Windows 7 Firewall Fehlercode 0x8007042c
Hallo zusammen,
seit geraumer Zeit habe ich ein Problem mit meiner Windows 7 Firewall.
Es zeigt mir folgenden Fehler: Einige der Einstellungen können von der Windows-Firewall nicht geändert werden. Fehlercode 0x8007042c
Ich weiß nun nicht wie ich gegen diesen Fehler vorgehen kann und verspreche mir durch Euch Hilfe. Ich habe, wie von euch vorgeschrieben den OTL schonmal durchlaufen lassen, hier die Log's :
OTL Logfile: Code:
OTL logfile created on: 25.03.2013 17:12:14 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Besitzer01\Desktop\banner
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,48 Gb Available Physical Memory | 74,08% Memory free
4,00 Gb Paging File | 2,86 Gb Available in Paging File | 71,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,95 Gb Total Space | 3,41 Gb Free Space | 2,29% Space Free | Partition Type: NTFS
Drive D: | 298,08 Gb Total Space | 64,62 Gb Free Space | 21,68% Space Free | Partition Type: NTFS
Drive E: | 298,08 Gb Total Space | 188,56 Gb Free Space | 63,26% Space Free | Partition Type: NTFS
Computer Name: PC01 | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013.03.25 17:10:20 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Besitzer01\Desktop\banner\OTL.exe
PRC - [2013.03.25 17:09:25 | 000,050,477 | ---- | M] () -- C:\Users\Besitzer01\Desktop\banner\Defogger.exe
PRC - [2013.03.23 11:50:14 | 001,104,280 | ---- | M] (Spotify Ltd) -- C:\Users\Besitzer01\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2013.02.13 14:49:20 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) -- C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe
PRC - [2013.01.04 16:59:23 | 000,220,800 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\spool\drivers\w32x86\3\E_TATIHVE.EXE
PRC - [2012.12.01 05:38:02 | 001,821,032 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012.12.01 05:38:02 | 000,865,128 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012.11.30 22:43:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012.11.30 03:55:25 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2012.11.23 03:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012.09.13 00:38:44 | 000,204,136 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\LWS\Webcam Software\LWS.exe
PRC - [2012.07.17 14:49:00 | 001,713,904 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2012.07.17 14:49:00 | 000,194,304 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2012.07.03 08:04:58 | 000,507,312 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Common Files\Java\Java Update\jucheck.exe
PRC - [2012.06.18 15:17:48 | 000,088,576 | ---- | M] () -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2012.06.08 16:02:06 | 000,087,368 | ---- | M] (Nero AG) -- C:\Programme\HTC\HTC Sync Manager\HSMServiceEntry.exe
PRC - [2011.03.09 00:00:00 | 000,856,064 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Programme\EPSON Software\FAX Utility\FUFAXSTM.exe
PRC - [2011.03.09 00:00:00 | 000,495,616 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Programme\EPSON Software\FAX Utility\FUFAXRCV.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 04:17:58 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2010.11.20 04:16:56 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2010.10.12 13:56:40 | 000,979,328 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Programme\EPSON Software\Event Manager\EEventManager.exe
PRC - [2010.02.12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) -- C:\Programme\Creative\Shared Files\CTAudSvc.exe
PRC - [2009.12.04 15:48:54 | 001,728,512 | ---- | M] (VIA) -- C:\Programme\VIA\VIAudioi\VDeck\VDeck.exe
========== Modules (No Company Name) ==========
MOD - [2013.03.25 17:09:25 | 000,050,477 | ---- | M] () -- C:\Users\Besitzer01\Desktop\banner\Defogger.exe
MOD - [2012.09.13 00:38:52 | 007,955,304 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTGui4.dll
MOD - [2012.09.13 00:38:52 | 000,341,352 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTXml4.dll
MOD - [2012.09.13 00:38:52 | 000,127,336 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll
MOD - [2012.09.13 00:38:52 | 000,028,008 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll
MOD - [2012.09.13 00:38:44 | 002,144,104 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTCore4.dll
MOD - [2012.08.17 21:38:56 | 000,479,160 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll
MOD - [2012.05.30 19:06:48 | 000,087,912 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012.05.30 19:06:30 | 001,242,512 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012.01.08 14:41:12 | 000,093,696 | ---- | M] () -- C:\Programme\FileZilla FTP Client\fzshellext.dll
MOD - [2009.11.03 11:11:50 | 047,628,288 | ---- | M] () -- C:\Programme\VIA\VIAudioi\VDeck\skin.dll
MOD - [2009.05.07 16:53:18 | 000,106,496 | ---- | M] () -- C:\Programme\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
MOD - [2009.05.07 16:50:46 | 000,073,728 | ---- | M] () -- C:\Programme\VIA\VIAudioi\VDeck\QsApoApi.dll
MOD - [2009.03.26 14:46:42 | 000,148,480 | ---- | M] () -- C:\Windows\System32\APOMngr.DLL
MOD - [2009.03.17 11:39:46 | 000,148,992 | ---- | M] () -- C:\Windows\System32\OemSpiE.dll
MOD - [2009.02.06 18:52:24 | 000,073,728 | ---- | M] () -- C:\Windows\System32\CmdRtr.DLL
