Telekom Deutschland GmbH

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-01-2014 01
Ran by Berlin (administrator) on AQUADO3 on 22-01-2014 16:48:02
Running from C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Temporary Internet Files\Content.IE5\7URGSD6B
Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) ===================

(Enigma Software Group USA, LLC.) C:\Programme\Enigma Software Group\SpyHunter\SH4Service.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Spigot, Inc.) C:\Programme\Application Updater\ApplicationUpdater.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(GEAR Software) C:\WINDOWS\system32\gearsec.exe
(Sun Microsystems, Inc.) C:\Programme\Java\jre6\bin\jqs.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
(Symantec Corporation) C:\Programme\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
() C:\Programme\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\tcpsvcs.exe
(Microsoft Corporation) C:\WINDOWS\system32\snmp.exe
(TeamViewer GmbH) C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe
() C:\WINDOWS\system32\UTSCSI.EXE
(TeamViewer GmbH) C:\Programme\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Programme\TeamViewer\Version8\tv_w32.exe
(Cyberlink Corp.) C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
(Symantec Corporation) C:\Programme\Symantec\Norton Ghost\Agent\GhostTray.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Advanced Micro Devices Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(RealNetworks, Inc.) C:\Programme\Real\RealPlayer\Update\realsched.exe
(Hewlett-Packard Co.) C:\Programme\Hp\HP Software Update\hpwuSchd2.exe
() C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Enigma Software Group USA, LLC.) C:\Programme\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Macrovision Corporation) C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Macrovision\FLEXnet Connect\6\ISUSPM.exe
() C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtProc.exe
(Microsoft Corporation) C:\Programme\Windows Desktop Search\WindowsSearch.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(Dropbox, Inc.) C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Dropbox\bin\Dropbox.exe
(AVM Berlin) C:\Programme\FRITZ!\FriFax32.exe
(AVM Berlin) C:\Programme\FRITZ!\FriFon32.exe
(AVM Berlin) C:\Programme\FRITZ!\IWatch.exe
(DonationCoder) C:\eigene Dateien\eigene Programme\screenshot\ScreenshotCaptor.exe
(Microsoft Corporation) C:\WINDOWS\system32\taskmgr.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(ATI Technologies Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(shbox.de) C:\Programme\FreePDF_XP\fpassist.exe
(Microsoft Corporation) C:\Programme\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe
(RealNetworks, Inc.) C:\Programme\RealNetworks\RealDownloader\recordingmanager.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Programme\Internet Explorer\iexplore.exe
(Farbar) C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Temporary Internet Files\Content.IE5\7URGSD6B\FRST[1].exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RemoteControl] - C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [32768 2004-11-02] (Cyberlink Corp.)
HKLM\...\Run: [NeroFilterCheck] - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe [155648 2006-01-12] (Nero AG)
HKLM\...\Run: [BluetoothAuthenticationAgent] - rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM\...\Run: [Norton Ghost 9.0] - C:\Programme\Symantec\Norton Ghost\Agent\GhostTray.exe [1126400 2004-11-10] (Symantec Corporation)
HKLM\...\Run: [MbWzdFPAP-EXL600] - C:\WINDOWS\system32\FPAP-EXL600\PdtGuide.exe [1030656 2008-04-16] ()
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-10-15] (Adobe Systems Incorporated)
HKLM\...\Run: [nwiz] - nwiz.exe /installquiet
HKLM\...\Run: [NvMediaCenter] - C:\WINDOWS\system32\NvMcTray.dll [110184 2009-11-20] (NVIDIA Corporation)
HKLM\...\Run: [NvCplDaemon] - C:\WINDOWS\system32\NvCpl.dll [12669544 2009-11-20] (NVIDIA Corporation)
HKLM\...\Run: [DivXUpdate] - C:\Programme\DivX\DivX Update\DivXUpdate.exe [1164584 2010-09-16] ()
HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\qttask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [AppleSyncNotifier] - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe [58656 2011-04-20] (Apple Inc.)
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [19556968 2010-07-06] (Realtek Semiconductor Corp.)
HKLM\...\Run: [StartCCC] - C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-02-10] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [APSDaemon] - C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [BrStsMon00] - C:\Programme\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM\...\Run: [BCSSync] - C:\Programme\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [TkBellExe] - C:\programme\real\realplayer\update\realsched.exe [295512 2013-08-08] (RealNetworks, Inc.)
HKLM\...\Run: [HP Software Update] - C:\Programme\HP\HP Software Update\HPWuSchd2.exe [49152 2007-03-11] (Hewlett-Packard Co.)
