Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
OTLPE Scan gemacht, was nun? (AKM-Trojaner?)

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Log-Analyse und Auswertung: OTLPE Scan gemacht, was nun? (AKM-Trojaner?)

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Seite 1 von 2 1 2
Alt 04.02.2015, 03:31   #1
kiwiix3
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Hallo,

zuallererst ich bin computertechnisch leider nicht versiert, also bitte ich um Nachsicht, falls ich mich etwas blöd anstelle. :/

Ich habe Windows XP und habe mir (glaube ich) einen AKM Trojaner eingefangen und schon mit OTLPE gebootet/gescannt, da auch der abgesicherte Modus nicht ging, und habe nun den Bericht. Eine "Extras"-Datei, wie sie in einigen anderen Themen erwähnt wurde, habe ich bis jetzt nicht entdeckt.

Nun weiß ich sowieso nicht so recht, was ich weiter machen soll und wollte hier um Hilfe bitten.

LG, kiwii

Code:
ATTFilter
OTL logfile created on: 2/4/2015 3:01:27 AM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 287.35 Gb Total Space | 40.22 Gb Free Space | 14.00% Space Free | Partition Type: NTFS
Drive D: | 10.73 Gb Total Space | 6.50 Gb Free Space | 60.55% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - [2015/01/26 18:07:50 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/01/25 09:04:11 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/11/23 17:06:00 | 000,050,344 | ---- | M] (AVAST Software) [Auto] -- C:\Programme\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014/11/21 00:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto] -- C:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe -- (MBAMService)
SRV - [2014/11/21 00:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto] -- C:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/10/07 09:09:50 | 000,060,744 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2011/12/28 14:16:53 | 002,745,870 | ---- | M] () [Auto] -- C:\Programme\Tor\tor.exe -- (tor)
SRV - [2011/07/19 22:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2008/11/22 09:12:34 | 001,333,016 | ---- | M] (Diskeeper Corporation) [Auto] -- C:\Programme\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper)
SRV - [2008/04/07 02:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2003/06/19 17:25:00 | 000,322,120 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
SRV - [2001/11/12 07:31:48 | 000,020,480 | ---- | M] (X10) [Auto] -- C:\Programme\Common Files\X10\Common\X10nets.exe -- (x10nets)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (w810obex)
DRV - File not found [Kernel | On_Demand] --  -- (w810mgmt) Sony Ericsson W810 USB WMC Device Management Drivers (WDM)
DRV - File not found [Kernel | On_Demand] --  -- (w810mdm)
DRV - File not found [Kernel | On_Demand] --  -- (w810mdfl)
DRV - File not found [Kernel | On_Demand] --  -- (w810bus) Sony Ericsson W810 Driver driver (WDM)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - [2014/11/23 17:06:22 | 000,787,800 | ---- | M] (AVAST Software) [File_System | System] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2014/11/23 17:06:21 | 000,423,784 | ---- | M] (AVAST Software) [File_System | System] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2014/11/23 17:06:07 | 000,206,248 | ---- | M] () [Kernel | Boot] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014/11/23 17:06:07 | 000,070,384 | ---- | M] (AVAST Software) [File_System | Auto] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014/11/23 17:06:07 | 000,057,928 | ---- | M] (AVAST Software) [Kernel | System] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014/11/23 17:06:07 | 000,055,240 | ---- | M] (AVAST Software) [Kernel | System] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2014/11/23 17:06:07 | 000,049,944 | ---- | M] () [Kernel | Boot] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014/11/23 17:06:07 | 000,024,184 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2014/11/21 00:14:06 | 000,023,256 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013/01/18 18:53:38 | 000,025,200 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2013/01/18 18:53:38 | 000,012,400 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt)
DRV - [2009/03/31 02:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/03/20 03:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009/03/20 03:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009/03/20 03:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2008/07/26 10:26:20 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2008/04/13 18:16:24 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2008/02/01 04:43:00 | 000,489,624 | ---- | M] (Logitech Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LV561AV.SYS -- (PID_0928) Logitech QuickCam Express(PID_0928)
DRV - [2008/01/09 06:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2007/09/17 08:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2006/09/07 06:17:28 | 000,011,264 | R--- | M] (VIA Technologies,Inc) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\xfilt.sys -- (xfilt)
DRV - [2006/09/07 06:17:28 | 000,009,728 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\videX32.sys -- (videX32)
DRV - [2006/07/17 12:33:18 | 000,137,216 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (HdAudAddService)
DRV - [2006/04/28 10:34:00 | 000,882,688 | R--- | M] (Philips Semiconductors GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\3xHybrid.sys -- (3xHybrid)
DRV - [2005/12/09 09:37:42 | 002,400,256 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LVMVdrv.sys -- (lvmvdrv)
DRV - [2005/12/09 09:37:42 | 000,016,768 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\LVPrcMon.sys -- (LVPrcMon)
DRV - [2005/12/09 09:35:54 | 002,174,464 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Lvckap.sys -- (Lvckap)
DRV - [2005/11/28 04:45:16 | 000,007,040 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\x10hid.sys -- (X10Hid)
DRV - [2005/05/19 09:52:58 | 000,017,792 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\x10ufx2.sys -- (XUIF)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\kiwii_x3_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
IE - HKU\kiwii_x3_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
IE - HKU\kiwii_x3_ON_C\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKU\kiwii_x3_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\kiwii_x3_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\kiwii_x3_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\Lidia_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/
IE - HKU\Lidia_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.at/"
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/MycameraPlugin: C:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0:  File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.31.2: C:\WINDOWS\system32\npdeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2: C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Programme\Alwil Software\Avast5\WebRep\FF [2015/02/01 13:35:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2015/01/26 18:07:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2015/01/26 18:07:37 | 000,000,000 | ---D | M]
 
[2009/02/11 14:40:23 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Extensions
[2015/02/03 19:49:47 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328\extensions
[2014/09/09 12:43:05 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profileskhfkbm4a.default\extensions
[2014/09/09 12:43:05 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profileskhfkbm4a.default\extensions\staged
[2015/01/26 18:07:33 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2015/01/26 18:07:34 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}
[2015/01/26 18:07:33 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
[2015/01/26 18:07:55 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- 
 
O1 HOSTS File: ([2001/08/23 07:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Programme\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DivXMediaServer] C:\Programme\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [HDAudDeck] C:\Programme\VIAudioi\HDADeck\HDeck.exe (VIA Technologies, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKU\kiwii_x3_ON_C..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech)
O4 - HKU\Lidia_ON_C..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech)
O4 - HKU\Lidia_ON_C..\Run: [msnmsgr]  File not found
O4 - HKU\Lidia_ON_C..\Run: [Nowe Gadu-Gadu]  File not found
O4 - HKU\Lidia_ON_C..\Run: [Sony PC Companion]  File not found
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
O4 - Startup: C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\AutoStarter.lnk =  File not found
O4 - Startup: C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\ja.lnk = C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\loadit.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\kiwii_x3_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\kiwii_x3_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Lidia_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\Lidia_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1234369632309 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab (Java Plug-in 11.31.2)
O16 - DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab (Java Plug-in 1.7.0_17)
O16 - DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab (Java Plug-in 1.8.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab (Java Plug-in 11.31.2)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.34.133.21 212.186.211.21
O18 - Protocol\Handler\bw+0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw+0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw-0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw00 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw00s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw-0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw10 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw10s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw20 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw20s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw30 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw30s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw40 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw40s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw50 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw50s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw60 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw60s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw70 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw70s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw80 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw80s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw90 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw90s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwa0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwa0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwb0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwb0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwc0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwc0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwd0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwd0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwe0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwe0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwf0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwf0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwg0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwg0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwh0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwh0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwi0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwi0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwj0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwj0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwk0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwk0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwl0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwl0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwm0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwm0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwn0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwn0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwo0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwo0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwp0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwp0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwq0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwq0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwr0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwr0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bws0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bws0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwt0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwt0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwu0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwu0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwv0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwv0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bww0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bww0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwx0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwx0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwy0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwy0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwz0 {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwz0s {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Programme\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\offline-8876480 {8C76A76D-ACF5-4305-A127-B5F76A0A7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll -  File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: 
O24 - Desktop BackupWallPaper: 
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/02/11 10:41:57 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{5dd2ea3e-2e62-11e2-b44e-0009dd60000d}\Shell - "" = AutoRun
O33 - MountPoints2\{5dd2ea3e-2e62-11e2-b44e-0009dd60000d}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{5dd2ea3e-2e62-11e2-b44e-0009dd60000d}\Shell\AutoRun\command - "" = J:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2015/02/03 20:26:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2015/02/03 19:38:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Usenet.nl
[2015/02/03 19:23:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\kiwii x3\Desktop\Ant Videos
[2015/01/26 18:07:33 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[2015/01/24 08:12:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Alte Firefox-Daten
[2015/01/22 12:01:29 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\kiwii x3\Recent
[2015/01/22 11:09:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Google Chrome
[2015/01/22 09:23:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Chrome
[2015/01/22 09:05:52 | 000,897,960 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npdeployJava1.dll
[2015/01/22 09:05:52 | 000,818,088 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2015/01/22 09:02:41 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java
[2015/01/22 09:00:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Oracle
[2015/01/17 12:33:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Skype
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[10 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2015/02/03 20:44:14 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015/02/03 20:43:37 | 2145,898,496 | -HS- | M] () -- C:\hiberfil.sys
[2015/02/03 20:32:06 | 000,000,358 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2015/02/03 20:31:11 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2015/02/03 20:31:11 | 000,000,228 | ---- | M] () -- C:\WINDOWS\tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
[2015/02/03 20:29:32 | 000,000,211 | RHS- | M] () -- C:\boot.ini
[2015/02/03 20:27:00 | 000,001,094 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015/02/03 20:04:15 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2015/02/03 20:00:43 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2015/02/03 19:58:46 | 000,000,740 | ---- | M] () -- C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\ja.lnk
[2015/02/03 19:58:44 | 000,605,378 | ---- | M] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\loadit.exe
[2015/02/03 19:53:56 | 000,003,785 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\lpm.dat
[2015/02/03 19:53:23 | 000,000,767 | ---- | M] () -- C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\AutoStarter.lnk
[2015/02/01 13:52:42 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys
[2015/02/01 13:35:31 | 000,296,456 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2015/01/29 11:47:54 | 000,002,515 | ---- | M] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Word 2007.lnk
[2015/01/25 09:04:11 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2015/01/25 09:04:10 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2015/01/24 11:23:00 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2015/01/23 19:15:09 | 000,048,640 | ---- | M] () -- C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/01/22 11:52:10 | 000,000,684 | ---- | M] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2015/01/22 10:16:22 | 000,001,769 | ---- | M] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Google Chrome (2).lnk
[2015/01/22 10:06:08 | 000,001,787 | ---- | M] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/01/22 09:23:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Chrome
[2015/01/22 09:01:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
[2015/01/22 09:01:35 | 000,096,680 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2015/01/22 09:01:22 | 000,272,296 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2015/01/22 09:01:21 | 000,176,552 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2015/01/22 09:01:21 | 000,146,432 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2015/01/22 09:01:20 | 000,176,552 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2015/01/22 09:01:13 | 000,897,960 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npdeployJava1.dll
[2015/01/22 09:01:11 | 000,818,088 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2015/01/15 17:35:03 | 000,062,020 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat
[2015/01/08 09:00:00 | 000,000,222 | ---- | M] () -- C:\WINDOWS\tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[10 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2015/02/03 19:58:46 | 000,000,740 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\ja.lnk
[2015/02/03 19:58:42 | 000,605,378 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\loadit.exe
[2015/02/03 19:53:47 | 000,003,785 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\lpm.dat
[2015/02/03 19:53:23 | 000,000,767 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\AutoStarter.lnk
[2015/01/22 11:52:10 | 000,000,684 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2015/01/22 10:16:22 | 000,001,769 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Google Chrome (2).lnk
[2015/01/22 09:23:25 | 000,001,787 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/01/22 09:22:37 | 000,001,094 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015/01/22 09:22:36 | 000,001,090 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014/09/09 12:35:52 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\sqlite36_engine.dll
[2014/06/20 07:12:56 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys
[2013/03/17 15:42:42 | 000,206,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013/03/17 15:42:41 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2012/09/15 04:48:50 | 000,003,087 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PData.MMM
[2012/09/15 04:48:50 | 000,003,087 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PData.MM1
[2012/07/10 13:03:55 | 000,000,040 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\kmhjztmhibqbasq
[2012/02/07 16:27:06 | 000,000,218 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\.recently-used.xbel
[2011/06/04 00:13:06 | 000,013,312 | ---- | C] () -- C:\Dokumente und Einstellungen\Lidia\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/22 14:12:57 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/05/30 11:57:59 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010/05/30 11:57:59 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010/05/30 11:57:53 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\$_hpcst$.hpc
[2010/03/07 16:30:14 | 000,000,358 | ---- | C] () -- C:\WINDOWS\hegames.ini
[2009/11/22 16:20:16 | 000,062,020 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/07/19 06:36:01 | 000,066,482 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2009/07/18 13:29:50 | 000,118,784 | R--- | C] () -- C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
[2009/03/21 16:56:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI
[2009/03/02 16:50:26 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/03/02 10:21:04 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009/02/15 16:25:38 | 000,048,640 | ---- | C] () -- C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/02/12 15:39:17 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/02/12 14:14:00 | 000,103,812 | ---- | C] () -- C:\WINDOWS\hpoins04.dat.temp
[2009/02/12 14:14:00 | 000,017,176 | ---- | C] () -- C:\WINDOWS\hpomdl04.dat.temp
[2009/02/11 14:29:19 | 000,000,719 | R--- | C] () -- C:\WINDOWS\System32\InstExec.ini
[2009/02/11 12:04:11 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009/02/11 11:41:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/02/11 11:04:29 | 000,127,184 | ---- | C] () -- C:\WINDOWS\Unwise.exe
[2009/02/11 11:04:05 | 000,003,072 | R--- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2009/02/11 11:04:04 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009/02/11 10:43:22 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/02/11 10:39:10 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/02/11 10:36:14 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/02/11 10:35:28 | 000,296,456 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2007/10/25 10:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2006/10/11 05:56:13 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006/10/11 05:56:13 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2006/10/11 05:56:13 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006/10/11 05:56:12 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006/10/11 05:56:12 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/10/11 05:56:12 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006/10/11 05:56:12 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/10/11 05:56:11 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2006/10/11 05:56:09 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2006/10/11 05:56:09 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2005/12/09 09:37:42 | 002,400,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVMVdrv.sys
[2005/12/09 09:37:42 | 000,016,768 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPrcMon.sys
[2005/12/09 09:35:54 | 002,174,464 | ---- | C] () -- C:\WINDOWS\System32\drivers\Lvckap.sys
[2004/08/02 08:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2002/08/28 20:54:14 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2001/08/23 07:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 07:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 07:00:00 | 000,466,214 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2001/08/23 07:00:00 | 000,444,460 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 07:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 07:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2001/08/23 07:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 07:00:00 | 000,087,168 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2001/08/23 07:00:00 | 000,072,526 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 07:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 07:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2001/08/23 07:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 07:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 07:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[1999/01/27 06:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll
[1997/06/13 00:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll
 