MOD - [2008.02.14 13:57:00 | 000,094,208 | ---- | M] () -- C:\Programme\VIA\VIAudioi\VDeck\VMicApi.dll
========== Services (SafeList) ==========
SRV - [2013.03.13 19:27:23 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.03.08 17:13:20 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.02.13 14:49:20 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe -- (AVP)
SRV - [2012.12.03 16:39:40 | 001,259,880 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.11.30 22:43:38 | 000,382,824 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012.11.27 19:05:39 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Programme\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2012.07.17 14:49:00 | 001,713,904 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2012.07.13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.06.18 15:17:48 | 000,088,576 | ---- | M] () [Auto | Running] -- C:\Programme\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2012.06.08 16:02:06 | 000,087,368 | ---- | M] (Nero AG) [Auto | Running] -- C:\Programme\HTC\HTC Sync Manager\HSMServiceEntry.exe -- (HTCMonitorService)
SRV - [2011.03.16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.11.20 04:17:58 | 001,121,792 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2010.02.12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Programme\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2010.01.09 21:37:50 | 004,640,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010.01.09 21:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009.07.14 02:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\RimUsb.sys -- (RimUsb)
DRV - [2013.02.13 15:02:23 | 000,589,144 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2013.02.13 15:02:23 | 000,043,608 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\kltdi.sys -- (kltdi)
DRV - [2012.12.03 16:39:40 | 009,373,032 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012.10.25 12:42:02 | 000,025,944 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2012.10.25 12:42:02 | 000,025,944 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klkbdflt.sys -- (klkbdflt)
DRV - [2012.10.12 08:40:54 | 000,406,528 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\t3.sys -- (t3)
DRV - [2012.09.21 20:09:06 | 004,261,224 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC)
DRV - [2012.09.21 20:09:00 | 000,310,504 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS)
DRV - [2012.08.13 16:49:44 | 000,144,344 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\kneps.sys -- (kneps)
DRV - [2012.08.02 15:09:30 | 000,024,408 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2012.06.19 17:28:12 | 000,136,024 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)
DRV - [2010.11.20 04:30:16 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 04:30:16 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 04:30:16 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 02:24:42 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 01:59:46 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 01:14:46 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 01:14:42 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010.08.12 11:07:48 | 000,298,216 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmf6232.sys -- (NVNET)
DRV - [2010.06.23 09:24:58 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\htcnprot.sys -- (htcnprot)
DRV - [2009.11.25 21:02:46 | 001,108,480 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2009.10.26 22:54:24 | 000,025,088 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ANDROIDUSB.sys -- (HTCAND32)
DRV - [2009.07.14 00:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009.07.13 23:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)
DRV - [2009.06.30 17:32:54 | 000,212,000 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2008.07.26 15:26:22 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2008.07.26 15:22:34 | 002,570,520 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LV302V32.SYS -- (PID_PEPI)
DRV - [2008.07.26 15:22:22 | 000,013,848 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lv302af.sys -- (pepifilter)
DRV - [2006.03.27 16:53:28 | 000,167,808 | ---- | M] (NETGEAR Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wg111v2.sys -- (RTLWUSB)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=111304&tt=4412_8&babsrc=HP_ss&mntrId=bc48a766000000000000002522386aa5
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 60 95 71 BB 1F 85 CD 01 [binary data]
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found
IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{021126A6-A8D3-4488-82AA-4410F45AEEA4}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://search.babylon.com/?q={searchTerms}&affID=111304&tt=4412_8&babsrc=SP_ss&mntrId=bc48a766000000000000002522386aa5
IE - HKCU\..\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}: "URL" = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://search.babylon.com/?affID=111304&tt=4412_8&babsrc=HP_ss&mntrId=bc48a766000000000000002522386aa5"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}: C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ [2013.01.12 16:02:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com [2013.02.13 15:02:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com [2013.02.13 15:02:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com [2013.02.13 15:02:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.08 17:13:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.03.08 17:13:17 | 000,000,000 | ---D | M]