HKLM\...\Run: [WrtMon.exe] - C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe [20480 2006-09-20] ()
HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM\...\Run: [SpyHunter Security Suite] - C:\Programme\Enigma Software Group\SpyHunter\SpyHunter4.exe [6430080 2013-10-18] (Enigma Software Group USA, LLC.)
HKLM\...\Run: [FreePDF Assistant] - C:\Programme\FreePDF_XP\fpassist.exe [374784 2014-01-09] (shbox.de)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKCU\...\Run: [ISUSPM] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Macrovision\FLEXnet Connect\6\ISUSPM.exe [222128 2007-03-29] (Macrovision Corporation)
HKCU\...\Run: [swg] - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2007-07-27] (Google Inc.)
HKCU\...\Run: [Google Update] - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe [116648 2012-09-04] (Google Inc.)
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000
MountPoints2: {5f65933b-6e96-11dd-b40a-0009dd105f16} - K:\PdtStart.exe
HKU\Default User\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe [ 2006-06-01] (Nero AG)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Windows Search.lnk
ShortcutTarget: Windows Search.lnk -> C:\Programme\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Autostart\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Autostart\FRITZ!fax.lnk
ShortcutTarget: FRITZ!fax.lnk -> C:\Programme\FRITZ!\FriFax32.exe (AVM Berlin)
Startup: C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Autostart\FRITZ!fon.lnk
ShortcutTarget: FRITZ!fon.lnk -> C:\Programme\FRITZ!\FriFon32.exe (AVM Berlin)
Startup: C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Autostart\ISDNWatch.lnk
ShortcutTarget: ISDNWatch.lnk -> C:\Programme\FRITZ!\IWatch.exe (AVM Berlin)
Startup: C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Autostart\Norton Ghost.lnk
ShortcutTarget: Norton Ghost.lnk -> C:\Programme\Symantec\Norton Ghost\Console\V2iConsole_.exe ()
Startup: C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Autostart\Verknüpfung mit ScreenshotCaptor.lnk
ShortcutTarget: Verknüpfung mit ScreenshotCaptor.lnk -> C:\eigene Dateien\eigene Programme\screenshot\ScreenshotCaptor.exe (DonationCoder)
Startup: C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Autostart\Verknüpfung mit taskmgr.exe.lnk
ShortcutTarget: Verknüpfung mit taskmgr.exe.lnk -> C:\WINDOWS\system32\taskmgr.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x805957A19C8ACD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll (Google Germany GmbH)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll (Google Germany GmbH)
Toolbar: HKLM - FreeRIP.com Toolbar - {081230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Programme\FreeRIP3\toolband.dll ()
Toolbar: HKLM - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll No File
Toolbar: HKLM - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Programme\BabylonToolbar\BabylonToolbar\1.6.4.6\BabylonToolbarTlbr.dll No File
Toolbar: HKCU - &Google - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll (Google Germany GmbH)
Toolbar: HKCU - FreeRIP.com Toolbar - {081230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Programme\FreeRIP3\toolband.dll ()
DPF: {03A89EFD-E023-B200-A22D-45F77558EB4C} https://cs11.netucate.net/download/AXCltInst11.dll
DPF: {3CA45906-EF10-4E4E-9BE4-B444D220FCB0} hxxp://ua.foto.com/ImageUploader6.cab
DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} hxxp://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} hxxp://www.facebook.com/controls/contactx.dll
DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} https://www.icloud.com/system/iCloud.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {8D9563A9-8D5F-459B-87F2-BA842255CB9A} https://vip.hansemerkur.de/InternalSite/WhlCompMgr.cab
DPF: {C3E3BB4F-269C-41A3-9F5F-A360E933CAD3} https://as.photoprintit.com/ips-opdata/activex/ImageUploader6.cab
DPF: {CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA} hxxp://java.sun.com/products/plugin/autodl/jinstall-1_3_1_15-windows-i586.cab
DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} hxxp://java.sun.com/products/plugin/1.4/jinstall-14_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CEF002D2-5A9F-4656-AA41-85DA2534ACBD} https://ssl.barmenia24.de/app/BRP/notes/dwa85W.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B} https://ssl.barmenia24.de/app/BRP/notes/dwa7W.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\MSDAIPP.DLL (Microsoft Corporation)
ShellExecuteHooks: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MSNLNamespaceMgr.dll [304128 2008-05-26] (Microsoft Corporation)
Winsock: Catalog5 04 C:\WINDOWS\system32\pnrpnsp.dll [58880] (Microsoft Corporation)
Winsock: Catalog5 05 C:\WINDOWS\system32\pnrpnsp.dll [58880] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{20F89C85-CB70-4021-98C9-CF76D2C350F2}: [NameServer]217.237.151.115,217.237.148.102
Tcpip\..\Interfaces\{6576F860-48FE-48B9-B2C7-083884147A6A}: [NameServer]192.168.120.252,192.168.120.253

