Hallo,

wir haben uns den BKA Virus eingefangen und würden uns freuen diesen wieder los zu bekommen. Das Starten im abgesicherten Modus ist nicht möglich.

Vielen Dank schon mal im Voraus

Holger

Hier ist der OTL Text:OTL Logfile:
OTL EXTRAS Logfile:

OTL logfile created on: 6/17/2014 3:39:16 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 2 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 149.04 Gb Total Space | 8.33 Gb Free Space | 5.59% Space Free | Partition Type: NTFS
Drive D: | 149.05 Gb Total Space | 26.38 Gb Free Space | 17.70% Space Free | Partition Type: NTFS
Drive E: | 7.60 Gb Total Space | 7.58 Gb Free Space | 99.78% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - [2014/06/04 11:42:56 | 000,101,888 | ---- | M] () [Auto] -- C:\DOKUME~1\ALLUSE~1\ANWEND~1\C835CCC965B8FB4F6109EFCACED3F44E\wh7gst7.cpp -- (winmgmt)
SRV - [2014/01/27 09:56:47 | 000,663,184 | ---- | M] (Star Finanz-Software Entwicklung und Vertriebs GmbH) [Auto] -- C:\Programme\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe -- (StarMoney 9.0 OnlineUpdate)
SRV - [2012/12/21 09:48:08 | 000,699,680 | ---- | M] (Star Finanz - Software Entwicklung und Vertriebs GmbH) [Auto] -- C:\Programme\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe -- (StarMoney 8.0 OnlineUpdate)
SRV - [2012/12/18 14:25:52 | 000,170,408 | ---- | M] (Oracle Corporation) [Auto] -- C:\Programme\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012/06/15 05:33:48 | 000,177,976 | ---- | M] (PortWise) [Auto] -- C:\Programme\PortWise\Access Client\AccessClient-Service.exe -- (pwClientService)
SRV - [2012/05/16 19:00:00 | 000,126,128 | ---- | M] (Seiko Epson Corporation) [Auto] -- C:\WINDOWS\system32\escsvc.exe -- (EpsonScanSvc)
SRV - [2012/02/07 11:53:34 | 000,363,800 | ---- | M] (Intel Corporation) [Auto] -- C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2012/02/07 11:53:32 | 000,277,784 | ---- | M] (Intel Corporation) [Auto] -- C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2012/02/07 11:52:04 | 000,161,560 | ---- | M] (Intel Corporation) [Auto] -- C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service) Intel(R)
SRV - [2012/02/02 16:25:30 | 000,458,464 | ---- | M] (Intel(R) Corporation) [Auto] -- C:\Programme\Intel\iCLS Client\HeciServer.exe -- (Intel(R) Capability Licensing Service Interface) Intel(R)
SRV - [2012/02/02 05:56:35 | 000,951,936 | R--- | M] (ASUSTeK Computer Inc.) [Auto] -- C:\Programme\ASUS\AAHM\1.00.20\aaHMSvc.exe -- (asHmComSvc)
SRV - [2011/11/11 09:48:54 | 000,088,688 | R--- | M] (VIA Technologies, Inc.) [Auto] -- C:\WINDOWS\system32\KaraokeSer.exe -- (KaraokeService)
SRV - [2011/11/08 06:54:25 | 000,554,160 | ---- | M] (Star Finanz - Software Entwicklung und Vertriebs GmbH) [Auto] -- C:\Programme\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe -- (StarMoney 7.0 OnlineUpdate)
SRV - [2011/08/03 07:49:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto] -- C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/07/21 06:08:02 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/04/21 01:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009/12/16 08:49:00 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) [Auto] -- C:\Programme\Edimax\Common\RaRegistry.exe -- (RalinkRegistryWriter)
SRV - [2009/07/22 12:54:14 | 000,081,920 | ---- | M] (Firebird Project) [Auto] -- C:\Programme\Firebird\Firebird_2_1\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2009/07/22 12:53:44 | 002,736,128 | ---- | M] (Firebird Project) [On_Demand] -- C:\Programme\Firebird\Firebird_2_1\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2006/10/17 17:22:50 | 000,204,800 | ---- | M] () [Auto] -- C:\Programme\EnergieSpar-Monitor PC\wrapper.exe -- (inhome_kernel)
SRV - [2003/07/28 06:28:22 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand] --  -- (SenFiltService)
DRV - File not found [Kernel | On_Demand] --  -- (RT73)
DRV - File not found [Kernel | On_Demand] --  -- (RT2500USB)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - File not found [Kernel | On_Demand] --  -- (AEAudio)
DRV - File not found [Kernel | On_Demand] --  -- (ADIHdAudAddService)
DRV - [2012/06/15 05:33:51 | 000,039,552 | ---- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\waclient.sys -- (waclient)
DRV - [2011/12/23 05:56:14 | 000,082,032 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c)
DRV - [2011/12/05 15:24:14 | 000,270,080 | R--- | M] (Intel(R) Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV - [2011/12/02 07:06:44 | 002,820,608 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2011/11/09 18:52:02 | 000,046,080 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HECI.sys -- (MEI) Intel(R)
DRV - [2011/07/21 06:11:12 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/07/21 06:11:11 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/08/24 03:31:08 | 000,011,456 | R--- | M] () [Kernel | System] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO)
DRV - [2009/12/10 21:16:16 | 000,019,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Scutum50.sys -- (Scutum50)
DRV - [2009/12/10 21:16:02 | 000,803,328 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\rt2870.sys -- (rt2870)
DRV - [2009/10/08 11:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/17 06:19:44 | 000,057,672 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2009/02/17 06:17:40 | 000,072,520 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2007/11/21 11:27:31 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
DRV - [2007/03/08 12:47:00 | 000,012,032 | ---- | M] (SerComm) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETGEARUHOST.sys -- (NETGEARUHOST)
DRV - [2007/03/08 12:46:50 | 000,039,424 | ---- | M] (SerComm) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETGEARUHUB.sys -- (NETGEARUHUB)
DRV - [2006/10/29 23:31:58 | 000,043,648 | R--- | M] (JMicron Technology Corp.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\jraid.sys -- (JRAID)
DRV - [2006/07/26 21:49:10 | 000,083,712 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2006/02/07 07:52:58 | 000,006,912 | R--- | M] (JMicron ) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\JGOGO.sys -- (JGOGO)
DRV - [2004/10/15 10:49:22 | 000,029,292 | R--- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\FTD2XX.sys -- (FTD2XX)
DRV - [2004/08/12 22:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2004/03/23 22:12:34 | 000,017,280 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand] -- C:\WINDOWS\system32\nsndis5.sys -- (NSNDIS5)
 
 
========== Standard Registry (All) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Holger_ON_C\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\Holger_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\Holger_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\Holger_ON_C\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKU\Holger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
 
