Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   CPU Auslastung im Leerlauf bei 100% (https://www.trojaner-board.de/147294-cpu-auslastung-leerlauf-100-a.html)

Sportler19 04.01.2014 14:32
CPU Auslastung im Leerlauf bei 100%
 
Hallo liebes Forum, ich habe wirklich nicht viel Ahnung von Computern und ich hoffe ich bin im richtigen Forum gelandet.

Ich habe Windwos XP mit einem AMD Athlon 1,24 GHz und 1,5GB RAM (selbst diese Begriffe sind für mich unbekannt)

Der PC hat sehr wenige Datein gespeichert: Auf C sind 99GB frei, auf F sind 114GB frei

Das Problem: Die CPU Auslastung liegt bei 100% im Leerlauf. SVCHOST.EXE benötigt meist über 90% davon.

Nach einigen Stunden Recherche habe ich mir den SecurityTasManager heruntergeladen und das System damit überprüft. Das Ergebnis kann ich nicht beurteilen, es ist lediglich ein so genannter GrooveShellExtensions Module als potentiell gefährlich erkannt worden.

Wichtig wäre noch zu sagen das mein PC einfach seeehr langsam ist (das liegt wohl an der Auslastung) und ich würde mich freuen wenn Ich hier geholfen werde...

aharonov 04.01.2014 14:37
Hallo,

mach bitte einen FRST-Scan:


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Sportler19 04.01.2014 15:41
Hallo Leo, danke für die schnelle Antwort.

Ich habe den Scan durchgeführt aber wie bekomme ich das ganze jetzt in den Thread? Das # Symbol habe ich gesehen aber was genau soll ich tun?

Soll ich den ganzen Text hier rein kopieren??

aharonov 04.01.2014 15:48
Zitat:
Soll ich den ganzen Text hier rein kopieren??
Ja, einfach den ganzen Text innerhalb der Codetags (welche du ausschreiben oder per #-Symbol erstellen kannst) einfügen. Also so:

[code]Inhalt des Logfiles[/code]

Sportler19 04.01.2014 15:54
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-01-2014
Ran by Dinan (administrator) on DINO-6FF9828A57 on 04-01-2014 15:35:35
Running from C:\Dokumente und Einstellungen\Dinan\Eigene Dateien\Downloads
Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\WINXP\system32\smss.exe
(Microsoft Corporation) C:\WINXP\system32\csrss.exe
(Microsoft Corporation) C:\WINXP\system32\winlogon.exe
(Microsoft Corporation) C:\WINXP\system32\services.exe
(Microsoft Corporation) C:\WINXP\system32\lsass.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\explorer.exe
(Microsoft Corporation) C:\WINXP\system32\spoolsv.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Sun Microsystems, Inc.) C:\Programme\Java\jre6\bin\jqs.exe
(Microsoft Corporation) C:\WINXP\system32\rundll32.exe
(Microsoft Corporation) C:\WINXP\system32\rundll32.exe
(Microsoft Corporation) C:\WINXP\system32\ctfmon.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe
(NVIDIA Corporation) C:\WINXP\system32\nvsvc32.exe
(PCtel, Inc.) C:\WINXP\system32\pctspk.exe
(Microsoft Corporation) C:\WINXP\system32\svchost.exe
(Microsoft Corporation) C:\WINXP\system32\alg.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(APN LLC.) C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe
(APN) C:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\plugin-container.exe
(Microsoft Corporation) C:\WINXP\system32\wbem\wmiprvse.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINXP\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [nwiz] - nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\WINXP\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Adobe ARM] - C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [BluetoothAuthenticationAgent] - rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] - C:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKLM\...\RunOnce: [PIP] - C:\DOKUME~1\Dinan\LOKALE~1\Temp\Offercast_AVIRAV7_.exe -pid AVIRAV7 -rebootRetry [1326512 2013-12-09] (Ask.com)
HKLM\...\Winlogon: [Userinit] C:\WINXP\system32\userinit.exe,
HKLM\...\Winlogon: [Shell] Explorer.exe [x ] ()
HKLM\...\Winlogon: [UIHost] logonui.exe [x ] ()
Winlogon\Notify\crypt32chain: crypt32.dll [X]
Winlogon\Notify\cryptnet: cryptnet.dll [X]
Winlogon\Notify\cscdll: cscdll.dll [X]
Winlogon\Notify\dimsntfy: %SystemRoot%\System32\dimsntfy.dll [X]
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
Winlogon\Notify\Schedule: wlnotify.dll [X]
Winlogon\Notify\sclgntfy: sclgntfy.dll [X]
Winlogon\Notify\SensLogn: WlNotify.dll [X]
Winlogon\Notify\termsrv: wlnotify.dll [X]
Winlogon\Notify\wlballoon: wlnotify.dll [X]
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKCU\...\Run: [ctfmon.exe] - C:\WINXP\system32\ctfmon.exe [15360 2008-04-14] (Microsoft Corporation)
HKU\Default User\...\Run: [CTFMON.EXE] - C:\WINXP\system32\ctfmon.exe [ 2008-04-14] (Microsoft Corporation)
SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - %SystemRoot%\system32\SHELL32.dll No File
SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - %SystemRoot%\system32\SHELL32.dll No File

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1A6B92BB24E5C601
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Programme\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Programme\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINXP\system32\urlmon.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - %SystemRoot%\system32\inetcomm.dll No File
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINXP\system32\wiascr.dll (Microsoft Corporation)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - %SystemRoot%\system32\SHELL32.dll No File
Winsock: Catalog9 01 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 21 C:\Programme\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\Mozilla\Firefox\Profiles\pdieswxp.default-1388830898500
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\WINXP\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\WINXP\system32\C2MP\npdivx32.dll (DivX,Inc.)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\WINXP\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\Mozilla\Firefox\Profiles\pdieswxp.default-1388830898500\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Programme\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Programme\Java\jre6\lib\deploy\jqs\ff

