Hallo allerseits!!

Ich habe mir unerklaerlicherweise den BKA Trojaner eingefangen.

Leider hat mir die AVIRA Rescue CD nicht weitergeholfen und auch nicht das Karpasky.

Ich habe jetzt ueber OTLEnet.exe gebootet, einen Scan durchgefuehrt und das Resultat ist dieses *Kopie unterhalb meines Textes...

Was muss ich jetzt noch tun, damit ich mein Windows XP wieder starten kann und einen Virusscan mit Avira dann ausfuehren kann. Bitte um Hilfe, bin verzweifelt.

LG an alle.

OTL logfile created on: 8/8/2011 10:16:50 PM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 93.00% Paging File free
Paging file location(s): C:\pagefile.sys 2500 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 244.14 Gb Total Space | 125.40 Gb Free Space | 51.36% Space Free | Partition Type: NTFS
Drive D: | 111.70 Gb Total Space | 58.27 Gb Free Space | 52.17% Space Free | Partition Type: NTFS
Drive E: | 221.62 Gb Total Space | 176.53 Gb Free Space | 79.66% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto] -- -- (WudfSvc)
SRV - File not found [On_Demand] -- -- (WMPNetworkSvc)
SRV - File not found [On_Demand] -- -- (usnjsvc)
SRV - File not found [Auto] -- -- (TeamViewer4)
SRV - File not found [Auto] -- -- (PnkBstrB)
SRV - File not found [Auto] -- -- (PnkBstrA)
SRV - File not found [Auto] -- -- (PMounter)
SRV - File not found [On_Demand] -- -- (IDriverT)
SRV - File not found [Auto] -- -- (HidServ)
SRV - File not found [On_Demand] -- -- (gusvc)
SRV - File not found [On_Demand] -- -- (FLEXnet Licensing Service)
SRV - File not found [Disabled] -- -- (de_serv)
SRV - File not found [Auto] -- -- (Brother XP spl Service)
SRV - File not found [Auto] -- -- (AVM WLAN Connection Service)
SRV - File not found [Auto] -- -- (Apple Mobile Device)
SRV - [2011/07/02 03:02:04 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/04/28 02:26:54 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/09/06 12:56:38 | 000,247,096 | ---- | M] () [Auto] -- C:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2010/01/09 16:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009/01/21 09:00:54 | 000,065,536 | ---- | M] () [Auto] -- C:\Programme\Brother\BRAdmin Professional 3\bratimer.exe -- (BRA_Scheduler)
SRV - [2008/04/13 22:22:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (W3SVC)
SRV - [2008/04/13 22:22:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (SMTPSVC) Simple Mail Transfer Protocol (SMTP)
SRV - [2008/04/13 22:22:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (MSFtpsvc)
SRV - [2008/04/13 22:22:49 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (IISADMIN)
SRV - [2008/04/13 22:22:23 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\WINDOWS\system32\p2pgasvc.dll -- (p2pgasvc)
SRV - [2008/04/13 22:22:23 | 000,038,400 | ---- | M] (Microsoft Corporation) [Auto] -- D:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc)
SRV - [2008/04/13 22:22:12 | 000,036,864 | ---- | M] (Microsoft Corporation) [Auto] -- C:\WINDOWS\system32\iprip.dll -- (Iprip)
SRV - [2008/01/16 10:02:16 | 000,081,920 | ---- | M] () [Auto] -- C:\Programme\Brother\Web BRAdmin\cgi-bin\agentrcv.exe -- (WBA_Agent_Receiver)
SRV - [2008/01/16 09:48:22 | 000,081,920 | ---- | M] () [Auto] -- C:\Programme\Brother\Web BRAdmin\cgi-bin\wbaagent.exe -- (WBA_Agent_Client_Service)
SRV - [2008/01/16 03:53:12 | 000,065,536 | ---- | M] () [Auto] -- C:\Programme\Brother\Web BRAdmin\cgi-bin\wbatimer.exe -- (WBA_Scheduler)
SRV - [2003/06/19 17:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WudfRd)
