Ich habe mir gestern leider scheinbar einen Virus eingefangen.
Beim Systemstart wird 2 Mal eine svchost.exe aus dem Verzeichnis C:\Windows\System32Gl\svchost.exe gestartet. In dem Ordner wird aber keine Datei angezeigt, und auch wenn ich die versteckten Dateien einblenden lasse, wird nichts angezeigt.

Ich habe schon versucht das verzeichnis per cmd zu löschen, doch es wird unmittelbar nachdem es gelöscht wurde wieder hergestellt.

Im Autostart steht ein Eintrag zu der Datei, der angeblich unter HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run liegen soll, doch auch hier wird nichts angezeigt.
(Im Übrigen wird der Autostart Eintrag auch automatisch immer wieder aktiviert.)
Ich bin ziemlich ratlos...


OTL LOG'S:

OTL.txt

OTL logfile created on: 11.07.2012 13:58:11 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = D:\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,10 Gb Available Physical Memory | 52,54% Memory free
8,00 Gb Paging File | 5,88 Gb Available in Paging File | 73,59% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 458,87 Gb Total Space | 245,56 Gb Free Space | 53,51% Space Free | Partition Type: NTFS
Drive D: | 458,87 Gb Total Space | 332,91 Gb Free Space | 72,55% Space Free | Partition Type: NTFS
 
Computer Name: DASISTMAIKSPC | User Name: derMaik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.07.11 13:43:15 | 000,595,968 | ---- | M] (OldTimer Tools) -- D:\Downloads\OTL.exe
PRC - [2012.06.27 12:29:26 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.06.23 13:25:32 | 001,535,176 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
PRC - [2012.06.17 21:02:13 | 000,215,128 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2012.06.17 09:23:46 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012.05.26 06:32:24 | 004,327,744 | ---- | M] (Akamai Technologies, Inc) -- C:\Users\derMaik\AppData\Local\Akamai\netsession_win.exe
PRC - [2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\derMaik\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.04.04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012.03.05 19:11:27 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012.03.04 17:31:25 | 000,127,040 | ---- | M] (ICQ, LLC.) -- C:\Program Files (x86)\ICQ7.7\ICQ.exe
PRC - [2012.03.03 13:11:15 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
PRC - [2012.02.23 12:40:41 | 002,886,528 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2012.02.10 06:13:00 | 002,348,352 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012.02.09 21:05:32 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2011.06.29 11:52:34 | 001,074,496 | ---- | M] (D-Link Corp.) -- C:\Program Files (x86)\D-Link\DWA-140 revB\AirNCFG.exe
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\explorer.exe
PRC - [2010.07.12 15:39:24 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\D-Link\DWA-140 revB\ANIWConnService.exe
PRC - [2010.03.06 05:04:24 | 000,310,224 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
PRC - [2009.10.14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Programme\Logitech\Logitech WebCam Software\LWS.exe
PRC - [2009.10.14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
PRC - [2009.10.07 01:47:22 | 000,125,464 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
PRC - [2007.09.02 14:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.06.20 18:44:16 | 020,313,384 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
MOD - [2012.06.20 18:44:12 | 001,099,576 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-53.dll
MOD - [2012.06.20 18:44:12 | 000,895,312 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.DLL
MOD - [2012.06.20 18:44:12 | 000,190,776 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-53.dll
MOD - [2012.06.20 18:44:12 | 000,123,192 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-51.dll
MOD - [2012.06.17 09:23:46 | 002,042,848 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012.03.03 12:23:32 | 000,315,392 | ---- | M] () -- C:\Program Files (x86)\D-Link\DWA-140 revB\ANPDApi.dll
MOD - [2012.02.09 21:05:16 | 000,360,768 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2011.11.02 00:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.11.02 00:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011.07.29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011.07.29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.05.13 11:58:00 | 000,294,912 | ---- | M] () -- C:\Program Files (x86)\D-Link\DWA-140 revB\WlanApp.dll
MOD - [2009.10.14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Programme\Logitech\Logitech WebCam Software\LWS.exe
MOD - [2009.10.14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
MOD - [2007.09.02 14:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
MOD - [2007.09.02 14:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012.07.10 20:29:52 | 004,419,392 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai/netsession_win_4f7fccd.dll -- (Akamai)
SRV - [2012.06.27 12:29:24 | 002,369,960 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.06.23 13:25:32 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.06.20 18:44:17 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.06.17 21:02:13 | 000,215,128 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2012.06.17 09:23:46 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.06.07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.04.09 09:47:19 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.03.05 19:11:27 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.02.23 12:40:41 | 002,886,528 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012.02.10 06:13:00 | 002,348,352 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.02.09 21:05:32 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.03.28 22:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2010.07.12 15:39:24 | 000,053,248 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\D-Link\DWA-140 revB\ANIWConnService.exe -- (D_Link_DWA-140_WPS)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.10.07 01:47:10 | 000,191,000 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Programme\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcS64)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.04.04 15:56:40 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012.03.03 16:26:25 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.15 12:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.01.17 14:45:56 | 000,188,224 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011.04.28 15:20:30 | 001,617,472 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Dnetr28ux.sys -- (netr28ux)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.02.21 11:09:14 | 000,015,872 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\anodlwfx.sys -- (anodlwf)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2009.10.07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2Mon)
DRV:64bit: - [2009.10.07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.05.01 01:01:34 | 000,327,576 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2009.05.01 00:55:56 | 002,755,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LV302V64.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI)
DRV:64bit: - [2009.05.01 00:55:46 | 000,015,896 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lv302a64.sys -- (lvpepf64)
DRV:64bit: - [2009.03.18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2008.07.26 16:26:34 | 000,050,072 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVUSBS64.sys -- (LVUSBS64)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D0 1B E1 F3 15 23 CD 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "google.de"
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@spoon.net/Spoon Plugin 3.33: C:\Program Files (x86)\Spoon\3.33.0.18\npMozillaSpoonPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\derMaik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.03.17 15:50:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.06.17 09:23:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.04.11 09:37:51 | 000,000,000 | ---D | M]
 