========================== Services (Whitelisted) =================

S3 AdobeFlashPlayerUpdateSvc; C:\WINXP\system32\Macromed\Flash\FlashPlayerUpdateService.exe [257416 2013-12-24] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R3 BITS; C:\WINXP\system32\qmgr.dll [409088 2008-04-14] (Microsoft Corporation)
S4 clr_optimization_v2.0.50727_32; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [69632 2008-07-25] (Microsoft Corporation)
S2 clr_optimization_v4.0.30319_32; C:\WINXP\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [130384 2010-03-18] (Microsoft Corporation)
S3 COMSysApp; C:\WINXP\system32\dllhost.exe [5120 2008-04-14] (Microsoft Corporation)
R3 EventSystem; C:\WINXP\system32\es.dll [253952 2009-08-03] (Microsoft Corporation)
S3 FontCache3.0.0.0; C:\WINXP\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [46104 2008-07-29] (Microsoft Corporation)
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation)
S3 idsvc; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [881664 2008-07-29] (Microsoft Corporation)
S3 ImapiService; C:\WINXP\system32\imapi.exe [150528 2008-04-14] (Microsoft Corporation)
S2 LVSrvLauncher; C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe [141848 2007-10-19] (Logitech Inc.)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation)
S3 Microsoft Office Groove Audit Service; C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe [68464 2007-08-24] (Microsoft Corporation)
S3 mnmsrvc; C:\WINXP\system32\mnmsrvc.exe [32768 2008-04-14] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [119408 2013-12-24] (Mozilla Foundation)
S3 MSCSPTISRV; C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S3 MSDTC; C:\WINXP\system32\msdtc.exe [6144 2008-04-14] (Microsoft Corporation)
S4 NetTcpPortSharing; C:\WINXP\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [124240 2010-03-18] (Microsoft Corporation)
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [443776 2007-08-24] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S3 PACSPTISVR; C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
S3 RDSessMgr; C:\WINXP\system32\sessmgr.exe [143360 2008-04-14] (Microsoft Corporation)
S3 SonicStage Back-End Service; C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SsBeSvc.exe [112184 2007-02-05] (Sony Corporation)
S3 SPTISRV; C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SPTISRV.exe [69632 2006-12-14] (Sony Corporation)
R2 srservice; C:\WINXP\system32\srsvc.dll [171520 2008-04-14] (Microsoft Corporation)
S3 SSScsiSV; C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SSScsiSV.exe [75320 2007-02-05] (Sony Corporation)
S3 SwPrv; C:\WINXP\system32\dllhost.exe [5120 2008-04-14] (Microsoft Corporation)
S4 TlntSvr; C:\WINXP\system32\tlntsvr.exe [75264 2008-04-14] (Microsoft Corporation)
R2 W32Time; C:\WINXP\system32\w32time.dll [177152 2008-04-14] (Microsoft Corporation)
S3 WmdmPmSN; C:\WINXP\system32\mspmsnsv.dll [27136 2009-08-03] (Microsoft Corporation)
S3 WmiApSrv; C:\WINXP\system32\wbem\wmiapsrv.exe [126464 2008-04-14] (Microsoft Corporation)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
S3 WPFFontCache_v0400; C:\WINXP\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [753504 2010-03-18] (Microsoft Corporation)
R2 wuauserv; C:\WINXP\system32\wuauserv.dll [6656 2008-04-14] (Microsoft Corporation)
R2 Alerter; %SystemRoot%\system32\alrsvc.dll [x]
R3 ALG; %SystemRoot%\System32\alg.exe [x]
S3 aspnet_state; %SystemRoot%\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [x]
R2 AudioSrv; %SystemRoot%\System32\audiosrv.dll [x]
S2 Browser; %SystemRoot%\System32\browser.dll [x]
R2 BthServ; %SystemRoot%\System32\bthserv.dll [x]
S3 CiSvc; %SystemRoot%\system32\cisvc.exe [x]
S4 ClipSrv; %SystemRoot%\system32\clipsrv.exe [x]
R2 CryptSvc; %SystemRoot%\System32\cryptsvc.dll [x]
R2 DcomLaunch; %SystemRoot%\system32\rpcss.dll [x]
R2 Dhcp; %SystemRoot%\System32\dhcpcsvc.dll [x]
S3 dmadmin; %SystemRoot%\System32\dmadmin.exe /com [x]
R2 dmserver; %SystemRoot%\System32\dmserver.dll [x]
R2 Dnscache; %SystemRoot%\System32\dnsrslvr.dll [x]
S3 Dot3svc; %SystemRoot%\System32\dot3svc.dll [x]
S3 EapHost; %SystemRoot%\System32\eapsvc.dll [x]
R2 ERSvc; %SystemRoot%\System32\ersvc.dll [x]
R2 Eventlog; %SystemRoot%\system32\services.exe [x]
S3 FastUserSwitchingCompatibility; %SystemRoot%\System32\shsvcs.dll [x]
R2 helpsvc; %WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll [x]
R2 HidServ; %SystemRoot%\System32\hidserv.dll [x]
S3 hkmsvc; %SystemRoot%\System32\kmsvc.dll [x]
S3 HTTPFilter; %SystemRoot%\System32\w3ssl.dll [x]
R2 JavaQuickStarterService; "C:\Programme\Java\jre6\bin\jqs.exe" -service -config "C:\Programme\Java\jre6\lib\deploy\jqs\jqs.conf"
R2 LanmanServer; %SystemRoot%\System32\srvsvc.dll [x]
R2 lanmanworkstation; %SystemRoot%\System32\wkssvc.dll [x]
R2 LmHosts; %SystemRoot%\System32\lmhsvc.dll [x]
S4 Messenger; %SystemRoot%\System32\msgsvc.dll [x]
S3 MSIServer; C:\WINXP\system32\msiexec.exe /V [x]
S3 napagent; %SystemRoot%\System32\qagentrt.dll [x]
S4 NetDDE; %SystemRoot%\system32\netdde.exe [x]
S4 NetDDEdsdm; %SystemRoot%\system32\netdde.exe [x]
S3 Netlogon; %SystemRoot%\system32\lsass.exe [x]
R3 Netman; %SystemRoot%\System32\netman.dll [x]
R3 Nla; %SystemRoot%\System32\mswsock.dll [x]
S3 NtLmSsp; %SystemRoot%\system32\lsass.exe [x]
S3 NtmsSvc; %SystemRoot%\system32\ntmssvc.dll [x]
R2 NVSvc; %SystemRoot%\system32\nvsvc32.exe [x]
R2 Pctspk; %SystemRoot%\system32\pctspk.exe [x]
R2 PlugPlay; %SystemRoot%\system32\services.exe [x]
R2 PolicyAgent; %SystemRoot%\system32\lsass.exe [x]
R2 ProtectedStorage; %SystemRoot%\system32\lsass.exe [x]
S3 RasAuto; %SystemRoot%\System32\rasauto.dll [x]
R3 RasMan; %SystemRoot%\System32\rasmans.dll [x]
S4 RemoteAccess; %SystemRoot%\System32\mprdim.dll [x]
R2 RemoteRegistry; %SystemRoot%\system32\regsvc.dll [x]
S3 RpcLocator; %SystemRoot%\system32\locator.exe [x]
R2 RpcSs; %SystemRoot%\system32\rpcss.dll [x]
S3 RSVP; %SystemRoot%\system32\rsvp.exe [x]
R2 SamSs; %SystemRoot%\system32\lsass.exe [x]
S3 SCardSvr; %SystemRoot%\System32\SCardSvr.exe [x]
R2 Schedule; %SystemRoot%\system32\schedsvc.dll [x]
R2 seclogon; %SystemRoot%\System32\seclogon.dll [x]
R2 SENS; %SystemRoot%\system32\sens.dll [x]
R2 SharedAccess; %SystemRoot%\System32\ipnathlp.dll [x]
R2 ShellHWDetection; %SystemRoot%\System32\shsvcs.dll [x]
R2 Spooler; %SystemRoot%\system32\spoolsv.exe [x]
R3 SSDPSRV; %SystemRoot%\System32\ssdpsrv.dll [x]
R2 stisvc; %SystemRoot%\system32\wiaservc.dll [x]
S3 SysmonLog; %SystemRoot%\system32\smlogsvc.exe [x]
R3 TapiSrv; %SystemRoot%\System32\tapisrv.dll [x]
R3 TermService; %SystemRoot%\System32\termsrv.dll [x]
R2 Themes; %SystemRoot%\System32\shsvcs.dll [x]
R2 TrkWks; %SystemRoot%\system32\trkwks.dll [x]
S3 upnphost; %SystemRoot%\System32\upnphost.dll [x]
S3 UPS; %SystemRoot%\System32\ups.exe [x]
S3 VSS; %SystemRoot%\System32\vssvc.exe [x]
R2 WebClient; %SystemRoot%\System32\webclnt.dll [x]
R2 winmgmt; %SystemRoot%\system32\wbem\WMIsvc.dll [x]
S3 Wmi; %SystemRoot%\System32\advapi32.dll [x]
S4 wscsvc; %SYSTEMROOT%\system32\wscsvc.dll [x]
S3 WudfSvc; %SystemRoot%\System32\WUDFSvc.dll [x]
R2 WZCSVC; %SystemRoot%\System32\wzcsvc.dll [x]
S3 xmlprov; %SystemRoot%\System32\xmlprov.dll [x]