========== LOP Check ==========
 
[2009/02/11 11:15:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\X10 Commander
[2012/09/15 04:48:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\AUTOSICH
[2013/11/24 06:15:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\AVAST Software
[2011/01/09 11:44:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Canon
[2012/01/29 14:34:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\DDMSettings
[2009/03/28 17:49:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\gtk-2.0
[2013/11/03 21:04:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Langenscheidt
[2009/07/18 13:28:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Leadertech
[2010/12/12 16:00:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\ooVoo Details
[2009/02/12 16:05:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\OpenOffice.org
[2010/05/30 12:02:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PC Suite
[2012/02/18 07:26:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Samsung
[2009/10/25 12:22:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\SecondLife
[2010/05/27 14:16:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\TeamViewer
[2009/02/15 17:25:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Teleca
[2009/12/22 15:54:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Unity
[2009/03/13 17:56:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Windows Search
[2013/11/26 05:54:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lidia\Anwendungsdaten\AVAST Software
[2014/02/10 11:03:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lidia\Anwendungsdaten\Langenscheidt
[2009/02/11 12:01:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lidia\Anwendungsdaten\Leadertech
[2009/02/11 12:22:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lidia\Anwendungsdaten\Nowe Gadu-Gadu
[2011/02/28 03:33:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lidia\Anwendungsdaten\ooVoo Details
[2009/11/24 04:13:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lidia\Anwendungsdaten\SecondLife
[2009/03/02 04:57:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Lidia\Anwendungsdaten\Teleca
[2014/11/06 12:30:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2010/05/03 11:25:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Alwil Software
[2013/11/22 17:13:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVAST Software
[2014/11/06 12:31:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
[2012/08/29 05:36:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\boost_interprocess
[2009/02/11 12:31:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Diskeeper Corporation
[2013/11/03 21:04:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Langenscheidt
[2015/01/22 09:06:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Oracle
[2010/05/30 12:02:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2014/09/29 18:41:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony
[2014/09/29 18:41:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony Mobile
[2009/02/11 11:15:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\X10 Settings
[2009/03/14 18:18:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2010/04/05 16:58:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/09/14 13:35:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/04/12 17:04:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2015/02/03 20:32:06 | 000,000,358 | -H-- | M] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
[2015/02/03 20:31:11 | 000,000,228 | ---- | M] () -- C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
[2015/01/08 09:00:00 | 000,000,222 | ---- | M] () -- C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
 
========== Purity Check ==========
 
 
< End of report >
Geändert von kiwiix3 (04.02.2015 um 03:47 Uhr) Grund: Ich habe nun doch verstanden wie ich das "anhänge"...

Alt 04.02.2015, 06:22   #2
schrauber
/// the machine
/// TB-Ausbilder
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


hi,

Fixen mit OTL

  • Starte bitte die OTL.exe.
  • Kopiere nun den Inhalt aus der Codebox in die Textbox.
Code:
ATTFilter
:OTL
O4 - Startup: C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\ja.lnk = C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\loadit.exe ()
C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\loadit.exe
:Commands
[emptytemp]
  • Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
  • Schließe bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread




Rechner normal starten.
__________________

__________________
Alt 04.02.2015, 15:18   #3
kiwiix3
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Soll ich beim Neustart auch wieder von der CD booten oder normal starten lassen?

Nachtrag: Da es sowieso keinen Neustart verlangt ist die Frage daweil belanglos, aber, da du am Ende explizit normal starten sagst, hätte ich wieder von der CD gebootet.

Nach dem normalen Start des PC erscheint nichts mehr, nur die Desktopsymbole werden nicht angezeigt und bei Rechtsklick mit der Maus passiert nichts.
Außerdem habe ich, bevor ich mit OTLPE gebootet habe, einen anderen Weg versucht und bei Systemkonfigurationen unter "Systemstart" die "rundll32"-Sachen abgeklick. Beim Start kam jetzt eine Meldung vonwegen Systemänderungen.

Das ist das Dokument nach dem Fix

Code:
ATTFilter
========== OTL ==========
C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\ja.lnk moved successfully.
C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\loadit.exe moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41 bytes
 
User: kiwii x3
->Temp folder emptied: 89395375 bytes
->Temporary Internet Files folder emptied: 1122634 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 370024955 bytes
->Google Chrome cache emptied: 370789877 bytes
->Flash cache emptied: 467439 bytes
 
User: Lidia
->Temp folder emptied: 106613219 bytes
->Temporary Internet Files folder emptied: 274039684 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 449745135 bytes
->Google Chrome cache emptied: 6285077 bytes
->Flash cache emptied: 6577 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 70676 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 79002516 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1139177 bytes
%systemroot%\System32 .tmp files removed: 3771271 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 468724 bytes
 
Total Files Cleaned = 1,672.00 mb
 
 
OTLPE by OldTimer - Version 3.1.48.0 log created on 02042015_153010
__________________
Geändert von kiwiix3 (04.02.2015 um 15:47 Uhr) Grund: Tut mir leid, dass ich so oft editiere, ich schaff's grade nicht Alles geordnet nach der Reihe auszuführen.

Alt 04.02.2015, 19:51   #4
schrauber
/// the machine
/// TB-Ausbilder
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Ich nic verstehen. Bootet der Rechner wieder normal OHNE CD??

Wenn nein, nochmal mit OTLPE scannen und das Log posten. Wenn ja:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 04.02.2015, 22:14   #5
kiwiix3
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Ja, booten ohne CD ging, ohne, dass wieder die B.M.I. Sperre kam.

hier FRST Log


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-02-2015 01
Ran by kiwii x3 (administrator) on LIDIA-IB4YRQUAM on 04-02-2015 22:07:26
Running from C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Downloads
Loaded Profiles: kiwii x3 (Available profiles: Lidia & kiwii x3)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Programme\Alwil Software\Avast5\AvastSvc.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(Diskeeper Corporation) C:\Programme\Diskeeper Corporation\Diskeeper\DkService.exe
(Google Inc.) C:\Programme\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(X10) C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe
(VIA Technologies, Inc.) C:\Programme\VIAudioi\HDADeck\HDeck.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(AVAST Software) C:\Programme\Alwil Software\Avast5\avastui.exe
() C:\Programme\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Logitech) C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HDAudDeck] => C:\Programme\VIAudioi\HDADeck\HDeck.exe [684032 2006-07-17] (VIA Technologies, Inc.)
HKLM\...\Run: [nwiz] => nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [APSDaemon] => C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Programme\Alwil Software\Avast5\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM\...\Run: [DivXMediaServer] => C:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Programme\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM\...\Run: [iTunesHelper] => C:\Programme\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [MSConfig] => C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [172544 2008-04-14] (Microsoft Corporation)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Winlogon\Notify\WgaLogon: WgaLogon.dll [X]
HKLM\...\Policies\Explorer: [NoDesktop] 1 <===== ATTENTION
HKU\S-1-5-21-436374069-884357618-839522115-1004\...\Run: [LDM] => C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [32768 2009-07-18] (Logitech)
HKU\S-1-5-21-436374069-884357618-839522115-1004\...\MountPoints2: {5dd2ea3e-2e62-11e2-b44e-0009dd60000d} - J:\Startme.exe
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk
ShortcutTarget: Logitech Desktop Messenger.lnk -> C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart\AutoStarter.lnk
ShortcutTarget: AutoStarter.lnk -> C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\autostarter.exe (No File)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Programme\Alwil Software\Avast5\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-436374069-884357618-839522115-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-436374069-884357618-839522115-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKU\S-1-5-21-436374069-884357618-839522115-1004\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-436374069-884357618-839522115-1004 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programme\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
Handler: bw+0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw+0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw-0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw-0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw00 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw00s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw10 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw10s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw20 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw20s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw30 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw30s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw40 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw40s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw50 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw50s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw60 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw60s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw70 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw70s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw80 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw80s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw90 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw90s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwa0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwa0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwb0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwb0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwc0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwc0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwd0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwd0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwe0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwe0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwf0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwf0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwg0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwg0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwh0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwh0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwi0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwi0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwj0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwj0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwk0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwk0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwl0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwl0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwm0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwm0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwn0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwn0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwo0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwo0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwp0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwp0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwq0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwq0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwr0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwr0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bws0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bws0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwt0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwt0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwu0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwu0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwv0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwv0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bww0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bww0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwx0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwx0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwy0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwy0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwz0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwz0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Programme\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: offline-8876480 - {8C76A76D-ACF5-4305-A127-B5F76A0A7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Winsock: Catalog5 05 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328
FF Homepage: hxxp://www.google.at/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/MycameraPlugin -> C:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\WINDOWS\system32\npdeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Programme\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Programme\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Programme\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-436374069-884357618-839522115-1004: @unity3d.com/UnityPlayer,version=1.0 -> C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: SoundCloud Downloader - Technowise - C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2015-02-04]
FF Extension: Adblock Plus - C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-24]
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} [2015-01-27]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-03-01]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Programme\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Programme\Alwil Software\Avast5\WebRep\FF [2011-03-04]

