Hallo Leute,

ich hab ein problem mit meiner Grafikkarte (ATI Readon HD 2400 PRO) der ,,grafikbeschleuniger´´ ??? keine ahnung was das ist stürzt die ganze zeit ab.

Dann noch icq 7 ich hab einen link angeklickt seit dem schickt icq immer automatisch einen link an freunde und windows explorer öffnet sich immer wieder


Ich hab mal HijackThis durchlaufen lassen und krieg das raus

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:54:55, on 07.05.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IPSecMon.exe
C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IreIKE.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programme\Panda Security\Panda Global Protection 2009\PsCtrls.exe
C:\Programme\Panda Security\Panda Global Protection 2009\PavFnSvr.exe
C:\WINDOWS\Xwoxyc.exe
C:\Programme\Gemeinsame Dateien\Panda Security\PavShld\pavprsrv.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Programme\Home Cinema\PowerCinema\PCMService.exe
C:\Programme\Panda Security\Panda Global Protection 2009\APVXDWIN.EXE
C:\Programme\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
D:\SetPoint\SetPoint.exe
C:\Dokumente und Einstellungen\$\Anwendungsdaten\winsvcn.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Programme\Gemeinsame Dateien\Logishrd\KHAL2\KHALMNPR.EXE
C:\Programme\Panda Security\Panda Global Protection 2009\WebProxy.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programme\Panda Security\Panda Global Protection 2009\psimsvc.exe
C:\Programme\Panda Security\Panda Global Protection 2009\PskSvc.exe
C:\Dokumente und Einstellungen\George\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Panda Security\Panda Global Protection 2009\SRVLOAD.EXE
C:\Programme\Panda Security\Panda Global Protection 2009\PavBckPT.exe
c:\programme\panda security\panda global protection 2009\firewall\PSHOST.EXE
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Programme\Windows Media Player\wmplayer.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programme\SRWare Iron\iron.exe
C:\Programme\Panda Security\Panda Global Protection 2009\Upgrader.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Programme\ICQ7.0\ICQ.exe
C:\Programme\SRWare Iron\iron.exe
C:\Programme\SRWare Iron\iron.exe
C:\DOKUME~1\$\LOKALE~1\Temp\Xd1.exe
C:\Dokumente und Einstellungen\$\Eigene Dateien\Downloads\Norman_TDSS_Cleaner.exe
C:\WINDOWS\system32\msiexec.exe
C:\Programme\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = hxxp://www.youtube.com/watch?v=lT4RYeiMElk
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Programme\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Programme\Free Download Manager\iefdm2.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NapsterShell] C:\Programme\Napster\napster.exe /systray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Programme\Panda Security\Panda Global Protection 2009\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Programme\Panda Security\Panda Global Protection 2009\Inicio.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [WindowsSystemGuard] C:\Dokumente und Einstellungen\$\Anwendungsdaten\winsvcn.exe
O4 - HKLM\..\Run: [Ocs_SM] C:\Dokumente und Einstellungen\George\Anwendungsdaten\OCS\SM\SearchAnonymizer.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [M5T8QL3YW3] C:\DOKUME~1\$\LOKALE~1\Temp\Xd1.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = D:\SetPoint\SetPoint.exe
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Programme\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Programme\ICQ7.0\ICQ.exe
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Programme\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Programme\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1224613290593
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - hxxp://www.lokalisten.de/iup/ImageUploader4.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Atheros Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: SafeNet Monitor Service (IPSECMON) - SafeNet - C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IPSecMon.exe
O23 - Service: SafeNet IKE Service (IreIKE) - SafeNet - C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IreIKE.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Programme\NETGEAR\WNA1000\jswpsapi.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Programme\Panda Security\Panda Global Protection 2009\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - C:\Programme\Panda Security\Panda Global Protection 2009\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Programme\Gemeinsame Dateien\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Security, S.L. - C:\Programme\Panda Security\Panda Global Protection 2009\pavsrv51.exe
O23 - Service: Panda Host Service (PSHost) - Unknown owner - c:\programme\panda security\panda global protection 2009\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Programme\Panda Security\Panda Global Protection 2009\psimsvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Programme\Panda Security\Panda Global Protection 2009\PskSvc.exe
O23 - Service: SearchAnonymizer - Unknown owner - C:\Dokumente und Einstellungen\George\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Programme\Panda Security\Panda Global Protection 2009\TPSrv.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

--
End of file - 11857 bytes

Ich danke schonmal im voraus und ich bin totaler anfänger google hat mir nicht geholfen

Hallo und

bitte nen Vollscan mit Malwarebytes machen und Log posten. Danach OTL:

Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

• Doppelklick auf die OTL.exe
• Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
• Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
• Unter Extra Registry, wähle bitte Use SafeList
• Klicke nun auf Run Scan links oben
• Wenn der Scan beendet wurde werden 2 Logfiles erstellt
• Poste die Logfiles hier in den Thread.

log von OTL von Oldtimer1:

OTL Extras logfile created on: 08.05.2010 02:11:38 - Run 1
OTL by OldTimer - Version 3.2.4.1 Folder = C:\Dokumente und Einstellungen\$\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 61,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 39,06 Gb Total Space | 15,35 Gb Free Space | 39,29% Space Free | Partition Type: NTFS
Drive D: | 186,52 Gb Total Space | 128,11 Gb Free Space | 68,68% Space Free | Partition Type: NTFS
Drive E: | 7,28 Gb Total Space | 2,04 Gb Free Space | 27,99% Space Free | Partition Type: FAT32
Drive F: | 96,94 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: HOWIE
Current User Name: $
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.js [@ = JSFile] -- C:\Programme\Panda Security\Panda Global Protection 2009\PAVSCRIP.EXE (Panda Security, S.L.)
.jse [@ = JSEFile] -- C:\Programme\Panda Security\Panda Global Protection 2009\PAVSCRIP.EXE (Panda Security, S.L.)
.vbe [@ = VBEFile] -- C:\Programme\Panda Security\Panda Global Protection 2009\PAVSCRIP.EXE (Panda Security, S.L.)
.vbs [@ = VBSFile] -- C:\Programme\Panda Security\Panda Global Protection 2009\PAVSCRIP.EXE (Panda Security, S.L.)
.wsf [@ = WSFFile] -- C:\Programme\Panda Security\Panda Global Protection 2009\PAVSCRIP.EXE (Panda Security, S.L.)
.wsh [@ = WSHFile] -- C:\Programme\Panda Security\Panda Global Protection 2009\PAVSCRIP.EXE (Panda Security, S.L.)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromiumHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
jsfile [open] -- C:\PROGRA~1\PANDAS~1\PANDAG~1\PAVSCRIP.EXE "%1" %* (Panda Security, S.L.)
jsefile [open] -- C:\PROGRA~1\PANDAS~1\PANDAG~1\PAVSCRIP.EXE "%1" %* (Panda Security, S.L.)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
vbefile [open] -- C:\PROGRA~1\PANDAS~1\PANDAG~1\PAVSCRIP.EXE "%1" %* (Panda Security, S.L.)
vbsfile [open] -- C:\PROGRA~1\PANDAS~1\PANDAG~1\PAVSCRIP.EXE "%1" %* (Panda Security, S.L.)
wsffile [open] -- C:\PROGRA~1\PANDAS~1\PANDAG~1\PAVSCRIP.EXE "%1" %* (Panda Security, S.L.)
wshfile [open] -- C:\PROGRA~1\PANDAS~1\PANDAG~1\PAVSCRIP.EXE "%1" %* (Panda Security, S.L.)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
"DisableMonitoring" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
"DisableMonitoring" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"56821:TCP" = 56821:TCP:*:Enabled:Pando Media Booster
"56821:UDP" = 56821:UDP:*:Enabled:Pando Media Booster
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"57283:TCP" = 57283:TCP:*:Enabled:Pando Media Booster
"57283:UDP" = 57283:UDP:*:Enabled:Pando Media Booster
"57500:TCP" = 57500:TCP:*:Enabled:Pando Media Booster
"57500:UDP" = 57500:UDP:*:Enabled:Pando Media Booster