==================== Drivers (Whitelisted) ====================

R0 ACPI; system32\DRIVERS\ACPI.sys [x]
S4 ACPIEC; No ImagePath
S3 aec; system32\drivers\aec.sys [x]
R1 AFD; \SystemRoot\System32\drivers\afd.sys [x]
R1 AmdK7; system32\DRIVERS\amdk7.sys [x]
R3 Arp1394; system32\DRIVERS\arp1394.sys [x]
S1 ASPI32; No ImagePath
S3 AsyncMac; system32\DRIVERS\asyncmac.sys [x]
R0 atapi; system32\DRIVERS\atapi.sys [x]
S3 Atmarpc; system32\DRIVERS\atmarpc.sys [x]
R3 audstub; system32\DRIVERS\audstub.sys [x]
R2 avgntflt; system32\DRIVERS\avgntflt.sys [x]
R1 avipbb; system32\DRIVERS\avipbb.sys [x]
R1 avkmgr; system32\DRIVERS\avkmgr.sys [x]
S3 BDMAKO; System32\Drivers\BDMAKO.sys [x]
R1 Beep; No ImagePath
R2 BrPar; \SystemRoot\System32\drivers\BrPar.sys [x]
S3 BrScnUsb; system32\DRIVERS\BrScnUsb.sys [x]
S3 BrSerIf; System32\Drivers\BrSerIf.sys [x]
S3 BrUsbSer; System32\Drivers\BrUsbSer.sys [x]
S3 btaudio; system32\drivers\btaudio.sys [x]
S3 BTDriver; system32\DRIVERS\btport.sys [x]
S3 BthEnum; system32\DRIVERS\BthEnum.sys [x]
S3 BTHMODEM; system32\DRIVERS\bthmodem.sys [x]
S3 BthPan; system32\DRIVERS\bthpan.sys [x]
S3 BTHPORT; System32\Drivers\BTHport.sys [x]
S3 BTHUSB; System32\Drivers\BTHUSB.sys [x]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [x]
S3 btwhid; system32\DRIVERS\btwhid.sys [x]
S3 BTWUSB; System32\Drivers\btwusb.sys [x]
S4 cbidf2k; No ImagePath
S3 CCDECODE; system32\DRIVERS\CCDECODE.sys [x]
S1 Cdaudio; No ImagePath
R4 Cdfs; No ImagePath
R1 Cdrom; system32\DRIVERS\cdrom.sys [x]
R0 Disk; system32\DRIVERS\disk.sys [x]
S4 dmboot; System32\drivers\dmboot.sys [x]
R0 dmio; System32\drivers\dmio.sys [x]
R0 dmload; System32\drivers\dmload.sys [x]
S3 DMusic; system32\drivers\DMusic.sys [x]
S3 drmkaud; system32\drivers\drmkaud.sys [x]
S4 Fastfat; No ImagePath
R3 Fdc; system32\DRIVERS\fdc.sys [x]
R1 Fips; No ImagePath
R3 Flpydisk; system32\DRIVERS\flpydisk.sys [x]
R0 FltMgr; system32\DRIVERS\fltMgr.sys [x]
U1 Fs_Rec; No ImagePath
R0 Ftdisk; system32\DRIVERS\ftdisk.sys [x]
R3 gameenum; system32\DRIVERS\gameenum.sys [x]
R3 Gpc; system32\DRIVERS\msgpc.sys [x]
R3 hidusb; system32\DRIVERS\hidusb.sys [x]
R3 HTTP; System32\Drivers\HTTP.sys [x]
S1 i8042prt; system32\DRIVERS\i8042prt.sys [x]
R1 Imapi; system32\DRIVERS\imapi.sys [x]
S4 IntelIde; No ImagePath
S3 Ip6Fw; system32\DRIVERS\Ip6Fw.sys [x]
S3 IpFilterDriver; system32\DRIVERS\ipfltdrv.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
R3 IpNat; system32\DRIVERS\ipnat.sys [x]
R1 IPSec; system32\DRIVERS\ipsec.sys [x]
S3 IRENUM; system32\DRIVERS\irenum.sys [x]
R0 isapnp; system32\DRIVERS\isapnp.sys [x]
R1 Kbdclass; system32\DRIVERS\kbdclass.sys [x]
R1 kbdhid; system32\DRIVERS\kbdhid.sys [x]
R3 kmixer; system32\drivers\kmixer.sys [x]
R0 KSecDD; No ImagePath
S3 LVMVDrv; system32\DRIVERS\LVMVDrv.sys [x]
R3 LVUSBSta; system32\drivers\LVUSBSta.sys [x]
R1 mnmdd; No ImagePath
R3 Modem; No ImagePath
R1 Mouclass; system32\DRIVERS\mouclass.sys [x]
R3 mouhid; system32\DRIVERS\mouhid.sys [x]
R0 MountMgr; No ImagePath
R3 MRxDAV; system32\DRIVERS\mrxdav.sys [x]
R1 MRxSmb; system32\DRIVERS\mrxsmb.sys [x]
R1 Msfs; No ImagePath
S3 MSKSSRV; system32\drivers\MSKSSRV.sys [x]
S3 MSPCLOCK; system32\drivers\MSPCLOCK.sys [x]
S3 MSPQM; system32\drivers\MSPQM.sys [x]
R3 mssmbios; system32\DRIVERS\mssmbios.sys [x]
S3 MSTEE; system32\drivers\MSTEE.sys [x]
R3 ms_mpu401; system32\drivers\msmpu401.sys [x]
R0 Mup; No ImagePath
S3 NABTSFEC; system32\DRIVERS\NABTSFEC.sys [x]
R0 NDIS; No ImagePath
S3 NdisIP; system32\DRIVERS\NdisIP.sys [x]
R3 NdisTapi; system32\DRIVERS\ndistapi.sys [x]
R3 Ndisuio; system32\DRIVERS\ndisuio.sys [x]
R3 NdisWan; system32\DRIVERS\ndiswan.sys [x]
R3 NDProxy; No ImagePath
R1 NetBIOS; system32\DRIVERS\netbios.sys [x]
R1 NetBT; system32\DRIVERS\netbt.sys [x]
R3 NIC1394; system32\DRIVERS\nic1394.sys [x]
R1 Npfs; No ImagePath
R4 Ntfs; No ImagePath
R1 Null; No ImagePath
R3 nv; system32\DRIVERS\nv4_mini.sys [x]
R3 nvax; system32\drivers\nvax.sys [x]
R3 NVENET; system32\DRIVERS\NVENET.sys [x]
R3 nvnforce; system32\drivers\nvapu.sys [x]
R0 nv_agp; system32\DRIVERS\nv_agp.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
R0 ohci1394; system32\DRIVERS\ohci1394.sys [x]
R3 Parport; system32\DRIVERS\parport.sys [x]
R0 PartMgr; No ImagePath
R2 ParVdm; No ImagePath
R0 PCI; system32\DRIVERS\pci.sys [x]
R0 PCIIde; system32\DRIVERS\pciide.sys [x]
S4 Pcmcia; No ImagePath
R3 pepifilter; system32\DRIVERS\lv302af.sys [x]
R3 PID_PEPI; system32\DRIVERS\LV302V32.SYS [x]
R3 PptpMiniport; system32\DRIVERS\raspptp.sys [x]
R3 PSched; system32\DRIVERS\psched.sys [x]
R3 Ptilink; system32\DRIVERS\ptilink.sys [x]
R3 Ptserlp; system32\DRIVERS\ptserlp.sys [x]
R0 PxHelp20; System32\Drivers\PxHelp20.sys [x]
R1 RasAcd; system32\DRIVERS\rasacd.sys [x]
R3 Rasl2tp; system32\DRIVERS\rasl2tp.sys [x]
R3 RasPppoe; system32\DRIVERS\raspppoe.sys [x]
R3 Raspti; system32\DRIVERS\raspti.sys [x]
R1 Rdbss; system32\DRIVERS\rdbss.sys [x]
R1 RDPCDD; System32\DRIVERS\RDPCDD.sys [x]
R3 rdpdr; system32\DRIVERS\rdpdr.sys [x]
S3 RDPWD; No ImagePath
R1 redbook; system32\DRIVERS\redbook.sys [x]
S3 RFCOMM; system32\DRIVERS\rfcomm.sys [x]
S3 Secdrv; system32\DRIVERS\secdrv.sys [x]
R3 serenum; system32\DRIVERS\serenum.sys [x]
R1 Serial; system32\DRIVERS\serial.sys [x]
S1 Sfloppy; No ImagePath
S3 SLIP; system32\DRIVERS\SLIP.sys [x]
S3 splitter; system32\drivers\splitter.sys [x]
R0 sr; system32\DRIVERS\sr.sys [x]
R3 Srv; system32\DRIVERS\srv.sys [x]
S1 ssmdrv; system32\DRIVERS\ssmdrv.sys [x]
S3 streamip; system32\DRIVERS\StreamIP.sys [x]
R3 swenum; system32\DRIVERS\swenum.sys [x]
S3 swmidi; system32\drivers\swmidi.sys [x]
R3 sysaudio; system32\drivers\sysaudio.sys [x]
R1 Tcpip; system32\DRIVERS\tcpip.sys [x]
S3 TDPIPE; No ImagePath
S3 TDTCP; No ImagePath
R1 TermDD; system32\DRIVERS\termdd.sys [x]
S4 Udfs; No ImagePath
R3 Update; system32\DRIVERS\update.sys [x]
R3 usbaudio; system32\drivers\usbaudio.sys [x]
R3 usbccgp; system32\DRIVERS\usbccgp.sys [x]
R3 usbehci; system32\DRIVERS\usbehci.sys [x]
R3 usbhub; system32\DRIVERS\usbhub.sys [x]
R3 usbohci; system32\DRIVERS\usbohci.sys [x]
S3 usbprint; system32\DRIVERS\usbprint.sys [x]
S3 usbscan; system32\DRIVERS\usbscan.sys [x]
S3 USBSTOR; system32\DRIVERS\USBSTOR.SYS [x]