Chrome: 
=======
CHR Profile: C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-22]
CHR Extension: (Adblock Plus) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-22]
CHR Extension: (pro grey) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\enhpebdanojkmhbbneclbkmpleemilaj [2015-01-22]
CHR Extension: (Google Wallet) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-22]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Programme\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-11-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [60744 2014-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Programme\Alwil Software\Avast5\AvastSvc.exe [50344 2014-11-23] (AVAST Software)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
R2 Diskeeper; C:\Programme\Diskeeper Corporation\Diskeeper\DkService.exe [1333016 2008-11-22] (Diskeeper Corporation)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [107912 2015-01-22] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [107912 2015-01-22] (Google Inc.)
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [540968 2014-10-15] (Apple Inc.)
S2 MBAMScheduler; C:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [322120 2003-06-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114800 2015-01-27] (Mozilla Foundation)
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S3 ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
R2 tor; C:\Programme\Tor\tor.exe [2745870 2011-12-28] () [File not signed]
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
R2 x10nets; C:\Programme\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 3xHybrid; C:\WINDOWS\System32\DRIVERS\3xHybrid.sys [882688 2006-04-28] (Philips Semiconductors GmbH)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-11-23] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-11-23] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-11-23] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-11-23] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-11-23] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2014-11-23] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-11-23] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-11-23] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R3 FETNDIS; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc.              )
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R3 HdAudAddService; C:\WINDOWS\System32\drivers\viahduaa.sys [137216 2006-07-17] (VIA Technologies, Inc.)
R3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51088 2004-06-22] (HP)
R3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2004-06-22] (HP)
R3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2004-06-22] (HP)
S3 Lvckap; C:\WINDOWS\system32\drivers\Lvckap.sys [2174464 2005-12-09] () [File not signed]
S3 lvmvdrv; C:\WINDOWS\system32\drivers\lvmvdrv.sys [2400256 2005-12-09] () [File not signed]
S3 LVPrcMon; C:\WINDOWS\system32\drivers\LVPrcMon.sys [16768 2005-12-09] () [File not signed]
R3 LVUSBSta; C:\WINDOWS\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)
S3 MPE; C:\WINDOWS\System32\DRIVERS\MPE.sys [15232 2008-04-14] (Microsoft Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 PID_0928; C:\WINDOWS\System32\DRIVERS\LV561AV.SYS [489624 2008-02-01] (Logitech Inc.)
S3 ss_bbus; C:\WINDOWS\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\WINDOWS\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\WINDOWS\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
R0 videX32; C:\WINDOWS\System32\DRIVERS\videX32.sys [9728 2006-09-07] (VIA Technologies, Inc.)
R3 X10Hid; C:\WINDOWS\System32\Drivers\x10hid.sys [7040 2005-11-28] (X10 Wireless Technology, Inc.)
R0 xfilt; C:\WINDOWS\System32\DRIVERS\xfilt.sys [11264 2006-09-07] (VIA Technologies,Inc)
S3 XUIF; C:\WINDOWS\System32\Drivers\x10ufx2.sys [17792 2005-05-19] (X10 Wireless Technology, Inc.)
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 w810bus; system32\DRIVERS\w810bus.sys [X]
S3 w810mdfl; system32\DRIVERS\w810mdfl.sys [X]
S3 w810mdm; system32\DRIVERS\w810mdm.sys [X]
S3 w810mgmt; system32\DRIVERS\w810mgmt.sys [X]
S3 w810obex; system32\DRIVERS\w810obex.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 22:07 - 2015-02-04 22:07 - 00000000 ____D () C:\FRST
2015-02-04 21:30 - 2015-02-04 21:30 - 00000000 ____D () C:\_OTL
2015-02-04 09:05 - 2015-02-04 09:12 - 00115846 _____ () C:\OTL.Txt
2015-02-04 02:26 - 2015-02-04 02:29 - 00000000 ____D () C:\WINDOWS\pss
2015-02-04 01:58 - 2015-02-04 01:58 - 00000032 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\url.txt
2015-02-04 01:53 - 2015-02-04 01:53 - 00003785 _____ () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\lpm.dat
2015-02-04 01:38 - 2015-02-04 01:52 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Usenet.nl
2015-01-27 00:07 - 2015-01-27 01:37 - 00000000 ____D () C:\Programme\Mozilla Firefox
2015-01-22 17:09 - 2015-01-22 17:09 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Google Chrome
2015-01-22 15:23 - 2015-01-22 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Chrome
2015-01-22 15:22 - 2015-02-04 21:27 - 00001094 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-22 15:22 - 2015-02-04 15:41 - 00001090 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-22 15:05 - 2015-01-22 15:01 - 00897960 _____ (Oracle Corporation) C:\WINDOWS\system32\npdeployJava1.dll
2015-01-22 15:05 - 2015-01-22 15:01 - 00818088 _____ (Oracle Corporation) C:\WINDOWS\system32\deployJava1.dll
2015-01-22 15:02 - 2015-01-22 15:02 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Java
2015-01-22 15:00 - 2015-01-22 15:06 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Oracle
2015-01-17 18:33 - 2015-01-17 18:33 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Skype

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-04 22:07 - 2009-02-11 20:23 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Temp
2015-02-04 22:04 - 2012-07-10 18:55 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-04 22:04 - 2009-02-11 16:56 - 01489424 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-04 21:36 - 2011-12-28 20:17 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\tor
2015-02-04 21:35 - 2009-02-11 16:44 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temp
2015-02-04 21:32 - 2009-02-11 16:45 - 00000000 ____D () C:\Dokumente und Einstellungen\Lidia\Lokale Einstellungen\Temp
2015-02-04 21:30 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart
2015-02-04 19:14 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Eigene Bilder
2015-02-04 15:52 - 2014-09-14 16:31 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-04 15:47 - 2012-07-10 19:07 - 00000358 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-02-04 15:41 - 2014-09-15 13:55 - 00000228 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2015-02-04 15:41 - 2009-02-11 16:41 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-04 15:41 - 2009-02-11 16:37 - 00000157 _____ () C:\WINDOWS\wiadebug.log
2015-02-04 15:41 - 2009-02-11 16:37 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-02-04 02:44 - 2009-02-11 16:44 - 00032584 _____ () C:\WINDOWS\SchedLgU.Txt
2015-02-04 02:30 - 2009-02-11 20:23 - 00000300 ___SH () C:\Dokumente und Einstellungen\kiwii x3\ntuser.ini
2015-02-04 02:29 - 2009-02-11 17:34 - 00000211 __RSH () C:\boot.ini
2015-02-04 02:29 - 2001-08-23 13:00 - 00000634 _____ () C:\WINDOWS\win.ini
2015-02-04 02:29 - 2001-08-23 13:00 - 00000227 _____ () C:\WINDOWS\system.ini
2015-02-04 02:00 - 2001-08-23 13:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-02-04 01:59 - 2009-02-11 20:23 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3
2015-02-04 01:55 - 2009-02-11 16:36 - 00000000 ____D () C:\Programme
2015-02-04 01:55 - 2009-02-11 16:35 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2015-02-04 00:03 - 2013-05-09 18:33 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Rezepte
2015-02-01 19:35 - 2012-06-14 16:32 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service
2015-02-01 19:35 - 2009-02-11 16:35 - 00296456 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-30 12:37 - 2009-02-11 20:23 - 00075800 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2015-01-30 10:56 - 2009-02-11 17:48 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2015-01-28 17:22 - 2012-09-10 10:27 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Uni
2015-01-25 15:04 - 2012-04-10 12:11 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-01-25 15:04 - 2011-05-18 06:16 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-01-24 17:23 - 2011-07-28 14:49 - 00000276 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2015-01-24 01:15 - 2009-02-15 22:25 - 00048640 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-22 18:01 - 2011-03-28 13:33 - 00000000 ____D () C:\WINDOWS\Minidump
2015-01-22 17:09 - 2009-02-11 20:23 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme
2015-01-22 17:02 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Eigene Musik
2015-01-22 16:51 - 2009-02-11 16:36 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Microsoft Shared
2015-01-22 15:23 - 2009-02-12 21:11 - 00000000 ____D () C:\Programme\Google
2015-01-22 15:07 - 2009-03-02 22:45 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype
2015-01-22 15:06 - 2009-02-11 17:43 - 00000000 ____D () C:\Programme\Java
2015-01-22 15:01 - 2014-09-15 14:09 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-01-22 15:01 - 2014-05-29 11:49 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
2015-01-22 15:01 - 2012-04-29 21:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-01-17 21:53 - 2009-03-02 22:45 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Skype
2015-01-15 23:35 - 2009-11-22 22:20 - 00062020 ____H () C:\WINDOWS\system32\mlfcache.dat
2015-01-14 15:32 - 2014-09-15 02:52 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-14 15:26 - 2009-02-11 17:32 - 110348472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-01-08 15:00 - 2014-09-15 13:55 - 00000222 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job

==================== Files in the root of some directories =======

2010-05-30 17:57 - 2010-05-30 17:57 - 0002528 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\$_hpcst$.hpc
2012-09-15 11:07 - 2012-09-16 23:35 - 0016748 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\LogBuch.txt
2012-09-15 10:48 - 2012-09-16 23:35 - 0003087 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PData.MM1
2012-09-15 10:48 - 2012-09-16 23:35 - 0003087 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PData.MMM
2015-02-04 01:58 - 2015-02-04 01:58 - 0000032 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\url.txt
2009-02-15 22:25 - 2015-01-24 01:15 - 0048640 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Temp\IadHide5.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
--- --- ---