[2012.03.03 12:13:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\derMaik\AppData\Roaming\mozilla\Extensions
[2012.07.04 18:56:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\derMaik\AppData\Roaming\mozilla\Firefox\Profiles\ezb2pv9y.default\extensions
[2012.03.18 01:24:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.05.31 13:18:02 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.07.04 18:56:02 | 000,743,290 | ---- | M] () (No name found) -- C:\USERS\DERMAIK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EZB2PV9Y.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012.03.29 21:21:36 | 000,029,003 | ---- | M] () (No name found) -- C:\USERS\DERMAIK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EZB2PV9Y.DEFAULT\EXTENSIONS\GROOVESHARKUNLOCKER@OVERLORD1337.XPI
[2012.04.01 16:40:29 | 000,010,013 | ---- | M] () (No name found) -- C:\USERS\DERMAIK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EZB2PV9Y.DEFAULT\EXTENSIONS\YOUTUBEUNBLOCKER@UNBLOCKER.YT.XPI
[2012.06.17 09:23:46 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.02.16 13:02:53 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.02.16 12:48:01 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.02.16 13:02:53 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.16 13:02:53 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.16 13:02:53 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.16 13:02:53 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2012.04.09 09:57:41 | 000,000,857 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1				activate.adobe.com
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [D-Link D-Link DWA-140] C:\Program Files (x86)\D-Link\DWA-140 revB\AirNCFG.exe (D-Link Corp.)
O4 - HKLM..\Run: [HKLM] C:\Windows\Win32Gl\svchost.exe ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\derMaik\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [HKCU] C:\Windows\Win32Gl\svchost.exe ()
O4 - HKCU..\Run: [ICQ] C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - Startup: C:\Users\derMaik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\derMaik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\Win32Gl\svchost.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\Win32Gl\svchost.exe ()
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.0)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{201F26EE-7BA8-4CC1-9224-3434C4EF197D}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -  File not found
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{9bdd90ab-6538-11e1-a176-00262d202946}\Shell - "" = AutoRun
O33 - MountPoints2\{9bdd90ab-6538-11e1-a176-00262d202946}\Shell\AutoRun\command - "" = I:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.07.10 22:46:40 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{C9EFA0E6-D106-43A6-8E83-F6FEAD9E26A1}
[2012.07.10 22:46:14 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{C00D4E89-9FDB-40F7-8E2F-D1CED40169D2}
[2012.07.10 12:23:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2012.07.10 12:23:35 | 000,000,000 | ---D | C] -- C:\Users\derMaik\SystemRequirementsLab
[2012.07.09 18:26:26 | 000,000,000 | ---D | C] -- D:\Documents\Electronic Arts
[2012.07.09 18:22:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE
[2012.07.09 18:17:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2012.07.09 13:39:43 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{B0044F31-E906-4EF1-857D-87E0789968DB}
[2012.07.09 13:39:18 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{DBFF17CF-2DBC-4B70-BDA4-BC3FEE85F3F7}
[2012.07.08 16:21:49 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{D26A2BBC-B4EB-4EEA-B51D-EA7C8C7F00F7}
[2012.07.08 16:21:24 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{19E05809-2FDA-413B-BB13-2EF101A45A6C}
[2012.07.08 13:30:42 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{4DD3D491-623E-4C9F-98B4-4A8853D349AF}
[2012.07.07 07:18:01 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{C0082C8F-46B9-4899-B06C-8336A3013E56}
[2012.07.07 07:17:35 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{46B63C70-F55B-418B-B0B1-01425C31BA97}
[2012.07.06 12:32:54 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{05A6D352-A76A-463E-8745-A3A232156FE8}
[2012.07.05 18:22:22 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{5CEA3EAA-6FE6-4932-9859-FCE84DC50400}
[2012.07.05 16:08:21 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{FC115579-8FE5-4F65-A0EB-5D213287B36A}
[2012.07.04 18:11:29 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{B22E4D00-5BD3-4E0A-B74A-210EF654DAF8}
[2012.07.04 18:11:17 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{3B24472A-EEA7-46DF-92FA-8E50C8BCEB8B}
[2012.07.04 17:50:07 | 000,000,000 | ---D | C] -- C:\Users\derMaik\Desktop\MCEdit
[2012.07.03 14:03:02 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{736C8F47-D457-4816-9AE5-26BDBD6F984B}
[2012.07.03 14:02:36 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{FC9EAEA9-6947-4BD2-BF1B-D48F9553381D}
[2012.07.02 22:35:10 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{3A6EF0D4-F4CF-4742-8BB1-F74B4DCCF4ED}
[2012.07.02 18:17:45 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\Spoon
[2012.07.02 18:17:44 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\Xenocode
[2012.07.02 18:17:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spoon
[2012.07.02 18:12:53 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{667D5511-F5EA-4FDB-BCA0-A83CC07B46DE}
[2012.07.02 18:12:27 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{8D3F388C-9B62-4EC4-9899-38DF25DA7E97}
[2012.07.01 15:42:42 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{E826BB64-BBF8-4798-BCCA-496C4AD9F89F}
[2012.07.01 15:42:17 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{D2512E8A-8B39-4070-9E75-AC3BE51AE02D}
[2012.07.01 02:07:22 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{B2E49FA9-20EA-4DCB-B1FC-12DF18CE0FFF}
[2012.07.01 01:29:38 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{13E3EA65-22A2-47EB-94E8-ED0F8B2B7B9E}
[2012.06.29 15:08:19 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{B5FE6EA2-8D93-4257-82D0-DC96F20E3B86}
[2012.06.29 15:07:54 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{C93F40CD-8ADE-4BF8-A546-29BCC553A51B}
[2012.06.28 13:18:44 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{F0E86ED7-9C1A-4F83-8A12-CC949832E2EC}
[2012.06.28 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{58691B1D-8438-4024-897E-E436B866FDC4}
[2012.06.28 12:56:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012.06.28 12:56:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2012.06.27 19:28:17 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{1461903F-0B87-4B21-949F-9F2BAD86826B}
[2012.06.27 19:27:50 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{ECC82CB2-FFD2-4E30-8499-E300615540D5}
[2012.06.26 22:34:55 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{35A6030B-E031-4595-BEFB-FA275A4C4D31}
[2012.06.26 22:34:29 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{A6EE0ECF-3788-458D-9AA0-F4C5A2F8F64E}
[2012.06.26 14:42:54 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{4EF8E5E4-58E3-4432-B705-C75C1E8C2E27}
[2012.06.25 20:08:09 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{19C013E3-29ED-41D5-9C0B-7386FC29BE78}
[2012.06.25 20:07:43 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{68B3808A-D73C-462D-8AEE-EB6D56E39E10}
[2012.06.25 18:11:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2012.06.24 19:09:45 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{F32D65D0-740E-4933-BB80-1FB64A181D2D}
[2012.06.24 19:09:16 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{7CA57928-329A-4B1E-BE32-133C780F3B2D}
[2012.06.24 17:49:27 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{5515B0C1-BF31-439D-8D96-7AE4FD80E2C9}
[2012.06.24 17:49:15 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{2878E8D3-2198-418F-AB9E-7BE45FA01841}
[2012.06.24 13:36:38 | 000,000,000 | ---D | C] -- C:\Users\derMaik\Desktop\The Elder Scrolls V Skyrim
[2012.06.23 17:48:05 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{28203478-6DE0-45B6-B292-65DC23FC8260}
[2012.06.23 17:47:41 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{5B45E560-B3EF-481A-AF25-27AE3EED3EA5}
[2012.06.22 15:01:30 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{36F6AC4A-587F-44C9-A1A7-C0A4CDB331CA}
[2012.06.22 15:01:04 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{0F2F7245-4378-4443-8912-A6FF1BD0C2DC}
[2012.06.21 16:56:13 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{58FCA758-D8EB-476A-BCE5-53A897716060}
[2012.06.21 16:55:48 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{422162B7-6B1C-429A-A94B-93A3952E3C35}
[2012.06.19 14:15:09 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{CBB28F1E-2C04-4869-87C6-97B4D607C185}
[2012.06.19 14:14:57 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{D430288E-B803-4FDB-BF97-5C55A55BBFE0}
[2012.06.18 17:14:47 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{6EAA7C81-320C-4344-990A-4F612B1E63D5}
[2012.06.17 18:23:41 | 000,000,000 | ---D | C] -- C:\Users\derMaik\Desktop\KalawaKollektive
[2012.06.16 05:05:44 | 000,000,000 | ---D | C] -- D:\Documents\Square Enix
[2012.06.16 05:03:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX - Eidos Interactive
[2012.06.16 05:01:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SQUARE ENIX - Eidos Interactive
[2012.06.16 04:45:58 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\storage
[2012.06.16 04:45:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2012.06.16 04:35:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft
[2012.06.16 04:29:31 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\Skyrim
[2012.06.16 04:25:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skyrim
[2012.06.16 04:22:21 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\2K Games
[2012.06.16 04:21:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mafia 2
[2012.06.16 03:07:24 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2012.06.16 01:12:09 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\ArmA 2
[2012.06.15 14:23:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.06.15 14:22:27 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.06.15 14:22:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2012.06.15 14:22:27 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.06.14 18:24:23 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{2F8AB78A-13FB-41BC-AD22-AF4C7F1B1228}
[2012.06.14 18:23:57 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{BC902D42-93FC-44DE-A526-EA0572379538}
[2012.06.13 19:16:20 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{83C84FC5-58FB-4C32-8A5C-07AA7928A193}
[2012.06.13 19:15:55 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{00C63F47-BB7B-47D4-9CD2-D2A1D7530D83}
[2012.06.12 21:32:18 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{AEC0A110-C77D-4CA8-B7F6-41D6CD49E9F0}
[2012.06.12 21:31:41 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{9D670674-E86A-4AEF-8D92-CA3AFC138AE4}
[2012.06.12 15:51:45 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{0C401D52-EC56-44D6-8DC4-5703D762D83F}
[2012.06.11 20:01:34 | 000,000,000 | ---D | C] -- C:\Users\derMaik\Desktop\MW3
[2012.06.11 17:02:52 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{F4136D87-DA76-40A1-B700-D35B3ADFF053}
[2012.06.11 17:02:27 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\{69245831-6D54-4C66-9BB2-C3F0E170F022}
[2012.06.11 16:47:23 | 000,000,000 | ---D | C] -- C:\Users\derMaik\AppData\Local\Macromedia
 
========== Files - Modified Within 30 Days ==========
 
[2012.07.11 14:01:07 | 000,117,762 | -H-- | M] () -- C:\Users\derMaik\AppData\Roaming\derMaiklog.dat
[2012.07.11 13:27:03 | 000,019,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.11 13:27:03 | 000,019,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.11 13:25:13 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.07.11 13:20:05 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.07.11 13:19:31 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.07.11 13:19:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.11 13:19:16 | 3220,082,688 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.10 19:38:20 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.07.10 19:38:20 | 000,696,620 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.07.10 19:38:20 | 000,651,938 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.07.10 19:38:20 | 000,147,916 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.07.10 19:38:20 | 000,120,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.07.10 00:06:10 | 006,917,511 | ---- | M] () -- C:\Users\derMaik\Desktop\Vegas.wmv
[2012.07.09 16:42:04 | 001,475,774 | ---- | M] () -- C:\Users\derMaik\Desktop\terrain.png
[2012.07.09 16:42:02 | 000,000,132 | ---- | M] () -- C:\Users\derMaik\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012.07.08 22:12:27 | 000,911,822 | ---- | M] () -- C:\Users\derMaik\Desktop\RevoPromote.png
[2012.07.01 15:13:48 | 004,838,776 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.06.27 17:52:09 | 000,764,072 | ---- | M] () -- C:\Users\derMaik\Desktop\Desk2.jpg
[2012.06.25 18:21:49 | 001,589,442 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.06.24 22:41:42 | 000,301,099 | ---- | M] () -- C:\Users\derMaik\Desktop\Maiko.jpg
[2012.06.24 22:41:24 | 005,322,305 | ---- | M] () -- C:\Users\derMaik\Desktop\Maiko.psd
[2012.06.24 22:18:53 | 000,004,175 | ---- | M] () -- C:\Users\derMaik\Desktop\kkjry93b.eps
[2012.06.17 21:05:01 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.06.17 21:05:01 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.06.17 21:02:13 | 000,215,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.06.16 03:07:24 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2012.06.15 22:00:26 | 000,689,741 | ---- | M] () -- C:\Users\derMaik\Desktop\CreeperArmy.c4d
[2012.06.15 22:00:23 | 000,196,961 | ---- | M] () -- C:\Users\derMaik\Desktop\CreeperArmy.jpg
 
========== Files Created - No Company Name ==========
 
[2012.07.08 22:12:23 | 000,911,822 | ---- | C] () -- C:\Users\derMaik\Desktop\RevoPromote.png
[2012.06.27 17:42:50 | 000,764,072 | ---- | C] () -- C:\Users\derMaik\Desktop\Desk2.jpg
[2012.06.24 22:41:40 | 000,301,099 | ---- | C] () -- C:\Users\derMaik\Desktop\Maiko.jpg
[2012.06.24 22:29:55 | 005,322,305 | ---- | C] () -- C:\Users\derMaik\Desktop\Maiko.psd
[2012.06.24 22:18:54 | 000,004,175 | ---- | C] () -- C:\Users\derMaik\Desktop\kkjry93b.eps
[2012.06.21 19:35:08 | 006,917,511 | ---- | C] () -- C:\Users\derMaik\Desktop\Vegas.wmv
[2012.06.15 22:00:23 | 000,196,961 | ---- | C] () -- C:\Users\derMaik\Desktop\CreeperArmy.jpg
[2012.06.14 22:54:26 | 000,689,741 | ---- | C] () -- C:\Users\derMaik\Desktop\CreeperArmy.c4d
[2012.06.07 01:25:34 | 000,000,065 | ---- | C] () -- C:\Windows\wininit.ini
[2012.04.29 20:38:14 | 001,589,442 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.04.15 11:47:45 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2012.03.23 23:15:19 | 000,052,167 | ---- | C] () -- C:\Windows\RFC4DPluginUninstall.exe
[2012.03.17 16:48:32 | 000,007,642 | ---- | C] () -- C:\Users\derMaik\AppData\Local\Resmon.ResmonCfg
[2012.03.09 22:55:53 | 000,001,456 | ---- | C] () -- C:\Users\derMaik\AppData\Local\Adobe Für Web speichern 12.0 Prefs
[2012.03.09 19:08:49 | 000,000,132 | ---- | C] () -- C:\Users\derMaik\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012.03.04 01:28:23 | 000,215,128 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.03.04 01:28:22 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.03.04 01:28:21 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2012.03.03 12:23:01 | 000,302,080 | ---- | C] () -- C:\Windows\lwd.exe
[2012.02.09 21:05:44 | 000,416,064 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2005.12.24 14:46:06 | 000,117,614 | -H-- | C] () -- C:\Users\derMaik\AppData\Roaming\derMaiklog.dat
 