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Programme\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Programme\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.10.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2012/07/14 11:27:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Programme\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2012/07/14 11:27:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2013/05/07 09:46:08 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2004/08/04 08:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programme\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (@C:\Programme\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programme\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
O3 - HKU\Holger_ON_C\..\Toolbar\ShellBrowser: (&Adresse) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKU\Holger_ON_C\..\Toolbar\WebBrowser: (&Adresse) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKU\Holger_ON_C\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKU\Holger_ON_C\..\Toolbar\WebBrowser: (&Links) - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AsusServiceProvider] C:\Programme\ASUS\AASP\1.00.23\aaCenter.exe ()
O4 - HKLM..\Run: [AsusStartupHelp] C:\Programme\ASUS\AASP\1.00.23\AsRunHelp.exe ()
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DeviceDiscovery] C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HDAudDeck] C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe (VIA Technologies, Inc.)
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [HP Software Update] C:\Programme\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe (HP)
O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidSetup.exe (JMicron Technology Corp.)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe ()
O4 - HKLM..\Run: [Microsoft Default Manager] C:\Programme\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NWEReboot]  File not found
O4 - HKLM..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [Omnipage] C:\Programme\ScanSoft\OmniPageSE\opware32.exe (ScanSoft, Inc)
O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKU\.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\Holger_ON_C..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\Holger_ON_C..\Run: [EPLTarget\P0000000000000000] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATILEE.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\Holger_ON_C..\Run: [NBJ] C:\Programme\Ahead\Nero BackItUp\NBJ.exe (Ahead Software AG)
O4 - HKU\Holger_ON_C..\Run: [Otliv]  File not found
O4 - HKU\LocalService_ON_C..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\UpdatusUser_ON_C..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Wireless Utility.lnk = C:\Programme\Edimax\Common\RaUI.exe (Edimax Technology Co., Ltd.)
O4 - Startup: C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\explorer.lnk = X:\I386\SYSTEM32\RUNDLL32.EXE (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\PC_WS2500.lnk = C:\Programme\PC Wetterstation 3\PC_WS2500.exe (ELV_AG)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Holger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\UpdatusUser_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O12 - Plugin for: .spop - C:\Programme\Internet Explorer\PLUGINS\NPDocBox.dll (Intertrust Technologies, Inc.)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {3195CF7C-E9E2-49B2-8B61-14F285298E1C} https://portal.evosoft.com/wa/AccessClientLoader.cab (Access Client web loader)
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab (HpProductDetection Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: mIDWebClientCab https://portal.evosoft-crm.com/wa/authmech/base/WebActiveX.cab (Reg Error: Key error.)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\pijahim: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/10/16 02:04:38 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2013/10/29 10:51:30 | 000,000,000 | ---D | M] - E:\Autowerbung -- [ FAT32 ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{546127dc-2029-11e2-8b9e-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{546127dc-2029-11e2-8b9e-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{546127dc-2029-11e2-8b9e-806d6172696f}\Shell\AutoRun\command - "" = D:\reatogoMenu.exe
O33 - MountPoints2\{a615811b-7c49-11dc-ac85-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{a615811b-7c49-11dc-ac85-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{a615811b-7c49-11dc-ac85-806d6172696f}\Shell\AutoRun\command - "" = D:\Bin\Assetup.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/06/04 11:42:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\C835CCC965B8FB4F6109EFCACED3F44E
[2012/10/27 08:01:43 | 000,009,216 | R--- | C] ( ) -- C:\WINDOWS\System32\IGFXDEVLib.dll
[2012/10/27 07:48:48 | 000,254,000 | R--- | C] ( ) -- C:\WINDOWS\System32\Audio3D.dll
[2007/10/16 03:18:14 | 000,254,000 | ---- | C] ( ) -- C:\WINDOWS\System32\A3D.dll
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2014/06/17 08:30:35 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014/06/17 08:30:17 | 000,001,582 | ---- | M] () -- C:\WINDOWS\PC_WS2500.INI
[2014/06/17 08:17:00 | 000,000,917 | ---- | M] () -- C:\WINDOWS\tasks\EPSON XP-412 413 415 Series Update {BA897EE2-51FE-4793-8F5B-3826AEC31F11}.job
[2014/06/17 08:17:00 | 000,000,731 | ---- | M] () -- C:\WINDOWS\tasks\EPSON XP-412 413 415 Series Invitation {BA897EE2-51FE-4793-8F5B-3826AEC31F11}.job
[2014/06/17 08:11:48 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014/06/17 04:10:00 | 000,000,448 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2014/06/16 14:40:00 | 000,000,448 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2014/06/16 11:25:00 | 000,000,448 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2014/06/16 08:00:00 | 000,000,448 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2014/06/05 15:36:56 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2014/06/04 11:42:56 | 000,000,816 | ---- | M] () -- C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\explorer.lnk
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2014/06/04 11:42:56 | 000,000,816 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\explorer.lnk
[2014/03/31 10:06:19 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\DiagFunc.dll
[2014/03/31 10:06:19 | 000,001,191 | ---- | C] () -- C:\WINDOWS\System32\W32N55.INI
[2014/03/31 10:06:19 | 000,000,516 | ---- | C] () -- C:\WINDOWS\System32\DiagFunc.ini
[2014/03/31 10:06:16 | 000,013,931 | ---- | C] () -- C:\WINDOWS\System32\RaCoInst.dat
[2013/07/03 10:30:19 | 000,344,657 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Anwendungsdaten\census.cache
[2013/07/03 10:30:03 | 000,187,234 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Anwendungsdaten\ars.cache
[2013/07/03 10:13:11 | 000,000,036 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Anwendungsdaten\housecall.guid.cache
[2013/05/07 09:56:36 | 000,121,408 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2012/10/27 08:06:48 | 000,015,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\IntelMEFWVer.dll
[2012/10/27 08:01:43 | 000,000,264 | R--- | C] () -- C:\WINDOWS\System32\GfxUI.exe.config
[2012/10/27 08:01:42 | 000,963,144 | R--- | C] () -- C:\WINDOWS\System32\igkrng600.bin
[2012/10/27 08:01:42 | 000,261,208 | R--- | C] () -- C:\WINDOWS\System32\igfcg600m.bin
[2012/10/27 08:01:42 | 000,145,804 | R--- | C] () -- C:\WINDOWS\System32\igcompkrng600.bin
[2012/10/27 07:31:05 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2012/09/20 08:31:43 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012/07/14 11:23:38 | 000,000,057 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ament.ini
[2012/06/15 05:33:51 | 000,039,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\waclient.sys
[2012/02/02 16:08:06 | 000,001,536 | ---- | C] () -- C:\WINDOWS\System32\IusEventLog.dll
[2011/08/26 09:52:16 | 000,280,276 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011/08/26 09:52:16 | 000,280,276 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011/08/26 09:52:16 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011/08/26 09:51:32 | 002,128,778 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2010/06/15 14:55:29 | 000,000,103 | ---- | C] () -- C:\WINDOWS\System32\hptrace.ini
[2009/09/30 06:05:48 | 000,290,816 | ---- | C] () -- C:\WINDOWS\System32\nsldap32v60.dll
[2008/10/30 12:00:22 | 000,048,640 | ---- | C] () -- C:\WINDOWS\System32\nsldapssl32v60.dll
[2008/10/30 11:59:24 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\nsldappr32v60.dll
[2007/12/04 15:31:57 | 000,025,601 | ---- | C] () -- C:\WINDOWS\CSTBox.INI
[2007/12/04 14:39:24 | 000,065,974 | ---- | C] () -- C:\Programme\viewsonicinstruct_xp.pdf
[2007/12/04 14:38:43 | 000,000,100 | ---- | C] () -- C:\WINDOWS\VSWizard.ini
[2007/11/21 11:48:26 | 000,000,509 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2007/11/21 10:40:11 | 000,004,398 | ---- | C] () -- C:\WINDOWS\hpdj5600.ini
[2007/11/05 15:15:35 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007/10/23 13:46:15 | 000,000,206 | ---- | C] () -- C:\WINDOWS\homeputerHist.INI
[2007/10/21 14:08:36 | 000,000,690 | ---- | C] () -- C:\WINDOWS\FHZ 1000 PC.INI
[2007/10/21 14:02:28 | 000,000,669 | R--- | C] () -- C:\WINDOWS\System32\FTD2XXUN.ini
[2007/10/21 13:55:16 | 000,001,092 | ---- | C] () -- C:\WINDOWS\homeputerStudio.INI
[2007/10/19 10:36:45 | 000,018,944 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/10/17 14:36:52 | 000,001,582 | ---- | C] () -- C:\WINDOWS\PC_WS2500.INI
[2007/10/17 14:26:27 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PROTOCOL.INI
[2007/10/17 14:06:35 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007/10/16 20:33:23 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2007/10/16 20:32:17 | 000,212,080 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2007/10/16 17:13:12 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2007/10/16 03:28:06 | 000,011,456 | R--- | C] () -- C:\WINDOWS\System32\drivers\AsIO.sys
[2007/10/16 03:06:42 | 000,042,541 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2007/10/16 03:06:19 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2007/10/16 03:06:17 | 000,032,049 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2007/10/16 03:06:00 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007/10/16 02:06:45 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2007/10/16 02:01:59 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2007/06/28 18:43:00 | 001,018,772 | ---- | C] () -- C:\WINDOWS\System32\nvucode.bin
[2007/06/28 18:43:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2004/12/14 11:55:22 | 000,000,019 | ---- | C] () -- C:\WINDOWS\System32\nsldapssl32v50.dll
[2004/12/14 11:55:22 | 000,000,019 | ---- | C] () -- C:\WINDOWS\System32\nsldappr32v50.dll
[2004/12/14 11:55:22 | 000,000,019 | ---- | C] () -- C:\WINDOWS\System32\nsldap32v50.dll
[2004/08/04 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/04 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/04 08:00:00 | 000,451,630 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004/08/04 08:00:00 | 000,435,396 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/04 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/04 08:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004/08/04 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/04 08:00:00 | 000,081,134 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004/08/04 08:00:00 | 000,068,292 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/04 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/04 08:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004/08/04 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/04 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/04 08:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/04 08:00:00 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2004/08/04 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003/03/05 17:03:18 | 000,004,978 | ---- | C] () -- C:\WINDOWS\hpfmdl01.dat
[2003/03/05 13:28:38 | 000,000,309 | ---- | C] () -- C:\WINDOWS\hpfins01.dat
[2003/01/07 09:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
 
