hallo,

eine bekannte bat mich, mir mal ihren rechner anzusehen. wie im titel schon stehend, leitet google bei ner suche stets auf die o.g. seiten weiter und windows vista sicherheitscenter lässt sich nicht aktivieren.

otl wurde bereits geladen.

extra text:

OTL Extras logfile created on: 17.05.2012 16:37:47 - Run 1
OTL by OldTimer - Version 3.2.43.0     Folder = C:\Users\****\Downloads
Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19088)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
989,83 Mb Total Physical Memory | 120,36 Mb Available Physical Memory | 12,16% Memory free
2,19 Gb Paging File | 1,02 Gb Available in Paging File | 46,53% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 49,46 Gb Total Space | 12,81 Gb Free Space | 25,90% Space Free | Partition Type: NTFS
Drive D: | 11,40 Gb Total Space | 11,32 Gb Free Space | 99,26% Space Free | Partition Type: NTFS
Drive E: | 39,06 Gb Total Space | 27,54 Gb Free Space | 70,50% Space Free | Partition Type: NTFS
Drive F: | 37,27 Gb Total Space | 37,16 Gb Free Space | 99,72% Space Free | Partition Type: NTFS
 
Computer Name: ****-PC | User Name: **** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = ] -- Reg Error: Key error. File not found
.html [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"UacDisableNotify" = 0
"InternetSettingsDisableNotify" = 0
"AutoUpdateDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{2875E739-3BE6-4283-8967-A08DDDAAC81B}" = lport=2869 | protocol=6 | dir=in | name=microsoft upnp-port (tcp) | 
"{99218032-0286-43C6-8D6F-84BE7B7695E3}" = lport=1900 | protocol=17 | dir=in | name=microsoft upnp-port (udp) | 
"{AE1C8952-0204-4E30-B44F-B0F86194BCF2}" = lport=0 | protocol=6 | dir=in | name=magix upnp media server | 
"{D3F77B88-36EE-446C-A2FC-1A773CCE3C9C}" = lport=2869 | protocol=6 | dir=in | name=microsoft upnp-port (tcp) | 
"{F05A532C-4328-4DAC-AB1B-6F80FB4DF2C9}" = lport=1900 | protocol=17 | dir=in | name=microsoft upnp-port (udp) | 
"{F3BB06BF-110D-489B-A212-49969D01D4C9}" = lport=0 | protocol=6 | dir=in | name=magix upnp media server | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{002A8203-C96D-47FC-9EDC-9546E867DAA6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{009A2C2A-988D-4B76-BC1C-E0393E54BB94}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{009FCD61-8B03-49A8-A28C-7E99880E20A1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0A9C18B6-38DB-41E7-B5BF-9529658D0AB4}" = protocol=17 | dir=in | app=c:\users\****\appdata\local\google\google talk plugin\googletalkplugin.exe | 
"{0C84084C-BB53-4031-A26C-858F41BC9689}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0DD088B4-42C1-4313-8F53-2FEB4D684CDC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{0FFF61ED-797A-445A-AB64-BE40737F6DAF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{12507142-12FF-4498-8370-784514B73193}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe | 
"{13DD6A7B-9FC8-4E22-8C7B-A9D1E48F8BE1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{140E366F-A6B0-458A-8B1F-5F224EC487AC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{15D58AC7-2523-4808-B620-456AFCDB3406}" = protocol=17 | dir=in | app=c:\windows\twain_32\samsung\clx3180\scan2pc.exe | 
"{169EAA2F-8104-4146-A837-11CB2FB64CB6}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1896DFD3-C7C6-4B54-86D8-3B18E22A28DA}" = protocol=17 | dir=in | app=c:\program files\scan assistant\usdagent.exe | 
"{1CC96E44-D4A7-4D03-8849-5401177E378E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{1F0A3F88-DFC8-41D5-B70C-3122771D255B}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe | 
"{200D52E2-9C60-4F99-AFBE-38410CAECDBD}" = protocol=6 | dir=in | app=c:\program files\common files\magix shared\upnpservice\upnpservice.exe | 
"{2419B32A-6964-4B66-A073-75DA4EF9DBA7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{26EC7BD9-FB3F-4A1A-888B-ECA5B4159F1B}" = protocol=6 | dir=in | app=c:\windows\twain_32\samsung\scanmgr.exe | 
"{2F0AB30B-F5A9-4E3A-BD95-FBF541CFAAE1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{30191EBD-630E-4D99-9B32-C4D56FD2E1CC}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{30D3B210-188C-47B4-B3E4-516C5452A22D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{32586B26-17AB-4305-BA9F-B0013662248C}" = protocol=17 | dir=in | app=c:\windows\twain_32\samsung\clx3180\sscan2io.exe | 
"{37F98A22-EC1B-4972-B0C3-D082868CB4EF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3858980D-7CAC-44A4-828F-B8CFF497A267}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3A0D6D09-1E03-4297-A2DC-8B39B143A4B5}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3B2484FF-91AB-4FDE-9091-01B022EF8EA1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3CEFD910-FAC1-4CAA-A1CC-5CDA0D5AE482}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3E6AA2F4-2EE1-47E8-A045-158D22A741C4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{3F00FBE1-0432-47DB-A2B4-ED4830F57D4B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{402B9A23-EB4B-4E2E-A686-DAE5FB4E972C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{427527C6-304C-40F2-BD3C-AD1338293756}" = protocol=6 | dir=in | app=c:\windows\twain_32\samsung\clx3180\scan2pc.exe | 