[2012.04.01 18:41:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Besitzer01\AppData\Roaming\mozilla\Extensions
[2012.12.11 16:40:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Besitzer01\AppData\Roaming\mozilla\Firefox\Profiles\ryfh68be.default\extensions
[2012.12.11 16:40:21 | 000,036,098 | ---- | M] () (No name found) -- C:\Users\Besitzer01\AppData\Roaming\mozilla\firefox\profiles\ryfh68be.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2012.11.04 17:04:17 | 000,002,536 | ---- | M] () -- C:\Users\Besitzer01\AppData\Roaming\mozilla\firefox\profiles\ryfh68be.default\searchplugins\browsemngr.xml
[2013.03.08 17:13:16 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.03.08 17:13:21 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.11.29 10:19:31 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.11.04 17:03:54 | 000,002,349 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012.11.29 10:19:31 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.11.29 10:19:31 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.11.29 10:19:32 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.11.29 10:19:31 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.11.29 10:19:31 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
========== Chrome ==========
CHR - default_search_provider: Search the web (Babylon) (Enabled)
CHR - default_search_provider: search_url = hxxp://search.babylon.com/?q={searchTerms}&affID=111304&tt=4412_8&babsrc=SP_ss&mntrId=bc48a766000000000000002522386aa5
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: hxxp://search.babylon.com/?affID=111304&tt=4412_8&babsrc=HP_ss&mntrId=bc48a766000000000000002522386aa5
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.97\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\25.0.1364.97\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - Extension: YouTube = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Google-Suche = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Modul zur Link-Untersuchung = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_0\
CHR - Extension: Babylon Toolbar = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.8_0\
CHR - Extension: Modul f\u00FCr das Blockieren gef\u00E4hrlicher Webseiten = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_0\
CHR - Extension: Virtuelle Tastatur = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4190_0\
CHR - Extension: DVDVideoSoft Browser Extension = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.1_0\
CHR - Extension: Google Mail = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: OneClickDownload = C:\Users\Besitzer01\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.2_0\
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Programme\BabylonToolbar\BabylonToolbar\1.8.3.8\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Programme\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Programme\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Programme\BabylonToolbar\BabylonToolbar\1.8.3.8\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [FUFAXRCV] C:\Program Files\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [LWS] C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [ROC_roc_ssl_v12] "C:\Program Files\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 File not found
O4 - HKLM..\Run: [SPIRunE] C:\Windows\System32\SpiRunE.dll (Creative Technology Ltd.)
O4 - HKLM..\Run: [VIAAUD] C:\Program Files\VIA\VIAudioi\VDeck\VIAAUD.exe File not found
O4 - HKCU..\Run: [EPLTarget\P0000000000000000] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_TATIHVE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\Besitzer01\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKCU..\Run: [spotimote] C:\Program Files\spotimote\spotimote.exe ()
O4 - HKCU..\Run: [Steam] D:\MW3\Steam.exe (Valve Corporation)
O4 - Startup: C:\Users\Besitzer01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Besitzer01\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Users\Besitzer01\AppData\Roaming\svcHost.exe\boot (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Users\Besitzer01\AppData\Roaming\svcHost.exe\boot (Microsoft Corporation)
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Besitzer01\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Virtuelle Tastatur - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Programme\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Programme\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Links untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 10.15.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{48A57830-E6CE-4538-8515-1A516887B6E1}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\23796~1.11\{16cdf~1\browse~1.dll) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010.09.15 14:32:26 | 000,000,000 | ---- | M] () - E:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{aa47775b-5cad-11e2-b8c1-002522386aa5}\Shell - "" = AutoRun