R1 VgaSave; \SystemRoot\System32\drivers\vga.sys [x]
R0 Vmodem; system32\DRIVERS\vmodem.sys [x]
R0 VolSnap; No ImagePath
R0 Vpctcom; system32\DRIVERS\vpctcom.sys [x]
R0 Vvoice; system32\DRIVERS\vvoice.sys [x]
R3 Wanarp; system32\DRIVERS\wanarp.sys [x]
S3 Wdf01000; System32\Drivers\wdf01000.sys [x]
R3 wdmaud; system32\drivers\wdmaud.sys [x]
U1 WS2IFSL;
S3 WSTCODEC; system32\DRIVERS\WSTCODEC.SYS [x]
S3 WudfPf; system32\DRIVERS\WudfPf.sys [x]
S3 WudfRd; system32\DRIVERS\wudfrd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-04 15:35 - 2014-01-04 15:35 - 00000000 ____D C:\FRST
2014-01-04 14:59 - 2014-01-04 14:59 - 00000000 ____D C:\Programme\AskPartnerNetwork
2014-01-04 14:59 - 2014-01-04 14:59 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AskPartnerNetwork
2014-01-04 14:56 - 2014-01-04 14:56 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\APN
2014-01-04 14:55 - 2014-01-04 14:55 - 00000000 ____D C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\Avira
2014-01-04 14:55 - 2013-10-04 22:50 - 00509872 _____ (Ask Partner Network) C:\Dokumente und Einstellungen\Dinan\Eigene Dateien\APNSetup.exe
2014-01-04 14:53 - 2014-01-04 14:53 - 00000000 ____D C:\Programme\Avira
2014-01-04 14:53 - 2014-01-04 14:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
2014-01-04 14:53 - 2014-01-04 14:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
2014-01-04 14:53 - 2013-12-09 11:37 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\WINXP\system32\Drivers\avipbb.sys
2014-01-04 14:53 - 2013-12-09 11:37 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\WINXP\system32\Drivers\avgntflt.sys
2014-01-04 14:53 - 2013-12-09 11:37 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINXP\system32\Drivers\avkmgr.sys
2014-01-04 14:53 - 2013-12-09 11:37 - 00028520 _____ (Avira GmbH) C:\WINXP\system32\Drivers\ssmdrv.sys
2014-01-04 13:14 - 2014-01-04 13:35 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
2014-01-04 13:14 - 2014-01-04 13:14 - 00000000 ____D C:\Programme\Security Task Manager
2014-01-04 13:14 - 2014-01-04 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Security Task Manager
2014-01-04 12:45 - 2014-01-04 12:45 - 00005120 ___SH C:\WINXP\system32\Thumbs.db
2014-01-04 11:46 - 2014-01-04 11:46 - 00000000 _____ C:\WINXP\system32\jupdate-1.7.0_45-b18.log
2014-01-04 11:45 - 2014-01-04 11:45 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
2013-12-24 15:51 - 2014-01-04 14:50 - 00000880 _____ C:\WINXP\Tasks\Adobe Flash Player Updater.job
2013-12-24 10:22 - 2013-12-24 10:22 - 00000000 ____D C:\Programme\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-01-04 15:35 - 2014-01-04 15:35 - 00000000 ____D C:\FRST
2014-01-04 15:23 - 2010-01-18 18:45 - 00000414 ____H C:\WINXP\Tasks\User_Feed_Synchronization-{6E956E48-E64F-424F-A15D-27DE3CA13BEC}.job
2014-01-04 14:59 - 2014-01-04 14:59 - 00000000 ____D C:\Programme\AskPartnerNetwork
2014-01-04 14:59 - 2014-01-04 14:59 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AskPartnerNetwork
2014-01-04 14:59 - 2006-09-09 19:32 - 00000000 ___RD C:\Programme
2014-01-04 14:56 - 2014-01-04 14:56 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\APN
2014-01-04 14:55 - 2014-01-04 14:55 - 00000000 ____D C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\Avira
2014-01-04 14:53 - 2014-01-04 14:53 - 00000000 ____D C:\Programme\Avira
2014-01-04 14:53 - 2014-01-04 14:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
2014-01-04 14:53 - 2014-01-04 14:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
2014-01-04 14:53 - 2006-09-09 19:31 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2014-01-04 14:50 - 2013-12-24 15:51 - 00000880 _____ C:\WINXP\Tasks\Adobe Flash Player Updater.job
2014-01-04 14:27 - 2006-09-09 18:43 - 00528506 _____ C:\WINXP\WindowsUpdate.log
2014-01-04 13:35 - 2014-01-04 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
2014-01-04 13:14 - 2014-01-04 13:14 - 00000000 ____D C:\Programme\Security Task Manager
2014-01-04 13:14 - 2014-01-04 13:14 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Security Task Manager
2014-01-04 13:06 - 2006-09-09 19:07 - 00000000 ____D C:\WINXP\system32\C2MP
2014-01-04 12:45 - 2014-01-04 12:45 - 00005120 ___SH C:\WINXP\system32\Thumbs.db
2014-01-04 12:43 - 2006-09-09 20:24 - 00000000 ___RD C:\WINXP\Web
2014-01-04 12:43 - 2006-09-09 19:08 - 00000000 ____D C:\WINXP\SHELLNEW
2014-01-04 12:38 - 2006-09-09 18:48 - 00032296 _____ C:\WINXP\SchedLgU.Txt
2014-01-04 12:25 - 2006-09-09 19:36 - 00000159 _____ C:\WINXP\wiadebug.log
2014-01-04 12:25 - 2006-09-09 19:36 - 00000050 _____ C:\WINXP\wiaservc.log
2014-01-04 12:25 - 2006-09-09 18:59 - 00209540 _____ C:\WINXP\system32\nvapps.xml
2014-01-04 12:24 - 2006-09-09 18:48 - 00000006 ____H C:\WINXP\Tasks\SA.DAT
2014-01-04 12:05 - 2008-04-14 13:00 - 00002206 _____ C:\WINXP\system32\wpa.dbl
2014-01-04 11:46 - 2014-01-04 11:46 - 00000000 _____ C:\WINXP\system32\jupdate-1.7.0_45-b18.log
2014-01-04 11:46 - 2009-09-10 13:56 - 00000000 ____D C:\Programme\Java
2014-01-04 11:45 - 2014-01-04 11:45 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
2013-12-26 12:59 - 2006-09-09 21:08 - 00000239 _____ C:\WINXP\Brownie.ini
2013-12-25 15:53 - 2006-09-09 20:24 - 00000000 ____D C:\WINXP
2013-12-25 11:37 - 2006-09-09 20:24 - 00000000 ____D C:\WINXP\Help
2013-12-25 11:37 - 2006-09-09 19:29 - 00665672 _____ C:\WINXP\setupapi.log
2013-12-25 11:35 - 2013-04-30 22:21 - 00000000 ____D C:\Programme\Mozilla Maintenance Service
2013-12-24 15:51 - 2013-04-30 22:32 - 00692616 _____ (Adobe Systems Incorporated) C:\WINXP\system32\FlashPlayerApp.exe
2013-12-24 15:51 - 2011-05-14 10:06 - 00071048 _____ (Adobe Systems Incorporated) C:\WINXP\system32\FlashPlayerCPLApp.cpl
2013-12-24 10:22 - 2013-12-24 10:22 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-12-09 11:37 - 2014-01-04 14:53 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\WINXP\system32\Drivers\avipbb.sys
2013-12-09 11:37 - 2014-01-04 14:53 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\WINXP\system32\Drivers\avgntflt.sys
2013-12-09 11:37 - 2014-01-04 14:53 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINXP\system32\Drivers\avkmgr.sys
2013-12-09 11:37 - 2014-01-04 14:53 - 00028520 _____ (Avira GmbH) C:\WINXP\system32\Drivers\ssmdrv.sys