"{4427DE08-EE6F-4C74-80B8-9C92EF8E10AC}" = protocol=17 | dir=in | app=c:\program files\common files\magix shared\upnpservice\upnpservice.exe | 
"{455B3A3B-EE8F-4646-BF6B-DC03B0C11330}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{464A539C-3AC7-4D7A-AEDA-79D8B444DE44}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{48C3B0A3-405A-46F5-A8CD-AE6DC2D9BDEF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{4A630EEB-65AE-4BB9-B80E-4ABEEFBB33C7}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{530729D6-DD33-488A-B609-A78BBACA9C16}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5964DF37-8161-42B3-AEC7-8B8C1085D91B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5C17568A-02F1-4702-931E-9CCA7177BF43}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5D82E3DF-3BB2-44ED-90BA-4C43402E3A35}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{5DA22A71-5FA9-4B8D-BA49-3030FAB7A9A1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{61FE5144-B17A-4DE2-AA98-A15EBE4FC24F}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{64F2B024-80AD-4D69-96F1-18973BC367D9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6657C52E-67F8-4E49-9543-259FAB98E76B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{69A26F2D-4004-4936-B362-7416D9EE8073}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe | 
"{6A39CD88-AE05-4A32-AE57-BF42903F0ACD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{6D6A4B4F-808C-4507-91B1-9ACEB7999131}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{75FCD074-C4FA-4742-9C32-FFD450F83707}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{7A5471EF-822D-48EA-9182-C78B78F0940E}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe | 
"{7C6AB46B-F986-4F48-BDFD-E267D67AAB1C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{7E2015AA-068D-4796-8B2D-DF499573A6E3}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe | 
"{7E80D696-BF6F-4F4F-BE32-9D3AD93458E2}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{801E0E39-9F1A-4CAA-A5FD-632E32CB7407}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{818F247C-B144-4A43-91B9-793ACAF3FBFF}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8335CC92-353B-4ADE-AD08-555A6AB8EFC8}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8663F16C-FB4E-44C9-8D77-513847E3AA15}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{878437CA-05D3-4E1A-B02A-9D144D3C89F9}" = protocol=6 | dir=in | app=c:\program files\common files\magix shared\upnpservice\upnpservice.exe | 
"{89FF3BAC-3319-461B-B547-9A993F6F8849}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8DF02026-95EA-45D1-A904-1768987E3DBA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{8EF36EDA-6C54-468E-B61D-B7C7E2583FF8}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"{92A536FF-13AC-4F79-BB76-EA7C8B9D2B31}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{945E49D7-AEBF-414A-BABC-32CB7ADD1C04}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{99799D1C-AE03-4ABD-BD93-CE245902FC98}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe | 
"{9B76BD58-D2F6-432A-9557-96E7181F7D93}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9E03434A-E1FA-447A-A04E-FEB1DEEE8CE9}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9E51CD6D-2C81-4816-96EA-9615A4EB4978}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{9E6ED334-B40D-4F02-8802-EA09255C9042}" = protocol=6 | dir=in | app=c:\program files\scan assistant\usdagent.exe | 
"{9EEA4CE5-B356-4269-B686-F8CEF0FE4D80}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe | 
"{A1C2A4A0-916E-4868-9E29-3F79B581A182}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{A492D6C4-AB3F-4DC8-91B5-A1B54354A3B1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{AAFA8A63-4DBB-4199-BD3D-89883E20F35B}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{AD0FBD1E-F120-4462-AF23-ED3AB7D94960}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B12FB9B4-9CBA-4BCB-923D-2BE4EFF91D2A}" = protocol=6 | dir=in | app=c:\users\****\appdata\local\google\google talk plugin\googletalkplugin.exe | 
"{B2D38A3D-B2F6-4D3F-B7F4-E98C0B422CBD}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{B8041D9E-90D3-4EE6-B513-C52E3409C56A}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{BFBDEE27-E31A-4DF3-9B60-A5B595D88AF9}" = protocol=17 | dir=in | app=c:\windows\twain_32\samsung\scanmgr.exe | 