========== LOP Check ==========
 
[2012/01/22 15:03:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\1&1
[2014/01/24 21:06:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Ahni
[2014/01/25 07:48:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Canon
[2012/01/07 14:36:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\elsterformular
[2013/07/02 16:52:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Gggpravpgl
[2007/11/21 10:41:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\InterTrust
[2013/06/28 08:52:04 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Mmmkfmcfy
[2007/11/21 11:48:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\ScanSoft
[2012/01/22 15:03:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1&1
[2014/06/04 11:42:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\C835CCC965B8FB4F6109EFCACED3F44E
[2014/03/31 10:06:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Edimax Driver
[2012/12/18 14:07:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\elsterformular
[2014/01/28 06:03:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Epson
[2011/03/02 14:51:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ScanSoft
[2007/11/21 11:48:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SSScanAppDataDir
[2007/11/21 11:48:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SSScanWizard
[2010/03/29 16:02:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\StarMoney 7.0
[2011/08/02 17:21:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\StarMoney 8.0
[2013/04/16 04:15:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\StarMoney 9.0
[2014/06/17 04:10:00 | 000,000,448 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2014/06/16 14:40:00 | 000,000,448 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2014/06/16 11:25:00 | 000,000,448 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2014/06/16 08:00:00 | 000,000,448 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2014/06/17 08:17:00 | 000,000,731 | ---- | M] () -- C:\WINDOWS\Tasks\EPSON XP-412 413 415 Series Invitation {BA897EE2-51FE-4793-8F5B-3826AEC31F11}.job
[2014/06/17 08:17:00 | 000,000,917 | ---- | M] () -- C:\WINDOWS\Tasks\EPSON XP-412 413 415 Series Update {BA897EE2-51FE-4793-8F5B-3826AEC31F11}.job
 
========== Purity Check ==========
 
 
< End of report >
         

--- --- ---

--- --- ---


Extra.txt:OTL EXTRAS Logfile:

OTL Extras logfile created on: 6/17/2014 3:39:16 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 2 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 149.04 Gb Total Space | 8.33 Gb Free Space | 5.59% Space Free | Partition Type: NTFS
Drive D: | 149.05 Gb Total Space | 26.38 Gb Free Space | 17.70% Space Free | Partition Type: NTFS
Drive E: | 7.60 Gb Total Space | 7.58 Gb Free Space | 99.78% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Sr]
"Start" = 4
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
"5850:UDP" = 5850:UDP:*:Enabled:UDP 5850
"7075:TCP" = 7075:TCP:*:Enabled:TCP 7075
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Programme\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe" = C:\Programme\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe:*:Enabled:StarMoney 7.0 OnlineUpdate -- (Star Finanz - Software Entwicklung und Vertriebs GmbH)
"C:\Programme\StarMoney 7.0 S-Edition\app\StarMoney.exe" = C:\Programme\StarMoney 7.0 S-Edition\app\StarMoney.exe:*:Enabled:StarMoney 7.0 -- (Star Finanz - Software Entwicklung und Vertriebs GmbH)
"C:\Programme\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe" = C:\Programme\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe:*:Enabled:StarMoney 8.0 OnlineUpdate -- (Star Finanz - Software Entwicklung und Vertriebs GmbH)
"C:\Programme\StarMoney 8.0 S-Edition\app\StarMoney.exe" = C:\Programme\StarMoney 8.0 S-Edition\app\StarMoney.exe:*:Enabled:StarMoney 8.0 -- (Star Finanz - Software Entwicklung und Vertriebs GmbH)
"C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe" = C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe -- (NVIDIA Corporation)
"C:\Programme\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe" = C:\Programme\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe:*:Enabled:StarMoney 9.0 OnlineUpdate -- (Star Finanz-Software Entwicklung und Vertriebs GmbH)
"C:\Programme\StarMoney 9.0 S-Edition\app\StarMoney.exe" = C:\Programme\StarMoney 9.0 S-Edition\app\StarMoney.exe:*:Enabled:StarMoney 9.0 -- (Star Finanz-Software Entwicklung und Vertriebs GmbH)
"C:\WINDOWS\explorer.exe" = C:\WINDOWS\explorer.exe:*:Disabled:Windows Explorer -- (Microsoft Corporation)
"C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup3_6_1_2200\ENEasyApp.exe" = C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup3_6_1_2200\ENEasyApp.exe:*:Enabled:EpsonNet Setup -- (SEIKO EPSON CORPORATION)
"\??\C:\WINDOWS\system32\winlogon.exe" = \??\C:\WINDOWS\system32\winlogon.exe:*:Enabled:winlogon -- (Microsoft Corporation)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03F1CC67-5BD8-4C36-8394-76311B2AE69A}" = ArcSoft PhotoStudio 5
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{1AE2A385-D036-40C7-BFC1-2CB0F150B913}" = Falk Reiseplaner City
"{1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}" = Microsoft Default Manager
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{26A24AE4-039D-4CA4-87B4-2F83217010FF}" = Java 7 Update 10
"{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}" = Edimax nLite Wireless USB Adapter
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMB36X Raid Configurer
"{3E31400D-274E-4647-916C-2CACC3741799}" = EpsonNet Print
"{3E40FAB4-88B4-49E9-BF19-54BC1CEC7306}" = StarMoney 8.0 S-Edition
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51A66ED3-200E-4147-8D1E-E8D30936FD26}" = Intel® Trusted Connect Service Client
"{56EF48B7-3C54-44FD-9860-5FE10E67F8BE}" = StarMoney 7.0 S-Edition
"{5A6DB7C1-E646-4842-A562-49C5EB8F2B47}" = StarMoney
"{5CC6B49A-4ABA-45BC-A8A1-68DA0EAE40CD}" = Studie zur Verbesserung von HP Officejet Pro 8100 Produkten
"{6153B403-FD82-4231-BCD4-A360DC06EBA6}" = StarMoney 9.0 S-Edition
"{623B8278-8CAD-45C1-B844-58B687C07805}" = Bing Bar Platform
"{6249C22D-E6A8-407B-BA8B-40298848ED94}" = OmniPage SE
"{65038824-6DC7-4A44-828A-D7A7F04CD61B}" = HP Officejet Pro 8100 Hilfe
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6FDCF790-49AF-4E3B-8EB2-C07E2DBA55EA}" = StarMoney 5.0 S-Edition
"{7ACB9D1D-5B26-4CE4-964A-1EB22461E6F6}" = Software Updater
"{837E620D-B93E-4D84-A753-BE1DBEB716B1}" = StarMoney
"{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}" = EPSON-Handbücher
"{85DF2EED-08BC-46FB-90DA-28B0D0A8E8A8}" = HP Update
"{86F4B795-EA3D-48BD-ADFA-DA44B39059F9}" = StarMoney
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{928B06E4-DDAA-476A-926A-641620326327}" = Microsoft Search Enhancement Pack
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A8D93648-9F7F-407D-915C-62044644C3DA}" = MSI to redistribute MS VS2005 CRT libraries
"{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.0
"{B08E144A-9ABE-40F4-B756-5FF3F290C4A8}" = StarMoney 6.0 S-Edition
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.94
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.4.28
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B376402D-58EA-45EA-BD50-DD924EB67A70}" = HP Speicher-Disc
"{B388231D-672A-4169-A3DF-BD80266252AB}" = StarMoney
"{B4FEA924-630D-11D4-B78E-005004566E4D}" = ViewSonic Monitor Drivers
"{BCE46757-7674-4416-BEDB-68205A60409E}" = Canon CanoScan Toolbox 4.1
"{BD312050-9D98-4F71-ADCD-25EC037C05FD}" = StarMoney
"{BEF3EFE7-5159-436D-9BF0-CCC633179EB4}" = EVGA Display Driver
"{C08C11B8-E402-4AAE-B221-85E5B3308F85}" = StarMoney
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D709005F-D8DC-42A8-8435-5AE880ECAF82}" = ASUS PC Diagnostics
"{E0828692-FD9D-459F-9312-C645C3CA6650}" = HP Photo and Imaging 2.0 - Deskjet Series
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F8A9F4D7-4EC8-4E28-9B01-4CF74C812BF2}" = StarMoney
"{F902AB2B-7816-4CBD-A385-F2549F62956B}" = StarMoney
"{FB686487-C637-4EEF-BCB1-C92463F2CC05}" = Atheros Ethernet Utility
"1&1 SmartFax" = 1&1 SmartFax
"1-imagami-Total.SCR" = 1-imagami-Total.SCR
"2-Gruene Erde.SCR" = 2-Gruene Erde.SCR
"3-BluetenHeiler.SCR" = 3-BluetenHeiler.SCR
"4-Elemente-imagami.SCR" = 4-Elemente-imagami.SCR
"5-Tropen-imagami.SCR" = 5-Tropen-imagami.SCR
"6-Neue-Bilder-imagami.SCR" = 6-Neue-Bilder-imagami.SCR
"7-imagami-Classico.SCR" = 7-imagami-Classico.SCR
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"ElsterFormular für Unternehmer 12.3.2.6814u" = ElsterFormular-Upgrade
"EnergieSpar-Monitor PC" = EnergieSpar-Monitor PC
"EPSON Scanner" = EPSON Scan
"EPSON XP-412 413 415 Series" = Druckerdeinstallation für EPSON XP-412 413 415 Series
"FBDBServer_2_1_is1" = Firebird 2.1.3.18185 (Win32)
"FTD2XX" = FTDI FTD2XX USB Drivers
"homeputer Studio" = homeputer Studio
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NeroMultiInstaller!UninstallKey" = Nero Suite
"Network Stumbler" = Network Stumbler 0.4.0 (remove only)
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"PortWise Access Client" = PortWise Access Client
"SystemRequirementsLab" = System Requirements Lab
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
 
< End of report >
         

--- --- ---

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:

• Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
• Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
• Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
  Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
• Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
• Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!