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Dateien\My Games\Combat Arms\CombatArms.exe" = D:\Dateien\My Games\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe -- File not found
"D:\Dateien\My Games\Combat Arms\Engine.exe" = D:\Dateien\My Games\Combat Arms\Engine.exe:*Enabled:Engine.exe -- File not found
"C:\Programme\ICQ7.0\ICQ.exe" = C:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"C:\Programme\ICQ7.0\aolload.exe" = C:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\Windows Live\Messenger\wlcsdk.exe" = C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IreIKE.exe" = C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IreIKE.exe:*:Enabled:IreIke -- (SafeNet)
"C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\ViewLog.exe" = C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\ViewLog.exe:127.0.0.1/255.255.255.255:Enabled:ViewLog -- (SafeNet)
"C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\CmonApp.exe" = C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\CmonApp.exe:127.0.0.1/255.255.255.255:Enabled:CMonApp -- (SafeNet)
"C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\vpn.exe" = C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\vpn.exe:127.0.0.1/255.255.255.255:Enabled:VPN Connection Manager -- (SafeNet)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6 -- File not found
"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonUS\NGM\NGM.exe" = C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager -- (Nexon)
"D:\Dateien\My Games\Combat Arms\CombatArms.exe" = D:\Dateien\My Games\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe -- File not found
"D:\Dateien\My Games\Combat Arms\Engine.exe" = D:\Dateien\My Games\Combat Arms\Engine.exe:*Enabled:Engine.exe -- File not found
"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nexon\NGM\NGM.exe" = C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nexon\NGM\NGM.exe:*:Enabled:Nexon Game Manager -- (Nexon)
"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nexon\Common\NMService.exe" = C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nexon\Common\NMService.exe:*:Enabled:Nexon Messenger Service -- (Nexon Corp.)
"D:\Steam\Steam.exe" = D:\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Programme\ICQ7.0\ICQ.exe" = C:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"C:\Programme\ICQ7.0\aolload.exe" = C:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\DNA\btdna.exe" = C:\Programme\DNA\btdna.exe:*:EnabledNA -- (BitTorrent, Inc.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Programme\Pando Networks\Media Booster\PMB.exe" = C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"C:\Programme\Windows Live\Messenger\wlcsdk.exe" = C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"C:\Dokumente und Einstellungen\George\temp\TeamViewer\Version5\TeamViewer.exe" = C:\Dokumente und Einstellungen\George\temp\TeamViewer\Version5\TeamViewer.exe:*:Enabled:TeamViewer -- File not found
"C:\Dokumente und Einstellungen\George\Anwendungsdaten\winsvcn.exe" = C:\Dokumente und Einstellungen\George\Anwendungsdaten\winsvcn.exe:*:Enabled:WindowsSystemGuard -- File not found
"C:\Programme\Free Download Manager\fdm.exe" = C:\Programme\Free Download Manager\fdm.exe:*:Enabled:Free Download Manager -- (FreeDownloadManager.ORG)
"C:\Programme\Free Download Manager\fdmwi.exe" = C:\Programme\Free Download Manager\fdmwi.exe:*:Enabled:fdmwi -- ()
"C:\Dokumente und Einstellungen\$\Anwendungsdaten\winsvcn.exe" = C:\Dokumente und Einstellungen\$\Anwendungsdaten\winsvcn.exe:*:Enabled:WindowsSystemGuard -- ()
"C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IreIKE.exe" = C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IreIKE.exe:*:Enabled:IreIke -- (SafeNet)
"C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\ViewLog.exe" = C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\ViewLog.exe:127.0.0.1/255.255.255.255:Enabled:ViewLog -- (SafeNet)
"C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\CmonApp.exe" = C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\CmonApp.exe:127.0.0.1/255.255.255.255:Enabled:CMonApp -- (SafeNet)
"C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\vpn.exe" = C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\vpn.exe:127.0.0.1/255.255.255.255:Enabled:VPN Connection Manager -- (SafeNet)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0079B957-5E36-A04C-F116-128790F4C333}" = Catalyst Control Center Localization Italian
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = CCC
"{059FCFFE-8619-F804-25E1-B2D5B59E1A5D}" = Catalyst Control Center Localization Chinese Traditional
"{086BADF8-9B1F-4E89-B207-2EDA520972D6}" = Grand Theft Auto San Andreas
"{098152F4-1792-D618-D4B2-71CA86C9FADB}" = CCC Help Danish
"{09A33E73-9A79-420E-BF07-6F0CBD17B549}" = Panda Global Protection 2009
"{0A44540C-1AB5-3940-7E85-B777A2997202}" = CCC Help Turkish
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0D524441-C462-4CBC-AFCF-09916483EE7A}" = Skins
"{0DD140D3-9563-481E-AA75-BA457CBDAEF2}" = PC Inspector File Recovery
"{0E8FCFEE-26D8-3B9F-F42E-45DE4F433EC6}" = CCC Help Finnish
"{112F2474-EE2F-D21A-7297-B5019FB9CD8F}" = Catalyst Control Center Localization Danish
"{122C4D87-B0E5-55DE-5276-655947FB2928}" = Catalyst Control Center Localization Dutch
"{167BD6B7-0507-32BB-93B0-2FD282D3D62D}" = CCC Help Portuguese
"{16FD907B-FA72-4F3C-B959-E076C8238F80}" = Napster Label Creator
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1AED6AF7-2DCC-0210-B145-0A62B3943A5A}" = Catalyst Control Center Localization Greek
"{1E61121B-87BA-469B-A294-2516B20AC1D1}" = WNA1000
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{247E0933-1877-4208-BF6A-B39E3015B148}" = soul.im
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = PowerCinema 3.0
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 17
"{2F931B84-0CEE-11D1-AA7D-0080AD1AC47A}" = NETGEAR ProSafe VPN Client
"{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 4.010.00
"{306DCF1D-C3EB-742E-2857-0099E690B400}" = CCC Help Polish
"{30CB5415-494F-EB96-4221-DC7857D6FD3A}" = Catalyst Control Center Graphics Full New
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{31CF6C0E-51F0-41D2-B088-A6A143C4303C}" = SweetIM Toolbar for Internet Explorer 3.6
"{33B39070-E54C-3D4D-AD41-0E0025DEF8D9}" = Catalyst Control Center Graphics Previews Common
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{3ABF08C9-AD7B-C759-7CBD-17D6C26E99EF}" = ccc-core-preinstall
"{3B41412A-B46F-FAF1-EAC4-F922486E3A92}" = CCC Help Norwegian
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{427ED69B-96CE-E2A1-A611-82447CD60F2C}" = CCC Help Czech
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{47D28B65-DA36-6520-DC49-3DAF81AEDA72}" = CCC Help Japanese