"{C37B5328-1872-4417-87D2-03B65268EFD3}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CA72B8E2-C2EE-4C4D-A8BF-48ED2C246194}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{CBB1113A-D283-4AB5-B70B-41A16AF55F7D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D196C37F-9F2A-40A3-8B36-3B38E99E98D4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D457CE4E-9ECC-4917-9946-7BBD922C6079}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{D7FBD589-C390-47F9-900E-799D6EF60C27}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{DACE0F4E-C813-4485-B8D0-1CB3462A35B0}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{DEF59D4D-FE2E-4683-A9C8-872E4972EC94}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{EB9C8D0E-2A77-4A91-BC09-709B3F087493}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"{F1655C5F-84BD-46F7-89AA-B151DCD76CB3}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe | 
"{F37DA48E-342D-4E5A-BFEF-1A2722EF0FCF}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe | 
"{F48A39EF-655F-4C6A-8E8F-1B0B96262E5D}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{F51B0CCC-6FBD-4EDD-9B89-9D9DB9CD910F}" = protocol=17 | dir=in | app=c:\program files\common files\magix shared\upnpservice\upnpservice.exe | 
"{F54FDA5B-0FCE-4683-BECA-00124F676D5C}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FF362EDB-E073-4D78-809D-8B5E8BBB5E1E}" = protocol=6 | dir=in | app=c:\windows\twain_32\samsung\clx3180\sscan2io.exe | 
"{FF39CC71-B0A6-476B-895D-E4C392FDD141}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FFAADE27-0E0D-4CD5-A75B-554CF11F4BCA}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{FFE3DDF6-707E-406B-8D12-12C216CB1296}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"TCP Query User{8F32AB57-9EB5-442E-B313-BB8864908F86}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{EF5FBFAA-6A04-4EF9-BC96-93D9C2ECA409}C:\program files\seh computertechnik gmbh\intercon-nettool\intercon-nettool.exe" = protocol=6 | dir=in | app=c:\program files\seh computertechnik gmbh\intercon-nettool\intercon-nettool.exe | 
"UDP Query User{B37A8075-34AE-49BA-91E7-A0E9302ACDA0}C:\program files\seh computertechnik gmbh\intercon-nettool\intercon-nettool.exe" = protocol=17 | dir=in | app=c:\program files\seh computertechnik gmbh\intercon-nettool\intercon-nettool.exe | 
"UDP Query User{C2866463-5272-40CE-8E36-F9965A49DE99}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00CBF5CE-B92E-C688-2B49-03E71B72F47F}" = ATI Catalyst Install Manager
"{01A3CF6F-DD47-483E-1801-D65331311FD7}" = Catalyst Control Center Localization Russian
"{06D29AFF-795B-746B-8C99-9DBFA69A3C67}" = Skins
"{09CA75F9-BE94-1743-D5CC-F04292B23BA7}" = Catalyst Control Center Localization Czech
"{10DEA221-50FF-7634-9B98-55D87303590E}" = Catalyst Control Center Localization Hungarian
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{16DB1A6C-159D-4231-5003-7323A77C538D}" = Catalyst Control Center Localization German
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{193D3848-1590-2875-CA91-AFD13E8E3D9D}" = CCC Help German
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F48FD7D-7E90-A748-7F13-D490B8300225}" = CCC Help Italian
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{228EBDBA-69F0-6947-8F89-7FAB3858ADF0}" = CCC Help Danish
"{262DA207-A62C-4CEF-CEF0-C9C2F85633F6}" = CCC Help Polish
"{26A24AE4-039D-4CA4-87B4-2F83216032FF}" = Java(TM) 6 Update 32
"{26CE0602-6D3E-2369-8C1D-061C58DC2B13}" = Catalyst Control Center Localization Chinese Standard
"{2C492A32-32A1-FE52-AE6B-5C28BB0ADAFB}" = CCC Help Spanish
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{3835AE6D-8BA0-EECB-5A4F-6ABC7C6BB6E1}" = Catalyst Control Center Localization Italian
"{3B61E537-890C-53F2-4C28-936417BACBF0}" = Catalyst Control Center Localization Finnish
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{3C91A233-10C8-70D8-13EF-BC072A4BCC51}" = Catalyst Control Center Localization Thai
"{3D01E24B-7EA1-6363-8D88-54348D0889B9}" = Catalyst Control Center Localization Chinese Traditional
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4173DCAD-EE28-3FC9-80F0-01225EF10577}" = Catalyst Control Center Graphics Previews Common
"{42A49494-6725-47B8-FE72-A7DD8B229488}" = CCC Help Turkish
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works
"{4EF8BE6A-899C-4196-94E7-297C5F7A203E}" = pdfforge Toolbar v1.1.1
"{4FA858AE-A1B8-BBFA-1F00-237DA35D847B}" = CCC Help Thai
"{51D8085D-6276-D060-7181-64E3372EFC6F}" = Catalyst Control Center Localization Swedish
"{527BB4FB-A4D5-348D-798F-4C6EDFBCE2BC}" = CCC Help Norwegian
"{53E41E2A-5CC8-A4E7-D0B4-E68AABD0C78C}" = CCC Help Portuguese
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5FC7AB5C-61FC-42DF-A923-5139BCF10D42}" = Microsoft LifeCam
"{666F5EAC-7DC5-039C-F620-B6FE154F7D84}" = CCC Help Dutch
"{66FEEEAF-D999-EF40-78C0-A16C6B8E34F6}" = Catalyst Control Center Localization Japanese
"{6AE7B394-B73C-BFD0-8353-6D8192FECC50}" = CCC Help Russian
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7524B08C-385B-4F6E-9D9D-F0F6793232D6}" = Catalyst Control Center Localization Greek
"{765F169C-E13D-5218-E9B1-461305FC4E5E}" = Catalyst Control Center Graphics Light
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{790E3E09-3443-D558-CA41-4C8BF971BAF7}" = Catalyst Control Center Localization Polish
"{7A889E46-B498-9355-AFE0-68B61DD179FF}" = CCC Help Greek