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Mozilla\Firefox\Profiles\fxaq94vs.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin - C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @real.com/nppl3260;version=16.0.2.32 - c:\programme\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.2.32 - c:\programme\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Programme\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Programme\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @viewpoint.com/VMP - C:\Programme\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Citrix\Plugins\94\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programme\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Mozilla\Firefox\Profiles\fxaq94vs.default\Extensions\crossriderapp4479@crossrider.com [2013-06-01]
FF Extension: Google Toolbar for Firefox - C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Mozilla\Firefox\Profiles\fxaq94vs.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2007-09-27]
FF Extension: No Name - C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Mozilla\Firefox\Profiles\fxaq94vs.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2012-08-08]
FF Extension: Yontoo - C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Mozilla\Firefox\Profiles\fxaq94vs.default\Extensions\plugin@yontoo.com.xpi [2013-03-11]
FF Extension: Microsoft .NET Framework Assistant - C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Mozilla\Firefox\Profiles\fxaq94vs.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-02-08]
FF Extension: Google Toolbar for Firefox - C:\Programme\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2007-02-14]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [jqs@sun.com] - C:\Programme\Java\jre6\lib\deploy\jqs\ff
FF Extension: Java Quick Starter - C:\Programme\Java\jre6\lib\deploy\jqs\ff [2012-03-27]
FF HKLM\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

Chrome: 
=======
CHR HomePage: 
CHR Plugin: (Shockwave Flash) - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\29.0.1547.57\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\29.0.1547.57\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\29.0.1547.57\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\29.0.1547.57\pdf.dll No File
CHR Plugin: (Babylon ToolBar) - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0\BabylonChromeToolBar.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Programme\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.220.4) - C:\Programme\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U22) - C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (2007 Microsoft Office system) - C:\Programme\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Programme\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Programme\Mozilla Firefox\plugins\nprpjplug.dll No File
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programme\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (RealJukebox NS Plugin) - C:\Programme\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (Microsoft® DRM) - C:\Programme\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft® DRM) - C:\Programme\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Programme\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Google Update) - C:\Programme\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (DivX Web Player) - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (MetaStream 3 Plugin) - C:\Programme\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
CHR Plugin: (iTunes Application Detector) - C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (RealDownloader) - C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-08-21]
CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\BabylonToolbar\CR\BabylonChrome1.crx [2012-06-27]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-04-16]
CHR HKLM\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\DOKUME~1\Berlin\LOKALE~1\Temp\YontooLayers.crx [2013-04-16]