O33 - MountPoints2\{aa47775b-5cad-11e2-b8c1-002522386aa5}\Shell\AutoRun\command - "" = H:\HTC_Sync_Manager_PC.exe
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\HTC_Sync_Manager_PC.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013.03.23 14:43:38 | 000,000,000 | ---D | C] -- C:\Windows\rescache
[2013.03.18 19:46:44 | 000,000,000 | ---D | C] -- C:\Users\Besitzer01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2013.03.18 16:21:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2013.03.18 16:00:36 | 000,000,000 | ---D | C] -- C:\Users\Besitzer01\Desktop\lov
[2013.03.08 17:13:16 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.03.07 15:55:28 | 000,000,000 | ---D | C] -- C:\Users\Besitzer01\Desktop\asd
========== Files - Modified Within 30 Days ==========
File not found -- C:\Windows\System32\
[2013.03.25 17:09:44 | 000,000,000 | ---- | M] () -- C:\Users\Besitzer01\defogger_reenable
[2013.03.25 17:01:04 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.03.25 16:17:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.03.25 15:44:59 | 000,014,624 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.03.25 15:44:59 | 000,014,624 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.03.25 15:37:42 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.03.25 15:37:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.03.25 15:37:20 | 000,000,000 | ---- | M] () -- C:\Windows\System32\drivers\lvuvc.hs
[2013.03.25 15:37:18 | 1610,063,872 | -HS- | M] () -- C:\hiberfil.sys
[2013.03.23 11:41:49 | 000,025,185 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013.03.18 19:46:44 | 000,000,199 | ---- | M] () -- C:\Users\Besitzer01\Desktop\Call of Duty Modern Warfare 3.url
[2013.03.18 19:46:44 | 000,000,199 | ---- | M] () -- C:\Users\Besitzer01\Desktop\Call of Duty Modern Warfare 3 - Multiplayer.url
[2013.03.18 19:46:44 | 000,000,199 | ---- | M] () -- C:\Users\Besitzer01\Desktop\Call of Duty Modern Warfare 3 - Dedicated Server.url
[2013.03.18 08:58:59 | 000,003,819 | ---- | M] () -- C:\Users\Besitzer01\Desktop\product-dt_separate_sticky_normal.xml
[2013.03.15 17:59:40 | 000,000,053 | ---- | M] () -- C:\Users\Besitzer01\Desktop\googled3bb6ab6c5fe1e69.html
[2013.03.01 21:14:40 | 000,660,135 | ---- | M] () -- C:\Users\Besitzer01\Desktop\DSCF1370.jpg
[2013.02.25 12:38:25 | 000,657,660 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.02.25 12:38:25 | 000,618,936 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.02.25 12:38:25 | 000,131,032 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.02.25 12:38:25 | 000,107,256 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.02.25 12:06:05 | 004,400,640 | ---- | M] () -- C:\Users\Besitzer01\Desktop\Lackieren im Offsetdruck.pps
[2013.02.25 11:59:15 | 001,560,001 | ---- | M] () -- C:\Users\Besitzer01\Desktop\img016.jpg
[2013.02.25 11:43:45 | 001,312,725 | ---- | M] () -- C:\Users\Besitzer01\Desktop\img015.jpg
[2013.02.25 11:40:48 | 001,309,083 | ---- | M] () -- C:\Users\Besitzer01\Desktop\img018.jpg
[2013.02.25 11:34:14 | 000,141,747 | ---- | M] () -- C:\Users\Besitzer01\Desktop\lackierwerkaufbau.png
========== Files Created - No Company Name ==========
File not found -- C:\Windows\System32\
[2013.03.25 17:09:44 | 000,000,000 | ---- | C] () -- C:\Users\Besitzer01\defogger_reenable
[2013.03.23 11:41:49 | 000,025,185 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013.03.18 19:46:44 | 000,000,199 | ---- | C] () -- C:\Users\Besitzer01\Desktop\Call of Duty Modern Warfare 3.url
[2013.03.18 19:46:44 | 000,000,199 | ---- | C] () -- C:\Users\Besitzer01\Desktop\Call of Duty Modern Warfare 3 - Multiplayer.url
[2013.03.18 19:46:44 | 000,000,199 | ---- | C] () -- C:\Users\Besitzer01\Desktop\Call of Duty Modern Warfare 3 - Dedicated Server.url
[2013.03.18 08:57:16 | 000,003,819 | ---- | C] () -- C:\Users\Besitzer01\Desktop\product-dt_separate_sticky_normal.xml
[2013.03.15 17:59:25 | 000,000,053 | ---- | C] () -- C:\Users\Besitzer01\Desktop\googled3bb6ab6c5fe1e69.html
[2013.03.01 21:13:13 | 000,660,135 | ---- | C] () -- C:\Users\Besitzer01\Desktop\DSCF1370.jpg
[2013.02.25 12:06:02 | 004,400,640 | ---- | C] () -- C:\Users\Besitzer01\Desktop\Lackieren im Offsetdruck.pps
[2013.02.25 11:59:12 | 001,560,001 | ---- | C] () -- C:\Users\Besitzer01\Desktop\img016.jpg
[2013.02.25 11:43:43 | 001,312,725 | ---- | C] () -- C:\Users\Besitzer01\Desktop\img015.jpg
[2013.02.25 11:40:45 | 001,309,083 | ---- | C] () -- C:\Users\Besitzer01\Desktop\img018.jpg
[2013.02.25 11:34:09 | 000,141,747 | ---- | C] () -- C:\Users\Besitzer01\Desktop\lackierwerkaufbau.png
[2013.01.05 21:16:04 | 000,000,000 | ---- | C] () -- C:\Windows\EEventManager.INI
[2012.11.27 19:00:59 | 000,148,480 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL
[2012.11.27 19:00:59 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL
[2012.11.27 19:00:57 | 000,001,436 | ---- | C] () -- C:\Windows\CfgHPSp.ini
[2012.11.27 19:00:57 | 000,001,434 | ---- | C] () -- C:\Windows\Cfg05Sp.ini
[2012.11.27 19:00:57 | 000,001,434 | ---- | C] () -- C:\Windows\Cfg04Sp.ini
[2012.11.27 19:00:57 | 000,001,091 | ---- | C] () -- C:\Windows\Cfg03Sp.ini
[2012.11.27 19:00:57 | 000,001,091 | ---- | C] () -- C:\Windows\Cfg02Sp.ini
[2012.11.27 19:00:57 | 000,001,000 | ---- | C] () -- C:\Windows\Cfg01Sp.ini