Mache folgenden OTL-Fix über OTLPE:

• Starte bitte die OTL.exe.
• Kopiere nun den Inhalt aus der Codebox in die Textbox.

:files
O4 - Startup: C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\explorer.lnk
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\C835CCC965B8FB4F6109EFCACED3F44E

:Commands
[reboot]
         

• Schließe bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
  ( Auch zu finden unter C:\_OTL\MovedFiles\<time_date>.txt)
  Kopiere nun den Inhalt hier in Deinen Thread

Berichte mir, ob der Rechner danach wieder normal startet (wir sind dann aber noch nicht fertig).

Hallo Matthias,

ich habe den Fix wie angegeben laufen lassen. Hier findest du nun noch das entsprechende Log File:

========== FILES ==========
File\Folder O4 - Startup: C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\explorer.lnk not found.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\C835CCC965B8FB4F6109EFCACED3F44E folder moved successfully.
========== COMMANDS ==========
 
OTLPE by OldTimer - Version 3.1.48.0 log created on 06172014_174857
         

Und was ist hiermit

Zitat von M-K-D-B

Berichte mir, ob der Rechner danach wieder normal startet (wir sind dann aber noch nicht fertig).

Sorry,

ja der Rechner startet wieder. Es erscheint noch eine Fehlermeldung, dass die Datei wh7gst7.cpp nicht gefunden werden kann. Diese wurde durch den Fix verschoben, wie im log beschrieben.

FRST vom Desktop ausführen:



Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hier die beiden Log Files:

FRST:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:16-06-2014
Ran by Holger (administrator) on VOYAGER on 18-06-2014 13:21:23
Running from C:\Dokumente und Einstellungen\Holger\Desktop
Platform: Microsoft Windows XP Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Avira GmbH) C:\Programme\Avira\AntiVir Desktop\sched.exe
(Avira GmbH) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(ASUSTeK Computer Inc.) C:\Programme\ASUS\AAHM\1.00.20\aaHMSvc.exe
(Seiko Epson Corporation) C:\WINDOWS\system32\escsvc.exe
(Firebird Project) C:\Programme\Firebird\Firebird_2_1\bin\fbguard.exe
(Intel(R) Corporation) C:\Programme\Intel\iCLS Client\HeciServer.exe
(Avira GmbH) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Intel Corporation) C:\Programme\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(VIA Technologies, Inc.) C:\WINDOWS\system32\KaraokeSer.exe
(Intel Corporation) C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(PortWise) C:\Programme\PortWise\Access Client\AccessClient-Service.exe
(Ralink Technology, Corp.) C:\Programme\Edimax\Common\RaRegistry.exe
(Microsoft Corporation) C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Programme\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Programme\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Programme\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Intel Corporation) C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Hewlett-Packard) C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
(ScanSoft, Inc) C:\Programme\ScanSoft\OmniPageSE\opware32.exe
(Avira GmbH) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard) C:\Programme\HP\HP Software Update\hpwuschd2.exe
(VIA Technologies, Inc.) C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Sun Microsystems, Inc.) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(SEIKO EPSON CORPORATION) C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATILEE.EXE
(Edimax Technology Co., Ltd.) C:\Programme\Edimax\Common\RaUI.exe
(ELV_AG) C:\Programme\PC Wetterstation 3\PC_WS2500.exe
() C:\Programme\contronics\homeputer Studio\homeputerStudio.exe
(Firebird Project) C:\Programme\Firebird\Firebird_2_1\bin\fbserver.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [JMB36X IDE Setup] => C:\WINDOWS\JM\JMInsIDE.exe [36864 2006-10-30] ()
HKLM\...\Run: [JMB36X Configure] => C:\WINDOWS\system32\JMRaidSetup.exe [1953792 2006-10-30] (JMicron Technology Corp.)
HKLM\...\Run: [AsusServiceProvider] => C:\Programme\ASUS\AASP\1.00.23\aaCenter.exe [597504 2007-01-05] ()
HKLM\...\Run: [AsusStartupHelp] => C:\Programme\ASUS\AASP\1.00.23\AsRunHelp.exe [363008 2006-12-29] ()
HKLM\...\Run: [NeroFilterCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [NWEReboot] => [X]
HKLM\...\Run: [DeviceDiscovery] => C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [40960 2002-12-02] (Hewlett-Packard)
HKLM\...\Run: [HPDJ Taskbar Utility] => C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe [188416 2006-01-13] (HP)
HKLM\...\Run: [Omnipage] => C:\Programme\ScanSoft\OmniPageSE\opware32.exe [49152 2002-06-03] (ScanSoft, Inc)
HKLM\...\Run: [avgnt] => C:\Programme\Avira\AntiVir Desktop\avgnt.exe [281768 2011-04-21] (Avira GmbH)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe [40368 2009-12-18] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-09-21] (Adobe Systems Incorporated)
HKLM\...\Run: [nwiz] => C:\Programme\NVIDIA Corporation\nView\nwiz.exe [1632360 2011-07-05] ()
HKLM\...\Run: [HP Software Update] => C:\Programme\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Microsoft Default Manager] => C:\Programme\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM\...\Run: [HDAudDeck] => C:\Programme\VIA\VIAudioi\HDADeck\HDeck.exe [41118320 2011-12-06] (VIA Technologies, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKU\S-1-5-21-1177238915-1060284298-725345543-1003\...\Run: [NBJ] => C:\Programme\Ahead\Nero BackItUp\NBJ.exe [1961984 2005-10-11] (Ahead Software AG)
HKU\S-1-5-21-1177238915-1060284298-725345543-1003\...\Run: [Otliv] => "C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Ahni\otliv.exe"
HKU\S-1-5-21-1177238915-1060284298-725345543-1003\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATILEE.EXE [260160 2013-01-24] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1177238915-1060284298-725345543-1003\...\MountPoints2: {a615811b-7c49-11dc-ac85-806d6172696f} - D:\Bin\Assetup.exe
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Wireless Utility.lnk
ShortcutTarget: Wireless Utility.lnk -> C:\Programme\Edimax\Common\RaUI.exe (Edimax Technology Co., Ltd.)
Startup: C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\explorer.lnk
ShortcutTarget: explorer.lnk -> C:\DOKUME~1\ALLUSE~1\ANWEND~1\C835CC~1\wh7gst7.cpp (No File)
Startup: C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\PC_WS2500.lnk
ShortcutTarget: PC_WS2500.lnk -> C:\Programme\PC Wetterstation 3\PC_WS2500.exe (ELV_AG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKCU - {98609ADA-8D5B-486C-93B6-20A8245A4509} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}
SearchScopes: HKCU - {A0622044-CC84-4BCE-83FF-48EC17078DBE} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-W1&o=100000080&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=JM&apn_dtid=YYYYYYYYDE&apn_uid=f52d1ed9-e82b-4414-82f4-cb50e7601e3b&apn_sauid=D4A3BF86-E928-4409-9750-FCE946B6E396
BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programme\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - @C:\Programme\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programme\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
Toolbar: HKCU - &Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: {3195CF7C-E9E2-49B2-8B61-14F285298E1C} https://portal.evosoft.com/wa/AccessClientLoader.cab
DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