========== LOP Check ==========
 
[2012.07.04 17:44:31 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\.minecraft
[2012.04.14 00:24:47 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\.Nitrous
[2012.04.05 02:40:34 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\bizarre creations
[2012.03.15 19:49:13 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012.07.11 13:32:25 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\DAEMON Tools Lite
[2012.07.11 13:20:55 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Dropbox
[2012.03.04 23:45:07 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\DVDVideoSoft
[2012.06.25 16:21:53 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\FileZilla
[2012.07.11 13:20:39 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\ICQ
[2012.04.13 12:22:10 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Leadertech
[2012.03.03 16:56:04 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\MAXON
[2012.05.12 01:00:37 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\MonoDevelop-Unity-2.8
[2012.03.03 16:43:25 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Origin
[2012.05.11 16:29:41 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\PACE Anti-Piracy
[2012.03.16 23:14:38 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Publish Providers
[2012.06.07 00:06:10 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Red Giant Link
[2012.06.27 21:07:55 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Sony
[2012.04.12 17:02:07 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Sony Creative Software Inc
[2012.04.13 12:07:42 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Stardock
[2012.03.13 21:21:00 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\TeamViewer
[2012.03.25 18:36:42 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\thriXXX
[2012.07.11 13:32:18 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\TS3Client
[2012.05.17 18:57:04 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\ts3overlay
[2012.05.11 16:30:12 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Unity
[2012.03.18 17:02:20 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Windows Live Writer
[2012.04.05 18:57:18 | 000,000,000 | ---D | M] -- C:\Users\derMaik\AppData\Roaming\Wondershare Video Converter Platinum
[2012.05.23 15:37:14 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 1088 bytes -> C:\ProgramData\Microsoft:XGzQaVLqJNSuHFsQQNFROtrjxLz
@Alternate Data Stream - 1086 bytes -> C:\ProgramData\Microsoft:MVYkW83wmajDDDRD6R54O

< End of report >
         

Extras.txt

OTL Extras logfile created on: 11.07.2012 13:58:11 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = D:\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,10 Gb Available Physical Memory | 52,54% Memory free
8,00 Gb Paging File | 5,88 Gb Available in Paging File | 73,59% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 458,87 Gb Total Space | 245,56 Gb Free Space | 53,51% Space Free | Partition Type: NTFS
Drive D: | 458,87 Gb Total Space | 332,91 Gb Free Space | 72,55% Space Free | Partition Type: NTFS
 