[2012.11.27 19:00:57 | 000,000,932 | ---- | C] () -- C:\Windows\CfgHPHp.ini
[2012.11.27 19:00:57 | 000,000,932 | ---- | C] () -- C:\Windows\CfgHPDO.ini
[2012.11.27 19:00:57 | 000,000,932 | ---- | C] () -- C:\Windows\Cfg05DO.ini
[2012.11.27 19:00:57 | 000,000,932 | ---- | C] () -- C:\Windows\Cfg04DO.ini
[2012.11.27 19:00:57 | 000,000,930 | ---- | C] () -- C:\Windows\Cfg05Hp.ini
[2012.11.27 19:00:57 | 000,000,930 | ---- | C] () -- C:\Windows\Cfg04Hp.ini
[2012.11.27 19:00:57 | 000,000,725 | ---- | C] () -- C:\Windows\Cfg03Hp.ini
[2012.11.27 19:00:57 | 000,000,725 | ---- | C] () -- C:\Windows\Cfg03DO.ini
[2012.11.27 19:00:57 | 000,000,725 | ---- | C] () -- C:\Windows\Cfg02Hp.ini
[2012.11.27 19:00:57 | 000,000,725 | ---- | C] () -- C:\Windows\Cfg02DO.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\CfgHPRMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\CfgHPRLI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\CfgHPFMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\CfgHPDI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg05RMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg05RLI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg05FMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg05DI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg04RMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg04RLI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg04FMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg04DI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg03RMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg03RLI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg03FMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg03DI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg02RMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg02RLI.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg02FMi.ini
[2012.11.27 19:00:57 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg02DI.ini
[2012.11.27 19:00:56 | 000,000,818 | ---- | C] () -- C:\Windows\Cfg01APR.ini
[2012.11.27 19:00:56 | 000,000,725 | ---- | C] () -- C:\Windows\Cfg01Hp.ini
[2012.11.27 19:00:56 | 000,000,725 | ---- | C] () -- C:\Windows\Cfg01DO.ini
[2012.11.27 19:00:56 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg01Mic.ini
[2012.11.27 19:00:56 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg01LI.ini
[2012.11.27 19:00:56 | 000,000,453 | ---- | C] () -- C:\Windows\Cfg01DI.ini
[2012.11.04 17:06:27 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2012.11.04 17:03:51 | 000,107,520 | RHS- | C] () -- C:\Windows\System32\TAKDSDecoder.dll
[2012.10.30 12:16:16 | 000,033,116 | ---- | C] () -- C:\Windows\System32\t3.ini
[2012.09.21 20:08:36 | 010,919,784 | ---- | C] () -- C:\Windows\System32\LogiDPP.dll
[2012.09.21 20:08:36 | 000,338,136 | ---- | C] () -- C:\Windows\System32\DevManagerCore.dll
[2012.09.21 20:08:36 | 000,103,272 | ---- | C] () -- C:\Windows\System32\LogiDPPApp.exe
[2012.07.29 16:51:04 | 000,000,058 | ---- | C] () -- C:\Windows\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2012.07.29 16:51:04 | 000,000,058 | ---- | C] () -- C:\Users\Besitzer01\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2012.07.03 12:05:52 | 000,000,600 | ---- | C] () -- C:\Users\Besitzer01\AppData\Local\PUTTY.RND
[2012.05.31 19:44:25 | 000,083,968 | ---- | C] () -- C:\Windows\UnGins.exe
[2012.05.29 12:15:08 | 000,138,056 | ---- | C] () -- C:\Users\Besitzer01\AppData\Roaming\PnkBstrK.sys
[2012.05.28 15:07:50 | 000,140,496 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012.05.28 15:07:45 | 000,280,736 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2012.05.28 15:07:20 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2012.04.09 15:28:01 | 000,007,602 | ---- | C] () -- C:\Users\Besitzer01\AppData\Local\Resmon.ResmonCfg
[2012.04.04 14:40:40 | 000,000,393 | ---- | C] () -- C:\Users\Besitzer01\AppData\Roaming\burnaware.ini
[2012.01.18 06:22:54 | 000,028,418 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini
[2010.12.16 18:51:17 | 000,000,008 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2005.04.08 03:16:43 | 000,021,295 | -H-- | C] () -- C:\Users\Besitzer01\AppData\Roaming\Timlog.dat
========== ZeroAccess Check ==========
[2011.11.17 06:38:39 | 000,002,048 | -HS- | M] () -- C:\Windows\Installer\{523227a7-4b7e-1be2-a255-9dcd27a40d24}\@
[2011.11.17 06:38:39 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\{523227a7-4b7e-1be2-a255-9dcd27a40d24}\L
[2013.02.14 16:35:11 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\{523227a7-4b7e-1be2-a255-9dcd27a40d24}\U
[2011.11.17 06:38:39 | 000,002,048 | -HS- | M] () -- C:\Users\Besitzer01\AppData\Local\{523227a7-4b7e-1be2-a255-9dcd27a40d24}\@
[2012.07.30 17:46:44 | 000,000,000 | -HSD | M] -- C:\Users\Besitzer01\AppData\Local\{523227a7-4b7e-1be2-a255-9dcd27a40d24}\L
[2013.02.14 16:35:56 | 000,000,000 | -HSD | M] -- C:\Users\Besitzer01\AppData\Local\{523227a7-4b7e-1be2-a255-9dcd27a40d24}\U
[2012.07.30 17:46:44 | 000,000,804 | ---- | M] () -- C:\Users\Besitzer01\AppData\Local\{523227a7-4b7e-1be2-a255-9dcd27a40d24}\L\00000004.@
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"ThreadingModel" = Both
"" = C:\Users\Besitzer01\AppData\Local\{523227a7-4b7e-1be2-a255-9dcd27a40d24}\n.