hier Addition Log

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-02-2015 01
Ran by kiwii x3 at 2015-02-04 22:08:13
Running from C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.45.2 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.6.606 - Adobe Systems, Inc.)
AiO_Scan (Version: 43.0.217.000 - Hewlett-Packard) Hidden
AiOSoftware (Version: 43.0.217.000 - Hewlett-Packard) Hidden
Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 1.2.6 (HKLM\...\Audacity_is1) (Version:  - )
Avast Free Antivirus (HKLM\...\avast) (Version: 10.0.2208 - AVAST Software)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM\...\CANON iMAGE GATEWAY Task) (Version: 1.7.2.11 - Canon Inc.)
Canon Internet Library for ZoomBrowser EX (HKLM\...\Canon Internet Library for ZoomBrowser EX) (Version: 1.6.3.9 - Canon Inc.)
Canon MOV Decoder (HKLM\...\Canon MOV Decoder) (Version: 1.5.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM\...\Canon MOV Encoder) (Version: 1.3.1.3 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM\...\MovieEditTask) (Version: 3.4.1.9 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.8 (HKLM\...\DPP) (Version: 3.8.1.0 - Canon Inc.)
Canon Utilities EOS Utility (HKLM\...\EOS Utility) (Version: 2.8.1.0 - Canon Inc.)
Canon Utilities Original Data Security Tools (HKLM\...\Original Data Security Tools) (Version: 1.8.0.1 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM\...\Picture Style Editor) (Version: 1.7.0.0 - Canon Inc.)
Canon Utilities WFT Utility (HKLM\...\WFTK) (Version: 3.5.1.1 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM\...\ZoomBrowser EX) (Version: 6.5.1.15 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM\...\ZoomBrowser EX Memory Card Utility) (Version: 1.3.0.4 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 2.36 - Piriform)
Diskeeper 2009 EnterpriseServer (HKLM\...\{C9C4BC5B-7BC4-4314-85A7-CD177743E306}) (Version: 13.0.835.32 - Diskeeper Corporation)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)
Fax (Version: 43.0.217.000 - Hewlett-Packard) Hidden
GeoGebra (HKLM\...\GeoGebra) (Version: 3.2.47.0 - International GeoGebra Institute)
GeoGebra WebStart (HKU\S-1-5-21-436374069-884357618-839522115-1004\...\GeoGebra WebStart) (Version:  - International GeoGebra Institute)
Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
High Definition Audio Driver Package - KB888111 (HKLM\...\KB888111WXPSP2) (Version: 20040219.000000 - Microsoft Corporation)
Hotfix für Windows Media Player 11 (KB939683) (HKLM\...\KB939683) (Version:  - Microsoft Corporation)
Hotfix für Windows XP (KB2633952) (HKLM\...\KB2633952) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation)
HP Image Zone 4.2 (HKLM\...\HP Photo & Imaging) (Version: 4.2 - HP)
HP PSC & OfficeJet 4.2 (HKLM\...\{A1062847-0846-427A-92A1-BB8251A91E91}) (Version:  - HP)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
K-Lite Codec Pack 4.5.3 (Standard) (HKLM\...\KLiteCodecPack_is1) (Version: 4.5.3 - )
Langenscheidt Vokabeltrainer 6.0 Spanisch (HKLM\...\{DB979343-6874-46EA-91A0-7CC5A6F8007A}) (Version: 6.0.20 - Langenscheidt)
Logitech Desktop Messenger (HKLM\...\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}) (Version: 2.01.02 - Logitech, Inc.)
Logitech QuickCam-Treiberpaket (HKLM\...\lvdrivers_11.80) (Version:  - )
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 German Language Pack (HKLM\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version:  - )
Microsoft .NET Framework 2.0 Language Pack - DEU (HKLM\...\Microsoft .NET Framework 2.0 Language Pack - DEU) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft Bootvis (HKLM\...\{0F9196C6-58B4-445B-B56E-B1200FECC151}) (Version: 1.3.37 - Microsoft)
Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0015-0000-0000-0000000FF1CE}_Access_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office Access 2007 (HKLM\...\Access) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook 2007 (HKLM\...\OUTLOOK) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{91110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.2701.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version:  - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 35.0.1 (x86 de) (HKLM\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NAVIGON Fresh 3.4.1 (HKLM\...\NAVIGON Fresh) (Version: 3.4.1 - NAVIGON)
Nero 6 Enterprise Edition (HKLM\...\Nero - Burning Rom!UninstallKey) (Version:  - )
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version:  - )
Overland (Version: 2.1.5 - Hewlett-Packard) Hidden
PC Connectivity Solution (HKLM\...\{AC599724-5755-48C1-ABE7-ABB857652930}) (Version: 8.15.0.0 - Nokia)
PhotoScape (HKLM\...\PhotoScape) (Version:  - )
Platform (Version: 1.21 - VIA Technologies, Inc.) Hidden
PrintScreen (Version: 43.1.5.000 - Hewlett-Packard) Hidden
QFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
QuickTime (HKLM\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Readme (Version: 43.0.217.000 - Hewlett-Packard) Hidden
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )
Samsung Mobile Modem Device Software (HKLM\...\Samsung Mobile Modem Device) (Version:  - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Software (HKLM\...\Samsung Mobile phone USB driver) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
Samsung New PC Studio USB Driver Installer (HKLM\...\InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio USB Driver Installer (Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Mobile Device Software (HKLM\...\SAMSUNG USB Mobile Device) (Version:  - )
SamsungConnectivityCableDriver (HKLM\...\{7E84FAC8-C518-40F9-9807-7455301D6D25}) (Version: 6.83.6.2.1 - Samsung)
Scan (Version: 4.1.0.0 - Hewlett-Packard) Hidden
Sicherheitsupdate für Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 7 (KB2544521) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB2647516) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB2936068) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB2964358) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB938127-v2) (Version: 2 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB956390) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB961260) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2909210) (HKLM\...\KB2909210-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2909921) (HKLM\...\KB2909921-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2936068) (HKLM\...\KB2936068-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2964358) (HKLM\...\KB2964358-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB2378111) (HKLM\...\KB2378111_WM9) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB2834904-v2) (HKLM\...\KB2834904-v2_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB952069) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB954155) (HKLM\...\KB954155_WM9) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB973540) (HKLM\...\KB973540_WM9) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB975558) (HKLM\...\KB975558_WM8) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB978695) (HKLM\...\KB978695_WM9) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player 11 (KB936782) (HKLM\...\KB936782_WMP11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player 11 (KB954154) (HKLM\...\KB954154_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2079403) (HKLM\...\KB2079403) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2360937) (HKLM\...\KB2360937) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2412687) (HKLM\...\KB2412687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2440591) (HKLM\...\KB2440591) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2476490) (HKLM\...\KB2476490) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2507618) (HKLM\...\KB2507618) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2510581) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2570222) (HKLM\...\KB2570222) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2584146) (HKLM\...\KB2584146) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2585542) (HKLM\...\KB2585542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2598479) (HKLM\...\KB2598479) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2603381) (HKLM\...\KB2603381) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2618451) (HKLM\...\KB2618451) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2619339) (HKLM\...\KB2619339) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2620712) (HKLM\...\KB2620712) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2624667) (HKLM\...\KB2624667) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2631813) (HKLM\...\KB2631813) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2633171) (HKLM\...\KB2633171) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2646524) (HKLM\...\KB2646524) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2653956) (HKLM\...\KB2653956) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2655992) (HKLM\...\KB2655992) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2659262) (HKLM\...\KB2659262) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2660465) (HKLM\...\KB2660465) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2676562) (HKLM\...\KB2676562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2686509) (HKLM\...\KB2686509) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2691442) (HKLM\...\KB2691442) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2698365) (HKLM\...\KB2698365) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2705219-v2) (HKLM\...\KB2705219-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2712808) (HKLM\...\KB2712808) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2719985) (HKLM\...\KB2719985) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2723135-v2) (HKLM\...\KB2723135-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2727528) (HKLM\...\KB2727528) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2757638) (HKLM\...\KB2757638) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2770660) (HKLM\...\KB2770660) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2780091) (HKLM\...\KB2780091) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2802968) (HKLM\...\KB2802968) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2807986) (HKLM\...\KB2807986) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2813345) (HKLM\...\KB2813345) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2820917) (HKLM\...\KB2820917) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2834886) (HKLM\...\KB2834886) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2847311) (HKLM\...\KB2847311) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2850869) (HKLM\...\KB2850869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2859537) (HKLM\...\KB2859537) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862152) (HKLM\...\KB2862152) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862330) (HKLM\...\KB2862330) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862335) (HKLM\...\KB2862335) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2864063) (HKLM\...\KB2864063) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2868038) (HKLM\...\KB2868038) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2868626) (HKLM\...\KB2868626) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876217) (HKLM\...\KB2876217) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876331) (HKLM\...\KB2876331) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2892075) (HKLM\...\KB2892075) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2893294) (HKLM\...\KB2893294) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2898715) (HKLM\...\KB2898715) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2900986) (HKLM\...\KB2900986) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2909212) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB2914368) (HKLM\...\KB2914368) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2916036) (HKLM\...\KB2916036) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2922229) (HKLM\...\KB2922229) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2929961) (HKLM\...\KB2929961) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2930275) (HKLM\...\KB2930275) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923789) (HKLM\...\KB923789) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB938464) (HKLM\...\KB938464) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB941569) (HKLM\...\KB941569) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950760) (HKLM\...\KB950760) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951066) (HKLM\...\KB951066) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951698) (HKLM\...\KB951698) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951748) (HKLM\...\KB951748) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB954211) (HKLM\...\KB954211) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB954459) (HKLM\...\KB954459) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB954600) (HKLM\...\KB954600) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB955069) (HKLM\...\KB955069) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956744) (HKLM\...\KB956744) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956803) (HKLM\...\KB956803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956841) (HKLM\...\KB956841) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB957097) (HKLM\...\KB957097) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958644) (HKLM\...\KB958644) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958687) (HKLM\...\KB958687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960715) (HKLM\...\KB960715) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB961501) (HKLM\...\KB961501) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975713) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978601) (HKLM\...\KB978601) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB981322) (HKLM\...\KB981322) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Unity Web Player (HKU\S-1-5-21-436374069-884357618-839522115-1004\...\UnityWebPlayer) (Version: 2.6.1f3_31223 - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0015-0000-0000-0000000FF1CE}_Access_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-001A-0000-0000-0000000FF1CE}_OUTLOOK_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Windows Internet Explorer 8 (KB2598845) (HKLM\...\KB2598845-IE8) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB898461) (HKLM\...\KB898461) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB951978) (Version: 1 - Microsoft Corporation) Hidden
Update für Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB955839) (HKLM\...\KB955839) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB961503) (HKLM\...\KB961503) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VIA Platform Device Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.21 - VIA Technologies, Inc.)
WebFldrs XP (Version: 9.50.6513 - Microsoft Corporation) Hidden
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray (HKLM\...\KB952011) (Version: 1.0 - Microsoft Corporation)
Windows Genuine Advantage Notifications (KB905474) (HKLM\...\WgaNotify) (Version: 1.8.0031.9 - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031514 - Microsoft Corporation)
Windows-Treiberpaket - MobileTop (sshpmdm) Modem  (02/23/2007 2.5.0.0) (HKLM\...\6194C28A8F62DD817EA1B918E6E46E806A21B452) (Version: 02/23/2007 2.5.0.0 - MobileTop)
Windows-Treiberpaket - MobileTop (sshpusb) USB  (02/23/2007 2.5.0.0) (HKLM\...\65B6FE5418CE28F4D72543FB2D964C3CEC83F161) (Version: 02/23/2007 2.5.0.0 - MobileTop)
Windows-Treiberpaket - Nokia pccsmcfd  (10/12/2007 6.85.4.0) (HKLM\...\3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F) (Version: 10/12/2007 6.85.4.0 - Nokia)
WinRAR Archivierer (HKLM\...\WinRAR archiver) (Version:  - )
X10 Hardware(TM) (HKLM\...\X10Hardware) (Version:  - )
Yahoo! Detect (HKLM\...\YTdetect) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-436374069-884357618-839522115-1004_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Programme\Skype\Plugin Manager\ezPMUtils.dll No File
CustomCLSID: HKU\S-1-5-21-436374069-884357618-839522115-1004_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Programme\Skype\Plugin Manager\ezPMUtils.dll No File
CustomCLSID: HKU\S-1-5-21-436374069-884357618-839522115-1004_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-436374069-884357618-839522115-1004_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Programme\Skype\Plugin Manager\ezPMUtils.dll No File

==================== Restore Points  =========================

ATTENTION: System Restore is disabled.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2001-08-23 13:00 - 2001-08-23 13:00 - 00000820 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Programme\Apple Software Update\SoftwareUpdate.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Programme\Alwil Software\Avast5\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Programme\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Programme\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-04 19:47 - 2015-02-04 19:47 - 02913280 _____ () C:\Programme\Alwil Software\Avast5\defs\15020401\algo.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\libxml2.dll
2009-02-11 17:18 - 2006-09-16 22:19 - 00126976 _____ () C:\Programme\WinRAR\rarext.dll
2013-11-22 23:14 - 2014-11-23 23:06 - 38562088 _____ () C:\Programme\Alwil Software\Avast5\libcef.dll
2014-01-10 06:26 - 2014-01-10 06:26 - 01861968 _____ () C:\Programme\DivX\DivX Update\DivXUpdate.exe
2014-01-10 06:28 - 2014-01-10 06:28 - 00100688 _____ () C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll
2009-07-18 19:29 - 2009-07-18 19:29 - 00061496 _____ () C:\Programme\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\clntutil.dll
2009-07-18 19:29 - 2009-07-18 19:29 - 00147493 _____ () C:\Programme\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\BWfiles.dll
2009-07-18 19:29 - 2009-07-18 19:29 - 00536617 _____ () C:\Programme\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\BWDocMapExt.dll
2009-07-18 19:29 - 2009-07-18 19:29 - 00114688 _____ () C:\Programme\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\bwscriptext.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot => "AlternateShell"=""

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Registry Areas =====================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-436374069-884357618-839522115-1004\Control Panel\Desktop\\Wallpaper -> C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: BluetoothAuthenticationAgent => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
MSCONFIG\startupreg: DivXUpdate => "C:\Programme\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: eMuleAutoStart => C:\Programme\eMule\emule.exe -AutoStart
MSCONFIG\startupreg: LogitechCommunicationsManager => "C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe"
MSCONFIG\startupreg: LogitechQuickCamRibbon => "C:\Programme\Logitech\QuickCam\Quickcam.exe" /hide
MSCONFIG\startupreg: NeroFilterCheck => C:\WINDOWS\system32\NeroCheck.exe
MSCONFIG\startupreg: NvCplDaemon => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
MSCONFIG\startupreg: RemoteControl => C:\Programme\CyberLink\PowerDVD\PDVDServ.exe

==================== Accounts: =============================

Administrator (S-1-5-21-436374069-884357618-839522115-500 - Administrator - Enabled)
ASPNET (S-1-5-21-436374069-884357618-839522115-1007 - Limited - Enabled)
Gast (S-1-5-21-436374069-884357618-839522115-501 - Limited - Disabled)
Hilfeassistent (S-1-5-21-436374069-884357618-839522115-1000 - Limited - Disabled)
kiwii x3 (S-1-5-21-436374069-884357618-839522115-1004 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\kiwii x3
Lidia (S-1-5-21-436374069-884357618-839522115-1003 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Lidia
SUPPORT_388945a0 (S-1-5-21-436374069-884357618-839522115-1002 - Limited - Disabled)

==================== Faulty Device Manager Devices =============

Name: USB-Massenspeichergerät
Description: USB-Massenspeichergerät
Class Guid: {36FC9E60-C465-11CF-8056-444553540000}
Manufacturer: Kompatibles USB-Speichergerät
Service: USBSTOR
Problem: : Windows cannot use this hardware device because it has been prepared for safe removal, but it has not been removed from the computer. (Code 47)
Resolution: Unplug the device, and then plug it in again. Alternately, restart the computer to make the device available.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/04/2015 01:59:06 AM) (Source: Application Error) (EventID: 1001) (User: )
Description: Fehlerhafter Speicherbereich 811905115.
Nach der 802.1x-Authentifizierung resultierte der WEP-Schlüsselaustausch nicht in einer sicheren Verbindung. Die aktuelle Einstellung wurde als fehlerhaft markiert, und die Drahtlosverbindung wird getrennt.

Error: (02/04/2015 01:58:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung plugin-container.exe, Version 35.0.1.5500, fehlgeschlagenes Modul mozalloc.dll, Version 35.0.1.5500, Fehleradresse 0x00001425.
Das medienspezifische Ereignis für [plugin-container.exe!ws!] wird verarbeitet.

Error: (02/04/2015 00:47:45 AM) (Source: Application Error) (EventID: 1001) (User: )
Description: Fehlerhafter Speicherbereich 811905115.
Nach der 802.1x-Authentifizierung resultierte der WEP-Schlüsselaustausch nicht in einer sicheren Verbindung. Die aktuelle Einstellung wurde als fehlerhaft markiert, und die Drahtlosverbindung wird getrennt.

Error: (02/04/2015 00:47:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung plugin-container.exe, Version 35.0.1.5500, fehlgeschlagenes Modul mozalloc.dll, Version 35.0.1.5500, Fehleradresse 0x00001425.
Das medienspezifische Ereignis für [plugin-container.exe!ws!] wird verarbeitet.

