OTL Logfile: Code:
OTL logfile created on: 06.08.2010 18:56:05 - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Dokumente und Einstellungen\Privat\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 48,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): C:\pagefile.sys 2662 2662 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 74,55 Gb Total Space | 24,66 Gb Free Space | 33,08% Space Free | Partition Type: NTFS
Drive D: | 68,64 Gb Total Space | 10,99 Gb Free Space | 16,01% Space Free | Partition Type: NTFS
Drive E: | 5,85 Gb Total Space | 2,25 Gb Free Space | 38,40% Space Free | Partition Type: FAT32
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 122,07 Gb Total Space | 55,47 Gb Free Space | 45,44% Space Free | Partition Type: NTFS
Drive I: | 38,57 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: FAT32
Drive J: | 122,07 Gb Total Space | 14,38 Gb Free Space | 11,78% Space Free | Partition Type: NTFS
Drive M: | 53,95 Gb Total Space | 9,14 Gb Free Space | 16,93% Space Free | Partition Type: NTFS
Computer Name: ******
Current User Name: Privat
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\Privat\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Programme\Anti-Vir\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\Anti-Vir\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Anti-Vir\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
PRC - C:\Programme\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG)
PRC - C:\WINDOWS\system32\snmp.exe (Microsoft Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\BUFFALO\NASNAVI\NasNavi.exe ()
PRC - C:\Programme\BUFFALO\NASNAVI\nassche.exe (BUFFALO INC.)
PRC - C:\Programme\BUFFALO\NASNAVI\nassvc.exe (BUFFALO INC.)
PRC - C:\Programme\UpsPilot\wpRMI.exe (Macrovision)
PRC - C:\Programme\UpsPilot\Winpower.exe (Macrovision)
PRC - C:\Programme\UpsPilot\monitor.exe (Macrovision)
PRC - C:\Programme\UpsPilot\jre\bin\javaw.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\system32\S3Trayp.exe (S3 Graphics Co., Ltd.)
PRC - C:\WINDOWS\system32\VTTimer.exe (S3 Graphics, Inc.)
PRC - C:\Programme\Medion Home Cinema XL II\PowerCinema\PCMService.exe ()
PRC - C:\Programme\Logitech\MouseWare\system\EM_EXEC.EXE (Logitech Inc.)
PRC - C:\WINDOWS\system32\PRISMSTA.exe (Intersil Americas Inc.)
PRC - C:\WINDOWS\CNYHKey.exe (Chicony)
PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe (Microsoft® Corporation)
PRC - C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)
PRC - C:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exe (Computer Associates)
PRC - C:\WINDOWS\Dit.exe ()
PRC - C:\WINDOWS\DitExp.exe ()
PRC - C:\Programme\Common Files\X10\Common\X10nets.exe (X10)
========== Modules (SafeList) ==========
MOD - C:\Dokumente und Einstellungen\Privat\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msvcp60.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
MOD - C:\Programme\Gemeinsame Dateien\Logitech\Scrolling\LGMSGHK.DLL (Logitech Inc.)
MOD - C:\Programme\Logitech\MouseWare\system\LgWndHk.dll (Logitech Inc.)
MOD - C:\WINDOWS\HKCYDLL.dll ()
========== Win32 Services (SafeList) ==========
SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found
SRV - (AntiVirService) -- C:\Programme\Anti-Vir\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Programme\Anti-Vir\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (SandraAgentSrv) -- C:\Programme\SiSoftware Sandra Lite 2009.SP3c\RpcAgentSrv.exe (SiSoftware)
SRV - (CodeMeter.exe) -- C:\Programme\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG)
SRV - (SNMP) -- C:\WINDOWS\system32\snmp.exe (Microsoft Corporation)
SRV - (NasPmService) -- C:\Programme\BUFFALO\NASNAVI\nassvc.exe (BUFFALO INC.)