FireFox:
========
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Programme\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater - C:\Programme\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin: @java.com/DTPlugin,version=10.10.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.10.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Programme\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF HKLM\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\
FF Extension: Search Helper Extension - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ []
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Programme\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\
FF Extension: Default Manager - C:\Programme\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ []
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [136360 2011-04-21] (Avira GmbH)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [269480 2011-07-21] (Avira GmbH)
R2 asHmComSvc; C:\Programme\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-02-02] (ASUSTeK Computer Inc.)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc.exe [126128 2012-05-17] (Seiko Epson Corporation)
R2 FirebirdGuardianDefaultInstance; C:\Programme\Firebird\Firebird_2_1\bin\fbguard.exe [81920 2009-07-22] (Firebird Project) [File not signed]
R3 FirebirdServerDefaultInstance; C:\Programme\Firebird\Firebird_2_1\bin\fbserver.exe [2736128 2009-07-22] (Firebird Project) [File not signed]
S2 inhome_kernel; C:\Programme\EnergieSpar-Monitor PC\wrapper.exe [204800 2006-10-17] () [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Programme\Intel\iCLS Client\HeciServer.exe [458464 2012-02-02] (Intel(R) Corporation)
R2 JavaQuickStarterService; C:\Programme\Java\jre7\bin\jqs.exe [170408 2012-12-18] (Oracle Corporation)
R2 jhi_service; C:\Programme\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation)
R2 KaraokeService; C:\WINDOWS\system32\KaraokeSer.exe [88688 2011-11-11] (VIA Technologies, Inc.)
R2 LMS; C:\Programme\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [277784 2012-02-07] (Intel Corporation)
R2 nvUpdatusService; C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2255464 2011-08-03] (NVIDIA Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)
R2 pwClientService; C:\Programme\PortWise\Access Client\AccessClient-Service.exe [177976 2012-06-15] (PortWise)
R2 RalinkRegistryWriter; C:\Programme\Edimax\Common\RaRegistry.exe [185632 2009-12-16] (Ralink Technology, Corp.)
R2 SeaPort; C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [249136 2010-07-27] (Microsoft Corporation)
R2 StarMoney 7.0 OnlineUpdate; C:\Programme\StarMoney 7.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 8.0 OnlineUpdate; C:\Programme\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 9.0 OnlineUpdate; C:\Programme\StarMoney 9.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [663184 2014-01-27] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 UNS; C:\Programme\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [363800 2012-02-07] (Intel Corporation)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
S2 winmgmt; C:\DOKUME~1\ALLUSE~1\ANWEND~1\C835CCC965B8FB4F6109EFCACED3F44E\wh7gst7.cpp [X]

==================== Drivers (Whitelisted) ====================

R1 AFS2K; C:\WINDOWS\system32\Drivers\AFS2K.sys [82380 2007-11-21] (Oak Technology Inc.) [File not signed]
R1 AsIO; C:\WINDOWS\System32\drivers\AsIO.sys [11456 2010-08-24] ()
R1 avgio; C:\Programme\Avira\AntiVir Desktop\avgio.sys [11608 2009-02-13] (Avira GmbH)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [66616 2011-07-21] (Avira GmbH)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [138192 2011-07-21] (Avira GmbH)
R3 FTD2XX; C:\WINDOWS\System32\Drivers\FTD2XX.sys [29292 2004-10-15] (FTDI Ltd.) [File not signed]
S3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [57672 2009-02-17] (FTDI Ltd.)
R0 JGOGO; C:\WINDOWS\System32\DRIVERS\JGOGO.sys [6912 2006-02-07] (JMicron )
R0 JRAID; C:\WINDOWS\System32\DRIVERS\jraid.sys [43648 2006-10-30] (JMicron Technology Corp.)
R3 L1c; C:\WINDOWS\System32\DRIVERS\l1c51x86.sys [82032 2011-12-23] (Atheros Communications, Inc.)
R3 MEI; C:\WINDOWS\System32\DRIVERS\HECI.sys [46080 2011-11-10] (Intel Corporation)
S3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 NETGEARUHOST; C:\WINDOWS\System32\DRIVERS\NETGEARUHOST.sys [12032 2007-03-08] (SerComm)
R3 NETGEARUHUB; C:\WINDOWS\System32\DRIVERS\NETGEARUHUB.sys [39424 2007-03-08] (SerComm)
S3 NSNDIS5; C:\WINDOWS\system32\NSNDIS5.SYS [17280 2004-03-24] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 rt2870; C:\WINDOWS\System32\DRIVERS\rt2870.sys [803328 2009-12-11] (Ralink Technology, Corp.)
S3 RTLE8023xp; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [83712 2006-07-27] (Realtek Semiconductor Corporation                           ) [File not signed]
R2 Scutum50; C:\WINDOWS\System32\Drivers\Scutum50.sys [19072 2009-12-11] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [28520 2009-10-08] (Avira GmbH)
R3 VIAHdAudAddService; C:\WINDOWS\System32\drivers\viahduaa.sys [2820608 2011-12-02] (VIA Technologies, Inc.)
R1 waclient; C:\WINDOWS\System32\drivers\waclient.sys [39552 2012-06-15] () [File not signed]
S3 ADIHdAudAddService; system32\drivers\ADIHdAud.sys [X]
S3 AEAudio; system32\drivers\AEAudio.sys [X]
S4 IntelIde; No ImagePath
S3 RT2500USB; system32\DRIVERS\rt73.sys [X]
S3 RT73; system32\DRIVERS\rt73.sys [X]
S3 SenFiltService; system32\drivers\Senfilt.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-18 13:21 - 2014-06-18 13:21 - 00017400 _____ () C:\Dokumente und Einstellungen\Holger\Desktop\FRST.txt
2014-06-18 13:21 - 2014-06-18 13:21 - 00000000 ____D () C:\FRST
2014-06-18 13:21 - 2014-06-18 11:15 - 01072640 _____ (Farbar) C:\Dokumente und Einstellungen\Holger\Desktop\FRST.exe
2014-06-17 23:48 - 2014-06-17 23:48 - 00000000 ____D () C:\_OTL
2014-06-17 23:48 - 2011-07-13 04:55 - 02237440 ____R (OldTimer Tools) C:\OTLPE.exe
2014-06-17 21:41 - 2014-06-17 21:41 - 00031704 _____ () C:\Extras.Txt
2014-06-17 19:58 - 2014-06-17 21:41 - 00090260 _____ () C:\OTL.Txt
2014-06-17 16:00 - 2014-06-17 16:39 - 00005195 _____ () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RUNDLL32.EXE-2936-F.txt
2014-06-17 14:09 - 2014-06-17 14:30 - 00002797 _____ () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RUNDLL32.EXE-2324-F.txt

==================== One Month Modified Files and Folders =======

2014-06-18 13:21 - 2014-06-18 13:21 - 00017400 _____ () C:\Dokumente und Einstellungen\Holger\Desktop\FRST.txt
2014-06-18 13:21 - 2014-06-18 13:21 - 00000000 ____D () C:\FRST
2014-06-18 13:21 - 2007-10-16 08:09 - 00000000 ____D () C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp
2014-06-18 13:17 - 2014-01-28 12:17 - 00000917 _____ () C:\WINDOWS\Tasks\EPSON XP-412 413 415 Series Update {BA897EE2-51FE-4793-8F5B-3826AEC31F11}.job
2014-06-18 13:17 - 2014-01-28 12:17 - 00000731 _____ () C:\WINDOWS\Tasks\EPSON XP-412 413 415 Series Invitation {BA897EE2-51FE-4793-8F5B-3826AEC31F11}.job
2014-06-18 11:15 - 2014-06-18 13:21 - 01072640 _____ (Farbar) C:\Dokumente und Einstellungen\Holger\Desktop\FRST.exe
2014-06-18 10:10 - 2012-07-14 17:25 - 00000448 _____ () C:\WINDOWS\Tasks\At1.job
2014-06-18 07:17 - 2007-10-16 08:07 - 00032534 _____ () C:\WINDOWS\SchedLgU.Txt
2014-06-18 04:23 - 2011-06-11 13:42 - 00000000 ____D () C:\WINDOWS\system32\NtmsData
2014-06-18 02:05 - 2007-10-16 08:01 - 00000000 ____D () C:\WINDOWS\Registration
2014-06-17 23:48 - 2014-06-17 23:48 - 00000000 ____D () C:\_OTL
2014-06-17 23:34 - 2007-10-16 08:03 - 01337475 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-17 23:33 - 2004-08-04 14:00 - 00012598 _____ () C:\WINDOWS\system32\wpa.dbl
2014-06-17 23:29 - 2007-10-17 02:35 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-06-17 23:29 - 2007-10-17 02:35 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-06-17 23:28 - 2007-10-16 09:15 - 00000000 __SHD () C:\WINDOWS\CSC
2014-06-17 23:28 - 2007-10-16 08:07 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-17 21:41 - 2014-06-17 21:41 - 00031704 _____ () C:\Extras.Txt
2014-06-17 21:41 - 2014-06-17 19:58 - 00090260 _____ () C:\OTL.Txt
2014-06-17 17:53 - 2007-10-17 20:36 - 00001582 _____ () C:\WINDOWS\PC_WS2500.INI
2014-06-17 17:53 - 2007-10-16 08:09 - 00000300 ___SH () C:\Dokumente und Einstellungen\Holger\ntuser.ini
2014-06-17 17:53 - 2007-10-16 08:09 - 00000000 ____D () C:\Dokumente und Einstellungen\Holger
2014-06-17 16:39 - 2014-06-17 16:00 - 00005195 _____ () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RUNDLL32.EXE-2936-F.txt
2014-06-17 14:30 - 2014-06-17 14:09 - 00002797 _____ () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RUNDLL32.EXE-2324-F.txt
2014-06-16 20:40 - 2012-07-14 17:25 - 00000448 _____ () C:\WINDOWS\Tasks\At2.job
2014-06-16 17:25 - 2012-07-14 17:25 - 00000448 _____ () C:\WINDOWS\Tasks\At3.job
2014-06-16 14:00 - 2012-07-14 17:25 - 00000448 _____ () C:\WINDOWS\Tasks\At4.job
2014-06-05 21:36 - 2012-03-02 21:20 - 00000000 ____D () C:\WINDOWS\pss
2014-06-05 21:36 - 2007-10-17 03:31 - 00000211 ___SH () C:\boot.ini
2014-06-05 21:36 - 2004-08-04 14:00 - 00000658 _____ () C:\WINDOWS\win.ini
2014-06-05 21:36 - 2004-08-04 14:00 - 00000227 _____ () C:\WINDOWS\system.ini
2014-06-05 21:10 - 2014-01-15 18:43 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-04 17:42 - 2007-10-16 08:09 - 00000000 ___RD () C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart
2014-05-27 17:49 - 2013-04-16 10:09 - 00000000 ____D () C:\Programme\StarMoney 9.0 S-Edition
2014-05-19 14:37 - 2007-10-17 02:32 - 00468850 _____ () C:\WINDOWS\setupapi.log

