 1.98        Gougelet Pierre-e        22.06.2011        7,53MB        1.98                      notwendig