Computer Name: DASISTMAIKSPC | User Name: derMaik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.reg [@ = regfile] -- regedit.exe "%1"
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [open] -- regedit.exe "%1"
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0117B680-0DB2-4BB7-9F77-4A5EA07BDB7A}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 | 
"{1372AE34-1AFB-43AF-8B98-5EB9284F4D63}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{230CE3E6-0E5F-43DC-A8D8-B18B2293E4F3}" = lport=49206 | protocol=6 | dir=in | name=akamai netsession interface | 
"{3AEC32AD-F91F-4B19-840D-3CF827DE8712}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{3FCCAAC8-B853-45CB-AAD4-D0B101558906}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{42D089FE-F47F-4439-9C54-69C2C390659F}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{53275F90-3051-47DB-B8B5-AAB6A35253BF}" = rport=139 | protocol=6 | dir=out | app=system | 
"{5ACA5ED7-44F8-4FA0-9D3C-1E293E29EC00}" = lport=138 | protocol=17 | dir=in | app=system | 
"{62B4A0FC-6777-4EC6-974C-3C187FACE5D1}" = rport=138 | protocol=17 | dir=out | app=system | 
"{81EA811E-6B64-45ED-9880-FF94A6376670}" = lport=445 | protocol=6 | dir=in | app=system | 
"{89F479DD-7107-4C48-80D0-CF16E82882F3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{8F0DC2B0-9066-4DAF-805C-E700363F6D4E}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{8FA05988-F448-45A6-9362-9586A338F1D1}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | 
"{953E323E-29E1-4EA2-B705-768D2AF55641}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{96545585-82B9-4717-BE47-F20DEFC7282E}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{A01EE721-D402-44D4-9415-15A22FFE6B5B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{A315BB7F-0286-4875-9B1E-F55A639CFE11}" = lport=137 | protocol=17 | dir=in | app=system | 
"{A96C8D86-DF36-474B-8960-74843047A917}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | 
"{B07DE83E-FEC4-481A-956B-3370BD4A6BBC}" = rport=137 | protocol=17 | dir=out | app=system | 
"{BA4BBDF4-3282-4057-AE8E-2B227A537686}" = lport=49327 | protocol=6 | dir=in | name=akamai netsession interface | 
"{BE53BF35-2E26-4E5B-A0C9-30FD7BF4A873}" = lport=139 | protocol=6 | dir=in | app=system | 
"{C68CC316-2B1E-4E88-B4DD-DA2D782ED40C}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{CB3EDB90-2003-49C9-9AFE-BFF491EFE475}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{E39B9E00-3D45-4FE6-9E7C-7FBB71217906}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{F0EB25EB-552A-4867-B8C8-40A5873D0C1C}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{F6F2FE9A-9198-4DB6-ABE5-845E18AF0F97}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{FAE67BC3-EA82-4470-A964-1A662BE5FDC2}" = rport=445 | protocol=6 | dir=out | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04D92BB3-BBCC-487C-A7DC-6C06513A23BD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforeverlauncher.exe | 
"{05A0B145-CE1F-4167-B741-78EB4A0F7666}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe | 
"{06EC0645-9F10-4F75-9123-D4CC75C8D5EA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\hitman blood money\hitmanbloodmoney.exe | 
"{077BF8BF-16EF-4FDF-8FBB-4A31F99A953F}" = protocol=6 | dir=in | app=c:\program files (x86)\valve\hl.exe | 
"{092A5B5A-C6DA-40B0-97B1-608D1381E76E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{1309C547-B767-4A6A-98DC-9B8DB1EDC333}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"{1423B0C3-3490-4848-AD24-136426525D66}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe | 
"{16CE1C70-ED5F-40AC-BB35-80D231D63B47}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe | 
"{1A47B90B-FAD2-4438-A92E-DD1D02DF257C}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | 
"{1AA4BD19-033C-4785-B0EC-B8F0BBEB7D5E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{1B8399AE-6CC7-4466-B79B-4B3EA7A6DBFF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\l.a.noire\lanlauncher.exe | 
"{1C47EB28-B924-496C-B11B-CCFDAEF2DC68}" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\farcry2.exe | 
"{2066FD3A-EA8E-42A5-885E-EBD9FDA86EA6}" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader\jdownloaderportable.exe | 
"{2188AC87-0F88-4EC1-A890-5B3D06A0667E}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 
"{22DD84EC-2157-44CC-8411-780C73BCFE5D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\apb reloaded\launcher\apblauncher.exe | 
"{2352E7E8-EB74-4CBE-8409-39FFC1F2AC78}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{23BBCF10-B1AB-4A09-B9D4-0C0406A7F381}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\hitman blood money\configure.exe | 
"{27E5FF42-0409-4941-A9F7-F2D73DA3CCE7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe | 
"{2864C29F-CA3A-446B-8199-6BFD25381F86}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\universe sandbox\universe sandbox.exe | 
"{299D1B3F-2747-47D6-95FE-30EB4CB46EDF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 free\arma2free.exe | 
"{2BDAD195-1985-428C-9195-3727B12E1944}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{2F36973C-2834-47EE-B69D-A65892290378}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\aoeonline.exe | 
"{2F66B509-DFE8-414C-AFAF-A6BC3D7F8A0E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe | 
"{2FBFEF6A-65F9-4220-B110-6F85A474661D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | 
"{32F85BCD-0E3A-46EB-B77E-B7E4E870E423}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe | 
"{33C825B0-9A82-4EAB-BE4E-4230576BED48}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blur\blur.exe | 
"{3457A69E-C868-4EF9-93B3-55B134D1550E}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"{361A88EF-A4DA-4A21-B5F4-17DE1F12CB93}" = protocol=6 | dir=in | app=c:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe | 
"{3856E4E9-113F-4EFB-9B02-D45D061467AE}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{38EF2526-FFC5-4E32-8522-FAF0C154B131}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe | 
"{3AED78C6-EE6B-48E3-878E-C755162CA0B4}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{3F1F7288-B5EB-42AE-8EFF-BEB9959CAC47}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{40191B5E-9FD2-4182-8606-BDD7095630C5}" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe | 
"{4306BBD3-9134-4A8A-B189-B4CBF73B57B4}" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader\jdownloaderportable.exe | 
"{465A0B7F-90CE-4813-BCAC-FB1193824637}" = protocol=17 | dir=in | app=c:\users\dermaik\appdata\roaming\dropbox\bin\dropbox.exe | 
"{46DCBE25-768D-44B7-836F-60E0D14BB8C4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | 
"{480465C3-DDED-48ED-8A63-293E9134447A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\audiosurf\engine\questviewer.exe | 
"{4CF00045-0EF5-4C7B-BC35-E5A7CA851265}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{516DABBF-D01F-4184-989E-B15982D2CE36}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\apb reloaded\launcher\apblauncher.exe | 
"{518EEA4A-2B05-4DC2-91E9-C69BDC526EE6}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{524B9D96-6851-4B8B-B3B5-60DFB90B54B6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe | 
"{53C13D4C-FF0A-4B02-A9E7-DBD333D1DCC0}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{54562183-78D7-4486-A36F-9A0770208048}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\hitman blood money\configure.exe | 
"{546E7559-067E-4150-A130-13BF3E081353}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{552DC457-AD2D-4AE7-8BCB-7BF7C973B47D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{5641CBFF-4B5D-497B-A7D7-2CC2F0F47D20}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{5D37484B-19AC-464C-834A-D0A19FB0BE76}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe | 
"{5F3238BE-BF84-4B11-847A-CF9D5328FDAF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{5F9E538C-8444-476B-A639-61F83FC109F8}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{5FAD1516-91C8-4F42-9D2A-607EB6502181}" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike source von lours\hl2.exe | 
"{6566164E-347F-4EA6-89B6-4E5490E129E7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe | 
"{6DFCE367-9F12-4987-8D4F-01EAA90B6201}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{6E3576F3-4F41-46C6-AFBE-1670C976628A}" = protocol=6 | dir=in | app=c:\windows\syswow64\dplaysvr.exe | 
"{6FE9C663-8E2D-400E-800F-00CEDFC78119}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"{7084CE0C-28FD-4AEE-BAF3-7503E384BA57}" = protocol=17 | dir=in | app=c:\windows\syswow64\dplaysvr.exe | 
"{71D62135-2619-4E90-B2DA-CDE15787F9EF}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe | 
"{759DA587-CBEC-4E68-B8CA-CE7F7260C67A}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{784C3EB2-8E90-4672-92CE-CC8301B1BC5E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\l.a.noire\lanlauncher.exe | 
"{7857CD39-BCDF-48AC-BFD7-18874AB5570E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe | 
"{794C8BE6-7A2F-4FA4-BF4D-A39228C002C4}" = protocol=17 | dir=in | app=c:\users\dermaik\appdata\roaming\dropbox\bin\dropbox.exe | 
"{79CB41B4-2743-4176-8381-81CCC2BCF484}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe | 
"{7A39E986-AFD2-41F9-94F3-CFDE7AE32C85}" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike source von lours\hl2.exe | 
"{7D12B23F-27AE-4551-9C3C-9E908FEFC343}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\apb reloaded\launcher\apblauncher.exe | 
"{7D21CDA1-8FC4-4AEF-A464-7FF9A6CD3757}" = protocol=17 | dir=in | app=c:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe | 
"{7D51B00B-A2D2-48EE-87E4-9B677C244E11}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\thebigmaik\source sdk base 2007\hl2.exe | 
"{7F9FB13A-2F8A-4C6A-897B-892059E8E989}" = protocol=6 | dir=in | app=c:\program files\next limit\realflow 2012\realflow.exe | 
"{82B1550E-4965-4C09-8A20-805CFE825A72}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforeverlauncher.exe | 
"{834C55A0-A5B8-49C1-8DB4-5DE3D0CA033B}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | 
"{8546E299-8854-4B3C-BF3F-6D56CF7895B8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\l.a.noire\lanlauncher.exe | 
"{85F5DD1C-94D8-4C2B-B75A-0201DB53D5AD}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"{8B5404D1-2243-40B7-887B-59EC21152013}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"{8ECA6AC8-C105-4C54-A8D9-A2BE7B148BF9}" = protocol=17 | dir=in | app=c:\program files (x86)\unity\editor\unity.exe | 
"{90A198AE-122C-4379-941A-46E86D2E1A0D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 free\arma2free.exe | 
"{91087DEA-2B17-48F3-B647-486592D5DD1B}" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe | 
"{9137DA1A-C76F-4A7C-9A2E-1B00125DF723}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\hitman blood money\hitmanbloodmoney.exe | 
"{95CAC671-6C69-49EB-A4D2-545FDCFE954A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\l.a.noire\lanlauncher.exe | 
"{964755FF-47BC-4906-B2CA-C348AF955B67}" = protocol=6 | dir=in | app=c:\users\dermaik\appdata\roaming\dropbox\bin\dropbox.exe | 
"{97810EC6-EBF9-4A30-8C25-1ED99A7A3199}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | 
"{9A408EE5-CAFC-4872-A65A-1F40B4E5A58D}" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe | 
"{9BE8C8E8-D654-4FCC-B404-37D2326ADC92}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\thebigmaik\source sdk base 2007\hl2.exe | 
"{9CCC6C8B-4D33-46E1-A9F7-F10DB5A86E2A}" = dir=in | app=c:\program files (x86)\brickforce\bflauncher.exe | 
"{9D98CF67-82DA-4DF3-B1E3-76CE9EFBEDB3}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe | 
"{9E552014-03A0-4285-BAFA-91992EE12165}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{A3097CF9-48AE-4E38-92D5-B69134C37012}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{A3F4F4C2-FFB4-4A2B-975C-172BE7B0AD12}" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe | 
"{AA9C1747-E57E-4DED-A839-085B1EAE4411}" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe | 
"{AB723BD0-23E9-4504-912F-548AA16BC15D}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"{AECC0FBD-F224-426B-AE41-E5BE3B4699CA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe | 
"{AFE5B724-F137-476D-9975-1D1EC4972C79}" = protocol=17 | dir=in | app=c:\program files\next limit\realflow 2012\realflow.exe | 
"{B141B66C-3B80-4625-A265-CE723AD66703}" = dir=in | app=c:\program files (x86)\brickforce\brickforce.exe | 
"{B331E9AB-90A4-41A5-8C2E-6023F812B9E4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blur\blur.exe | 
"{B833CF9B-D5E2-4253-B92F-B6A8EB2A357F}" = protocol=17 | dir=in | app=c:\users\dermaik\appdata\local\akamai\netsession_win.exe | 
"{B846342B-384B-4C0D-BD4C-22FB5C687D45}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{BC8BF044-A58A-4A9F-8A45-EC4CE9831480}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe | 
"{BF28ABDF-82FA-48CE-B814-741A1F67F2FD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe | 
"{BF73175E-46BB-4B1B-8901-6619E9852241}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 
"{C04B4930-4074-4FC4-8D37-7EC9F1D625A0}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | 
"{C32371D5-24D2-4DB3-A9E7-E5EAED814646}" = protocol=6 | dir=in | app=c:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe | 
"{CC0CAD07-B9A0-4C07-B9F3-12C525E86558}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | 
"{CCFD4D83-7B1F-4C36-AC28-A0D6654D349A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe | 
"{CEEDEEC0-F41D-423A-BF13-CACF845A58A3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\universe sandbox\universe sandbox.exe | 
"{D031F0A3-D4B5-436B-9383-0EB3D3208715}" = protocol=6 | dir=in | app=c:\users\dermaik\appdata\local\akamai\netsession_win.exe | 
"{D2313522-764D-4836-8F19-53CDD6E352BB}" = protocol=6 | dir=in | app=c:\program files (x86)\unity\monodevelop\bin\monodevelop.exe | 
"{D27A0726-CD30-4813-8F0E-6B5D93B2FC94}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 