Files to move or delete:
====================
C:\Windows\Tasks\At1.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At3.job
C:\Windows\Tasks\At4.job


Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\1und1_smartfax_setup.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\AccessClient.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\AdobeUpdater12345.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\AskSLib.dll
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\cslh.dll
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\jre-7u25-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\jre-7u45-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\jre-7u51-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\jre-7u55-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\jre-7u60-windows-i586-iftw.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\setup_wm.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\_is12E.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\_is2.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\_is4.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\_is7B3.exe
C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Temp\_is8F.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Additional:

Additional scan result of Farbar Recovery Scan Tool (x86) Version:16-06-2014
Ran by Holger at 2014-06-18 13:22:03
Running from C:\Dokumente und Einstellungen\Holger\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================


==================== Installed Programs ======================

1&1 SmartFax (HKLM\...\1&1 SmartFax) (Version: 2.00.231 - 1&1 Internet AG)
1-imagami-Total.SCR (HKLM\...\1-imagami-Total.SCR) (Version:  - )
2-Gruene Erde.SCR (HKLM\...\2-Gruene Erde.SCR) (Version:  - )
3-BluetenHeiler.SCR (HKLM\...\3-BluetenHeiler.SCR) (Version:  - )
4-Elemente-imagami.SCR (HKLM\...\4-Elemente-imagami.SCR) (Version:  - )
5-Tropen-imagami.SCR (HKLM\...\5-Tropen-imagami.SCR) (Version:  - )
6-Neue-Bilder-imagami.SCR (HKLM\...\6-Neue-Bilder-imagami.SCR) (Version:  - )
7-imagami-Classico.SCR (HKLM\...\7-imagami-Classico.SCR) (Version:  - )
Adobe Acrobat 5.0 (HKLM\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.2.152.26 - Adobe Systems Incorporated)
Adobe Reader 8.2.0 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A82000000003}) (Version: 8.2.0 - Adobe Systems Incorporated)
ArcSoft PhotoStudio 5 (HKLM\...\{03F1CC67-5BD8-4C36-8394-76311B2AE69A}) (Version:  - )
ASUS PC Diagnostics (HKLM\...\{D709005F-D8DC-42A8-8435-5AE880ECAF82}) (Version: 1.2.0 - ASUSTeK Computer Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.9.13 - Atheros Communications Inc.)
Atheros Ethernet Utility (HKLM\...\{FB686487-C637-4EEF-BCB1-C92463F2CC05}) (Version: 1.1.0.10 - Atheros Communications Inc.)
Avira AntiVir Personal - Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 10.2.0.2100 - Avira GmbH)
Bing Bar (HKLM\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 6.3.2291.0 - Microsoft Corporation)
Bing Bar Platform (Version: 6.3.2291.0 - Microsoft Corporation) Hidden
Canon CanoScan Toolbox 4.1 (HKLM\...\{BCE46757-7674-4416-BEDB-68205A60409E}) (Version:  - )
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)
Druckerdeinstallation für EPSON XP-412 413 415 Series (HKLM\...\EPSON XP-412 413 415 Series) (Version:  - SEIKO EPSON Corporation)
Edimax nLite Wireless USB Adapter (HKLM\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.6.0 - Edimax)
ElsterFormular-Upgrade (HKLM\...\ElsterFormular für Unternehmer 12.3.2.6814u) (Version: 14.4.12044 - Landesfinanzdirektion Thüringen)
EnergieSpar-Monitor PC (HKLM\...\EnergieSpar-Monitor PC) (Version:  - )
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON-Handbücher (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.1.0 - SEIKO EPSON CORPORATION)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
EVGA Display Driver (HKLM\...\{BEF3EFE7-5159-436D-9BF0-CCC633179EB4}) (Version: 1.00.000 - EVGA)
Falk Reiseplaner City (HKLM\...\{1AE2A385-D036-40C7-BFC1-2CB0F150B913}) (Version:  - )
Firebird 2.1.3.18185 (Win32) (HKLM\...\FBDBServer_2_1_is1) (Version: 2.1.3.18185 - Firebird Project)
FTDI FTD2XX USB Drivers (HKLM\...\FTD2XX) (Version:  - )
High Definition Audio Driver Package - KB888111 (HKLM\...\KB888111WXPSP2) (Version: 20040219.000000 - Microsoft Corporation)
homeputer Studio (HKLM\...\homeputer Studio) (Version:  - )
Hotfix für Windows Media Player 11 (KB939683) (HKLM\...\KB939683) (Version:  - Microsoft Corporation)
Hotfix für Windows XP (KB914440) (HKLM\...\KB914440) (Version: 12 - Microsoft Corporation)
Hotfix für Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB970653-v3) (HKLM\...\KB970653-v3) (Version: 3 - Microsoft Corporation)
Hotfix für Windows XP (KB981793) (HKLM\...\KB981793) (Version: 1 - Microsoft Corporation)
HP Officejet Pro 8100 Hilfe (HKLM\...\{65038824-6DC7-4A44-828A-D7A7F04CD61B}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo and Imaging 2.0 - Deskjet Series (HKLM\...\{E0828692-FD9D-459F-9312-C645C3CA6650}) (Version: 2.00.0000 - {&Tahoma8}Hewlett-Packard)
HP Product Detection (HKLM\...\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}) (Version: 4.00.0004 - Ihr Firmenname)
HP Speicher-Disc (HKLM\...\{B376402D-58EA-45EA-BD50-DD924EB67A70}) (Version: 1.0.4.805 - Hewlett-Packard Company)
HP Update (HKLM\...\{85DF2EED-08BC-46FB-90DA-28B0D0A8E8A8}) (Version: 5.003.000.004 - Hewlett-Packard)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.10.5398 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{51A66ED3-200E-4147-8D1E-E8D30936FD26}) (Version: 1.23.605.1 - Intel Corporation)
Java 7 Update 10 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217010FF}) (Version: 7.0.100 - Oracle)
Java Auto Updater (Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
JMB36X Raid Configurer (HKLM\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMICRON Technology Corp.)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU (HKLM\...\{C314CE45-3392-3B73-B4E1-139CD41CA933}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU (HKLM\...\{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation)
Microsoft Default Manager (Version: 2.2.114.0 - Microsoft Corporation) Hidden
Microsoft Internationalized Domain Names Mitigation APIs (Version:  - Microsoft Corporation) Hidden
Microsoft National Language Support Downlevel APIs (Version:  - Microsoft Corporation) Hidden
Microsoft Office Professional Edition 2003 (HKLM\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)
Microsoft Search Enhancement Pack (Version: 3.0.131.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version:  - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MSI to redistribute MS VS2005 CRT libraries (HKLM\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 6 Service Pack 2 (KB973686) (HKLM\...\{17A5668A-EFA1-4B99-A19E-3533171ACB04}) (Version: 6.20.2003.0 - Microsoft Corporation)
Nero Suite (HKLM\...\NeroMultiInstaller!UninstallKey) (Version:  - )
Network Stumbler 0.4.0 (remove only) (HKLM\...\Network Stumbler) (Version:  - )
NVIDIA Grafiktreiber 280.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 280.26 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1000.25.170 - NVIDIA Corporation) Hidden
NVIDIA nView 135.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 135.94 - NVIDIA Corporation)
NVIDIA nView Desktop Manager (Version: 6.14.10.13594 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 280.26 (Version: 280.26 - NVIDIA Corporation) Hidden
NVIDIA Update 1.4.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.4.28 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.4.28 - NVIDIA Corporation) Hidden
OmniPage SE (HKLM\...\{6249C22D-E6A8-407B-BA8B-40298848ED94}) (Version: 11.00.0001 - ScanSoft, Inc.)
Platform (Version: 1.39 - VIA Technologies, Inc.) Hidden
PortWise Access Client (HKLM\...\PortWise Access Client) (Version:  - PortWise)
REALTEK GbE & FE Ethernet PCI-E NIC Driver (HKLM\...\{C9BED750-1211-4480-B1A5-718A3BE15525}) (Version: 1.00.0000 - Realtek)
Sicherheitsupdate für Windows Internet Explorer 7 (KB938127) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB939653) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB974455) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 7 (KB982381) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Internet Explorer 8 (KB971961) (HKLM\...\KB971961-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB981332) (HKLM\...\KB981332-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB911564) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB952069) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB954155) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB968816) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB973540) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB978695) (HKLM\...\KB978695_WM9) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player 11 (KB954154) (HKLM\...\KB954154_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player 6.4 (KB925398) (HKLM\...\KB925398_WMP64) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player 9 (KB936782) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB890046) (HKLM\...\KB890046) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB893756) (HKLM\...\KB893756) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB896358) (HKLM\...\KB896358) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB896423) (HKLM\...\KB896423) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB896428) (HKLM\...\KB896428) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB899587) (HKLM\...\KB899587) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB899591) (HKLM\...\KB899591) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB900725) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB901017) (HKLM\...\KB901017) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB901214) (HKLM\...\KB901214) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB902400) (HKLM\...\KB902400) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB904706) (HKLM\...\KB904706) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB905414) (HKLM\...\KB905414) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB905749) (HKLM\...\KB905749) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB908519) (HKLM\...\KB908519) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB911562) (HKLM\...\KB911562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB911927) (HKLM\...\KB911927) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB913580) (HKLM\...