DRV - File not found [Kernel | Boot] -- -- (WudfPf)
DRV - File not found [Kernel | On_Demand] -- -- (WpdUsb)
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [File_System | System] -- -- (SysVfs)
DRV - File not found [Kernel | On_Demand] -- -- (StillCam)
DRV - File not found [Kernel | On_Demand] -- -- (ss_mdm)
DRV - File not found [Kernel | On_Demand] -- -- (ss_mdfl)
DRV - File not found [Kernel | On_Demand] -- -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand] -- -- (MarvinBus)
DRV - File not found [Kernel | Auto] -- -- (lirsgt)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | Auto] -- -- (Haspnt)
DRV - File not found [Kernel | Auto] -- -- (hardlock)
DRV - File not found [Kernel | On_Demand] -- -- (fwlanusbn)
DRV - File not found [Kernel | On_Demand] -- -- (FWLANUSB)
DRV - File not found [File_System | System] -- -- (Ext2Fs)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - File not found [Kernel | On_Demand] -- -- (BrUsbScn) Brother MFC-Scannertreiber (USB)
DRV - File not found [Kernel | On_Demand] -- -- (BrUsbMdm) Brother MFC-nur-Fax-Modem (USB)
DRV - File not found [Kernel | On_Demand] -- -- (BrSerWDM) Brother WDM-Treiber (seriell)
DRV - File not found [Kernel | Auto] -- -- (BrPar)
DRV - File not found [Kernel | On_Demand] -- -- (brfilt)
DRV - File not found [Kernel | On_Demand] -- -- (avmeject)
DRV - File not found [Kernel | On_Demand] -- -- (avmaura)
DRV - File not found [Kernel | Auto] -- -- (atksgt)
DRV - File not found [Kernel | System] -- -- (ASPI32)
DRV - File not found [Kernel | On_Demand] -- -- (ASAPIW2k)
DRV - File not found [Kernel | On_Demand] -- -- (AIDA32Driver)
DRV - File not found [Kernel | Auto] -- -- (acedrv11)
DRV - [2011/07/02 03:02:04 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/07/02 03:02:04 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/02/11 08:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2009/06/22 07:48:44 | 000,091,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mqac.sys -- (MQAC)
DRV - [2009/05/11 06:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/05/11 04:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008/05/08 10:02:52 | 000,203,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rmcast.sys -- (RMCAST)
DRV - [2008/04/13 14:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008/04/13 14:36:41 | 000,063,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mf.sys -- (mf)
DRV - [2007/10/25 11:26:10 | 000,005,632 | ---- | M] () [File_System | System] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2007/08/06 09:29:46 | 000,094,720 | ---- | M] (Guillemot Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\camfilt2.sys -- (camfilt2)
DRV - [2007/07/17 12:07:42 | 010,371,072 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3)
DRV - [2007/02/07 11:57:20 | 000,035,840 | ---- | M] (CACE Technologies) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\npf_devolo.sys -- (NPF_devolo) NetGroup Packet Filter Driver (devolo)
DRV - [2003/03/05 06:19:28 | 000,015,840 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\PFMODNT.SYS -- (PfModNT)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/VirtualEarth3D,version=4.0: File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.69: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: File not found
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Programme\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins

[2011/08/08 22:14:37 | 000,000,000 | ---D | M] (No name found) -- B:\Documents and Settings\Default User\Application Data\Mozilla\Extensions

O1 HOSTS File: ([2011/08/08 18:06:58 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - File not found
O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - File not found
O2 - BHO: (Pando Search Assistant BHO) - {06663B51-0D73-4f9f-BCC5-4AA941470AFD} - File not found
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - File not found
O2 - BHO: (CInterceptor Object) - {38D3FE60-3D53-4F37-BB0E-C7A97A26A156} - File not found
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - File not found
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - File not found
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - File not found
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - File not found
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - File not found
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - File not found
O2 - BHO: (Pando Toolbar BHO) - {E3EA4FD1-CADE-4ae5-84F7-086EEE888BE4} - File not found
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - File not found
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - File not found
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] File not found
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AVMWlanClient] File not found
O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [MAAgent] File not found
O4 - HKLM..\Run: [MsmqIntCert] C:\WINDOWS\System32\mqrt.dll (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [Opware15] File not found
O4 - HKLM..\Run: [PinnacleDriverCheck] File not found
O4 - HKLM..\Run: [SMSTray] File not found
O4 - HKLM..\Run: [SoundMan] File not found
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TkBellExe] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - File not found
O9 - Extra 'Tools' menuitem : Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - File not found
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - File not found
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - File not found
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Programme\Yahoo!\Common\yinsthelper.dll (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file:///C:/WINDOWS/Java/classes/xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - File not found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - File not found
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - File not found
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - File not found
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - File not found
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - File not found
O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {88485281-8b4b-4f8d-9ede-82e29a064277} - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/07/16 10:58:07 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/08/08 20:41:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32\config\systemprofile\Local Settings
[2011/08/08 18:06:24 | 002,237,440 | R--- | C] (OldTimer Tools) -- C:\OTLPE.exe
[2011/08/08 18:06:15 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/08/04 17:20:11 | 000,000,000 | ---D | C] -- C:\Programme\EB Documentation
[2011/08/04 17:19:57 | 000,000,000 | ---D | C] -- C:\Programme\Recruitment Viewer
[2011/08/04 17:19:38 | 000,000,000 | ---D | C] -- C:\Programme\EBTrivialScript
[2011/07/11 16:14:43 | 000,000,000 | ---D | C] -- C:\Dimitrios Bilder
[2010/07/29 18:27:54 | 000,045,056 | ---- | C] ( ) -- C:\WINDOWS\System32\ct_api_com.dll
[2010/07/29 16:59:49 | 000,057,344 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll
[2010/07/29 16:59:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll

========== Files - Modified Within 30 Days ==========

[2011/08/08 20:39:52 | 000,000,475 | ---- | M] () -- C:\haha
[2011/08/08 18:06:58 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2011/08/08 14:57:40 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1715567821-1993962763-725345543-1016.job
[2011/08/08 14:57:13 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1715567821-1993962763-725345543-1016.job
[2011/08/08 14:57:12 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/08/08 14:57:12 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/08 14:57:07 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1715567821-1993962763-725345543-1003.job
[2011/08/08 14:57:06 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1715567821-1993962763-725345543-1004.job
[2011/08/08 14:57:06 | 000,000,262 | ---- | M] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011/08/08 14:53:03 | 000,001,094 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/08 14:53:00 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{C498935C-6A4A-49D0-AB6F-40B5780903F4}.job
[2011/08/08 14:51:47 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/08/08 14:50:47 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1715567821-1993962763-725345543-1004.job
[2011/08/08 03:40:57 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1715567821-1993962763-725345543-1003.job
[2011/08/08 01:21:57 | 000,001,952 | ---- | M] () -- C:\WINDOWS\System32\PrivacyProvider.ini
[2011/08/08 01:21:57 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\PCProxyOff.ini
[2011/08/07 13:50:21 | 000,000,254 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job
[2011/08/06 11:12:27 | 000,000,464 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Psyrakis.job
[2011/08/05 08:34:01 | 000,000,248 | ---- | M] () -- C:\WINDOWS\RomeTW.ini
[2011/08/05 03:28:17 | 000,286,112 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/08/04 16:36:41 | 824,204,729 | ---- | M] () -- C:\Programme\EB1.1.exe
[2011/08/03 03:56:48 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/07/27 12:58:16 | 000,002,520 | ---- | M] () -- C:\WINDOWS\WINACS.INI
[2011/07/17 05:10:37 | 000,000,432 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI
[2011/07/13 21:01:16 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/07/12 22:55:05 | 002,237,440 | R--- | M] (OldTimer Tools) -- C:\OTLPE.exe