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7BEF62AB-7B54-3DE7-455D-63EA31ED9DA4}" = CCC Help Finnish
"{7DE04C94-B2F6-4621-B13A-3EDAEDB8D04C}" = BECKLex Dietl Lorenz
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{9444F694-7A88-2A9D-E391-0CEF59BE8F38}" = Catalyst Control Center Graphics Full Existing
"{94D66D71-12F0-48A5-B46A-D4B835A0F1B7}" = FirstSteps Diagnostics
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A08AE84D-41DD-171A-294E-52EDD433750C}" = Catalyst Control Center Localization Spanish
"{A158AAF5-41FE-B808-2F4E-561F619C7005}" = CCC Help French
"{A17EABB6-D0C6-44E5-820C-72DC7F495064}" = PaperPort
"{A3B2E9E4-0246-0255-C851-05394C3A69E0}" = CCC Help Korean
"{A441E60D-87EF-F149-3D39-F33F552EB62B}" = CCC Help Hungarian
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AA5C9D4A-D019-6BE8-03BE-F7A6C4A2ECB5}" = CCC Help Chinese Standard
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{ABCD441A-313E-CAD4-56F6-D1575F6E55D6}" = ccc-utility
"{AC76BA86-7AD7-1031-7B44-A95000000001}" = Adobe Reader 9.5.1 - Deutsch
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{AF756820-2286-4174-734B-25210A3B1BCC}" = CCC Help Swedish
"{B06FF7C9-232B-70B4-69E5-E6B9779AFFC1}" = Catalyst Control Center Graphics Full New
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B1FF4E9A-EFF1-C707-D775-CAE1A93C6CF0}" = CCC Help Czech
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{C1976B24-DA98-F370-1E9B-E10097A0D501}" = Catalyst Control Center Core Implementation
"{C3D4EF45-9FD3-B377-BFB7-7A0F86912FED}" = CCC Help English
"{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser
"{CC2D2AD1-0F3B-1E07-142F-2D3336276F79}" = Catalyst Control Center Localization Portuguese
"{CC475D5F-CC41-47EA-721D-0BE972C50FCE}" = CCC Help Japanese
"{CD0BA9C1-6C0C-4724-9F7E-8B64B4894548}" = BECKLex Becher
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CDDEBAF9-265E-C9F6-45FE-59E5C97CCD4A}" = Catalyst Control Center Localization French
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFEDE732-24D7-468A-AB10-DC5D088C04D3}" = DDBAC
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D44777F9-7ECD-BDA1-E751-732DF86B72AF}" = Catalyst Control Center Localization Korean
"{D85EDDC3-7774-2480-876D-8FDE2C1B20C0}" = ccc-core-static
"{DF5F687F-8018-4542-9F98-7084E9022917}" = Windows Live Essentials
"{E1551DD7-2936-C81D-FE34-ECB604E5FACE}" = Catalyst Control Center Localization Dutch
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E3C7485E-33F1-AA95-C2D8-902FF2B66B69}" = Catalyst Control Center Localization Turkish
"{E63DA26F-43C6-7CF7-AF64-65E27F986AE2}" = CCC Help Chinese Traditional
"{E728E952-DD4F-4BCD-A5C8-40FBFEFF91FE}" = OpenOffice.org Installer 1.0
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F7B0939E-58DF-11DF-B3A6-005056806466}" = Google Earth
"{F8199EA1-C982-8712-4C0F-9EDE2C085082}" = Catalyst Control Center Graphics Previews Vista
"{F8A953AC-34DC-4D4F-01A6-1DF4466F5CCC}" = Catalyst Control Center Localization Norwegian
"{FB262F25-DAAF-AD8A-39F3-9662D82CAFDE}" = Catalyst Control Center Localization Danish
"{FD207C2C-A7FF-332A-AC85-5A5ACED6F31B}" = Google Talk Plugin
"{FD9BCB6B-588D-48B5-9A26-3935B5D9E9E2}" = SEH InterCon-NetTool 1.8.25
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"ATI Uninstaller" = ATI Uninstaller
"Avira AntiVir Desktop" = Avira Free Antivirus
"AVMFBox" = AVM FRITZ!Box Dokumentation
"AVMFBoxPrinter" = AVM FRITZ!Box Druckeranschluss
"CCleaner" = CCleaner
"ClearProg" = ClearProg 1.5.0 Final
"DivX 5.0.2 Pro Bundle" = DivX 5.0.2 Pro Bundle
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"Google Updater" = Google Updater
"IrfanView" = IrfanView (remove only)
"Klett Lehrersoftware Gateway" = Klett Lehrersoftware Gateway
"Klett Lehrersoftware Kickoff" = Klett Lehrersoftware Kickoff
"Klett Lehrersoftware Technical Milestones" = Klett Lehrersoftware Technical Milestones
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 12.0 (x86 de)" = Mozilla Firefox 12.0 (x86 de)
"Mozilla Thunderbird (3.1.20)" = Mozilla Thunderbird (3.1.20)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Puente Nuevo 1" = Puente Nuevo 1
"Redirection Port Monitor" = RedMon - Redirection Port Monitor
"Samsung CLX-3180 Series" = Wartung Samsung CLX-3180 Series
"Samsung Network PC Fax" = Samsung Network PC Fax
"Samsung Scan Assistant" = Samsung Scan Assistant
"SEH Print Monitor" = SEH Print Monitor 4.4.34
"VLC media player" = VLC media player 0.9.9
"Winamp" = Winamp (remove only)
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR Archivierer
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 17.05.2012 09:16:22 | Computer Name = ****-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung LUpdate.exe, Version 1.1.0.4, Zeitstempel 0x4e145204,
 fehlerhaftes Modul ntdll.dll, Version 6.0.6001.18538, Zeitstempel 0x4cb733dc, Ausnahmecode
 0xc0000005, Fehleroffset 0x0005962b,  Prozess-ID 0xcfc, Anwendungsstartzeit 01cd342f1efce543.
 