SRV - (WinpowerRMI) -- C:\Programme\UpsPilot\wpRMI.exe (Macrovision)
SRV - (Winpowermonitor) -- C:\Programme\UpsPilot\monitor.exe (Macrovision)
SRV - (Winpowermanager) -- C:\Programme\UpsPilot\manager.exe (Macrovision)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
SRV - (WANMiniportService) WAN Miniport (ATW) -- C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)
SRV - (CA_LIC_SRVR) -- C:\Programme\CA\SharedComponents\CA_LIC\lic98rmtd.exe (Computer Associates)
SRV - (LogWatch) -- C:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exe (Computer Associates)
SRV - (CA_LIC_CLNT) -- C:\Programme\CA\SharedComponents\CA_LIC\lic98rmt.exe (Computer Associates)
SRV - (LPDSVC) -- C:\WINDOWS\system32\tcpsvcs.exe (Microsoft Corporation)
SRV - (x10nets) -- C:\Programme\Common Files\X10\Common\X10nets.exe (X10)
========== Driver Services (SafeList) ==========
DRV - (MBAMSwissArmy) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (SANDRA) -- C:\Programme\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\sandra.sys (SiSoftware)
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgio) -- C:\Programme\Anti-Vir\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (NwlnkIpx) -- C:\WINDOWS\system32\drivers\nwlnkipx.sys (Microsoft Corporation)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (videX32) -- C:\WINDOWS\system32\DRIVERS\videX32.sys (VIA Technologies, Inc.)
DRV - (ViPrt) -- C:\WINDOWS\system32\DRIVERS\ViPrt.sys (VIA Technologies, Inc.)
DRV - (ViBus) -- C:\WINDOWS\system32\DRIVERS\ViBus.sys (VIA Technologies, Inc.)
DRV - (S3GIGP) -- C:\WINDOWS\system32\drivers\S3gIGPm.sys (S3 Graphics Co., Ltd.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (sea1unic) Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (WDM) -- C:\WINDOWS\system32\drivers\sea1unic.sys (MCCI)
DRV - (sea1obex) -- C:\WINDOWS\system32\drivers\sea1obex.sys (MCCI)
DRV - (sea1nd5) Sony Ericsson Device 0A1 USB Ethernet Emulation SEMCA1 (NDIS) -- C:\WINDOWS\system32\drivers\sea1nd5.sys (MCCI)
DRV - (sea1mgmt) Sony Ericsson Device 0A1 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\sea1mgmt.sys (MCCI)
DRV - (sea1mdm) -- C:\WINDOWS\system32\drivers\sea1mdm.sys (MCCI)
DRV - (sea1mdfl) -- C:\WINDOWS\system32\drivers\sea1mdfl.sys (MCCI)
DRV - (sea1bus) Sony Ericsson Device 0A1 driver (WDM) -- C:\WINDOWS\system32\drivers\sea1bus.sys (MCCI)
DRV - (XUIF) -- C:\WINDOWS\system32\drivers\x10ufx2.sys (X10 Wireless Technology, Inc.)
DRV - (actser) -- C:\WINDOWS\system32\drivers\actser.sys (Siemens AG)
DRV - (LMouFlt2) -- C:\WINDOWS\system32\drivers\LMouFlt2.Sys (Logitech, Inc.)
DRV - (L8042pr2) -- C:\WINDOWS\system32\drivers\L8042pr2.Sys (Logitech, Inc.)
DRV - (LHidFlt2) -- C:\WINDOWS\system32\drivers\LHIDFLT2.SYS (Logitech, Inc.)
DRV - (MxlW2k) -- C:\WINDOWS\System32\drivers\MxlW2k.sys (MusicMatch, Inc.)
DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (WIDCOMM, Inc.)
DRV - (BTSERIAL) -- C:\WINDOWS\system32\drivers\btserial.sys ()
DRV - (BTSLBCSP) -- C:\WINDOWS\system32\drivers\btslbcsp.sys (WIDCOMM, Inc.)
DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (WIDCOMM, Inc.)
DRV - (PRISM_A00) -- C:\WINDOWS\system32\drivers\PRISMA00.sys (Intersil Americas Inc.)
DRV - (PhTVTune) -- C:\WINDOWS\system32\drivers\PhTVTune.sys (Philips Semiconductors)
DRV - (Cap7134) MEDION (7134) -- C:\WINDOWS\system32\drivers\Cap7134.sys (Philips Semiconductors)
DRV - (Intels51) -- C:\WINDOWS\system32\drivers\ctxs51.sys (Intel Corporation)
DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\system32\drivers\wanatw4.sys (America Online, Inc.)
DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (NwlnkNb) -- C:\WINDOWS\system32\drivers\nwlnknb.sys (Microsoft Corporation)
DRV - (NwlnkSpx) -- C:\WINDOWS\system32\drivers\nwlnkspx.sys (Microsoft Corporation)
DRV - (ASAPIW2K) -- C:\WINDOWS\system32\drivers\asapiW2k.sys (VOB Computersysteme GmbH)
DRV - (X10UIF) -- C:\WINDOWS\system32\drivers\x10uif.sys (X10 Wireless Technology, Inc.)