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\1100~fspext.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\1596~fspext.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\2580~fspext.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\3116~fspext.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\6567~fspext.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\8706~fspext.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\8vnpxg2x.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\AdobeUpdater12345.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\avgnt.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\Deinstaller.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u15-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u17-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u19-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u20-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u21-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u22-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\nos_uninstall_helper.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\Offercast_AVIRAV7_.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\PixelPlanetpdrv6.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\PixelPlanetpdui6.dll
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\_is46.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\_is47.exe
C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\_isF9.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\services.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION!.
C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\rpcss.dll IS MISSING <==== ATTENTION!.
C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION!.

==================== End Of Log ============================
--- --- ---

--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-01-2014
Ran by Dinan at 2014-01-04 15:37:30
Running from C:\Dokumente und Einstellungen\Dinan\Eigene Dateien\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7}

==================== Installed Programs ======================

.NET Framework Machine Code Access Security Policy (Version: 1.0.2411.0 - Microsoft Corporation) Hidden
2007 Microsoft Office Suite Service Pack 1 (SP1) (Version:  - Microsoft) Hidden
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05 - Adobe Systems Incorporated)
Allok Video to MP4 Converter 6.2.0603 (Version:  - Allok Soft Inc)
Avira Free Antivirus (Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (Version: 12.10.0.2951 - APN, LLC)
Brother HL-2035 (Version: 1.00 - Brother)
Cole2k Media - Codec Pack (Advanced) 7.1.0 (Version:  - Cole2k Media)
Hotfix für Windows XP (KB942288-v3) (Version: 3 - Microsoft Corporation)
Hotfix für Windows XP (KB970653-v3) (Version: 3 - Microsoft Corporation)
Java 7 Update 21 (Version: 7.0.210 - Oracle)
Java Auto Updater (Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 26 (Version: 6.0.260 - Sun Microsystems, Inc.)
Logitech QuickCam-Treiberpaket (Version:  - )
Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 (Version:  - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (Version: 12.0.6215.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft SOAP Toolkit 3.0 (Version: 3.0.1325.4 - Microsoft Corporation)
Microsoft Software Update for Web Folders  (German) 12 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla)
MSXML 4.0 SP2 Parser und SDK (Version: 4.20.9818.0 - Microsoft Corporation)
MVision (Version: 11.50.1169 - Logitech Inc.) Hidden
NVIDIA Drivers (Version: 1.3 - NVIDIA Corporation)
NVIDIA nForce Treiber für Windows 2000/XP (Version:  - )
OpenMG Limited Patch 4.7-07-14-05-01 (Version:  - )
OpenMG Secure Module 4.7.00 (Version: 4.7.00.12140 - Sony Corporation)
OpenMG Secure Module 4.7.00 (Version: 4.7.00.12140 - Sony Corporation) Hidden
PaperPort Image Printer (Version: 1.00.0000 - Nuance Communications, Inc.)
Security Task Manager 1.8g (Version: 1.8g - Neuber Software)
Sicherheitsupdate für Windows Media Player 11 (KB954154) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923789) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB941569) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973346) (Version: 1 - Microsoft Corporation)
SonicStage 4.3 (Version: 4.3 - Sony Corporation)
Update für Windows XP (KB898461) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB943729) (Version:  - Microsoft Corporation)
Video Downloader (Version: 1.0.00.03050 - Sony Corporation)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
WinRAR archiver (Version:  - )
XML Paper Specification Shared Components Language Pack 1.0 (Version:  - Microsoft Corporation) Hidden

==================== Restore Points  =========================

09-10-2013 18:59:57 Systemprüfpunkt
13-10-2013 17:33:34 Systemprüfpunkt
18-10-2013 08:44:30 Systemprüfpunkt
19-10-2013 18:38:10 Systemprüfpunkt
23-10-2013 12:43:28 Systemprüfpunkt
26-10-2013 04:49:38 Systemprüfpunkt
27-10-2013 18:16:39 Systemprüfpunkt
29-10-2013 19:58:43 Systemprüfpunkt
02-11-2013 16:29:52 Systemprüfpunkt
03-11-2013 21:32:25 Systemprüfpunkt
06-11-2013 21:53:41 Systemprüfpunkt
09-11-2013 16:55:06 Systemprüfpunkt
16-11-2013 17:03:19 Systemprüfpunkt
25-11-2013 18:21:01 Systemprüfpunkt
27-11-2013 18:05:34 Systemprüfpunkt
29-11-2013 19:18:02 Systemprüfpunkt
30-11-2013 19:35:26 Systemprüfpunkt
06-12-2013 21:17:39 Systemprüfpunkt
04-01-2014 10:51:29 Installed Java 7 Update 45

==================== Hosts content: ==========================

2008-04-14 13:00 - 2008-04-14 13:00 - 00000820 ____A C:\WINXP\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: C:\WINXP\Tasks\Adobe Flash Player Updater.job => C:\WINXP\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINXP\Tasks\User_Feed_Synchronization-{6E956E48-E64F-424F-A15D-27DE3CA13BEC}.job => C:\WINXP\system32\msfeedssync.exe

==================== Loaded Modules (whitelisted) =============

2008-03-29 16:42 - 2008-03-29 16:42 - 00159744 _____ () C:\WINXP\system32\mmfinfo.dll
2008-03-29 16:41 - 2008-03-29 16:41 - 00023552 _____ () C:\WINXP\system32\mkunicode.dll
2008-04-14 13:00 - 2008-04-14 13:00 - 00014336 _____ () C:\WINXP\system32\msdmo.dll
2014-01-04 14:53 - 2013-12-09 11:37 - 00394808 _____ () C:\Programme\Avira\AntiVir Desktop\sqlite3.dll
2013-12-24 10:22 - 2013-12-24 10:22 - 03559024 _____ () C:\Programme\Mozilla Firefox\mozjs.dll
2013-12-24 15:51 - 2013-12-24 15:51 - 16242056 _____ () C:\WINXP\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:88050731

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/04/2014 00:03:37 PM) (Source: MsiInstaller) (User: DINO-6FF9828A57)
Description: Produkt: Java 7 Update 45 -- Fehler 25025.  Eine vorherige Deinstallation von Java wurde nicht abgeschlossen.  Starten Sie den Computer vor der Installation von Java neu.


System errors:
=============
Error: (12/25/2013 10:59:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows CardSpace" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (12/25/2013 10:59:39 PM) (Source: Service Control Manager) (User: )
Description: Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Windows CardSpace.


Microsoft Office Sessions:
=========================
Error: (06/11/2010 06:51:27 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 114 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (05/23/2010 09:44:41 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 41 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/21/2010 09:24:08 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 106 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (05/18/2010 00:20:12 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 32 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/18/2010 10:16:58 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 28 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/18/2010 10:16:18 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 90 seconds with 60 seconds of active time.  This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 40%
Total physical RAM: 1535.49 MB
Available physical RAM: 914.91 MB
Total Pagefile: 3434.05 MB
Available Pagefile: 2753.51 MB
Total Virtual: 2047.88 MB
Available Virtual: 1938.43 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:117.19 GB) (Free:99.44 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive f: (DATASTATION) (Fixed) (Total:115.69 GB) (Free:114.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 233 GB) (Disk ID: 0A580A57)
Partition 1: (Active) - (Size=117 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=116 GB) - (Type=OF Extended)

==================== End Of Log ============================

aharonov 04.01.2014 15:57
Lade dir bitte OTL (von Oldtimer) herunter und speichere es auf deinen Desktop.
  • Doppelklick auf die OTL.exe.
  • Unter Extra Registry, wähle bitte Use SafeList.
  • Setze den Haken bei Scan all Users.
  • Klicke nun auf Run Scan.
  • Wenn der Scan beendet ist, werden 2 Logfiles (OTL.txt und Extras.txt) erstellt.
  • Poste den Inhalt dieser Logfiles hier in den Thread.

Sportler19 04.01.2014 16:08
So

Code:
OTL logfile created on: 04.01.2014 16:01:02 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Dokumente und Einstellungen\Dinan\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,50 Gb Total Physical Memory | 0,94 Gb Available Physical Memory | 62,78% Memory free
3,35 Gb Paging File | 2,73 Gb Available in Paging File | 81,43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 117,19 Gb Total Space | 99,44 Gb Free Space | 84,85% Space Free | Partition Type: NTFS
Drive F: | 115,69 Gb Total Space | 114,25 Gb Free Space | 98,75% Space Free | Partition Type: NTFS
 