Error - 17.05.2012 09:17:03 | Computer Name = ****-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description = 
 
Error - 17.05.2012 09:36:11 | Computer Name = ****-PC | Source = MsiInstaller | ID = 11706
Description = 
 
Error - 17.05.2012 09:36:12 | Computer Name = ****-PC | Source = MsiInstaller | ID = 1024
Description = 
 
Error - 17.05.2012 09:42:16 | Computer Name = ****-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description = 
 
Error - 17.05.2012 10:00:44 | Computer Name = ****-PC | Source = EventSystem | ID = 4621
Description = 
 
Error - 17.05.2012 10:03:44 | Computer Name = ****-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description = 
 
Error - 17.05.2012 10:07:37 | Computer Name = ****-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung RunDLL32.exe, Version 6.0.6000.16386, Zeitstempel
 0x4549b0e1, fehlerhaftes Modul lmpgspl.ax, Version 3.5.0.64, Zeitstempel 0x3bf3f037,
 Ausnahmecode 0xc0000005, Fehleroffset 0x00001652,  Prozess-ID 0xa60, Anwendungsstartzeit
 01cd343668365e46.
 
Error - 17.05.2012 10:07:39 | Computer Name = ****-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung RunDLL32.exe, Version 6.0.6000.16386, Zeitstempel
 0x4549b0e1, fehlerhaftes Modul lmpgspl.ax, Version 3.5.0.64, Zeitstempel 0x3bf3f037,
 Ausnahmecode 0xc0000005, Fehleroffset 0x00001652,  Prozess-ID 0x394, Anwendungsstartzeit
 01cd34366ac035a6.
 
Error - 17.05.2012 10:07:51 | Computer Name = ****-PC | Source = Application Error | ID = 1000
Description = Fehlerhafte Anwendung RunDLL32.exe, Version 6.0.6000.16386, Zeitstempel
 0x4549b0e1, fehlerhaftes Modul lmpgspl.ax, Version 3.5.0.64, Zeitstempel 0x3bf3f037,
 Ausnahmecode 0xc0000005, Fehleroffset 0x00001652,  Prozess-ID 0xe40, Anwendungsstartzeit
 01cd343672543646.
 
[ System Events ]
Error - 17.05.2012 09:41:09 | Computer Name = ****-PC | Source = netbt | ID = 4321
Description = Der Name "****-PC       :20" konnte nicht auf der Schnittstelle mit
 IP-Adresse 192.168.178.33  registriert werden. Der Computer mit IP-Adresse 192.168.178.49
 hat nicht  zugelassen, dass dieser Computer diesen Namen verwendet.
 
