Vindowa Vista Sperrbildschirm, Ukash 100€, kein Taskmngr, Abgesicherter Modus fährt sofort runter

OTL logfile created on: 9/6/2013 10:00:26 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Windows Vista (TM) Home Premium Service Pack 2 (Version = 6.0.6002) - Type = System
Internet Explorer (Version = 8.0.6001.19453)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 84.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116.44 Gb Total Space | 62.83 Gb Free Space | 53.95% Space Free | Partition Type: NTFS
Drive D: | 108.63 Gb Total Space | 60.83 Gb Free Space | 56.00% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - [2013/09/06 13:35:35 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2013/09/06 13:35:29 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2013/09/04 21:52:54 | 000,166,912 | ---- | M] () [Auto] -- C:\ProgramData\4lw06jf9.plz -- (Winmgmt)
SRV - [2011/11/22 04:59:30 | 000,018,432 | ---- | M] () [Auto] -- C:\Users\ASUS\AppData\LocalLow\StumbleUpon\IE\StumbleUponUpdater.exe -- (StumbleUponUpdater)
SRV - [2010/03/18 05:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2008/10/23 11:45:14 | 000,307,200 | ---- | M] (T-Systems Enterprise Services GmbH) [On_Demand] -- C:\Program Files\DSL-Manager\DslMgrSvc.exe -- (TDslMgrService)
SRV - [2008/01/18 17:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/05/18 05:31:16 | 000,073,728 | ---- | M] () [Auto] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
SRV - [2007/05/15 12:47:48 | 000,094,208 | ---- | M] () [Auto] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007/02/05 21:13:14 | 000,094,208 | ---- | M] () [Auto] -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2006/12/28 19:17:50 | 000,123,248 | ---- | M] () [Auto] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr)
SRV - [2006/11/06 08:21:10 | 000,210,432 | ---- | M] (Nokia.) [On_Demand] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand] --  -- (IpInIp)
DRV - [2013/09/06 13:35:41 | 000,136,672 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2013/09/06 13:35:41 | 000,088,840 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2013/03/30 03:44:01 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2013/03/10 03:10:35 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/03/04 07:50:14 | 000,261,152 | ---- | M] (Realtek                                            ) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2009/10/26 09:09:06 | 001,095,936 | ---- | M] (Motorola Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2007/09/12 11:24:00 | 000,026,816 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\Windows\System32\drivers\DslTestSp5.sys -- (dsltestSp5)
DRV - [2007/08/01 08:49:00 | 000,016,448 | ---- | M] (T-Systems Enterprise Services GmbH) [Kernel | System] -- C:\Windows\System32\drivers\dslmnlwf.sys -- (DslMNLwf)
DRV - [2007/04/24 20:28:14 | 000,027,504 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2007/03/22 01:02:04 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/03/06 06:17:03 | 001,737,984 | ---- | M] () [Kernel | On_Demand] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2007/02/24 17:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007/02/05 06:53:58 | 000,011,632 | ---- | M] () [Kernel | Auto] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2007/01/24 06:08:39 | 000,005,632 | ---- | M] ( ) [Kernel | On_Demand] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2007/01/23 19:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2006/12/18 21:12:21 | 001,786,880 | ---- | M] (Intel® Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R)
DRV - [2006/12/13 11:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006/11/15 22:02:19 | 000,015,216 | ---- | M] () [Kernel | Auto] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio)
DRV - [2006/11/10 09:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\afc.sys -- (Afc)
DRV - [2006/11/02 05:50:17 | 000,041,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)
DRV - [2006/10/13 23:04:33 | 004,422,560 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2006/10/10 02:54:34 | 000,138,240 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nmwcd.sys -- (Nokia USB Phone Parent)
DRV - [2006/10/10 02:54:32 | 000,012,800 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nmwcdcj.sys -- (Nokia USB Port)
DRV - [2006/10/10 02:54:32 | 000,012,800 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nmwcdcm.sys -- (Nokia USB Modem)
DRV - [2006/10/10 02:54:32 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nmwcdc.sys -- (Nokia USB Generic)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\ASUS_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
IE - HKU\ASUS_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\ASUS_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\ASUS_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Gast_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
IE - HKU\Gast_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\Gast_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\Gast_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
 
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
 
 
 