Error: (01/31/2015 06:32:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2078

Error: (01/31/2015 06:32:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2078

Error: (01/31/2015 06:32:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/31/2015 05:18:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 16066485

Error: (01/31/2015 05:18:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 16066485

Error: (01/31/2015 05:18:35 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (02/04/2015 02:30:07 AM) (Source: DCOM) (EventID: 10010) (User: LIDIA-IB4YRQUAM)
Description: Der Server "{49BD2028-1523-11D1-AD79-00C04FD8FDFF}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (01/22/2015 03:03:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Java Quick Starter" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (12/10/2012 02:55:59 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/10/2012 02:55:54 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/10/2012 02:55:39 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 0 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (10/10/2011 06:14:44 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 4583 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (09/28/2011 11:40:13 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (09/11/2011 10:18:29 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 1027 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (02/02/2011 02:25:36 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 190 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (01/21/2011 05:54:57 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 1509 seconds with 120 seconds of active time.  This session ended with a crash.

Error: (10/05/2010 06:03:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 264 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (06/22/2010 01:52:23 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6212.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 CPU 6400 @ 2.13GHz
Percentage of memory in use: 38%
Total physical RAM: 2046.42 MB
Available physical RAM: 1264.11 MB
Total Pagefile: 3429.08 MB
Available Pagefile: 2894.16 MB
Total Virtual: 2047.88 MB
Available Virtual: 1940.94 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:287.35 GB) (Free:41.84 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (RECOVER) (Fixed) (Total:10.73 GB) (Free:6.5 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: 90729072)
Partition 1: (Active) - (Size=287.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=10.7 GB) - (Type=OF Extended)

==================== End Of Log ============================


Alt 05.02.2015, 08:34   #6
schrauber
/// the machine
/// TB-Ausbilder
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


na also


Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Combofix wird überprüfen, ob die Microsoft Windows Wiederherstellungskonsole installiert ist.
    Ist diese nicht installiert, erlaube Combofix diese herunter zu laden und zu installieren. Folge dazu einfach den Anweisungen und aktzeptiere die Endbenutzer-Lizenz.
    Bei heutiger Malware ist dies sehr empfehlenswert, da diese uns eine Möglichkeit bietet, dein System zu reparieren, falls etwas schief geht.
    Bestätige die Information, dass die Wiederherstellungskonsole installiert wurde mit Ja.
    Hinweis: Ist diese bereits installiert, wird Combofix mit der Malwareentfernung fortfahren.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es eine Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
--> OTLPE Scan gemacht, was nun? (AKM-Trojaner?)

Alt 05.02.2015, 14:21   #7
kiwiix3
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Speichern auf dem Desktop geht nicht.
Ich kann generell gar nichts auf dem Desktop machen, weder rechte noch linke Maustaste bewirken etwas.
Vom Downloadordner auf Desktop verschieben geht auch nicht.

Alt 05.02.2015, 15:00   #8
schrauber
/// the machine
/// TB-Ausbilder
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Dann aus dem Download Ordner laufen lassen.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.02.2015, 15:26   #9
kiwiix3
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Combofix Log

Code:
ATTFilter
ComboFix 15-02-02.01 - kiwii x3 05.02.2015  15:07:58.1.2 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.43.1031.18.2046.1385 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\kiwii x3\Eigene Dateien\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokume~1\KIWIIX~1\LOKALE~1\Temp\IadHide5.dll
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx10.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx11.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx12.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx13.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx14.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx18.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx19.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx38.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISx39.tmp
c:\dokumente und einstellungen\All Users\Anwendungsdaten\ISxF.tmp
c:\dokumente und einstellungen\kiwii x3\Lokale Einstellungen\Temp\IadHide5.dll
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MYWEBSEARCHSERVICE
-------\Legacy_WINDOWS_INTERNET_NAME_SERVICE
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-01-05 bis 2015-02-05  ))))))))))))))))))))))))))))))
.
.
2015-02-05 13:14 . 2014-11-23 22:06	291352	----a-w-	c:\windows\system32\aswBoot.exe
2015-02-04 21:07 . 2015-02-04 21:08	--------	d-----w-	C:\FRST
2015-02-04 20:30 . 2015-02-04 20:30	--------	d-----w-	C:\_OTL
2015-01-22 14:05 . 2015-01-22 14:01	897960	----a-w-	c:\windows\system32\npdeployJava1.dll
2015-01-22 14:05 . 2015-01-22 14:01	818088	----a-w-	c:\windows\system32\deployJava1.dll
2015-01-22 14:02 . 2015-01-22 14:02	--------	d-----w-	c:\programme\Gemeinsame Dateien\Java
2015-01-22 14:00 . 2015-01-22 14:06	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Oracle
2015-01-17 17:33 . 2015-01-17 17:33	--------	d-----w-	c:\dokumente und einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Skype
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-05 13:52 . 2014-09-14 15:31	114904	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-02-04 22:04 . 2012-04-10 11:11	701616	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2015-02-04 22:04 . 2011-05-18 05:16	71344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2015-01-22 14:01 . 2014-09-15 13:08	96680	----a-w-	c:\windows\system32\WindowsAccessBridge.dll
2015-01-22 14:01 . 2012-04-29 20:16	146432	----a-w-	c:\windows\system32\javacpl.cpl
2014-12-10 16:51 . 2014-12-10 16:51	114904	----a-w-	c:\windows\system32\drivers\0E22314D.sys
2014-11-23 22:06 . 2011-03-04 15:16	787800	----a-w-	c:\windows\system32\drivers\aswsnx.sys
2014-11-23 22:06 . 2010-05-03 16:25	423784	----a-w-	c:\windows\system32\drivers\aswsp.sys
2014-11-23 22:06 . 2014-11-23 22:06	43152	----a-w-	c:\windows\avastSS.scr
2014-11-23 22:06 . 2014-06-20 12:12	24184	----a-w-	c:\windows\system32\drivers\aswHwid.sys
2014-11-23 22:06 . 2013-03-17 20:42	206248	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2014-11-23 22:06 . 2013-03-17 20:42	70384	----a-w-	c:\windows\system32\drivers\aswmonflt.sys
2014-11-23 22:06 . 2013-03-17 20:42	49944	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2014-11-23 22:06 . 2010-05-03 16:25	55240	----a-w-	c:\windows\system32\drivers\aswrdr.sys
2014-11-23 22:06 . 2010-05-03 16:25	57928	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2014-11-21 05:14 . 2014-09-14 15:31	54360	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2014-11-21 05:14 . 2014-09-14 15:31	23256	----a-w-	c:\windows\system32\drivers\mbam.sys
2014-11-18 13:56 . 2014-11-18 13:56	1202848	----a-w-	c:\windows\system32\FM20.DLL
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-11-23 22:06	723976	----a-w-	c:\programme\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LDM"="c:\programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2009-07-18 32768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\programme\VIAudioi\HDADeck\HDeck.exe" [2006-07-17 684032]
"nwiz"="nwiz.exe" [2007-11-06 1626112]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-06 81920]
"APSDaemon"="c:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [2014-10-11 60712]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"QuickTime Task"="c:\programme\QuickTime\QTTask.exe" [2013-05-01 421888]
"AvastUI.exe"="c:\programme\Alwil Software\Avast5\AvastUI.exe" [2015-01-26 5227112]
"DivXMediaServer"="c:\programme\DivX\DivX Media Server\DivXMediaServer.exe" [2014-11-17 448856]
"DivXUpdate"="c:\programme\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2014-10-15 157480]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-06 8523776]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\
Logitech Desktop Messenger.lnk - c:\programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe /start [2009-7-18 450560]
Microsoft Office.lnk - c:\programme\Microsoft Office\Office10\OSA.EXE -b -l [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
2008-04-14 06:53	110592	------w-	c:\windows\system32\bthprops.cpl
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2014-01-10 05:26	1861968	----a-w-	c:\programme\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 09:50	155648	----a-w-	c:\windows\system32\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2007-11-06 19:00	8523776	----a-w-	c:\windows\system32\nvcpl.dll
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Programme\\Mozilla Firefox\\firefox.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"443:TCP"= 443:TCP:*:Disabled:ooVoo TCP Port 443
"443:UDP"= 443:UDP:*:Disabled:ooVoo UDP Port 443
"37674:TCP"= 37674:TCP:*:Disabled:ooVoo TCP Port 37674
"37674:UDP"= 37674:UDP:*:Disabled:ooVoo UDP Port 37674
"37675:UDP"= 37675:UDP:*:Disabled:ooVoo UDP Port 37675
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [17.03.2013 21:42 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [17.03.2013 21:42 206248]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswsnx.sys [04.03.2011 16:16 787800]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [03.05.2010 17:25 423784]
R2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [20.06.2014 13:12 24184]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswmonflt.sys [17.03.2013 21:42 70384]
R2 MBAMScheduler;MBAMScheduler;c:\programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [14.09.2014 16:31 1871160]
R2 tor;Tor Win32 Service;c:\programme\Tor\tor.exe [28.12.2011 20:16 2745870]
R3 3xHybrid;Philips SAA713x PCI Card;c:\windows\system32\drivers\3xHybrid.sys [11.02.2009 17:04 882688]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [14.09.2014 16:31 23256]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [01.12.2009 21:15 27632]
R3 X10Hid;X10 Hid Device;c:\windows\system32\drivers\x10hid.sys [11.02.2009 17:04 7040]
S2 MBAMService;MBAMService;c:\programme\ Malwarebytes Anti-Malware \mbamservice.exe [14.09.2014 16:31 969016]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [30.05.2010 17:57 36608]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [19.01.2013 00:53 12400]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [30.05.2010 17:58 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [30.05.2010 17:58 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [30.05.2010 17:58 121856]
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-01-30 20:28	1086280	----a-w-	c:\programme\Google\Chrome\Application\40.0.2214.94\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-02-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 22:04]
.
2015-01-24 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2011-06-01 11:34]
.
2015-02-05 c:\windows\Tasks\avast! Emergency Update.job
- c:\programme\Alwil Software\Avast5\AvastEmUpdate.exe [2014-11-23 22:06]
.
2015-02-05 c:\windows\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
- c:\windows\system32\xp_eos.exe [2014-09-14 23:28]
.
2015-01-08 c:\windows\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
- c:\windows\system32\xp_eos.exe [2014-09-14 23:28]
.
2015-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2015-01-22 14:22]
.
2015-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2015-01-22 14:22]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = www.google.com
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 195.34.133.21 212.186.211.21
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\dokumente und einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.at/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
c:\dokumente und einstellungen\kiwii x3\Startmenü\Programme\Autostart\AutoStarter.lnk - c:\dokumente und einstellungen\kiwii x3\Anwendungsdaten\autostarter.exe
MSConfigStartUp-eMuleAutoStart - c:\programme\eMule\emule.exe
MSConfigStartUp-LogitechCommunicationsManager - c:\programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe
MSConfigStartUp-LogitechQuickCamRibbon - c:\programme\Logitech\QuickCam\Quickcam.exe
MSConfigStartUp-RemoteControl - c:\programme\CyberLink\PowerDVD\PDVDServ.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2015-02-05 15:16
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  HDAudDeck = c:\programme\VIAudioi\HDADeck\HDeck.exe 1???????????????????????????????????????? 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•6~*]
"7040111900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'explorer.exe'(3116)
c:\dokume~1\KIWIIX~1\LOKALE~1\Temp\IadHide5.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\programme\Alwil Software\Avast5\AvastSvc.exe
c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\programme\Bonjour\mDNSResponder.exe
c:\programme\Diskeeper Corporation\Diskeeper\DkService.exe
c:\programme\Google\Update\1.3.25.11\GoogleCrashHandler.exe
c:\programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
c:\windows\system32\nvsvc32.exe
c:\progra~1\COMMON~1\X10\Common\x10nets.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\RUNDLL32.EXE
c:\programme\iPod\bin\iPodService.exe
c:\windows\System32\wbem\unsecapp.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-02-05  15:23:04 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-02-05 14:23
.
Vor Suchlauf: 11 Verzeichnis(se), 44.747.628.544 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 45.107.695.616 Bytes frei
.
WindowsXP-KB310994-SP2-Pro-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
.
- - End Of File - - B68DA0A9F40994B92404D9DDF14A7275
72B8CE41AF0DE751C946802B3ED844B4

Alt 05.02.2015, 18:12   #10
schrauber
/// the machine
/// TB-Ausbilder
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.02.2015, 23:01   #11
kiwiix3
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Mbam Log

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 05.02.2015
Suchlauf-Zeit: 21:34:47
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.02.05.07
Rootkit Datenbank: v2015.02.03.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows XP Service Pack 3
CPU: x86
Dateisystem: NTFS
Benutzer: kiwii x3

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 402249
Verstrichene Zeit: 21 Min, 3 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 0
(Keine schädliche Elemente erkannt)

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
AdwCleaner Log

Code:
ATTFilter
# AdwCleaner v4.109 - Bericht erstellt am 05/02/2015 um 22:41:31
# Aktualisiert 24/01/2015 von Xplode
# Database : 2015-02-05.2 [Live]
# Betriebssystem : Microsoft Windows XP Service Pack 3 (32 bits)
# Benutzername : kiwii x3 - LIDIA-IB4YRQUAM
# Gestartet von : C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Downloads\AdwCleaner_4.109.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{48791EE8-18B0-3225-94A7-2E912681434F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F149A3F1-9BED-3E8D-886C-AC801394E432}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{92780B25-18CC-41C8-B9BE-3C9C571A8263}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}
Schlüssel Gelöscht : HKCU\Software\systweak
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Browser ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v35.0.1 (x86 de)

[wgptaq5e.default-1422105172328\prefs.js] - Zeile gelöscht : user_pref("lightweightThemes.usedThemes", "[{\"id\":\"296468\",\"name\":\"Chi Sweet Home - Uh Oh\",\"headerURL\":\"hxxps://addons.cdn.mozilla.net/user-media/addons/296468/Persona_Header_Chii5.jpg?1411[...]