Error - 17.05.2012 09:42:28 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 17.05.2012 09:42:28 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 17.05.2012 10:02:17 | Computer Name = ****-PC | Source = HTTP | ID = 15016
Description = 
 
Error - 17.05.2012 10:02:28 | Computer Name = ****-PC | Source = Print | ID = 19
Description = Der Druckspooler konnte den Drucker Brother MFC-7420 USB (PrintServer)
 nicht unter dem Namen Brother MFC-7420 USB (PrintServer) freigeben. Fehler: 2114.
 Der Drucker kann nicht von anderen Benutzern im Netzwerk verwendet werden.
 
Error - 17.05.2012 10:02:28 | Computer Name = ****-PC | Source = Print | ID = 19
Description = Der Druckspooler konnte den Drucker Brother MFC-7420 USB nicht unter
 dem Namen Brother MFC-7420 USB freigeben. Fehler: 2114. Der Drucker kann nicht 
von anderen Benutzern im Netzwerk verwendet werden.
 
Error - 17.05.2012 10:02:31 | Computer Name = ****-PC | Source = Server | ID = 2505
Description = Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht
 \Device\NetBT_Tcpip_{6B74BE5C-AE1B-40DD-B873-2273004DF59E} vom Serverdienst nicht
 gebunden werden. Der Serverdienst konnte nicht gestartet werden.
 
Error - 17.05.2012 10:02:31 | Computer Name = ****-PC | Source = netbt | ID = 4321
Description = Der Name "****-PC       :20" konnte nicht auf der Schnittstelle mit
 IP-Adresse 192.168.178.33  registriert werden. Der Computer mit IP-Adresse 192.168.178.49
 hat nicht  zugelassen, dass dieser Computer diesen Namen verwendet.
 
Error - 17.05.2012 10:03:50 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 17.05.2012 10:03:50 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000
Description = 
 
 
< End of report >
         

otl text

OTL logfile created on: 17.05.2012 16:37:46 - Run 1
OTL by OldTimer - Version 3.2.43.0     Folder = C:\Users\****\Downloads
Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19088)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
989,83 Mb Total Physical Memory | 120,36 Mb Available Physical Memory | 12,16% Memory free
2,19 Gb Paging File | 1,02 Gb Available in Paging File | 46,53% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 49,46 Gb Total Space | 12,81 Gb Free Space | 25,90% Space Free | Partition Type: NTFS
Drive D: | 11,40 Gb Total Space | 11,32 Gb Free Space | 99,26% Space Free | Partition Type: NTFS
Drive E: | 39,06 Gb Total Space | 27,54 Gb Free Space | 70,50% Space Free | Partition Type: NTFS
Drive F: | 37,27 Gb Total Space | 37,16 Gb Free Space | 99,72% Space Free | Partition Type: NTFS
 
Computer Name: ****-PC | User Name: **** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\****\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Java\jre6\bin\java.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Java\jre6\bin\jp2launcher.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\SUPERAntiSpyware\SASCore.exe (SUPERAntiSpyware.com)
PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
PRC - C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe ()
PRC - C:\Windows\System32\spool\drivers\w32x86\3\NetFaxServer.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files\Java\jre6\bin\jp2native.dll ()
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
MOD - C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32.dll ()
MOD - C:\Windows\twain_32\Samsung\CLX3180\NetModule2.dll ()
MOD - C:\Windows\twain_32\Samsung\CLX3180\SSOle.dll ()
MOD - C:\Windows\System32\atitmmxx.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (!SASCORE) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe (SUPERAntiSpyware.com)
SRV - (Samsung Network Fax Server) -- C:\Windows\System32\spool\drivers\w32x86\3\NetFaxServer.exe (Samsung Electronics Co., Ltd.)
SRV - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (getPlusHelper) -- C:\Program Files\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (UPnPService) -- C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe (Magix AG)
SRV - (TestHandler) -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe (Fujitsu Siemens Computers)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) -- C:\Windows\system32\drivers\blbdrive.sys File not found
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira GmbH)
DRV - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (MSHUSBVideo) -- C:\Windows\System32\drivers\nx6000.sys (Microsoft Corporation)
DRV - (DgiVecp) -- C:\Windows\System32\drivers\DgivEcp.sys (Samsung Electronics Co., Ltd.)
DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.SYS (Samsung Electronics)
DRV - (ACEDRV09) -- C:\Windows\System32\drivers\ACEDRV09.sys (Protect Software GmbH)
DRV - (JRAID) -- C:\Windows\System32\drivers\jraid.sys (JMicron Technology Corp.)
DRV - (R300) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (RTL8023xp) -- C:\Windows\System32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation                           )
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (AtiPcie) ATI PCI Express (3GIO) -- C:\Windows\System32\drivers\AtiPcie.sys (ATI Technologies Inc.)
DRV - (nvatabus) -- C:\Windows\System32\drivers\nvatabus.sys (NVIDIA Corporation)
DRV - (JGOGO) -- C:\Windows\System32\drivers\JGOGO.sys (JMicron )
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.olb.de/olb_fb3_1806/startIE.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll (Spigot, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SUNA_de
IE - HKCU\..\SearchScopes\{FEB019A9-CEAC-41A8-A6D6-C975A833DA30}: "URL" = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=971163&p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.7
FF - prefs.js..network.proxy.http: "146.57.249.99"
FF - prefs.js..network.proxy.http_port: 3127
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=13: C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\****\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\****\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\****\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\****\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.05.17 10:55:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.05.17 11:35:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.20\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012.03.18 21:07:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.20\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
 