"{D5B1D16F-FA6B-4691-951D-8790B16EC9DC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe | 
"{D67D813B-5C37-48D7-8261-86EACA9D107F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe | 
"{D7E0479F-C7DD-4308-9484-5DAD28F2D343}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\microsoft flight\flight.exe | 
"{DAFA363A-C902-4E3F-A0A2-C6A5FF2CDBAA}" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\farcry2.exe | 
"{DBB3990C-B42B-4F03-A537-22E0960152E4}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | 
"{DD461193-2466-487C-91B5-2BA625895D20}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{E5F1A721-4B03-41FD-A107-E49BC3CFA158}" = protocol=6 | dir=in | app=c:\program files (x86)\unity\editor\unity.exe | 
"{E904D001-55C8-4B6E-8311-A3A21B4DD47A}" = protocol=17 | dir=in | app=c:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe | 
"{E945C1AB-7D7D-4031-B1D3-10710C5128E5}" = protocol=6 | dir=in | app=c:\users\dermaik\appdata\roaming\dropbox\bin\dropbox.exe | 
"{EA4F79CE-0104-46C8-A2A6-4EAC6A33A4C9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe | 
"{EF3C3892-A644-4670-957F-06A8F5E17279}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{F16D0991-6FAE-4A6D-AC37-EE8FBA13C132}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\aoeonline.exe | 
"{F30830CF-44C1-4595-8E0D-29ABE2B2CEE0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\apb reloaded\launcher\apblauncher.exe | 
"{F3D59464-5AA1-4CB7-BA2D-E40232B37A25}" = protocol=17 | dir=in | app=c:\program files (x86)\unity\monodevelop\bin\monodevelop.exe | 
"{F55AEDFE-00F4-4315-907F-886564E160A8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plants vs zombies\plantsvszombies.exe | 
"{F615E359-0B4E-4BB7-9C90-18DA5A2EEB7D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\microsoft flight\flight.exe | 
"{F61D2FE5-1AE2-4C43-9C05-F77DA3A0457D}" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe | 
"{F95FB738-B952-405C-93EE-07732FFE55B5}" = protocol=17 | dir=in | app=c:\program files (x86)\valve\hl.exe | 
"{FFEE558A-EDA5-4831-89EC-3520968D35A4}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe | 
"TCP Query User{14BC19FE-9215-4988-B80F-522F0077EBBF}C:\program files (x86)\unity\editor\unity.exe" = protocol=6 | dir=in | app=c:\program files (x86)\unity\editor\unity.exe | 
"TCP Query User{189ECD85-0E31-49C4-A68F-5DD4EB2089EB}C:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe | 
"TCP Query User{1AED6E53-100C-4E93-BA63-2F29E58F9FF8}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | 
"TCP Query User{206F9E19-BE64-4634-B5AF-1B5B939ADB0F}C:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe | 
"TCP Query User{2C23F375-5502-47F1-A507-CD4FA357CB81}C:\program files (x86)\call of duty 4 - modern warfare\iw3mp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\call of duty 4 - modern warfare\iw3mp.exe | 
"TCP Query User{2E78325A-50C1-416D-9E19-89738B98C069}C:\program files (x86)\steam\steam.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"TCP Query User{30E466A7-571E-4BFE-A484-17C2684282C9}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{38F0B1A3-0D2E-45B2-AAA2-8643D5F00FB8}C:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=6 | dir=in | app=c:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe | 
"TCP Query User{3C862820-2596-4779-87FC-72F165D4FDE6}C:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe | 
"TCP Query User{3F29F607-9F3C-4CEB-86D0-6330B97B24D8}C:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe | 
"TCP Query User{4C5418CB-C0D5-44CE-B8A2-F71B65E09A40}C:\users\dermaik\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\dermaik\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{5242D185-C1E7-4CB3-8B5D-F0DB14E2C509}C:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe | 
"TCP Query User{74362E64-DC3A-435C-9D29-44900A9D1923}C:\program files (x86)\unity\monodevelop\bin\monodevelop.exe" = protocol=6 | dir=in | app=c:\program files (x86)\unity\monodevelop\bin\monodevelop.exe | 
"TCP Query User{75502EB0-3EBB-4619-B64E-F7C9B345B3FE}C:\program files (x86)\steam\steamapps\common\blur\blur.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blur\blur.exe | 
"TCP Query User{81BF17B7-6DD4-4EBB-987C-C3211BA49F63}C:\program files\next limit\realflow 2012\realflow.exe" = protocol=6 | dir=in | app=c:\program files\next limit\realflow 2012\realflow.exe | 
"TCP Query User{822BA452-3AFF-4E7F-9BAB-7D73765CDEE0}C:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe" = protocol=6 | dir=in | app=c:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe | 
"TCP Query User{AD2951E8-9F48-425A-98CB-ADA6EED92CB1}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 
"TCP Query User{B0AE3405-B7CF-4C38-A49B-C98C51AC3125}C:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe | 
"TCP Query User{B2A82EE2-1D5A-42CA-8276-3DB5D8CB53CD}C:\program files (x86)\steam\steamapps\common\arma 2 free\arma2server.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 free\arma2server.exe | 
"TCP Query User{D13C967F-5613-417F-933E-FD4DE302DC29}C:\program files (x86)\valve\hl.exe" = protocol=6 | dir=in | app=c:\program files (x86)\valve\hl.exe | 
"TCP Query User{DC3F55F3-0BD9-4BA5-B68A-D47BA70AE5BA}C:\program files (x86)\icq7.7\icq.exe" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"TCP Query User{E9B70EDA-D296-4608-BE4A-B2F7A642F87E}C:\program files (x86)\counter-strike source von lours\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike source von lours\hl2.exe | 
"TCP Query User{ECCE912F-D9BB-4C3A-A8DF-538D23B7A00C}C:\windows\syswow64\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\dplaysvr.exe | 
"TCP Query User{F50F6749-C330-4B63-836B-F4667FDEF106}C:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe | 
"TCP Query User{FA65D3EC-AC39-4CA7-9008-47032DBC7AB1}C:\program files (x86)\far cry 2 lan version\bin\farcry2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\farcry2.exe | 
"TCP Query User{FB1E09CD-4BEC-44B5-A43C-B2F4A916FA80}C:\program files (x86)\wc3\wc3 (v 1.20e)\war3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\wc3\wc3 (v 1.20e)\war3.exe | 
"UDP Query User{03606A3C-8067-4068-9FAE-5CB4559368FB}C:\program files (x86)\steam\steamapps\common\blur\blur.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\blur\blur.exe | 
"UDP Query User{13B37DAD-BBF4-4D45-91FE-16EE73D25CCA}C:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe | 
"UDP Query User{19F0A205-9ACD-4C5A-82BC-398311232C1F}C:\program files (x86)\wc3\wc3 (v 1.20e)\war3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\wc3\wc3 (v 1.20e)\war3.exe | 
"UDP Query User{20A2AF77-4497-4FB7-BF5D-73A3A43CAB3E}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | 
"UDP Query User{327CB7E8-A3FB-45C5-8374-B0B311D9DCA0}C:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe | 
"UDP Query User{39ABAE0A-E9F7-484C-812C-6A08C6B3FE1B}C:\program files (x86)\call of duty 4 - modern warfare\iw3mp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\call of duty 4 - modern warfare\iw3mp.exe | 
"UDP Query User{3C034C33-5DE8-469C-98DD-B0ACA6B3DF7E}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{3EC16FFD-72BB-49ED-8790-F09C266E4EE5}C:\windows\syswow64\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\dplaysvr.exe | 
"UDP Query User{4311ADE6-6DC3-4760-970D-CB5F540CA32D}C:\program files (x86)\unity\monodevelop\bin\monodevelop.exe" = protocol=17 | dir=in | app=c:\program files (x86)\unity\monodevelop\bin\monodevelop.exe | 
"UDP Query User{44E8C50F-C950-43F1-B7B2-2D8CDBAF5CFF}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 
"UDP Query User{4CE9A5A0-8933-40DC-B57F-CDCDF35CC983}C:\program files (x86)\steam\steamapps\common\arma 2 free\arma2server.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 free\arma2server.exe | 
"UDP Query User{4F7E3AC9-1EBF-476C-A43B-721F459D21A1}C:\program files (x86)\unity\editor\unity.exe" = protocol=17 | dir=in | app=c:\program files (x86)\unity\editor\unity.exe | 
"UDP Query User{570A4850-5920-4187-A1ED-98A9813E703D}C:\program files (x86)\far cry 2 lan version\bin\farcry2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\farcry2.exe | 
"UDP Query User{636D2C7C-8ED6-4766-825C-F49B8EB7E51E}C:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe after effects cs4\support files\afterfx.exe | 
"UDP Query User{6C53316A-BF09-4B5D-8A19-45BF4C92ECA4}C:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2serverlauncher.exe | 
"UDP Query User{7BD0F0F6-1431-40D1-8A1C-84D6E12C59F9}C:\program files (x86)\valve\hl.exe" = protocol=17 | dir=in | app=c:\program files (x86)\valve\hl.exe | 
"UDP Query User{846E7181-89A3-4BA9-B72B-FD294E7E4EF3}C:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\age of empires online\spartan.exe | 
"UDP Query User{88F101E6-8818-400E-9516-3802227876EC}C:\program files (x86)\counter-strike source von lours\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike source von lours\hl2.exe | 
"UDP Query User{C01D2DE6-4529-4BF0-B2D3-D381B7AF14D8}C:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe" = protocol=17 | dir=in | app=c:\program files (x86)\far cry 2 lan version\bin\fc2editor.exe | 
"UDP Query User{CC687947-8F09-47C5-BE0B-BD195070E137}C:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe" = protocol=17 | dir=in | app=c:\program files (x86)\firefly studios\stronghold crusader\stronghold crusader.exe | 
"UDP Query User{CD4881C9-EAF8-4596-BCF6-30070B18D875}C:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe" = protocol=17 | dir=in | app=c:\program files\adobe\adobe photoshop cs5 (64 bit)\photoshop.exe | 
"UDP Query User{E05CE888-1047-4FEF-8022-FFA86753F2DC}C:\program files\next limit\realflow 2012\realflow.exe" = protocol=17 | dir=in | app=c:\program files\next limit\realflow 2012\realflow.exe | 
"UDP Query User{E8F12280-E307-4FC1-815C-01FD5C234B06}C:\program files (x86)\steam\steam.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"UDP Query User{EE4ACDB7-0771-4868-9890-9F7ADC638303}C:\program files (x86)\icq7.7\icq.exe" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.7\icq.exe | 
"UDP Query User{F8464F3A-02AF-4F44-859F-375F87D0B543}C:\users\dermaik\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\dermaik\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{FF1311FA-50D8-466E-9697-29B78BF44AD1}C:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield bad company 2 digital deluxe edition\bfbc2game.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{26A24AE4-039D-4CA4-87B4-2F86417003FF}" = Java(TM) 7 Update 3 (64-bit)
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}" = Apple Mobile Device Support
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}" = iTunes
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 295.73
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0209
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.7.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.12.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"CCleaner" = CCleaner
"lvdrivers_12.10" = Logitech Webcam Software-Treiberpaket
"MAXONFB05E576" = CINEMA 4D 13.016
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"WinRAR archiver" = WinRAR 4.11 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{0FF3D021-5ED4-11E1-8FD8-F04DA23A5C58}" = Vegas Pro 11.0
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6
"{147894EE-5ED4-11E1-A8FF-F04DA23A5C58}" = MSVCRT Redists
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{188704D4-07EA-4B28-89C6-1132F2BE8CF9}" = Icarus (Personal Edition)
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{28E82311-8616-11E1-BEB0-B8AC6F97B88E}" = Google Earth
"{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets
"{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4EAE665D-957A-4D04-9679-3AD582008877}" = NVIDIA PhysX
"{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7FB413C8-3CAD-49F7-A67C-6EFEB4B04050}" = LogMeIn Hamachi
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{943A8D28-80D6-41DC-AE94-81FEB42041BF}" = System Requirements Lab CYRI
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A70B1A8B-24B4-4204-9E46-D14CBC49093E}" = Vicon boujou 5.0
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Deutsch
"{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D7D2F494-89E3-42ED-8A2B-75BDD9B464CB}" = D-Link DWA-140
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_697a06b96d8bcbe2d77b88e7d5448d0" = Adobe Creative Suite 4 Master Collection
"Akamai" = Akamai NetSession Interface
"Audacity_is1" = Audacity 1.2.6
"BrickForce" = BrickForce 1.4.40
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DAEMON Tools Lite" = DAEMON Tools Lite
"DivX Setup" = DivX-Setup
"Fences" = Fences
"FileZilla Client" = FileZilla Client 3.5.3
"Fraps" = Fraps (remove only)
"Free Audio Converter_is1" = Free Audio Converter version 5.0.6.221
"Just Cause 2_is1" = Just Cause 2
"LogMeIn Hamachi" = LogMeIn Hamachi
"Magic Bullet Looks Vegas" = Magic Bullet Looks Vegas
"Magic Bullet PhotoLooks" = Magic Bullet PhotoLooks
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.61.0.1400
"Mozilla Firefox 13.0.1 (x86 de)" = Mozilla Firefox 13.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"RealFlow 2012" = RealFlow 2012
"RealFlowC4D" = RealFlow Plug-in for Cinema4D
"RocketDock_is1" = RocketDock 1.3.5
"Scratch" = Scratch
"Steam App 105430" = Age of Empires Online
"Steam App 107400" = ARMA 2: Free
"Steam App 203850" = Microsoft Flight
"Steam App 42640" = Blur
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 6860" = Hitman: Blood Money
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 7" = TeamViewer 7
"Tomb Raider: Underworld" = Tomb Raider: Underworld 1.0
"Trapcode Particular" = Trapcode Particular
"Trapcode Particular v2" = Trapcode Particular v2
"Unity" = Unity
"Vector Magic" = Vector Magic
"WinLiveSuite" = Windows Live Essentials
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Dropbox" = Dropbox
"UnityWebPlayer" = Unity Web Player
 