"{496EDDC1-B95D-7163-B545-CEA974E73756}" = Catalyst Control Center Core Implementation
"{4CC04CB8-422A-4940-A5C9-90F233690509}_is1" = SRWare Iron 3.0.197.0
"{4D63402C-A7D5-6C69-977E-CCBA3C56EA92}" = CCC Help English
"{55A8AB10-C274-9495-4DB1-C8EDF5463B0D}" = Catalyst Control Center Localization German
"{581CE7EA-A30D-0000-1211-088635773309}" = ZyDAS IEEE 802.11 b+g Wireless LAN - USB
"{5A7E2599-07F2-3387-0D6D-5B8C3FC31A3F}" = CCC Help French
"{5AD05333-600A-4CD8-88C6-BF22A3BE9767}_is1" = Multi-ICQ 1.3
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5E49AD8A-3064-FD56-E09E-9907DCBD1E83}" = Catalyst Control Center Localization Norwegian
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6A3AEA6E-BF88-44FA-637C-2B5A9E1F0BA2}" = CCC Help Spanish
"{6C03A586-5677-AFFC-1580-EC952B1BB388}" = CCC Help Swedish
"{6D6A6D9A-31DB-BEA6-949E-C23A157FA459}" = CCC Help Greek
"{76EFFC7C-17A6-479D-9E47-8E658C1695AE}" = Windows-Sicherungsprogramm
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77140E09-2ADA-1C99-9839-E180AC5EA909}" = CCC Help Korean
"{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}" = Text-To-Speech-Runtime
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Pro Trial
"{7FE027FD-741A-AD35-1448-5254CF4438F4}" = Catalyst Control Center Localization Korean
"{810226BF-399C-7F0B-E60A-4882C74DD296}" = Catalyst Control Center Localization Finnish
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{86495961-3275-4041-2248-780661231278}" = Build-a-lot 2
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8CCB57A6-CF57-F5C7-2BB1-384D7CCE1626}" = CCC Help Italian
"{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}" = Napster Burn Engine
"{8E9E8B11-BA96-D289-BAF6-F6A84C573D4A}" = Catalyst Control Center Graphics Light
"{90E00407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Outlook 2003
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9833D9E3-2DD7-AFE8-55EB-E1B6E20B343F}" = Catalyst Control Center Localization Chinese Standard
"{9853EBA1-9FB9-02A4-EE1D-E242D197BC65}" = Catalyst Control Center Localization Hungarian
"{98D2FCB4-832A-470D-9E39-58F30CBEF365}" = NETGEAR XET1001 Powerline Encryption Utility
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A22BDEF3-FBBD-9CAE-0C45-620263D0C840}" = CCC Help Russian
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A40C0B0F-CDB6-FFA7-57CE-CF6153B9444B}" = Catalyst Control Center Localization Turkish
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A49D3DF9-B762-C2D8-341A-4AB680817E00}" = Catalyst Control Center Localization Japanese
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1" = VDownloader 2.5
"{AC76BA86-7AD7-1031-7B44-A91000000001}" = Adobe Reader 9.1 - Deutsch
"{AF675248-596D-E501-77AA-D67308D449F2}" = CCC Help Dutch
"{B26E3B0D-C2FA-4370-B068-7C476766F029}" = Microsoft Works
"{B4C5C98E-EAF2-A7D8-5C5A-20DA2FEEC6B6}" = CCC Help Chinese Traditional
"{B756A8C0-53D5-3A20-6CF3-4F6781C0B6EB}" = CCC Help Thai
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{B7B0C24A-9930-A669-6525-540CF544BD70}" = ccc-core-static
"{BBBCAE4B-B416-4182-A6F2-438180894A81}" = Napster
"{BD485D8E-7FFA-7E01-4C1F-29337929BB41}" = ccc-utility
"{BD5F4C25-5412-80AB-64A4-22B345940F0A}" = CCC Help Chinese Standard
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C193C8C8-E555-9284-F80D-8F01EE96D6E4}" = Catalyst Control Center Localization French
"{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}" = AVIVO Codecs
"{C95434BE-425E-17E3-B8F1-A84C71B54B28}" = Catalyst Control Center Localization Swedish
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D5DBFD15-6214-80E6-3F20-1979D6F7FB38}" = Catalyst Control Center Localization Portuguese
"{D6065A22-6D71-4AC3-8959-603A6875D4EF}" = SkinBuilder 3.2.0
"{D7D6164B-C6A7-0AE0-4F47-C26253396DC7}" = Catalyst Control Center Localization Polish
"{DB09B1C2-5FD2-C732-0484-703143E0AF79}" = CCC Help Hungarian
"{DF6F459C-8B89-4F88-B63F-A2E136BB6B79}" = SweetIM for Messenger 2.8
"{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock
"{E3D722F2-0839-92D5-ECEA-8B65085B20D6}" = Catalyst Control Center Localization Thai
"{E603DF00-D577-409A-1118-82C6E18F28B0}" = Catalyst Control Center Localization Spanish
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{EA1CB7AC-E221-4822-A789-0ADB051DC498}" = Generic USB CardReader 2.0
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F11B077E-7848-E3E5-95F1-AE694EA28D5D}" = Catalyst Control Center Localization Russian
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F8CBC8AC-FAC0-FD10-D12E-E3D368D09E2B}" = Catalyst Control Center Graphics Full Existing
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FC03B954-D556-1C01-1A88-182A39B42C39}" = CCC Help German
"{FCABC23E-2B6B-D69D-C6C2-0F52D9422F0F}" = Catalyst Control Center Localization Czech
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"ATI Display Driver" = ATI Display Driver
"Audacity_is1" = Audacity 1.2.6
"Build-a-lot" = Build-a-lot
"Bullzip PDF Printer_is1" = Bullzip PDF Printer 5.0.0.609
"CCleaner" = CCleaner
"C-Media Audio Driver" = C-Media High Definition Audio Driver
"Creatix V.92 Data Fax Modem" = Creatix V.92 Data Fax Modem
"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition
"ExpressBurn" = Express Burn
"FarmingSimulator2009GoldDE_is1" = Landwirtschafts-Simulator 2009 Gold
"FLV Player" = FLV Player 2.0 (build 25)
"Free Download Manager_is1" = Free Download Manager 3.0
"giants_editor_4.1.2_is1" = GIANTS Editor 4.1.2
"GPL Ghostscript Lite_is1" = GPL Ghostscript Lite 8.63
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"InstallShield_{1E61121B-87BA-469B-A294-2516B20AC1D1}" = Wireless-N 150 USB Adapter WNA1000
"InstallShield_{98D2FCB4-832A-470D-9E39-58F30CBEF365}" = NETGEAR XET1001 Powerline Encryption Utility
"MAGIX Music Maker 16 Download-Version D" = MAGIX Music Maker 16 Download-Version
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"ManyCam" = ManyCam 2.4 (remove only)
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.5)" = Mozilla Firefox (3.5.5)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSNINST" = MSN
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PhotoScape" = PhotoScape
"San Andreas Mod Installer1.1" = San Andreas Mod Installer
"SearchAnonymizer" = SearchAnonymizer
"ShoppingReport" = ShopperReports
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"T-Online Fotoservice" = T-Online Fotoservice
"Uninstall_is1" = Uninstall 1.0.0.1
"Unlocker" = Unlocker 1.7.3
"Utherverse 3D Client" = Utherverse 3D Client
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast Ethernet Adapter
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WiFi MAX_is1" = WIFI Max
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR Archivierer
"WinZip" = WinZip
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"X10Hardware" = X10 Hardware(TM)