[2010.07.17 19:01:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\****\AppData\Roaming\mozilla\Extensions
[2010.07.17 19:01:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\****\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.04.05 14:55:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\901949sn.default\extensions
[2011.05.21 17:26:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\901949sn.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.04.05 14:55:41 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\****\AppData\Roaming\mozilla\Firefox\Profiles\901949sn.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.05.17 11:35:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.09.29 12:04:25 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2012.05.17 11:35:20 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}
[2012.01.10 18:21:45 | 000,634,964 | ---- | M] () (No name found) -- C:\USERS\****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\901949SN.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012.05.17 10:55:06 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.05.17 10:55:01 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.05.17 10:55:01 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.05.17 10:55:01 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.05.17 10:55:01 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.05.17 10:55:01 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.05.17 10:55:01 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\pdfforgeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Reg Error: Value error.) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {968631B6-4729-440D-9BF4-251F5593EC9A} - No CLSID value found.
O4 - HKLM..\Run: [3180 Scan2PC] C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe ()
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [CLX3180_Scan2Pc] C:\Windows\twain_32\Samsung\CLX3180\Scan2Pc.exe ()
O4 - HKLM..\Run: [LifeCam] C:\Program Files\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150595.exe -Update -1150595 -"Mozilla/5.0_(Windows;_U;_Windows_NT_6.0;_de;_rv:1.9.2.16)_Gecko/20110319_Firefox/3.6.16_(.NET_CLR_3.5.30729)" -"hxxp://cvc.cervantes.es/aula/matdid/actividades/ci/cl/er_ci_cl_11.htm" File not found
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: fritz.box ([]* in Local intranet)
O15 - HKCU\..Trusted Domains: olb.de ([www] https in Trusted sites)
O15 - HKCU\..Trusted Ranges: Range1 ([*] in Local intranet)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {271A3CF5-5A54-447B-A08F-BE805F0DA60B} https://www.olb.de/olb_fb3_1857/plugin/AXFOAM.CAB (B+S Banksysteme AG DDBAC Plug-In)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6B74BE5C-AE1B-40DD-B873-2273004DF59E}: NameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BEE26CF1-9F51-4EBC-AAA7-866EEFDC1AA9}: NameServer = 192.168.178.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Users\****\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\****\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.05.17 11:41:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
[2012.05.17 11:35:16 | 000,476,960 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\npdeployJava1.dll
[2012.05.17 11:35:15 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2012.05.17 11:35:15 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2012.05.17 11:35:15 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2012.05.17 11:30:58 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Roaming\Avira
[2012.05.17 11:24:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2012.05.17 11:24:24 | 000,137,928 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2012.05.17 11:24:24 | 000,083,392 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2012.05.17 11:24:24 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avkmgr.sys
[2012.05.17 11:24:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2012.05.17 11:24:17 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2012.05.17 11:15:13 | 000,000,000 | ---D | C] -- C:\Users\****\AppData\Roaming\SUPERAntiSpyware.com
[2012.05.17 11:14:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2012.05.17 11:14:45 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2012.05.17 11:14:45 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2012.05.17 10:55:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012.05.17 10:55:19 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012.05.17 10:40:54 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2012.05.17 10:31:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[1 C:\Windows\System32\drivers\*.tmp files -> C:\Windows\System32\drivers\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.05.17 16:30:04 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.05.17 16:04:15 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.05.17 16:04:15 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.05.17 16:03:14 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.05.17 16:02:37 | 000,000,304 | ---- | M] () -- C:\Windows\tasks\Wkaqn.job
[2012.05.17 16:02:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.05.17 15:48:05 | 000,618,204 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.05.17 15:48:05 | 000,586,980 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.05.17 15:48:05 | 000,122,442 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.05.17 15:48:05 | 000,101,052 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.05.17 15:33:43 | 000,004,174 | ---- | M] () -- C:\Users\****\Documents\cc_20120517_153339.reg
[2012.05.17 11:35:00 | 000,476,960 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\npdeployJava1.dll
[2012.05.17 11:35:00 | 000,472,864 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2012.05.17 11:35:00 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2012.05.17 11:35:00 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2012.05.17 11:35:00 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2012.05.17 11:24:55 | 000,001,847 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.05.17 11:14:51 | 000,001,800 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2012.05.17 11:03:22 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-498026181-132036989-2138246217-1000UA.job
[2012.05.17 10:43:39 | 000,001,887 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2012.05.17 10:33:08 | 000,081,934 | ---- | M] () -- C:\Users\****\Documents\cc_20120517_103257.reg
[2012.05.17 10:31:09 | 000,000,804 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.05.15 13:01:00 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-498026181-132036989-2138246217-1000Core.job
[2012.05.15 10:44:20 | 000,002,583 | ---- | M] () -- C:\Users\****\Desktop\Microsoft Word.lnk
[2012.05.14 10:18:00 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2012.04.27 10:20:04 | 000,137,928 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2012.04.25 00:32:27 | 000,083,392 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[1 C:\Windows\System32\drivers\*.tmp files -> C:\Windows\System32\drivers\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.05.17 15:33:41 | 000,004,174 | ---- | C] () -- C:\Users\****\Documents\cc_20120517_153339.reg
[2012.05.17 11:24:55 | 000,001,847 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.05.17 11:14:51 | 000,001,800 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2012.05.17 10:42:11 | 000,002,425 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2012.05.17 10:42:11 | 000,001,887 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2012.05.17 10:33:01 | 000,081,934 | ---- | C] () -- C:\Users\****\Documents\cc_20120517_103257.reg
[2012.05.17 10:31:09 | 000,000,804 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.04.05 15:09:12 | 000,011,825 | ---- | C] () -- C:\Users\****\AppData\Roaming\SmarThruOptions.xml
[2012.04.05 15:07:49 | 000,036,864 | ---- | C] () -- C:\Windows\System32\SvcMan.exe
[2012.04.05 15:07:22 | 000,000,124 | ---- | C] () -- C:\Windows\Readiris.ini
[2012.04.05 15:07:18 | 000,023,040 | ---- | C] () -- C:\Windows\System32\irisco32.dll
[2012.04.05 15:00:47 | 000,493,432 | ---- | C] () -- C:\Windows\ssndii.exe
[2012.04.05 15:00:13 | 000,124,792 | ---- | C] () -- C:\Windows\Wiainst.exe
[2012.04.05 14:55:44 | 000,274,432 | ---- | C] () -- C:\Windows\System32\SaMinDrv.dll
[2012.04.05 14:55:44 | 000,106,496 | ---- | C] () -- C:\Windows\System32\SaImgFlt.dll
[2012.04.05 14:55:44 | 000,090,112 | ---- | C] () -- C:\Windows\System32\SaSegFlt.dll
[2012.04.05 14:55:44 | 000,061,440 | ---- | C] () -- C:\Windows\System32\SaErHdlr.dll
[2012.04.05 14:51:01 | 000,024,064 | ---- | C] () -- C:\Windows\System32\sst2cl3.dll
[2012.03.20 11:46:01 | 000,122,880 | RHS- | C] () -- C:\Windows\System32\printuib.dll
[2010.10.13 17:59:28 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010.09.29 12:05:29 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2010.07.17 18:46:37 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat

< End of report >
         

gruß

hi

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
[2012.05.17 16:02:37 | 000,000,304 | ---- | M] () -- C:\Windows\tasks\Wkaqn.job
[2012.03.20 11:46:01 | 000,122,880 | RHS- | C] () -- C:\Windows\System32\printuib.dll
 :Files
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

vielen dank

ich hab deine zeilen in die textbox eingefügt und fix gedrückt. nach ein paar sekunden kam eine win-fehlermeldung:

"Ein kritischer Fehler ist aufgetreten. Windows wird in einer Minunte neu gestartet. Speichern Sie jetzt Ihre Daten."

hab dann nix gemacht und den pc neu starten lassen. nach dem hochfahren von windows wurde mir ein textdokument mit dem namen 05172012_175010 angezeigt, in dem steht "Files\Folders moved on Reboot..." & "Registry entries deleted on Reboot..."

habe dann deine anweisung befolgt: "Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner"

nur gibt er mir da ne fehlermeldung raus und avira meldet sich wie folgt zu wort:

In der Datei "C:\_OTL\MovedFiles\051720012_175010\...\printuib.dll" wurde ein Virus oder unerwünschtes Programm "TR/Crypt.ZPACK.Gen2" gefunden.
Der Zugriff auf diese Datei wurde verweigert.

Avira bietet mir an, die Datei zu entfernen.

so, hab die datei nun von avira in quarantäne schieben lassen und konnte die zip-datei nun auch hochladen.

google scheint mich auch nicht mehr zu rocketnews usw weiterzuleiten. ich kann aber leider nach wie vor kein sicherheitscenter aktivieren

weiter hiermit:

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.