========== Last 20 Event Log Errors ==========
 
[ System Events ]
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
 
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
 
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
 
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
 
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
 
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
 
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
 
Error - 29.06.2012 17:39:54 | Computer Name = DasIstMaiksPC | Source = atapi | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
 
Error - 02.07.2012 12:20:48 | Computer Name = DasIstMaiksPC | Source = Service Control Manager | ID = 7034
Description = Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 
Mal passiert.
 
Error - 02.07.2012 12:23:21 | Computer Name = DasIstMaiksPC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?02.?07.?2012 um 18:21:30 unerwartet heruntergefahren.
 
 
< End of report >
         

hi

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
O4 - HKCU..\Run: [HKCU] C:\Windows\Win32Gl\svchost.exe ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\Win32Gl\svchost.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\Win32Gl\svchost.exe ()
 :Files
C:\Windows\Win32Gl
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

Danke schonmal

OTL Log:

All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\HKCU deleted successfully.
C:\Windows\Win32Gl\svchost.exe moved successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\Policies deleted successfully.
File C:\Windows\Win32Gl\svchost.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\Policies deleted successfully.
File C:\Windows\Win32Gl\svchost.exe not found.
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
->Flash cache emptied: 41620 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: derMaik
->Flash cache emptied: 7629 bytes
 
User: Public
 
User: UpdatusUser
 
Total Flash Files Cleaned = 0,00 mb
 
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: derMaik
->Temp folder emptied: 435025013 bytes
->Temporary Internet Files folder emptied: 6586567 bytes
->Java cache emptied: 375878 bytes
->FireFox cache emptied: 186642946 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 244566 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 46356772 bytes
RecycleBin emptied: 297342665 bytes
 
Total Files Cleaned = 928,00 mb
 
 
OTL by OldTimer - Version 3.2.53.1 log created on 07122012_133859

Files\Folders moved on Reboot...
C:\Users\derMaik\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\logishrd\LVPrcInj01.dll scheduled to be moved on reboot.
File move failed. C:\Windows\temp\logishrd\LVPrcInj02.dll scheduled to be moved on reboot.

PendingFileRenameOperations files...
File C:\Users\derMaik\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!
[2009.10.07 01:47:22 | 000,109,080 | R--- | M] (Logitech Inc.) C:\Windows\temp\logishrd\LVPrcInj01.dll : Unable to obtain MD5
[2009.10.07 01:46:36 | 000,131,608 | R--- | M] (Logitech Inc.) C:\Windows\temp\logishrd\LVPrcInj02.dll : Unable to obtain MD5

Registry entries deleted on Reboot...
         

Habs gerade in den Uploadchannel hochgeladen.
Upload hat problemlos geklappt.

Gruß
Maik

danke

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Combofix Log:

ComboFix 12-07-12.02 - derMaik 12.07.2012  20:53:11.1.4 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.4095.2669 [GMT 2:00]
ausgeführt von:: c:\users\derMaik\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\derMaik\AppData\Roaming\derMaiklog.dat
c:\windows\Win32Gl
D:\install.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-06-12 bis 2012-07-12  ))))))))))))))))))))))))))))))
.
.
2012-07-12 14:17 . 2012-07-12 14:27	--------	d-----w-	c:\programdata\ManiaPlanet
2012-07-12 14:17 . 2012-07-12 14:18	--------	d-----w-	c:\program files (x86)\ManiaPlanet
2012-07-12 11:34 . 2012-05-31 04:04	9013136	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{732DD05B-1AD4-4907-93BE-D43478FDCC00}\mpengine.dll
2012-07-11 17:10 . 2012-06-12 03:08	3148800	----a-w-	c:\windows\system32\win32k.sys
2012-07-11 17:06 . 2012-06-02 12:52	754808	----a-w-	c:\program files\Internet Explorer\iexplore.exe
2012-07-11 11:30 . 2012-06-06 06:06	2004480	----a-w-	c:\windows\system32\msxml6.dll
2012-07-11 11:30 . 2012-06-06 06:06	1881600	----a-w-	c:\windows\system32\msxml3.dll
2012-07-11 11:30 . 2012-06-06 05:05	1390080	----a-w-	c:\windows\SysWow64\msxml6.dll
2012-07-11 11:30 . 2012-06-06 05:05	1236992	----a-w-	c:\windows\SysWow64\msxml3.dll
2012-07-11 11:30 . 2010-06-26 03:55	2048	----a-w-	c:\windows\system32\msxml3r.dll
2012-07-11 11:30 . 2010-06-26 03:24	2048	----a-w-	c:\windows\SysWow64\msxml3r.dll
2012-07-11 11:30 . 2012-06-02 05:50	458704	----a-w-	c:\windows\system32\drivers\cng.sys
2012-07-10 10:23 . 2012-07-10 10:23	--------	d-----w-	c:\program files (x86)\SystemRequirementsLab
2012-07-10 10:23 . 2012-07-10 10:23	--------	d-----w-	c:\users\derMaik\SystemRequirementsLab
2012-07-09 16:22 . 2012-07-09 16:22	--------	d-----w-	c:\program files (x86)\Microsoft WSE
2012-07-09 16:17 . 2012-07-09 16:17	--------	d-----w-	c:\program files (x86)\Electronic Arts
2012-07-02 16:17 . 2012-07-02 16:18	--------	d-----w-	c:\users\derMaik\AppData\Local\Spoon
2012-07-02 16:17 . 2012-07-02 18:34	--------	d-----w-	c:\program files (x86)\Spoon
2012-07-02 16:17 . 2012-07-02 16:17	--------	d-----w-	c:\users\derMaik\AppData\Local\Xenocode
2012-06-28 10:56 . 2012-06-28 10:56	--------	d-----w-	c:\program files (x86)\LogMeIn Hamachi
2012-06-19 12:02 . 2012-06-02 22:19	2428952	----a-w-	c:\windows\system32\wuaueng.dll
2012-06-19 12:02 . 2012-06-02 22:19	57880	----a-w-	c:\windows\system32\wuauclt.exe
2012-06-19 12:02 . 2012-06-02 22:19	44056	----a-w-	c:\windows\system32\wups2.dll
2012-06-19 12:02 . 2012-06-02 22:15	2622464	----a-w-	c:\windows\system32\wucltux.dll
2012-06-19 12:01 . 2012-06-02 22:19	38424	----a-w-	c:\windows\system32\wups.dll
2012-06-19 12:01 . 2012-06-02 22:19	701976	----a-w-	c:\windows\system32\wuapi.dll
2012-06-19 12:01 . 2012-06-02 22:15	99840	----a-w-	c:\windows\system32\wudriver.dll
2012-06-19 12:01 . 2012-06-02 13:19	186752	----a-w-	c:\windows\system32\wuwebv.dll
2012-06-19 12:01 . 2012-06-02 13:15	36864	----a-w-	c:\windows\system32\wuapp.exe
2012-06-16 03:01 . 2012-06-16 03:01	--------	d-----w-	c:\program files (x86)\SQUARE ENIX - Eidos Interactive
2012-06-16 02:45 . 2012-06-16 02:45	--------	d-----w-	c:\users\derMaik\AppData\Local\storage
2012-06-16 02:45 . 2012-06-16 02:58	--------	d-----w-	c:\programdata\Ubisoft
2012-06-16 02:35 . 2012-06-16 09:23	--------	d-----w-	c:\program files (x86)\Ubisoft
2012-06-16 02:29 . 2012-06-16 02:29	--------	d-----w-	c:\users\derMaik\AppData\Local\Skyrim
2012-06-16 02:25 . 2012-06-16 02:29	--------	d-----w-	c:\program files (x86)\Skyrim
2012-06-16 02:22 . 2012-06-16 02:22	--------	d-----w-	c:\users\derMaik\AppData\Local\2K Games
2012-06-16 01:07 . 2012-06-16 01:07	178800	----a-w-	c:\windows\SysWow64\CmdLineExt_x64.dll
2012-06-15 23:12 . 2012-06-15 23:12	--------	d-----w-	c:\users\derMaik\AppData\Local\ArmA 2
2012-06-15 12:22 . 2012-06-15 12:23	--------	d-----w-	c:\program files\iTunes
2012-06-15 12:22 . 2012-06-15 12:23	--------	d-----w-	c:\program files (x86)\iTunes
2012-06-15 12:22 . 2012-06-15 12:22	--------	d-----w-	c:\program files\iPod
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-12 18:25 . 2012-04-01 10:39	426184	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-07-12 18:25 . 2012-03-03 10:16	70344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-07-12 17:26 . 2012-03-03 23:28	76888	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
2012-07-12 17:26 . 2012-03-04 01:17	282296	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2012-07-12 17:26 . 2012-03-03 23:28	282296	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2012-07-12 17:22 . 2012-03-03 23:28	215128	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2012-04-28 23:49 . 2009-07-14 02:36	175616	----a-w-	c:\windows\system32\msclmd.dll
2012-04-28 23:49 . 2009-07-14 02:36	152576	----a-w-	c:\windows\SysWow64\msclmd.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58	94208	----a-w-	c:\users\derMaik\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58	94208	----a-w-	c:\users\derMaik\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58	94208	----a-w-	c:\users\derMaik\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58	94208	----a-w-	c:\users\derMaik\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2012-03-03 1242448]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-06-07 17425072]
"ICQ"="c:\program files (x86)\ICQ7.7\ICQ.exe" [2012-03-04 127040]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Akamai NetSession Interface"="c:\users\derMaik\AppData\Local\Akamai\netsession_win.exe" [2012-05-26 4327744]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"D-Link D-Link DWA-140"="c:\program files (x86)\D-Link\DWA-140 revB\AirNCFG.exe" [2011-06-29 1074496]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-06-07 421776]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-06-27 1996200]
.
c:\users\derMaik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\derMaik\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-13 116648]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-06-07 160944]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-12 250056]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-13 116648]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-17 113120]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
S1 anodlwf;ANOD Network Security Filter driver;c:\windows\system32\DRIVERS\anodlwfx.sys [2011-02-21 15872]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-03-03 283200]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 D_Link_DWA-140_WPS;D_Link_DWA-140_WPS Service;c:\program files (x86)\D-Link\DWA-140 revB\ANIWConnService.exe [2010-07-12 53248]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-06-27 2369960]
S2 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-06 191000]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-09 382272]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-02-23 2886528]
S3 lvpepf64;Volume Adapter;c:\windows\system32\DRIVERS\lv302a64.sys [2009-04-30 15896]
S3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [2009-10-06 30232]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [2009-04-30 327576]
S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\drivers\LVUSBS64.sys [2008-07-26 50072]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-04-04 24904]
S3 netr28ux;D-Link dnetr28u USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\Dnetr28ux.sys [2011-04-28 1617472]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-01-17 188224]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai	REG_MULTI_SZ   	Akamai
.
Inhalt des "geplante Tasks" Ordners
.
2012-07-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 18:25]
.
2012-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-13 18:15]
.
2012-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-13 18:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58	97792	----a-w-	c:\users\derMaik\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58	97792	----a-w-	c:\users\derMaik\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58	97792	----a-w-	c:\users\derMaik\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58	97792	----a-w-	c:\users\derMaik\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local;<local>
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files (x86)\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\derMaik\AppData\Roaming\Mozilla\Firefox\Profiles\ezb2pv9y.default\
FF - prefs.js: browser.startup.homepage - google.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_bc2.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]
"ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_4f7fccd.dll"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2407571780-128308949-2114804440-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-2407571780-128308949-2114804440-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
c:\program files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-07-12  21:36:00 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-07-12 19:35
.
Vor Suchlauf: 7 Verzeichnis(se), 250.616.864.768 Bytes frei
Nach Suchlauf: 10 Verzeichnis(se), 250.253.504.512 Bytes frei
.
- - End Of File - - 624491CDDA7EE6157184FC9CAC72AAB7
         