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 20.04.2010 20:03:14 | Computer Name = HOWIE | Source = Google Update | ID = 20
Description =

Error - 20.04.2010 21:03:14 | Computer Name = HOWIE | Source = Google Update | ID = 20
Description =

Error - 20.04.2010 22:03:14 | Computer Name = HOWIE | Source = Google Update | ID = 20
Description =

Error - 20.04.2010 23:03:14 | Computer Name = HOWIE | Source = Google Update | ID = 20
Description =

Error - 21.04.2010 13:58:45 | Computer Name = HOWIE | Source = Sentinel | ID = 251662241
Description = Unexpected failure during Anti-virus On-Access Scan Engine initialization.
The AvRtlInitializeAnalyzer API failed unrecoverably (Error Status was 3000000b).

This
may be because a needed image file is missing or corrupt. The Panda Anti-virus Service
failed to initialize properly.

Error - 22.04.2010 12:29:02 | Computer Name = HOWIE | Source = Sentinel | ID = 251662241
Description = Unexpected failure during Anti-virus On-Access Scan Engine initialization.
The AvRtlInitializeAnalyzer API failed unrecoverably (Error Status was 3000000b).

This
may be because a needed image file is missing or corrupt. The Panda Anti-virus Service
failed to initialize properly.

Error - 22.04.2010 14:55:02 | Computer Name = HOWIE | Source = Sentinel | ID = 251662241
Description = Unexpected failure during Anti-virus On-Access Scan Engine initialization.
The AvRtlInitializeAnalyzer API failed unrecoverably (Error Status was 3000000b).

This
may be because a needed image file is missing or corrupt. The Panda Anti-virus Service
failed to initialize properly.

Error - 22.04.2010 15:01:17 | Computer Name = HOWIE | Source = Ci | ID = 4124
Description = Der Inhaltsindex auf c:\system volume information\catalog.wci ist
beschädigt. Fahren Sie den Indexdienst (cisvc) herunter, und starten Sie ihn erneut.

Error - 22.04.2010 15:01:17 | Computer Name = HOWIE | Source = Ci | ID = 4126
Description = Die Metadaten des Inhaltsindex auf c:\system volume information\catalog.wci
werden aufgeräumt. Wiederherstellen des Indexes erfolgt automatisch durch erneutes
Filtern aller Dokumente.

Error - 23.04.2010 12:23:32 | Computer Name = HOWIE | Source = Sentinel | ID = 251662241
Description = Unexpected failure during Anti-virus On-Access Scan Engine initialization.
The AvRtlInitializeAnalyzer API failed unrecoverably (Error Status was 3000000b).

This
may be because a needed image file is missing or corrupt. The Panda Anti-virus Service
failed to initialize properly.

[ System Events ]
Error - 07.05.2010 17:02:47 | Computer Name = HOWIE | Source = ati2mtag | ID = 43037
Description =

Error - 07.05.2010 17:02:48 | Computer Name = HOWIE | Source = ati2mtag | ID = 262252
Description = Treiber ati2dvag für display-Gerät \Device\Video0 befindet sich in
einer unendlichen Schleife. Wahrscheinlich funktioniert das Gerät fehlerhaft, oder
die Hardware wurde vom Gerätetreiber nicht ordnungsgemäß programmiert. Wenden Sie
sich an den Hardwarehersteller, um Treiberupdates zu beziehen.

Error - 07.05.2010 19:52:10 | Computer Name = HOWIE | Source = ati2mtag | ID = 43034
Description = Unknown EDID version

Error - 07.05.2010 19:52:10 | Computer Name = HOWIE | Source = ati2mtag | ID = 43037
Description =

Error - 07.05.2010 19:52:10 | Computer Name = HOWIE | Source = ati2mtag | ID = 43034
Description = Unknown EDID version

Error - 07.05.2010 19:52:51 | Computer Name = HOWIE | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Panda anti-virus service" wurde mit folgendem Fehler beendet:
%%3221225473

Error - 07.05.2010 19:52:58 | Computer Name = HOWIE | Source = Service Control Manager | ID = 7034
Description = Dienst "Panda TPSrv" wurde unerwartet beendet. Dies ist bereits 1
Mal passiert.

Error - 07.05.2010 20:15:56 | Computer Name = HOWIE | Source = SideBySide | ID = 16842784
Description = Abhängige Assemblierung "Microsoft.VC90.CRT" konnte nicht gefunden
werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer
installiert.

Error - 07.05.2010 20:15:56 | Computer Name = HOWIE | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly ist für Microsoft.VC90.CRT fehlgeschlagen.
Referenzfehlermeldung:
Die referenzierte Assemblierung ist nicht auf dem Computer installiert. .

Error - 07.05.2010 20:15:56 | Computer Name = HOWIE | Source = SideBySide | ID = 16842811
Description = Generate Activation Context ist für C:\DOKUME~1\$\LOKALE~1\Temp\RarSFX0\redist.dll
fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. .


< End of report >

Log von OTL von oldtimer 2:

OTL logfile created on: 08.05.2010 02:11:38 - Run 1
OTL by OldTimer - Version 3.2.4.1 Folder = C:\Dokumente und Einstellungen\$\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 61,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 39,06 Gb Total Space | 15,35 Gb Free Space | 39,29% Space Free | Partition Type: NTFS
Drive D: | 186,52 Gb Total Space | 128,11 Gb Free Space | 68,68% Space Free | Partition Type: NTFS
Drive E: | 7,28 Gb Total Space | 2,04 Gb Free Space | 27,99% Space Free | Partition Type: FAT32
Drive F: | 96,94 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: HOWIE
Current User Name: $
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Dokumente und Einstellungen\$\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS\system32\Aviraupd.exe (VqhY)
PRC - C:\WINDOWS\Xwoxyd.exe ()
PRC - C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Temp\Xd1.exe ()
PRC - C:\Dokumente und Einstellungen\George\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe ()
PRC - C:\Dokumente und Einstellungen\$\Anwendungsdaten\winsvcn.exe ()
PRC - C:\Dokumente und Einstellungen\$\Desktop\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Programme\SRWare Iron\iron.exe (SRWare)
PRC - D:\SetPoint\SetPoint.exe (Logitech, Inc.)
PRC - C:\Programme\Gemeinsame Dateien\Logishrd\KHAL2\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Programme\Napster\napster.exe (Napster)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\Upgrader.exe (Panda Security, S.L.)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\ApVxdWin.exe (Panda Security, S.L.)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\PsCtrlS.exe (Panda Security, S.L.)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\PavFnSvr.exe (Panda Security, S.L.)
PRC - C:\WINDOWS\system32\acs.exe (Atheros)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\SrvLoad.exe (Panda Security, S.L.)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\psksvc.exe (Panda Security, S.L.)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\PsImSvc.exe (Panda Security S.L.)
PRC - c:\Programme\Panda Security\Panda Global Protection 2009\FIREWALL\PSHost.exe (Panda Software International)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\PavBckPT.exe (Panda Security, S.L.)
PRC - C:\Programme\Panda Security\Panda Global Protection 2009\WebProxy.exe (Panda Security, S.L.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Gemeinsame Dateien\Panda Security\PavShld\PavPrSrv.exe (Panda Security, S.L.)
PRC - C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IreIKE.exe (SafeNet)
PRC - C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IPSecMon.exe (SafeNet)
PRC - C:\Programme\Windows Media Player\wmplayer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\Dit.exe (ICSI Technology Ltd.)
PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Dokumente und Einstellungen\$\Desktop\OTL.exe (OldTimer Tools)
MOD - D:\SetPoint\lgscroll.dll (Logitech, Inc.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll (Microsoft Corporation)
MOD - C:\Programme\Panda Security\Panda Global Protection 2009\PavOEpl.dll (Panda Security, S.L.)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
MOD - C:\WINDOWS\system32\MSVCP71.DLL (Microsoft Corporation)
MOD - C:\WINDOWS\system32\MSVCR71.DLL (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (SSHNAS) -- C:\WINDOWS\system32\sshnas21.dll ()
SRV - (SearchAnonymizer) -- C:\Dokumente und Einstellungen\George\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe ()
SRV - (LBTServ) -- C:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (npggsvc) -- C:\WINDOWS\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (TPSrv) -- C:\Programme\Panda Security\Panda Global Protection 2009\TPSrv.exe (Panda Security, S.L.)
SRV - (Panda Software Controller) -- C:\Programme\Panda Security\Panda Global Protection 2009\PsCtrls.exe (Panda Security, S.L.)
SRV - (PAVFNSVR) -- C:\Programme\Panda Security\Panda Global Protection 2009\PavFnSvr.exe (Panda Security, S.L.)
SRV - (PAVSRV) -- C:\Programme\Panda Security\Panda Global Protection 2009\pavsrv51.exe (Panda Security, S.L.)
SRV - (Gwmsrv) -- C:\Programme\Panda Security\Panda Global Protection 2009\GWMsrv.dll (Panda Security, S.L.)
SRV - (ACS) -- C:\WINDOWS\system32\acs.exe (Atheros)
SRV - (PskSvcRetail) -- C:\Programme\Panda Security\Panda Global Protection 2009\PskSvc.exe (Panda Security, S.L.)
SRV - (PSIMSVC) -- C:\Programme\Panda Security\Panda Global Protection 2009\psimsvc.exe (Panda Security S.L.)
SRV - (PSHost) -- c:\programme\panda security\panda global protection 2009\firewall\PSHOST.EXE (Panda Software International)
SRV - (jswpsapi) -- C:\Programme\NETGEAR\WNA1000\jswpsapi.exe (Atheros Communications, Inc.)
SRV - (PavPrSrv) -- C:\Programme\Gemeinsame Dateien\Panda Security\PavShld\pavprsrv.exe (Panda Security, S.L.)
SRV - (IreIKE) -- C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IreIKE.exe (SafeNet)
SRV - (IPSECMON) -- C:\Programme\NETGEAR\NETGEAR ProSafe VPN Client\IPSecMon.exe (SafeNet)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
SRV - (x10nets) -- C:\Programme\Common Files\X10\Common\X10nets.exe (X10)


========== Driver Services (SafeList) ==========

DRV - (ComFiltr) -- C:\WINDOWS\system32\drivers\COMFiltr.sys ()
DRV - (CardReaderFilter) -- C:\WINDOWS\system32\drivers\USBCRFT.SYS (ICSI Technology Ltd.)