O1 HOSTS File: ([2006/09/18 17:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (eBay Toolbar Helper) - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (eBay Toolbar) - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay Inc.)
O4 - HKU\.DEFAULT..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe (Time Information Services Ltd.)
O4 - HKU\Gast_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\9fj60wl4.lnk = X:\I386\SYSTEM32\RUNDLL32.EXE (Microsoft Corporation)
O4 - Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk = C:\Program Files\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk = C:\Program Files\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
O4 - Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk = C:\Program Files\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8 - Extra context menu item: Suche - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll (eBay Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} hxxp://www.lidl-fotos.de/ips-opdata/layout/lidl02/objects/jordan.cab (JordanUploader Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: 
O24 - Desktop BackupWallPaper: 
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{340d720e-c860-11df-8a4e-001fc61272a0}\Shell - "" = AutoRun
O33 - MountPoints2\{340d720e-c860-11df-8a4e-001fc61272a0}\Shell\AutoRun\command - "" = F:\Login.exe
O33 - MountPoints2\{340d7218-c860-11df-8a4e-001fc61272a0}\Shell - "" = AutoRun
O33 - MountPoints2\{340d7218-c860-11df-8a4e-001fc61272a0}\Shell\AutoRun\command - "" = F:\Login.exe
O33 - MountPoints2\{340d7222-c860-11df-8a4e-001fc61272a0}\Shell - "" = AutoRun
O33 - MountPoints2\{340d7222-c860-11df-8a4e-001fc61272a0}\Shell\AutoRun\command - "" = F:\Login.exe
O33 - MountPoints2\{43a46371-46ed-11df-878b-001cbfa26077}\Shell\AutoRun\command - "" = F:\programs\nu2menu\nu2menu.exe
O33 - MountPoints2\{a490e1da-7c9f-11e1-8208-001fc61272a0}\Shell - "" = AutoRun
O33 - MountPoints2\{a490e1da-7c9f-11e1-8208-001fc61272a0}\Shell\AutoRun\command - "" = F:\Login.exe
O33 - MountPoints2\{bee4e90c-257c-11e0-a13a-001fc61272a0}\Shell - "" = AutoRun
O33 - MountPoints2\{bee4e90c-257c-11e0-a13a-001fc61272a0}\Shell\AutoRun\command - "" = F:\Login.exe
O33 - MountPoints2\{cfc168b6-0984-11e2-9adb-001fc61272a0}\Shell - "" = AutoRun
O33 - MountPoints2\{cfc168b6-0984-11e2-9adb-001fc61272a0}\Shell\AutoRun\command - "" = F:\Login.exe
O33 - MountPoints2\{d6aee6a7-54f3-11df-8b07-001fc61272a0}\Shell - "" = AutoRun
O33 - MountPoints2\{d6aee6a7-54f3-11df-8b07-001fc61272a0}\Shell\AutoRun\command - "" = F:\Login.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/09/04 22:16:06 | 000,000,000 | ---D | C] -- C:\Users\Gast\AppData\Roaming\Avira
[2013/08/29 00:57:36 | 001,548,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2013/08/14 15:24:46 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT
[2013/08/14 02:49:22 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icaapi.dll
[2013/08/14 02:49:10 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013/08/14 02:49:09 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013/08/14 02:49:09 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2013/08/14 02:49:09 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013/08/14 02:49:09 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013/08/14 02:49:09 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013/08/14 02:49:09 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013/08/14 02:49:08 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013/08/14 02:49:08 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013/08/14 02:49:08 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013/08/14 02:49:08 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013/08/14 02:49:08 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013/08/14 02:49:08 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013/08/14 02:49:08 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013/08/14 02:49:08 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013/08/14 02:49:08 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013/08/14 02:49:08 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013/08/14 02:49:08 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013/08/14 02:49:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2013/08/14 02:48:27 | 003,603,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013/08/14 02:48:27 | 003,551,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013/08/11 14:31:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
[2007/01/24 06:08:39 | 000,005,632 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
 