\KB913580) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB914388) (HKLM\...\KB914388) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB914389) (HKLM\...\KB914389) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB917344) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB917953) (HKLM\...\KB917953) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB918118) (HKLM\...\KB918118) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB918439) (HKLM\...\KB918439) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB919007) (HKLM\...\KB919007) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB920213) (HKLM\...\KB920213) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB920670) (HKLM\...\KB920670) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB920683) (HKLM\...\KB920683) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB920685) (HKLM\...\KB920685) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB921503) (HKLM\...\KB921503) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB922819) (HKLM\...\KB922819) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923191) (HKLM\...\KB923191) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923414) (HKLM\...\KB923414) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923689) (HKLM\...\KB923689) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923789) (HKLM\...\KB923789) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923980) (HKLM\...\KB923980) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB924270) (HKLM\...\KB924270) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB924496) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB924667) (HKLM\...\KB924667) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB925902) (HKLM\...\KB925902) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB926255) (HKLM\...\KB926255) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB926436) (HKLM\...\KB926436) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB927779) (HKLM\...\KB927779) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB927802) (HKLM\...\KB927802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB928255) (HKLM\...\KB928255) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB928843) (HKLM\...\KB928843) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB929123) (HKLM\...\KB929123) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB930178) (HKLM\...\KB930178) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB931261) (HKLM\...\KB931261) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB931784) (HKLM\...\KB931784) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB932168) (HKLM\...\KB932168) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB933729) (HKLM\...\KB933729) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB935839) (HKLM\...\KB935839) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB935840) (HKLM\...\KB935840) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB936021) (HKLM\...\KB936021) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB938127) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB938829) (HKLM\...\KB938829) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB939653) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB941202) (HKLM\...\KB941202) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB941569) (HKLM\...\KB941569) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB943460) (HKLM\...\KB943460) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB944653) (HKLM\...\KB944653) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951066) (HKLM\...\KB951066) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951748) (HKLM\...\KB951748) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB955069) (HKLM\...\KB955069) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956803) (HKLM\...\KB956803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB957097) (HKLM\...\KB957097) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958470) (HKLM\...\KB958470) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958644) (HKLM\...\KB958644) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958687) (HKLM\...\KB958687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958869) (HKLM\...\KB958869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960225) (HKLM\...\KB960225) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB961371-v2) (HKLM\...\KB961371-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB961501) (HKLM\...\KB961501) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB968537) (HKLM\...\KB968537) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB970238) (HKLM\...\KB970238) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971032) (HKLM\...\KB971032) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971468) (HKLM\...\KB971468) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971486) (HKLM\...\KB971486) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971557) (HKLM\...\KB971557) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971633) (HKLM\...\KB971633) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971961) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973354) (HKLM\...\KB973354) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973525) (HKLM\...\KB973525) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975561) (HKLM\...\KB975561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975562) (HKLM\...\KB975562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975713) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978037) (HKLM\...\KB978037) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978601) (HKLM\...\KB978601) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979559) (HKLM\...\KB979559) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979683) (HKLM\...\KB979683) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980195) (HKLM\...\KB980195) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980218) (HKLM\...\KB980218) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980232) (HKLM\...\KB980232) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB981349) (HKLM\...\KB981349) (Version: 1 - Microsoft Corporation)
Software Updater (HKLM\...\{7ACB9D1D-5B26-4CE4-964A-1EB22461E6F6}) (Version: 4.1.0 - SEIKO EPSON CORPORATION)
StarMoney (Version: 1.0 - StarFinanz) Hidden
StarMoney (Version: 2.0 - StarFinanz) Hidden
StarMoney (Version: 3.0.1.31 - StarFinanz) Hidden
StarMoney (Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney (Version: 5.0 - StarFinanz) Hidden
StarMoney 5.0 S-Edition (HKLM\...\{6FDCF790-49AF-4E3B-8EB2-C07E2DBA55EA}) (Version: 5.0 - StarFinanz GmbH)
StarMoney 6.0 S-Edition (HKLM\...\{B08E144A-9ABE-40F4-B756-5FF3F290C4A8}) (Version: 6.0 - StarFinanz GmbH)
StarMoney 7.0 S-Edition (HKLM\...\{56EF48B7-3C54-44FD-9860-5FE10E67F8BE}) (Version: 7.0 - Star Finanz GmbH)
StarMoney 8.0 S-Edition (HKLM\...\{3E40FAB4-88B4-49E9-BF19-54BC1CEC7306}) (Version: 8.0 - Star Finanz GmbH)
StarMoney 9.0 S-Edition (HKLM\...\{6153B403-FD82-4231-BCD4-A360DC06EBA6}) (Version: 9.0 - Star Finanz GmbH)
Studie zur Verbesserung von HP Officejet Pro 8100 Produkten (HKLM\...\{5CC6B49A-4ABA-45BC-A8A1-68DA0EAE40CD}) (Version: 25.0.617.0 - Hewlett-Packard Co.)
System Requirements Lab (HKLM\...\SystemRequirementsLab) (Version:  - )
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update für Windows Internet Explorer 8 (KB976662) (HKLM\...\KB976662-IE8) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB894391) (HKLM\...\KB894391) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB898461) (HKLM\...\KB898461) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB900485) (HKLM\...\KB900485) (Version: 2 - Microsoft Corporation)
Update für Windows XP (KB904942) (HKLM\...\KB904942) (Version: 2 - Microsoft Corporation)
Update für Windows XP (KB908531) (HKLM\...\KB908531) (Version: 2 - Microsoft Corporation)
Update für Windows XP (KB910437) (HKLM\...\KB910437) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB911280) (HKLM\...\KB911280) (Version: 2 - Microsoft Corporation)
Update für Windows XP (KB916595) (HKLM\...\KB916595) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB920872) (HKLM\...\KB920872) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB922582) (HKLM\...\KB922582) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB925720) (HKLM\...\KB925720) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB927891) (HKLM\...\KB927891) (Version: 3 - Microsoft Corporation)
Update für Windows XP (KB930916) (HKLM\...\KB930916) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB933360) (HKLM\...\KB933360) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB936357) (HKLM\...\KB936357) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB938828) (HKLM\...\KB938828) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
VIA Plattform-Geräte-Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
ViewSonic Monitor Drivers (HKLM\...\{B4FEA924-630D-11D4-B78E-005004566E4D}) (Version:  - )
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows Genuine Advantage Notifications (KB905474) (HKLM\...\WgaNotify) (Version: 1.7.0018.7 - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0036.0 - Microsoft Corporation)
Windows Imaging Component (HKLM\...\WIC) (Version: 3.0.0.0 - Microsoft Corporation)
Windows Installer 3.1 (KB893803) (HKLM\...\KB893803v2) (Version: 3.1 - Microsoft Corporation)
Windows Internet Explorer 7 (Version: 20070813.185237 - Microsoft Corporation) Hidden
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Format 11 runtime (Version:  - Microsoft Corporation) Hidden
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
Windows Media Player 11 (Version:  - Microsoft Corporation) Hidden
Windows XP-Hotfix - KB873339 (HKLM\...\KB873339) (Version: 20041117.092459 - Microsoft Corporation)
Windows XP-Hotfix - KB885835 (HKLM\...\KB885835) (Version: 20041027.181713 - Microsoft Corporation)
Windows XP-Hotfix - KB885836 (HKLM\...\KB885836) (Version: 20041028.173203 - Microsoft Corporation)
Windows XP-Hotfix - KB886185 (HKLM\...\KB886185) (Version: 20041021.090540 - Microsoft Corporation)
Windows XP-Hotfix - KB887472 (HKLM\...\KB887472) (Version: 20041014.162858 - Microsoft Corporation)
Windows XP-Hotfix - KB888302 (HKLM\...\KB888302) (Version: 20041207.111426 - Microsoft Corporation)
Windows XP-Hotfix - KB890859 (HKLM\...\KB890859) (Version: 1 - Microsoft Corporation)
Windows XP-Hotfix - KB891781 (HKLM\...\KB891781) (Version: 20050110.165439 - Microsoft Corporation)
XML Paper Specification Shared Components Language Pack 1.0 (Version:  - Microsoft Corporation) Hidden