DRV - (AvFlt) -- C:\WINDOWS\system32\drivers\av5flt.sys (Panda Software International)
DRV - (MBAMSwissArmy) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (atksgt) -- C:\WINDOWS\system32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\WINDOWS\system32\drivers\lirsgt.sys ()
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (NCHSSVAD) -- C:\WINDOWS\system32\drivers\nchssvad.sys (NCH Swift Sound)
DRV - (LMouKE) -- C:\WINDOWS\system32\drivers\LMouKE.Sys (Logitech, Inc.)
DRV - (LMouFilt) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (LBeepKE) -- C:\WINDOWS\system32\drivers\LBeepKE.sys (Logitech, Inc.)
DRV - (L8042mou) -- C:\WINDOWS\system32\drivers\L8042mou.Sys (Logitech, Inc.)
DRV - (L8042Kbd) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech, Inc.)
DRV - (bbcap) -- C:\WINDOWS\system32\drivers\bbcap.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (UfasoftSnifDriver4) -- C:\Programme\Ufasoft\Sniffer\usft_sn4.sys (Ufasoft)
DRV - (WNA1000) -- C:\WINDOWS\system32\drivers\WNA1000.sys (Atheros Communications, Inc.)
DRV - (JSWSCIMD) -- C:\WINDOWS\system32\drivers\jswscimd.sys (Atheros Communications, Inc.)
DRV - (NETFLTDI) -- C:\WINDOWS\system32\drivers\NETFLTDI.SYS (Panda Security, S.L.)
DRV - (NETIMFLT01060034) -- C:\WINDOWS\system32\drivers\neti1634.sys (Panda Security, S.L.)
DRV - (APPFLT) -- C:\WINDOWS\system32\drivers\APPFLT.SYS (Panda Security, S.L.)
DRV - (pavboot) -- C:\WINDOWS\system32\Drivers\pavboot.sys (Panda Security, S.L.)
DRV - (WNMFLT) -- C:\WINDOWS\system32\drivers\wnmflt.sys (Panda Security, S.L.)
DRV - (IDSFLT) -- C:\WINDOWS\system32\drivers\idsflt.sys (Panda Security, S.L.)
DRV - (DSAFLT) -- C:\WINDOWS\system32\drivers\dsaflt.sys (Panda Security, S.L.)
DRV - (s0017mdm) -- C:\WINDOWS\system32\drivers\s0017mdm.sys (MCCI Corporation)
DRV - (s0017unic) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM) -- C:\WINDOWS\system32\drivers\s0017unic.sys (MCCI Corporation)
DRV - (s0017obex) -- C:\WINDOWS\system32\drivers\s0017obex.sys (MCCI Corporation)
DRV - (s0017bus) Sony Ericsson Device 0017 driver (WDM) -- C:\WINDOWS\system32\drivers\s0017bus.sys (MCCI Corporation)
DRV - (s0017mdfl) -- C:\WINDOWS\system32\drivers\s0017mdfl.sys (MCCI Corporation)
DRV - (s0017mgmt) Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\s0017mgmt.sys (MCCI Corporation)
DRV - (s0017nd5) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS) -- C:\WINDOWS\system32\drivers\s0017nd5.sys (MCCI Corporation)
DRV - (PAVDRV) -- C:\WINDOWS\system32\drivers\pavdrv51.sys (Panda Security, S.L.)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (NwlnkIpx) -- C:\WINDOWS\system32\drivers\nwlnkipx.sys (Microsoft Corporation)
DRV - (nm) -- C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)
DRV - (MPE) -- C:\WINDOWS\system32\drivers\mpe.sys (Microsoft Corporation)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (FNETMON) -- C:\WINDOWS\system32\drivers\fnetmon.sys (Panda Security, S.L.)
DRV - (ShldDrv) -- C:\WINDOWS\system32\drivers\ShlDrv51.sys (Panda Security, S.L.)
DRV - (PavProc) -- C:\WINDOWS\system32\drivers\PavProc.sys (Panda Security, S.L.)
DRV - (IPSECDRV) -- C:\WINDOWS\system32\drivers\IpSecDrv.sys (SafeNet)
DRV - (Crypto) -- C:\WINDOWS\system32\drivers\Crypto.sys (SafeNet)
DRV - (ManyCam) -- C:\WINDOWS\system32\drivers\ManyCam.sys (ManyCam LLC.)
DRV - (DniVap) SafeNet WAN Miniport (VA) -- C:\WINDOWS\system32\drivers\vap.sys (Deterministic Networks Inc.)
DRV - (WSIMD) -- C:\WINDOWS\system32\drivers\wsimd.sys (Atheros Communications, Inc.)
DRV - (DNE) -- C:\WINDOWS\system32\drivers\dne2000.sys (Deterministic Networks, Inc.)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\AtiHdAud.sys (ATI Research Inc.)
DRV - (XE103Sp50) -- C:\WINDOWS\system32\drivers\XE103Sp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (MIINPazX) -- C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys (T-Online International AG, Marmiko IT-Solutions GmbH)
DRV - (3xHybrid) -- C:\WINDOWS\system32\drivers\3xHybrid.sys (Philips Semiconductors GmbH)
DRV - (ZD1211BU(ZyDAS)) ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS) -- C:\WINDOWS\system32\drivers\ZD1211BU.sys (ZyDAS Technology Corporation)
DRV - (BRGSp50) -- C:\WINDOWS\system32\drivers\BRGSp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (cmudax) -- C:\WINDOWS\system32\drivers\cmudax.sys (C-Media Inc.)
DRV - (PID_0928) Labtec WebCam(PID_0928) -- C:\WINDOWS\system32\drivers\LV561AV.SYS (Labtec Inc.)
DRV - (LVUSBSta) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys (Labtec Inc.)
DRV - (NPPTNT2) -- C:\WINDOWS\system32\npptNT2.sys (INCA Internet Co., Ltd.)
DRV - (ZDPSp50) -- C:\WINDOWS\system32\drivers\ZDPSp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (AgereSoftModem) -- C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems)
DRV - (NwlnkNb) -- C:\WINDOWS\system32\drivers\nwlnknb.sys (Microsoft Corporation)
DRV - (NwlnkSpx) -- C:\WINDOWS\system32\drivers\nwlnkspx.sys (Microsoft Corporation)
DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (DNINDIS5) -- C:\WINDOWS\system32\DNINDIS5.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (ENUM1394) -- C:\WINDOWS\system32\drivers\enum1394.sys (Microsoft Corporation)
DRV - (MODEMCSA) -- C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Programme\Mozilla Firefox\components [2009.12.19 19:07:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.03.29 13:05:33 | 000,000,000 | ---D | M]