-\\ Google Chrome v40.0.2214.94


*************************

AdwCleaner[R0].txt - [38001 octets] - [14/09/2014 18:49:02]
AdwCleaner[R1].txt - [1812 octets] - [05/02/2015 21:58:50]
AdwCleaner[R2].txt - [1872 octets] - [05/02/2015 22:37:27]
AdwCleaner[S0].txt - [38063 octets] - [14/09/2014 19:44:52]
AdwCleaner[S1].txt - [1802 octets] - [05/02/2015 22:41:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1862 octets] ##########
JRT Log

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Microsoft Windows XP x86
Ran by kiwii x3 on 05.02.2015 at 22:45:24,25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.02.2015 at 22:50:04,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Log


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-02-2015 01
Ran by kiwii x3 (administrator) on LIDIA-IB4YRQUAM on 05-02-2015 22:51:59
Running from C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Downloads
Loaded Profiles: kiwii x3 (Available profiles: Lidia & kiwii x3)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Programme\Alwil Software\Avast5\AvastSvc.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(Diskeeper Corporation) C:\Programme\Diskeeper Corporation\Diskeeper\DkService.exe
(Malwarebytes Corporation) C:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Google Inc.) C:\Programme\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(X10) C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe
(VIA Technologies, Inc.) C:\Programme\VIAudioi\HDADeck\HDeck.exe
(AVAST Software) C:\Programme\Alwil Software\Avast5\avastui.exe
() C:\Programme\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Logitech) C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HDAudDeck] => C:\Programme\VIAudioi\HDADeck\HDeck.exe [684032 2006-07-17] (VIA Technologies, Inc.)
HKLM\...\Run: [nwiz] => nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [APSDaemon] => C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Programme\Alwil Software\Avast5\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM\...\Run: [DivXMediaServer] => C:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Programme\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM\...\Run: [iTunesHelper] => C:\Programme\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Winlogon\Notify\WgaLogon: WgaLogon.dll [X]
HKU\S-1-5-21-436374069-884357618-839522115-1004\...\Run: [LDM] => C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [32768 2009-07-18] (Logitech)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk
ShortcutTarget: Logitech Desktop Messenger.lnk -> C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Programme\Alwil Software\Avast5\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-436374069-884357618-839522115-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-436374069-884357618-839522115-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-436374069-884357618-839522115-1004 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programme\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
Handler: bw+0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw+0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw-0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw-0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw00 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw00s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw10 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw10s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw20 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw20s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw30 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw30s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw40 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw40s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw50 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw50s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw60 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw60s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw70 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw70s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw80 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw80s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw90 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw90s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwa0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwa0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwb0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwb0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwc0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwc0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwd0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwd0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwe0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwe0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwf0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwf0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwg0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwg0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwh0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwh0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwi0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwi0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwj0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwj0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwk0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwk0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwl0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwl0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwm0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwm0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwn0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwn0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwo0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwo0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwp0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwp0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwq0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwq0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwr0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwr0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bws0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bws0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwt0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwt0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwu0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwu0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwv0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwv0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bww0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bww0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwx0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwx0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwy0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwy0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwz0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwz0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Programme\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: offline-8876480 - {8C76A76D-ACF5-4305-A127-B5F76A0A7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Winsock: Catalog5 05 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328
FF Homepage: hxxp://www.google.at/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/MycameraPlugin -> C:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\WINDOWS\system32\npdeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Programme\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Programme\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Programme\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-436374069-884357618-839522115-1004: @unity3d.com/UnityPlayer,version=1.0 -> C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: SoundCloud Downloader - Technowise - C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2015-02-04]
FF Extension: Adblock Plus - C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-24]
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} [2015-01-27]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-03-01]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Programme\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Programme\Alwil Software\Avast5\WebRep\FF [2011-03-04]

Chrome: 
=======
CHR Profile: C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-22]
CHR Extension: (Adblock Plus) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-22]
CHR Extension: (pro grey) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\enhpebdanojkmhbbneclbkmpleemilaj [2015-01-22]
CHR Extension: (Google Wallet) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-22]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Programme\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-11-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [60744 2014-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Programme\Alwil Software\Avast5\AvastSvc.exe [50344 2014-11-23] (AVAST Software)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
R2 Diskeeper; C:\Programme\Diskeeper Corporation\Diskeeper\DkService.exe [1333016 2008-11-22] (Diskeeper Corporation)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [107912 2015-01-22] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [107912 2015-01-22] (Google Inc.)
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [540968 2014-10-15] (Apple Inc.)
R2 MBAMScheduler; C:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [322120 2003-06-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114800 2015-01-27] (Mozilla Foundation)
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S3 ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
R2 tor; C:\Programme\Tor\tor.exe [2745870 2011-12-28] () [File not signed]
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
R2 x10nets; C:\Programme\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 3xHybrid; C:\WINDOWS\System32\DRIVERS\3xHybrid.sys [882688 2006-04-28] (Philips Semiconductors GmbH)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-11-23] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-11-23] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-11-23] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-11-23] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-11-23] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2014-11-23] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-11-23] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-11-23] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R3 FETNDIS; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc.              )
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R3 HdAudAddService; C:\WINDOWS\System32\drivers\viahduaa.sys [137216 2006-07-17] (VIA Technologies, Inc.)
R3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51088 2004-06-22] (HP)
R3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2004-06-22] (HP)
R3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2004-06-22] (HP)
S3 Lvckap; C:\WINDOWS\system32\drivers\Lvckap.sys [2174464 2005-12-09] () [File not signed]
S3 lvmvdrv; C:\WINDOWS\system32\drivers\lvmvdrv.sys [2400256 2005-12-09] () [File not signed]
S3 LVPrcMon; C:\WINDOWS\system32\drivers\LVPrcMon.sys [16768 2005-12-09] () [File not signed]
R3 LVUSBSta; C:\WINDOWS\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [114904 2015-02-05] (Malwarebytes Corporation)
S3 MPE; C:\WINDOWS\System32\DRIVERS\MPE.sys [15232 2008-04-14] (Microsoft Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 PID_0928; C:\WINDOWS\System32\DRIVERS\LV561AV.SYS [489624 2008-02-01] (Logitech Inc.)
S3 ss_bbus; C:\WINDOWS\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\WINDOWS\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\WINDOWS\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
R0 videX32; C:\WINDOWS\System32\DRIVERS\videX32.sys [9728 2006-09-07] (VIA Technologies, Inc.)
R3 X10Hid; C:\WINDOWS\System32\Drivers\x10hid.sys [7040 2005-11-28] (X10 Wireless Technology, Inc.)
R0 xfilt; C:\WINDOWS\System32\DRIVERS\xfilt.sys [11264 2006-09-07] (VIA Technologies,Inc)
S3 XUIF; C:\WINDOWS\System32\Drivers\x10ufx2.sys [17792 2005-05-19] (X10 Wireless Technology, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 w810bus; system32\DRIVERS\w810bus.sys [X]
S3 w810mdfl; system32\DRIVERS\w810mdfl.sys [X]
S3 w810mdm; system32\DRIVERS\w810mdm.sys [X]
S3 w810mgmt; system32\DRIVERS\w810mgmt.sys [X]
S3 w810obex; system32\DRIVERS\w810obex.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 22:50 - 2015-02-05 22:50 - 00000584 _____ () C:\Dokumente und Einstellungen\kiwii x3\Desktop\JRT.txt
2015-02-05 22:44 - 2015-02-05 22:44 - 00001942 _____ () C:\Dokumente und Einstellungen\kiwii x3\Desktop\AdwCleaner[S1].txt
2015-02-05 21:57 - 2015-02-05 21:57 - 00001206 _____ () C:\Dokumente und Einstellungen\kiwii x3\Desktop\mbam.txt
2015-02-05 15:23 - 2015-02-05 15:23 - 00015162 _____ () C:\ComboFix.txt
2015-02-05 15:23 - 2015-02-05 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\temp
2015-02-05 15:23 - 2015-02-05 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\temp
2015-02-05 15:23 - 2015-02-05 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\Lidia\Lokale Einstellungen\temp
2015-02-05 15:23 - 2015-02-05 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\temp
2015-02-05 15:12 - 2015-02-05 22:52 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\temp
2015-02-05 15:06 - 2015-02-05 15:06 - 00000000 _RSHD () C:\cmdcons
2015-02-05 15:06 - 2015-02-04 02:29 - 00000211 _____ () C:\Boot.bak
2015-02-05 15:06 - 2004-08-03 23:00 - 00262448 __RSH () C:\cmldr
2015-02-05 15:05 - 2011-06-26 07:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2015-02-05 15:05 - 2010-11-07 18:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2015-02-05 15:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2015-02-05 15:04 - 2015-02-05 15:23 - 00000000 ____D () C:\Qoobox
2015-02-05 15:03 - 2015-02-05 15:20 - 00000000 ____D () C:\WINDOWS\erdnt
2015-02-05 14:14 - 2015-02-05 14:14 - 00001706 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Avast Free Antivirus.lnk
2015-02-05 14:14 - 2015-02-05 14:14 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AVAST Software
2015-02-05 14:14 - 2014-11-23 23:06 - 00291352 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-02-04 22:07 - 2015-02-05 22:52 - 00000000 ____D () C:\FRST
2015-02-04 21:30 - 2015-02-04 21:30 - 00000000 ____D () C:\_OTL
2015-02-04 09:05 - 2015-02-04 09:12 - 00115846 _____ () C:\OTL.Txt
2015-02-04 02:26 - 2015-02-04 02:29 - 00000000 ____D () C:\WINDOWS\pss
2015-02-04 01:58 - 2015-02-04 01:58 - 00000032 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\url.txt
2015-02-04 01:53 - 2015-02-04 01:53 - 00003785 _____ () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\lpm.dat
2015-02-04 01:38 - 2015-02-04 01:52 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Usenet.nl
2015-01-27 00:07 - 2015-01-27 01:37 - 00000000 ____D () C:\Programme\Mozilla Firefox
2015-01-22 17:09 - 2015-01-22 17:09 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Google Chrome
2015-01-22 15:23 - 2015-01-22 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Chrome
2015-01-22 15:22 - 2015-02-05 22:42 - 00001086 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-22 15:22 - 2015-02-05 22:32 - 00001090 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-22 15:05 - 2015-01-22 15:01 - 00897960 _____ (Oracle Corporation) C:\WINDOWS\system32\npdeployJava1.dll
2015-01-22 15:05 - 2015-01-22 15:01 - 00818088 _____ (Oracle Corporation) C:\WINDOWS\system32\deployJava1.dll
2015-01-22 15:02 - 2015-01-22 15:02 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Java
2015-01-22 15:00 - 2015-01-22 15:06 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Oracle
2015-01-17 18:33 - 2015-01-17 18:33 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Skype