========== Files - Modified Within 30 Days ==========
 
[2013/09/06 14:38:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/09/06 14:38:06 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2013/09/06 14:37:41 | 000,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/06 14:37:41 | 000,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/09/06 14:37:24 | 2138,333,184 | -HS- | M] () -- C:\hiberfil.sys
[2013/09/06 14:30:35 | 000,000,798 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
[2013/09/06 14:30:34 | 095,025,368 | ---- | M] () -- C:\ProgramData\9fj60wl4.pff
[2013/09/06 14:28:30 | 000,000,000 | ---- | M] () -- C:\ProgramData\9fj60wl4.ctrl
[2013/09/06 14:28:26 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/09/06 14:02:00 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{1A5E1989-16B7-444E-87F4-554A9D35B6D2}.job
[2013/09/06 13:39:52 | 000,000,798 | ---- | M] () -- C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
[2013/09/06 13:35:41 | 000,136,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avipbb.sys
[2013/09/06 13:35:41 | 000,088,840 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avgntflt.sys
[2013/09/06 13:31:12 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2013/09/05 08:16:50 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/09/04 22:34:07 | 000,000,280 | ---- | M] () -- C:\Users\Gast\Desktop\Daten (D) - Verknüpfung.lnk
[2013/09/04 21:52:57 | 000,000,877 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\9fj60wl4.lnk
[2013/09/04 21:52:54 | 000,166,912 | ---- | M] () -- C:\ProgramData\4lw06jf9.plz
[2013/09/04 14:27:50 | 000,002,637 | ---- | M] () -- C:\Users\ASUS\Desktop\Microsoft Office Word 2003.lnk
[2013/09/04 13:38:14 | 000,000,811 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013/08/31 06:04:43 | 000,643,006 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013/08/31 06:04:43 | 000,607,964 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/08/31 06:04:43 | 000,132,338 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013/08/31 06:04:43 | 000,109,236 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/08/31 05:58:35 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2013/08/22 05:40:51 | 000,034,816 | ---- | M] () -- C:\Users\ASUS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/08/15 09:10:04 | 000,000,945 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook starten.lnk
[2013/08/11 14:31:07 | 000,001,874 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2013/08/11 14:31:07 | 000,001,850 | ---- | M] () -- C:\Users\Public\Desktop\Foxit Reader.lnk
[2013/08/11 14:31:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
[2013/08/11 11:54:28 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013/08/11 11:54:28 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/08/11 03:56:37 | 000,002,665 | ---- | M] () -- C:\Users\ASUS\Desktop\Microsoft Office Excel 2003.lnk
 