DRV - (ms_mpu401) -- C:\WINDOWS\system32\drivers\msmpu401.sys (Microsoft Corporation)
DRV - (irsir) -- C:\WINDOWS\system32\drivers\irsir.sys (Microsoft Corporation)
DRV - (Wdm1) -- C:\WINDOWS\system32\drivers\usbbc.sys ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://google.icq.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.gmx.net/
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll (ICQ Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5577
O1 HOSTS File: ([2006.02.02 10:45:18 | 000,000,847 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (ICQ Toolbar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll (ICQ Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2D1DDD38-CE4D-459B-A01C-F11BC92D5B69} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (ICQ Toolbar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll (ICQ Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Anti-Vir\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [Cmaudio] C:\WINDOWS\CMICNFG.CPL (C-Media Corporation)
O4 - HKLM..\Run: [Dit] C:\WINDOWS\Dit.exe ()
O4 - HKLM..\Run: [Logitech Utility] C:\WINDOWS\LOGI_MWX.EXE (Logitech Inc.)
O4 - HKLM..\Run: [Microsoft Works Update Detection] C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe (Microsoft® Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [PCMService] C:\Programme\Medion Home Cinema XL II\PowerCinema\PCMService.exe ()
O4 - HKLM..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe ()
O4 - HKLM..\Run: [PRISMSTA.EXE] C:\WINDOWS\System32\PRISMSTA.exe (Intersil Americas Inc.)
O4 - HKLM..\Run: [S3Trayp] C:\WINDOWS\System32\S3Trayp.exe (S3 Graphics Co., Ltd.)
O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
O4 - HKLM..\Run: [VTTimer] C:\WINDOWS\System32\VTTimer.exe (S3 Graphics, Inc.)
O4 - HKLM..\Run: [Winpower] C:\Programme\UpsPilot\Winpower.exe (Macrovision)
O4 - HKCU..\Run: [{0895060A-8891-377A-0CF4-FC03AF177620}] C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Ynenuc\ifer.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\CodeMeter Control Center.lnk = C:\Programme\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Kontrollfeld für die kabellose Tastatur.lnk = C:\WINDOWS\CNYHKey.exe (Chicony)
O4 - Startup: C:\Dokumente und Einstellungen\Privat\Startmenü\Programme\Autostart\BUFFALO NAS Navigator.lnk = C:\Programme\BUFFALO\NASNAVI\NasNavi.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\Privat\Startmenü\Programme\Autostart\NAS Scheduler.lnk = C:\Programme\BUFFALO\NASNAVI\nassche.exe (BUFFALO INC.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Senden an &Bluetooth - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe (ICQ, Inc.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe (ICQ, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: ebay.de ([my] http in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: ebay.de ([my] https in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: ebay.de ([signin] https in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: ebay.de ([www] https in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: gmx.net ([service] https in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: gmx.net ([www] http in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: gmx.net ([www] https in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: gmxattachments.net ([www] https in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: lkw-allrad.de ([www] http in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: lkw-allrad.de ([www] https in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: multi-board.com ([www] http in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: trojaner-board.de ([www] http in Vertrauenswürdige Sites)
O15 - HKCU\..Trusted Domains: trojaner-board.de ([www] https in Vertrauenswürdige Sites)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/templates/ieawsdc.cab (Microsoft Office Template and Media Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-3-30.cab (EPUImageControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1128452179140 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} hxxp://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37884.393599537 (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DE22A7AB-A739-4C58-AD52-21F9CD6306B7} hxxp://download.microsoft.com/download/7/E/6/7E6A8567-DFE4-4624-87C3-163549BE2704/clearadj.cab (CTAdjust Class)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Privat\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Privat\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2003.09.20 16:50:07 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{7ce7912c-082c-11dc-8f1b-00038a000015}\Shell\AutoRun\command - "" = O:\setupSNK.exe -- File not found
O33 - MountPoints2\{9b061f8e-1b96-11d8-85c6-00038a000015}\Shell\AutoRun\command - "" = O:\autorun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010.08.06 18:53:15 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Privat\Desktop\OTL.exe
[2010.08.06 17:21:04 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Privat\Recent
[2010.08.06 14:32:37 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner
[2010.08.04 11:33:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Macromedia
[2010.08.04 07:57:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel
[2010.08.04 07:12:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Sun
[2010.08.04 07:12:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Adobe
[2010.07.28 21:15:59 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010.07.22 07:12:51 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Adobe
[2010.07.12 14:15:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Macromedia
[2010.07.12 14:14:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Adobe
[2010.07.12 13:36:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Malwarebytes
[2010.07.12 13:36:30 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.07.12 13:36:28 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.07.12 13:36:28 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2010.07.12 13:36:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.07.12 08:31:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Privat\Lokale Einstellungen\Anwendungsdaten\vrqugdxul
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.08.06 18:53:18 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Privat\Desktop\OTL.exe
[2010.08.06 18:25:49 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010.08.06 17:39:58 | 000,000,262 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\cc_20100806_173955.reg
[2010.08.06 17:32:24 | 000,002,478 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\cc_20100806_173221.reg
[2010.08.06 17:22:30 | 000,452,622 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\cc_20100806_172207.reg
[2010.08.06 14:32:40 | 000,000,702 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\CCleaner.lnk
[2010.08.06 06:51:54 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.08.06 06:51:09 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.08.06 06:51:06 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.08.06 06:51:04 | 1878,315,008 | -HS- | M] () -- C:\hiberfil.sys
[2010.08.06 06:50:05 | 007,602,176 | -H-- | M] () -- C:\Dokumente und Einstellungen\Privat\NTUSER.DAT
[2010.08.06 06:49:52 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Privat\ntuser.ini
[2010.08.05 16:47:25 | 000,033,696 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\wklnhst.dat
[2010.07.31 08:32:22 | 000,000,377 | ---- | M] () -- C:\Programme\.js
[2010.07.31 08:32:05 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.07.29 07:40:11 | 000,000,150 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\default.pls
[2010.07.27 16:38:10 | 000,094,720 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.07.23 18:45:02 | 001,579,996 | -H-- | M] () -- C:\Dokumente und Einstellungen\Privat\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010.07.20 11:16:01 | 000,000,786 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\GMX SMS-Manager.lnk
[2010.07.12 13:36:32 | 000,000,724 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.11 17:30:45 | 000,001,539 | ---- | M] () -- C:\Dokumente und Einstellungen\Privat\Desktop\DivX Movies.lnk
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.08.06 17:39:57 | 000,000,262 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\cc_20100806_173955.reg
[2010.08.06 17:32:22 | 000,002,478 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\cc_20100806_173221.reg
[2010.08.06 17:22:11 | 000,452,622 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Eigene Dateien\cc_20100806_172207.reg
[2010.08.06 14:32:40 | 000,000,702 | ---- | C] () -- C:\Dokumente und Einstellungen\Privat\Desktop\CCleaner.lnk
[2010.07.31 08:32:22 | 000,000,377 | ---- | C] () -- C:\Programme\.js
[2010.07.19 19:20:12 | 1878,315,008 | -HS- | C] () -- C:\hiberfil.sys
[2010.07.19 12:32:01 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010.07.12 13:36:32 | 000,000,724 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2008.03.20 15:57:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI
[2008.03.12 05:50:02 | 000,013,308 | ---- | C] () -- C:\WINDOWS\UN060501.INI
[2008.03.10 22:23:58 | 000,004,697 | ---- | C] () -- C:\WINDOWS\UN080307.INI
[2007.11.30 13:05:33 | 000,004,208 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2007.11.30 13:05:30 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007.07.03 13:20:04 | 000,060,156 | ---- | C] () -- C:\WINDOWS\System32\jspWinNm.DLL
[2007.07.03 13:20:04 | 000,056,320 | ---- | C] () -- C:\WINDOWS\System32\smemory.dll
[2007.07.03 13:20:04 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\jspWinRni.DLL
[2007.07.03 13:20:04 | 000,051,200 | ---- | C] () -- C:\WINDOWS\System32\TrayIcon12.dll
[2007.07.03 13:20:04 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\jspWin.dll
[2007.07.03 13:20:04 | 000,035,992 | ---- | C] () -- C:\WINDOWS\System32\jspWinRnia.DLL
[2006.01.24 17:52:57 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2005.07.02 00:03:10 | 000,000,017 | ---- | C] () -- C:\WINDOWS\Missing.ini
[2005.06.17 11:41:14 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll
[2004.04.02 20:02:32 | 000,000,435 | ---- | C] () -- C:\WINDOWS\Rexxx1.ini