========================== Services (Whitelisted) =================

R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [55624 2013-09-07] (Apple Inc.)
R2 Application Updater; C:\Programme\Application Updater\ApplicationUpdater.exe [785304 2012-04-23] (Spigot, Inc.)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
S3 BrYNSvc; C:\Programme\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.)
S3 de_serv; C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe [315392 2005-09-23] (AVM Berlin)
S3 DMService; C:\WINDOWS\DOWNLO~1\DMService.exe [423576 2011-01-17] (Whale Communications, a Microsoft subsidiary)
R2 GEARSecurity; C:\Windows\System32\GEARSec.exe [53248 2004-11-10] (GEAR Software)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [136176 2010-07-28] (Google Inc.)
S3 gupdatem; C:\Programme\Google\Update\GoogleUpdate.exe [136176 2010-07-28] (Google Inc.)
S2 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [194104 2011-10-05] (Google)
S3 hpqcxs08; C:\Programme\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-03-11] (Hewlett-Packard Co.)
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [553288 2013-10-23] (Apple Inc.)
R2 Iprip; C:\Windows\System32\iprip.dll [36864 2008-04-14] (Microsoft Corporation)
R2 JavaQuickStarterService; C:\Programme\Java\jre6\bin\jqs.exe [153376 2012-03-27] (Sun Microsystems, Inc.)
S3 LPDSVC; C:\Windows\system32\tcpsvcs.exe [19456 2006-02-28] (Microsoft Corporation)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [322120 2003-06-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [119408 2013-11-20] (Mozilla Foundation)
R2 Norton Ghost; C:\Programme\Symantec\Norton Ghost\Agent\PQV2iSvc.exe [1273856 2004-11-10] (Symantec Corporation)
S3 odserv; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [441712 2008-11-04] (Microsoft Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [149352 2010-01-09] (Microsoft Corporation)
R3 osppsvc; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [4640000 2010-01-09] (Microsoft Corporation)
S3 p2pgasvc; C:\Windows\system32\p2pgasvc.dll [105472 2008-04-14] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Programme\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 SpyHunter 4 Service; C:\Programme\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2013-10-18] (Enigma Software Group USA, LLC.)
S3 Symantec Core LC; C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe [1176256 2007-01-15] (Symantec Corporation)
R2 TeamViewer8; C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe [5087584 2013-10-01] (TeamViewer GmbH)
R2 UTSCSI; C:\WINDOWS\system32\UTSCSI.EXE [45056 2014-01-22] ()
S2 Automatisches LiveUpdate - Scheduler; 
S2 awhost32; C:\Programme\Symantec\pcAnywhere\awhost32.exe [x]
S2 MZCCntrl; C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe [x]
S4 OutpostFirewall; C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe /service [x]