========== Files Created - No Company Name ==========

[2011/08/08 20:42:44 | 000,000,475 | ---- | C] () -- C:\haha
[2011/08/04 16:28:40 | 824,204,729 | ---- | C] () -- C:\Programme\EB1.1.exe
[2011/07/29 07:41:59 | 000,000,278 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1715567821-1993962763-725345543-1004.job
[2011/06/29 06:47:39 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2011/06/21 17:01:01 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\PCProxyOff.ini
[2011/06/21 16:22:11 | 002,740,224 | ---- | C] () -- C:\WINDOWS\System32\PrivacyProvider.exe
[2011/06/21 16:22:11 | 000,471,040 | ---- | C] () -- C:\WINDOWS\System32\RegisterLSP.exe
[2011/06/21 16:22:11 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\PrivacyProvider.dll
[2011/06/21 16:22:11 | 000,001,952 | ---- | C] () -- C:\WINDOWS\System32\PrivacyProvider.ini
[2011/06/10 16:41:00 | 000,000,040 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2011/05/29 17:31:26 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2011/05/27 12:22:09 | 000,000,276 | ---- | C] () -- C:\WINDOWS\game.ini
[2011/05/25 06:40:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2011/05/25 06:35:47 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011/05/23 07:04:52 | 000,000,248 | ---- | C] () -- C:\WINDOWS\RomeTW.ini
[2011/05/08 15:58:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\cd.dat
[2011/05/08 15:15:55 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/05/08 15:15:55 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/05/08 15:15:55 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/05/08 15:15:55 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/05/08 15:15:55 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/05/06 13:40:46 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Ubuwumusetubet.dat
[2011/05/06 13:40:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Fnozanawif.bin
[2011/04/15 12:16:13 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011/04/15 12:16:13 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010/11/27 09:40:59 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/08/06 04:17:29 | 000,002,520 | ---- | C] () -- C:\WINDOWS\WINACS.INI
[2010/08/06 04:17:29 | 000,001,061 | ---- | C] () -- C:\WINDOWS\WINACSLok.INI
[2010/08/06 04:16:44 | 000,000,970 | ---- | C] () -- C:\WINDOWS\IsyPoller.ini
[2010/08/06 04:16:44 | 000,000,214 | ---- | C] () -- C:\WINDOWS\cardterm.ini
[2010/08/06 04:16:43 | 000,000,031 | ---- | C] () -- C:\WINDOWS\HIGHEDIT.INI
[2010/08/06 03:33:08 | 000,001,756 | ---- | C] () -- C:\WINDOWS\dcdruck.dat
[2010/08/04 10:55:09 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\omnithread_rt.dll
[2010/08/03 07:16:53 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\vsmon1.dll
[2010/07/30 03:31:01 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll
[2010/07/30 03:31:01 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe
[2010/07/29 18:31:23 | 000,001,657 | ---- | C] () -- C:\WINDOWS\WINACSALTNetz.INI
[2010/07/29 18:27:58 | 000,004,681 | ---- | C] () -- C:\WINDOWS\System32\FoxFix5.ini
[2010/07/29 18:27:57 | 000,573,952 | ---- | C] () -- C:\WINDOWS\System32\HEKRNL32.DLL
[2010/07/29 18:27:57 | 000,225,792 | ---- | C] () -- C:\WINDOWS\System32\IMGMAN30.DLL
[2010/07/29 18:27:57 | 000,187,392 | ---- | C] () -- C:\WINDOWS\System32\HEICON32.DLL
[2010/07/29 18:27:57 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\HEMENU32.DLL
[2010/07/29 18:27:57 | 000,069,120 | ---- | C] () -- C:\WINDOWS\System32\HEDLG32.DLL
[2010/07/29 18:27:57 | 000,066,560 | ---- | C] () -- C:\WINDOWS\System32\HERTF32.DLL
[2010/07/29 18:27:57 | 000,039,936 | ---- | C] () -- C:\WINDOWS\System32\HETOOL32.DLL
[2010/07/29 18:27:56 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\vbzlib1.dll