Computer Name: DINO-6FF9828A57 | User Name: Dinan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014.01.04 15:59:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Dinan\Eigene Dateien\Downloads\OTL.exe
PRC - [2013.12.24 10:22:22 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2013.12.20 22:02:25 | 000,166,352 | ---- | M] (APN LLC.) -- C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe
PRC - [2013.12.20 22:02:16 | 001,778,640 | ---- | M] (APN) -- C:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
PRC - [2013.12.09 11:37:21 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2013.12.09 11:37:19 | 001,011,768 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2013.12.09 11:37:19 | 000,431,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2013.12.09 11:37:18 | 000,684,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2013.12.09 11:37:18 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2008.04.14 13:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINXP\explorer.exe
PRC - [2006.10.26 12:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe
PRC - [2001.08.18 02:55:00 | 000,086,016 | ---- | M] (PCtel, Inc.) -- C:\WINXP\system32\pctspk.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013.12.24 10:22:22 | 003,559,024 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2013.12.09 11:37:21 | 000,394,808 | ---- | M] () -- C:\Programme\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2008.04.14 13:00:00 | 000,014,336 | ---- | M] () -- C:\WINXP\system32\msdmo.dll
MOD - [2008.03.29 16:42:20 | 000,159,744 | ---- | M] () -- C:\WINXP\system32\mmfinfo.dll
MOD - [2008.03.29 16:41:52 | 000,023,552 | ---- | M] () -- C:\WINXP\system32\mkunicode.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2013.12.24 15:51:45 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINXP\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.12.24 10:22:22 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.12.20 22:02:25 | 000,166,352 | ---- | M] (APN LLC.) [Auto | Running] -- C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
SRV - [2013.12.09 11:37:21 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2013.12.09 11:37:19 | 001,011,768 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)
SRV - [2013.12.09 11:37:18 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2007.10.19 12:21:16 | 000,141,848 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher)
SRV - [2007.08.24 02:19:12 | 000,443,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2007.02.05 09:11:18 | 000,075,320 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SSScsiSV.exe -- (SSScsiSV)
SRV - [2007.02.05 09:11:16 | 000,112,184 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SsBeSvc.exe -- (SonicStage Back-End Service)
SRV - [2006.12.14 01:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2006.12.14 01:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2006.12.14 00:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2006.10.26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006.10.26 12:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\mdm.exe -- (MDM)
SRV - [2005.11.14 00:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2001.08.18 02:55:00 | 000,086,016 | ---- | M] (PCtel, Inc.) [Auto | Running] -- C:\WINXP\system32\pctspk.exe -- (Pctspk)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\btwusb.sys -- (BTWUSB)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btwhid.sys -- (btwhid)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btwdndis.sys -- (BTWDNDIS)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btport.sys -- (BTDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\btaudio.sys -- (btaudio)
DRV - File not found [Kernel | System | Stopped] --  -- (ASPI32)
DRV - [2013.12.09 11:37:21 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\WINXP\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2013.12.09 11:37:19 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\WINXP\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2013.12.09 11:37:18 | 000,135,648 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\WINXP\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2013.12.09 11:37:18 | 000,090,400 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\WINXP\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.12.18 09:47:40 | 000,035,200 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\bdmako.sys -- (BDMAKO)
DRV - [2008.04.13 22:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2007.10.12 03:00:42 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2007.10.12 02:55:58 | 001,279,000 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\LV302V32.SYS -- (PID_PEPI)
DRV - [2007.10.12 02:55:58 | 000,013,848 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\lv302af.sys -- (pepifilter)
DRV - [2007.10.11 17:59:02 | 002,142,488 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\LVMVdrv.sys -- (LVMVDrv)
DRV - [2002.12.05 05:01:00 | 000,241,664 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\nvapu.sys -- (nvnforce)
DRV - [2002.12.05 05:01:00 | 000,013,056 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\nvax.sys -- (nvax)
DRV - [2002.09.23 03:37:00 | 000,080,896 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\NVENET.sys -- (NVENET)
DRV - [2002.09.06 04:24:00 | 000,013,568 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINXP\system32\drivers\nv_agp.SYS -- (nv_agp)
DRV - [2001.08.17 12:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\msmpu401.sys -- (ms_mpu401)
DRV - [2001.08.17 11:28:16 | 000,397,502 | ---- | M] (PCtel, Inc.) [Kernel | Boot | Running] -- C:\WINXP\system32\drivers\vpctcom.sys -- (Vpctcom)
DRV - [2001.08.17 11:28:16 | 000,064,605 | ---- | M] (PCtel, Inc.) [Kernel | Boot | Running] -- C:\WINXP\system32\drivers\vvoice.sys -- (Vvoice)
DRV - [2001.08.17 11:28:14 | 000,604,253 | ---- | M] (PCTEL, INC.) [Kernel | Boot | Running] -- C:\WINXP\system32\drivers\vmodem.sys -- (Vmodem)
DRV - [2001.08.17 11:28:14 | 000,112,574 | ---- | M] (PCTEL, INC.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\ptserlp.sys -- (Ptserlp)
DRV - [2000.07.24 00:01:00 | 000,019,537 | ---- | M] (Brother Industries Ltd.) [Kernel | Auto | Running] -- C:\WINXP\system32\drivers\BRPAR.SYS -- (BrPar)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 1A 6B 92 BB 24 E5 C6 01  [binary data]
IE - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..extensions.enabledAddons: jqs%40sun.com:1.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINXP\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\WINXP\system32\C2MP\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\WINXP\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Programme\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2014.01.04 11:45:21 | 000,000,000 | ---D | M]
 
[2006.10.02 15:05:57 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\Mozilla\Extensions
[2014.01.04 14:59:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\Mozilla\Firefox\Profiles\pdieswxp.default-1388830898500\extensions
[2013.12.20 22:03:19 | 001,127,901 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\Mozilla\Firefox\Profiles\pdieswxp.default-1388830898500\extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi
[2013.12.24 10:22:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
[2013.12.24 10:22:23 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009.09.10 13:56:52 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAMME\JAVA\JRE6\LIB\DEPLOY\JQS\FF
 
O1 HOSTS File: ([2008.04.14 13:00:00 | 000,000,820 | ---- | M]) - C:\WINXP\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (Avira SearchFree Toolbar) - {41564952-412D-5637-4300-7A786E7484D7} - C:\Programme\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar) - {41564952-412D-5637-4300-7A786E7484D7} - C:\Programme\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ApnTBMon] C:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINXP\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINXP\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINXP\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINXP\System32\nwiz.exe ()
O4 - HKLM..\RunOnce: [PIP] C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Temp\Offercast_AVIRAV7_.exe (Ask.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Default User\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1085031214-838170752-1417001333-1003\..Trusted Domains: gm.com ([intouch.rit] https in Vertrauenswürdige Sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 10.21.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{401C06D5-6B06-4102-806B-E346D332B677}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINXP\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINXP\system32\userinit.exe) - C:\WINXP\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.09 18:44:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014.01.04 15:35:26 | 000,000,000 | ---D | C] -- C:\FRST
[2014.01.04 14:59:00 | 000,000,000 | ---D | C] -- C:\Programme\AskPartnerNetwork
[2014.01.04 14:59:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AskPartnerNetwork
[2014.01.04 14:56:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\APN
[2014.01.04 14:55:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\Avira
[2014.01.04 14:55:42 | 000,509,872 | ---- | C] (Ask Partner Network) -- C:\Dokumente und Einstellungen\Dinan\Eigene Dateien\APNSetup.exe
[2014.01.04 14:53:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2014.01.04 14:53:32 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINXP\System32\drivers\ssmdrv.sys
[2014.01.04 14:53:28 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINXP\System32\drivers\avkmgr.sys
[2014.01.04 14:53:27 | 000,135,648 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINXP\System32\drivers\avipbb.sys
[2014.01.04 14:53:27 | 000,090,400 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINXP\System32\drivers\avgntflt.sys
[2014.01.04 14:53:25 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2014.01.04 14:53:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2014.01.04 13:14:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
[2014.01.04 13:14:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Security Task Manager
[2014.01.04 13:14:02 | 000,000,000 | ---D | C] -- C:\Programme\Security Task Manager
[2014.01.04 11:45:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
[2013.12.25 11:37:26 | 000,000,000 | ---D | C] -- C:\WINXP\System32\SoftwareDistribution
[2013.12.24 10:22:10 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[1 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]
[1 C:\WINXP\*.tmp files -> C:\WINXP\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2014.01.04 15:53:59 | 000,000,414 | -H-- | M] () -- C:\WINXP\tasks\User_Feed_Synchronization-{6E956E48-E64F-424F-A15D-27DE3CA13BEC}.job
[2014.01.04 15:50:15 | 000,000,880 | ---- | M] () -- C:\WINXP\tasks\Adobe Flash Player Updater.job
[2014.01.04 12:25:00 | 000,209,540 | ---- | M] () -- C:\WINXP\System32\nvapps.xml
[2014.01.04 12:24:54 | 000,002,048 | --S- | M] () -- C:\WINXP\bootstat.dat
[2014.01.04 12:24:51 | 1610,145,792 | -HS- | M] () -- C:\hiberfil.sys
[2014.01.04 12:05:58 | 000,002,206 | ---- | M] () -- C:\WINXP\System32\wpa.dbl
[2013.12.26 12:59:15 | 000,000,239 | ---- | M] () -- C:\WINXP\Brownie.ini
[2013.12.24 15:51:45 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINXP\System32\FlashPlayerApp.exe
[2013.12.24 15:51:45 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINXP\System32\FlashPlayerCPLApp.cpl
[2013.12.09 11:37:21 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\WINXP\System32\drivers\ssmdrv.sys
[2013.12.09 11:37:19 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINXP\System32\drivers\avkmgr.sys
[2013.12.09 11:37:18 | 000,135,648 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINXP\System32\drivers\avipbb.sys
[2013.12.09 11:37:18 | 000,090,400 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINXP\System32\drivers\avgntflt.sys
[1 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]
[1 C:\WINXP\*.tmp files -> C:\WINXP\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.12.24 15:51:46 | 000,000,880 | ---- | C] () -- C:\WINXP\tasks\Adobe Flash Player Updater.job
[2013.08.10 13:48:17 | 000,000,019 | ---- | C] () -- C:\WINXP\SoundConverter.INI
[2013.05.11 05:00:23 | 000,059,500 | ---- | C] () -- C:\WINXP\System32\lvcoinst.ini
[2013.05.02 22:30:48 | 000,009,030 | ---- | C] () -- C:\WINXP\HL-2030.INI
[2013.05.02 22:29:52 | 000,000,054 | ---- | C] () -- C:\WINXP\System32\bd2030.dat
[2011.06.10 17:14:30 | 000,013,008 | ---- | C] () -- C:\Dokumente und Einstellungen\Dinan\Anwendungsdaten\svchost.exe
[2011.03.21 08:24:23 | 000,157,184 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2009.09.12 14:41:35 | 000,040,960 | ---- | C] () -- C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.09.09 19:45:26 | 000,000,138 | ---- | C] () -- C:\Dokumente und Einstellungen\Dinan\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
 