==================== Drivers (Whitelisted) ====================

R0 Achernar; C:\Windows\System32\Drivers\Achernar.sys [24888 2006-12-07] (NewSoft Technology Corporation)
S3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [3972672 2006-06-27] (Realtek Semiconductor Corp.)
S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
S3 ASPI; C:\WINDOWS\System32\DRIVERS\ASPI32.sys [16512 2002-07-17] (Adaptec)
R2 aucapi; C:\Windows\System32\Drivers\aucapi.sys [72528 2000-07-27] (Auerswald GmbH & Co.KG                         )
R3 auusb; C:\Windows\System32\Drivers\auusb.sys [160816 2008-02-01] (Auerswald GmbH & Co.KG                         )
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [53632 2007-05-07] (AVM GmbH)
R2 AVMPORT; C:\Windows\System32\drivers\avmport.sys [59520 2001-10-23] (AVM Berlin)
S3 AVMWAN; C:\Windows\System32\DRIVERS\avmwan.sys [37568 2001-08-17] (AVM GmbH)
R1 awecho; C:\Windows\System32\drivers\awechomd.sys [8368 2004-03-05] (Symantec Corporation)
R1 awlegacy; C:\Windows\System32\Drivers\awlegacy.sys [11165 2003-11-17] (Symantec Corporation)
R1 AW_HOST; C:\Windows\System32\drivers\aw_host5.sys [16984 2003-10-23] (Symantec Corporation)
S3 BTHprint; C:\Windows\System32\DRIVERS\bthprint.sys [36480 2008-04-13] (Microsoft Corporation)
S3 EL90XBC; C:\Windows\System32\DRIVERS\el90xbc5.sys [66591 2001-08-17] (3Com Corporation)
R3 esgiguard; C:\Programme\Enigma Software Group\SpyHunter\esgiguard.sys [13904 2011-05-06] ()
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
R0 fasttx2k; C:\Windows\System32\drivers\fasttx2k.sys [159744 2003-08-06] (Promise Technology, Inc.)
R3 fpcibase; C:\Windows\System32\DRIVERS\fpcibase.sys [537600 2007-05-07] (AVM Berlin)
R0 Gernuwa; C:\Windows\System32\Drivers\Gernuwa.sys [13898 2003-04-21] (Symantec Corporation)
S3 MACNDIS5; C:\Programme\Gemeinsame Dateien\Marmiko Shared\MAcNdis5.sys [17280 2006-10-04] (Marmiko IT-Solutions GmbH)
S3 MIINPazX; C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys [17152 2006-10-09] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH)
S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
S3 MTOnlPktAlyX; C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\MTOnlPktAlyx.sys [17536 2006-10-09] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
S3 NETFRITZ; C:\Windows\System32\DRIVERS\NETFRITZ.SYS [316928 2005-09-23] (AVM Berlin)
S3 nm; C:\Windows\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation)
R0 nvata; C:\Windows\System32\DRIVERS\nvata.sys [100736 2006-04-24] (NVIDIA Corporation)
R0 nvatabus; C:\Windows\System32\DRIVERS\nvatabus.sys [91776 2005-03-14] (NVIDIA Corporation)
S3 NVENETFD; C:\Windows\System32\DRIVERS\NVENETFD.sys [34176 2006-02-17] (NVIDIA Corporation)
S3 nvnetbus; C:\Windows\System32\DRIVERS\nvnetbus.sys [13056 2006-02-17] (NVIDIA Corporation)
R1 PQIMount; C:\Windows\System32\Drivers\PQIMount.sys [46800 2004-11-10] (PowerQuest Corporation)
R1 PQNTDrv; C:\Windows\System32\Drivers\PQNTDrv.sys [3252 2001-08-10] ()
R0 PQV2i; C:\Windows\System32\Drivers\PQV2i.sys [138801 2004-11-10] (StorageCraft)
R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtKHDMI.sys [4003008 2010-05-24] (Realtek Semiconductor Corp.)
S3 SymEvent; C:\Programme\Symantec\SYMEVENT.SYS [104144 2007-02-20] (Symantec Corporation)
R1 VFILT; C:\Programme\Agnitum\Outpost Firewall 1.0\Kernel\2000\FILTNT.SYS [125216 2006-03-30] (Agnitum Ltd.)
S4 viasraid; C:\Windows\system32\drivers\viasraid.sys [77312 2003-10-31] (VIA Technologies inc,.ltd)
S3 ADBLOCK.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\ADBLOCK.DLL [x]
S3 ARP.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\ARP.DLL [x]
S3 CONTENT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\CONTENT.DLL [x]
S3 DNSCACHE.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\DNSCACHE.DLL [x]
S3 FoxAwdWINFLASH; \??\C:\sysprep\SuperUtility\FoxAwdWINFLASH.SYS [x]
S3 FTPFILT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\FTPFILT.DLL [x]
S3 FXDRV; \??\C:\sysprep\SuperUtility\Fxdrv.sys [x]
S3 HTMLFILT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\HTMLFILT.DLL [x]
S3 HTTPFILT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\HTTPFILT.DLL [x]
S3 IMAPFILT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\IMAPFILT.DLL [x]
S4 IntelIde; No ImagePath
S3 MAILFILT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\MAILFILT.DLL [x]
S3 NNTPFILT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\NNTPFILT.DLL [x]
S3 POP3FILT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\POP3FILT.DLL [x]
S3 PROTECT.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\PROTECT.DLL [x]
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 SECRET.DLL; \??\C:\PROGRA~1\Agnitum\OUTPOS~1.0\kernel\SECRET.DLL [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-22 16:12 - 2014-01-22 16:12 - 00000000 ____D C:\FRST
2014-01-22 16:08 - 2014-01-22 16:08 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Eigene Dateien\My Received Files
2014-01-22 14:21 - 2014-01-22 14:21 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\FreePDF_XP
2014-01-22 14:20 - 2014-01-22 14:20 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\FreePDF
2014-01-22 14:14 - 2014-01-22 14:14 - 00000380 _____ C:\WINDOWS\Tasks\SpyHunter4.job
2014-01-22 12:54 - 2014-01-22 12:54 - 00200063 _____ C:\spyhunter.log
2014-01-22 11:56 - 2014-01-22 11:56 - 00045056 _____ () C:\WINDOWS\system32\UTSCSI.EXE
2014-01-22 11:55 - 2014-01-22 11:55 - 00027666 _____ C:\sh4_service.log
2014-01-22 11:35 - 2014-01-22 16:25 - 00000212 _____ C:\Dokumente und Einstellungen\Berlin\Desktop\Trojaner-Board - Neues Thema erstellen.url
2014-01-22 11:14 - 2014-01-22 14:20 - 00001319 _____ C:\WINDOWS\setupapi.log
2014-01-22 11:13 - 2014-01-22 11:13 - 00002003 _____ C:\Dokumente und Einstellungen\Berlin\Desktop\SpyHunter.lnk
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\WINDOWS\A358F2F62500420C989C25C4F22DF51E.TMP
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\sh4ldr
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\Programme\Enigma Software Group
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\SpyHunter
2014-01-08 16:50 - 2014-01-08 16:50 - 00000000 ____D C:\Programme\iLinc
2014-01-08 16:50 - 2014-01-08 16:50 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\iLinc
2014-01-08 16:50 - 2014-01-08 16:50 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\iLinc 11
2014-01-02 13:42 - 2014-01-02 14:03 - 00000187 ____N C:\Dokumente und Einstellungen\Berlin\Desktop\Der große DSL-Geschwindigkeitstest - DSL Speed testen - COMPUTER BILD.url
2014-01-02 13:09 - 2014-01-02 13:09 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\HP
2013-12-31 14:10 - 2013-12-31 14:11 - 00000193 ____N C:\Dokumente und Einstellungen\Berlin\Desktop\Online-Abschlüsse 0079_1326.url