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-05 22:52 - 2014-09-14 16:31 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-05 22:45 - 2009-02-11 16:56 - 01526803 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-05 22:43 - 2012-07-10 19:07 - 00000358 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-02-05 22:43 - 2011-12-28 20:17 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\tor
2015-02-05 22:43 - 2009-02-11 16:37 - 00000211 _____ () C:\WINDOWS\wiadebug.log
2015-02-05 22:42 - 2014-09-15 13:55 - 00000228 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2015-02-05 22:42 - 2009-02-11 20:23 - 00000300 ___SH () C:\Dokumente und Einstellungen\kiwii x3\ntuser.ini
2015-02-05 22:42 - 2009-02-11 20:23 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3
2015-02-05 22:42 - 2009-02-11 16:44 - 00032390 _____ () C:\WINDOWS\SchedLgU.Txt
2015-02-05 22:42 - 2009-02-11 16:41 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-05 22:42 - 2009-02-11 16:37 - 00000000 _____ () C:\WINDOWS\wiaservc.log
2015-02-05 22:41 - 2014-09-14 18:47 - 00000000 ____D () C:\AdwCleaner
2015-02-05 22:34 - 2009-02-11 16:44 - 00000000 __SHD () C:\Dokumente und Einstellungen\NetworkService
2015-02-05 22:04 - 2012-07-10 18:55 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-05 19:27 - 2009-02-11 16:36 - 00000000 ____D () C:\Programme
2015-02-05 15:21 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart
2015-02-05 15:17 - 2001-08-23 13:00 - 00000227 _____ () C:\WINDOWS\system.ini
2015-02-05 15:15 - 2009-02-11 16:39 - 00000000 ____D () C:\WINDOWS\system32\Restore
2015-02-05 15:06 - 2009-02-11 17:34 - 00000327 __RSH () C:\boot.ini
2015-02-05 14:14 - 2009-02-11 16:35 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2015-02-04 23:04 - 2012-04-10 12:11 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-02-04 23:04 - 2011-05-18 06:16 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-02-04 19:14 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Eigene Bilder
2015-02-04 02:29 - 2001-08-23 13:00 - 00000634 _____ () C:\WINDOWS\win.ini
2015-02-04 02:00 - 2001-08-23 13:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-02-04 00:03 - 2013-05-09 18:33 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Rezepte
2015-02-01 19:35 - 2012-06-14 16:32 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service
2015-02-01 19:35 - 2009-02-11 16:35 - 00296456 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-30 12:37 - 2009-02-11 20:23 - 00075800 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2015-01-30 10:56 - 2009-02-11 17:48 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2015-01-28 17:22 - 2012-09-10 10:27 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Uni
2015-01-24 17:23 - 2011-07-28 14:49 - 00000276 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2015-01-24 01:15 - 2009-02-15 22:25 - 00048640 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-22 18:01 - 2011-03-28 13:33 - 00000000 ____D () C:\WINDOWS\Minidump
2015-01-22 17:09 - 2009-02-11 20:23 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme
2015-01-22 17:02 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Eigene Musik
2015-01-22 16:51 - 2009-02-11 16:36 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Microsoft Shared
2015-01-22 15:23 - 2009-02-12 21:11 - 00000000 ____D () C:\Programme\Google
2015-01-22 15:07 - 2009-03-02 22:45 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype
2015-01-22 15:06 - 2009-02-11 17:43 - 00000000 ____D () C:\Programme\Java
2015-01-22 15:01 - 2014-09-15 14:09 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-01-22 15:01 - 2014-05-29 11:49 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
2015-01-22 15:01 - 2012-04-29 21:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-01-17 21:53 - 2009-03-02 22:45 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Skype
2015-01-15 23:35 - 2009-11-22 22:20 - 00062020 ____H () C:\WINDOWS\system32\mlfcache.dat
2015-01-14 15:32 - 2014-09-15 02:52 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-14 15:26 - 2009-02-11 17:32 - 110348472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-01-08 15:00 - 2014-09-15 13:55 - 00000222 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job

==================== Files in the root of some directories =======

2010-05-30 17:57 - 2010-05-30 17:57 - 0002528 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\$_hpcst$.hpc
2012-09-15 11:07 - 2012-09-16 23:35 - 0016748 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\LogBuch.txt
2012-09-15 10:48 - 2012-09-16 23:35 - 0003087 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PData.MM1
2012-09-15 10:48 - 2012-09-16 23:35 - 0003087 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PData.MMM
2015-02-04 01:58 - 2015-02-04 01:58 - 0000032 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\url.txt
2009-02-15 22:25 - 2015-01-24 01:15 - 0048640 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\temp\IadHide5.dll
C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\temp\Quarantine.exe
C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
--- --- ---
Alt 06.02.2015, 09:40   #12
schrauber
/// the machine
/// TB-Ausbilder
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.02.2015, 21:40   #13
kiwiix3
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Eset Log

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=990bdd4123f9604eaeccfbc42ed5674d
# engine=22347
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-02-06 08:18:55
# local_time=2015-02-06 09:18:55 (+0100, Westeuropäische Normalzeit)
# country="Austria"
# lang=1031
# osver=5.1.2600 NT Service Pack 3
# scanned=108467
# found=1
# cleaned=1
# scan_time=2738
sh=4AED2FD1CF2AF29BDE00F0DD01AAB8A4549F39EC ft=1 fh=45a5f1915d8949ed vn="Mehrere Bedrohungen (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\_OTL\MovedFiles\02042015_153010\C_Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\loadit.exe"
Security Check Log

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.95  
 Windows XP Service Pack 3 x86   
 Internet Explorer 8  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:````````` 
 CCleaner     
 Java 8 Update 31  
 Java version 32-bit out of Date! 
 Adobe Flash Player 10 Flash Player out of Date! 
  Java 64-bit 8 Update 31  
 Adobe Flash Player 	16.0.0.305  
 Adobe Reader 9  
 Adobe Reader XI  
 Mozilla Firefox (35.0.1) 
 Google Chrome (40.0.2214.111) 
 Google Chrome (40.0.2214.94) 
````````Process Check: objlist.exe by Laurent````````  
 Alwil Software Avast5 AvastSvc.exe  
 Alwil Software Avast5 AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C::  
````````````````````End of Log``````````````````````
FRST Log


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-02-2015 01
Ran by kiwii x3 (administrator) on LIDIA-IB4YRQUAM on 06-02-2015 21:38:50
Running from C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Downloads
Loaded Profiles: kiwii x3 (Available profiles: Lidia & kiwii x3)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Programme\Alwil Software\Avast5\AvastSvc.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(Diskeeper Corporation) C:\Programme\Diskeeper Corporation\Diskeeper\DkService.exe
(Google Inc.) C:\Programme\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(X10) C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe
(VIA Technologies, Inc.) C:\Programme\VIAudioi\HDADeck\HDeck.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(AVAST Software) C:\Programme\Alwil Software\Avast5\avastui.exe
() C:\Programme\DivX\DivX Update\DivXUpdate.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Logitech) C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\plugin-container.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HDAudDeck] => C:\Programme\VIAudioi\HDADeck\HDeck.exe [684032 2006-07-17] (VIA Technologies, Inc.)
HKLM\...\Run: [nwiz] => nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [APSDaemon] => C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Programme\Alwil Software\Avast5\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM\...\Run: [DivXMediaServer] => C:\Programme\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Programme\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM\...\Run: [iTunesHelper] => C:\Programme\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Winlogon\Notify\WgaLogon: WgaLogon.dll [X]
HKU\S-1-5-21-436374069-884357618-839522115-1004\...\Run: [LDM] => C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [32768 2009-07-18] (Logitech)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech Desktop Messenger.lnk
ShortcutTarget: Logitech Desktop Messenger.lnk -> C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Programme\Alwil Software\Avast5\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-436374069-884357618-839522115-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-436374069-884357618-839522115-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-436374069-884357618-839522115-1004 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programme\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
Handler: bw+0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw+0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw-0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw-0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw00 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw00s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw10 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw10s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw20 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw20s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw30 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw30s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw40 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw40s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw50 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw50s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw60 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw60s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw70 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw70s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw80 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw80s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw90 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bw90s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwa0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwa0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwb0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwb0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwc0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwc0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwd0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwd0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwe0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwe0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwf0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwf0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwg0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwg0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwh0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwh0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwi0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwi0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwj0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwj0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwk0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwk0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwl0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwl0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwm0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwm0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwn0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwn0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwo0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwo0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwp0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwp0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwq0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwq0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwr0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwr0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bws0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bws0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwt0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwt0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwu0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwu0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwv0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwv0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bww0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bww0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwx0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwx0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwy0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwy0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwz0 - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: bwz0s - {8c76a76d-acf5-4305-a127-b5f76a0a7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Programme\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: offline-8876480 - {8C76A76D-ACF5-4305-A127-B5F76A0A7641} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
Winsock: Catalog5 05 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328
FF Homepage: hxxp://www.google.at/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @canon.com/MycameraPlugin -> C:\Programme\Canon\ZoomBrowser EX\Program\NPCIG.dll (CANON INC.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\WINDOWS\system32\npdeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin -> C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Programme\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Programme\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Programme\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Programme\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-436374069-884357618-839522115-1004: @unity3d.com/UnityPlayer,version=1.0 -> C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Extension: SoundCloud Downloader - Technowise - C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2015-02-04]
FF Extension: Adblock Plus - C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Mozilla\Firefox\Profiles\wgptaq5e.default-1422105172328\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-24]
FF Extension: Java Console - C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} [2015-01-27]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-03-01]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Programme\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Programme\Alwil Software\Avast5\WebRep\FF [2011-03-04]

Chrome: 
=======
CHR Profile: C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-22]
CHR Extension: (Adblock Plus) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-01-22]
CHR Extension: (pro grey) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\enhpebdanojkmhbbneclbkmpleemilaj [2015-01-22]
CHR Extension: (Google Wallet) - C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-22]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Programme\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-11-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [60744 2014-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Programme\Alwil Software\Avast5\AvastSvc.exe [50344 2014-11-23] (AVAST Software)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
R2 Diskeeper; C:\Programme\Diskeeper Corporation\Diskeeper\DkService.exe [1333016 2008-11-22] (Diskeeper Corporation)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [107912 2015-01-22] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [107912 2015-01-22] (Google Inc.)
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [540968 2014-10-15] (Apple Inc.)
S2 MBAMScheduler; C:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
S2 MBAMService; C:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [322120 2003-06-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [114800 2015-01-27] (Mozilla Foundation)
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S3 ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
R2 tor; C:\Programme\Tor\tor.exe [2745870 2011-12-28] () [File not signed]
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
R2 x10nets; C:\Programme\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 3xHybrid; C:\WINDOWS\System32\DRIVERS\3xHybrid.sys [882688 2006-04-28] (Philips Semiconductors GmbH)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-11-23] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-11-23] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-11-23] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-11-23] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-11-23] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [423784 2014-11-23] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-11-23] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-11-23] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R3 FETNDIS; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc.              )
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R3 HdAudAddService; C:\WINDOWS\System32\drivers\viahduaa.sys [137216 2006-07-17] (VIA Technologies, Inc.)
R3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51088 2004-06-22] (HP)
R3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2004-06-22] (HP)
R3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2004-06-22] (HP)
S3 Lvckap; C:\WINDOWS\system32\drivers\Lvckap.sys [2174464 2005-12-09] () [File not signed]
S3 lvmvdrv; C:\WINDOWS\system32\drivers\lvmvdrv.sys [2400256 2005-12-09] () [File not signed]
S3 LVPrcMon; C:\WINDOWS\system32\drivers\LVPrcMon.sys [16768 2005-12-09] () [File not signed]
R3 LVUSBSta; C:\WINDOWS\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation)
S3 MPE; C:\WINDOWS\System32\DRIVERS\MPE.sys [15232 2008-04-14] (Microsoft Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 PID_0928; C:\WINDOWS\System32\DRIVERS\LV561AV.SYS [489624 2008-02-01] (Logitech Inc.)
S3 ss_bbus; C:\WINDOWS\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\WINDOWS\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\WINDOWS\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
R0 videX32; C:\WINDOWS\System32\DRIVERS\videX32.sys [9728 2006-09-07] (VIA Technologies, Inc.)
R3 X10Hid; C:\WINDOWS\System32\Drivers\x10hid.sys [7040 2005-11-28] (X10 Wireless Technology, Inc.)
R0 xfilt; C:\WINDOWS\System32\DRIVERS\xfilt.sys [11264 2006-09-07] (VIA Technologies,Inc)
S3 XUIF; C:\WINDOWS\System32\Drivers\x10ufx2.sys [17792 2005-05-19] (X10 Wireless Technology, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 w810bus; system32\DRIVERS\w810bus.sys [X]
S3 w810mdfl; system32\DRIVERS\w810mdfl.sys [X]
S3 w810mdm; system32\DRIVERS\w810mdm.sys [X]
S3 w810mgmt; system32\DRIVERS\w810mgmt.sys [X]
S3 w810obex; system32\DRIVERS\w810obex.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-06 21:36 - 2015-02-06 21:36 - 00001028 _____ () C:\Dokumente und Einstellungen\kiwii x3\Desktop\checkup.txt
2015-02-06 20:29 - 2015-02-06 20:29 - 00000000 ____D () C:\Programme\ESET
2015-02-05 22:52 - 2015-02-05 22:52 - 00046478 _____ () C:\Dokumente und Einstellungen\kiwii x3\Desktop\FRST.txt
2015-02-05 22:50 - 2015-02-05 22:50 - 00000584 _____ () C:\Dokumente und Einstellungen\kiwii x3\Desktop\JRT.txt
2015-02-05 22:44 - 2015-02-05 22:44 - 00001942 _____ () C:\Dokumente und Einstellungen\kiwii x3\Desktop\AdwCleaner[S1].txt
2015-02-05 21:57 - 2015-02-05 21:57 - 00001206 _____ () C:\Dokumente und Einstellungen\kiwii x3\Desktop\mbam.txt
2015-02-05 15:23 - 2015-02-05 15:23 - 00015162 _____ () C:\ComboFix.txt
2015-02-05 15:23 - 2015-02-05 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\temp
2015-02-05 15:23 - 2015-02-05 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\temp
2015-02-05 15:23 - 2015-02-05 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\Lidia\Lokale Einstellungen\temp
2015-02-05 15:23 - 2015-02-05 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\temp
2015-02-05 15:12 - 2015-02-06 21:39 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\temp
2015-02-05 15:06 - 2015-02-05 15:06 - 00000000 _RSHD () C:\cmdcons
2015-02-05 15:06 - 2015-02-04 02:29 - 00000211 _____ () C:\Boot.bak
2015-02-05 15:06 - 2004-08-03 23:00 - 00262448 __RSH () C:\cmldr
2015-02-05 15:05 - 2011-06-26 07:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2015-02-05 15:05 - 2010-11-07 18:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2015-02-05 15:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2015-02-05 15:05 - 2000-08-31 01:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2015-02-05 15:04 - 2015-02-05 15:23 - 00000000 ____D () C:\Qoobox
2015-02-05 15:03 - 2015-02-05 15:20 - 00000000 ____D () C:\WINDOWS\erdnt
2015-02-05 14:14 - 2015-02-05 14:14 - 00001706 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\Avast Free Antivirus.lnk
2015-02-05 14:14 - 2015-02-05 14:14 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AVAST Software
2015-02-05 14:14 - 2014-11-23 23:06 - 00291352 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-02-04 22:07 - 2015-02-06 21:38 - 00000000 ____D () C:\FRST
2015-02-04 21:30 - 2015-02-04 21:30 - 00000000 ____D () C:\_OTL
2015-02-04 09:05 - 2015-02-04 09:12 - 00115846 _____ () C:\OTL.Txt
2015-02-04 02:26 - 2015-02-04 02:29 - 00000000 ____D () C:\WINDOWS\pss
2015-02-04 01:58 - 2015-02-04 01:58 - 00000032 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\url.txt
2015-02-04 01:53 - 2015-02-04 01:53 - 00003785 _____ () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\lpm.dat
2015-02-04 01:38 - 2015-02-04 01:52 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Usenet.nl
2015-01-27 00:07 - 2015-01-27 01:37 - 00000000 ____D () C:\Programme\Mozilla Firefox
2015-01-22 17:09 - 2015-01-22 17:09 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Google Chrome
2015-01-22 15:23 - 2015-01-22 15:23 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Google Chrome
2015-01-22 15:22 - 2015-02-06 21:32 - 00001090 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-22 15:22 - 2015-02-06 20:23 - 00001086 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-22 15:05 - 2015-01-22 15:01 - 00897960 _____ (Oracle Corporation) C:\WINDOWS\system32\npdeployJava1.dll
2015-01-22 15:05 - 2015-01-22 15:01 - 00818088 _____ (Oracle Corporation) C:\WINDOWS\system32\deployJava1.dll
2015-01-22 15:02 - 2015-01-22 15:02 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Java
2015-01-22 15:00 - 2015-01-22 15:06 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Oracle
2015-01-17 18:33 - 2015-01-17 18:33 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\Skype