========== ZeroAccess Check ==========
 
[2006.09.09 19:20:22 | 000,000,227 | RHS- | M] () -- C:\WINXP\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 13:00:00 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINXP\system32\wbem\fastprox.dll -- [2009.08.03 23:13:55 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINXP\system32\wbem\wbemess.dll -- [2008.04.14 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 112 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:88050731

< End of report >
Und so

Code:
OTL Extras logfile created on: 04.01.2014 16:01:02 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Dokumente und Einstellungen\Dinan\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,50 Gb Total Physical Memory | 0,94 Gb Available Physical Memory | 62,78% Memory free
3,35 Gb Paging File | 2,73 Gb Available in Paging File | 81,43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 117,19 Gb Total Space | 99,44 Gb Free Space | 84,85% Space Free | Partition Type: NTFS
Drive F: | 115,69 Gb Total Space | 114,25 Gb Free Space | 98,75% Space Free | Partition Type: NTFS
 
Computer Name: DINO-6FF9828A57 | User Name: Dinan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
[HKEY_USERS\S-1-5-21-1085031214-838170752-1417001333-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Programme\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Programme\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Programme\Microsoft Office\Office12\GROOVE.EXE" = C:\Programme\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Programme\Microsoft Office\Office12\ONENOTE.EXE" = C:\Programme\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Programme\Gutmann Messtechnik GmbH\Portal\REMOTECLIENT.EXE" = C:\Programme\Gutmann Messtechnik GmbH\Portal\REMOTECLIENT.EXE:*:Enabled:Remote Client
"C:\Programme\Gemeinsame Dateien\XpressUpdate\XPressUpdate.exe" = C:\Programme\Gemeinsame Dateien\XpressUpdate\XPressUpdate.exe:*:Enabled:XPressUpdate
"C:\Programme\Hella Gutmann Solutions\Portal\RemoteClient.exe" = C:\Programme\Hella Gutmann Solutions\Portal\RemoteClient.exe:*:Enabled:Remote Client
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07C6B5AA-2805-45D0-8A27-2EC30DFC4699}" = Brother HL-2035
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java(TM) 6 Update 26
"{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 21
"{2BC2781A-F7F6-452E-95EB-018A522F1B2C}" = PaperPort Image Printer
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{41564952-412D-5637-4300-A758B70C0A00}" = Avira SearchFree Toolbar
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5FE1E412-D114-46E8-A891-5BE087B256A5}" = MVision
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (German) 12
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{58FC5E37-DD28-4D4A-A549-125744C6763C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{888B9AC7-8F5C-456B-A27A-157A6C310E52}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DCBECE36-8F23-4B33-925E-A1C6183C0DBD}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A0EB195B-5876-48E6-879D-33D4B2102610}" = SonicStage 4.3
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) - Deutsch
"{BCB4C18A-ACA6-4383-8688-E19933A705DD}" = Microsoft SOAP Toolkit 3.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{C3F5C02F-90BC-40E6-8464-E9231B211797}" = .NET Framework Machine Code Access Security Policy
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F1D891A7-2BAF-4033-9A20-DBB78F86BF0C}" = Video Downloader
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Allok Video to MP4 Converter_is1" = Allok Video to MP4 Converter 6.2.0603
"Avira AntiVir Desktop" = Avira Free Antivirus
"Cole2k Media - Codec Pack" = Cole2k Media - Codec Pack (Advanced) 7.1.0
"ENTERPRISE" = Microsoft Office Enterprise 2007
"InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"lvdrivers_11.50" = Logitech QuickCam-Treiberpaket
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 26.0 (x86 de)" = Mozilla Firefox 26.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIAnForce" = NVIDIA nForce Treiber für Windows 2000/XP
"OpenMG HotFix4.7-07-13-22-01" = OpenMG Limited Patch 4.7-07-14-05-01
"Security Task Manager" = Security Task Manager 1.8g
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WinRAR archiver" = WinRAR archiver
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 04.01.2014 07:03:37 | Computer Name = DINO-6FF9828A57 | Source = MsiInstaller | ID = 10005
Description = Produkt: Java 7 Update 45 -- Fehler 25025.  Eine vorherige Deinstallation
 von Java wurde nicht abgeschlossen.  Starten Sie den Computer vor der Installation
 von Java neu.
 
[ OSession Events ]
Error - 18.05.2010 05:16:18 | Computer Name = DINO-6FF9828A57 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 90
 seconds with 60 seconds of active time.  This session ended with a crash.
 
Error - 18.05.2010 05:16:58 | Computer Name = DINO-6FF9828A57 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 28
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 18.05.2010 07:20:12 | Computer Name = DINO-6FF9828A57 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 32
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 21.05.2010 04:24:08 | Computer Name = DINO-6FF9828A57 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 106
 seconds with 60 seconds of active time.  This session ended with a crash.
 
Error - 23.05.2010 04:44:41 | Computer Name = DINO-6FF9828A57 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 41
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 11.06.2010 13:51:27 | Computer Name = DINO-6FF9828A57 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 114
 seconds with 60 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 25.12.2013 17:59:39 | Computer Name = DINO-6FF9828A57 | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Windows
 CardSpace.
 
Error - 25.12.2013 17:59:39 | Computer Name = DINO-6FF9828A57 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Windows CardSpace" wurde aufgrund folgenden Fehlers nicht
 gestartet:  %%1053
 
 
< End of report >

aharonov 04.01.2014 16:17
Hast du alle zur Verfügung stehenden Windows Updates installiert? Ansonsten hole das jetzt mal nach.

Sportler19 05.01.2014 06:42
Hallo Leo,

Windows Update war bestimmt Monate oder sogar Jahre ausgeschaltet. Jetzt hab ich Ihn eingeschaltet und unten rechts in der Taskleiste kommt ein gelbes Schild von Windows das mir anzeigt wie weit der Update fortgeschritten ist. Leider seit mehreren Stunden bei 0% ???

Hallo Leo, so der PC musste die ganze Nacht laufen um alles nachzuholen. Es wurden 146 Updates gefunden... Woran kann es jetzt noch liegen das der PC so langsam ist?? CPU Auslastung ist jetzt im Leerlauf normal

aharonov 05.01.2014 12:56
Schauen wir mal weiter:


Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Combofix wird überprüfen, ob die Microsoft Windows Wiederherstellungskonsole installiert ist.
    Ist diese nicht installiert, erlaube Combofix diese herunter zu laden und zu installieren. Folge dazu einfach den Anweisungen und aktzeptiere die Endbenutzer-Lizenz.
    Bei heutiger Malware ist dies sehr empfehlenswert, da diese uns eine Möglichkeit bietet, dein System zu reparieren, falls etwas schief geht.
    Bestätige die Information, dass die Wiederherstellungskonsole installiert wurde mit Ja.
    Hinweis: Ist diese bereits installiert, wird Combofix mit der Malwareentfernung fortfahren.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es eine Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Sportler19 05.01.2014 22:14
Code:
ComboFix 14-01-04.03 - Dinan 05.01.2014  21:38:00.1.1 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.49.1031.18.1535.980 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\Dinan\Desktop\ComboFix.exe
AV: Avira Desktop *Enabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\All Users\Anwendungsdaten\TEMP
c:\dokumente und einstellungen\Dinan\Anwendungsdaten\svchost.exe
c:\dokumente und einstellungen\Dinan\Recent\Thumbs.db
c:\winxp\system32\W020T32W.DLL
c:\winxp\system32\W021T32W.DLL
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-12-05 bis 2014-01-05  ))))))))))))))))))))))))))))))
.
.
2014-01-05 02:17 . 2014-01-05 02:17        1072544        ----a-w-        c:\winxp\system32\nvdrsdb0.bin
2014-01-05 02:17 . 2014-01-05 02:17        1        ----a-w-        c:\winxp\system32\nvdrssel.bin
2014-01-05 02:17 . 2014-01-05 02:17        1072544        ----a-w-        c:\winxp\system32\nvdrsdb1.bin
2014-01-05 02:16 . 2014-01-05 02:17        --------        d-----w-        c:\programme\NVIDIA Corporation
2014-01-05 01:47 . 2008-04-14 04:52        21504        ----a-w-        c:\winxp\system32\drivers\hidserv.dll
2014-01-05 00:58 . 2008-04-14 12:00        221184        ----a-w-        c:\winxp\system32\wmpns.dll
2014-01-05 00:05 . 2014-01-05 00:08        --------        d-----w-        c:\winxp\system32\MRT
2014-01-04 23:50 . 2014-01-05 00:52        --------        d-----w-        c:\winxp\ie8updates
2014-01-04 21:40 . 2011-07-15 13:29        457856        -c----w-        c:\winxp\system32\dllcache\mrxsmb.sys
2014-01-04 21:37 . 2013-10-29 07:57        630272        -c----w-        c:\winxp\system32\dllcache\msfeeds.dll
2014-01-04 21:37 . 2013-10-29 07:57        55296        -c----w-        c:\winxp\system32\dllcache\msfeedsbs.dll
2014-01-04 21:37 . 2013-10-29 07:57        12800        -c----w-        c:\winxp\system32\dllcache\xpshims.dll
2014-01-04 21:37 . 2013-10-29 07:57        247808        -c----w-        c:\winxp\system32\dllcache\ieproxy.dll
2014-01-04 21:37 . 2013-10-29 07:57        743424        -c----w-        c:\winxp\system32\dllcache\iedvtool.dll
2014-01-04 21:36 . 2013-10-29 07:57        2006016        -c----w-        c:\winxp\system32\dllcache\iertutil.dll
2014-01-04 21:36 . 2013-10-29 07:57        11113472        -c----w-        c:\winxp\system32\dllcache\ieframe.dll
2014-01-04 21:36 . 2013-10-29 07:57        522240        -c----w-        c:\winxp\system32\dllcache\jsdbgui.dll
2014-01-04 21:33 . 2013-07-03 02:12        25088        -c----w-        c:\winxp\system32\dllcache\hidparse.sys
2014-01-04 21:31 . 2013-02-12 00:32        12928        -c----w-        c:\winxp\system32\dllcache\usb8023x.sys
2014-01-04 21:31 . 2013-07-17 00:58        46848        -c----w-        c:\winxp\system32\dllcache\irbus.sys
2014-01-04 21:31 . 2013-07-17 00:58        123008        -c----w-        c:\winxp\system32\dllcache\usbvideo.sys
2014-01-04 21:29 . 2010-02-12 10:03        293376        ------w-        c:\winxp\system32\browserchoice.exe
2014-01-04 21:27 . 2013-08-09 00:55        144128        -c----w-        c:\winxp\system32\dllcache\usbport.sys
2014-01-04 21:27 . 2013-08-09 00:55        5376        -c----w-        c:\winxp\system32\dllcache\usbd.sys
2014-01-04 21:27 . 2009-03-18 11:02        30336        -c----w-        c:\winxp\system32\dllcache\usbehci.sys
2014-01-04 21:26 . 2013-07-04 07:33        2031104        -c----w-        c:\winxp\system32\dllcache\ntkrpamp.exe
2014-01-04 21:26 . 2013-07-04 07:33        2152448        -c----w-        c:\winxp\system32\dllcache\ntkrnlmp.exe
2014-01-04 21:26 . 2013-07-04 07:33        2195840        -c----w-        c:\winxp\system32\dllcache\ntoskrnl.exe
2014-01-04 21:21 . 2012-01-11 19:06        3072        -c----w-        c:\winxp\system32\dllcache\iacenc.dll
2014-01-04 21:21 . 2012-01-11 19:06        3072        ------w-        c:\winxp\system32\iacenc.dll
2014-01-04 14:35 . 2014-01-04 14:35        --------        d-----w-        C:\FRST
2014-01-04 13:56 . 2014-01-04 13:56        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\APN
2014-01-04 13:55 . 2014-01-04 13:55        --------        d-----w-        c:\dokumente und einstellungen\Dinan\Anwendungsdaten\Avira
2014-01-04 13:53 . 2013-12-09 10:37        37352        ----a-w-        c:\winxp\system32\drivers\avkmgr.sys
2014-01-04 13:53 . 2013-12-09 10:37        90400        ----a-w-        c:\winxp\system32\drivers\avgntflt.sys
2014-01-04 13:53 . 2013-12-09 10:37        135648        ----a-w-        c:\winxp\system32\drivers\avipbb.sys
2014-01-04 13:53 . 2014-01-04 13:53        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Avira
2014-01-04 13:53 . 2014-01-04 13:53        --------        d-----w-        c:\programme\Avira
2014-01-04 12:14 . 2014-01-05 06:24        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\SecTaskMan
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-24 14:51 . 2013-04-30 21:32        692616        ----a-w-        c:\winxp\system32\FlashPlayerApp.exe
2013-12-24 14:51 . 2011-05-14 09:06        71048        ----a-w-        c:\winxp\system32\FlashPlayerCPLApp.cpl
2013-11-13 02:59 . 2008-04-14 12:00        150528        ----a-w-        c:\winxp\system32\imagehlp.dll
2013-11-07 05:38 . 2009-08-03 22:10        591360        ----a-w-        c:\winxp\system32\rpcrt4.dll
2013-11-06 01:36 . 2008-05-05 05:25        8192        ----a-w-        c:\winxp\system32\xpsp4res.dll
2013-10-30 02:51 . 2009-08-03 22:14        1879168        ----a-w-        c:\winxp\system32\win32k.sys
2013-10-29 07:57 . 2009-08-03 23:10        920064        ----a-w-        c:\winxp\system32\wininet.dll
2013-10-29 07:57 . 2009-08-03 23:10        1469440        ----a-w-        c:\winxp\system32\inetcpl.cpl
2013-10-29 07:57 . 2009-08-03 20:29        43520        ----a-w-        c:\winxp\system32\licmgr10.dll
2013-10-29 07:57 . 2009-08-03 20:28        18944        ----a-w-        c:\winxp\system32\corpol.dll
2013-10-29 00:45 . 2009-08-03 20:28        385024        ----a-w-        c:\winxp\system32\html.iec
2013-10-23 23:45 . 2009-08-03 22:13        172032        ----a-w-        c:\winxp\system32\scrrun.dll
2013-10-12 15:56 . 2008-04-14 12:00        279552        ----a-w-        c:\winxp\system32\oakley.dll
2013-10-09 13:12 . 2009-08-03 22:14        287744        ----a-w-        c:\winxp\system32\gdi32.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2013-12-09 684600]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\winxp\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk
backup=c:\winxp\pss\Adobe Reader - Schnellstart.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader Synchronizer.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader Synchronizer.lnk
backup=c:\winxp\pss\Adobe Reader Synchronizer.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-04-04 21:06        958576        ----a-w-        c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2007-08-24 05:00        33648        ----a-w-        c:\programme\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-03-12 05:32        253816        ----a-w-        c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Programme\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Programme\\Microsoft Office\\Office12\\ONENOTE.EXE"=
.
R1 avkmgr;avkmgr;c:\winxp\system32\drivers\avkmgr.sys [04.01.2014 14:53 37352]
R2 AntiVirSchedulerService;Avira Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [04.01.2014 14:53 440376]
S3 BDMAKO;BDMAKO;c:\winxp\system32\drivers\bdmako.sys [13.09.2011 13:43 35200]
.
Inhalt des "geplante Tasks" Ordners
.
2014-01-05 c:\winxp\Tasks\Adobe Flash Player Updater.job
- c:\winxp\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-30 14:51]
.
2014-01-05 c:\winxp\Tasks\User_Feed_Synchronization-{6E956E48-E64F-424F-A15D-27DE3CA13BEC}.job
- c:\winxp\system32\msfeedssync.exe [2008-04-14 20:29]
.
.
------- Zusätzlicher Suchlauf -------
.
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: gm.com\intouch.rit
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\dokumente und einstellungen\Dinan\Anwendungsdaten\Mozilla\Firefox\Profiles\pdieswxp.default-1388830898500\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
WebBrowser-{41564952-412D-5637-4300-7A786E7484D7} - (no file)
MSConfigStartUp-WMAAD - c:\programme\Sony\WALKMAN Launcher\WMAAD.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2014-01-05 21:44
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-01-05  21:47:04
ComboFix-quarantined-files.txt  2014-01-05 20:46
.
Vor Suchlauf: 11 Verzeichnis(se), 100.919.099.392 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 101.923.803.136 Bytes frei
.
WindowsXP-KB310994-SP2-Pro-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINXP
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINXP="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 93711C128A33DCBF72C925BB75BFBBF5
72B8CE41AF0DE751C946802B3ED844B4
Eine Sache muss ich noch loswerden: Meine Windows Version ist nicht gekauft, also ohne Lizenz dadurch kann ich 2 Sicherheitsupdates nicht installieren

aharonov 05.01.2014 22:22
Dann würd ich dir aber ganz dringend anraten, auf ein sauberes Betriebssystem umzustellen. Am besten grad ein neues wie Windows 7 oder 8.1, denn Windows XP erreicht im April durch den Supportstop sein Lebensende.

Sportler19 05.01.2014 22:27
Und kann das der Grund für meine Probleme sein? Was hat denn der Test ergeben?

Ist mein PC nicht zu schwach für Windows 7 ?? Ich war lange Zeit sehr zufrieden mit dem PC und Windows XP ist für mich einfach super in der Bedienung.

Und als letztes: Was bedeutet es für mich wenn Windows keinen Support mehr anbietet??

Sportler19 10.01.2014 22:59
Kann mir jemand sagen ob mein PC infiziert ist oder zumindest was das Ergebnis des Tests ergeben hat??


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:54 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19