==================== One Month Modified Files and Folders =======

2014-01-22 16:45 - 2006-11-29 11:49 - 00000000 ____D C:\Programme
2014-01-22 16:44 - 2012-02-28 13:21 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\Dropbox
2014-01-22 16:25 - 2014-01-22 11:35 - 00000212 _____ C:\Dokumente und Einstellungen\Berlin\Desktop\Trojaner-Board - Neues Thema erstellen.url
2014-01-22 16:25 - 2006-11-29 11:53 - 01912952 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-22 16:24 - 2006-12-05 17:22 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme
2014-01-22 16:17 - 2007-01-10 14:01 - 00001950 _____ C:\WINDOWS\ODBC.INI
2014-01-22 16:16 - 2013-02-15 21:24 - 00001214 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1036405774-1932799072-1818552514-1005UA.job
2014-01-22 16:12 - 2014-01-22 16:12 - 00000000 ____D C:\FRST
2014-01-22 16:08 - 2014-01-22 16:08 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Eigene Dateien\My Received Files
2014-01-22 16:08 - 2006-12-05 17:22 - 00000000 ___RD C:\Dokumente und Einstellungen\Berlin\Eigene Dateien\Eigene Musik
2014-01-22 16:05 - 2013-02-08 19:35 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-22 16:03 - 2007-01-18 14:24 - 00000000 _____ C:\WINDOWS\system32\BIPORT
2014-01-22 14:55 - 2012-02-28 13:22 - 00000000 ___RD C:\Dokumente und Einstellungen\Berlin\Eigene Dateien\Dropbox
2014-01-22 14:38 - 2013-08-30 16:01 - 00000109 _____ C:\WINDOWS\setscan.ini
2014-01-22 14:21 - 2014-01-22 14:21 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\FreePDF_XP
2014-01-22 14:21 - 2007-01-12 14:23 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\FreePDF
2014-01-22 14:20 - 2014-01-22 14:20 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\FreePDF
2014-01-22 14:20 - 2014-01-22 11:14 - 00001319 _____ C:\WINDOWS\setupapi.log
2014-01-22 14:20 - 2007-01-12 14:23 - 00000000 ____D C:\Programme\FreePDF_XP
2014-01-22 14:20 - 2006-11-29 11:48 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2014-01-22 14:14 - 2014-01-22 14:14 - 00000380 _____ C:\WINDOWS\Tasks\SpyHunter4.job
2014-01-22 14:12 - 2012-12-14 17:13 - 00000966 _____ C:\WINDOWS\Tasks\Google Software Updater.job
2014-01-22 14:12 - 2011-09-23 16:53 - 00458752 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2014-01-22 14:11 - 2007-01-12 15:35 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\FRITZ!
2014-01-22 14:10 - 2013-08-22 14:11 - 00000294 _____ C:\WINDOWS\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1036405774-1932799072-1818552514-1005.job
2014-01-22 14:10 - 2013-08-08 12:05 - 00000272 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1036405774-1932799072-1818552514-1005.job
2014-01-22 14:10 - 2013-06-24 13:25 - 00000272 _____ C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1036405774-1932799072-1818552514-1005.job
2014-01-22 14:10 - 2013-02-08 19:35 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-22 14:10 - 2006-11-29 11:43 - 00012598 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-22 14:09 - 2013-05-03 15:58 - 00131072 _____ C:\WINDOWS\system32\config\OAlerts.evt
2014-01-22 14:09 - 2006-12-05 17:22 - 00000300 ___SH C:\Dokumente und Einstellungen\Berlin\ntuser.ini
2014-01-22 14:09 - 2006-11-29 12:00 - 00032618 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-22 14:09 - 2006-11-29 12:00 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-22 14:09 - 2006-11-29 11:50 - 00000159 _____ C:\WINDOWS\wiadebug.log
2014-01-22 14:09 - 2006-11-29 11:50 - 00000050 _____ C:\WINDOWS\wiaservc.log
2014-01-22 14:08 - 2013-09-04 11:49 - 00000043 _____ C:\WINDOWS\hpfccopy.INI
2014-01-22 12:54 - 2014-01-22 12:54 - 00200063 _____ C:\spyhunter.log
2014-01-22 12:54 - 2010-03-11 15:19 - 00000000 ____D C:\Programme\RegistryDoktor 4.1