[2004.04.02 20:02:32 | 000,000,054 | ---- | C] () -- C:\WINDOWS\RExxx.ini
[2004.01.20 21:40:03 | 000,015,576 | R--- | C] () -- C:\WINDOWS\System32\drivers\usbbc.sys
[2004.01.20 21:40:03 | 000,003,953 | R--- | C] () -- C:\WINDOWS\System32\coinst.dll
[2004.01.17 21:31:41 | 000,000,075 | ---- | C] () -- C:\WINDOWS\USBBC.ini
[2004.01.17 21:31:41 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MDI.INI
[2004.01.07 23:36:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\homeDVD-Filme2.INI
[2004.01.07 23:32:14 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2004.01.07 23:31:31 | 000,000,085 | ---- | C] () -- C:\WINDOWS\magix.ini
[2004.01.07 23:31:29 | 000,000,899 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2003.09.22 23:59:49 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2003.09.21 01:42:09 | 000,000,970 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2003.09.20 20:01:38 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2003.09.20 19:24:45 | 000,000,047 | ---- | C] () -- C:\WINDOWS\InoSetup.ini
[2003.09.20 18:09:48 | 000,065,536 | ---- | C] () -- C:\WINDOWS\Dit.DLL
[2003.09.20 18:09:48 | 000,000,208 | ---- | C] () -- C:\WINDOWS\Dit.INI
[2003.09.20 17:56:26 | 000,532,544 | ---- | C] () -- C:\WINDOWS\PIC.dll
[2003.09.20 17:56:26 | 000,049,152 | ---- | C] () -- C:\WINDOWS\CNYUSB.dll
[2003.09.20 17:56:26 | 000,024,576 | ---- | C] () -- C:\WINDOWS\HKCYDLL.dll
[2003.09.20 17:56:26 | 000,011,776 | ---- | C] () -- C:\WINDOWS\HIDMNT.dll
[2003.09.20 17:56:26 | 000,000,360 | ---- | C] () -- C:\WINDOWS\CNYHKey.ini
[2003.09.20 17:33:52 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRMDRV.DLL
[2003.09.20 17:33:52 | 000,003,424 | ---- | C] () -- C:\WINDOWS\cmiainfo.sys
[2003.09.20 17:33:52 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2003.09.20 17:33:52 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2003.09.20 17:33:51 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2003.09.20 17:33:51 | 000,000,010 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2003.09.20 17:33:49 | 000,064,957 | ---- | C] () -- C:\WINDOWS\Cmuda.ini
[2003.09.20 17:33:48 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll
[2003.09.20 16:59:33 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2003.09.20 16:53:11 | 000,000,863 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2003.09.15 16:41:56 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\btsendto_ie.dll
[2003.09.15 16:41:14 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\btsendto_wab.dll
[2003.09.15 16:36:40 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2003.09.15 16:27:04 | 000,022,183 | ---- | C] () -- C:\WINDOWS\System32\drivers\btserial.sys
[2003.09.10 13:22:42 | 000,008,632 | ---- | C] () -- C:\WINDOWS\PRISMDOM.ini
[2003.03.24 10:38:10 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btrez.dll
[2002.05.15 23:29:04 | 000,000,607 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2001.11.23 18:18:00 | 000,000,597 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001.11.14 13:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[1996.04.03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys
========== LOP Check ==========
[2008.01.21 08:39:12 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2009.06.27 13:12:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DriverScanner
[2009.07.15 17:20:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eSim Games
[2005.06.30 19:30:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-DSL SpeedManager
[2007.11.30 15:46:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Teleca
[2008.05.22 15:09:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Viewpoint
[2009.07.15 21:24:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\eSim Games
[2007.05.03 15:34:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\GMX
[2008.06.27 09:51:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\ICQ
[2006.01.06 14:06:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\ICQLite
[2004.02.16 18:53:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Ixiwc
[2004.07.15 19:25:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Leadertech
[2007.12.04 02:36:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Ofco
[2004.02.16 20:21:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\T-DSL SpeedManager
[2007.11.30 16:21:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Teleca
[2010.07.22 07:43:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Tigah
[2010.07.22 07:43:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Umup
[2009.06.27 13:12:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Uniblue
[2008.05.22 15:09:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Viewpoint
[2009.06.27 16:13:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\XCPCSync.OEM
[2006.03.08 13:17:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\XnView
[2006.05.25 14:23:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Ynenuc
[2010.07.22 07:45:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Privat\Anwendungsdaten\Ypacog
========== Purity Check ==========
< End of report > --- --- --- |