[2010.03.15 19:26:12 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2010.03.29 13:05:27 | 000,238,776 | ---- | M] (Pando Networks) -- C:\Programme\Mozilla Firefox\plugins\npPandoWebInst.dll
[2006.09.26 13:03:14 | 000,098,304 | ---- | M] (Zylom) -- C:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll
[2010.05.05 18:30:00 | 000,001,648 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.05.05 18:30:00 | 000,002,277 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\babylon.xml
[2010.05.05 18:30:00 | 000,002,617 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.05.05 18:30:00 | 000,007,015 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.04.22 19:28:39 | 000,001,242 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.05.05 18:30:00 | 000,000,830 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2004.08.04 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (ShoppingReport) - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Programme\ShoppingReport\Bin\2.5.0\ShoppingReport.dll (ShopperReports)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Programme\Free Download Manager\iefdm2.dll ()
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Programme\Adobe\Reader\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Antivir.exe] C:\WINDOWS\system32\Aviraupd.exe (VqhY)
O4 - HKLM..\Run: [APVXDWIN] C:\Programme\Panda Security\Panda Global Protection 2009\APVXDWIN.EXE (Panda Security, S.L.)
O4 - HKLM..\Run: [Cmaudio] File not found
O4 - HKLM..\Run: [Dit] C:\WINDOWS\Dit.exe (ICSI Technology Ltd.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NapsterShell] C:\Programme\Napster\napster.exe (Napster)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Ocs_SM] C:\Dokumente und Einstellungen\George\Anwendungsdaten\OCS\SM\SearchAnonymizer.exe File not found
O4 - HKLM..\Run: [PCMService] C:\Programme\Home Cinema\PowerCinema\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SCANINICIO] C:\Programme\Panda Security\Panda Global Protection 2009\Inicio.exe (Panda Security, S.L.)
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] C:\WINDOWS\System32\Hdaudpropshortcut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [WindowsSystemGuard] C:\Dokumente und Einstellungen\$\Anwendungsdaten\winsvcn.exe ()
O4 - HKCU..\Run: [M5T8QL3YW3] C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Temp\Xd1.exe ()
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Dokumente und Einstellungen\$\Desktop\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk = D:\SetPoint\SetPoint.exe (Logitech, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Programme\ShoppingReport\Bin\2.5.0\ShoppingReport.dll (ShopperReports)
O9 - Extra Button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Programme\ShoppingReport\Bin\2.5.0\ShoppingReport.dll (ShopperReports)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1224613290593 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} hxxp://www.lokalisten.de/iup/ImageUploader4.cab (Image Uploader Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avldr: DllName - avldr.dll - C:\WINDOWS\System32\avldr.dll (Panda Security, S.L.)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\programme\gemeinsame dateien\logishrd\bluetooth\LBTWlgn.dll - c:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.10.21 16:29:20 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009.11.10 21:49:12 | 000,000,100 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (MACHINE BootExecut) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.05.08 02:10:04 | 000,570,880 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\$\Desktop\OTL.exe
[2010.05.08 02:05:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Malwarebytes
[2010.05.08 02:05:14 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.05.08 02:05:13 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.05.08 02:05:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Desktop\Malwarebytes' Anti-Malware
[2010.05.08 02:05:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.05.07 22:39:46 | 000,692,224 | ---- | C] (VqhY) -- C:\WINDOWS\System32\Aviraupd.exe
[2010.05.07 22:34:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\Xenocode
[2010.05.07 16:24:23 | 000,000,000 | ---D | C] -- C:\Programme\Multi-ICQ
[2010.05.07 16:01:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Sun
[2010.05.07 15:50:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Eigene Dateien\DriverGenius
[2010.05.07 14:50:10 | 000,000,000 | ---D | C] -- C:\Programme\Trend Micro
[2010.05.07 14:47:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\Adobe
[2010.05.07 14:26:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\T-Online
[2010.05.07 14:12:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Desktop\Kay One - Kenneth Allein Zu Haus (Premium Version)
[2010.05.07 14:11:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Eigene Dateien\ICQ
[2010.05.07 12:48:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Roxio
[2010.05.06 22:54:52 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\$\Eigene Dateien\Eigene Videos
[2010.05.06 22:13:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\AskToolbar
[2010.05.06 22:13:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\ShoppingReport
[2010.05.06 22:07:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Desktop\Build-a-lot 2
[2010.05.06 22:04:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\ICQ
[2010.05.06 22:04:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\AOL
[2010.05.06 22:04:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Adobe
[2010.05.06 22:03:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Eigene Dateien\Downloads
[2010.05.06 22:03:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\Chromium
[2010.05.06 22:03:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Logitech
[2010.05.06 22:03:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\ATI
[2010.05.06 22:03:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\ATI
[2010.05.06 22:03:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\Panda Security
[2010.05.06 22:03:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\Powercinema
[2010.05.06 22:02:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Identities
[2010.05.06 22:02:17 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\$\Eigene Dateien\Eigene Musik
[2010.05.06 22:02:17 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\$\Eigene Dateien
[2010.05.06 22:02:17 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\$\Eigene Dateien\Eigene Bilder
[2010.05.06 22:02:14 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Microsoft
[2010.05.06 22:02:14 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\$\SendTo
[2010.05.06 22:02:14 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\$\Recent
[2010.05.06 22:02:14 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten
[2010.05.06 22:02:14 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\$\Favoriten
[2010.05.06 22:02:14 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\$\Cookies
[2010.05.06 22:02:14 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\$\Netzwerkumgebung
[2010.05.06 22:02:14 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen
[2010.05.06 22:02:14 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\$\Druckumgebung
[2010.05.06 22:02:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2010.05.06 22:02:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Macromedia
[2010.05.06 22:02:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Desktop
[2010.05.06 22:02:13 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\$\Startmenü
[2010.05.06 22:02:13 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\$\Vorlagen
[2010.05.06 17:09:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FreeDownloadManager.ORG
[2010.05.06 17:09:08 | 000,000,000 | ---D | C] -- C:\Programme\Free Download Manager
[2010.05.05 18:52:15 | 000,000,000 | ---D | C] -- C:\Programme\ManyCam 2.4
[2010.05.05 18:52:06 | 000,000,000 | ---D | C] -- C:\Programme\Ask.com
[2010.05.02 15:07:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Desktop\David_Guetta-Fuck_Me_Im_Famous-SAT-05-02-2010-TBM
[2010.05.02 13:54:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\n7-89-o9-3r-4t-r9
[2010.05.02 13:54:31 | 000,000,000 | ---D | C] -- C:\Programme\GameHouse
[2010.05.01 20:05:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HipSoft
[2010.05.01 20:05:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Trymedia
[2010.05.01 20:05:13 | 000,000,000 | ---D | C] -- C:\Programme\Bluefish Games
[2010.04.28 20:29:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Desktop\Berlin_Macht_Records_-_Der_1._Sampler-DE-2010-YSP
[2010.04.25 22:57:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Google
[2010.04.25 16:48:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Desktop\Aktuell
[2010.04.14 23:14:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\$\Desktop\musik
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.05.08 02:12:00 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{44A4131F-8AB1-4267-A178-152F2C33761C}.job
[2010.05.08 02:10:33 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\$\Desktop\OTL.exe
[2010.05.08 02:09:56 | 000,000,266 | -H-- | M] () -- C:\WINDOWS\tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job
[2010.05.08 02:05:46 | 001,310,720 | -H-- | M] () -- C:\Dokumente und Einstellungen\$\NTUSER.DAT
[2010.05.08 02:05:16 | 000,000,578 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.08 02:01:33 | 000,002,974 | ---- | M] () -- C:\WINDOWS\System32\Aviraupd