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

2004-08-04 14:00 - 2004-08-04 14:00 - 00000820 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: C:\WINDOWS\Tasks\At1.job => C:\Programme\HP\HP Officejet Pro 8100\Bin\HPCustPartic.exe
Task: C:\WINDOWS\Tasks\At2.job => C:\Programme\HP\HP Officejet Pro 8100\Bin\HPCustPartic.exe
Task: C:\WINDOWS\Tasks\At3.job => C:\Programme\HP\HP Officejet Pro 8100\Bin\HPCustPartic.exe
Task: C:\WINDOWS\Tasks\At4.job => C:\Programme\HP\HP Officejet Pro 8100\Bin\HPCustPartic.exe
Task: C:\WINDOWS\Tasks\EPSON XP-412 413 415 Series Invitation {BA897EE2-51FE-4793-8F5B-3826AEC31F11}.job => C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-412 413 415 Series Update {BA897EE2-51FE-4793-8F5B-3826AEC31F11}.job => C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE

==================== Loaded Modules (whitelisted) =============

2009-10-24 11:47 - 2011-07-21 15:12 - 00355688 _____ () C:\Programme\Avira\AntiVir Desktop\sqlite3.dll
2011-11-10 22:44 - 2009-10-06 14:36 - 00205312 _____ () C:\Programme\StarMoney 7.0 S-Edition\ouservice\PATCHW32.dll
2013-02-14 21:07 - 2011-01-13 11:44 - 00232800 _____ () C:\Programme\StarMoney 8.0 S-Edition\ouservice\PATCHW32.dll
2014-02-03 19:58 - 2011-01-13 10:44 - 00232800 _____ () C:\Programme\StarMoney 9.0 S-Edition\ouservice\PATCHW32.dll
2012-10-27 14:06 - 2012-02-07 17:39 - 01198872 _____ () C:\Programme\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-03-31 16:06 - 2009-12-11 03:16 - 00918816 _____ () C:\Programme\Edimax\Common\RaWLAPI.dll
2014-03-31 16:06 - 2009-12-11 03:16 - 00147456 _____ () C:\WINDOWS\system32\DiagFunc.dll
2007-09-28 16:04 - 2010-02-26 12:58 - 03646464 _____ () C:\Programme\contronics\homeputer Studio\homeputerStudio.exe

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm.sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\startupreg: NvCplDaemon => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
MSCONFIG\startupreg: NvMediaCenter => RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
MSCONFIG\startupreg: pijahim => rundll32 "C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Anwendungsdaten\pijahim.dll",pijahim

==================== Faulty Device Manager Devices =============

Could not list Devices. Check "winmgmt" service or repair WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/17/2014 05:52:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung StarMoneyOnlineUpdate.exe, Version 4.0.4.13, fehlgeschlagenes Modul ntdll.dll, Version 5.1.2600.3520, Fehleradresse 0x00018af2.
Das medienspezifische Ereignis für [StarMoneyOnlineUpdate.exe!ws!] wird verarbeitet.

Error: (06/05/2014 09:37:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung StarMoneyOnlineUpdate.exe, Version 4.0.4.13, fehlgeschlagenes Modul ntdll.dll, Version 5.1.2600.3520, Fehleradresse 0x00018af2.
Das medienspezifische Ereignis für [StarMoneyOnlineUpdate.exe!ws!] wird verarbeitet.

Error: (06/04/2014 08:37:49 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error: (05/20/2014 06:12:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error: (05/17/2014 02:08:35 AM) (Source: VSS) (EventID: 5013) (User: )
Description: Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x800708ca" (konvertiert in 0x800423f4) fehlgeschlagen.

Error: (03/07/2014 07:33:37 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Stillstehende Anwendung WifiStation.exe, Version 3.1.0.0, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error: (02/16/2014 08:57:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung wifistation.exe, Version 3.1.0.0, fehlgeschlagenes Modul user32.dll, Version 5.1.2600.3099, Fehleradresse 0x00013a7c.
Das medienspezifische Ereignis für [wifistation.exe!ws!] wird verarbeitet.

Error: (02/15/2014 08:11:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Stillstehende Anwendung avscan.exe, Version 10.3.0.7, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error: (01/22/2014 08:19:53 AM) (Source: crypt32) (EventID: 8) (User: )
Description: Der automatische Aktualisierungsabruf der Drittanbieterstammlisten-Sequenznummer von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> ist fehlgeschlagen mit dem Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung zurückgegeben.
.

Error: (01/22/2014 08:19:52 AM) (Source: crypt32) (EventID: 8) (User: )
Description: Der automatische Aktualisierungsabruf der Drittanbieterstammlisten-Sequenznummer von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> ist fehlgeschlagen mit dem Fehler: Diese Netzwerkverbindung ist nicht vorhanden.
.


System errors:
=============
Error: (06/18/2014 01:24:43 PM) (Source: DCOM) (EventID: 10010) (User: VOYAGER)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 01:24:06 PM) (Source: DCOM) (EventID: 10010) (User: VOYAGER)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 01:23:34 PM) (Source: DCOM) (EventID: 10010) (User: VOYAGER)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 01:23:04 PM) (Source: DCOM) (EventID: 10010) (User: VOYAGER)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 01:22:34 PM) (Source: DCOM) (EventID: 10010) (User: VOYAGER)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 01:19:42 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 11:31:12 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 09:42:42 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 07:54:12 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (06/18/2014 06:05:42 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{8BC3F05E-D86B-11D0-A075-00C04FB68820}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


Microsoft Office Sessions:
=========================
Error: (06/17/2014 05:52:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: StarMoneyOnlineUpdate.exe4.0.4.13ntdll.dll5.1.2600.352000018af2

Error: (06/05/2014 09:37:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: StarMoneyOnlineUpdate.exe4.0.4.13ntdll.dll5.1.2600.352000018af2

Error: (06/04/2014 08:37:49 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000

Error: (05/20/2014 06:12:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000

Error: (05/17/2014 02:08:35 AM) (Source: VSS) (EventID: 5013) (User: )
Description: 0x800708ca0x800423f4RemovableStorageManagerOpenNtmsSessionW

Error: (03/07/2014 07:33:37 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: WifiStation.exe3.1.0.0hungapp0.0.0.000000000

Error: (02/16/2014 08:57:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: wifistation.exe3.1.0.0user32.dll5.1.2600.309900013a7c

Error: (02/15/2014 08:11:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: avscan.exe10.3.0.7hungapp0.0.0.000000000

Error: (01/22/2014 08:19:53 AM) (Source: crypt32) (EventID: 8) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtDieser Vorgang wurde wegen Zeitüberschreitung zurückgegeben.

Error: (01/22/2014 08:19:52 AM) (Source: crypt32) (EventID: 8) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtDiese Netzwerkverbindung ist nicht vorhanden.


==================== Memory info =========================== 

Percentage of memory in use: 32%
Total physical RAM: 1919.46 MB
Available physical RAM: 1291.8 MB
Total Pagefile: 3303.22 MB
Available Pagefile: 2793.71 MB
Total Virtual: 2047.88 MB
Available Virtual: 1939.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:149.04 GB) (Free:8.15 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive e: (Sicherung) (Fixed) (Total:149.05 GB) (Free:26.38 GB) NTFS
Drive f: () (Removable) (Total:7.6 GB) (Free:7.58 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 149 GB) (Disk ID: 4660465F)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 149 GB) (Disk ID: 45EE45ED)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 8 GB) (Disk ID: 00E80E01)
Partition 1: (Active) - (Size=8 GB) - (Type=0B)

==================== End Of Log ============================