malwarebytes:
Downloade Dir bitte Malwarebytes

• Installiere
  das Programm in den vorgegebenen Pfad.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Starte Malwarebytes, klicke auf Aktualisierung --> Suche
  nach Aktualisierung
• Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
• Wenn der Scan beendet
  ist, klicke auf Ergebnisse anzeigen.
• Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
• Poste
  das Logfile, welches sich in Notepad öffnet, hier in den Thread.
• Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Malwarebytes Log sieht ganz gut aus...

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.13.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
derMaik :: DASISTMAIKSPC [Administrator]

Schutz: Aktiviert

14.07.2012 01:41:49
mbam-log-2012-07-14 (01-41-49).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 574013
Laufzeit: 1 Stunde(n), 14 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         

gabs noch probleme?

lade den CCleaner standard:
CCleaner Download - CCleaner 3.20.1750
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Ich habe gerade mal die gesamte Liste heruntergearbeitet und sie bestand quasi ausnahmslos aus Spielen, Programmen und diversen Systemkomponenten, die mir alle völlig bekannt sind.

Der einzige Eintrag der mir nicht bekannt war ist dieser:

System Requirements Lab CYRI	Husdawg, LLC	09.07.2012	0,45MB	4.5.1.0
         

Ansonsten verlief alles problemlos, und ich habe bis jetzt nichts weiteres feststellen können, was mit dem Virus zusammenhängen könnte.
Das Verzeichnis ist weg und der Autostarteintrag auch.
Ich denke ich kann mich an dieser Stelle schonmal riesig fett bedanken!

Ich werde bei weiteren Problemen auf jeden Fall wieder hier vorbeischauen.

ich möchte bitte die liste sehen.

Adobe AIR	Adobe Systems Inc.	03.03.2012		1.5.3.9120 
Adobe Community Help	Adobe Systems Incorporated	03.03.2012		3.0.0.400
Adobe Creative Suite 4 Master Collection	Adobe Systems Incorporated	08.04.2012	2.377MB	4.0 Benötigt
Adobe CSI CS4 x64		02.03.2012		
Adobe Flash Player 11 ActiveX	Adobe Systems Incorporated	11.07.2012	6,00MB	11.3.300.265 Benötigt
Adobe Flash Player 11 Plugin	Adobe Systems Incorporated	11.07.2012	6,00MB	11.3.300.265 Benötigt
Adobe Media Player	Adobe Systems Incorporated	03.03.2012		1.8 Benötigt
Adobe Photoshop CS5	Adobe Systems Incorporated	03.03.2012	2.595MB	12.0 Benötigt
Adobe Reader X (10.1.3) - Deutsch	Adobe Systems Incorporated	10.04.2012	121,7MB	10.1.3	Benötigt
Akamai NetSession Interface		30.03.2012		
Akamai NetSession Interface	Akamai Technologies, Inc	22.06.2012		
Apple Application Support	Apple Inc.	14.06.2012	61,0MB	2.1.9
Apple Mobile Device Support	Apple Inc.	14.06.2012	25,0MB	5.2.0.6
Apple Software Update	Apple Inc.	03.03.2012	2,38MB	2.1.3.127
ARMA 2: Free	Bohemia Interactive	10.05.2012		Benötigt
Atlantica	NEXON Europe S.A.R.L	14.07.2012		31404	Benötigt
Audacity 1.2.6		05.03.2012		Benötigt
Battlefield: Bad Company™ 2	Electronic Arts	03.03.2012	8.540MB	1.0.0.0 	Benötigt
Blur	Bizarre Creations	03.04.2012		Benötigt
Bonjour	Apple Inc.	03.03.2012	2,00MB	3.0.0.10	
BrickForce 1.4.40	Infernum Productions AG	27.04.2012		1.4.40  Benötigt
Call of Duty: Modern Warfare 3	Infinity Ward - Sledgehammer Games	29.04.2012	Benötigt	
CCleaner	Piriform	24.03.2012		3.16 Benötigt
CINEMA 4D 13.016	MAXON Computer GmbH	02.03.2012	7.054MB	13.016 Benötigt
Counter-Strike 1.6		02.03.2012		1.00.0000	Benötigt
D-Link DWA-140	D-Link	02.03.2012		Benötigt
DAEMON Tools Lite	DT Soft Ltd	02.03.2012		4.45.3.0297	Benötigt
Die*Sims™*3	Electronic Arts	08.07.2012		1.0.631	Benötigt
DivX-Setup	DivX, LLC	16.03.2012		2.6.1.8	
Dropbox	Dropbox, Inc.	06.06.2012		1.4.7	Benötigt
Fences		12.04.2012	Benötigt
Fences	Stardock Corporation	13.04.2012	Benötigt	
FileZilla Client 3.5.3	FileZilla Project	01.04.2012	16,6MB	3.5.3	Benötigt
Fraps (remove only)		17.05.2012	Benötigt
Free Audio Converter version 5.0.6.221	DVDVideoSoft Ltd.	03.03.2012	60,9MB	5.0.6.221		Benötigt
Grand Theft Auto: San Andreas	Rockstar	12.07.2012	Benötigt
Hitman: Blood Money	Eidos	22.03.2012		Benötigt
Icarus (Personal Edition)	Advanced Interfaces Group, University of Manchester	04.04.2012	67,2MB	2.07.21217	Benötigt
ICQ7.7	ICQ	03.03.2012		7.7	Benötigt
iTunes	Apple Inc.	14.06.2012	182,7MB	10.6.3.25 Benötigt
Java(TM) 6 Update 31	Oracle	02.03.2012	95,1MB	6.0.310	
Java(TM) 7 Update 3 (64-bit)	Oracle	05.03.2012	93,7MB	7.0.30
JDownloader 0.9	AppWork GmbH	02.03.2012		0.9	Benötigt
Just Cause 2		15.06.2012		Benötigt
Logitech Webcam Software	Logitech Inc.	12.04.2012	44,4MB	12.10.1113	Benötigt
Logitech Webcam Software-Treiberpaket	Logitech Inc.	12.04.2012		12.10.1110	Benötigt
LogMeIn Hamachi	LogMeIn, Inc.	27.06.2012		2.1.0.210	Benötigt
Magic Bullet Looks Vegas		06.06.2012		Benötigt
Magic Bullet PhotoLooks		05.06.2012		Benötigt
Malwarebytes Anti-Malware Version 1.62.0.1300	Malwarebytes Corporation	13.07.2012	18,8MB	1.62.0.1300	Benötigt
ManiaPlanet	Nadeo	11.07.2012	918MB	Benötigt
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	04.03.2012	38,8MB	4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	04.03.2012	2,94MB	4.0.30319
Microsoft .NET Framework 4 Extended	Microsoft Corporation	28.04.2012	52,0MB	4.0.30319
Microsoft Games for Windows - LIVE Redistributable	Microsoft Corporation	01.04.2012	31,3MB	3.5.92.0
Microsoft Games for Windows Marketplace	Microsoft Corporation	24.06.2012	6,04MB	3.5.50.0 Benötigt
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	07.03.2012	0,29MB	8.0.59193
Microsoft Visual C++ 2005 Redistributable (x64)	Microsoft Corporation	02.03.2012	0,69MB	8.0.61000
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17	Microsoft Corporation	22.03.2012	0,76MB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161	Microsoft Corporation	23.03.2012	0,77MB	9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022	Microsoft Corporation	04.04.2012	1,42MB	9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17	Microsoft Corporation	03.03.2012	0,58MB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	06.03.2012	0,22MB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	05.03.2012	0,59MB	9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219	Microsoft Corporation	03.03.2012	13,8MB	10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219	Microsoft Corporation	03.03.2012	15,0MB	10.0.40219
Microsoft WSE 3.0 Runtime	Microsoft Corp.	08.07.2012	0,92MB	3.0.5305.0
Mozilla Firefox 13.0.1 (x86 de)	Mozilla	16.06.2012	41,0MB	13.0.1 Benötigt
Mozilla Maintenance Service	Mozilla	16.06.2012	0,30MB	13.0.1 
Nexuiz	IllFonic	11.07.2012		Benötigt
NVIDIA 3D Vision Controller-Treiber 295.73	NVIDIA Corporation	02.03.2012		295.73
NVIDIA 3D Vision Treiber 295.73	NVIDIA Corporation	02.03.2012		295.73
NVIDIA Grafiktreiber 295.73	NVIDIA Corporation	02.03.2012		295.73
NVIDIA HD-Audiotreiber 1.3.12.0	NVIDIA Corporation	02.03.2012		1.3.12.0
NVIDIA PhysX-Systemsoftware 9.12.0209	NVIDIA Corporation	02.03.2012		9.12.0209
NVIDIA Update 1.7.11	NVIDIA Corporation	02.03.2012		1.7.11
Origin	Electronic Arts, Inc.	02.03.2012		8.5.0.4550	Benötigt
PunkBuster Services	Even Balance, Inc.	03.03.2012		0.988	Benötigt
RocketDock 1.3.5	Punk Software	08.03.2012		Benötigt
Scratch	MIT Media Lab Lifelong Kindergarten Group	21.05.2012		1.4.0.0	Benötigt
Skype Click to Call	Skype Technologies S.A.	30.05.2012	13,7MB	5.10.9560
Skype™ 5.10	Skype Technologies S.A.	28.06.2012	35,8MB	5.10.114 		Benötigt
Steam	Valve Corporation	02.03.2012	35,5MB	1.0.0.0 	Benötigt
Stronghold Crusader		03.03.2012		Benötigt
System Requirements Lab CYRI	Husdawg, LLC	09.07.2012	0,45MB	4.5.1.0 Unbekannt
TeamSpeak 3 Client	TeamSpeak Systems GmbH	03.03.2012		Benötigt
TeamViewer 7	TeamViewer	12.03.2012		7.0.12799	Benötigt
Trapcode Particular		29.05.2012		Benötigt
Trapcode Particular v2		30.05.2012		Benötigt
Ubisoft Game Launcher	UBISOFT	15.06.2012		1.0.0.0	Benötigt
Unity	Unity Technologies ApS	10.05.2012		Benötigt
Unity Web Player	Unity Technologies ApS	10.05.2012	12,0MB	
Vector Magic	Vector Magic, Inc.	06.03.2012		1.14	Benötigt
Vegas Pro 11.0	Sony	15.03.2012	423MB	11.0.594	Benötigt
Windows Live Essentials	Microsoft Corporation	01.05.2012		15.4.3555.0308 Benötigt
WinRAR 4.11 (64-Bit)	win.rar GmbH	13.04.2012		4.11.0	Benötigt
         