========== Files Created - No Company Name ==========
 
[2013/09/06 14:28:02 | 2138,333,184 | -HS- | C] () -- C:\hiberfil.sys
[2013/09/04 22:34:07 | 000,000,280 | ---- | C] () -- C:\Users\Gast\Desktop\Daten (D) - Verknüpfung.lnk
[2013/09/04 21:52:57 | 000,000,877 | ---- | C] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\9fj60wl4.lnk
[2013/09/04 21:52:57 | 000,000,000 | ---- | C] () -- C:\ProgramData\9fj60wl4.ctrl
[2013/09/04 21:52:55 | 095,025,368 | ---- | C] () -- C:\ProgramData\9fj60wl4.pff
[2013/09/04 21:52:54 | 000,166,912 | ---- | C] () -- C:\ProgramData\4lw06jf9.plz
[2013/08/11 14:31:07 | 000,001,874 | ---- | C] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2013/08/11 14:31:07 | 000,001,850 | ---- | C] () -- C:\Users\Public\Desktop\Foxit Reader.lnk
[2013/08/11 14:31:06 | 000,216,064 | ---- | C] () -- C:\Windows\System32\gcapi_dll.dll
[2013/04/07 04:57:20 | 000,000,004 | ---- | C] () -- C:\Users\ASUS\AppData\Roaming\skype.ini
[2012/11/11 15:04:39 | 000,148,037 | ---- | C] () -- C:\Windows\hpoins12.dat
[2012/11/11 15:04:39 | 000,001,470 | ---- | C] () -- C:\Windows\hpomdl12.dat
[2012/09/07 15:11:34 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2012/09/07 15:11:23 | 000,000,000 | ---- | C] () -- C:\Users\ASUS\AppData\Roaming\DVAP.set
[2011/12/27 04:31:23 | 000,000,092 | ---- | C] () -- C:\Users\ASUS\AppData\Local\fusioncache.dat
[2011/10/01 04:55:50 | 000,000,221 | ---- | C] () -- C:\Windows\NCLogConfig.ini
[2011/10/01 03:46:36 | 001,923,290 | ---- | C] () -- C:\Program Files\cdex_151.zip
[2011/08/03 14:13:45 | 000,000,062 | ---- | C] () -- C:\Windows\pcvcdbr.INI
[2011/08/03 14:09:49 | 000,000,000 | ---- | C] () -- C:\Windows\pcvcdvw.INI
[2011/05/01 03:18:13 | 000,004,096 | -H-- | C] () -- C:\Users\ASUS\AppData\Local\keyfile3.drm
[2011/02/20 09:21:18 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2010/05/02 04:16:44 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010/05/02 04:14:52 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010/05/02 03:46:12 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010/04/24 12:16:32 | 000,538,429 | ---- | C] () -- C:\Users\ASUS\AppData\Roaming\mdbu.bin
[2010/04/24 11:22:12 | 000,034,816 | ---- | C] () -- C:\Users\ASUS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/04/24 02:36:21 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI
[2009/12/03 03:27:28 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2008/03/18 01:55:59 | 000,033,136 | ---- | C] () -- C:\Windows\ASScrPro.exe
[2008/03/18 01:55:44 | 000,037,232 | ---- | C] () -- C:\Windows\ASScrProlog.exe
[2008/03/18 01:55:42 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll
[2008/03/18 01:53:56 | 000,045,056 | ---- | C] () -- C:\Windows\System32\acovcnt.exe
[2008/03/18 01:38:10 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2008/02/11 13:55:18 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1437.dll
[2007/04/18 05:14:04 | 000,643,006 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2007/04/18 05:14:04 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2007/04/18 05:14:04 | 000,132,338 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2007/04/18 05:14:04 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2007/04/18 05:06:01 | 000,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini
[2007/04/18 04:33:08 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2007/03/06 06:17:03 | 001,737,984 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2007/01/31 05:03:25 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1187.dll
[2006/11/02 08:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,388,376 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,607,964 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,109,236 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/03/08 22:57:59 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2005/12/07 05:31:00 | 000,202,752 | R--- | C] () -- C:\Windows\System32\CddbCdda.dll
[2003/02/20 11:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
 
========== LOP Check ==========
 
[2012/01/15 10:42:43 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\ATT Connect
[2010/04/25 07:50:28 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\eBay
[2012/05/30 13:27:25 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\elsterformular
[2013/04/21 09:54:49 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Foxit Software
[2013/04/24 13:54:57 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Image Zone Express
[2011/12/27 04:36:13 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Imaxel
[2011/06/09 10:23:15 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Miuwso
[2010/09/01 09:38:31 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Nokia
[2010/04/22 14:57:17 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\OpenOffice.org
[2010/04/24 12:02:23 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\PC Suite
[2010/05/01 09:31:58 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Printer Info Cache
[2011/11/13 06:42:18 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Softland
[2011/06/10 13:40:46 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Voor
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
[2011/01/31 05:56:19 | 000,000,000 | ---D | M] -- C:\ProgramData\ASUS
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
[2010/04/24 11:58:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Downloaded Installations
[2010/05/28 14:07:11 | 000,000,000 | ---D | M] -- C:\ProgramData\eBay
[2012/05/30 13:27:26 | 000,000,000 | ---D | M] -- C:\ProgramData\elsterformular
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
[2010/07/09 15:27:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Lidl_Fotos
[2010/06/19 14:51:22 | 000,000,000 | ---D | M] -- C:\ProgramData\LightScribe
[2008/03/18 01:44:22 | 000,000,000 | ---D | M] -- C:\ProgramData\P4G
[2010/06/07 03:29:56 | 000,000,000 | ---D | M] -- C:\ProgramData\PC Suite
[2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2010/04/24 13:06:57 | 000,000,000 | ---D | M] -- C:\ProgramData\T-Online
[2006/11/02 09:02:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
[2011/12/04 08:03:12 | 000,000,000 | ---D | M] -- C:\ProgramData\WholeSecurity
[2011/03/23 14:42:45 | 000,000,000 | ---D | M] -- C:\ProgramData\WindowsSearch
[2013/09/06 14:38:06 | 000,032,538 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013/09/06 14:02:00 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{1A5E1989-16B7-444E-87F4-554A9D35B6D2}.job
 
========== Purity Check ==========
 
 
< End of report >