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 04:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2012.05.28 14:59:41 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\.minecraft
[2012.11.04 17:09:50 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\AnvSoft
[2012.11.04 17:03:43 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Babylon
[2012.11.04 17:04:16 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\BabylonToolbar
[2012.07.29 16:51:04 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\DonationCoder
[2013.03.25 15:38:13 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Dropbox
[2013.01.12 16:02:20 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\DVDVideoSoft
[2013.01.12 16:02:37 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\DVDVideoSoftIEHelpers
[2013.01.12 15:18:37 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Epson
[2013.03.15 18:00:54 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\FileZilla
[2012.09.08 16:44:49 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\HTC
[2012.09.16 11:53:56 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\HTC Sync
[2013.03.25 17:10:51 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\ICQ
[2013.01.04 14:09:39 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\ICQ-Profile
[2012.10.09 17:27:57 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\inifiles
[2013.01.03 17:06:38 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Leadertech
[2012.05.27 13:57:20 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\OpenOffice.org
[2012.09.16 11:53:56 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Outlook
[2012.10.12 13:38:54 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Party
[2012.04.01 18:32:28 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\PC Cleaners
[2012.06.01 19:17:35 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\PCPro
[2013.01.11 17:17:12 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\PhotoScape
[2012.09.18 19:57:27 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Publish Providers
[2012.09.19 15:33:18 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Sony
[2013.03.25 16:08:16 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\Spotify
[2013.02.15 20:00:00 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\spotimote
[2012.06.03 15:51:18 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\svcHost.exe
[2012.08.05 14:44:03 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\TS3Client
[2012.06.04 21:00:36 | 000,000,000 | ---D | M] -- C:\Users\Besitzer01\AppData\Roaming\uTorrent
========== Purity Check ==========
< End of report >
--- --- ---
Und die Extras Datei.
OTL Logfile: Code:
OTL Extras logfile created on: 25.03.2013 17:12:14 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Besitzer01\Desktop\banner
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,48 Gb Available Physical Memory | 74,08% Memory free
4,00 Gb Paging File | 2,86 Gb Available in Paging File | 71,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,95 Gb Total Space | 3,41 Gb Free Space | 2,29% Space Free | Partition Type: NTFS
Drive D: | 298,08 Gb Total Space | 64,62 Gb Free Space | 21,68% Space Free | Partition Type: NTFS
Drive E: | 298,08 Gb Total Space | 188,56 Gb Free Space | 63,26% Space Free | Partition Type: NTFS
Computer Name: PC01 | User Name: Tim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00514709-D0BF-4C47-9858-2AA4042F6E91}" = Offerte_L
"{03CC9D58-B132-4CC0-A521-4F3660AA43C7}" = Movie Maker
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video
"{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}" = Epson FAX Utility
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi
"{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main
"{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin
"{23170F69-40C1-2701-0465-000001000000}" = 7-Zip 4.65
"{26A24AE4-039D-4CA4-87B4-2F83216032FF}" = Java(TM) 6 Update 32
"{26A24AE4-039D-4CA4-87B4-2F83217015FF}" = Java 7 Update 15
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CBD94C1-BA15-488C-888B-D8DD296CC6DC}" = Fotogalerie
"{3E31400D-274E-4647-916C-2CACC3741799}" = EpsonNet Print
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT
"{41CE67B3-7766-4CC0-9E5A-D28DF12072E7}" = HTC Sync Manager
"{492F8345-095D-467F-926C-278870D93ECF}" = Windows Small Business Server 2008 ClientAgent
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Anti-Virus 2013
"{5B65536C-4AAE-41FE-BDCE-CDAD8C893340}" = INFORM
"{6554815C-24E2-4B54-AE6D-E3BB0D824043}" = INFORM
"{690F5BA3-5DEB-42CD-962B-F687EE59FAA7}" = Windows Live Essentials
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{6AD9F5F3-5BD0-4000-BD9C-B536CF86D988}" = iTunes
"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer
"{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery
"{70CB6C40-8DF1-11E1-BDCF-F04DA23A5C58}" = MSVCRT Redists
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{8256F87F-8554-4457-8C3D-3F3324697D9F}" = Windows Live ID Sign-in Assistant
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{8D1E61D1-1395-4E97-997F-D002DB3A5074}" = OpenOffice.org 3.2
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{8F1ADE4D-EFAC-4F5A-B346-23C2687FAF50}" = Apple Mobile Device Support
"{8F311E72-C27F-4DF0-8254-B739A1831668}_is1" = SUPER © v2012.build.53 (Sep 13, 2012) Version v2012.build.53
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A95000000001}" = Adobe Reader 9.5.3 - Deutsch
"{AE364ACC-B9DF-466B-B4EA-AEECD0CD581E}" = Windows Live Messenger