[2010/07/29 18:27:56 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2010/07/29 18:27:55 | 001,261,568 | ---- | C] () -- C:\WINDOWS\System32\QtCore4.dll
[2010/07/29 18:27:55 | 000,368,640 | ---- | C] () -- C:\WINDOWS\System32\QtSql4.dll
[2010/07/29 18:27:55 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\Msvcrt10.dll
[2010/07/29 18:27:55 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\pdf_edit.dll
[2010/07/29 18:19:09 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2010/07/29 18:00:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brdfxspd.dat
[2010/07/29 17:25:50 | 000,003,821 | ---- | C] () -- C:\WINDOWS\medikam.ini
[2010/07/29 17:25:13 | 000,001,369 | ---- | C] () -- C:\WINDOWS\TERMINPL.INI
[2010/07/29 17:25:13 | 000,000,070 | ---- | C] () -- C:\WINDOWS\ZIFFGRID.INI
[2010/07/29 17:25:12 | 000,006,752 | ---- | C] () -- C:\WINDOWS\CMBTLL.INI
[2010/07/29 17:25:12 | 000,005,814 | ---- | C] () -- C:\WINDOWS\MAP.INI
[2010/07/29 17:25:12 | 000,004,770 | ---- | C] () -- C:\WINDOWS\PRIVABR.INI
[2010/07/29 17:25:12 | 000,004,279 | ---- | C] () -- C:\WINDOWS\CUSTOEXP.INI
[2010/07/29 17:25:12 | 000,001,716 | ---- | C] () -- C:\WINDOWS\KVDT.INI
[2010/07/29 17:25:12 | 000,001,078 | ---- | C] () -- C:\WINDOWS\EKGSMP.INI
[2010/07/29 17:25:12 | 000,001,025 | ---- | C] () -- C:\WINDOWS\MESS.INI
[2010/07/29 17:25:12 | 000,000,819 | ---- | C] () -- C:\WINDOWS\LABOR.INI
[2010/07/29 17:25:12 | 000,000,763 | ---- | C] () -- C:\WINDOWS\adrspal.ini
[2010/07/29 17:25:12 | 000,000,704 | ---- | C] () -- C:\WINDOWS\DIKTAT.INI
[2010/07/29 17:25:12 | 000,000,674 | ---- | C] () -- C:\WINDOWS\EKG.INI
[2010/07/29 17:25:12 | 000,000,639 | ---- | C] () -- C:\WINDOWS\CUSTOMAP.INI
[2010/07/29 17:25:12 | 000,000,585 | ---- | C] () -- C:\WINDOWS\SCANMDI.INI
[2010/07/29 17:25:12 | 000,000,583 | ---- | C] () -- C:\WINDOWS\ABRSORT.INI
[2010/07/29 17:25:12 | 000,000,403 | ---- | C] () -- C:\WINDOWS\ADRESSEN.INI
[2010/07/29 17:25:12 | 000,000,251 | ---- | C] () -- C:\WINDOWS\DIGI.INI
[2010/07/29 17:25:12 | 000,000,162 | ---- | C] () -- C:\WINDOWS\SAPRI.INI
[2010/07/29 17:25:12 | 000,000,084 | ---- | C] () -- C:\WINDOWS\BETTENPL.INI
[2010/07/29 17:25:12 | 000,000,070 | ---- | C] () -- C:\WINDOWS\PLZGRID.INI
[2010/07/29 17:25:12 | 000,000,057 | ---- | C] () -- C:\WINDOWS\FLEX.INI
[2010/07/29 17:18:31 | 000,000,432 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2010/07/29 17:18:28 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2010/07/29 17:18:20 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\BRTCPCON.DLL
[2010/07/29 17:18:17 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\BRLMW03A.INI
[2010/07/29 17:17:48 | 000,000,070 | ---- | C] () -- C:\WINDOWS\Brownie.ini
[2010/07/29 17:13:48 | 000,000,221 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2010/07/29 17:13:48 | 000,000,093 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2010/07/29 17:13:48 | 000,000,065 | ---- | C] () -- C:\WINDOWS\System32\bd7840w.dat
[2010/07/29 17:12:25 | 000,000,146 | ---- | C] () -- C:\WINDOWS\Brfaxrx.ini
[2010/07/29 17:12:24 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2010/07/29 17:10:04 | 000,031,664 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2010/07/29 16:59:48 | 000,015,478 | ---- | C] () -- C:\WINDOWS\snpstd3.ini
[2010/07/29 16:59:29 | 003,600,384 | ---- | C] () -- C:\WINDOWS\ffmpeg.exe
[2010/07/29 16:10:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/07/29 15:42:12 | 000,000,534 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/07/29 15:08:29 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[2010/07/29 15:05:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\frontpg.ini
[2010/07/29 15:04:34 | 000,024,222 | ---- | C] () -- C:\WINDOWS\System32\smtpctrs.ini
[2010/07/29 15:04:34 | 000,001,137 | ---- | C] () -- C:\WINDOWS\System32\ntfsdrct.ini
[2010/07/29 15:04:20 | 000,012,089 | ---- | C] () -- C:\WINDOWS\System32\ftpctrs.ini