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-06 21:04 - 2012-07-10 18:55 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-06 20:52 - 2014-09-14 16:31 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-02-06 20:31 - 2011-12-28 20:17 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\tor
2015-02-06 20:29 - 2009-02-11 16:36 - 00000000 ____D () C:\Programme
2015-02-06 20:26 - 2009-02-11 16:56 - 01543545 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-06 20:23 - 2014-09-15 13:55 - 00000228 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2015-02-06 20:23 - 2012-07-10 19:07 - 00000358 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-02-06 20:21 - 2009-02-11 16:41 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-06 20:21 - 2009-02-11 16:37 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-02-06 20:21 - 2009-02-11 16:37 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-02-05 23:05 - 2009-02-11 20:23 - 00000300 ___SH () C:\Dokumente und Einstellungen\kiwii x3\ntuser.ini
2015-02-05 23:05 - 2009-02-11 20:23 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3
2015-02-05 23:05 - 2009-02-11 16:44 - 00032390 _____ () C:\WINDOWS\SchedLgU.Txt
2015-02-05 22:41 - 2014-09-14 18:47 - 00000000 ____D () C:\AdwCleaner
2015-02-05 22:34 - 2009-02-11 16:44 - 00000000 __SHD () C:\Dokumente und Einstellungen\NetworkService
2015-02-05 15:21 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme\Autostart
2015-02-05 15:17 - 2001-08-23 13:00 - 00000227 _____ () C:\WINDOWS\system.ini
2015-02-05 15:15 - 2009-02-11 16:39 - 00000000 ____D () C:\WINDOWS\system32\Restore
2015-02-05 15:06 - 2009-02-11 17:34 - 00000327 __RSH () C:\boot.ini
2015-02-05 14:14 - 2009-02-11 16:35 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2015-02-04 23:04 - 2012-04-10 12:11 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-02-04 23:04 - 2011-05-18 06:16 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-02-04 19:14 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Eigene Bilder
2015-02-04 02:29 - 2001-08-23 13:00 - 00000634 _____ () C:\WINDOWS\win.ini
2015-02-04 02:00 - 2001-08-23 13:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-02-04 00:03 - 2013-05-09 18:33 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Rezepte
2015-02-01 19:35 - 2012-06-14 16:32 - 00000000 ____D () C:\Programme\Mozilla Maintenance Service
2015-02-01 19:35 - 2009-02-11 16:35 - 00296456 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-30 12:37 - 2009-02-11 20:23 - 00075800 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2015-01-30 10:56 - 2009-02-11 17:48 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2015-01-28 17:22 - 2012-09-10 10:27 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Uni
2015-01-24 17:23 - 2011-07-28 14:49 - 00000276 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2015-01-24 01:15 - 2009-02-15 22:25 - 00048640 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-22 18:01 - 2011-03-28 13:33 - 00000000 ____D () C:\WINDOWS\Minidump
2015-01-22 17:09 - 2009-02-11 20:23 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Startmenü\Programme
2015-01-22 17:02 - 2009-02-11 20:23 - 00000000 ___RD () C:\Dokumente und Einstellungen\kiwii x3\Eigene Dateien\Eigene Musik
2015-01-22 16:51 - 2009-02-11 16:36 - 00000000 ____D () C:\Programme\Gemeinsame Dateien\Microsoft Shared
2015-01-22 15:23 - 2009-02-12 21:11 - 00000000 ____D () C:\Programme\Google
2015-01-22 15:07 - 2009-03-02 22:45 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype
2015-01-22 15:06 - 2009-02-11 17:43 - 00000000 ____D () C:\Programme\Java
2015-01-22 15:01 - 2014-09-15 14:09 - 00272296 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00176552 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2015-01-22 15:01 - 2014-09-15 14:08 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-01-22 15:01 - 2014-05-29 11:49 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Java
2015-01-22 15:01 - 2012-04-29 21:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-01-17 21:53 - 2009-03-02 22:45 - 00000000 ____D () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\Skype
2015-01-15 23:35 - 2009-11-22 22:20 - 00062020 ____H () C:\WINDOWS\system32\mlfcache.dat
2015-01-14 15:32 - 2014-09-15 02:52 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-14 15:26 - 2009-02-11 17:32 - 110348472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-01-08 15:00 - 2014-09-15 13:55 - 00000222 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job

==================== Files in the root of some directories =======

2010-05-30 17:57 - 2010-05-30 17:57 - 0002528 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\$_hpcst$.hpc
2012-09-15 11:07 - 2012-09-16 23:35 - 0016748 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\LogBuch.txt
2012-09-15 10:48 - 2012-09-16 23:35 - 0003087 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PData.MM1
2012-09-15 10:48 - 2012-09-16 23:35 - 0003087 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\PData.MMM
2015-02-04 01:58 - 2015-02-04 01:58 - 0000032 _____ () C:\Dokumente und Einstellungen\kiwii x3\Anwendungsdaten\url.txt
2009-02-15 22:25 - 2015-01-24 01:15 - 0048640 _____ () C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\temp\IadHide5.dll
C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\temp\Quarantine.exe
C:\Dokumente und Einstellungen\kiwii x3\Lokale Einstellungen\temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
--- --- ---


Es schaut alles wieder super aus, tausend Dank!

Alt 07.02.2015, 12:25   #14
schrauber
/// the machine
/// TB-Ausbilder
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Flash updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
R2 tor; C:\Programme\Tor\tor.exe [2745870 2011-12-28] () [File not signed]
C:\Programme\Tor
Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Rechner vom Netz trennen, da XP.


Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 07.02.2015, 22:16   #15
kiwiix3
 
OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Standard

OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


Mir ist gerade aufgefallen, dass ich "Fixlog" leider vergessen habe und das jetzt weg ist, aber sonst funktioniert wieder alles einwandfrei.
Vieeelen Dank nochmal!

Antwort
Seite 1 von 2 1 2

Themen zu OTLPE Scan gemacht, was nun? (AKM-Trojaner?)
akm trojaner, andere, anderen, blöd, compu, computer, eingefangen, entdeck, extras, gefangen, gen, glaube, hilfe, hochladen, launch, otlpe, recht, scan, theme, themen, troja, trojaner, trojaner eingefangen


« CCleaner "SuggestedSites.dat" obwohl IE nicht genutzt wird - Trojaner? | Facebook Flash Player Problem »


Ähnliche Themen: OTLPE Scan gemacht, was nun? (AKM-Trojaner?)


  1. Bundes Trojaner, abgesicherter Modus geht nicht, OTLPE Scan durchgefuehrt
    Log-Analyse und Auswertung - 17.02.2014 (9)
  2. BKA Trojaner - OTLPE Fix scan - kann mir jemand diese Datei erstellen?Hilfe!
    Plagegeister aller Art und deren Bekämpfung - 13.02.2014 (5)
  3. Bundes Trojaner, abgesicherter Modus geht nicht, OTLPE Scan durchgefuehrt
    Log-Analyse und Auswertung - 04.11.2013 (3)
  4. AKM-Virus: OTLPE-Scans gemacht, was nun?
    Log-Analyse und Auswertung - 20.10.2013 (17)
  5. Bundespolizeitrojaner - Scan ist gemacht - wie weiter
    Plagegeister aller Art und deren Bekämpfung - 19.03.2013 (13)
  6. GVU Trojaner - OTLPE scan crashes bei firefox settings
    Plagegeister aller Art und deren Bekämpfung - 06.01.2013 (30)
  7. Auswertung von OTLPE Scan
    Log-Analyse und Auswertung - 05.07.2012 (11)
  8. Windows Verschlüsslungtrojaner Win 7 nach OTLPE Scan
    Plagegeister aller Art und deren Bekämpfung - 08.06.2012 (3)
  9. OTLPE scan durchgeführt wie gehts weiter
    Log-Analyse und Auswertung - 04.05.2012 (5)
  10. Gema-Trojaner OTLPE bleibt beim Scan bei "Getting Folder structure" stehen
    Plagegeister aller Art und deren Bekämpfung - 12.04.2012 (13)
  11. System blockierung bei Firefox, OTL scan und .txt Dateien bereits gemacht, jetzt?
    Plagegeister aller Art und deren Bekämpfung - 24.12.2011 (14)
  12. BKA Trojaner - OTLPE Fix scan - wie kann ich diese Datei erstellen
    Log-Analyse und Auswertung - 16.11.2011 (33)
  13. BKA Virus - Windows 7 - OTLPE Scan
    Plagegeister aller Art und deren Bekämpfung - 22.10.2011 (5)
  14. Bundespolizei Virus, OTL Scan gemacht. Wie weiter?
    Log-Analyse und Auswertung - 10.10.2011 (24)
  15. BKA Bundespolizei Trojaner OTLPE Scan
    Log-Analyse und Auswertung - 17.08.2011 (1)
  16. Google leitet um, Browser stürtzen oft ab, PC hängt- Scan gemacht, wie weiter?
    Plagegeister aller Art und deren Bekämpfung - 29.12.2009 (38)
  17. HiJackThis Scan gemacht und nun?
    Mülltonne - 05.09.2007 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema OTLPE Scan gemacht, was nun? (AKM-Trojaner?) - Hallo, zuallererst ich bin computertechnisch leider nicht versiert, also bitte ich um Nachsicht, falls ich mich etwas blöd anstelle. :/ Ich habe Windows XP und habe mir (glaube ich) einen - OTLPE Scan gemacht, was nun? (AKM-Trojaner?)...
Archiv
Du betrachtest: OTLPE Scan gemacht, was nun? (AKM-Trojaner?) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129