"{B2D55EB8-32C5-4B43-9006-9E97DECBA178}" = Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 310.70
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B727564C-47D3-473A-AC9E-F4BE7B1BD5D3}" = Windows Live UX Platform Language Pack
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam-Software
"{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}" = Epson Connect Printer Setup
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E1203F8C-FF34-4968-A4A5-B4F1F8533DAB}" = Photo Common
"{E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}" = Babylon Chrome Toolbar
"{E728441A-7820-4B1C-87C9-DE7BE37B2953}" = Download Navigator
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F2235E5E-7881-4293-9B6F-04B2609FBFF0}" = Windows Live Messenger
"{F3CA9611-CD42-4562-ADAB-A554CF8E17F1}" = Microsoft WSE 2.0 SP3 Runtime
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}" = Epson Event Manager
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FFF841F3-9A15-4F61-BD16-C19F132E5A27}" = Epson Easy Photo Print 2
"1ClickDownload" = 1ClickDownloader
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Any Video Converter_is1" = Any Video Converter 3.5.6
"AudioCS" = Creative Audio-Systemsteuerung
"BabylonToolbar" = Babylon toolbar
"BurnAware Free_is1" = BurnAware Free 5.1
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"Creative Sound Blaster Properties" = Eigenschaften von Creative Sound Blaster
"EPSON BX635FWD Series" = EPSON BX635FWD Series Printer Uninstall
"EPSON PC-FAX Driver 2" = Epson PC-FAX Driver
"EPSON Scanner" = EPSON Scan
"FileZilla Client" = FileZilla Client 3.5.3
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.37.1212
"Google Chrome" = Google Chrome
"Host OpenAL" = Host OpenAL
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Anti-Virus 2013
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"MobMap_is1" = MobMap 4.31
"Mozilla Firefox 19.0.2 (x86 de)" = Mozilla Firefox 19.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Network Print Monitor" = Network Print Monitor for Windows
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.SingleImage" = Microsoft Office Home and Business 2010
"PhotoScape" = PhotoScape
"PIXresizer_is1" = PIXresizer
"PunkBusterSvc" = PunkBuster Services
"spotimote" = spotimote
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer
"Steam App 42750" = Call of Duty: Modern Warfare 3 - Dedicated Server
"VLC media player" = VLC media player 1.1.4
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.11 (32-Bit)
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Spotify" = Spotify
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 24.08.2012 05:59:04 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 24.08.2012 07:00:09 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 25.08.2012 11:08:16 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 26.08.2012 07:00:10 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 27.08.2012 09:14:03 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 28.08.2012 09:28:49 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 29.08.2012 13:48:36 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 30.08.2012 09:15:10 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 31.08.2012 11:05:59 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
Error - 01.09.2012 07:00:09 | Computer Name = PC01 | Source = Windows Backup | ID = 4103
Description =
[ Media Center Events ]
Error - 13.01.2011 15:39:27 | Computer Name = PC01.schulzbau.local | Source = MCUpdate | ID = 0
Description = 20:39:27 - ClientUpdate konnte nicht abgerufen werden (Fehler: Timeout
für Vorgang überschritten)
Error - 13.01.2011 15:42:53 | Computer Name = PC01.schulzbau.local | Source = MCUpdate | ID = 0
Description = 20:41:13 - MCEClientUX konnte nicht abgerufen werden (Fehler: Timeout
für Vorgang überschritten)
[ System Events ]
Error - 25.03.2013 10:37:23 | Computer Name = PC01 | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?25.?03.?2013 um 15:35:49 unerwartet heruntergefahren.
Error - 25.03.2013 10:37:26 | Computer Name = PC01 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Basisfiltermodul" wurde mit folgendem Fehler beendet:
%%5
Error - 25.03.2013 10:37:26 | Computer Name = PC01 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Windows-Firewall" ist vom Dienst "Basisfiltermodul" abhängig,
der aufgrund folgenden Fehlers nicht gestartet wurde: %%5
Error - 25.03.2013 10:37:35 | Computer Name = PC01 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "IKE- und AuthIP IPsec-Schlüsselerstellungsmodule" ist
vom Dienst "Basisfiltermodul" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde: %%5
Error - 25.03.2013 10:37:35 | Computer Name = PC01 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "IPsec-Richtlinien-Agent" ist vom Dienst "Basisfiltermodul"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%5
Error - 25.03.2013 10:37:35 | Computer Name = PC01 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem
Fehler beendet: %%-2147024891
Error - 25.03.2013 10:38:07 | Computer Name = PC01 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem
Fehler beendet: %%-2147024891
Error - 25.03.2013 10:38:07 | Computer Name = PC01 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2147024891
Error - 25.03.2013 10:39:36 | Computer Name = PC01 | Source = Service Control Manager | ID = 7038
Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"
mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern
Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
Management Console (MMC).