Es gibt noch einige Einträge, die leer sind.
Bei denen weiß ich, dass sie Bestandteile von Programmen sind, jedoch nicht ob sie wirklich benötigt...

Im Übrigen: Darf der Qoobox Ordner unter C:/ gelöscht werden?

deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok



deinstaliere:
Java(TM) 6 Update 31

öffne ccleaner, analysieren, starten
öffne otl, cleanup pc startet neu, löscht remover, auch qoobox.
testen wie das system läuft

Alles erledigt, läuft alles flüssig.

ok dann pc absichern:
als antimalware programm würde ich emsisoft empfehlen.
diese haben für mich den besten schutz kostet aber etwas.
http://www.trojaner-board.de/103809-...i-malware.html
testversion:
Meine Antivirus-Empfehlung: Emsisoft Anti-Malware
insbesondere wenn du onlinebanking, einkäufe, sonstige zahlungsabwicklungen oder ähnlich wichtiges, wie zb berufliches machst, also sensible daten zu schützen sind, solltest du in sicherheitssoftware investieren.
vor dem aktivieren der lizenz die 30 tage testzeitraum ausnutzen.

kostenlos, aber eben nicht ganz so gut wäre avast zu empfehlen.
http://www.trojaner-board.de/110895-...antivirus.html

sag mir welches du nutzt, dann gebe ich konfigurationshinweise.
bitte dein bisheriges av deinstalieren
die folgende anleitung ist umfangreich, dass ist mir klar, sie sollte aber umgesetzt werden, da nur dann dein pc sicher ist. stelle so viele fragen wie nötig, ich arbeite gern alles mit dir durch!

http://www.trojaner-board.de/96344-a...-rechners.html
Starte bitte mit der Passage, Windows Vista und Windows 7
Bitte beginne damit, Windows Updates zu instalieren.
Am besten geht dies, wenn du über Start, Suchen gehst, und dort Windows Updates eingibst.
Prüfe unter "Einstellungen ändern" dass folgendes ausgewählt ist:
- Updates automatisch Instalieren,
- Täglich
- Uhrzeit wählen
- Bitte den gesammten rest anhaken, außer:
- detailierte benachichtungen anzeigen, wenn neue Microsoft software verfügbar ist.
Klicke jetzt die Schaltfläche "OK"
Klicke jetzt "nach Updates suchen".
Bitte instaliere zunächst wichtige Updates.
Es wird nötig sein, den PC zwischendurch neu zu starten. falls dies der Fall ist, musst du erneut über Start, Suchen, Windows Update aufrufen, auf Updates suchen klicken und die nächsten instalieren.
Mache das selbe bitte mit den optionalen Updates.
Bitte übernimm den rest so, wie es im Abschnitt windows 7 / Vista zu lesen ist.
aus dem Abschnitt xp, bitte den punkt "datenausführungsverhinderung, dep" übernehmen.
als browser rate ich dir zu chrome:
Installation von Google Chrome für mehrere Nutzerkonten - Google Chrome-Hilfe
anleitung lesen bitte
falls du nen andern nutzen willst, sags mir dann muss ich teile der nun folgenden anleitung


Sandboxie
Die devinition einer Sandbox ist hier nachzulesen:
Sandbox
Kurz gesagt, man kann Programme fast 100 %ig isuliert vom System ausführen.

Der Vorteil liegt klar auf der Hand, wenn über den Browser Schadcode eingeschläust wird, kann dieser nicht nach außen dringen.
Download Link:
Sandboxie Download - Sandboxie 3.72

anleitung:
http://www.trojaner-board.de/71542-a...sandboxie.html
ausführliche anleitung als pdf, auch abarbeiten:
Sandbox Einstellungen |

bitte folgende zusatz konfiguration machen:
sandboxie control öffnen, menü sandbox anklicken, defauldbox wählen.
dort klicke auf sandbox einstellungen.
beschrenkungen, bei programm start und internet zugriff schreibe:
chrome.exe
dann gehe auf anwendungen, webbrowser, chrome.
dort aktiviere alles außer gesammten profil ordner freigeben.
Wie du evtl. schon gesehen hast, kannst du einige Funktionen nicht nutzen.
Dies ist nur in der Vollversion nötig, zu deren Kauf ich dir rate.
Du kannst zb unter "Erzwungene Programmstarts" festlegen, dass alle Browser in der Sandbox starten.
Ansonsten musst du immer auf "Sandboxed webbrowser" klicken bzw Rechtsklick, in Sandboxie starten.
Eine lebenslange Lizenz kostet 30 €, und ist auf allen deinen PC's nutzbar.

Weiter mit:
Maßnahmen für ALLE Windows-Versionen
alles komplett durcharbeiten
anmerkung zu file hippo.
in den settings zusätzlich auswählen:
hide beta updates.
Run updateChecker when Windows starts

Backup Programm:
in meiner Anleitung ist bereits ein Backup Programm verlinkt, als Alternative bietet sich auch das Windows eigene Backup Programm an:
http://www.trojaner-board.de/82962-w...en-backup.html
Dies ist aber leider nur für Windows 7 Nutzer vernünftig nutzbar.
Alle Anderen sollten sich aber auf jeden fall auch ein Backup Programm instalieren, denn dies kann unter Umständen sehr wichtig sein, zum Beispiel, wenn die Festplatte einmal kaputt ist.

Zum Schluss, die allgemeinen sicherheitstipps beachten, wenn es dich betrifft, den Tipp zum Onlinebanking beachten und alle Passwörter ändern
bitte auch lesen, wie mache ich programme für alle sichtbar:
Programme für alle Konten nutzbar machen - PCtipp.ch - Praxis & Hilfe
surfe jetzt also nur noch im standard nutzer konto und dort in der sandbox.
wenn du die kostenlose version nutzt, dann mit klick auf sandboxed web browser, wenn du die bezahlversion hast, kannst du erzwungene programm starts festlegen, dann wird Sandboxie immer gestartet wenn du nen browser aufrufst.
wenn du mit der maus über den browser fährst sollte der eingerahmt sein, dann bist du im sandboxed web browser