[2010/07/29 15:04:18 | 000,061,950 | ---- | C] () -- C:\WINDOWS\System32\w3ctrs.ini
[2010/07/29 15:04:18 | 000,016,173 | ---- | C] () -- C:\WINDOWS\System32\axperf.ini
[2010/07/29 15:04:16 | 000,017,590 | ---- | C] () -- C:\WINDOWS\System32\infoctrs.ini
[2010/07/29 15:04:11 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2010/07/29 14:56:14 | 000,004,346 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/07/29 14:54:56 | 000,286,112 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/07/29 14:46:45 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/07/29 14:41:22 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/02/11 00:12:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010/02/11 00:12:00 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2009/11/17 11:13:12 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\LXPrnUtil10.dll
[2009/11/17 11:11:26 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\dnt27VC8.dll
[2009/11/17 11:09:36 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\dntvmc27VC8.dll
[2009/11/17 11:09:20 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\dntvm27VC8.dll
[2009/04/23 18:29:16 | 000,189,051 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2007/10/25 11:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2007/03/26 04:45:18 | 000,071,208 | ---- | C] () -- C:\WINDOWS\System32\PhysXLoader.dll
[2007/02/20 08:59:08 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007/02/20 08:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007/02/20 08:59:04 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2006/02/13 09:05:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006/02/13 09:05:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2006/02/13 09:05:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006/02/13 09:05:00 | 000,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/02/13 09:05:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2006/02/13 09:05:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2006/02/13 09:05:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/02/13 09:05:00 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2004/08/04 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/04 08:00:00 | 000,682,992 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004/08/04 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/04 08:00:00 | 000,625,596 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/04 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/04 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004/08/04 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/04 08:00:00 | 000,170,680 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004/08/04 08:00:00 | 000,140,086 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/04 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/04 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004/08/04 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/04 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/04 08:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/04 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/04 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

========== LOP Check ==========

[2010/07/29 18:21:12 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\TeamViewer
[2011/08/08 14:57:06 | 000,000,262 | ---- | M] () -- C:\WINDOWS\Tasks\RegistryBooster.job
[2011/08/07 13:50:21 | 000,000,254 | ---- | M] () -- C:\WINDOWS\Tasks\RMSchedule.job
[2011/08/08 14:53:00 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{C498935C-6A4A-49D0-AB6F-40B5780903F4}.job

========== Purity Check ==========


< End of report >

Hast du den Scan wirklich richtig gemacht? Ich seh da zu viele "File not found" außerdem nicht mal den typischen Eintrag für das BKA-Vieh.