[2010.05.08 02:01:00 | 000,000,228 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010.05.08 01:53:13 | 000,002,423 | ---- | M] () -- C:\Dokumente und Einstellungen\$\Desktop\HiJackThis.lnk
[2010.05.08 01:53:06 | 000,000,031 | ---- | M] () -- C:\WINDOWS\System32\bbcap.err
[2010.05.08 01:53:00 | 000,013,880 | ---- | M] () -- C:\WINDOWS\System32\drivers\COMFiltr.sys
[2010.05.08 01:52:59 | 000,001,132 | ---- | M] () -- C:\WINDOWS\System32\drivers\APPFLTR.CFG.bck
[2010.05.08 01:52:59 | 000,001,132 | ---- | M] () -- C:\WINDOWS\System32\drivers\APPFLTR.CFG
[2010.05.08 01:52:59 | 000,000,252 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\IdsFlt.cfg.bck
[2010.05.08 01:52:59 | 000,000,252 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\IdsFlt.cfg
[2010.05.08 01:52:59 | 000,000,104 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\NetLoc.wlt.bck
[2010.05.08 01:52:59 | 000,000,104 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\NetLoc.wlt
[2010.05.08 01:52:59 | 000,000,068 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\NetFlt.cfg.bck
[2010.05.08 01:52:59 | 000,000,068 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\NetFlt.cfg
[2010.05.08 01:52:59 | 000,000,056 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\WnmFlt.cfg.bck
[2010.05.08 01:52:59 | 000,000,056 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\WnmFlt.cfg
[2010.05.08 01:52:59 | 000,000,056 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\DsaFlt.cfg.bck
[2010.05.08 01:52:59 | 000,000,056 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\DsaFlt.cfg
[2010.05.08 01:52:58 | 000,000,200 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\NetAdapt.cfg.bck
[2010.05.08 01:52:58 | 000,000,200 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\NetAdapt.cfg
[2010.05.08 01:52:55 | 000,000,060 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\NetAR.wlt.bck
[2010.05.08 01:52:55 | 000,000,060 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\NetAR.wlt
[2010.05.08 01:52:54 | 000,000,238 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010.05.08 01:52:50 | 000,017,408 | ---- | M] (ICSI Technology Ltd.) -- C:\WINDOWS\System32\drivers\USBCRFT.SYS
[2010.05.08 01:52:29 | 000,000,230 | ---- | M] () -- C:\WINDOWS\tasks\CCleaner.job
[2010.05.08 01:51:56 | 000,099,256 | ---- | M] (Panda Software International) -- C:\WINDOWS\System32\drivers\av5flt.sys
[2010.05.08 01:51:54 | 000,000,252 | ---- | M] () -- C:\WINDOWS\tasks\ICQ.job
[2010.05.08 01:51:54 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.05.08 01:51:42 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.05.07 23:03:01 | 000,004,096 | ---- | M] () -- C:\WINDOWS\System32\crash
[2010.05.07 22:44:36 | 000,458,752 | ---- | M] () -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Project1.exe
[2010.05.07 22:39:46 | 000,692,224 | ---- | M] (VqhY) -- C:\WINDOWS\System32\Aviraupd.exe
[2010.05.07 22:35:00 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\chrtmp
[2010.05.07 16:55:32 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010.05.07 15:48:49 | 000,000,369 | ---- | M] () -- C:\Dokumente und Einstellungen\$\Desktop\Driver Genius Professional Edition.lnk
[2010.05.07 12:48:25 | 000,175,104 | ---- | M] () -- C:\WINDOWS\Xwoxyd.exe
[2010.05.07 12:33:11 | 000,175,104 | ---- | M] () -- C:\WINDOWS\Xwoxyc.exe
[2010.05.07 01:50:43 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\$\ntuser.ini
[2010.05.07 01:49:39 | 004,291,862 | -H-- | M] () -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010.05.06 22:54:45 | 000,000,775 | ---- | M] () -- C:\Dokumente und Einstellungen\$\Desktop\Windows Media Player.lnk
[2010.05.06 22:03:11 | 000,046,712 | ---- | M] () -- C:\Dokumente und Einstellungen\$\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
[2010.05.06 21:46:15 | 000,173,568 | ---- | M] () -- C:\WINDOWS\Xwoxyb.exe
[2010.05.05 21:56:45 | 000,165,888 | ---- | M] () -- C:\WINDOWS\Xwoxya.exe
[2010.05.05 21:56:40 | 000,193,024 | ---- | M] () -- C:\WINDOWS\System32\sshnas21.dll
[2010.05.05 20:34:15 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.05.01 20:05:15 | 000,001,761 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Build-a-lot 2.lnk
[2010.05.01 14:42:10 | 000,084,992 | RHS- | M] () -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\winsvcn.exe
[2010.04.29 12:19:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.04.29 12:19:14 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.04.25 23:04:12 | 000,298,476 | ---- | M] () -- C:\WINDOWS\System32\drivers\APPFCONT.DAT.bck
[2010.04.25 23:04:11 | 000,298,476 | ---- | M] () -- C:\WINDOWS\System32\drivers\APPFCONT.DAT
[2010.04.25 22:47:42 | 000,183,424 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.04.19 19:51:34 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.05.08 02:05:16 | 000,000,578 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.07 22:42:43 | 000,002,974 | ---- | C] () -- C:\WINDOWS\System32\Aviraupd
[2010.05.07 22:42:36 | 000,175,104 | ---- | C] () -- C:\WINDOWS\Xwoxyd.exe
[2010.05.07 22:35:00 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\chrtmp
[2010.05.07 22:34:59 | 000,458,752 | ---- | C] () -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\Project1.exe
[2010.05.07 15:48:49 | 000,000,369 | ---- | C] () -- C:\Dokumente und Einstellungen\$\Desktop\Driver Genius Professional Edition.lnk
[2010.05.07 14:50:10 | 000,002,423 | ---- | C] () -- C:\Dokumente und Einstellungen\$\Desktop\HiJackThis.lnk
[2010.05.07 12:33:23 | 000,175,104 | ---- | C] () -- C:\WINDOWS\Xwoxyc.exe
[2010.05.07 00:08:42 | 000,000,775 | ---- | C] () -- C:\Dokumente und Einstellungen\$\Desktop\Windows Media Player.lnk
[2010.05.06 22:03:03 | 000,084,992 | RHS- | C] () -- C:\Dokumente und Einstellungen\$\Anwendungsdaten\winsvcn.exe
[2010.05.06 22:02:15 | 000,000,190 | -HS- | C] () -- C:\Dokumente und Einstellungen\$\ntuser.ini
[2010.05.06 22:02:13 | 001,310,720 | -H-- | C] () -- C:\Dokumente und Einstellungen\$\NTUSER.DAT
[2010.05.06 22:02:13 | 000,016,384 | -H-- | C] () -- C:\Dokumente und Einstellungen\$\NTUSER.DAT.LOG
[2010.05.06 21:46:42 | 000,173,568 | ---- | C] () -- C:\WINDOWS\Xwoxyb.exe
[2010.05.06 19:35:49 | 000,000,266 | -H-- | C] () -- C:\WINDOWS\tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job
[2010.05.06 19:35:36 | 000,000,238 | -H-- | C] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010.05.05 21:57:11 | 000,165,888 | ---- | C] () -- C:\WINDOWS\Xwoxya.exe
[2010.05.05 21:56:40 | 000,193,024 | ---- | C] () -- C:\WINDOWS\System32\sshnas21.dll
[2010.05.05 18:52:12 | 000,000,228 | ---- | C] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010.05.01 20:05:15 | 000,001,761 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Build-a-lot 2.lnk
[2010.04.25 22:44:17 | 000,000,230 | ---- | C] () -- C:\WINDOWS\tasks\CCleaner.job
[2010.04.20 14:21:40 | 000,000,252 | ---- | C] () -- C:\WINDOWS\tasks\ICQ.job
[2010.04.05 02:18:12 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2010.03.21 23:25:58 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2010.02.20 22:28:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Classic.INI
[2009.12.09 16:04:17 | 000,013,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\COMFiltr.sys
[2009.11.21 19:23:29 | 000,278,728 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009.11.21 19:23:28 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009.11.21 15:55:41 | 000,722,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009.11.12 19:05:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini
[2009.11.10 23:02:10 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2009.07.19 23:36:37 | 000,004,305 | ---- | C] () -- C:\WINDOWS\TVTEmulator.ini
[2009.07.07 17:54:12 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\nsldap32v50.dll
[2009.05.30 15:06:42 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\InsDrvZD.dll
[2009.05.30 15:06:42 | 000,015,872 | ---- | C] () -- C:\WINDOWS\System32\InsDrvZD64.DLL
[2009.02.01 21:09:07 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2008.12.21 18:32:57 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008.11.02 17:52:47 | 000,009,255 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2008.10.27 16:26:04 | 000,101,376 | ---- | C] () -- C:\WINDOWS\System32\hpgt34.dll
[2008.10.24 15:03:44 | 000,000,211 | ---- | C] () -- C:\WINDOWS\uno.ini
[2008.10.24 15:03:38 | 000,287,744 | ---- | C] () -- C:\WINDOWS\uno364mi.dll
[2008.10.24 15:03:38 | 000,109,568 | ---- | C] () -- C:\WINDOWS\vos364mi.dll
[2008.10.24 15:03:38 | 000,091,648 | ---- | C] () -- C:\WINDOWS\osl364mi.dll
[2008.10.22 10:59:21 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\ir41_qcd.dll
[2008.10.22 09:58:18 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008.10.22 09:45:53 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2008.10.22 07:52:05 | 000,004,184 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2008.10.21 20:38:06 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008.10.21 19:31:54 | 000,061,440 | R--- | C] () -- C:\WINDOWS\System32\vuins32.dll
[2008.10.21 19:29:37 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
[2008.10.21 19:29:30 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2008.10.21 17:38:26 | 000,000,269 | ---- | C] () -- C:\WINDOWS\Dit.INI
[2008.06.27 16:18:04 | 000,262,216 | ---- | C] () -- C:\WINDOWS\System32\IPTests.dll
[2004.09.28 23:54:30 | 003,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll
[2004.04.18 16:43:46 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2004.04.18 16:43:44 | 000,651,264 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI

========== Alternate Data Streams ==========

@Alternate Data Stream - 640512 bytes -> C:\WINDOWS\system32:nvidia32c.exe
< End of report >

Was ist denn mit Malwarebytes?