2014-01-22 12:54 - 2007-01-23 13:21 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Security Task Manager
2014-01-22 12:54 - 2007-01-12 17:04 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Marmiko Shared
2014-01-22 12:35 - 2013-09-20 14:47 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Desktop\pdfs
2014-01-22 12:35 - 2012-07-05 08:58 - 00000183 _____ C:\Dokumente und Einstellungen\Berlin\Desktop\Vertriebsportal - barmenia24.url
2014-01-22 12:33 - 2006-12-05 17:22 - 00000000 ___HD C:\Dokumente und Einstellungen\Berlin\Netzwerkumgebung
2014-01-22 12:26 - 2010-05-05 14:26 - 00002501 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Word.lnk
2014-01-22 12:08 - 2007-01-12 13:41 - 00000000 ____D C:\Programme\STAMPIT
2014-01-22 11:56 - 2014-01-22 11:56 - 00045056 _____ () C:\WINDOWS\system32\UTSCSI.EXE
2014-01-22 11:55 - 2014-01-22 11:55 - 00027666 _____ C:\sh4_service.log
2014-01-22 11:44 - 2013-05-06 15:43 - 00000175 _____ C:\Dokumente und Einstellungen\Berlin\Desktop\XING - Das professionelle Netzwerk  XING.url
2014-01-22 11:29 - 2012-07-04 15:11 - 00002088 _____ C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Barmenia eBASIS lokal - Update.lnk
2014-01-22 11:29 - 2006-12-05 17:22 - 00001647 _____ C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Remoteunterstützung.lnk
2014-01-22 11:29 - 2006-11-29 11:54 - 00001647 _____ C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Remoteunterstützung.lnk
2014-01-22 11:22 - 2006-11-29 11:54 - 00001611 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programmzugriff und -standards.lnk
2014-01-22 11:22 - 2006-11-29 11:54 - 00001555 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Windows Update.lnk
2014-01-22 11:16 - 2013-11-13 17:28 - 00000420 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{591FCD77-1B28-46E7-8077-31F22F4CC9B5}.job
2014-01-22 11:13 - 2014-01-22 11:13 - 00002003 _____ C:\Dokumente und Einstellungen\Berlin\Desktop\SpyHunter.lnk
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\WINDOWS\A358F2F62500420C989C25C4F22DF51E.TMP
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\sh4ldr
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\Programme\Enigma Software Group
2014-01-22 11:13 - 2014-01-22 11:13 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\SpyHunter
2014-01-22 11:08 - 2006-12-05 17:22 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin
2014-01-22 10:00 - 2013-05-07 12:56 - 00000522 _____ C:\WINDOWS\Tasks\Microsoft Outlook 2010.job
2014-01-22 04:16 - 2013-02-15 21:24 - 00001162 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1036405774-1932799072-1818552514-1005Core.job
2014-01-22 03:19 - 2007-01-12 16:37 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2014-01-22 03:18 - 2007-01-16 13:24 - 00000886 _____ C:\WINDOWS\Tasks\Tagesbackup.job
2014-01-21 15:50 - 2013-09-12 13:50 - 00000000 ____D C:\Programme\aB-Agenta Office
2014-01-21 15:18 - 2010-05-05 14:26 - 00002529 ____N C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Excel.lnk
2014-01-21 14:41 - 2007-01-18 15:37 - 00504895 _____ C:\voxFcoldrv.log
2014-01-21 14:39 - 2006-12-05 17:22 - 00000000 ___RD C:\Dokumente und Einstellungen\Berlin\Eigene Dateien\Eigene Bilder
2014-01-21 14:19 - 2007-01-18 14:24 - 00000952 _____ C:\WINDOWS\IXLAART.INI
2014-01-21 12:32 - 2007-01-12 15:32 - 00000000 ____D C:\Programme\FRITZ!
2014-01-21 11:51 - 2013-11-06 14:23 - 00017408 ____N C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\WebpageIcons.db
2014-01-20 05:29 - 2007-01-16 13:13 - 00000822 _____ C:\WINDOWS\Tasks\ELO.job
2014-01-19 15:11 - 2013-08-22 14:11 - 00000320 _____ C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1036405774-1932799072-1818552514-1005.job