Error - 25.03.2013 10:39:36 | Computer Name = PC01 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden
Fehlers nicht gestartet: %%1069
< End of report >
--- --- ---
Und der gmer Log:
GMER Logfile: Code:
GMER 2.1.19155 - hxxp://www.gmer.net
Rootkit scan 2013-03-25 18:11:42
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\0000005f WDC_WD16 rev.05.0 149,05GB
Running: gmer_2.1.19155.exe; Driver: C:\Users\BESITZ~1\AppData\Local\Temp\pgddapog.sys
---- System - GMER 2.1 ----
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwAdjustPrivilegesToken [0x8FC93208]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwAlpcConnectPort [0x8FC46FB8]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwAlpcCreatePort [0x8FC47300]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwAlpcSendWaitReceivePort [0x8FC47746]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwClose [0x8FC2F91E]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwConnectPort [0x8FC46C92]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateEvent [0x8FC2FE96]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateMutant [0x8FC2FD7C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreatePort [0x8FC47164]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateSection [0x8FC96072]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateSemaphore [0x8FC2FFB6]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateSymbolicLinkObject [0x8FC57130]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateThread [0x8FC9550A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateThreadEx [0x8FC9574A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateUserProcess [0x8FC951AE]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwCreateWaitablePort [0x8FC47232]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwDebugActiveProcess [0x8FC95054]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwDeviceIoControlFile [0x8FC2F962]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwDuplicateObject [0x8FC9334A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwLoadDriver [0x8FC92FB2]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwMapViewOfSection [0x8FC57150]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwNotifyChangeKey [0x8FC45422]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwOpenEvent [0x8FC2FF2C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwOpenMutant [0x8FC2FE0C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwOpenProcess [0x8FC94BFC]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwOpenSection [0x8FC9631E]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwOpenSemaphore [0x8FC3004C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwOpenThread [0x8FC95266]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwPlugPlayControl [0x8FC57140]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwQueryDirectoryObject [0x8FC300D6]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwQueryObject [0x8FC45630]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwQueueApcThread [0x8FC95D20]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwReplyPort [0x8FC4752A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwReplyWaitReceivePort [0x8FC473B8]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwReplyWaitReceivePortEx [0x8FC4746E]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwRequestWaitReplyPort [0x8FC4759A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwResumeThread [0x8FC95A4C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwSecureConnectPort [0x8FC46E20]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwSetContextThread [0x8FC95BA8]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwSetInformationToken [0x8FC30178]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwSetSystemInformation [0x8FC930BC]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwSuspendProcess [0x8FC94D9C]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwSuspendThread [0x8FC958F4]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwSystemDebugControl [0x8FC3018A]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwTerminateProcess [0x8FC94EFC]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwTerminateThread [0x8FC95406]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwUnmapViewOfSection [0x8FC96486]
SSDT \SystemRoot\system32\DRIVERS\klif.sys ZwWriteVirtualMemory [0x8FC961B0]
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 82E479E9 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82E811C2 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 10D7 82E881EC 4 Bytes [08, 32, C9, 8F]
.text ntkrnlpa.exe!KeRemoveQueueEx + 10FF 82E88214 8 Bytes [B8, 6F, C4, 8F, 00, 73, C4, ...]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1143 82E88258 4 Bytes [46, 77, C4, 8F]
.text ntkrnlpa.exe!KeRemoveQueueEx + 116F 82E88284 4 Bytes [1E, F9, C2, 8F]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1193 82E882A8 4 Bytes [92, 6C, C4, 8F]
.text ...
---- User code sections - GMER 2.1 ----
? C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[1776] C:\Windows\SYSTEM32\ntdll.dll time/date stamp mismatch;
.text C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[1776] ntdll.dll!NtProtectVirtualMemory 776C5F18 5 Bytes JMP 6FAE1A54 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\ushata.dll
? C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[1776] C:\Windows\system32\kernel32.dll time/date stamp mismatch; unknown module: 0.dllunknown module: KERNELBASE.dll
.text C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[1776] user32.dll!NotifyWinEvent + 6AE 75A4D66C 4 Bytes [53, 2A, AE, 6F]
? C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[2868] C:\Windows\SYSTEM32\ntdll.dll time/date stamp mismatch;
.text C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[2868] ntdll.dll!NtProtectVirtualMemory 776C5F18 5 Bytes JMP 6FAE1A54 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\ushata.dll
? C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[2868] C:\Windows\system32\kernel32.dll time/date stamp mismatch; unknown module: 0.dllunknown module: KERNELBASE.dll
.text C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe[2868] user32.dll!NotifyWinEvent + 6AE 75A4D66C 4 Bytes [53, 2A, AE, 6F]
---- Devices - GMER 2.1 ----
AttachedDevice \Driver\tdx \Device\Tcp kltdi.sys
AttachedDevice \Driver\tdx \Device\Udp kltdi.sys
AttachedDevice \Driver\tdx \Device\RawIp kltdi.sys
---- EOF - GMER 2.1 ----
--- --- ---
Vielen Dank im Vorraus, ich weiß echt nicht weiter.
Tim |
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.