2014-01-17 15:51 - 2013-08-08 12:05 - 00000280 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1036405774-1932799072-1818552514-1005.job
2014-01-17 13:43 - 2013-06-24 13:25 - 00000280 _____ C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1036405774-1932799072-1818552514-1005.job
2014-01-17 02:00 - 2006-11-29 11:52 - 00000000 ____D C:\WINDOWS\Registration
2014-01-16 16:33 - 2012-02-28 13:21 - 00001061 ____N C:\Dokumente und Einstellungen\Berlin\Desktop\Dropbox.lnk
2014-01-16 16:33 - 2012-02-28 13:21 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Dropbox
2014-01-16 16:33 - 2006-12-05 17:22 - 00000000 ___RD C:\Dokumente und Einstellungen\Berlin\Startmenü\Programme\Autostart
2014-01-16 14:49 - 2006-11-29 12:00 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService
2014-01-16 14:49 - 2006-11-29 12:00 - 00000000 __SHD C:\Dokumente und Einstellungen\LocalService
2014-01-16 14:08 - 2013-08-22 14:11 - 00000302 _____ C:\WINDOWS\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1036405774-1932799072-1818552514-1005.job
2014-01-14 13:11 - 2007-01-26 19:51 - 00026883 _____ C:\FMAIL.LOG
2014-01-09 11:18 - 2007-01-13 16:49 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Desktop\häufig benutzte Office-Dokumente
2014-01-08 16:50 - 2014-01-08 16:50 - 00000000 ____D C:\Programme\iLinc
2014-01-08 16:50 - 2014-01-08 16:50 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Anwendungsdaten\iLinc
2014-01-08 16:50 - 2014-01-08 16:50 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\iLinc 11
2014-01-02 16:53 - 2013-07-04 13:37 - 00000254 ____N C:\Dokumente und Einstellungen\Berlin\Desktop\Telekom  Kundencenter - Telefonie-Einstellungen.url
2014-01-02 14:03 - 2014-01-02 13:42 - 00000187 ____N C:\Dokumente und Einstellungen\Berlin\Desktop\Der große DSL-Geschwindigkeitstest - DSL Speed testen - COMPUTER BILD.url
2014-01-02 13:09 - 2014-01-02 13:09 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Anwendungsdaten\HP
2014-01-02 13:09 - 2007-01-10 13:41 - 00000000 ____D C:\Dokumente und Einstellungen\Berlin\Desktop\Sonstiges
2013-12-31 14:11 - 2013-12-31 14:10 - 00000193 ____N C:\Dokumente und Einstellungen\Berlin\Desktop\Online-Abschlüsse 0079_1326.url
2013-12-23 16:22 - 2007-01-12 14:11 - 00000827 ____N C:\Dokumente und Einstellungen\Berlin\Desktop\ebuero.url

Files to move or delete:
====================
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini


Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Temp\dwa85res_de.dll
C:\Dokumente und Einstellungen\Berlin\Lokale Einstellungen\Temp\SHSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2006-11-29 11:42] - [2008-04-14 03:22] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e 

C:\Windows\System32\winlogon.exe
[2006-11-29 11:43] - [2008-04-14 03:23] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a 

C:\Windows\System32\svchost.exe
[2006-11-29 11:43] - [2008-04-14 03:23] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366 

C:\Windows\System32\services.exe
[2006-11-29 11:42] - [2009-02-09 12:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc 

C:\Windows\System32\User32.dll
[2006-11-29 11:43] - [2008-04-14 03:22] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd 

C:\Windows\System32\userinit.exe
[2006-11-29 11:43] - [2008-04-14 03:23] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106 

C:\Windows\System32\rpcss.dll
[2006-11-29 11:42] - [2009-02-09 11:51] - 0401408 ____A (Microsoft Corporation) 3127afbf2c1ed0ab14a1bbb7aaecb85b 

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2006-11-29 11:43] - [2008-04-14 02:52] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d 


==================== End Of Log ============================